last executing test programs: 16m26.013427834s ago: executing program 1 (id=2): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000600)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000002c0)=0x84) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$ENABLE_STATS(0x20, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x28, &(0x7f0000000000)='/proc\x00s%nN\xd4\xa2\x88\x00\xd1l,K*\xe4Y\xe1e\xac\x81Z*Q[\x00\x00\x05\x00'/42}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = fsopen(&(0x7f0000002f80)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x8, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) getdents64(r3, &(0x7f0000000c80)=""/4079, 0xfef) socket$inet6(0xa, 0x3, 0x8000000003c) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r5, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}], 0x1) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x54) connect$inet(r6, &(0x7f0000ccb000)={0x2, 0x4e20, @loopback}, 0x10) r7 = bpf$PROG_LOAD(0x5, 0x0, 0xfffffdb9) r8 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000180)={r6, r7}) sendmmsg$inet(r8, &(0x7f0000007fc0)=[{{0x0, 0x0, 0x0}, 0x700}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)}, {&(0x7f0000000100)="39f1918929f7973c9039b5bdd29c8c70f50715636054", 0x16}, {&(0x7f0000000280)="19", 0x1}, {&(0x7f0000000340)="3b6989c1e40c77cca003ba46ce96e5c1e30ee6aed8f11a60ae38a6305aead89edca61171aec6486d4ff9d2012f316a77fbb24daa61ddfe39dd399b1a8e4c673f5c7580dbcac0c68dcb87430c42275a1946149b10fcd5edf7fd8d5e7d62f5bee3d847394112dd852de410ea4a7e3b96b25da92a62147cbb43d4f19f8f53c7fee7c5064c4ced9e3ab533cfffa3b58e4f1f18b22b5f63e62c566217846276cbfcdf512af2ba6d1fed89c1fc1335fd99f91efa7a6b10e3310c7f68fbb0173576c610ee51c04a232c27f58459977074a7e02d450f9c3513b41a285bfb8c0e10a194e291a6b180a2730000000000", 0xeb}], 0x4}}], 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 16m23.741328754s ago: executing program 1 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206010800000000000000000004fffc0c00078005001500040000000500010006000000050005000a00000005000400000000000c000300686173683a6970000900020073797a3200000000"], 0x50}, 0x1, 0x0, 0x0, 0x21}, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r4 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xa9\x1fg\xf1\x85z{\x1d<\xe2\x1c7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xedn\x8c<5\xcf\x92;\x85)\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\x05\x831\xd3\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xf6\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xc6(\x19\xf8\xb4?Fv\xac\xc7m\xe1\xf68W\x19\x0f\x87\x84\xafK\x91v\xb5\xe7Cf\xe0L\b9\xe2\x15d~R4\xdf\xbb\xfeiH', 0x3) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000100)={r4, 0x0, 0x0, 0x1000}) lseek(r5, 0x100, 0x2) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000000c0)='./file0/file0\x00', 0xf) 16m22.774994013s ago: executing program 1 (id=9): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000002200), 0x80002, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x400}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x0) 16m21.097365318s ago: executing program 1 (id=14): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r1, &(0x7f0000006cc0)=[{{&(0x7f0000000780)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000006d80)=[@hoplimit_2292={{0x14}}], 0x18}}], 0x400000000000220, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x2, 'sed\x00'}, 0x2c) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000140)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) inotify_init() ioctl(r2, 0x8b29, &(0x7f0000000040)) r4 = accept4(r0, 0x0, 0x0, 0x0) bind$can_j1939(r4, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0xa70, 0x1) ioctl$USBDEVFS_RESETEP(r5, 0x80045503, &(0x7f00000000c0)={0x2}) 16m20.768660933s ago: executing program 32 (id=14): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r1, &(0x7f0000006cc0)=[{{&(0x7f0000000780)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000006d80)=[@hoplimit_2292={{0x14}}], 0x18}}], 0x400000000000220, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x2, 'sed\x00'}, 0x2c) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000140)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) inotify_init() ioctl(r2, 0x8b29, &(0x7f0000000040)) r4 = accept4(r0, 0x0, 0x0, 0x0) bind$can_j1939(r4, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0xa70, 0x1) ioctl$USBDEVFS_RESETEP(r5, 0x80045503, &(0x7f00000000c0)={0x2}) 2m34.423340326s ago: executing program 4 (id=2209): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) fcntl$setpipe(r3, 0x11, 0x7efffeff00000000) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCFLSH(r5, 0x540b, 0x2) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) clock_gettime(0x1, &(0x7f00000003c0)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000f000e06010800000000000000000a0000090500010900020073797a3100000000"], 0x28}}, 0x44058) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000080)='sched_switch\x00', r6, 0x0, 0x4}, 0x18) prlimit64(0x0, 0x7, &(0x7f0000000140)={0xa, 0x8b}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) syz_init_net_socket$netrom(0x6, 0x5, 0x0) shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ffb000/0x2000)=nil) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'gretap0\x00'}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) 2m33.553300808s ago: executing program 4 (id=2211): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) accept(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) socket$igmp(0x2, 0x3, 0x2) fcntl$lock(0xffffffffffffffff, 0xd, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r4, 0x5) setsockopt(r5, 0x800000000010d, 0x8000000011, &(0x7f00001c9fff), 0xc5) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmmsg(r5, &(0x7f0000002980), 0x400000000000239, 0x0) 2m32.130274226s ago: executing program 4 (id=2215): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000040000000000000000000000079121000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0xb0}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$rds(0x15, 0x5, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001400010000000000fbdbdf25e00000010000f9ffffffffffffff0000000000000000000000000000000000010000000000070004000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\f'], 0x5c}}, 0x4004040) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socket$inet6(0xa, 0x80002, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000740)=[{{&(0x7f0000000440)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f00000004c0)="234a0e5f5df3f1cee08ee22e9cb6728c2d3831a9fcc3ba94dfc78bb6b1e06bd4d88ce237f4f7928775f5ca7d7e2cb67429c5e1d462c079429374baad44120a4b1bc910011270f6534af59d37aa62df1ad43299d6410b03d9dc5b8818eff4311e2a309bbce43333d918062cb1f5062b8387b6ce8da830", 0x76}, {&(0x7f0000000580)="c936c26c61f86a7f6aec8451adf23f925af5f38cee71811f386935b7b3c8cabc800a20b83c83e4e2c5adcfd641d7a464c6505866a59a24c5bd4fd5cf3702bf34d08f28a63902598f189013936774e6123eaeaf5a54d3", 0x56}], 0x2, &(0x7f00000006c0)=[@rights={{0x30, 0x1, 0x1, [r6, r0, r9, 0xffffffffffffffff, r4, r2, r8, r0]}}, @cred={{0x1c, 0x1, 0x2, {r7}}}], 0x50, 0x40}}], 0x1, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 2m30.623054789s ago: executing program 4 (id=2218): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38084, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2501000000000000000009000000040003800400018050000380060007004e22000008000300040000001400020077673000000000000000000000000000080001"], 0x6c}}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0) 2m29.465514941s ago: executing program 4 (id=2220): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = timerfd_create(0x0, 0x0) r2 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r3, 0x5760, 0x11) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x0) accept(r0, 0x0, 0x0) 2m29.320006854s ago: executing program 4 (id=2221): r0 = syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x41) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={0x0, 0x80000000, 0x0, 0x0, 0x2, [0x0], [0x2, 0x0, 0x4020, 0x4], [0x8, 0x1ff, 0x6, 0xfffffffd], [0x0, 0x1, 0x200000000000a40b]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r1}) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x65, 0xffff, 0x3c41, 0x6, '9P2000'}, 0x13) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fstat(0xffffffffffffffff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x53, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24}, 0x24}}, 0x0) recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f00000003c0)=""/9, 0x9}], 0x1}, 0x2000}], 0x2, 0x0, 0x0) 2m28.847434174s ago: executing program 33 (id=2221): r0 = syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x41) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={0x0, 0x80000000, 0x0, 0x0, 0x2, [0x0], [0x2, 0x0, 0x4020, 0x4], [0x8, 0x1ff, 0x6, 0xfffffffd], [0x0, 0x1, 0x200000000000a40b]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r1}) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x65, 0xffff, 0x3c41, 0x6, '9P2000'}, 0x13) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fstat(0xffffffffffffffff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x53, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24}, 0x24}}, 0x0) recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f00000003c0)=""/9, 0x9}], 0x1}, 0x2000}], 0x2, 0x0, 0x0) 1m37.873330305s ago: executing program 6 (id=2357): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="1a010300000000f8", @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r0, &(0x7f0000000040)={0x14, &(0x7f0000000180)={0x0, 0x31, 0xba, {0xba, 0x22, "fa3d5f9298202ff7cea11a4d4e563afe07ab838ee30c0621aaa25a198f7d39477d9c53399bd1609e893ced277a01f29e126afec8ca16869feb462999a850a2d83bf09cce465296144c4a778f603fa5144217a512ee4b4cf58b737960215900004e49c5883f3a83df30c02b66de8b9c1785e59cca56ef5b5c0510e983acf143415b0e178848a70201a81ce63c4076eabada4fa4c2f529d5cda52a2010a105bfbf1002d7d627d5d31af43592cb0be29a2272b1bb4653905ef5"}}, &(0x7f0000000240)={0x0, 0x3, 0x59, @string={0x59, 0x3, "696d191ab1f55077f467a67d2ba24dc636baeb40e4e03a77b4d07e926a960ecd3ed5f59f42e3e4ceb02f867ab1416c6ade7a68671cc8e10d32584c4215b995965bb565a4ce9d80e4994b6f84a1c160a716627274a230de"}}}, &(0x7f0000000400)={0x34, &(0x7f0000000100)={0x40, 0x15, 0x19, "8783f6092fa73cbab54a9625f219dd300e97a82a73aa2fec7b"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000340)={0x20, 0x0, 0x24, {0x22, "19ce9c27b8b342f511c8fbdc99c481cb59b7b07c386c3ce3e8783c969c6cc00fcc7a"}}, &(0x7f0000000380)={0x20, 0x1, 0x1, 0x4}, &(0x7f00000003c0)={0x20, 0x0, 0x1}}) 1m32.865487577s ago: executing program 6 (id=2366): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r1}, 0x10) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40044) 1m32.394944987s ago: executing program 6 (id=2368): r0 = socket$inet6(0xa, 0x1, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000080000000000000190000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = memfd_secret(0x0) r6 = semget(0x0, 0x1, 0x281) setrlimit(0xe, &(0x7f0000000300)={0xff, 0x1}) semop(r6, &(0x7f0000000680)=[{0x2, 0xeffa, 0x1000}], 0x1) semctl$IPC_RMID(r6, 0x0, 0x0) fchmod(r5, 0x134) r7 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x800) getsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, &(0x7f0000000140), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x101a02, 0x0) write$yama_ptrace_scope(r8, &(0x7f0000000100)='2\x00', 0x2) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r9, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000000500e50000070000001ffeff0001000003f1dc7f7c6e870200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r9, &(0x7f0000000180), 0x400008a, 0x700) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m31.703165918s ago: executing program 6 (id=2373): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @raw_data="144d5842915e31890abc47bc18d0f1661c40ad6fbfaa00c37da638c5ddb1ea034783d06fd57bb69fd2a1573eabfa143534f44708010674128c7ed982934065f02c14895298a2f020e0d65c51e4152c07081f1abcca56b68a5a046cc2ef500021b480609c4234e89047b18d01ba609cda16149cc61417483b2753a7cb665c298973d63e625bdb5631264ca240865165febeec1a12ae3969dd06b8668ba6573046e9b5968f30dffbc7687c72927c84bd5ff90e25997cfea7e191b6b9b054cd778fb611ceb00919b952"}) r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, &(0x7f0000000080)={0x27, 0x0, 0xffffffffffffffff, 0x6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0x0, 0x0) read$FUSE(r2, &(0x7f0000000440)={0x2020}, 0x2020) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_tos={0x0}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x1, @empty, 0xd58a}, {0xa, 0x4e20, 0x21be, @empty, 0xffffffff}, 0xffffffffffffffff, 0x1}}, 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r5, r4, 0x1, 0x0, @val=@netfilter={0x2, 0x0, 0x8000}}, 0x40) r6 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r6, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r6, &(0x7f0000005240), 0x4000095, 0x0) socket(0x200000000000011, 0x2, 0x1) 1m29.345054153s ago: executing program 6 (id=2379): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}]}], {0x14}}, 0x90}}, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}}, 0x40020) r5 = dup(r0) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000380), 0xc01) r7 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r6, 0x0, 0x0}) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) mount$nfs4(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f00000000c0)={0x0, 0xc}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = syz_io_uring_setup(0x3678, &(0x7f0000000440)={0x0, 0x1ffffd, 0x10100, 0x40000000, 0x298, 0x0, r7}, &(0x7f0000000040), &(0x7f0000000100)) io_uring_enter(r10, 0x1000a3d, 0x0, 0x0, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="00000000ec44cbf75f", @ANYRES16=r12, @ANYBLOB="310400000000000000001600000018000180140002006e657464657673696d3000000000000005000200000000000500040005000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) 1m27.495233605s ago: executing program 6 (id=2385): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x2, {0x60, 0x0, 0x0, r2, {}, {0xfff2, 0xa}, {0xffe0, 0x8}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000055}, 0x4000) socket$netlink(0x10, 0x3, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) read$msr(r3, &(0x7f0000001380)=""/102399, 0x18fff) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @desc3}, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f045714f8a61d1f32c9d4f4b436102008929b48fff3d63520d260804d000", 0x2}, 0x48, 0x0) keyctl$setperm(0x5, r4, 0x1201008) keyctl$revoke(0x6, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x5c, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x26020280) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r6 = socket$pptp(0x18, 0x1, 0x2) r7 = socket$kcm(0x10, 0x2, 0x0) bind$alg(r5, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) sendmsg$kcm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x2c00, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) bind$pptp(r6, &(0x7f0000000080)={0x18, 0x2, {0x0, @dev}}, 0x1e) bind$pptp(r6, &(0x7f0000000340)={0x18, 0x2, {0x1, @loopback}}, 0x1e) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) socket$packet(0x11, 0x3, 0x300) 1m10.295101797s ago: executing program 34 (id=2385): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x2, {0x60, 0x0, 0x0, r2, {}, {0xfff2, 0xa}, {0xffe0, 0x8}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000055}, 0x4000) socket$netlink(0x10, 0x3, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) read$msr(r3, &(0x7f0000001380)=""/102399, 0x18fff) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @desc3}, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f045714f8a61d1f32c9d4f4b436102008929b48fff3d63520d260804d000", 0x2}, 0x48, 0x0) keyctl$setperm(0x5, r4, 0x1201008) keyctl$revoke(0x6, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x5c, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x26020280) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r6 = socket$pptp(0x18, 0x1, 0x2) r7 = socket$kcm(0x10, 0x2, 0x0) bind$alg(r5, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) sendmsg$kcm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x2c00, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) bind$pptp(r6, &(0x7f0000000080)={0x18, 0x2, {0x0, @dev}}, 0x1e) bind$pptp(r6, &(0x7f0000000340)={0x18, 0x2, {0x1, @loopback}}, 0x1e) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) socket$packet(0x11, 0x3, 0x300) 29.067287946s ago: executing program 3 (id=2539): syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x3, 0x48, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109023600"], 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x4}}}, 0xb8}}, 0x0) r1 = syz_open_dev$evdev(0x0, 0x22fc, 0x1a9080) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000100)=""/232) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000001280)={0x1, @pix_mp={0x10000, 0x800, 0x20303159, 0x1, 0x5, [{0xff, 0x3}, {0x944, 0x8bbc043}, {0x8, 0xc}, {0xe, 0x7fffffff}, {0x1, 0xfffffffd}, {0x39, 0x4}, {0x9, 0x2}, {0x400, 0x501}], 0xc9, 0x3, 0x8, 0x1, 0x1}}) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000010c0)="f39561fc17b7f981"}) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) syz_usb_disconnect(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)=0x0) sched_getparam(r5, &(0x7f0000000280)) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) syz_usb_connect(0x5, 0x4f, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001500010000000001000000250500"], 0x14}}, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x4100, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r7, 0x24, &(0x7f0000000000)={0x1, 0x1, 0x1f9, 0x0, 0xffffffffffffffff}) ioctl$TIOCGRS485(r7, 0x542e, &(0x7f0000000240)) 28.557338619s ago: executing program 0 (id=2540): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x240, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0xb0}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0xfffffffffffffffe, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000300)={0x0, @win={{0x68a4, 0x1d5, 0xb6e3, 0x4}, 0x8, 0x65, &(0x7f0000000500)={{0x4, 0x817, 0x7fff, 0x7}}, 0x3, &(0x7f0000000540)="055834a7f7165f0d0a4a522683f61d10b671425281337f7fca33b69ada80d69a1ba6af3ec0809552e8e9cf937c2205e154efc1d54df04ef787dad9118134aa6afc788ba32ccb04ea96e4ef25e58906772c24ac33ed96af4d6fb2293c3c9b08902cda734ca010ae3ded7f3a24999b0bc08c36ae78f68d71743b9d0ac4ccef712cb2c91d58808818ce6afd83cb6aea62561a0f336806f1f6ccf17b8e3bbee1a3e7bea59e", 0x72}}) sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@cswp={0x58, 0x114, 0x7, {{0xca59, 0x1}, &(0x7f00000001c0)=0x1, &(0x7f0000000600)=0x70, 0x1, 0x4, 0x3, 0x2587, 0x20, 0x469c}}], 0x58}, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000340)={0x28, 0x4, r1, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x10}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff2f00000000000001"]) 28.34206389s ago: executing program 5 (id=2541): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0xb8}}, 0x4004) socket$inet(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$nl_generic(0x11, 0x3, 0x10) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r7 = fcntl$dupfd(r6, 0x0, r6) write$sndseq(r7, &(0x7f0000000200)=[{0x0, 0x2, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0x1c) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) io_setup(0x6, &(0x7f0000000100)=0x0) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r8, 0x1, &(0x7f0000000040)=[&(0x7f00000003c0)={0xf0, 0x300, 0x0, 0x5, 0x0, r9, 0x0}]) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010200000000000000000000000a60000000060a0b0400000000000000000200000034000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c617374000000000900010073797a30000000000900020073797a3200000000"], 0x88}}, 0x0) write$vga_arbiter(r0, &(0x7f0000000540), 0xf) 27.503570803s ago: executing program 0 (id=2544): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811000090eaa297c389a24eb4e2019a2ecb65a29c9c9e7bf8411dbe31fc809ac0945a4e279b7bcf33bae32d9f92e384e68c600000ea108ecf98f8b3390f234314d3241cc6b2f4d198ec7d4912f56d07f4f26808410b0bbe287f5634e0320bf563bc37a227aefb0818c6132574f9c25b9ed177e3e90000e03b49d095b9b9e7b2f055eb6c49ae1b867d35111fcd70d4615f9375d6d18e4aa45699e8f6", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0xfd, 0xc9, "0a51b0", "98c92c", '\rgt', "ed2f70", 0x6, 0x3, 0x7, 0x0, 0x7, 0x1, 0x8, 0x10, 0x6, 0x5}}}}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 26.765322381s ago: executing program 5 (id=2545): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f00000004c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000005000000fd09000084"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x2007fc, r4, 0x4}, 0x38) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32, @ANYBLOB="0a0034000202020202020000dfe326006c090000"], 0x30}}, 0x0) nanosleep(0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f00000006c0)=@data_frame={@msdu=@type01={{0x0, 0x2, 0x5, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x5b3}, @device_b, @random="e20ac05769da", @broadcast, {0x8, 0x3}, "", @void, @value=@ver_80211n={0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, @random="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"}, 0x14f) syz_80211_inject_frame(0x0, &(0x7f0000000180)=ANY=[@ANYRES64=r5], 0x20) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) 25.26923622s ago: executing program 7 (id=2548): io_uring_setup(0x3846, &(0x7f0000000180)={0x0, 0x40000, 0x81, 0x6, 0xd0}) (async) r0 = socket$netlink(0x10, 0x3, 0x15) (async) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) (async, rerun: 64) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, &(0x7f0000000300)=""/4096, &(0x7f0000000040)=0x1000) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) (async, rerun: 32) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (rerun: 32) r3 = add_key$keyring(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000000)='asymmetric\x00', 0x0) (async, rerun: 32) r4 = gettid() (rerun: 32) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, 0x0) (async) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async, rerun: 64) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='fsi_slave_init\x00', 0xffffffffffffffff, 0x0, 0x2000fe}, 0x18) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r6, 0x9) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10) (async) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000047fd17e5ffff0800040000000000000000", 0x39}], 0x1) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303", @ANYRESDEC], 0x0) (async, rerun: 64) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async, rerun: 64) io_setup(0x3, &(0x7f0000000180)) syz_open_procfs(0x0, &(0x7f0000000000)='net/connector\x00') 25.211110072s ago: executing program 7 (id=2549): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0xfffffffffffffffe, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r8, 0xc0d05640, &(0x7f0000000300)={0x0, @win={{0x68a4, 0x1d5, 0xb6e3, 0x4}, 0x8, 0x65, 0x0, 0x3, &(0x7f0000000540)="055834a7f7165f0d0a4a522683f61d10b671425281337f7fca33b69ada80d69a1ba6af3ec0809552e8e9cf937c2205e154efc1d54df04ef787dad9118134aa6afc788ba32ccb04ea96e4ef25e58906772c24ac33ed96af4d6fb2293c3c9b08902cda734ca010ae3ded7f3a24999b0bc08c36ae78f68d71743b9d0ac4ccef712cb2c91d58808818ce6afd83cb6aea62561a0f336806f1f6ccf17b8e3bbee1a3e7bea59e", 0x72}}) sendmsg$rds(r7, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@cswp={0x58, 0x114, 0x7, {{0xca59, 0x1}, &(0x7f00000001c0)=0x1, &(0x7f0000000600)=0x70, 0x1, 0x4, 0x3, 0x2587, 0x20, 0x469c}}], 0x58}, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000340)={0x28, 0x4, r1, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x10}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff2f00000000000001"]) 25.143098373s ago: executing program 5 (id=2550): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x24, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x4]}, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x0, [{@private=0xa010103, 0xfffffffe}, {@dev={0xac, 0x14, 0x14, 0xb}}, {@remote, 0x5}, {@dev, 0x659}, {@broadcast}, {@multicast2, 0x9}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@loopback}, {@remote}, {@multicast2}, {@remote}, {@rand_addr=0x64010101}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x852b1}]}]}}}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r4 = dup(r2) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x12, r6, 0x0) 24.839406665s ago: executing program 3 (id=2551): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r0, 0x4068aea3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8a441, 0x0) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x7}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) r2 = gettid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x1, r2}}, 0x40) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x5460, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000090}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0xa94}}, @TCA_CT_ACTION={0x6, 0x3, 0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 24.581998988s ago: executing program 2 (id=2552): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x200000b) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="0c0100ff", @ANYRES16=r5, @ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x200008d4}, 0x80) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f00000000c0)=0x7a, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f00000001c0)}, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x8000) 24.467276705s ago: executing program 0 (id=2553): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0xa4, 0x3, 0x1}, 0xffffffffffffff15) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x2041}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x2, 0x1}}}}, 0x30}}, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xcd, 0x61, 0x70, 0x20, 0x52b, 0x1803, 0xc62, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x17, 0x0, 0x0, 0xf4, 0x30, 0x88}}]}}]}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x2, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a32000000001400078008000640000000000800084000000000050005000a0000000500010006feff000d000300686173683a6e6574"], 0x5c}}, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000001c0)={0x20, 0x17}, 0x0, 0x0}) 23.467111793s ago: executing program 2 (id=2554): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) prlimit64(0x0, 0x8, 0x0, &(0x7f00000001c0)) syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000280)=@ctrl_frame=@bar={{}, {0x2}, @device_b, @device_b, @multi={{0x0, 0x1, 0x1, 0x0, 0x4}, [{0xdfc, 0x2, {0x8, 0x800}, "67ec997a819f8a05"}, {0x0, 0x7, {0x5, 0x4e}, "a717a59ce877324a"}, {0x0, 0x8, {0x9, 0x1}, "559ea537c66e274c"}, {0x0, 0x4, {0x4, 0x7f}, "0f469bd758652279"}]}}, 0x42) 23.252424476s ago: executing program 3 (id=2555): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000440)="10030600e4ff020002004788aa96a13bb100001100007fca1a00c22ad6c5c347da3f3c0307b7c1f05a07d5a63e29", 0x2e, 0x4000004, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) mkdir(0x0, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) mknod(0x0, 0x8001420, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x30004081) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100), 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='vegas\x00', 0x6) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r6, &(0x7f0000000200), 0xfffffd9d) connect$802154_dgram(r5, &(0x7f0000000040), 0x14) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f00000009c0)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7cb, 0x0) 23.246191093s ago: executing program 5 (id=2556): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x1, &(0x7f0000000100)=""/46) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r6 = syz_open_dev$vim2m(0x0, 0x100000000000080, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc058560f, 0x0) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x84, 0x24, 0xd0f, 0x0, 0x2, {0x60, 0x0, 0x0, r8, {}, {0xfff2, 0xa}, {0xffe0, 0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0xc, 0x8c4, 0xf, 0x7, 0x5, 0x8}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x6, 0x0, 0x139c, 0x41c876c6, 0x9}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x2}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000055}, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x8000, 0x0, 0x350}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) 21.594966806s ago: executing program 5 (id=2557): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x1, &(0x7f0000000100)=""/46) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r6 = syz_open_dev$vim2m(0x0, 0x100000000000080, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc058560f, 0x0) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x84, 0x24, 0xd0f, 0x0, 0x2, {0x60, 0x0, 0x0, r8, {}, {0xfff2, 0xa}, {0xffe0, 0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0xc, 0x8c4, 0xf, 0x7, 0x5, 0x8}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x6, 0x0, 0x139c, 0x41c876c6, 0x9}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x2}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000055}, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x8000, 0x0, 0x350}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) 21.59449024s ago: executing program 2 (id=2558): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000001440)={[{@dyn}]}) chdir(&(0x7f0000000240)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f0000000140)="f4", 0x1, 0x4000041, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600030000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) fanotify_init(0xf00, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket(0x25, 0x5, 0x0) munlockall() mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) 21.026265773s ago: executing program 7 (id=2559): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{0x1}}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0xa, 0xfffffb56) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) ioctl$HCIINQUIRY(r3, 0x800448d4, &(0x7f0000000080)={0x0, 0x4, "00fa00"}) 20.860294232s ago: executing program 3 (id=2560): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pselect6(0x29, &(0x7f0000000040)={0x8}, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002840)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x100000, 0xd, 0xb9, 0xa, 0x0, [{0xb, 0xae, 0x9, '\x00', 0x2}, {0xd, 0x80, 0xd}, {0x4, 0x9, 0xee, '\x00', 0x5}, {0x4, 0xe, 0x2, '\x00', 0x81}, {0x1, 0x8, 0xcc, '\x00', 0x7}, {0x54, 0x51, 0x19, '\x00', 0xbe}, {0xc5, 0x9, 0xc, '\x00', 0x9}, {0x80, 0x81, 0x94, '\x00', 0x3}, {0x0, 0x6, 0x0, '\x00', 0xa4}, {0x1, 0x4, 0xd3, '\x00', 0x4}, {0x3, 0x5, 0x4, '\x00', 0x3}, {0x9, 0x3, 0x9, '\x00', 0x2}, {0xf3, 0x7, 0x2, '\x00', 0x7}, {0x7, 0x1, 0x81, '\x00', 0x1}, {0xa, 0x8, 0x10, '\x00', 0x81}, {0x88, 0x1, 0x4, '\x00', 0xf9}, {0x1, 0x4, 0x15, '\x00', 0x1}, {0x9, 0x9, 0x7, '\x00', 0x2}, {0x6, 0xb, 0x6, '\x00', 0x3}, {0x4, 0x6, 0x0, '\x00', 0x3}, {0x0, 0x5d, 0x2, '\x00', 0xa}, {0x4, 0x5, 0xc, '\x00', 0x9}, {0x4, 0x1, 0xe2, '\x00', 0x3}, {0x40, 0xfd, 0x9, '\x00', 0xe5}]}}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) creat(&(0x7f00000005c0)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000005000000020000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="15ad82ffc2858ffda35575bd9ed800000000964500000000faff00000000"], 0x50) socket$unix(0x1, 0x5, 0x0) 19.549094055s ago: executing program 3 (id=2561): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pselect6(0x29, &(0x7f0000000040)={0x8}, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002840)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) creat(&(0x7f00000005c0)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000005000000020000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="15ad82ffc2858ffda35575bd9ed800000000964500000000faff00000000"], 0x50) socket$unix(0x1, 0x5, 0x0) 19.462942228s ago: executing program 0 (id=2562): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x24, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x401, 0x5, 0x9, 0x4]}, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x0, [{@private=0xa010103, 0xfffffffe}, {@dev={0xac, 0x14, 0x14, 0xb}}, {@remote, 0x5}, {@dev, 0x659}, {@broadcast}, {@multicast2, 0x9}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@loopback}, {@remote}, {@multicast2}, {@remote}, {@rand_addr=0x64010101}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x852b1}]}]}}}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r4 = dup(r2) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x12, r6, 0x0) 16.323526549s ago: executing program 5 (id=2563): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811000090eaa297c389a24eb4e2019a2ecb65a29c9c9e7bf8411dbe31fc809ac0945a4e279b7bcf33bae32d9f92e384e68c600000ea108ecf98f8b3390f234314d3241cc6b2f4d198ec7d4912f56d07f4f26808410b0bbe287f5634e0320bf563bc37a227aefb0818c6132574f9c25b9ed177e3e90000e03b49d095b9b9e7b2f055eb6c49ae1b867d35111fcd70d4615f9375d6d18e4aa45699e8f6", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0xfd, 0xc9, "0a51b0", "98c92c", '\rgt', "ed2f70", 0x6, 0x3, 0x7, 0x0, 0x7, 0x1, 0x8, 0x10, 0x6, 0x5}}}}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 16.019469705s ago: executing program 7 (id=2564): openat$vimc1(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) creat(0x0, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0xffffffff, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x0, @empty, 0x60}}, 0x0, 0x60, 0x3bf8580d, 0x0, 0xb3550aa4ba878396, 0x2}, 0x9c) 15.911155683s ago: executing program 2 (id=2565): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') openat$cgroup_ro(r0, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x1c, 0x0, &(0x7f0000000240)) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x11, &(0x7f0000000280)=@ringbuf={{0x18, 0x8}, {{0x18, 0x7, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x4}}, {{0x5, 0x0, 0x3}}, [@map_idx_val={0x18, 0x7, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}], {{0x7, 0x1, 0xb, 0x8, 0x4}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000680)={0x4, 0x6, 0xf, 0xc, 0x4, "1d451546ed47cd95e7c9744ce42b45e4bada7b", 0x7, 0x234}) r5 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000000000)=0xfffffffc, 0x4) bind$inet(r5, &(0x7f0000000680)={0x2, 0x4e1e, @private=0xa010101}, 0x10) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}, 0x9}, 0x1c) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x9533, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x58c}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f0000000180)={'gretap0\x00', @ifru_names='rose0\x00'}) 15.864685371s ago: executing program 0 (id=2566): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x4e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0xffffffff, 0x0, 0x54}, 0x9c) 7.254380868s ago: executing program 3 (id=2567): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @raw_data="144d5842915e31890abc47bc18d0f1661c40ad6fbfaa00c37da638c5ddb1ea034783d06fd57bb69fd2a1573eabfa143534f44708010674128c7ed982934065f02c14895298a2f020e0d65c51e4152c07081f1abcca56b68a5a046cc2ef500021b480609c4234e89047b18d01ba609cda16149cc61417483b2753a7cb665c298973d63e625bdb5631264ca240865165febeec1a12ae3969dd06b8668ba6573046e9b5968f30dffbc7687c72927c84bd5ff90e25997cfea7e191b6b9b054cd778fb611ceb00919b952"}) r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, &(0x7f0000000080)={0x27, 0x0, 0xffffffffffffffff, 0x6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0x0, 0x0) read$FUSE(r2, &(0x7f0000000440)={0x2020}, 0x2020) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_tos={0x0}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x1, @empty, 0xd58a}, {0xa, 0x4e20, 0x21be, @empty, 0xffffffff}, 0xffffffffffffffff, 0x1}}, 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={0xffffffffffffffff, r4, 0x1, 0x0, @val=@netfilter={0x2, 0x0, 0x8000}}, 0x40) r5 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0x0) r6 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x14) 7.253684552s ago: executing program 7 (id=2568): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f00000004c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000005000000fd09000084"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x2007fc, r4, 0x4}, 0x38) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32, @ANYBLOB="0a0034000202020202020000dfe326006c090000"], 0x30}}, 0x0) nanosleep(0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f00000006c0)=@data_frame={@msdu=@type01={{0x0, 0x2, 0x5, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x5b3}, @device_b, @random="e20ac05769da", @broadcast, {0x8, 0x3}, "", @void, @value=@ver_80211n={0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, @random="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"}, 0x14f) syz_80211_inject_frame(0x0, &(0x7f0000000180)=ANY=[@ANYRES64=r5], 0x20) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) 7.015922144s ago: executing program 2 (id=2569): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0xfffffffffffffffe, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r8, 0xc0d05640, &(0x7f0000000300)={0x0, @win={{0x68a4, 0x1d5, 0xb6e3, 0x4}, 0x8, 0x65, 0x0, 0x3, &(0x7f0000000540)="055834a7f7165f0d0a4a522683f61d10b671425281337f7fca33b69ada80d69a1ba6af3ec0809552e8e9cf937c2205e154efc1d54df04ef787dad9118134aa6afc788ba32ccb04ea96e4ef25e58906772c24ac33ed96af4d6fb2293c3c9b08902cda734ca010ae3ded7f3a24999b0bc08c36ae78f68d71743b9d0ac4ccef712cb2c91d58808818ce6afd83cb6aea62561a0f336806f1f6ccf17b8e3bbee1a3e7bea59e", 0x72}}) sendmsg$rds(r7, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@cswp={0x58, 0x114, 0x7, {{0xca59, 0x1}, &(0x7f00000001c0)=0x1, &(0x7f0000000600)=0x70, 0x1, 0x4, 0x3, 0x2587, 0x20, 0x469c}}], 0x58}, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000340)={0x28, 0x4, r1, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x10}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff2f00000000000001"]) 5.366050726s ago: executing program 0 (id=2570): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000180)=0x68) r1 = socket$rxrpc(0x21, 0x2, 0xa) poll(&(0x7f0000000080)=[{r1, 0x10}], 0x1, 0xf45) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000240), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) shutdown(r2, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0xa0}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x10, 0x1f, 0x1}, 0x10}], 0x1}, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r4}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000300)=0x31000, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_VM_TYPES(r6, 0x4068aea3, &(0x7f0000000240)) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="02c82041003d000100fb00030006001f0f07040000080700ee080400090009001001040007000c000602040001008eff"], 0x46) process_madvise(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f00000001c0)="439f0c99ad63cb45b8230a712c95672f6fb2463b9678819972abdef1cd040666a3cc25f1676f5f", 0x27}], 0x1, 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r7, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000001240)={0x0, 0x2, 0x0, 0x0, 0x0, "001bf1000000000000002000"}) syz_open_pts(r7, 0x101) epoll_create(0x2) 2.167789786s ago: executing program 2 (id=2571): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pselect6(0x29, &(0x7f0000000040)={0x8}, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002840)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x100000, 0xd, 0xb9, 0xa, 0x0, [{0xb, 0xae, 0x9, '\x00', 0x2}, {0xd, 0x80, 0xd}, {0x4, 0x9, 0xee, '\x00', 0x5}, {0x4, 0xe, 0x2, '\x00', 0x81}, {0x1, 0x8, 0xcc, '\x00', 0x7}, {0x54, 0x51, 0x19, '\x00', 0xbe}, {0xc5, 0x9, 0xc, '\x00', 0x9}, {0x80, 0x81, 0x94, '\x00', 0x3}, {0x0, 0x6, 0x0, '\x00', 0xa4}, {0x1, 0x4, 0xd3, '\x00', 0x4}, {0x3, 0x5, 0x4, '\x00', 0x3}, {0x9, 0x3, 0x9, '\x00', 0x2}, {0xf3, 0x7, 0x2, '\x00', 0x7}, {0x7, 0x1, 0x81, '\x00', 0x1}, {0xa, 0x8, 0x10, '\x00', 0x81}, {0x88, 0x1, 0x4, '\x00', 0xf9}, {0x1, 0x4, 0x15, '\x00', 0x1}, {0x9, 0x9, 0x7, '\x00', 0x2}, {0x6, 0xb, 0x6, '\x00', 0x3}, {0x4, 0x6, 0x0, '\x00', 0x3}, {0x0, 0x5d, 0x2, '\x00', 0xa}, {0x4, 0x5, 0xc, '\x00', 0x9}, {0x4, 0x1, 0xe2, '\x00', 0x3}, {0x40, 0xfd, 0x9, '\x00', 0xe5}]}}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) creat(&(0x7f00000005c0)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000005000000020000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="15ad82ffc2858ffda35575bd9ed800000000964500000000faff00000000"], 0x50) socket$unix(0x1, 0x5, 0x0) 2.113542405s ago: executing program 7 (id=2572): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f00000004c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000005000000fd09000084"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x2007fc, r4, 0x4}, 0x38) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32, @ANYBLOB="0a0034000202020202020000dfe326006c090000"], 0x30}}, 0x0) nanosleep(0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f00000006c0)=@data_frame={@msdu=@type01={{0x0, 0x2, 0x5, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x5b3}, @device_b, @random="e20ac05769da", @broadcast, {0x8, 0x3}, "", @void, @value=@ver_80211n={0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, @random="4ec1d593caa6f571f2370016c2800ef90b3564ed9fdaf1392055214df225accd990ce4ce1513ad1aec526f6ff3b85f25ff87e63ad9b5efa5e60458e1e85ed61edba563eb1aabfb874d91c068de4935dfd83fee15889c4be3ed2211c51536662db92fb7c2f9f6b058c9cc4f5768d7420f55c99400b40c8c41ec138418eb6b780920be2f0f54c288704b1dd6909f3c7cfda274bc8f3ef92f0c9cdd9d3f77d545826b4e07a77bf62193363fac04a59ad01027760caa1c1c6561234ac022b815df4ea5e35b4b7bbb9dfbda64777f9ef56b2ce5e70ca97afca86c46376993e23601dea07997b53827aa11adbe033137005dc5295815f3d7d8fa637f3ed2b77f8a5e267f02a6bee95e25d617807b7193fcacbcd1b079431ae2b9b5ead5b7d8df5f8c2cdee724ed7686c552c21ab456d8e7bf2d75a3bc"}, 0x14f) syz_80211_inject_frame(0x0, &(0x7f0000000180)=ANY=[@ANYRES64=r5], 0x20) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) 0s ago: executing program 35 (id=2563): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811000090eaa297c389a24eb4e2019a2ecb65a29c9c9e7bf8411dbe31fc809ac0945a4e279b7bcf33bae32d9f92e384e68c600000ea108ecf98f8b3390f234314d3241cc6b2f4d198ec7d4912f56d07f4f26808410b0bbe287f5634e0320bf563bc37a227aefb0818c6132574f9c25b9ed177e3e90000e03b49d095b9b9e7b2f055eb6c49ae1b867d35111fcd70d4615f9375d6d18e4aa45699e8f6", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0xfd, 0xc9, "0a51b0", "98c92c", '\rgt', "ed2f70", 0x6, 0x3, 0x7, 0x0, 0x7, 0x1, 0x8, 0x10, 0x6, 0x5}}}}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) kernel console output (not intermixed with test programs): : USB disconnect, device number 51 [ 846.534077][ T29] audit: type=1326 audit(1735539944.609:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13893 comm="syz.4.2064" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59d8f85d29 code=0x0 [ 846.942527][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 847.075696][ T7411] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 847.107475][ T7411] usb 3-1: device descriptor read/8, error -71 [ 847.385645][ T7411] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 848.315663][ T7411] usb 3-1: device not accepting address 46, error -71 [ 848.323579][ T7411] usb usb3-port1: unable to enumerate USB device [ 848.788417][ T5898] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 849.292422][ T5898] usb 5-1: unable to get BOS descriptor or descriptor too short [ 849.310216][ T5898] usb 5-1: not running at top speed; connect to a high speed hub [ 849.322907][ T5898] usb 5-1: config 4 has an invalid interface number: 111 but max is 0 [ 849.331221][ T5898] usb 5-1: config 4 has no interface number 0 [ 849.337346][ T5898] usb 5-1: config 4 interface 111 has no altsetting 0 [ 849.346136][ T5898] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=44.99 [ 849.356515][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.364643][ T5898] usb 5-1: Product: syz [ 849.368881][ T5898] usb 5-1: Manufacturer: syz [ 849.373573][ T5898] usb 5-1: SerialNumber: syz [ 849.946329][T13908] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2068'. [ 850.233493][T13915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 850.266488][T13915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 850.321812][ T5898] pvrusb2: Hardware description: Terratec Grabster AV400 [ 850.339164][ T5898] pvrusb2: ********** [ 850.349165][ T5898] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 850.367828][ T29] audit: type=1400 audit(1735539948.201:1635): avc: denied { accept } for pid=13932 comm="syz.2.2076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 850.370997][ T5898] pvrusb2: Important functionality might not be entirely working. [ 850.415490][ T5898] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 850.507145][ T5898] pvrusb2: ********** [ 850.511439][ T5898] usb 5-1: selecting invalid altsetting 0 [ 850.517246][ T2324] pvrusb2: Invalid write control endpoint [ 850.560993][ T5898] usb 5-1: USB disconnect, device number 36 [ 850.636176][ T2324] pvrusb2: Invalid write control endpoint [ 850.641930][ T2324] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 850.679177][ T2324] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 850.699668][ T2324] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 850.727873][ T2324] pvrusb2: Device being rendered inoperable [ 850.741895][ T2324] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 850.811407][ T2324] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 850.834044][ T2324] pvrusb2: Attached sub-driver cx25840 [ 851.000275][ T2324] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 851.834668][ T2324] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 853.389245][T13967] fuse: Bad value for 'rootmode' [ 853.525229][T13969] FAULT_INJECTION: forcing a failure. [ 853.525229][T13969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 853.573167][T13969] CPU: 0 UID: 0 PID: 13969 Comm: syz.3.2084 Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 [ 853.583989][T13969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 853.594070][T13969] Call Trace: [ 853.597360][T13969] [ 853.600296][T13969] dump_stack_lvl+0x16c/0x1f0 [ 853.604994][T13969] should_fail_ex+0x497/0x5b0 [ 853.609697][T13969] _copy_from_user+0x2e/0xd0 [ 853.614314][T13969] copy_msghdr_from_user+0x99/0x160 [ 853.619531][T13969] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 853.625358][T13969] ___sys_sendmsg+0xff/0x1e0 [ 853.629967][T13969] ? __pfx____sys_sendmsg+0x10/0x10 [ 853.635195][T13969] ? __pfx_lock_release+0x10/0x10 [ 853.640237][T13969] ? trace_lock_acquire+0x14e/0x1f0 [ 853.645463][T13969] ? __fget_files+0x206/0x3a0 [ 853.650148][T13969] __sys_sendmsg+0x16e/0x220 [ 853.654775][T13969] ? __pfx___sys_sendmsg+0x10/0x10 [ 853.659917][T13969] do_syscall_64+0xcd/0x250 [ 853.664457][T13969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.670383][T13969] RIP: 0033:0x7f5442d85d29 [ 853.674819][T13969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 853.694455][T13969] RSP: 002b:00007f5443bbd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 853.702893][T13969] RAX: ffffffffffffffda RBX: 00007f5442f75fa0 RCX: 00007f5442d85d29 [ 853.710883][T13969] RDX: 0000000000008040 RSI: 0000000020000f80 RDI: 0000000000000003 [ 853.718874][T13969] RBP: 00007f5443bbd090 R08: 0000000000000000 R09: 0000000000000000 [ 853.726883][T13969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 853.734870][T13969] R13: 0000000000000000 R14: 00007f5442f75fa0 R15: 00007ffece35c8e8 [ 853.742847][T13969] [ 854.592154][ T5868] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 855.110048][ T5868] usb 5-1: config 1 has an invalid descriptor of length 212, skipping remainder of the config [ 855.124739][ T5868] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 855.158701][ T5868] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 919, setting to 64 [ 855.186709][ T5868] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 855.201411][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.209827][ T5868] usb 5-1: Product: syz [ 855.237899][ T5868] usb 5-1: Manufacturer: syz [ 855.242526][ T5868] usb 5-1: SerialNumber: syz [ 855.252898][T13980] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 855.268345][ T5868] usb 5-1: selecting invalid altsetting 1 [ 855.480694][T13996] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2092'. [ 855.492731][ T29] audit: type=1400 audit(1735539953.000:1636): avc: denied { execute } for pid=13995 comm="syz.0.2092" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=41022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 855.680219][T13999] wg2: left promiscuous mode [ 855.686078][T13999] wg2: left allmulticast mode [ 856.427283][ T5868] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 856.439911][ T5868] cdc_ncm 5-1:1.0: bind() failure [ 856.935951][T14019] ptrace attach of "./syz-executor exec"[5815] was attempted by "./syz-executor exec"[14019] [ 857.479799][ T5868] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 857.486640][ T5868] cdc_ncm 5-1:1.1: bind() failure [ 857.515102][ T5868] usb 5-1: USB disconnect, device number 37 [ 857.979453][T14032] netlink: 187320 bytes leftover after parsing attributes in process `syz.5.2099'. [ 857.989142][T14032] net_ratelimit: 44 callbacks suppressed [ 857.989177][T14032] netlink: zone id is out of range [ 858.000133][T14032] netlink: zone id is out of range [ 858.007893][T14032] netlink: zone id is out of range [ 858.013139][T14032] netlink: zone id is out of range [ 858.018296][T14032] netlink: zone id is out of range [ 858.023513][T14032] netlink: zone id is out of range [ 858.028665][T14032] netlink: zone id is out of range [ 858.033864][T14032] netlink: zone id is out of range [ 858.039019][T14032] netlink: zone id is out of range [ 858.044244][T14032] netlink: zone id is out of range [ 858.461127][ T5868] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 858.546054][T14035] siw: device registration error -23 [ 858.677944][T14034] syz.2.2102 (14034): drop_caches: 2 [ 858.757235][ T5868] usb 4-1: Using ep0 maxpacket: 16 [ 859.024110][T14036] syz.2.2102 (14036): drop_caches: 2 [ 859.296930][ T5868] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 859.308646][ T5868] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 859.688748][T14046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 860.162970][T14042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 860.332333][ T5868] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 860.341833][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.361997][T14036] syz.2.2102 (14036): drop_caches: 2 [ 860.374008][ T5868] usb 4-1: Product: syz [ 860.385563][ T5868] usb 4-1: Manufacturer: syz [ 860.400554][ T5868] usb 4-1: SerialNumber: syz [ 860.422580][T14033] syz.0.2101 (14033): drop_caches: 2 [ 860.442650][T14033] syz.0.2101 (14033): drop_caches: 2 [ 860.566414][T14031] syz.0.2101 (14031): drop_caches: 2 [ 861.308848][T14023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 861.317766][T14023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 861.340977][ T5868] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 861.864618][ T5868] usb 4-1: USB disconnect, device number 48 [ 861.885046][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 861.948677][T14059] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2109'. [ 862.209660][T14068] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 863.472764][ T29] audit: type=1326 audit(1735539960.464:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14072 comm="syz.4.2112" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59d8f85d29 code=0x0 [ 863.845469][T14076] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 864.270270][T14080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2114'. [ 864.330859][T14071] syz.5.2111 (14071): drop_caches: 2 [ 864.347010][T14071] syz.5.2111 (14071): drop_caches: 2 [ 865.273613][T14099] atomic_op ffff88805e00f198 conn xmit_atomic 0000000000000000 [ 865.926314][T14101] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2116'. [ 868.551946][ T29] audit: type=1400 audit(1735539965.207:1638): avc: denied { create } for pid=14144 comm="syz.2.2122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 868.581128][T14145] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2122'. [ 868.592019][T14145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2122'. [ 868.664529][ T29] audit: type=1400 audit(1735539965.235:1639): avc: denied { bind } for pid=14144 comm="syz.2.2122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 868.756199][ T29] audit: type=1400 audit(1735539965.319:1640): avc: denied { append } for pid=14146 comm="syz.4.2123" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 868.916832][T14152] wg2: entered promiscuous mode [ 868.932473][T14152] wg2: entered allmulticast mode [ 869.029331][ T29] audit: type=1326 audit(1735539965.656:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14153 comm="syz.2.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d88985d29 code=0x7ffc0000 [ 869.149857][ T29] audit: type=1326 audit(1735539965.684:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14153 comm="syz.2.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d88985d29 code=0x7ffc0000 [ 869.265566][ T29] audit: type=1326 audit(1735539965.684:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14153 comm="syz.2.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6d88984690 code=0x7ffc0000 [ 869.356120][ T29] audit: type=1326 audit(1735539965.684:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14153 comm="syz.2.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6d889847df code=0x7ffc0000 [ 869.458514][ T29] audit: type=1326 audit(1735539965.684:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14153 comm="syz.2.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f6d88985d29 code=0x7ffc0000 [ 869.769963][T14167] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2128'. [ 870.061073][ T29] audit: type=1326 audit(1735539965.702:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14153 comm="syz.2.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f6d8898473c code=0x7ffc0000 [ 870.101974][ T29] audit: type=1326 audit(1735539965.702:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14153 comm="syz.2.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6d889847df code=0x7ffc0000 [ 870.125670][ T29] audit: type=1326 audit(1735539965.702:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14153 comm="syz.2.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6d8898498a code=0x7ffc0000 [ 870.149301][ T29] audit: type=1326 audit(1735539965.702:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14153 comm="syz.2.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d88985d29 code=0x7ffc0000 [ 870.329717][T14172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2131'. [ 872.017152][T14186] bridge0: port 3(veth0_to_bridge) entered blocking state [ 872.024392][T14186] bridge0: port 3(veth0_to_bridge) entered disabled state [ 872.094285][T14186] veth0_to_bridge: entered allmulticast mode [ 872.142881][T14186] veth0_to_bridge: entered promiscuous mode [ 872.164036][T14186] bridge0: port 3(veth0_to_bridge) entered blocking state [ 872.171300][T14186] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 872.262250][T14192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2137'. [ 874.873756][T14220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 875.281652][T14215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 875.644482][T14229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2148'. [ 875.696835][T14227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2149'. [ 876.030454][ T25] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 876.380850][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 877.167561][ T25] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 877.167594][ T25] usb 6-1: config 0 has no interface number 0 [ 877.172708][ T25] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 877.172747][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.172771][ T25] usb 6-1: Product: syz [ 877.172789][ T25] usb 6-1: Manufacturer: syz [ 877.172806][ T25] usb 6-1: SerialNumber: syz [ 877.174769][ T25] usb 6-1: config 0 descriptor?? [ 877.177299][ T25] smsc95xx v2.0.0 [ 877.496674][ T25] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 877.496713][ T25] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 877.497098][ T25] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 877.497224][ T25] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 877.562079][T14258] atomic_op ffff888030dc5198 conn xmit_atomic 0000000000000000 [ 878.135828][ T25] usb 6-1: USB disconnect, device number 45 [ 878.787603][T14269] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 878.972785][T14280] fuse: Bad value for 'rootmode' [ 879.386559][T14289] siw: device registration error -23 [ 879.462268][T14291] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2167'. [ 879.690157][T14289] syz.3.2166 (14289): drop_caches: 2 [ 879.696533][T14289] syz.3.2166 (14289): drop_caches: 2 [ 880.188053][T14288] syz.3.2166 (14288): drop_caches: 2 [ 880.300393][T14295] delete_channel: no stack [ 880.347491][T14302] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 880.349211][ T29] audit: type=1400 audit(1735539976.254:1650): avc: denied { mounton } for pid=14296 comm="syz.5.2170" path="/420/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 880.359780][T14303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2171'. [ 880.492408][T14307] wlan1 speed is unknown, defaulting to 1000 [ 882.623797][ T29] audit: type=1400 audit(1735539978.368:1651): avc: denied { attach_queue } for pid=14344 comm="syz.4.2182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 883.003095][ T46] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 883.129690][T14354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 883.692434][T14346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 883.745497][ T46] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 883.773528][ T46] usb 6-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 883.784909][ T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.865607][ T46] usb 6-1: Product: syz [ 883.920775][ T46] usb 6-1: Manufacturer: syz [ 883.943368][ T46] usb 6-1: SerialNumber: syz [ 884.072661][ T46] usb 6-1: config 0 descriptor?? [ 884.137514][ T46] pn533_usb 6-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 884.547993][ T5868] usb 6-1: USB disconnect, device number 46 [ 884.619756][T14363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2188'. [ 885.225350][T14373] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2191'. [ 887.721443][ T5868] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 888.018292][ T5868] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 888.115354][T14406] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2198'. [ 888.203720][ T5868] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 888.437536][ T5868] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 888.491548][ T29] audit: type=1326 audit(1735539983.859:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14386 comm="syz.3.2197" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5442d85d29 code=0x0 [ 888.518814][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.542693][T14385] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 888.577611][ T5868] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 889.977543][ T25] usb 1-1: USB disconnect, device number 52 [ 890.594731][T14434] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2205'. [ 892.464944][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 892.475827][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 894.981382][ T29] audit: type=1400 audit(1735539989.901:1653): avc: denied { mount } for pid=14488 comm="syz.4.2218" name="/" dev="autofs" ino=42980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 895.514856][ T46] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 895.520600][T14497] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2219'. [ 895.843806][T14490] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2218'. [ 895.872407][ T29] audit: type=1400 audit(1735539990.771:1654): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 896.124316][ T46] usb 3-1: device descriptor read/64, error -71 [ 896.362143][T14502] siw: device registration error -23 [ 896.434166][ T46] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 896.592508][T14502] syz.0.2222 (14502): drop_caches: 2 [ 896.766299][T14503] syz.0.2222 (14503): drop_caches: 2 [ 896.807555][T14502] syz.0.2222 (14502): drop_caches: 2 [ 897.508660][T14508] input: syz0 as /devices/virtual/input/input23 [ 897.515003][T14508] input: failed to attach handler leds to device input23, error: -6 [ 897.577765][T14508] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 897.882303][T14519] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2227'. [ 898.050231][T13532] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 898.066615][T13532] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 898.078775][T13532] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 898.242577][T13532] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 898.250264][T13532] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 898.257596][T13532] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 898.276147][ T29] audit: type=1400 audit(1735539993.016:1655): avc: denied { mounton } for pid=14516 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 898.325051][T14516] wlan1 speed is unknown, defaulting to 1000 [ 899.016490][T14531] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 899.753658][T14516] chnl_net:caif_netlink_parms(): no params data found [ 900.088330][T14516] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.107555][T14551] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2231'. [ 900.138752][T14516] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.197351][T14516] bridge_slave_0: entered allmulticast mode [ 900.206909][T14516] bridge_slave_0: entered promiscuous mode [ 900.230088][T14516] bridge0: port 2(bridge_slave_1) entered blocking state [ 900.282907][T14516] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.290147][T14516] bridge_slave_1: entered allmulticast mode [ 900.330496][T14516] bridge_slave_1: entered promiscuous mode [ 900.470923][T13532] Bluetooth: hci1: command tx timeout [ 900.599244][T14559] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2233'. [ 900.872588][T14516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 900.947305][T14516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 901.057931][T14516] team0: Port device team_slave_0 added [ 901.151654][T14516] team0: Port device team_slave_1 added [ 901.242949][T14516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 901.250205][T14516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 901.276694][T14516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 901.292101][T14516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 901.332028][T14516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 901.523097][T14516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 901.572627][T14516] hsr_slave_0: entered promiscuous mode [ 901.578823][T14516] hsr_slave_1: entered promiscuous mode [ 901.595831][T14516] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 901.603576][T14516] Cannot create hsr debugfs directory [ 902.234984][T14516] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 902.303836][T14516] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 902.319588][T14516] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 902.467783][T14516] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 902.820487][T13532] Bluetooth: hci1: command tx timeout [ 903.046644][T14516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 903.143790][T14516] 8021q: adding VLAN 0 to HW filter on device team0 [ 903.174618][ T2909] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.181732][ T2909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 903.232823][T11762] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.239986][T11762] bridge0: port 2(bridge_slave_1) entered forwarding state [ 903.593449][T14587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 904.157035][T14584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 904.265374][T14516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 904.958995][T14516] veth0_vlan: entered promiscuous mode [ 904.977034][T14516] veth1_vlan: entered promiscuous mode [ 904.994503][T14516] veth0_macvtap: entered promiscuous mode [ 905.055104][T14601] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 905.221770][T13532] Bluetooth: hci1: command tx timeout [ 905.403525][T14516] veth1_macvtap: entered promiscuous mode [ 905.427589][T14516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 905.438568][T14516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.449212][T14516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 905.460546][T14516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.472443][T14516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 905.483436][T14516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.512259][T14516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 905.546225][T14516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 905.557195][T14516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.583142][T14516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 905.608788][T14516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.625484][T14516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 905.645737][T14516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.663244][T14516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 905.708070][T14516] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.727424][T14516] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.741668][T14516] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.755162][T14516] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.130940][T14607] fuse: Bad value for 'rootmode' [ 906.184694][T14614] sg_write: data in/out 207360/1 bytes for SCSI command 0xf2-- guessing data in; [ 906.184694][T14614] program syz.5.2245 not setting count and/or reply_len properly [ 906.693670][T11762] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 906.693701][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 906.701575][T11762] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 906.804118][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 906.949152][ T29] audit: type=1400 audit(1735540001.107:1656): avc: denied { mounton } for pid=14516 comm="syz-executor" path="/root/syzkaller.UYHnkO/syz-tmp" dev="sda1" ino=1952 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 906.973794][ T29] audit: type=1400 audit(1735540001.107:1657): avc: denied { mounton } for pid=14516 comm="syz-executor" path="/root/syzkaller.UYHnkO/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 907.000993][ T29] audit: type=1400 audit(1735540001.107:1658): avc: denied { mounton } for pid=14516 comm="syz-executor" path="/root/syzkaller.UYHnkO/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=43848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 907.059605][ T29] audit: type=1400 audit(1735540001.220:1659): avc: denied { mounton } for pid=14516 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 907.297694][T14632] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 907.307086][T14632] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 907.363177][ T29] audit: type=1326 audit(1735540001.257:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14622 comm="syz.3.2248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5442d85d29 code=0x7ffc0000 [ 907.591003][T13532] Bluetooth: hci1: command tx timeout [ 907.653674][ T29] audit: type=1326 audit(1735540001.257:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14622 comm="syz.3.2248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5442d85d29 code=0x7ffc0000 [ 907.856960][ T29] audit: type=1326 audit(1735540001.257:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14622 comm="syz.3.2248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f5442d85d29 code=0x7ffc0000 [ 908.001370][ T29] audit: type=1326 audit(1735540001.257:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14622 comm="syz.3.2248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5442d85d29 code=0x7ffc0000 [ 908.085794][T14641] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2223'. [ 908.121509][ T9313] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 908.135704][ T29] audit: type=1326 audit(1735540001.257:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14622 comm="syz.3.2248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5442d85d29 code=0x7ffc0000 [ 908.159747][ T29] audit: type=1326 audit(1735540001.257:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14622 comm="syz.3.2248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f5442d85d29 code=0x7ffc0000 [ 908.281168][T14643] wg2: left promiscuous mode [ 908.285772][T14643] wg2: left allmulticast mode [ 908.292815][ T9313] usb 4-1: config 2 has an invalid interface number: 218 but max is 0 [ 908.301155][ T9313] usb 4-1: config 2 has an invalid interface number: 5 but max is 0 [ 908.320555][ T9313] usb 4-1: config 2 has an invalid descriptor of length 1, skipping remainder of the config [ 908.441091][ T9313] usb 4-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 908.450117][ T9313] usb 4-1: config 2 has no interface number 0 [ 908.515486][T14645] ptrace attach of "./syz-executor exec"[5957] was attempted by "./syz-executor exec"[14645] [ 908.636634][ T9313] usb 4-1: config 2 has no interface number 1 [ 908.642921][ T9313] usb 4-1: config 2 interface 218 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 908.656053][ T9313] usb 4-1: too many endpoints for config 2 interface 5 altsetting 2: 182, using maximum allowed: 30 [ 908.668313][ T9313] usb 4-1: config 2 interface 5 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 182 [ 908.681508][ T9313] usb 4-1: config 2 interface 218 has no altsetting 0 [ 908.688485][ T9313] usb 4-1: config 2 interface 5 has no altsetting 0 [ 908.812204][ T9313] usb 4-1: New USB device found, idVendor=413c, idProduct=81d2, bcdDevice=e0.7f [ 908.846270][ T9313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.007599][ T9313] usb 4-1: Product: syz [ 909.008155][ T9313] usb 4-1: Manufacturer: ㌞ꤾ飩撍鵆駳퓛㥐菢ሙⵄ쁃咮ᜉ렰뢁鶽쀎쭆墹䞄⋱ꦼ悑숞 [ 909.015681][ T9313] usb 4-1: SerialNumber: syz [ 909.827328][T14638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 909.873494][T14655] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 909.892919][T14638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 911.379818][T14664] wlan1 speed is unknown, defaulting to 1000 [ 911.399176][ T9313] usb 4-1: USB disconnect, device number 49 [ 911.409497][T14665] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2255'. [ 912.029872][T14674] fuse: Bad value for 'rootmode' [ 912.245085][T14677] kernel read not supported for file /policy (pid: 14677 comm: syz.5.2259) [ 912.299102][T14680] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20000 [ 912.402904][T14680] IPVS: set_ctl: invalid protocol: 0 172.20.20.50:20001 [ 913.904111][T14698] fuse: Bad value for 'rootmode' [ 913.904577][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 913.904591][ T29] audit: type=1400 audit(1735540007.636:1689): avc: denied { getopt } for pid=14700 comm="syz.3.2268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 914.565497][T13532] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 914.652279][T14715] fuse: Bad value for 'rootmode' [ 915.821486][T14722] uprobe: syz.3.2274:14722 failed to unregister, leaking uprobe [ 915.891394][ T29] audit: type=1400 audit(1735540009.489:1690): avc: denied { write } for pid=14724 comm="syz.2.2275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 916.086114][T14731] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2277'. [ 916.384717][T14734] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2275'. [ 917.008965][T14729] netlink: 'syz.0.2276': attribute type 10 has an invalid length. [ 917.017202][T14729] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2276'. [ 918.055515][ T29] audit: type=1326 audit(1735540011.500:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14744 comm="syz.6.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b05785d29 code=0x7ffc0000 [ 918.079398][ T29] audit: type=1326 audit(1735540011.500:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14744 comm="syz.6.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b05785d29 code=0x7ffc0000 [ 918.103906][ T29] audit: type=1326 audit(1735540011.500:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14744 comm="syz.6.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f3b05785d29 code=0x7ffc0000 [ 918.127956][ T29] audit: type=1326 audit(1735540011.500:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14744 comm="syz.6.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b05785d29 code=0x7ffc0000 [ 918.158234][ T29] audit: type=1326 audit(1735540011.500:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14744 comm="syz.6.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b05785d29 code=0x7ffc0000 [ 918.189439][ T29] audit: type=1326 audit(1735540011.500:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14744 comm="syz.6.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b05785d29 code=0x7ffc0000 [ 918.216248][ T29] audit: type=1326 audit(1735540011.500:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14744 comm="syz.6.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b05785d29 code=0x7ffc0000 [ 918.242174][ T29] audit: type=1326 audit(1735540011.500:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14744 comm="syz.6.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b05785d29 code=0x7ffc0000 [ 918.843657][T14754] atomic_op ffff88805b60d198 conn xmit_atomic 0000000000000000 [ 919.301310][T14761] wg2: left promiscuous mode [ 919.311473][T14761] wg2: left allmulticast mode [ 919.826402][T14765] ptrace attach of "./syz-executor exec"[5818] was attempted by "./syz-executor exec"[14765] [ 920.594967][T14764] wg2: entered promiscuous mode [ 920.599961][T14764] wg2: entered allmulticast mode [ 920.605999][T11337] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 920.883518][T11337] usb 7-1: Using ep0 maxpacket: 32 [ 920.903314][T11337] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 920.920447][T11337] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 920.934357][T11337] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 920.958431][T11337] usb 7-1: Product: syz [ 920.962780][T11337] usb 7-1: Manufacturer: syz [ 920.967519][T11337] usb 7-1: SerialNumber: syz [ 920.982950][T11337] usb 7-1: config 0 descriptor?? [ 921.512702][T14769] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2288'. [ 922.033943][T14774] atomic_op ffff888012a0b198 conn xmit_atomic 0000000000000000 [ 922.472384][ T46] usb 7-1: USB disconnect, device number 2 [ 923.063135][T14784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2289'. [ 923.096462][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 923.096483][ T29] audit: type=1400 audit(1735540016.223:1719): avc: denied { map } for pid=14779 comm="syz.5.2292" path="socket:[46264]" dev="sockfs" ino=46264 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 923.207635][ T29] audit: type=1400 audit(1735540016.223:1720): avc: denied { read } for pid=14779 comm="syz.5.2292" path="socket:[46264]" dev="sockfs" ino=46264 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 923.522920][T14788] fuse: Bad value for 'rootmode' [ 924.155093][T11337] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 924.284455][ T7411] usb 1-1: new low-speed USB device number 53 using dummy_hcd [ 924.347384][T11337] usb 6-1: Using ep0 maxpacket: 8 [ 924.359717][T11337] usb 6-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 924.369329][T11337] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.377336][T11337] usb 6-1: Product: syz [ 924.381768][T11337] usb 6-1: Manufacturer: syz [ 924.386481][T11337] usb 6-1: SerialNumber: syz [ 924.402335][T11337] usb 6-1: config 0 descriptor?? [ 924.414256][T11337] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 924.456273][ T7411] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 924.469377][ T7411] usb 1-1: config 179 has no interface number 0 [ 924.476007][ T7411] usb 1-1: config 179 interface 65 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 924.495784][ T7411] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 924.507754][ T7411] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x87 has invalid maxpacket 65535, setting to 8 [ 924.519167][ T7411] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 924.531448][ T7411] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 924.541600][ T7411] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 924.554978][ T7411] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 924.564845][ T7411] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.578429][T14798] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 925.060952][T14809] tc_dump_action: action bad kind [ 925.286873][ T29] audit: type=1400 audit(1735540018.281:1721): avc: denied { getopt } for pid=14808 comm="syz.3.2300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 926.184098][T11337] gspca_sunplus: reg_w_riv err -110 [ 926.184156][T11337] sunplus 6-1:0.0: probe with driver sunplus failed with error -110 [ 926.347686][T14823] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2303'. [ 926.497972][T14826] overlayfs: failed to resolve './file1': -2 [ 926.498548][T14826] overlayfs: failed to resolve './file1': -2 [ 926.503327][T14826] overlayfs: failed to resolve './file1': -2 [ 926.503898][T14826] overlayfs: failed to resolve './file1': -2 [ 926.516921][ T9313] usb 6-1: USB disconnect, device number 47 [ 926.518877][T14826] overlayfs: failed to resolve './file1': -2 [ 926.521574][T14826] overlayfs: failed to resolve './file1': -2 [ 926.536035][T14826] overlayfs: failed to resolve './file1': -2 [ 926.538561][T14826] overlayfs: failed to resolve './file1': -2 [ 926.542174][T14826] overlayfs: failed to resolve './file1': -2 [ 926.542868][T14826] overlayfs: failed to resolve './file1': -2 [ 926.615352][T14826] overlayfs: failed to resolve './file1': -2 [ 926.624122][T14826] overlayfs: failed to resolve './file1': -2 [ 926.701370][T14826] overlayfs: failed to resolve './file1': -2 [ 926.710097][T14826] overlayfs: failed to resolve './file1': -2 [ 926.828503][T14826] overlayfs: failed to resolve './file1': -2 [ 927.011116][T14826] overlayfs: failed to resolve './file1': -2 [ 927.079009][T14826] overlayfs: failed to resolve './file1': -2 [ 927.079756][T14826] overlayfs: failed to resolve './file1': -2 [ 927.088682][T14826] overlayfs: failed to resolve './file1': -2 [ 927.113370][T14826] overlayfs: failed to resolve './file1': -2 [ 927.125304][T14826] overlayfs: failed to resolve './file1': -2 [ 927.125934][T14826] overlayfs: failed to resolve './file1': -2 [ 927.126450][T14826] overlayfs: failed to resolve './file1': -2 [ 927.132106][T14826] overlayfs: failed to resolve './file1': -2 [ 927.133291][T14826] overlayfs: failed to resolve './file1': -2 [ 927.133741][T14826] overlayfs: failed to resolve './file1': -2 [ 927.134249][T14826] overlayfs: failed to resolve './file1': -2 [ 927.134853][T14826] overlayfs: failed to resolve './file1': -2 [ 927.135546][T14826] overlayfs: failed to resolve './file1': -2 [ 927.281860][T14826] overlayfs: failed to resolve './file1': -2 [ 927.306916][T14826] overlayfs: failed to resolve './file1': -2 [ 928.093632][ T5831] Bluetooth: hci5: sending frame failed (-49) [ 928.095102][T13532] Bluetooth: hci5: Entering manufacturer mode failed (-49) [ 928.183386][T14842] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2306'. [ 928.183415][T14842] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2306'. [ 929.061887][T14850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 929.581871][T14846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 930.338980][ T25] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 930.347516][ T9] usb 1-1: USB disconnect, device number 53 [ 930.549217][ T25] usb 4-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x63, changing to 0x3 [ 930.562145][ T25] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 930.598902][ T25] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 59391, setting to 1024 [ 930.622454][ T25] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 930.642534][ T25] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=0 [ 930.664622][ T25] usb 4-1: Manufacturer: syz [ 930.684707][T14844] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 931.512127][T14869] netlink: 187320 bytes leftover after parsing attributes in process `syz.3.2308'. [ 931.522555][T14869] net_ratelimit: 16 callbacks suppressed [ 931.528305][T14869] netlink: zone id is out of range [ 931.533845][T14869] netlink: zone id is out of range [ 931.557949][T14869] netlink: zone id is out of range [ 931.563274][T14869] netlink: zone id is out of range [ 931.568621][T14869] netlink: zone id is out of range [ 931.573946][T14869] netlink: zone id is out of range [ 931.579273][T14869] netlink: zone id is out of range [ 931.584613][T14869] netlink: zone id is out of range [ 931.590485][T14869] netlink: zone id is out of range [ 931.595852][T14869] netlink: zone id is out of range [ 932.289168][T14874] siw: device registration error -23 [ 932.407176][T14874] syz.0.2316 (14874): drop_caches: 2 [ 932.408934][T14875] syz.0.2316 (14875): drop_caches: 2 [ 932.414407][T14874] syz.0.2316 (14874): drop_caches: 2 [ 933.122612][ T25] usbhid 4-1:36.0: couldn't find an input interrupt endpoint [ 933.161167][ T25] usb 4-1: USB disconnect, device number 50 [ 933.685584][T14894] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 933.694922][T14894] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 933.717206][ T29] audit: type=1400 audit(1735540026.129:1722): avc: denied { read } for pid=14883 comm="syz.0.2319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 934.243093][ T29] audit: type=1400 audit(1735540026.129:1723): avc: denied { shutdown } for pid=14883 comm="syz.0.2319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 934.295445][T14900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2321'. [ 934.875716][T14888] wg2: left promiscuous mode [ 934.903286][T14888] wg2: left allmulticast mode [ 935.735925][T14909] ptrace attach of "./syz-executor exec"[5818] was attempted by "./syz-executor exec"[14909] [ 936.319919][T14892] wg2: entered promiscuous mode [ 936.325764][T14892] wg2: entered allmulticast mode [ 936.341837][T14911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2322'. [ 939.385939][ T29] audit: type=1400 audit(1735540030.844:1724): avc: denied { ioctl } for pid=14924 comm="syz.3.2327" path="socket:[46815]" dev="sockfs" ino=46815 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 940.105393][ T25] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 940.294473][ T25] usb 6-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x63, changing to 0x3 [ 940.381168][ T25] usb 6-1: config 36 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 940.505950][ T25] usb 6-1: config 36 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 59391, setting to 1024 [ 940.528748][ T25] usb 6-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 940.539023][ T25] usb 6-1: New USB device strings: Mfr=244, Product=0, SerialNumber=0 [ 940.555324][ T25] usb 6-1: Manufacturer: syz [ 940.562310][T14928] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 940.602627][T14948] wg2: left promiscuous mode [ 940.607385][T14948] wg2: left allmulticast mode [ 940.791229][T14955] syz.3.2336 (14955): drop_caches: 2 [ 940.805615][T14955] syz.3.2336 (14955): drop_caches: 2 [ 940.878593][T14955] syz.3.2336 (14955): drop_caches: 2 [ 941.303960][T14959] ptrace attach of "./syz-executor exec"[5815] was attempted by "./syz-executor exec"[14959] [ 942.403771][T14958] wg2: entered promiscuous mode [ 942.408658][T14958] wg2: entered allmulticast mode [ 942.429625][ T25] usbhid 6-1:36.0: couldn't find an input interrupt endpoint [ 942.441666][ T25] usb 6-1: USB disconnect, device number 48 [ 943.120038][ T29] audit: type=1326 audit(1735540034.941:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14968 comm="syz.5.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd747185d29 code=0x7ffc0000 [ 943.336037][ T29] audit: type=1326 audit(1735540034.941:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14968 comm="syz.5.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd747185d29 code=0x7ffc0000 [ 943.867834][ T29] audit: type=1400 audit(1735540035.661:1727): avc: denied { watch watch_reads } for pid=14977 comm="syz.3.2341" path=2F6D656D66643A2D42D54E49C56A9A08202864656C6574656429 dev="tmpfs" ino=373 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 945.285038][ T29] audit: type=1400 audit(1735540036.989:1728): avc: denied { setopt } for pid=14990 comm="syz.2.2346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 946.107360][T14999] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2349'. [ 946.116695][T14999] unsupported nlmsg_type 40 [ 946.387738][T15001] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 947.471151][T15024] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2356'. [ 948.422635][ T29] audit: type=1400 audit(1735540039.113:1729): avc: denied { bind } for pid=15019 comm="syz.2.2355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 948.523865][T15029] wg2: left promiscuous mode [ 948.528481][T15029] wg2: left allmulticast mode [ 948.796932][T15034] ptrace attach of "./syz-executor exec"[5815] was attempted by "./syz-executor exec"[15034] [ 949.288724][T15033] wg2: entered promiscuous mode [ 949.293653][T15033] wg2: entered allmulticast mode [ 949.333965][T15036] wg2: left promiscuous mode [ 949.339410][T15036] wg2: left allmulticast mode [ 949.446467][ T5898] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 949.611386][T15038] ptrace attach of "./syz-executor exec"[5814] was attempted by "./syz-executor exec"[15038] [ 949.651314][ T5898] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 949.660595][ T5898] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.669141][ T5898] usb 7-1: Product: syz [ 949.701438][ T5898] usb 7-1: Manufacturer: syz [ 949.717719][ T5898] usb 7-1: SerialNumber: syz [ 949.737928][ T5898] usb 7-1: config 0 descriptor?? [ 950.665842][ T5898] usb 7-1: Firmware: major: 0, minor: 248, hardware type: RZUSB (3) [ 950.674953][ T5898] usb 7-1: Firmware: build / [ 976.693331][T15358] dump_stack_lvl+0x16c/0x1f0 [ 976.698023][T15358] should_fail_ex+0x497/0x5b0 [ 976.702711][T15358] ? fs_reclaim_acquire+0xae/0x150 [ 976.707828][T15358] should_failslab+0xc2/0x120 [ 976.712516][T15358] __kmalloc_node_noprof+0xd1/0x510 [ 976.717729][T15358] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 976.723203][T15358] __kvmalloc_node_noprof+0xad/0x1a0 [ 976.728496][T15358] ? __pfx_ipip6_tunnel_setup+0x10/0x10 [ 976.734051][T15358] alloc_netdev_mqs+0xbbc/0x1510 [ 976.739008][T15358] ipip6_tunnel_locate+0x47e/0x870 [ 976.744141][T15358] ? __pfx_ipip6_tunnel_locate+0x10/0x10 [ 976.749783][T15358] ? bpf_lsm_capable+0x9/0x10 [ 976.754466][T15358] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 976.760377][T15358] ipip6_tunnel_ctl+0x44b/0x780 [ 976.765676][T15358] ip_tunnel_siocdevprivate+0x109/0x1b0 [ 976.771235][T15358] ? __pfx_ip_tunnel_siocdevprivate+0x10/0x10 [ 976.777319][T15358] ? __sanitizer_cov_trace_switch+0x16/0x90 [ 976.783229][T15358] ipip6_tunnel_siocdevprivate+0x3ba/0x16e0 [ 976.789148][T15358] ? __pfx_ipip6_tunnel_siocdevprivate+0x10/0x10 [ 976.795486][T15358] ? lock_acquire.part.0+0x11b/0x380 [ 976.800794][T15358] ? __mutex_trylock_common+0xea/0x250 [ 976.806260][T15358] ? __pfx___mutex_trylock_common+0x10/0x10 [ 976.812159][T15358] ? dev_ioctl+0x1a1/0x10c0 [ 976.816673][T15358] ? full_name_hash+0xbc/0x110 [ 976.821458][T15358] ? dev_ifsioc+0x529/0x10b0 [ 976.826057][T15358] dev_ifsioc+0x529/0x10b0 [ 976.830486][T15358] ? __pfx_dev_ifsioc+0x10/0x10 [ 976.835367][T15358] ? __pfx___mutex_lock+0x10/0x10 [ 976.840402][T15358] ? irqentry_exit+0x3b/0x90 [ 976.845027][T15358] dev_ioctl+0x1b2/0x10c0 [ 976.849371][T15358] sock_ioctl+0x5b9/0x6c0 [ 976.853716][T15358] ? __pfx_sock_ioctl+0x10/0x10 [ 976.858582][T15358] ? selinux_file_ioctl+0x180/0x270 [ 976.863791][T15358] ? selinux_file_ioctl+0xb4/0x270 [ 976.868916][T15358] ? __pfx_sock_ioctl+0x10/0x10 [ 976.873777][T15358] __x64_sys_ioctl+0x190/0x200 [ 976.878559][T15358] do_syscall_64+0xcd/0x250 [ 976.883074][T15358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.888977][T15358] RIP: 0033:0x7fd747185d29 [ 976.893391][T15358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 976.913004][T15358] RSP: 002b:00007fd748009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 976.921439][T15358] RAX: ffffffffffffffda RBX: 00007fd747376160 RCX: 00007fd747185d29 [ 976.929411][T15358] RDX: 00000000200001c0 RSI: 00000000000089f1 RDI: 0000000000000003 [ 976.937373][T15358] RBP: 00007fd748009090 R08: 0000000000000000 R09: 0000000000000000 [ 976.945332][T15358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 976.953284][T15358] R13: 0000000000000000 R14: 00007fd747376160 R15: 00007ffe3544d548 [ 976.961245][T15358] [ 976.966192][T15355] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2440'. [ 976.975247][T15355] netlink: 348 bytes leftover after parsing attributes in process `syz.5.2440'. [ 976.986848][ T29] audit: type=1400 audit(1735540066.314:1735): avc: denied { write } for pid=15352 comm="syz.5.2440" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 977.060674][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 977.076221][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 977.091398][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 977.106571][T15348] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 977.131823][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 977.141256][ T5831] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 977.148851][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 977.441297][ T4129] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.489333][T15357] wlan1 speed is unknown, defaulting to 1000 [ 977.799567][T15369] atomic_op ffff888068357198 conn xmit_atomic 0000000000000000 [ 978.315925][ T5831] Bluetooth: hci4: Invalid connection link type handle 0x00c9 [ 978.480290][ T4129] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.256697][ T4129] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.307739][ T5831] Bluetooth: hci1: command tx timeout [ 979.430137][ T4129] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.605854][T15357] chnl_net:caif_netlink_parms(): no params data found [ 979.791762][ T4129] bridge_slave_1: left allmulticast mode [ 979.918712][T15384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 980.359567][ T4129] bridge_slave_1: left promiscuous mode [ 980.376980][ T4129] bridge0: port 2(bridge_slave_1) entered disabled state [ 980.392497][ T4129] bridge_slave_0: left allmulticast mode [ 980.398429][ T4129] bridge_slave_0: left promiscuous mode [ 980.405375][ T4129] bridge0: port 1(bridge_slave_0) entered disabled state [ 980.449599][T15378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 981.595209][ T5831] Bluetooth: hci1: command tx timeout [ 981.644926][T15394] ptrace attach of "./syz-executor exec"[5814] was attempted by "./syz-executor exec"[15394] [ 983.485135][ T4129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 983.497638][ T4129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 983.510903][ T4129] bond0 (unregistering): Released all slaves [ 983.614106][T15357] bridge0: port 1(bridge_slave_0) entered blocking state [ 983.628953][T15357] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.636404][T15357] bridge_slave_0: entered allmulticast mode [ 983.644110][T15357] bridge_slave_0: entered promiscuous mode [ 983.699200][T15357] bridge0: port 2(bridge_slave_1) entered blocking state [ 983.710248][T15357] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.718604][T15357] bridge_slave_1: entered allmulticast mode [ 983.726256][T15357] bridge_slave_1: entered promiscuous mode [ 983.756038][ T5831] Bluetooth: hci1: command tx timeout [ 983.812700][T15357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 983.826294][T15357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 983.952585][T15357] team0: Port device team_slave_0 added [ 984.017795][T15357] team0: Port device team_slave_1 added [ 984.276464][T15423] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 984.509465][ T4129] hsr_slave_0: left promiscuous mode [ 984.532025][ T4129] hsr_slave_1: left promiscuous mode [ 984.548904][ T4129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 984.562839][ T4129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 984.571760][ T4129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 984.583883][ T4129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 984.606422][ T4129] veth1_macvtap: left promiscuous mode [ 984.646854][ T4129] veth0_macvtap: left promiscuous mode [ 984.760845][ T4129] veth1_vlan: left promiscuous mode [ 984.881159][ T4129] veth0_vlan: left promiscuous mode [ 986.019219][ T5831] Bluetooth: hci1: command tx timeout [ 987.006346][T11337] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 987.219528][T11337] usb 3-1: Using ep0 maxpacket: 16 [ 987.226347][T11337] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 987.241516][T11337] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 987.307900][T11337] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 987.317522][T11337] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.325839][T11337] usb 3-1: Product: syz [ 987.330270][T11337] usb 3-1: Manufacturer: syz [ 987.335058][T11337] usb 3-1: SerialNumber: syz [ 987.827455][T11337] usb 3-1: 0:2 : does not exist [ 987.907668][T11337] usb 3-1: USB disconnect, device number 50 [ 989.908067][ T4129] team0 (unregistering): Port device team_slave_1 removed [ 989.941008][T15482] ptrace attach of "./syz-executor exec"[5815] was attempted by "./syz-executor exec"[15482] [ 990.241786][ T4129] team0 (unregistering): Port device team_slave_0 removed [ 990.935210][ T5869] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 991.110177][ T5869] usb 6-1: Using ep0 maxpacket: 16 [ 991.120168][ T5869] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 991.136849][ T5869] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 991.187046][ T5869] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 991.203846][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.212120][ T5869] usb 6-1: Product: syz [ 991.216633][ T5869] usb 6-1: Manufacturer: syz [ 991.224964][ T5869] usb 6-1: SerialNumber: syz [ 991.475918][T15477] wg2: left promiscuous mode [ 991.484491][T15477] wg2: left allmulticast mode [ 991.527750][T15357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 991.535949][T15357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 991.564561][T15357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 991.602490][T15357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 991.632973][T15357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 991.658909][ C1] vkms_vblank_simulate: vblank timer overrun [ 991.675322][ T5869] usb 6-1: 0:2 : does not exist [ 991.691466][T15357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 991.714665][ T5869] usb 6-1: USB disconnect, device number 50 [ 991.830954][T15357] hsr_slave_0: entered promiscuous mode [ 991.853641][T15357] hsr_slave_1: entered promiscuous mode [ 991.866706][T15357] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 991.882571][T15357] Cannot create hsr debugfs directory [ 991.944931][T11337] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 992.079802][T15357] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 992.092895][T15357] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 992.102142][T15357] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 992.114419][T15357] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 992.115369][T11337] usb 4-1: Using ep0 maxpacket: 8 [ 992.132529][T11337] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 992.142657][T11337] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.151214][T11337] usb 4-1: Product: syz [ 992.155773][T11337] usb 4-1: Manufacturer: syz [ 992.161742][T11337] usb 4-1: SerialNumber: syz [ 992.168800][T11337] usb 4-1: config 0 descriptor?? [ 992.176789][T11337] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 992.200740][ T7411] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 992.218393][T15357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 992.247623][T15357] 8021q: adding VLAN 0 to HW filter on device team0 [ 992.281046][ T4539] bridge0: port 1(bridge_slave_0) entered blocking state [ 992.288228][ T4539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 992.303504][ T4539] bridge0: port 2(bridge_slave_1) entered blocking state [ 992.310677][ T4539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 992.385788][ T7411] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 992.404031][ T7411] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 992.419220][ T7411] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.429747][ T7411] usb 1-1: config 0 descriptor?? [ 992.581806][T15357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 992.663633][ T7411] usbhid 1-1:0.0: can't add hid device: -71 [ 992.670279][ T7411] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 992.687912][ T7411] usb 1-1: USB disconnect, device number 55 [ 993.173811][T11337] gspca_sunplus: reg_w_riv err -110 [ 993.189597][T11337] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 993.216111][T15357] veth0_vlan: entered promiscuous mode [ 993.237748][ T7411] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 993.262448][T15357] veth1_vlan: entered promiscuous mode [ 993.385036][T15357] veth0_macvtap: entered promiscuous mode [ 993.418329][T15357] veth1_macvtap: entered promiscuous mode [ 993.430627][ T7411] usb 1-1: Using ep0 maxpacket: 16 [ 993.445941][T15357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 993.471253][T15357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.471393][ T7411] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 993.499203][ T7411] usb 1-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 993.509017][ T7411] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.516960][T15357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 993.524601][ T7411] usb 1-1: config 0 descriptor?? [ 993.545334][T15357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.592890][T15357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 993.606658][T15357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.608199][ T29] audit: type=1400 audit(1735540082.188:1736): avc: denied { mount } for pid=15518 comm="syz.5.2475" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 993.634150][T15357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 993.672606][T15519] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2475'. [ 993.699609][T15357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 993.737716][T15357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.750721][ T29] audit: type=1400 audit(1735540082.309:1737): avc: denied { unmount } for pid=5957 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 993.776397][T15357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 993.788058][T15357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.799962][T15357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 993.822842][T15357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.848032][T15357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 993.879132][T15357] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.898723][T15357] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.928353][T15357] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.951953][T15357] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.970856][ T7411] mcp2200 0003:04D8:00DF.0027: USB HID v0.05 Device [HID 04d8:00df] on usb-dummy_hcd.0-1/input0 [ 994.269607][T14661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 994.287915][T14661] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 994.411723][T15525] ptrace attach of "./syz-executor exec"[5957] was attempted by "./syz-executor exec"[15525] [ 994.429926][ T4539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 994.430672][ T5869] usb 1-1: USB disconnect, device number 56 [ 994.438990][ T4539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 994.952629][T15529] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2436'. [ 995.537023][ T5869] usb 4-1: USB disconnect, device number 51 [ 996.016015][T15535] syz.0.2479 (15535): drop_caches: 2 [ 996.022259][T15535] syz.0.2479 (15535): drop_caches: 2 [ 996.285892][T15534] syz.0.2479 (15534): drop_caches: 2 [ 996.895662][T15540] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 997.105048][T15548] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 998.782298][T15561] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 999.526416][ T5831] Bluetooth: hci5: sending frame failed (-49) [ 999.548739][T13532] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 999.599367][T15571] can0: slcan on ptm0. [ 999.641316][ T5869] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 999.662698][ T5898] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 999.844509][ T5898] usb 4-1: Using ep0 maxpacket: 8 [ 999.872872][ T5898] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 999.929240][ T5869] usb 1-1: Using ep0 maxpacket: 8 [ 999.971643][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 1000.020575][ T5898] usb 4-1: Product: syz [ 1000.039004][ T5869] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 1000.049658][ T5898] usb 4-1: Manufacturer: syz [ 1000.054551][ T5898] usb 4-1: SerialNumber: syz [ 1000.102547][ T5898] usb 4-1: config 0 descriptor?? [ 1000.104612][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.117888][ T5898] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1000.293477][ T5869] usb 1-1: Product: syz [ 1000.302960][ T5869] usb 1-1: Manufacturer: syz [ 1000.309102][ T5869] usb 1-1: SerialNumber: syz [ 1000.316505][ T5869] usb 1-1: config 0 descriptor?? [ 1000.325210][ T5869] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1001.824803][ T5869] gspca_sunplus: reg_w_riv err -110 [ 1001.830230][ T5869] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 1001.905584][ T5898] gspca_sq905: sq905_command: usb_control_msg failed 2 (-110) [ 1001.913215][ T5898] sq905 4-1:0.0: probe with driver sq905 failed with error -110 [ 1002.047183][ T46] usb 4-1: USB disconnect, device number 52 [ 1002.190324][ T5898] usb 1-1: USB disconnect, device number 57 [ 1002.239045][T15572] can0 (unregistered): slcan off ptm0. [ 1003.091413][T15598] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1003.688927][ T29] audit: type=1326 audit(1735540091.598:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15601 comm="syz.2.2498" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6d88985d29 code=0x0 [ 1004.091496][T15625] netlink: 1280 bytes leftover after parsing attributes in process `syz.7.2503'. [ 1004.100819][T15625] net_ratelimit: 22 callbacks suppressed [ 1004.100866][T15625] openvswitch: netlink: Flow actions attr not present in new flow. [ 1005.286325][T15643] ptrace attach of "./syz-executor exec"[5815] was attempted by "./syz-executor exec"[15643] [ 1005.510861][ T5898] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1005.564917][T15650] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2509'. [ 1005.670727][ T5898] usb 8-1: Using ep0 maxpacket: 8 [ 1005.680168][ T5898] usb 8-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 1005.689609][ T5898] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.703511][ T5898] usb 8-1: Product: syz [ 1005.707829][ T5898] usb 8-1: Manufacturer: syz [ 1005.712930][ T5898] usb 8-1: SerialNumber: syz [ 1005.734406][ T5898] usb 8-1: config 0 descriptor?? [ 1005.760674][ T5898] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1007.084755][ T5898] gspca_sunplus: reg_w_riv err -110 [ 1007.093276][ T5898] sunplus 8-1:0.0: probe with driver sunplus failed with error -110 [ 1008.515661][ T29] audit: type=1326 audit(1735540096.144:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15668 comm="syz.0.2515" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efc32985d29 code=0x0 [ 1010.259186][ T5898] usb 8-1: USB disconnect, device number 2 [ 1010.288701][T15695] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1010.609937][ T5870] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1010.797952][ T5870] usb 4-1: Using ep0 maxpacket: 16 [ 1010.807624][ T5870] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1010.820558][ T5870] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1010.841550][T11337] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1010.844982][ T5870] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1010.895664][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.945135][ T5870] usb 4-1: Product: syz [ 1011.016087][ T7411] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 1011.117936][T11337] usb 1-1: Using ep0 maxpacket: 32 [ 1011.121768][ T5870] usb 4-1: Manufacturer: syz [ 1011.160031][T11337] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1011.165649][ T5870] usb 4-1: SerialNumber: syz [ 1011.171919][T11337] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1011.277183][T11337] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1011.280042][ T7411] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1011.317165][T11337] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1011.324734][ T7411] usb 3-1: not running at top speed; connect to a high speed hub [ 1011.354399][T11337] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1011.372820][ T7411] usb 3-1: config 178 has an invalid interface number: 135 but max is 0 [ 1011.393756][ T7411] usb 3-1: config 178 has no interface number 0 [ 1011.400175][T11337] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1011.411033][ T7411] usb 3-1: config 178 interface 135 has no altsetting 0 [ 1011.442187][T11337] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1011.442915][ T7411] usb 3-1: New USB device found, idVendor=04a5, idProduct=300c, bcdDevice= b.4c [ 1011.451607][T11337] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.451635][T11337] usb 1-1: Product: syz [ 1011.451652][T11337] usb 1-1: Manufacturer: syz [ 1011.451670][T11337] usb 1-1: SerialNumber: syz [ 1011.453364][T11337] usb 1-1: config 0 descriptor?? [ 1011.516925][ T7411] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.644238][ T7411] usb 3-1: SerialNumber: ଗ墓᷃餕ꛅ繏깡윯ꪣꥺꋾ乧ǰḩᭆ໢뽺И䢎ᅓ㴜㫘䤏悊둚ᭌ异싩ᘤ㜚Ĭ㢝틽臡멒죒뀝㗯嘖桦瘭ᰵᒫ矠㉻鐣既췯英ŋ숐꤉ࣦ戧賊ﲐᢠ핋吒滥呤崛쯟첽增☫多댷픲浇뎩⮯樲脺鏿Ḵ쵒䁧퐥⹊㝭趛巾廟闸굁င问翥ꎑ竨ᘕ [ 1011.759765][T15704] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1011.798695][ T5870] usb 4-1: 0:2 : does not exist [ 1011.824080][ T5870] usb 4-1: USB disconnect, device number 53 [ 1012.212255][T11337] usb 1-1: USB disconnect, device number 58 [ 1012.438600][T15713] wlan1 speed is unknown, defaulting to 1000 [ 1012.716388][T15720] ptrace attach of "./syz-executor exec"[5957] was attempted by "./syz-executor exec"[15720] [ 1013.202353][T15725] atomic_op ffff88805ce80198 conn xmit_atomic 0000000000000000 [ 1013.509086][ T29] audit: type=1400 audit(1735540100.812:1740): avc: denied { setopt } for pid=15727 comm="syz.0.2530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1013.814193][ T5871] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 1013.882747][ T29] audit: type=1326 audit(1735540101.148:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15731 comm="syz.7.2531" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5df4d85d29 code=0x0 [ 1014.065848][ T5871] usb 1-1: too many endpoints for config 0 interface 0 altsetting 254: 33, using maximum allowed: 30 [ 1014.078028][ T5871] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1014.107951][ T7411] gspca_main: spca500-2.14.0 probing 04a5:300c [ 1014.114292][ T5871] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1014.137993][ T7411] usb 3-1: USB disconnect, device number 51 [ 1014.148215][ T5871] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 1014.206502][ T5871] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1014.237857][ T5871] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 1014.258081][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.289543][ T5871] usb 1-1: config 0 descriptor?? [ 1014.926107][ T5871] aquacomputer_d5next 0003:0C70:F0BD.0028: hidraw0: USB HID v0.03 Device [HID 0c70:f0bd] on usb-dummy_hcd.0-1/input0 [ 1015.085037][T15743] FAULT_INJECTION: forcing a failure. [ 1015.085037][T15743] name failslab, interval 1, probability 0, space 0, times 0 [ 1015.102248][T15743] CPU: 1 UID: 0 PID: 15743 Comm: syz.2.2534 Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 [ 1015.113116][T15743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1015.123210][T15743] Call Trace: [ 1015.126508][T15743] [ 1015.129456][T15743] dump_stack_lvl+0x16c/0x1f0 [ 1015.134165][T15743] should_fail_ex+0x497/0x5b0 [ 1015.138868][T15743] ? fs_reclaim_acquire+0xae/0x150 [ 1015.144002][T15743] should_failslab+0xc2/0x120 [ 1015.148684][T15743] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1015.154053][T15743] ? security_file_alloc+0x34/0x2b0 [ 1015.159254][T15743] security_file_alloc+0x34/0x2b0 [ 1015.164273][T15743] init_file+0x93/0x480 [ 1015.168423][T15743] alloc_empty_file+0x91/0x1e0 [ 1015.173180][T15743] path_openat+0xe1/0x2d60 [ 1015.177601][T15743] ? hlock_class+0x4e/0x130 [ 1015.182120][T15743] ? __lock_acquire+0x15a9/0x3c40 [ 1015.187164][T15743] ? __pfx_path_openat+0x10/0x10 [ 1015.192109][T15743] ? __pfx___lock_acquire+0x10/0x10 [ 1015.197306][T15743] ? lock_acquire.part.0+0x11b/0x380 [ 1015.202586][T15743] ? find_held_lock+0x2d/0x110 [ 1015.207348][T15743] do_filp_open+0x20c/0x470 [ 1015.211844][T15743] ? __pfx_do_filp_open+0x10/0x10 [ 1015.216863][T15743] ? find_held_lock+0x2d/0x110 [ 1015.221656][T15743] ? alloc_fd+0x41f/0x760 [ 1015.226000][T15743] do_sys_openat2+0x17a/0x1e0 [ 1015.230685][T15743] ? __pfx_do_sys_openat2+0x10/0x10 [ 1015.235889][T15743] ? __fget_files+0x206/0x3a0 [ 1015.240568][T15743] __x64_sys_openat+0x175/0x210 [ 1015.245445][T15743] ? __pfx___x64_sys_openat+0x10/0x10 [ 1015.250834][T15743] ? ksys_write+0x1ba/0x250 [ 1015.255338][T15743] do_syscall_64+0xcd/0x250 [ 1015.259845][T15743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.265741][T15743] RIP: 0033:0x7f6d88985d29 [ 1015.270161][T15743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1015.289779][T15743] RSP: 002b:00007f6d89719038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1015.298189][T15743] RAX: ffffffffffffffda RBX: 00007f6d88b75fa0 RCX: 00007f6d88985d29 [ 1015.306158][T15743] RDX: 0000000000021800 RSI: 0000000020000080 RDI: 00000000ffffff9c [ 1015.314121][T15743] RBP: 00007f6d89719090 R08: 0000000000000000 R09: 0000000000000000 [ 1015.322085][T15743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1015.330046][T15743] R13: 0000000000000000 R14: 00007f6d88b75fa0 R15: 00007ffea06aa9a8 [ 1015.338021][T15743] [ 1015.348842][ T5871] usb 1-1: USB disconnect, device number 59 [ 1015.697313][T15746] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1017.006254][T15761] atomic_op ffff8880782cc998 conn xmit_atomic 0000000000000000 [ 1017.375423][T15768] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2542'. [ 1017.627588][T11337] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1018.335029][T11337] usb 4-1: Using ep0 maxpacket: 16 [ 1018.368800][T11337] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1018.368827][T11337] usb 4-1: config 0 has no interfaces? [ 1018.375565][T11337] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1018.412823][T11337] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.412853][T11337] usb 4-1: Product: syz [ 1018.412872][T11337] usb 4-1: Manufacturer: syz [ 1018.412890][T11337] usb 4-1: SerialNumber: syz [ 1018.423698][T11337] usb 4-1: config 0 descriptor?? [ 1018.626006][ T29] audit: type=1326 audit(1735540105.592:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15775 comm="syz.2.2543" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6d88985d29 code=0x0 [ 1018.668292][T15757] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2539'. [ 1018.950993][T15783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1019.512208][T15779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1019.618706][ T9313] usb 4-1: USB disconnect, device number 54 [ 1019.769561][T15786] netlink: 'syz.7.2546': attribute type 4 has an invalid length. [ 1019.827829][T15786] netlink: 'syz.7.2546': attribute type 4 has an invalid length. [ 1020.032147][T15788] ptrace attach of "./syz-executor exec"[5815] was attempted by "./syz-executor exec"[15788] [ 1020.478894][T15802] atomic_op ffff888035d78198 conn xmit_atomic 0000000000000000 [ 1021.922546][T15815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1022.284189][ T25] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1022.370851][T15822] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1022.588617][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1022.600958][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1022.613276][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1022.625567][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1022.637816][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1022.650037][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1022.662329][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1022.674543][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1022.686792][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1022.699022][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1023.780186][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1023.786904][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1023.827969][ T29] audit: type=1400 audit(1735540110.456:1743): avc: denied { connect } for pid=15816 comm="syz.3.2555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1024.201240][T15831] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1027.939223][ C1] net_ratelimit: 29837 callbacks suppressed [ 1027.939246][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1027.957317][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1027.969641][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1027.981890][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1027.994039][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1028.006166][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1028.018266][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1028.030379][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1028.042535][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1028.054693][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1033.295243][ C1] net_ratelimit: 39521 callbacks suppressed [ 1033.295263][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1033.313404][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1033.325647][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1033.337814][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1033.350012][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1033.362256][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1033.374410][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1033.386540][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1033.398670][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1033.410737][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1037.453846][ C1] sched: DL replenish lagged too much [ 1038.651397][ C1] net_ratelimit: 36845 callbacks suppressed [ 1038.651419][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1038.669552][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1038.681788][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1038.694083][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1038.706420][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1038.718784][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1038.731111][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1038.743495][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1038.755887][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1038.768214][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1039.013940][T15872] atomic_op ffff888033eaf198 conn xmit_atomic 0000000000000000 [ 1039.903662][T15875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1040.661890][T15865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1044.007297][ C1] net_ratelimit: 30900 callbacks suppressed [ 1044.007312][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1044.025418][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1044.037518][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1044.049657][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1044.061868][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1044.074027][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1044.086154][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1044.098325][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1044.110402][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1044.122496][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1049.363225][ C1] net_ratelimit: 37833 callbacks suppressed [ 1049.363241][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1049.381314][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1049.393700][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1049.405879][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1049.418111][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1049.430257][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1049.442440][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1049.454630][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1049.466736][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1049.478920][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1054.719291][ C1] net_ratelimit: 38481 callbacks suppressed [ 1054.719311][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1054.737437][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1054.749667][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1054.761885][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1054.774090][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1054.786315][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1054.798474][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1054.810584][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1054.822807][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1054.834988][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1060.075304][ C1] net_ratelimit: 38445 callbacks suppressed [ 1060.075319][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1060.093504][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1060.105798][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1060.118111][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1060.130319][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1060.142424][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1060.154565][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1060.166776][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1060.179030][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1060.191170][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1065.431394][ C1] net_ratelimit: 38696 callbacks suppressed [ 1065.431416][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1065.449601][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1065.461765][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1065.473951][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1065.486155][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1065.498245][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1065.510385][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1065.522551][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1065.534750][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1065.546892][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1070.787300][ C1] net_ratelimit: 38612 callbacks suppressed [ 1070.787315][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1070.805444][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1070.817652][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1070.829767][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1070.841978][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1070.854070][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1070.866196][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1070.878420][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1070.890615][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1070.902741][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1076.143329][ C1] net_ratelimit: 38820 callbacks suppressed [ 1076.143353][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1076.143421][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1076.149587][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1076.161506][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1076.173307][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1076.185390][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1076.197273][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1076.209143][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1076.221113][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1076.232949][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1081.499374][ C0] net_ratelimit: 39073 callbacks suppressed [ 1081.499398][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1081.499404][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1081.499604][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1081.505583][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1081.517528][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1081.529472][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1081.541377][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1081.553266][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1081.565104][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1081.577033][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1086.855237][ C0] net_ratelimit: 39225 callbacks suppressed [ 1086.855260][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1086.855355][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1086.861467][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1086.873591][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1086.885614][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1086.897552][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1086.909366][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1086.921294][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1086.933322][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1086.945234][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1092.211225][ C1] net_ratelimit: 39065 callbacks suppressed [ 1092.211249][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1092.211349][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1092.217501][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1092.229380][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1092.241259][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1092.253237][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1092.265090][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1092.277116][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1092.289016][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1092.300875][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1097.567436][ C0] net_ratelimit: 39201 callbacks suppressed [ 1097.567461][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1097.567641][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1097.573671][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1097.585570][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1097.597482][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1097.609452][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1097.621348][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1097.633145][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1097.645154][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1097.656969][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1102.923260][ C1] net_ratelimit: 39088 callbacks suppressed [ 1102.923283][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1102.923384][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1102.929479][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1102.941470][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1102.953317][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1102.965333][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1102.977256][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1102.989152][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1103.000949][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1103.012997][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1108.279358][ C1] net_ratelimit: 39195 callbacks suppressed [ 1108.279381][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1108.279615][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1108.285508][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1108.297588][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1108.309517][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1108.321375][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1108.333291][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1108.345294][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1108.357160][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1108.369045][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1113.635320][ C1] net_ratelimit: 39191 callbacks suppressed [ 1113.635343][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1113.635354][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1113.635625][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1113.641594][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1113.653478][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1113.665307][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1113.677243][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1113.689384][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1113.701269][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1113.713192][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1118.991277][ C0] net_ratelimit: 39230 callbacks suppressed [ 1118.991300][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1118.991543][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1118.997451][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1119.009332][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1119.021356][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1119.033388][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1119.045327][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1119.057237][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1119.069077][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1119.080979][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1124.347308][ C1] net_ratelimit: 39002 callbacks suppressed [ 1124.347330][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1124.347402][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1124.353480][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1124.365542][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1124.377405][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1124.389307][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1124.401199][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1124.413083][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1124.424972][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1124.436997][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1129.703236][ C1] net_ratelimit: 43149 callbacks suppressed [ 1129.703259][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1129.703279][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1129.703536][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1129.709437][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1129.721367][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1129.733300][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1129.745998][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1129.757105][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1129.768938][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1129.780847][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1135.059194][ C1] net_ratelimit: 41956 callbacks suppressed [ 1135.059218][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1135.059256][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1135.065470][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1135.077363][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1135.089178][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1135.101217][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1135.113208][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1135.125016][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1135.136910][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1135.148784][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1140.415206][ C1] net_ratelimit: 39401 callbacks suppressed [ 1140.415229][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1140.415391][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1140.421455][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1140.433374][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1140.445185][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1140.457194][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1140.469068][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1140.480960][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1140.492900][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1140.504734][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1145.771160][ C1] net_ratelimit: 38131 callbacks suppressed [ 1145.771184][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1145.771341][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1145.777384][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1145.789382][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1145.801222][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1145.813251][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1145.825201][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1145.837038][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1145.848872][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1145.860889][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1151.127255][ C1] net_ratelimit: 39526 callbacks suppressed [ 1151.127277][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1151.127467][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1151.133430][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1151.145433][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1151.157289][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1151.169450][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1151.181405][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1151.193255][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1151.205024][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1151.217049][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1155.097980][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1155.119198][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1156.337807][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1156.351848][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1156.483241][ C0] net_ratelimit: 45608 callbacks suppressed [ 1156.483263][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1156.483282][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1156.489420][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1156.501320][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1156.513215][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1156.525156][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1156.536992][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1156.548913][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1156.560881][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1156.572697][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1158.700123][ T25] usb 1-1: device not accepting address 60, error -71 [ 1158.738849][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1158.745841][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P15855/1:b..l [ 1158.754628][ C1] rcu: (detected by 1, t=10503 jiffies, g=62641, q=403 ncpus=2) [ 1158.762361][ C1] task:syz.5.2563 state:R running task stack:25968 pid:15855 tgid:15850 ppid:5957 flags:0x00004006 [ 1158.776149][ C1] Call Trace: [ 1158.779451][ C1] [ 1158.782403][ C1] __schedule+0xe58/0x5ad0 [ 1158.786853][ C1] ? __pfx_mark_lock+0x10/0x10 [ 1158.791638][ C1] ? __pfx___schedule+0x10/0x10 [ 1158.796519][ C1] ? mark_held_locks+0x9f/0xe0 [ 1158.801308][ C1] preempt_schedule_irq+0x51/0x90 [ 1158.806361][ C1] irqentry_exit+0x36/0x90 [ 1158.810798][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1158.816802][ C1] RIP: 0010:lock_release+0x170/0x6f0 [ 1158.822107][ C1] Code: f6 0f 85 8e 02 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 e2 48 c1 ea 03 80 3c 02 00 0f 85 19 05 00 00 49 81 3c 24 a0 17 7c 93 <0f> 84 65 02 00 00 9c 8f 04 24 fa 48 c7 c7 a0 dc 6c 8b e8 39 15 b3 [ 1158.841742][ C1] RSP: 0018:ffffc90004b27630 EFLAGS: 00000206 [ 1158.847833][ C1] RAX: dffffc0000000000 RBX: 1ffff92000964ec8 RCX: ffffffff8176b9e9 [ 1158.855817][ C1] RDX: 1ffffffff1c37720 RSI: 0000000000000000 RDI: ffff88804da18adc [ 1158.863805][ C1] RBP: ffffffff905f69f4 R08: 0000000000000000 R09: fffffbfff20be6da [ 1158.871793][ C1] R10: ffffffff905f36d7 R11: 0000000000000001 R12: ffffffff8e1bb900 [ 1158.879783][ C1] R13: ffffffffffffff80 R14: ffff88804da18000 R15: fff0000000000fff [ 1158.887779][ C1] ? lock_release+0xa9/0x6f0 [ 1158.892403][ C1] ? lock_acquire+0x2f/0xb0 [ 1158.896929][ C1] ? __handle_mm_fault+0x100f/0x2a40 [ 1158.902238][ C1] ? __pfx_lock_release+0x10/0x10 [ 1158.907288][ C1] ? rcu_is_watching+0x12/0xc0 [ 1158.912095][ C1] ? ___pte_offset_map+0x1b9/0x540 [ 1158.917260][ C1] __handle_mm_fault+0x1014/0x2a40 [ 1158.922412][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 1158.927902][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1158.933578][ C1] ? find_vma+0xc0/0x140 [ 1158.937836][ C1] ? __pfx_find_vma+0x10/0x10 [ 1158.942530][ C1] handle_mm_fault+0x3fa/0xaa0 [ 1158.947325][ C1] do_user_addr_fault+0x7a3/0x13f0 [ 1158.952549][ C1] exc_page_fault+0x5c/0xc0 [ 1158.957078][ C1] asm_exc_page_fault+0x26/0x30 [ 1158.961957][ C1] RIP: 0010:rep_movs_alternative+0x30/0x70 [ 1158.967785][ C1] Code: f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 [ 1158.987506][ C1] RSP: 0018:ffffc90004b27a58 EFLAGS: 00050206 [ 1158.993595][ C1] RAX: 0000000000000001 RBX: 00000000201fb000 RCX: 0000000000000038 [ 1159.001583][ C1] RDX: fffff52000964f5c RSI: 00000000201fb000 RDI: ffffc90004b27aa8 [ 1159.009581][ C1] RBP: 0000000000000038 R08: 0000000000000001 R09: fffff52000964f5b [ 1159.017572][ C1] R10: ffffc90004b27adf R11: 0000000000000000 R12: 0000000000000000 [ 1159.025563][ C1] R13: ffffc90004b27aa8 R14: ffffc90004b27b90 R15: ffffc90004b27aa8 [ 1159.033571][ C1] _copy_from_user+0x9a/0xd0 [ 1159.038203][ C1] copy_msghdr_from_user+0x99/0x160 [ 1159.043450][ C1] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1159.049291][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 1159.054526][ C1] ___sys_recvmsg+0xdc/0x1a0 [ 1159.059141][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 1159.064359][ C1] ? find_held_lock+0x2d/0x110 [ 1159.069199][ C1] ? __pfx___might_resched+0x10/0x10 [ 1159.074513][ C1] ? __might_fault+0xe3/0x190 [ 1159.079225][ C1] do_recvmmsg+0x2f8/0x740 [ 1159.083669][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 1159.088626][ C1] ? do_user_addr_fault+0xdc7/0x13f0 [ 1159.093935][ C1] ? reacquire_held_locks+0x20b/0x4c0 [ 1159.099342][ C1] ? do_user_addr_fault+0xe50/0x13f0 [ 1159.104654][ C1] ? __pfx_lock_release+0x10/0x10 [ 1159.109705][ C1] __x64_sys_recvmmsg+0x239/0x290 [ 1159.114757][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1159.120329][ C1] ? do_user_addr_fault+0x83d/0x13f0 [ 1159.125647][ C1] do_syscall_64+0xcd/0x250 [ 1159.130185][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1159.136540][ C1] RIP: 0033:0x7fd747185d29 [ 1159.140969][ C1] RSP: 002b:00007fd748009038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1159.149404][ C1] RAX: ffffffffffffffda RBX: 00007fd747376160 RCX: 00007fd747185d29 [ 1159.157396][ C1] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1159.165389][ C1] RBP: 00007fd747201b08 R08: 0000000000000000 R09: 0000000000000000 [ 1159.173393][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1159.181394][ C1] R13: 0000000000000001 R14: 00007fd747376160 R15: 00007ffe3544d548 [ 1159.189408][ C1] [ 1159.192440][ C1] rcu: rcu_preempt kthread starved for 9438 jiffies! g62641 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1159.203572][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1159.213555][ C1] rcu: RCU grace-period kthread stack dump: [ 1159.219448][ C1] task:rcu_preempt state:R running task stack:27104 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 1159.231251][ C1] Call Trace: [ 1159.234536][ C1] [ 1159.237479][ C1] __schedule+0xe58/0x5ad0 [ 1159.241934][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 1159.247167][ C1] ? __pfx___schedule+0x10/0x10 [ 1159.252039][ C1] ? schedule+0x298/0x350 [ 1159.256390][ C1] ? __pfx_lock_release+0x10/0x10 [ 1159.261473][ C1] ? lock_acquire+0x2f/0xb0 [ 1159.265995][ C1] ? schedule+0x1fd/0x350 [ 1159.270354][ C1] schedule+0xe7/0x350 [ 1159.274440][ C1] schedule_timeout+0x124/0x280 [ 1159.279306][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1159.284708][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1159.290024][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1159.295858][ C1] ? prepare_to_swait_event+0xf3/0x470 [ 1159.301352][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 1159.306141][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1159.311442][ C1] ? rcu_gp_init+0xc82/0x1630 [ 1159.316135][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1159.321355][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1159.327187][ C1] rcu_gp_kthread+0x271/0x380 [ 1159.331891][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1159.337115][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1159.342342][ C1] ? __kthread_parkme+0x148/0x220 [ 1159.347392][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1159.352621][ C1] kthread+0x2c1/0x3a0 [ 1159.356716][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1159.361938][ C1] ? __pfx_kthread+0x10/0x10 [ 1159.366552][ C1] ret_from_fork+0x45/0x80 [ 1159.370983][ C1] ? __pfx_kthread+0x10/0x10 [ 1159.375599][ C1] ret_from_fork_asm+0x1a/0x30 [ 1159.380410][ C1] [ 1159.383441][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1159.389812][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1159.395027][ C0] NMI backtrace for cpu 0 [ 1159.395040][ C0] CPU: 0 UID: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 [ 1159.395065][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1159.395077][ C0] RIP: 0010:lock_is_held_type+0xd3/0x150 [ 1159.395112][ C0] Code: 89 df e8 80 fe ff ff 85 c0 74 d3 41 83 fe ff 41 bd 01 00 00 00 74 13 31 c0 f6 43 22 03 0f 95 c0 45 31 ed 44 39 f0 41 0f 94 c5 <48> c7 c7 e0 dc 6c 8b e8 91 16 00 00 b8 ff ff ff ff 65 0f c1 05 4c [ 1159.395132][ C0] RSP: 0018:ffffc90000156728 EFLAGS: 00000046 [ 1159.395149][ C0] RAX: 0000000000000001 RBX: ffff88801d6b8ae0 RCX: 0000000000000001 [ 1159.395163][ C0] RDX: 0000000000000000 RSI: ffffffff8e1bb900 RDI: ffff88801d6b8ae0 [ 1159.395177][ C0] RBP: ffffffff8e1bb900 R08: 0000000000000001 R09: 0000000000000000 [ 1159.395191][ C0] R10: 0000000000000000 R11: 0000000000000003 R12: ffff88801d6b8000 [ 1159.395205][ C0] R13: 0000000000000001 R14: 00000000ffffffff R15: 0000000000000000 [ 1159.395219][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1159.395239][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1159.395254][ C0] CR2: 00007fdcb70dfdb3 CR3: 000000006116c000 CR4: 00000000003526f0 [ 1159.395268][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1159.395281][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1159.395294][ C0] Call Trace: [ 1159.395301][ C0] [ 1159.395310][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 1159.395333][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1159.395355][ C0] ? nmi_handle+0x1ac/0x5d0 [ 1159.395383][ C0] ? lock_is_held_type+0xd3/0x150 [ 1159.395409][ C0] ? default_do_nmi+0x6a/0x160 [ 1159.395429][ C0] ? exc_nmi+0x170/0x1e0 [ 1159.395448][ C0] ? end_repeat_nmi+0xf/0x53 [ 1159.395481][ C0] ? lock_is_held_type+0xd3/0x150 [ 1159.395506][ C0] ? lock_is_held_type+0xd3/0x150 [ 1159.395532][ C0] ? lock_is_held_type+0xd3/0x150 [ 1159.395558][ C0] [ 1159.395564][ C0] [ 1159.395572][ C0] find_match+0x373/0x15d0 [ 1159.395594][ C0] ? hlock_class+0x4e/0x130 [ 1159.395623][ C0] ? mark_lock+0xb5/0xc60 [ 1159.395644][ C0] ? find_held_lock+0x2d/0x110 [ 1159.395674][ C0] ? __pfx_find_match+0x10/0x10 [ 1159.395699][ C0] __find_rr_leaf+0x141/0xe00 [ 1159.395724][ C0] ? __pfx___find_rr_leaf+0x10/0x10 [ 1159.395747][ C0] ? fib6_node_lookup+0x125/0x180 [ 1159.395767][ C0] ? __pfx_fib6_node_lookup+0x10/0x10 [ 1159.395793][ C0] fib6_table_lookup+0x57e/0xa30 [ 1159.395822][ C0] ? __pfx_fib6_table_lookup+0x10/0x10 [ 1159.395847][ C0] ? trace_lock_acquire+0x130/0x1f0 [ 1159.395878][ C0] ? lock_acquire+0x2f/0xb0 [ 1159.395899][ C0] ? ip6_pol_route+0x186/0x1120 [ 1159.395925][ C0] ip6_pol_route+0x1cd/0x1120 [ 1159.395949][ C0] ? __pfx_ip6_pol_route+0x10/0x10 [ 1159.395974][ C0] ? __pfx_rt6_multipath_hash+0x10/0x10 [ 1159.396004][ C0] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 1159.396029][ C0] fib6_rule_lookup+0x536/0x720 [ 1159.396052][ C0] ? hlock_class+0x4e/0x130 [ 1159.396080][ C0] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 1159.396102][ C0] ? __pfx_mark_lock+0x10/0x10 [ 1159.396123][ C0] ? hlock_class+0x4e/0x130 [ 1159.396151][ C0] ? mark_lock+0xb5/0xc60 [ 1159.396173][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1159.396202][ C0] ip6_route_input+0x663/0xc10 [ 1159.396227][ C0] ? __pfx_ip6_route_input+0x10/0x10 [ 1159.396263][ C0] ip6_rcv_finish_core.constprop.0+0x1a0/0x5d0 [ 1159.396292][ C0] ip6_rcv_finish+0x12c/0x5b0 [ 1159.396317][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1159.396343][ C0] ? __pfx_ip_sabotage_in+0x10/0x10 [ 1159.396376][ C0] ip_sabotage_in+0x21b/0x290 [ 1159.396405][ C0] nf_hook_slow+0xbb/0x200 [ 1159.396427][ C0] nf_hook.constprop.0+0x42e/0x750 [ 1159.396452][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1159.396478][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 1159.396506][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1159.396535][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 1159.396559][ C0] ipv6_rcv+0xa4/0x680 [ 1159.396584][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 1159.396608][ C0] __netif_receive_skb_one_core+0x12e/0x1e0 [ 1159.396638][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1159.396667][ C0] ? rcu_is_watching+0x12/0xc0 [ 1159.396696][ C0] ? nf_hook_slow+0x132/0x200 [ 1159.396715][ C0] ? netif_receive_skb+0x109/0x7b0 [ 1159.396745][ C0] __netif_receive_skb+0x1d/0x160 [ 1159.396772][ C0] netif_receive_skb+0x13f/0x7b0 [ 1159.396799][ C0] ? __pfx_netif_receive_skb+0x10/0x10 [ 1159.396831][ C0] br_pass_frame_up+0x346/0x490 [ 1159.396862][ C0] br_handle_frame_finish+0xdcf/0x1c80 [ 1159.396894][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1159.396929][ C0] ? ip6t_do_table+0xd20/0x1d40 [ 1159.396952][ C0] ? __local_bh_enable_ip+0xa4/0x120 [ 1159.396979][ C0] ? ip6t_do_table+0xd50/0x1d40 [ 1159.397001][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 1159.397029][ C0] ? nf_hook_slow+0x132/0x200 [ 1159.397050][ C0] br_nf_hook_thresh+0x303/0x410 [ 1159.397078][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1159.397111][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 1159.397143][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1159.397175][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1159.397200][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1159.397228][ C0] br_nf_pre_routing_finish_ipv6+0x76a/0xfb0 [ 1159.397260][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1159.397294][ C0] br_nf_pre_routing_ipv6+0x3ce/0x8c0 [ 1159.397326][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 1159.397358][ C0] ? __pfx_lock_release+0x10/0x10 [ 1159.397383][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 1159.397414][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 1159.397451][ C0] br_nf_pre_routing+0x860/0x15b0 [ 1159.397483][ C0] br_handle_frame+0x9eb/0x1490 [ 1159.397514][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1159.397546][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1159.397576][ C0] ? mark_lock+0xb5/0xc60 [ 1159.397599][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1159.397627][ C0] __netif_receive_skb_core.constprop.0+0xa76/0x4470 [ 1159.397658][ C0] ? kasan_quarantine_put+0x40/0x240 [ 1159.397684][ C0] ? kmem_cache_free+0x152/0x4c0 [ 1159.397707][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 1159.397735][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 1159.397765][ C0] ? hlock_class+0x4e/0x130 [ 1159.397803][ C0] ? process_backlog+0x3f1/0x15f0 [ 1159.397830][ C0] __netif_receive_skb_one_core+0xb1/0x1e0 [ 1159.397859][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1159.397888][ C0] ? rcu_is_watching+0x12/0xc0 [ 1159.397916][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1159.397943][ C0] ? process_backlog+0x3f1/0x15f0 [ 1159.397971][ C0] ? process_backlog+0x3f1/0x15f0 [ 1159.397998][ C0] __netif_receive_skb+0x1d/0x160 [ 1159.398025][ C0] process_backlog+0x443/0x15f0 [ 1159.398055][ C0] __napi_poll.constprop.0+0xb7/0x550 [ 1159.398085][ C0] net_rx_action+0xa94/0x1010 [ 1159.398116][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1159.398144][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 1159.398173][ C0] ? run_timer_base+0x91/0x190 [ 1159.398196][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1159.398220][ C0] ? sched_clock+0x38/0x60 [ 1159.398250][ C0] ? sched_clock_cpu+0x6d/0x4d0 [ 1159.398279][ C0] handle_softirqs+0x213/0x8f0 [ 1159.398306][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1159.398332][ C0] ? rcu_is_watching+0x12/0xc0 [ 1159.398365][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 1159.398389][ C0] ? smpboot_thread_fn+0x59d/0xa30 [ 1159.398417][ C0] run_ksoftirqd+0x3a/0x60 [ 1159.398441][ C0] smpboot_thread_fn+0x661/0xa30 [ 1159.398468][ C0] ? __kthread_parkme+0x148/0x220 [ 1159.398496][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1159.398524][ C0] kthread+0x2c1/0x3a0 [ 1159.398550][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1159.398574][ C0] ? __pfx_kthread+0x10/0x10 [ 1159.398602][ C0] ret_from_fork+0x45/0x80 [ 1159.398622][ C0] ? __pfx_kthread+0x10/0x10 [ 1159.398648][ C0] ret_from_fork_asm+0x1a/0x30 [ 1159.398683][ C0] [ 1161.839160][ C1] net_ratelimit: 39173 callbacks suppressed [ 1161.839180][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1161.839224][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1161.845329][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1161.857366][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1161.869246][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1161.881125][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1161.893028][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1161.904892][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1161.916752][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1161.928757][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1162.242780][T15573] Bluetooth: hci1: command 0x0406 tx timeout [ 1167.195151][ C1] net_ratelimit: 42923 callbacks suppressed [ 1167.195173][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1167.195403][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1167.201382][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1167.213269][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1167.225126][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1167.237187][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1167.248994][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1167.261026][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1167.272888][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1167.284802][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)