last executing test programs: 14.379611158s ago: executing program 0 (id=3838): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0]) (fail_nth: 1) 14.241094485s ago: executing program 0 (id=3839): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d0000006779d6d889f408a2fe75130000000500000095961a9f2b9a7c22"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) syz_io_uring_setup(0x6292, &(0x7f0000000340)={0x0, 0xc204, 0x400, 0x2, 0x2ac}, 0x0, 0x0) r1 = socket$inet6(0x10, 0x80000, 0xb800000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01020000000000000000100000000800030031c38cc8725e77", @ANYRES32=r4, @ANYBLOB], 0x1c}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x11c, &(0x7f00000002c0)=0x4, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_emit_ethernet(0x359, &(0x7f00000003c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x323, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, [{}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177304c5fd4698c934de4731f3f61e"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b03452dccf81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b104185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000006f00fec0ffff00000000000000ff0bc0fe000000000000000002000002d9a0274500040000000013eaf40000"}, {0x0, 0x13, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet(0xa, 0x801, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x840000000002, 0x3, 0x100) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=ANY=[@ANYBLOB="90000000", @ANYRES64=r8, @ANYBLOB="01000000000000000000010000000c00050000000000000000000c0002000000000000000000040007800c000800000000000000000008000100000000004400078008000100", @ANYRESOCT=r7, @ANYBLOB="38000100", @ANYRES32=r10, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100"], 0x90}, 0x1, 0x0, 0x0, 0x40440d0}, 0x0) setsockopt$inet6_udp_encap(r6, 0x11, 0x68, &(0x7f0000003a80)=0x2, 0x4) setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f00000000c0), 0x4) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) 13.626096896s ago: executing program 4 (id=3844): r0 = openat$vimc1(0xffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000480)={0x1, 0x2, @start={0x7ff, 0x1}}) 13.379052595s ago: executing program 4 (id=3845): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) close(r0) (fail_nth: 1) 13.180904683s ago: executing program 4 (id=3846): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x100000000000009) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) clock_getres(0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = fsopen(&(0x7f0000000100)='ntfs3\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r3 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000040)='cpu.weight\x00', 0x2, 0x0) getpid() openat(r2, 0x0, 0x4dc400, 0x1af) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x282a2, 0x0) socket$inet6(0xa, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) syz_io_uring_setup(0x6e5a, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000080)={0x3ff, 0x5}, 0x0, 0x0) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000b, 0x11, r4, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x4000) 13.147427353s ago: executing program 0 (id=3847): pipe(&(0x7f00000001c0)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e00feffffff00000000000000004000006a000000000000000000000000000000000000380001000000000000000300000000000000feffffffffffffff070000000000000000000000000000000008000000000000000000000000000000000000000000008aad6b366378349d5f8f07e1b794941b75e521d0955b3818e4ceab421edc6618e92d8048ed1669c84e9403e9725d833b5d16d7d158b55c9341864269792401e3"], 0x78) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x11000) io_setup(0x3ff, &(0x7f0000000500)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='writeback_sb_inodes_requeue\x00', r0, 0x0, 0x3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1e0000000500000004000000ff01000008110400", @ANYRES32=r0, @ANYBLOB="ad57ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000000300000000000000050000000000000000080000000000003bfcd48abcc4264be1e93773b68c97f51539aecf75c79106040f1f085b569c11cfa81661bd4f974b68169b50bfd767bdf317b104762b38bd45f5d69dc16bb4cd6eda8f45b249b67dda8c7fe4e708a66648f2188d5131"], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002080)=ANY=[@ANYRES16=r6, @ANYRESHEX=r5, @ANYRESDEC=r2, @ANYRESDEC=r6, @ANYBLOB="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", @ANYRES64=r0, @ANYRES64=r1, @ANYRESHEX=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x2000000000000042, &(0x7f0000001e00)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x94) io_submit(r1, 0x0, 0x0) add_key(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff8) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f00000000c0)='./file0\x00', 0x24000408) bpf$PROG_LOAD(0x5, 0x0, 0x0) 10.077748281s ago: executing program 0 (id=3853): setreuid(0xee00, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b20, &(0x7f0000000040)={'wlan1\x00', @remote}) 10.037270399s ago: executing program 4 (id=3854): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) epoll_create1(0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000700)={{}, {0x77359400}}, &(0x7f0000000380)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f00000004c0)=""/228, 0x0, 0xe4, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r2, 0x0, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x48) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r4, 0x0, 0x0) ioctl$TIOCNOTTY(r3, 0x5422) dup(r3) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)) io_uring_setup(0x17ba, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000000280)}}], 0x1, 0x0, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000340), 0x0, 0x0) ioctl$CEC_DQEVENT(r6, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r6, 0xc0506107, &(0x7f0000000200)={0x0, 0x0, 0x0, @lost_msgs}) ioctl$IOC_PR_PREEMPT(r6, 0x40046109, &(0x7f0000000040)={0xd0}) 9.871219684s ago: executing program 3 (id=3857): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(0x0, 0x580200, 0x40) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000040000000000000000008500"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r4}, 0x10) semget$private(0x0, 0x2, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x500, 0x0, 0x1800}], 0x1, 0x0) syz_emit_vhci(0x0, 0x7) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x8, 0x400}, 0x1c) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f"], 0x22) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x40}}}, 0xc) socket(0x10, 0x80002, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) 9.647644763s ago: executing program 0 (id=3858): connect$rose(0xffffffffffffffff, &(0x7f0000000440)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x44) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x24000044, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, 0x0) r7 = syz_open_pts(r6, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000200)=0x2) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="170000006a00f96b1324", 0x18}], 0x1}, 0x4080) 8.621199423s ago: executing program 3 (id=3859): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100800000000000000000001000000011"], 0x3c}}, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000140)={0x0, 0x40, 0x4, {0x1, @raw_data="3d924b8271394fa4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc3314c94970349a3c1374ffec96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a7"}}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r8, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4) listen(r8, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r9 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x0, 0x46d, 0xc215, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x42, 0x2, 0x3, 0x1, 0x2, 0x5, {0x9, 0x21, 0x9, 0x9, 0x1, {0x22, 0x97}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x7, 0x4, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io(r9, 0x0, 0x0) 4.599765892s ago: executing program 1 (id=3864): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x80) mount$fuse(0x0, 0x0, 0x0, 0x204088, &(0x7f0000000740)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="34061cfcd7a492c6fa6ea6180155269ea07864112c5237380835ba704e1e7f1a3513bb0df080eea6626e17235da9929b191f9108c517aef9b496c7d870c58e3f21887288682feb012aabcc459283f8eaf3b8bf5b58354e4e05427982935b3f3186df41ce2d6f1464d2189d2a8b8a0564ea2904ffd47d8871b42a9bba191778ed073ccd251c88f1ada222f83d60ba7f39470000000000069b7eea0710190c44a4be2c3deba56abb69aa4a3debf04eb2e18485b487ada61220a9302bebb9121d5b2ab2bbcbd188180025e1ded2ed4588824dd818d5c9cc375deaea0b24c532274d1ce09f7f4df353137fa2f1f31f371f049aaa3e87b45443bd45d1caa6cc074f121a321a0d3e58ab348f47137aadcfad0aac1fe0a7b438e287379c1d99fd6e763c22c619c5d74ed2bbdaaecb06d402adcee35bba4121e8a0d5f6ed6b62a81bf370919ff911ab3b0ba59e382787a5f657719b54a068f18f0973ad6c34e3"]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000180)='./file1\x00') r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4}, './file0/file0\x00'}) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000700)={{}, {0x77359400}}, &(0x7f0000000380)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f00000004c0)=""/228, 0x0, 0xe4, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000400000000000000", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="000000000300000005000000000000000000000000000000000000000449f4326c57c07e8d9f0ddb3f79fdc31ec641f7bb"], 0x48) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r7, 0x0, 0x0) ioctl$TIOCNOTTY(r6, 0x5422) dup(r6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x105c, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) 4.593196682s ago: executing program 3 (id=3865): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x1e, &(0x7f00000000c0)=0xd6f4, 0x4) (async) writev(r0, &(0x7f00000003c0), 0x100000000000022d) (async) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) (async, rerun: 32) r1 = getpid() (rerun: 32) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x9) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4, 0x0, 0x5}, 0x18) (async, rerun: 32) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) (async, rerun: 32) removexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='trusted.overlay.origin\x00') (async) fchdir(0xffffffffffffffff) 4.149183078s ago: executing program 2 (id=3869): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x506d456e}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x40}], {0x95, 0x0, 0x2}}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="260000001200010a0000c4f875ec089bf88c4987"], 0x26}}, 0x0) 4.140841156s ago: executing program 2 (id=3870): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001dc0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'veth0_to_bridge\x00', 0x1}, 0x18) sendmmsg$inet6(r2, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)='D', 0x1}, {&(0x7f00000000c0)="d711eccf81", 0x7fffefff}], 0x2}}], 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x5a1}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000002c0)={r4, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000003c0)=0x9c) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000100)={r4, 0xd642}, 0x8) close(r0) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000000)=""/148, &(0x7f00000000c0)=0x94) 4.0098128s ago: executing program 2 (id=3871): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000180)=[{&(0x7f0000000200)='A', 0x1}], 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0x20000000}) splice(r0, 0x0, r2, 0x0, 0x400008ca, 0x0) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = dup(r4) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0e05403, &(0x7f0000000000)={{0xffffffffffffffff, 0x2, 0xffffffff, 0x3, 0x6}, 0xf3e, 0x3, 'id1\x00', 'timer1\x00', 0x0, 0x10000, 0x1, 0x400, 0x77c1907b}) 4.001365329s ago: executing program 1 (id=3872): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(0x0, 0x580200, 0x40) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000040000000000000000008500"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r4}, 0x10) semget$private(0x0, 0x2, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x500, 0x0, 0x1800}], 0x1, 0x0) syz_emit_vhci(0x0, 0x7) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x8, 0x400}, 0x1c) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f"], 0x22) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x40}}}, 0xc) socket(0x10, 0x80002, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) 2.960979627s ago: executing program 3 (id=3873): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000791203000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000240)={'wg0\x00'}) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)={0xbc, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x56, 0xe, {{{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x3}, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_BEACON_TAIL={0x2a, 0xf, [@channel_switch={0x25, 0x3, {0x0, 0x0, 0x5}}, @prep={0x83, 0x1f, {{}, 0x0, 0x0, @device_a, 0x0, @void, 0x9, 0x5, @device_a, 0x5}}]}, @NL80211_ATTR_PROBE_RESP={0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xbc}, 0x1, 0x0, 0x0, 0x10}, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x470, 0xf0, 0xf0, 0xffffffff, 0x2d0, 0xf0, 0x3a0, 0x3a0, 0xffffffff, 0x3a0, 0x3a0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'dvmrp0\x00', 'pimreg1\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @icmp_id, @icmp_id}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@local}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@private0, @private2, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) syslog(0x1, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], &(0x7f0000001f40)=""/4089, 0x86, 0xff9, 0x0, 0x0, 0x0, @void, @value}, 0x20) 2.580418193s ago: executing program 1 (id=3874): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000010000e1250000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$nvram(0xffffff9c, &(0x7f0000000700), 0xc80, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f00000009c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000940)={&(0x7f0000000780)={0x98, 0x17, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_HOOK={0x84, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'rose0\x00'}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x8004}, 0x20000000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r9, &(0x7f0000000680)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r9, 0x0) write$binfmt_misc(r8, &(0x7f0000000100), 0xfdef) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@private0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f0000000440)=0xe8) r11 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) mount$9p_tcp(&(0x7f0000000140), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x80824, &(0x7f00000005c0)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r10}}, {@access_user}, {@access_any}, {@cache_fscache}], [{@appraise}, {@obj_type={'obj_type', 0x3d, ')\xf6-)!n{$^}]+'}}, {@fowner_gt={'fowner>', r11}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@euid_lt={'euid<', r12}}]}}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r13 = syz_open_procfs(r0, &(0x7f0000000040)='pagemap\x00') syz_usb_disconnect(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x35d812cc1dcb2138, 0xffffffffffffffff, 0x3055d000) syz_fuse_handle_req(r13, &(0x7f0000006cc0)="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", 0x2000, &(0x7f0000009680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_80211_inject_frame(&(0x7f00000000c0)=@broadcast, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {0xc}, @device_b, @device_a, @from_mac}, 0x6, @random, 0x11, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0xf4, 0x93, 0x2b, 0x2}}}, 0x3e) 2.579522275s ago: executing program 2 (id=3875): r0 = openat$uinput(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000040000000800000014100000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRESOCT=r0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, 0x0, 0x0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x4, 0x4, 0x6, 0x1014, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xfffffffffffffe44) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r3, &(0x7f0000000300), 0x20000000}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) r7 = syz_open_dev$usbmon(&(0x7f0000000000), 0x4, 0x88a880) ioctl$MON_IOCX_GET(r7, 0x40189206, &(0x7f0000000480)={0x0, 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0) connect$vsock_stream(r8, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 2.038627579s ago: executing program 3 (id=3876): r0 = syz_open_dev$media(&(0x7f0000000040), 0x4000004, 0x123800) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0xfffffffffffffffe) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000440)=ANY=[@ANYBLOB="200f0000669beae0e9d05f42fe4d697d2a615ed157d6faa77d34c9858963a5fcd37cf31e411bceaae7b7ff4a82476172ebb213426b6660149cc989de00"/76], 0x0, 0x0}) r2 = syz_io_uring_setup(0x2e33, &(0x7f0000000300)={0x0, 0xdb46, 0x10100}, &(0x7f00000002c0)=0x0, &(0x7f0000000380)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) socket(0x1d, 0x2, 0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000210007010000000000000000027cfa000800018023c9f669f1025b443b3923fb013db64b7a71aa10dca2d5383c8cf1ff346b166599850fabb7e91ee995bb93a77f4798851044328c039ef7a9eeab418890e400a2eef6c83ec36d447cc7879587ceec86a3f005628db5b44a9ca656985a17a2ac5a5b97bb6386180638f5d5a92e94f7"], 0x1c}}, 0x0) 1.581314238s ago: executing program 1 (id=3877): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r2, &(0x7f0000000300), 0x20000000}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000300)={r2, &(0x7f00000005c0), 0x0}, 0x20) (fail_nth: 2) 1.562664746s ago: executing program 4 (id=3878): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000003200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r1, 0xe0, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff5f, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 1.436253046s ago: executing program 1 (id=3879): setreuid(0xee00, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b20, &(0x7f0000000040)={'wlan1\x00', @remote}) 1.415826462s ago: executing program 0 (id=3880): socketpair(0x1f, 0x20000000000001, 0x80000000, &(0x7f0000000000)) r0 = memfd_create(&(0x7f0000002840)='\x1aj~\x97\xc1\x00\x00\x00\xff\x00\x00\x00\x7f\xef_\xd3\xdc=f.z=\x80=8\x1f\x14\xa2&\xbam\v\xa9\f\xf5\x17t\xc9\x80\xf4\xa1\xeb\x907L\x7f \xe3\x19\xcb\xbf\xfc\x00\x00\x00\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00h}\x00\x135V\xd9\xe0\xb0\x17\x01g\xff?\xc8\xfb3\x93\xbc\xcf\xf2\x95\xbeYd,\xb3\x17\xb0L\xe841(\"\xc2K\x11\x81\xef.m\xf7@\xb1\xf9\xee\xce\\\xd9\x03\nHNzF``\xa0\xc4}P\xb3\b\x0e\xcd\x86\'qb\x9a\xce\"\xfb\xd6\x91\'\x9b~\xcd\xfd\xaa\n\xea\x8dC\x9aQ\n\xce\"\x9cN\xed0\xf0\xc2x\x93h\xe8\\\x18\xd26\xe7\x8d4\x06\xf0\xe3M\xe5\x91\x0f\x85\x97gla\x06\xe1\xba\x1a\x1d \n\fr\xae\x12M\xcb6\xe0\x15\xd5d\x16\xc3\xdf\xa2\x04wB\xd0\x18\xa4\x17|\vH\xf5\xb0\xb5\xc7\x9f`Fz\xa3x\x99\xe17\xd2vAW\xe5\x18)9\xba\xa68A\xf8y\xe6\xac\xda\xc7u\xa9\x00{:\x01\xee,\a:\x06\xad{\x80\xfd\xc7\"\x95\x0f\xe3\x86\x19\xc3\xd2\xf7\x18\xf8\xed\x8b\"\xd8\x8f\xde`\xb0D\xfd\x84\xa3\xd7\xf3R\x8d\x88\xdaJ\xb0\xf8^\xd4>\xc7e\xab\x8f+\xda\x9b\xae\xf2\xca\xb9\xde\xb5\x8f\xdb\xba}\x7f\xf8\xe5i,m\b\xf0\xc7\xe9R\x9cY$\xcb\x00/!Z\xeb\x9bE\xf2\xb9\xcc\xf0\x9c\x02\xfc\x9c\x91q\xba|\x80n\x1f\xffG\xc3\x13\xe7v\xa7\x95md\x0f\xa5\x06\v^n\x84d5o\x02\xb3.\x8dc\x18\xe0\xc2\x9b\xe1D\x0fB] \xdfJGr\xdbc,\xef82%\x97\xe4;u\xa9\xe5\xef*n\xf613\x17\x80[\x90]\xef\xc1\x8e\rD\xd2\xe0\x8c\xf2\x00\x00\x00\x00\x00\x00\x00Gs\xab\x1e\xa13\x93\x8d\x04U\xf5\xb8Th9s3\xc9\xbf\xe5My$\x99.\xf0\xd5\xc8\xb1\xfc4\xe7\x83z\x11a\xb7\xebY\x1d\xcd\x81N\xed\xbd\xa5\xce\xa0f\xe5q2\xbc#w\xe4_\x8a-\xad\xc2/_\xe6\nE\xeb\x9c\x96\xf4`\xa2\x06\xe0^\xfb\x99\xbb}\xfb\x052_\x83*B\xf1\xf0\x95\xd2K\xd6\xe5\xb1\x1a\x02,\xbe\xf5\xd0\xd4\xa1A\xf3!\n\xc6b\xeb\x92\xea\xd8\xe1$\xbbUO\x1fS\x02\x9e\xa7|i:\xb1\xf60\xf6M\xe6,\x81=F\xa1\xca\x06\x0e\x14\x89/\xa7\"\x17-h9\x176\x9d\x04\x1el\xdcp\x89\x1b \x93f\x9a\x10\xd9\xa2Y\b\xfalA\xe1\x1bI\xb9\xf8\xa0\xb0\xc2\x04\xedO\n\vj&\xb5\x04\xc3{Yt\xf4rS^\x0e$\xe9\x05\xcd\x9b\x84\x14`\xed\x9e\xbbh\x81h\xf2\xe7\xe2DO\x1a\xe9\xc1\x1cu\xa5\xbd\x90\xbb\x03\xd5\x00\xf2\x83T\xe4\x0eF\x7f\x85\xb5\xe9CJ0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x2c, 0x10, 0x403, 0x0, 0x1, {0x0, 0x0, 0x0, r2}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}]}, 0x2c}, 0x1, 0xba01, 0x0, 0x8080}, 0x8800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sysvipc/shm\x00', 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) socket$packet(0x11, 0x0, 0x300) (async) socket$packet(0x11, 0x0, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) (async) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) (async) sched_setscheduler(0x0, 0x1, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0x5) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r8, r8, 0x0, 0x20003) keyctl$set_timeout(0xf, 0x0, 0xe000) (async) keyctl$set_timeout(0xf, 0x0, 0xe000) 1.333833683s ago: executing program 1 (id=3882): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000180)={0x4000, r1}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r3 = syz_open_procfs(0x0, 0x0) read$eventfd(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x20000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0xfd}]}}}]}, 0x44}}, 0x0) landlock_restrict_self(r2, 0x0) r7 = syz_io_uring_setup(0x24f5, &(0x7f0000000140)={0x0, 0x4e3e}, &(0x7f0000000280), &(0x7f0000000100)) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r8, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0xa2000003) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r7, 0x13, &(0x7f0000000080)=[0x0, 0x4], 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x1) ftruncate(r9, 0x1) truncate(&(0x7f0000000280)='./file1\x00', 0x1) ftruncate(r0, 0x1) ftruncate(r1, 0x1) ftruncate(r10, 0x1) 1.199899192s ago: executing program 4 (id=3883): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x716282800bc123b7, 0x4031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x0, 0x44, 0x0, "bda111c5b5ae6d92d00c0fae174cd7575028c0326ba91226d95963db44b11c55a2ad93c207d005e3b09c623ac941c2a4516f4b249ca8595794c271c52e503ab13a896438a2b3b8643b5100"}, 0xd8) listen(r0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xc, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001340)=""/102378, 0x7706c522012798af) socket$pppl2tp(0x18, 0x1, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x3) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) syz_open_procfs(r5, &(0x7f0000000600)='fd/4\x00') 965.118484ms ago: executing program 2 (id=3884): openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$kcm(0x29, 0x5, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0x4112, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) 0s ago: executing program 2 (id=3885): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000003200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r1, 0xe0, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff5f, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (fail_nth: 2) kernel console output (not intermixed with test programs): 588] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2733.460785][T10024] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2733.490661][T26283] netlink: 'syz.4.3662': attribute type 1 has an invalid length. [ 2733.498519][T26283] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3662'. [ 2733.612013][ T2588] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2733.620168][T10024] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2733.664910][T10024] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2733.675263][T26253] bridge0: port 1(bridge_slave_0) entered blocking state [ 2733.686617][T26286] netlink: 'syz.4.3663': attribute type 1 has an invalid length. [ 2733.694397][T26286] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3663'. [ 2733.712476][T26253] bridge0: port 1(bridge_slave_0) entered disabled state [ 2733.743717][T10024] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2733.749118][T26253] bridge_slave_0: entered allmulticast mode [ 2733.752160][T10024] usb 3-1: invalid MIDI out EP 0 [ 2733.811383][T26253] bridge_slave_0: entered promiscuous mode [ 2733.828705][T26253] bridge0: port 2(bridge_slave_1) entered blocking state [ 2733.846801][T26253] bridge0: port 2(bridge_slave_1) entered disabled state [ 2733.864178][T26253] bridge_slave_1: entered allmulticast mode [ 2734.002145][T26253] bridge_slave_1: entered promiscuous mode [ 2734.024565][T10024] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2734.033913][T26038] udevd[26038]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2734.412199][ T2588] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2734.543108][T26253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2734.579730][T26253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2734.711538][ T2588] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2734.933697][T17186] Bluetooth: hci2: command tx timeout [ 2735.473632][ T5765] usb 3-1: USB disconnect, device number 28 [ 2735.585306][T26253] team0: Port device team_slave_0 added [ 2735.599830][T26253] team0: Port device team_slave_1 added [ 2735.642462][T26253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2735.649945][T26253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2735.707192][T26253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2735.729332][T26302] netlink: 'syz.3.3666': attribute type 1 has an invalid length. [ 2735.737281][T26302] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3666'. [ 2735.834713][T26253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2735.866625][T26253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2735.896366][T10024] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 2736.072656][T10024] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2736.091062][T10024] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2736.137366][T26253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2736.239916][T10024] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2736.364581][T10024] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2736.430268][T10024] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 2736.459399][T10024] usb 5-1: invalid MIDI out EP 0 [ 2736.531053][T26253] hsr_slave_0: entered promiscuous mode [ 2736.600599][T26310] netlink: 'syz.3.3668': attribute type 1 has an invalid length. [ 2736.608513][T26310] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3668'. [ 2737.400513][T17186] Bluetooth: hci2: command tx timeout [ 2737.416027][T10024] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2737.443513][T26253] hsr_slave_1: entered promiscuous mode [ 2737.453758][T26253] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2737.461672][T26253] Cannot create hsr debugfs directory [ 2738.740092][ T2588] bridge_slave_1: left allmulticast mode [ 2738.776001][ T2588] bridge_slave_1: left promiscuous mode [ 2738.781793][ T2588] bridge0: port 2(bridge_slave_1) entered disabled state [ 2738.844398][T13838] usb 5-1: USB disconnect, device number 46 [ 2738.897748][ T2588] bridge_slave_0: left allmulticast mode [ 2738.903644][ T2588] bridge_slave_0: left promiscuous mode [ 2738.909861][ T2588] bridge0: port 1(bridge_slave_0) entered disabled state [ 2739.145971][ T5279] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 2739.317792][ T5279] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2739.332809][ T5279] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2739.362650][ T5279] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2739.443927][ T5279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2739.455988][T17186] Bluetooth: hci2: command tx timeout [ 2739.498982][ T5279] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2739.506414][ T5279] usb 4-1: invalid MIDI out EP 0 [ 2739.545532][ T5279] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2739.582737][T25994] udevd[25994]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2739.682747][T26338] fuse: Unknown parameter 'use00000000000000000000' [ 2739.723630][T26340] netlink: 'syz.1.3672': attribute type 1 has an invalid length. [ 2739.731474][T26340] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3672'. [ 2739.963756][ T5275] usb 4-1: USB disconnect, device number 41 [ 2740.191507][ T2588] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2740.221672][ T2588] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2740.272752][ T2588] bond0 (unregistering): Released all slaves [ 2741.052392][T10024] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 2742.082969][T10024] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2742.100141][T10024] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2742.134975][T10024] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2742.147343][T10024] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2742.162246][T10024] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2742.170034][T10024] usb 4-1: invalid MIDI out EP 0 [ 2742.266220][T25994] udevd[25994]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2742.423249][ T2588] hsr_slave_0: left promiscuous mode [ 2742.448511][T10024] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2742.481241][ T2588] hsr_slave_1: left promiscuous mode [ 2742.512557][ T2588] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2742.552140][ T2588] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2742.590908][T10024] usb 4-1: USB disconnect, device number 42 [ 2742.600557][ T2588] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2742.622231][ T2588] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2742.658245][ T2588] veth1_macvtap: left promiscuous mode [ 2742.671122][ T2588] veth0_macvtap: left promiscuous mode [ 2742.687842][ T2588] veth1_vlan: left promiscuous mode [ 2742.694952][ T2588] veth0_vlan: left promiscuous mode [ 2744.136684][ T5765] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 2744.158333][ T5275] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 2744.320575][ T5275] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2744.333216][ T5765] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2744.339371][ T5275] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2744.357813][ T5765] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2744.364989][ T5275] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2744.388151][ T5275] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2744.400843][ T5765] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2744.411162][ T5765] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2744.426959][ T5275] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2744.440188][ T5275] usb 4-1: invalid MIDI out EP 0 [ 2744.580656][ T2588] team0 (unregistering): Port device team_slave_1 removed [ 2744.599129][ T5275] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2744.599802][ T5765] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2744.621328][ T5765] usb 2-1: invalid MIDI out EP 0 [ 2744.705291][ T2588] team0 (unregistering): Port device team_slave_0 removed [ 2744.839601][ T5765] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2744.886559][ T5765] usb 2-1: USB disconnect, device number 24 [ 2744.908446][ T5279] usb 4-1: USB disconnect, device number 43 [ 2745.322852][T26386] binder: 26383:26386 ioctl c0306201 0 returned -14 [ 2747.445527][T26422] netlink: 'syz.4.3687': attribute type 1 has an invalid length. [ 2747.453542][T26422] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3687'. [ 2747.468210][T26419] overlayfs: failed to resolve '/': -2 [ 2747.477164][ T5765] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 2747.499334][T26419] overlayfs: failed to resolve '/6¬ ¼µôƒkÝþ‹øc': -2 [ 2747.596309][ T5279] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 2747.668703][ T5765] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2747.703356][ T5765] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2747.769318][ T5279] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2747.808464][ T5765] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2747.823204][ T5279] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2747.883118][ T5765] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2747.921199][ T5279] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2747.957209][ T5765] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2747.986195][ T5279] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2748.016405][ T5765] usb 4-1: invalid MIDI out EP 0 [ 2748.175307][ T5279] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2748.183222][ T5765] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2748.217725][ T5279] usb 3-1: invalid MIDI out EP 0 [ 2748.254726][ T5765] usb 4-1: USB disconnect, device number 44 [ 2748.281342][T26253] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2748.368320][ T5279] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2748.418014][T26253] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2748.460571][T26253] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2748.478794][T26253] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2748.505180][T26258] udevd[26258]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2748.724005][T26253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2748.794918][T26253] 8021q: adding VLAN 0 to HW filter on device team0 [ 2748.854351][T18488] bridge0: port 1(bridge_slave_0) entered blocking state [ 2748.861740][T18488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2748.921214][ T2588] bridge0: port 2(bridge_slave_1) entered blocking state [ 2748.928428][ T2588] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2749.082963][T26253] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2749.096730][T26253] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2749.830553][T26253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2750.070277][T26253] veth0_vlan: entered promiscuous mode [ 2750.115657][T26253] veth1_vlan: entered promiscuous mode [ 2750.261479][T26253] veth0_macvtap: entered promiscuous mode [ 2750.304918][ T5275] usb 3-1: USB disconnect, device number 29 [ 2750.327235][T26253] veth1_macvtap: entered promiscuous mode [ 2750.375070][T26253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2750.410336][T26253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2750.426016][ T5279] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 2750.454528][T26253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2750.485436][T26253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2750.512026][T26253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2750.532172][T26253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2750.544521][T26253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2750.705429][T26253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2750.728499][ T5279] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2750.730281][T26253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2750.740846][ T5279] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2750.750405][T26253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2750.752512][T26253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2750.862372][T26253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2751.468309][T26253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2751.506408][ T5279] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2751.515614][ T5279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2751.539840][ T5279] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2751.549876][ T5279] usb 4-1: invalid MIDI out EP 0 [ 2751.576030][T26253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2751.605085][T26253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2751.626040][T26253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2751.649432][T26253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2751.659467][T26253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2751.670709][T26253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2751.681124][T26253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2751.691782][T26253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2751.703096][T26253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2751.772624][T26253] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2751.784439][T26253] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2751.797260][T26253] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2751.824697][T26253] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2751.826885][ T5279] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2751.860559][T26484] udevd[26484]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2751.877909][ T5765] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 2751.997106][ T5279] usb 4-1: USB disconnect, device number 45 [ 2752.007454][ T2588] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2752.016756][ T2588] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2752.088025][ T5765] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2752.107071][ T5765] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2752.161692][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2752.170514][ T5765] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2752.197427][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2752.208962][ T5765] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2752.277505][ T5765] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 2752.307322][ T5765] usb 5-1: invalid MIDI out EP 0 [ 2752.729931][T26504] overlayfs: overlapping lowerdir path [ 2752.805488][T26505] overlayfs: overlapping lowerdir path [ 2753.581574][ T5765] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2754.410920][T26258] udevd[26258]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2756.223100][ T5279] usb 5-1: USB disconnect, device number 47 [ 2756.956122][ T5765] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 2757.234139][ T5765] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2757.309373][ T5765] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2757.757888][ T5765] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2757.758909][T26545] netlink: 'syz.4.3701': attribute type 1 has an invalid length. [ 2757.767602][ T5765] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2757.775122][T26545] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3701'. [ 2758.563695][ T5765] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2758.683191][ T5765] usb 4-1: invalid MIDI out EP 0 [ 2759.051805][T26563] binder: 26554:26563 ioctl c0306201 0 returned -14 [ 2759.717521][ T5765] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2760.036203][ T935] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 2760.048317][T22963] usb 4-1: USB disconnect, device number 46 [ 2760.176063][ T5765] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 2760.361992][ T5765] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2760.375391][ T5765] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2760.405958][ T5765] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2760.415435][ T935] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2760.430174][ T935] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2760.432647][ T5765] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2760.446063][ T935] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2760.460944][ T935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2760.517902][ T935] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2760.535625][ T935] usb 3-1: invalid MIDI out EP 0 [ 2760.671797][T26484] udevd[26484]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2760.693816][ T935] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2760.702565][ T5765] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 2760.765683][ T5765] usb 1-1: invalid MIDI out EP 0 [ 2760.879977][ T5765] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2760.902630][ T5765] usb 1-1: USB disconnect, device number 36 [ 2760.908562][T26485] udevd[26485]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2760.949395][ T935] usb 3-1: USB disconnect, device number 30 [ 2761.386096][ T5765] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 2761.486752][T26577] binder: BINDER_SET_CONTEXT_MGR already set [ 2761.522491][T26577] binder: 26576:26577 ioctl 4018620d 20000100 returned -16 [ 2761.547635][ T5765] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2761.570348][ T5765] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2761.872227][T26577] binder: BINDER_SET_CONTEXT_MGR already set [ 2761.878365][T26577] binder: 26576:26577 ioctl 4018620d 200002c0 returned -16 [ 2762.201007][ T5765] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2762.210169][ T5765] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2762.233928][ T5765] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 2762.241728][ T5765] usb 5-1: invalid MIDI out EP 0 [ 2763.230578][ T5765] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2763.243347][ T5765] usb 5-1: USB disconnect, device number 48 [ 2764.356246][T13838] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 2764.518019][T13838] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2764.637721][T13838] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2764.662473][T13838] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2764.673917][T13838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2765.093017][T26611] binder: 26606:26611 ioctl c0306201 0 returned -14 [ 2765.717713][T13838] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2765.725254][T13838] usb 2-1: invalid MIDI out EP 0 [ 2765.947071][T26619] netlink: 'syz.2.3716': attribute type 1 has an invalid length. [ 2765.954915][T26619] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3716'. [ 2766.832754][T26620] netlink: 'syz.4.3717': attribute type 1 has an invalid length. [ 2766.840674][T26620] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3717'. [ 2767.044488][T13838] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2767.118490][T22963] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 2767.140371][T26626] netlink: 'syz.3.3718': attribute type 1 has an invalid length. [ 2767.148254][T26626] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3718'. [ 2767.339346][T22963] usb 3-1: Using ep0 maxpacket: 8 [ 2767.363527][T22963] usb 3-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=d2.b4 [ 2767.846126][T13838] usb 2-1: USB disconnect, device number 25 [ 2767.965720][T22963] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2767.974137][T22963] usb 3-1: Product: syz [ 2767.978526][T22963] usb 3-1: Manufacturer: syz [ 2767.983155][T22963] usb 3-1: SerialNumber: syz [ 2767.992078][T22963] usb 3-1: config 0 descriptor?? [ 2768.002852][T22963] usb 3-1: bad CDC descriptors [ 2768.186011][T10024] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 2768.214904][ T5279] usb 3-1: USB disconnect, device number 31 [ 2768.347734][T10024] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2768.379709][T10024] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2768.413414][T10024] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2768.443154][T10024] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2768.489028][T10024] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2768.546380][T10024] usb 4-1: invalid MIDI out EP 0 [ 2769.497366][T26438] udevd[26438]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2769.556252][T10024] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2769.610936][T10024] usb 4-1: USB disconnect, device number 47 [ 2771.508877][T26651] FAULT_INJECTION: forcing a failure. [ 2771.508877][T26651] name failslab, interval 1, probability 0, space 0, times 1 [ 2771.549444][T26651] CPU: 0 UID: 0 PID: 26651 Comm: syz.4.3727 Not tainted 6.12.0-rc1-syzkaller-00125-g0c559323bbaa #0 [ 2771.560224][T26651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2771.570271][T26651] Call Trace: [ 2771.573537][T26651] [ 2771.576495][T26651] dump_stack_lvl+0x16c/0x1f0 [ 2771.581294][T26651] should_fail_ex+0x497/0x5b0 [ 2771.586081][T26651] ? fs_reclaim_acquire+0xae/0x160 [ 2771.591216][T26651] should_failslab+0xc2/0x120 [ 2771.595903][T26651] __kmalloc_noprof+0xcb/0x400 [ 2771.600680][T26651] ? trace_lock_acquire+0x14a/0x1d0 [ 2771.605913][T26651] ? ksys_write+0x12f/0x260 [ 2771.610425][T26651] kernfs_fop_write_iter+0x223/0x500 [ 2771.615742][T26651] vfs_write+0x6b5/0x1140 [ 2771.620115][T26651] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 2771.625966][T26651] ? trace_lock_acquire+0x14a/0x1d0 [ 2771.631167][T26651] ? __pfx_vfs_write+0x10/0x10 [ 2771.635934][T26651] ? __pfx___mutex_lock+0x10/0x10 [ 2771.641069][T26651] ksys_write+0x12f/0x260 [ 2771.645395][T26651] ? __pfx_ksys_write+0x10/0x10 [ 2771.650249][T26651] do_syscall_64+0xcd/0x250 [ 2771.654805][T26651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2771.660716][T26651] RIP: 0033:0x7f33c937dff9 [ 2771.665124][T26651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2771.684728][T26651] RSP: 002b:00007f33ca0ec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2771.693130][T26651] RAX: ffffffffffffffda RBX: 00007f33c9535f80 RCX: 00007f33c937dff9 [ 2771.701092][T26651] RDX: 000000000001000a RSI: 00000000200109c0 RDI: 0000000000000003 [ 2771.709052][T26651] RBP: 00007f33ca0ec090 R08: 0000000000000000 R09: 0000000000000000 [ 2771.717009][T26651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2771.724967][T26651] R13: 0000000000000000 R14: 00007f33c9535f80 R15: 00007ffc20418f18 [ 2771.732938][T26651] [ 2772.028388][T26664] netlink: 'syz.3.3729': attribute type 1 has an invalid length. [ 2772.036256][T26664] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3729'. [ 2772.886610][T10024] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 2773.281541][T10024] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2773.298033][T10024] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2773.313434][T10024] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2773.324411][T10024] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2773.383008][T10024] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 2773.405407][T10024] usb 5-1: invalid MIDI out EP 0 [ 2773.595386][T10024] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2773.615380][T26484] udevd[26484]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2773.643174][T10024] usb 5-1: USB disconnect, device number 49 [ 2774.111891][T20950] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2774.122689][T20950] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2774.131762][T20950] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2774.141998][T20950] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2774.150977][T20950] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2774.159751][T20950] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2775.058023][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2775.064409][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2775.726109][T13838] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 2776.099315][T26672] chnl_net:caif_netlink_parms(): no params data found [ 2776.119571][T13838] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2776.130717][T13838] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2776.147643][T13838] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2776.166924][T13838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2776.218646][T26686] kvm: kvm [26685]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x186) = 0xfffffffffffff755 [ 2776.237843][T13838] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 2776.245730][T13838] usb 5-1: invalid MIDI out EP 0 [ 2776.262517][T20950] Bluetooth: hci1: command tx timeout [ 2776.382039][T13838] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2776.398322][T26258] udevd[26258]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2776.549769][T26672] bridge0: port 1(bridge_slave_0) entered blocking state [ 2776.573830][T10024] usb 5-1: USB disconnect, device number 50 [ 2776.593049][T26672] bridge0: port 1(bridge_slave_0) entered disabled state [ 2776.604290][T26672] bridge_slave_0: entered allmulticast mode [ 2776.615497][T26672] bridge_slave_0: entered promiscuous mode [ 2776.628922][T26672] bridge0: port 2(bridge_slave_1) entered blocking state [ 2776.640360][T26672] bridge0: port 2(bridge_slave_1) entered disabled state [ 2776.650303][T26672] bridge_slave_1: entered allmulticast mode [ 2776.662608][T26672] bridge_slave_1: entered promiscuous mode [ 2776.718788][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2776.845326][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2776.881424][T26672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2776.900734][T26672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2776.950854][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2777.020720][T26672] team0: Port device team_slave_0 added [ 2777.160293][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2777.198108][T26672] team0: Port device team_slave_1 added [ 2777.245313][T26672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2777.277196][T26672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2777.314634][T26699] netlink: 'syz.3.3737': attribute type 1 has an invalid length. [ 2777.322495][T26699] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3737'. [ 2777.568043][T26702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2777.816196][T26672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2777.848007][T26672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2777.857630][T26672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2777.910323][T26704] binder: BINDER_SET_CONTEXT_MGR already set [ 2777.916475][T26704] binder: 26700:26704 ioctl 4018620d 200002c0 returned -16 [ 2777.929377][T26672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2778.108522][T26672] hsr_slave_0: entered promiscuous mode [ 2778.138134][T26672] hsr_slave_1: entered promiscuous mode [ 2778.200323][T26672] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2778.225315][T26672] Cannot create hsr debugfs directory [ 2778.336115][T20950] Bluetooth: hci1: command tx timeout [ 2778.418112][T26711] netlink: 'syz.2.3741': attribute type 1 has an invalid length. [ 2778.425998][T26711] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3741'. [ 2779.259865][ T52] bridge_slave_1: left allmulticast mode [ 2779.276023][ T52] bridge_slave_1: left promiscuous mode [ 2779.281778][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 2779.321321][ T52] bridge_slave_0: left allmulticast mode [ 2779.336002][ T52] bridge_slave_0: left promiscuous mode [ 2779.352026][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 2779.496058][ T935] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 2779.496093][T22963] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 2779.654126][ T935] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2779.665614][ T935] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2779.689007][ T935] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2779.716492][ T935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2779.736630][T22963] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2779.740614][ T935] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2779.755934][T22963] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2779.759008][ T935] usb 3-1: invalid MIDI out EP 0 [ 2779.817107][T22963] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2779.838458][T22963] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2779.878864][T26258] udevd[26258]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2779.931154][ T935] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2779.932641][T22963] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2779.980193][T22963] usb 2-1: invalid MIDI out EP 0 [ 2780.108018][T22963] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2780.436186][T20950] Bluetooth: hci1: command tx timeout [ 2780.950355][T26714] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26714 comm=syz.2.3743 [ 2781.019824][T10024] usb 3-1: USB disconnect, device number 32 [ 2781.264627][T10024] usb 2-1: USB disconnect, device number 26 [ 2781.398223][T26725] FAULT_INJECTION: forcing a failure. [ 2781.398223][T26725] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 2781.477327][T26725] CPU: 1 UID: 0 PID: 26725 Comm: syz.4.3746 Not tainted 6.12.0-rc1-syzkaller-00125-g0c559323bbaa #0 [ 2781.488153][T26725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2781.498214][T26725] Call Trace: [ 2781.501491][T26725] [ 2781.504420][T26725] dump_stack_lvl+0x16c/0x1f0 [ 2781.509129][T26725] should_fail_ex+0x497/0x5b0 [ 2781.513821][T26725] _copy_from_user+0x30/0xf0 [ 2781.518491][T26725] core_sys_select+0x2cf/0xb80 [ 2781.523269][T26725] ? __pfx_core_sys_select+0x10/0x10 [ 2781.528563][T26725] ? get_pid_task+0xfc/0x250 [ 2781.533210][T26725] ? set_user_sigmask+0x217/0x2a0 [ 2781.538238][T26725] ? __pfx_set_user_sigmask+0x10/0x10 [ 2781.543619][T26725] do_pselect.constprop.0+0x1a0/0x1f0 [ 2781.549003][T26725] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 2781.554920][T26725] __x64_sys_pselect6+0x183/0x240 [ 2781.559976][T26725] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 2781.565558][T26725] do_syscall_64+0xcd/0x250 [ 2781.570093][T26725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2781.576002][T26725] RIP: 0033:0x7f33c937dff9 [ 2781.580423][T26725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2781.600034][T26725] RSP: 002b:00007f33ca0ec038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 2781.608457][T26725] RAX: ffffffffffffffda RBX: 00007f33c9535f80 RCX: 00007f33c937dff9 [ 2781.616429][T26725] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000040 [ 2781.624399][T26725] RBP: 00007f33ca0ec090 R08: 0000000000000000 R09: 0000000000000000 [ 2781.632366][T26725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2781.640334][T26725] R13: 0000000000000000 R14: 00007f33c9535f80 R15: 00007ffc20418f18 [ 2781.648319][T26725] [ 2781.696567][ T29] audit: type=1400 audit(1728067520.490:684): avc: denied { open } for pid=26726 comm="syz.3.3747" path="/dev/ptyqb" dev="devtmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 2781.744415][ T29] audit: type=1400 audit(1728067520.500:685): avc: denied { create } for pid=26726 comm="syz.3.3747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 2781.784133][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2781.785198][T26727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2781.813528][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2781.833897][ T52] bond0 (unregistering): Released all slaves [ 2781.847394][ T29] audit: type=1400 audit(1728067520.670:686): avc: denied { getopt } for pid=26726 comm="syz.3.3747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2782.255983][T26739] FAULT_INJECTION: forcing a failure. [ 2782.255983][T26739] name failslab, interval 1, probability 0, space 0, times 0 [ 2782.268936][T26739] CPU: 1 UID: 0 PID: 26739 Comm: syz.2.3750 Not tainted 6.12.0-rc1-syzkaller-00125-g0c559323bbaa #0 [ 2782.279739][T26739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2782.289829][T26739] Call Trace: [ 2782.293127][T26739] [ 2782.296162][T26739] dump_stack_lvl+0x16c/0x1f0 [ 2782.300874][T26739] should_fail_ex+0x497/0x5b0 [ 2782.305580][T26739] ? fs_reclaim_acquire+0xae/0x160 [ 2782.310718][T26739] should_failslab+0xc2/0x120 [ 2782.315433][T26739] __kmalloc_noprof+0xcb/0x400 [ 2782.320218][T26739] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 2782.325887][T26739] tomoyo_realpath_from_path+0xb9/0x720 [ 2782.331573][T26739] ? tomoyo_path_number_perm+0x232/0x590 [ 2782.337311][T26739] tomoyo_path_number_perm+0x245/0x590 [ 2782.342805][T26739] ? tomoyo_path_number_perm+0x232/0x590 [ 2782.348477][T26739] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2782.354521][T26739] ? trace_lock_acquire+0x14a/0x1d0 [ 2782.359759][T26739] ? lock_acquire+0x2f/0xb0 [ 2782.364280][T26739] ? __fget_files+0x40/0x3f0 [ 2782.368928][T26739] ? __fget_files+0x244/0x3f0 [ 2782.373736][T26739] security_file_ioctl+0x9b/0x240 [ 2782.378859][T26739] __x64_sys_ioctl+0xbb/0x220 [ 2782.383572][T26739] do_syscall_64+0xcd/0x250 [ 2782.388109][T26739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2782.394038][T26739] RIP: 0033:0x7f6d9197dff9 [ 2782.398519][T26739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2782.418154][T26739] RSP: 002b:00007f6d927ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2782.426595][T26739] RAX: ffffffffffffffda RBX: 00007f6d91b36130 RCX: 00007f6d9197dff9 [ 2782.434583][T26739] RDX: 0000000020000180 RSI: 00000000000089e1 RDI: 0000000000000008 [ 2782.442578][T26739] RBP: 00007f6d927ff090 R08: 0000000000000000 R09: 0000000000000000 [ 2782.450576][T26739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2782.458564][T26739] R13: 0000000000000000 R14: 00007f6d91b36130 R15: 00007fffb77f6cc8 [ 2782.466574][T26739] [ 2782.471482][T26739] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2782.520998][T20950] Bluetooth: hci1: command tx timeout [ 2783.996025][T22963] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 2784.323057][T22963] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2784.361610][T22963] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2784.397640][T22963] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2784.412426][ T29] audit: type=1400 audit(1728067523.240:687): avc: denied { write } for pid=26772 comm="syz.4.3756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2784.416480][T22963] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2784.580550][T22963] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2784.605668][T22963] usb 2-1: invalid MIDI out EP 0 [ 2784.756047][ T52] hsr_slave_0: left promiscuous mode [ 2784.785564][T22963] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2784.809420][ T52] hsr_slave_1: left promiscuous mode [ 2784.827388][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2784.834866][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2784.848225][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2784.855708][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2784.883338][ T52] veth1_macvtap: left promiscuous mode [ 2784.889296][ T52] veth0_macvtap: left promiscuous mode [ 2784.894919][ T52] veth1_vlan: left promiscuous mode [ 2784.901335][ T52] veth0_vlan: left promiscuous mode [ 2784.956199][T10024] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 2784.968298][T22963] usb 2-1: USB disconnect, device number 27 [ 2785.006839][T26209] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 2785.167550][T10024] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2785.178837][T10024] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2785.186075][ T5279] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 2785.191919][T10024] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2785.208669][T10024] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2785.228142][T26209] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2785.231018][T10024] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2785.248800][T26209] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2785.253029][T10024] usb 3-1: invalid MIDI out EP 0 [ 2785.272669][T26209] usb 5-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 2785.283116][T26209] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2785.319215][T26209] usb 5-1: config 0 descriptor?? [ 2785.409357][ T5279] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2785.423051][T10024] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2785.436045][ T5279] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2785.474798][ T5279] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2785.495718][ T5279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2785.557046][ T5279] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2785.575281][T26209] aquacomputer_d5next 0003:0C70:F00D.0002: hidraw0: USB HID v40.00 Device [HID 0c70:f00d] on usb-dummy_hcd.4-1/input0 [ 2785.606642][ T5279] usb 4-1: invalid MIDI out EP 0 [ 2785.734944][T25972] udevd[25972]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2785.763991][ T5279] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2786.122447][T26802] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26802 comm=syz.3.3759 [ 2786.222842][T26801] misc userio: Invalid payload size [ 2786.239705][ T5279] usb 4-1: USB disconnect, device number 48 [ 2786.502266][T26780] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26780 comm=syz.2.3757 [ 2786.861361][ T52] team0 (unregistering): Port device team_slave_1 removed [ 2786.880584][T26209] usb 5-1: reset high-speed USB device number 51 using dummy_hcd [ 2786.929393][T10024] usb 3-1: USB disconnect, device number 33 [ 2787.082614][T26815] misc userio: Invalid payload size [ 2787.087451][T26209] usb 5-1: device descriptor read/64, error -32 [ 2787.116796][ T52] team0 (unregistering): Port device team_slave_0 removed [ 2787.215190][ T29] audit: type=1400 audit(1728067526.040:688): avc: denied { read } for pid=26812 comm="syz.3.3761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2787.396761][T26209] usb 5-1: reset high-speed USB device number 51 using dummy_hcd [ 2787.556040][T26209] usb 5-1: device descriptor read/64, error -32 [ 2788.086173][T26209] usb 5-1: reset high-speed USB device number 51 using dummy_hcd [ 2788.138173][T26209] usb 5-1: device descriptor read/8, error -71 [ 2788.914230][T26837] misc userio: Invalid payload size [ 2789.498493][T26209] usb 5-1: reset high-speed USB device number 51 using dummy_hcd [ 2789.537486][T26209] usb 5-1: device firmware changed [ 2789.615719][ T5765] usb 5-1: USB disconnect, device number 51 [ 2789.872182][ T5765] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 2790.156840][ T5765] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2790.170635][ T5765] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2790.221684][ T5765] usb 5-1: Product: syz [ 2790.226400][ T5765] usb 5-1: Manufacturer: syz [ 2790.231161][ T5765] usb 5-1: SerialNumber: syz [ 2790.251210][ T5765] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2790.286067][T13838] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 2790.382638][ T5279] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2790.479962][T13838] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2790.531347][T13838] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2790.569431][T26672] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2790.571083][T13838] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2790.589259][T26857] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3770'. [ 2790.615805][T26863] netlink: 'syz.3.3771': attribute type 1 has an invalid length. [ 2790.626399][T26863] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3771'. [ 2790.665235][T26857] FAULT_INJECTION: forcing a failure. [ 2790.665235][T26857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2790.679285][T13838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2790.708786][T26672] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2790.732792][T13838] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2790.744886][T26672] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2790.762254][T13838] usb 3-1: invalid MIDI out EP 0 [ 2790.814469][T26857] CPU: 1 UID: 0 PID: 26857 Comm: syz.1.3770 Not tainted 6.12.0-rc1-syzkaller-00125-g0c559323bbaa #0 [ 2790.825409][T26857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2790.835496][T26857] Call Trace: [ 2790.838780][T26857] [ 2790.841713][T26857] dump_stack_lvl+0x16c/0x1f0 [ 2790.846506][T26857] should_fail_ex+0x497/0x5b0 [ 2790.851203][T26857] _copy_to_user+0x30/0xc0 [ 2790.855628][T26857] simple_read_from_buffer+0xd0/0x160 [ 2790.861022][T26857] proc_fail_nth_read+0x198/0x270 [ 2790.866142][T26857] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2790.871703][T26857] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2790.877257][T26857] vfs_read+0x1ce/0xbd0 [ 2790.881428][T26857] ? __fget_files+0x23a/0x3f0 [ 2790.886116][T26857] ? fdget_pos+0x24c/0x360 [ 2790.890546][T26857] ? __pfx_lock_release+0x10/0x10 [ 2790.895576][T26857] ? trace_lock_acquire+0x14a/0x1d0 [ 2790.900789][T26857] ? __pfx_vfs_read+0x10/0x10 [ 2790.905478][T26857] ? __pfx___mutex_lock+0x10/0x10 [ 2790.910524][T26857] ? __fget_files+0x244/0x3f0 [ 2790.915221][T26857] ksys_read+0x12f/0x260 [ 2790.919491][T26857] ? __pfx_ksys_read+0x10/0x10 [ 2790.924274][T26857] ? rcu_is_watching+0x12/0xc0 [ 2790.929170][T26857] do_syscall_64+0xcd/0x250 [ 2790.933690][T26857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2790.939595][T26857] RIP: 0033:0x7fa04df7ca3c [ 2790.944021][T26857] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 2790.963659][T26857] RSP: 002b:00007fa04ed5c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2790.972084][T26857] RAX: ffffffffffffffda RBX: 00007fa04e135f80 RCX: 00007fa04df7ca3c [ 2790.980060][T26857] RDX: 000000000000000f RSI: 00007fa04ed5c0a0 RDI: 000000000000000c [ 2790.988038][T26857] RBP: 00007fa04ed5c090 R08: 0000000000000000 R09: 0000000000000000 [ 2790.996023][T26857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2791.004032][T26857] R13: 0000000000000000 R14: 00007fa04e135f80 R15: 00007fff064519a8 [ 2791.012023][T26857] [ 2791.088892][T26672] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2791.252465][T13838] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2791.310988][T13838] usb 3-1: USB disconnect, device number 34 [ 2791.379002][T26672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2791.450827][T26672] 8021q: adding VLAN 0 to HW filter on device team0 [ 2791.494176][T21508] bridge0: port 1(bridge_slave_0) entered blocking state [ 2791.501449][T21508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2791.559120][T18488] bridge0: port 2(bridge_slave_1) entered blocking state [ 2791.566313][T18488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2791.776120][ T5279] usb 5-1: Service connection timeout for: 256 [ 2791.782443][ T5279] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 2791.840272][ T5279] ath9k_htc: Failed to initialize the device [ 2791.883916][ T5279] usb 5-1: ath9k_htc: USB layer deinitialized [ 2792.069771][T26672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2792.183235][T10024] usb 5-1: USB disconnect, device number 52 [ 2792.664703][T26672] veth0_vlan: entered promiscuous mode [ 2792.891681][T26672] veth1_vlan: entered promiscuous mode [ 2793.042222][T26672] veth0_macvtap: entered promiscuous mode [ 2793.084422][T26672] veth1_macvtap: entered promiscuous mode [ 2793.141050][T26672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2793.172742][T26672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2793.183050][T26672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2793.197904][T26672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2793.376041][T26672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2793.419389][T26672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2793.518591][T26672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2793.711569][T26672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2793.869495][T26672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2793.951589][T26672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2794.014716][T26672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2794.442436][T26672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2794.467661][T26672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2794.563290][T26672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2794.611909][T26898] FAULT_INJECTION: forcing a failure. [ 2794.611909][T26898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2794.646070][T26672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2794.689490][T26898] CPU: 1 UID: 0 PID: 26898 Comm: syz.1.3777 Not tainted 6.12.0-rc1-syzkaller-00125-g0c559323bbaa #0 [ 2794.700423][T26898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2794.710509][T26898] Call Trace: [ 2794.713806][T26898] [ 2794.716751][T26898] dump_stack_lvl+0x16c/0x1f0 [ 2794.721464][T26898] should_fail_ex+0x497/0x5b0 [ 2794.726185][T26898] _copy_from_user+0x30/0xf0 [ 2794.730806][T26898] copy_msghdr_from_user+0x99/0x160 [ 2794.736161][T26898] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 2794.742023][T26898] ? find_held_lock+0x2d/0x110 [ 2794.746848][T26898] ___sys_sendmsg+0xff/0x1e0 [ 2794.751489][T26898] ? __pfx____sys_sendmsg+0x10/0x10 [ 2794.756725][T26898] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2794.762671][T26898] ? fdget+0x176/0x210 [ 2794.766794][T26898] __sys_sendmsg+0x117/0x1f0 [ 2794.771430][T26898] ? __pfx___sys_sendmsg+0x10/0x10 [ 2794.776668][T26898] ? __fget_files+0x244/0x3f0 [ 2794.779793][T26672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2794.781386][T26898] do_syscall_64+0xcd/0x250 [ 2794.791913][T26672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2794.796243][T26898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2794.796276][T26898] RIP: 0033:0x7fa04df7dff9 [ 2794.796297][T26898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2794.796322][T26898] RSP: 002b:00007fa04ed5c038 EFLAGS: 00000246 [ 2794.806252][T26672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2794.811966][T26898] ORIG_RAX: 000000000000002e [ 2794.816427][T26672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2794.835944][T26898] RAX: ffffffffffffffda RBX: 00007fa04e135f80 RCX: 00007fa04df7dff9 [ 2794.835964][T26898] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000004 [ 2794.835979][T26898] RBP: 00007fa04ed5c090 R08: 0000000000000000 R09: 0000000000000000 [ 2794.835995][T26898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2794.836009][T26898] R13: 0000000000000000 R14: 00007fa04e135f80 R15: 00007fff064519a8 [ 2794.836042][T26898] [ 2794.923640][T26672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2794.934329][T26672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2794.945741][T26672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2794.956282][T26672] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2794.965052][T26672] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2794.973914][T26672] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2794.983510][T26672] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2795.056169][ T935] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 2795.159858][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2795.173622][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2795.212406][ T5384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2795.218009][ T935] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2795.234021][ T5384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2795.236591][ T935] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2795.279938][ T935] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2795.289205][ T935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2795.314918][ T935] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2795.326094][ T5765] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 2795.336357][ T935] usb 4-1: invalid MIDI out EP 0 [ 2795.473497][ T935] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2795.485994][ T5765] usb 3-1: Using ep0 maxpacket: 16 [ 2795.513418][ T5765] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2795.548227][ T5765] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2795.589403][ T5765] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2795.632851][ T5765] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 2795.695697][ T5765] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2795.778395][ T29] audit: type=1400 audit(1728067534.580:689): avc: denied { listen } for pid=26918 comm="syz.1.3784" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2795.800889][ T5765] usb 3-1: config 0 descriptor?? [ 2795.808964][ T29] audit: type=1400 audit(1728067534.640:690): avc: denied { accept } for pid=26918 comm="syz.1.3784" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2795.878886][ T935] usb 4-1: USB disconnect, device number 49 [ 2795.972875][T26929] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3787'. [ 2796.069831][T26933] FAULT_INJECTION: forcing a failure. [ 2796.069831][T26933] name failslab, interval 1, probability 0, space 0, times 0 [ 2796.094740][T20950] Bluetooth: hci1: unexpected event 0x04 length: 14 > 10 [ 2796.101060][T26933] CPU: 0 UID: 0 PID: 26933 Comm: syz.4.3788 Not tainted 6.12.0-rc1-syzkaller-00125-g0c559323bbaa #0 [ 2796.118957][T26933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2796.129021][T26933] Call Trace: [ 2796.132312][T26933] [ 2796.135252][T26933] dump_stack_lvl+0x16c/0x1f0 [ 2796.139971][T26933] should_fail_ex+0x497/0x5b0 [ 2796.144682][T26933] ? fs_reclaim_acquire+0xae/0x160 [ 2796.149818][T26933] should_failslab+0xc2/0x120 [ 2796.154513][T26933] __kmalloc_noprof+0xcb/0x400 [ 2796.159308][T26933] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 2796.164981][T26933] tomoyo_realpath_from_path+0xb9/0x720 [ 2796.170574][T26933] ? tomoyo_path_number_perm+0x232/0x590 [ 2796.176248][T26933] tomoyo_path_number_perm+0x245/0x590 [ 2796.181745][T26933] ? tomoyo_path_number_perm+0x232/0x590 [ 2796.187418][T26933] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2796.193456][T26933] ? trace_lock_acquire+0x14a/0x1d0 [ 2796.198692][T26933] ? lock_acquire+0x2f/0xb0 [ 2796.203220][T26933] ? __fget_files+0x40/0x3f0 [ 2796.207837][T26933] ? __fget_files+0x244/0x3f0 [ 2796.212560][T26933] security_file_ioctl+0x9b/0x240 [ 2796.217615][T26933] __x64_sys_ioctl+0xbb/0x220 [ 2796.222321][T26933] do_syscall_64+0xcd/0x250 [ 2796.226847][T26933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2796.232769][T26933] RIP: 0033:0x7f33c937dff9 [ 2796.237214][T26933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2796.252813][ T5765] hid-multitouch 0003:0457:07DA.0003: unknown main item tag 0x0 [ 2796.256833][T26933] RSP: 002b:00007f33ca0ec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2796.256880][T26933] RAX: ffffffffffffffda RBX: 00007f33c9535f80 RCX: 00007f33c937dff9 [ 2796.256897][T26933] RDX: 0000000000000000 RSI: 00000000000007a9 RDI: 0000000000000003 [ 2796.256912][T26933] RBP: 00007f33ca0ec090 R08: 0000000000000000 R09: 0000000000000000 [ 2796.256926][T26933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2796.256940][T26933] R13: 0000000000000000 R14: 00007f33c9535f80 R15: 00007ffc20418f18 [ 2796.256972][T26933] [ 2796.293884][T26933] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2796.298263][ T5765] hid-multitouch 0003:0457:07DA.0003: unknown main item tag 0x0 [ 2796.332948][ T5765] hid-multitouch 0003:0457:07DA.0003: unknown main item tag 0x0 [ 2796.343219][ T5765] hid-multitouch 0003:0457:07DA.0003: unknown main item tag 0x0 [ 2796.351026][ T5765] hid-multitouch 0003:0457:07DA.0003: unknown main item tag 0x0 [ 2796.358860][ T5765] hid-multitouch 0003:0457:07DA.0003: unknown main item tag 0x0 [ 2796.366600][ T5765] hid-multitouch 0003:0457:07DA.0003: unknown main item tag 0x0 [ 2796.374288][ T5765] hid-multitouch 0003:0457:07DA.0003: unknown main item tag 0x0 [ 2796.383036][ T5765] hid-multitouch 0003:0457:07DA.0003: unknown main item tag 0x0 [ 2796.395629][ T5765] hid-multitouch 0003:0457:07DA.0003: unknown main item tag 0x0 [ 2796.450091][ T5765] hid-multitouch 0003:0457:07DA.0003: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.2-1/input0 [ 2797.159566][ T29] audit: type=1400 audit(1728067535.980:691): avc: denied { write } for pid=26937 comm="syz.4.3790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2797.320491][T26900] syz.2.3779 (26900): /proc/26899/oom_adj is deprecated, please use /proc/26899/oom_score_adj instead. [ 2797.371896][ T935] usb 3-1: USB disconnect, device number 35 [ 2797.376949][T26951] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 2797.389755][T26949] FAULT_INJECTION: forcing a failure. [ 2797.389755][T26949] name failslab, interval 1, probability 0, space 0, times 0 [ 2797.402685][T26949] CPU: 1 UID: 0 PID: 26949 Comm: syz.3.3792 Not tainted 6.12.0-rc1-syzkaller-00125-g0c559323bbaa #0 [ 2797.413489][T26949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2797.423670][T26949] Call Trace: [ 2797.426978][T26949] [ 2797.429939][T26949] dump_stack_lvl+0x16c/0x1f0 [ 2797.434665][T26949] should_fail_ex+0x497/0x5b0 [ 2797.439394][T26949] ? fs_reclaim_acquire+0xae/0x160 [ 2797.444549][T26949] should_failslab+0xc2/0x120 [ 2797.449275][T26949] __kmalloc_noprof+0xcb/0x400 [ 2797.454087][T26949] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 2797.459771][T26949] tomoyo_realpath_from_path+0xb9/0x720 [ 2797.465360][T26949] ? tomoyo_path_number_perm+0x232/0x590 [ 2797.471048][T26949] tomoyo_path_number_perm+0x245/0x590 [ 2797.476535][T26949] ? tomoyo_path_number_perm+0x232/0x590 [ 2797.482185][T26949] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2797.488204][T26949] ? trace_lock_acquire+0x14a/0x1d0 [ 2797.493449][T26949] ? lock_acquire+0x2f/0xb0 [ 2797.497976][T26949] ? __fget_files+0x40/0x3f0 [ 2797.502606][T26949] ? __fget_files+0x244/0x3f0 [ 2797.507302][T26949] security_file_ioctl+0x9b/0x240 [ 2797.512338][T26949] __x64_sys_ioctl+0xbb/0x220 [ 2797.517045][T26949] do_syscall_64+0xcd/0x250 [ 2797.521571][T26949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2797.527562][T26949] RIP: 0033:0x7f553b77dff9 [ 2797.531982][T26949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2797.551610][T26949] RSP: 002b:00007f553c585038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2797.560064][T26949] RAX: ffffffffffffffda RBX: 00007f553b935f80 RCX: 00007f553b77dff9 [ 2797.568062][T26949] RDX: 00000000200003c0 RSI: 000000004008af30 RDI: 0000000000000003 [ 2797.576047][T26949] RBP: 00007f553c585090 R08: 0000000000000000 R09: 0000000000000000 [ 2797.584029][T26949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2797.592007][T26949] R13: 0000000000000000 R14: 00007f553b935f80 R15: 00007ffd241d48f8 [ 2797.600007][T26949] [ 2797.621883][T26949] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2797.709890][ T29] audit: type=1326 audit(1728067536.530:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26959 comm="syz.4.3797" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f33c937dff9 code=0x0 [ 2797.752909][T26962] bridge0: port 2(bridge_slave_1) entered disabled state [ 2797.760298][T26962] bridge0: port 1(bridge_slave_0) entered disabled state [ 2797.768112][T26962] bridge0: entered allmulticast mode [ 2797.777975][T26962] bridge0: port 2(bridge_slave_1) entered blocking state [ 2797.785054][T26962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2797.792481][T26962] bridge0: port 1(bridge_slave_0) entered blocking state [ 2797.799592][T26962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2797.810018][T26962] bridge0: entered promiscuous mode [ 2798.013231][T26963] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3797'. [ 2798.097119][T17186] Bluetooth: hci1: command tx timeout [ 2798.442095][ T29] audit: type=1400 audit(1728067537.260:693): avc: denied { watch } for pid=26959 comm="syz.4.3797" path="/112/bus" dev="tmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2799.122202][ T29] audit: type=1400 audit(1728067537.950:694): avc: denied { read write } for pid=26985 comm="syz.4.3806" name="uhid" dev="devtmpfs" ino=1081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 2799.147856][T18038] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 2799.167574][T10024] hid (null): bogus close delimiter [ 2799.175492][ T29] audit: type=1400 audit(1728067537.990:695): avc: denied { open } for pid=26985 comm="syz.4.3806" path="/dev/uhid" dev="devtmpfs" ino=1081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 2799.210101][T10024] hid (null): invalid report_count 916482309 [ 2799.238511][T10024] hid (null): unknown global tag 0xe [ 2799.257660][T10024] hid (null): unknown global tag 0xe [ 2799.331105][T10024] hid-generic 0005:0029:02ED.0004: unknown main item tag 0x6 [ 2799.340671][T10024] hid-generic 0005:0029:02ED.0004: bogus close delimiter [ 2799.348066][T10024] hid-generic 0005:0029:02ED.0004: item 0 0 2 10 parsing failed [ 2799.356950][T10024] hid-generic 0005:0029:02ED.0004: probe with driver hid-generic failed with error -22 [ 2800.314545][ T29] audit: type=1400 audit(1728067538.920:696): avc: denied { create } for pid=26989 comm="syz.2.3807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2800.360216][T18038] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2800.461529][T26997] FAULT_INJECTION: forcing a failure. [ 2800.461529][T26997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2800.476628][ T29] audit: type=1400 audit(1728067538.920:697): avc: denied { setopt } for pid=26989 comm="syz.2.3807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2800.636189][T26997] CPU: 1 UID: 0 PID: 26997 Comm: syz.1.3808 Not tainted 6.12.0-rc1-syzkaller-00125-g0c559323bbaa #0 [ 2800.647031][T26997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2800.657119][T26997] Call Trace: [ 2800.660414][T26997] [ 2800.663363][T26997] dump_stack_lvl+0x16c/0x1f0 [ 2800.668079][T26997] should_fail_ex+0x497/0x5b0 [ 2800.672798][T26997] _copy_from_user+0x30/0xf0 [ 2800.677449][T18038] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2800.677426][T26997] __sys_bpf+0x21c/0x49a0 [ 2800.690400][T18038] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2800.694632][T26997] ? ksys_write+0x21e/0x260 [ 2800.708333][T26997] ? reacquire_held_locks+0x4c0/0x4c0 [ 2800.713833][T26997] ? __pfx___sys_bpf+0x10/0x10 [ 2800.718725][T26997] ? vfs_write+0x14d/0x1140 [ 2800.720154][T18038] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2800.723266][T26997] ? __mutex_unlock_slowpath+0x164/0x650 [ 2800.737104][T18038] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2800.737495][T18038] usb 4-1: invalid MIDI out EP 0 [ 2800.744060][T26997] ? fput+0x30/0x390 [ 2800.752934][T26997] ? ksys_write+0x1ad/0x260 [ 2800.757489][T26997] ? __pfx_ksys_write+0x10/0x10 [ 2800.762392][T26997] __x64_sys_bpf+0x78/0xc0 [ 2800.766933][T26997] ? lockdep_hardirqs_on+0x7c/0x110 [ 2800.772182][T26997] do_syscall_64+0xcd/0x250 [ 2800.776795][T26997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2800.782729][T26997] RIP: 0033:0x7fa04df7dff9 [ 2800.787179][T26997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2800.806834][T26997] RSP: 002b:00007fa04ed5c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2800.815284][T26997] RAX: ffffffffffffffda RBX: 00007fa04e135f80 RCX: 00007fa04df7dff9 [ 2800.823292][T26997] RDX: 0000000000000010 RSI: 00000000200001c0 RDI: 0000000000000008 [ 2800.831300][T26997] RBP: 00007fa04ed5c090 R08: 0000000000000000 R09: 0000000000000000 [ 2800.839306][T26997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2800.847311][T26997] R13: 0000000000000000 R14: 00007fa04e135f80 R15: 00007fff064519a8 [ 2800.855343][T26997] [ 2800.884264][T26999] dccp_close: ABORT with 1 bytes unread [ 2800.887116][T27003] FAULT_INJECTION: forcing a failure. [ 2800.887116][T27003] name failslab, interval 1, probability 0, space 0, times 0 [ 2800.896003][ T29] audit: type=1400 audit(1728067539.710:698): avc: denied { read } for pid=26999 comm="syz.2.3811" laddr=::1 lport=20000 faddr=::1 fport=58114 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 2800.903541][T27003] CPU: 0 UID: 0 PID: 27003 Comm: syz.0.3810 Not tainted 6.12.0-rc1-syzkaller-00125-g0c559323bbaa #0 [ 2800.937450][T27003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2800.947546][T27003] Call Trace: [ 2800.950842][T27003] [ 2800.953819][T27003] dump_stack_lvl+0x16c/0x1f0 [ 2800.958537][T27003] should_fail_ex+0x497/0x5b0 [ 2800.963265][T27003] ? fs_reclaim_acquire+0xae/0x160 [ 2800.968426][T27003] should_failslab+0xc2/0x120 [ 2800.973142][T27003] __kmalloc_noprof+0xcb/0x400 [ 2800.977948][T27003] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 2800.983622][T27003] tomoyo_realpath_from_path+0xb9/0x720 [ 2800.989222][T27003] ? tomoyo_path_perm+0x25f/0x450 [ 2800.994299][T27003] tomoyo_path_perm+0x273/0x450 [ 2800.999188][T27003] ? tomoyo_path_perm+0x25f/0x450 [ 2801.004239][T27003] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 2801.009629][T27003] ? __pfx_mark_lock+0x10/0x10 [ 2801.014393][T27003] ? find_held_lock+0x2d/0x110 [ 2801.019178][T27003] ? __pfx_lock_release+0x10/0x10 [ 2801.024298][T27003] ? trace_lock_acquire+0x14a/0x1d0 [ 2801.029570][T27003] ? hlock_class+0x4e/0x130 [ 2801.034088][T27003] ? mark_lock+0xb5/0xc60 [ 2801.038428][T27003] security_inode_getattr+0x116/0x290 [ 2801.043884][T27003] vfs_getattr+0x36/0xb0 [ 2801.048140][T27003] ovl_iterate_real+0x394/0x1620 [ 2801.053128][T27003] ? __pfx_ovl_iterate_real+0x10/0x10 [ 2801.058512][T27003] ? hlock_class+0x4e/0x130 [ 2801.063048][T27003] ? __pfx_ovl_fill_real+0x10/0x10 [ 2801.068187][T27003] ? __pfx___lock_acquire+0x10/0x10 [ 2801.073391][T27003] ? __pfx___lock_acquire+0x10/0x10 [ 2801.078592][T27003] ? lock_acquire.part.0+0x11b/0x380 [ 2801.083896][T27003] ? trace_lock_acquire+0x14a/0x1d0 [ 2801.089101][T27003] ? wrap_directory_iterator+0x54/0xe0 [ 2801.094571][T27003] ? lock_acquire+0x2f/0xb0 [ 2801.099081][T27003] ovl_iterate+0x6c6/0xe40 [ 2801.103508][T27003] ? __pfx_down_write+0x10/0x10 [ 2801.108368][T27003] ? down_read_killable+0xcc/0x380 [ 2801.113487][T27003] ? __pfx_down_read_killable+0x10/0x10 [ 2801.119046][T27003] ? __pfx_ovl_iterate+0x10/0x10 [ 2801.123990][T27003] wrap_directory_iterator+0x9f/0xe0 [ 2801.129291][T27003] iterate_dir+0x52f/0xb40 [ 2801.133725][T27003] __x64_sys_getdents+0x14c/0x2d0 [ 2801.138769][T27003] ? __pfx___x64_sys_getdents+0x10/0x10 [ 2801.144329][T27003] ? __pfx_filldir+0x10/0x10 [ 2801.148940][T27003] do_syscall_64+0xcd/0x250 [ 2801.153458][T27003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2801.159356][T27003] RIP: 0033:0x7f3efd17dff9 [ 2801.163774][T27003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2801.183388][T27003] RSP: 002b:00007f3efdf43038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 2801.191811][T27003] RAX: ffffffffffffffda RBX: 00007f3efd335f80 RCX: 00007f3efd17dff9 [ 2801.199789][T27003] RDX: 0000000000000068 RSI: 0000000020000300 RDI: 0000000000000005 [ 2801.207760][T27003] RBP: 00007f3efdf43090 R08: 0000000000000000 R09: 0000000000000000 [ 2801.215736][T27003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2801.223709][T27003] R13: 0000000000000000 R14: 00007f3efd335f80 R15: 00007ffdc2760108 [ 2801.231708][T27003] [ 2801.236067][T27003] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2801.348525][T27005] overlayfs: failed to resolve './file1': -2 [ 2801.366222][T26972] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26972 comm=syz.3.3800 [ 2801.564563][T18038] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2802.136280][ T5765] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 2802.256774][T18038] usb 4-1: USB disconnect, device number 50 [ 2802.430823][ T29] audit: type=1400 audit(1728067541.260:699): avc: denied { bind } for pid=27016 comm="syz.1.3816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2802.460285][T27000] misc userio: Invalid payload size [ 2802.501336][ T29] audit: type=1400 audit(1728067541.300:700): avc: denied { read } for pid=27014 comm="syz.0.3815" name="usbmon0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 2802.526090][ T5765] usb 3-1: Using ep0 maxpacket: 8 [ 2802.538917][ T5765] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 2802.551384][ T5765] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2802.556513][ T29] audit: type=1400 audit(1728067541.300:701): avc: denied { open } for pid=27014 comm="syz.0.3815" path="/dev/usbmon0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 2802.598728][ T5765] usb 3-1: Product: syz [ 2802.612175][ T5765] usb 3-1: Manufacturer: syz [ 2802.623709][ T5765] usb 3-1: SerialNumber: syz [ 2802.640604][ T5765] usb 3-1: config 0 descriptor?? [ 2802.666141][ T29] audit: type=1400 audit(1728067541.360:702): avc: denied { map } for pid=27014 comm="syz.0.3815" path="/dev/usbmon0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 2802.680365][ T5765] gspca_main: sq930x-2.14.0 probing 2770:930c [ 2802.715997][ T29] audit: type=1400 audit(1728067541.440:703): avc: denied { setopt } for pid=27016 comm="syz.1.3816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2802.786390][ T29] audit: type=1400 audit(1728067541.480:704): avc: denied { write } for pid=27016 comm="syz.1.3816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2802.839467][ T29] audit: type=1400 audit(1728067541.660:705): avc: denied { bind } for pid=27025 comm="syz.4.3819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2802.883614][ T29] audit: type=1400 audit(1728067541.660:706): avc: denied { write } for pid=27025 comm="syz.4.3819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2803.469382][ T29] audit: type=1400 audit(1728067542.300:707): avc: denied { module_request } for pid=27033 comm="syz.4.3822" kmod="net-pf-10-proto-0-type-3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 2803.503050][ T5765] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 2803.756874][ T5765] gspca_sq930x: Sensor ov9630 not yet treated [ 2803.763840][ T5765] sq930x 3-1:0.0: probe with driver sq930x failed with error -22 [ 2803.809080][ T5765] usb 3-1: USB disconnect, device number 36 [ 2803.945784][T27045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2805.240603][T27057] netlink: 'syz.2.3826': attribute type 1 has an invalid length. [ 2805.253834][T27057] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3826'. [ 2805.264539][T27059] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3827'. [ 2805.303984][T27059] openvswitch: netlink: Missing key (keys=40, expected=100) [ 2806.816113][ T935] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 2807.092954][ T935] usb 4-1: Using ep0 maxpacket: 32 [ 2807.100398][ T935] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2807.110720][ T935] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2807.121195][ T935] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2807.133393][ T935] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=3 [ 2807.606803][ T935] usb 4-1: Manufacturer: syz [ 2807.611624][ T935] usb 4-1: SerialNumber: syz [ 2807.793959][T27083] FAULT_INJECTION: forcing a failure. [ 2807.793959][T27083] name failslab, interval 1, probability 0, space 0, times 0 [ 2807.806829][T27083] CPU: 0 UID: 0 PID: 27083 Comm: syz.4.3834 Not tainted 6.12.0-rc1-syzkaller-00125-g0c559323bbaa #0 [ 2807.817616][T27083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2807.827695][T27083] Call Trace: [ 2807.830971][T27083] [ 2807.833895][T27083] dump_stack_lvl+0x16c/0x1f0 [ 2807.838576][T27083] should_fail_ex+0x497/0x5b0 [ 2807.843251][T27083] ? fs_reclaim_acquire+0xae/0x160 [ 2807.848358][T27083] should_failslab+0xc2/0x120 [ 2807.853030][T27083] __kmalloc_noprof+0xcb/0x400 [ 2807.857789][T27083] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 2807.863416][T27083] tomoyo_realpath_from_path+0xb9/0x720 [ 2807.868979][T27083] ? tomoyo_path_number_perm+0x232/0x590 [ 2807.874611][T27083] tomoyo_path_number_perm+0x245/0x590 [ 2807.880155][T27083] ? tomoyo_path_number_perm+0x232/0x590 [ 2807.885821][T27083] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2807.891845][T27083] ? trace_lock_acquire+0x14a/0x1d0 [ 2807.897047][T27083] ? lock_acquire+0x2f/0xb0 [ 2807.901540][T27083] ? __fget_files+0x40/0x3f0 [ 2807.906128][T27083] ? __fget_files+0x244/0x3f0 [ 2807.910829][T27083] security_file_ioctl+0x9b/0x240 [ 2807.915853][T27083] __x64_sys_ioctl+0xbb/0x220 [ 2807.920546][T27083] do_syscall_64+0xcd/0x250 [ 2807.925084][T27083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2807.930986][T27083] RIP: 0033:0x7f33c937dff9 [ 2807.935395][T27083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2807.955006][T27083] RSP: 002b:00007f33ca0aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2807.963444][T27083] RAX: ffffffffffffffda RBX: 00007f33c9536130 RCX: 00007f33c937dff9 [ 2807.971435][T27083] RDX: 0000000020000580 RSI: 000000004008af03 RDI: 0000000000000007 [ 2807.979400][T27083] RBP: 00007f33ca0aa090 R08: 0000000000000000 R09: 0000000000000000 [ 2807.987371][T27083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2807.995398][T27083] R13: 0000000000000000 R14: 00007f33c9536130 R15: 00007ffc20418f18 [ 2808.003385][T27083] [ 2808.007385][T27083] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2808.051062][T27073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2808.106357][T27073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2808.860627][T27091] bridge0: port 3(veth0_to_bridge) entered blocking state [ 2808.894236][T27091] bridge0: port 3(veth0_to_bridge) entered disabled state [ 2808.927710][T27091] veth0_to_bridge: entered allmulticast mode [ 2808.967462][T27091] veth0_to_bridge: entered promiscuous mode [ 2809.004255][T27091] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2809.071092][T27091] bridge0: port 3(veth0_to_bridge) entered blocking state [ 2809.078539][T27091] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 2809.229421][ T5765] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 2809.403121][ T5765] usb 2-1: Using ep0 maxpacket: 8 [ 2809.413562][ T5765] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2809.428633][ T5765] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2809.455349][ T5765] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 2809.473926][ T5765] usb 2-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 2809.483641][ T5765] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2809.494451][ T5765] usb 2-1: config 0 descriptor?? [ 2809.620027][ T935] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 2809.661632][ T935] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2809.710079][ T935] usb 4-1: USB disconnect, device number 51 [ 2809.741499][T26438] udevd[26438]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2810.803111][T27129] netlink: 'syz.3.3848': attribute type 1 has an invalid length. [ 2810.829219][T27129] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3848'. [ 2811.210884][T27135] FAULT_INJECTION: forcing a failure. [ 2811.210884][T27135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2811.224364][T27135] CPU: 1 UID: 0 PID: 27135 Comm: syz.2.3849 Not tainted 6.12.0-rc1-syzkaller-00125-g0c559323bbaa #0 [ 2811.235165][T27135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2811.245248][T27135] Call Trace: [ 2811.248544][T27135] [ 2811.251494][T27135] dump_stack_lvl+0x16c/0x1f0 [ 2811.256210][T27135] should_fail_ex+0x497/0x5b0 [ 2811.261015][T27135] _copy_from_user+0x30/0xf0 [ 2811.265635][T27135] do_semtimedop+0x173/0x310 [ 2811.270355][T27135] ? __pfx_do_semtimedop+0x10/0x10 [ 2811.275498][T27135] ? ksys_write+0x12f/0x260 [ 2811.280068][T27135] ? __fget_files+0x244/0x3f0 [ 2811.284780][T27135] __x64_sys_semtimedop+0x1b8/0x1f0 [ 2811.290014][T27135] ? __pfx___x64_sys_semtimedop+0x10/0x10 [ 2811.295771][T27135] do_syscall_64+0xcd/0x250 [ 2811.300307][T27135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2811.306312][T27135] RIP: 0033:0x7f6d9197dff9 [ 2811.310752][T27135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2811.330388][T27135] RSP: 002b:00007f6d927ff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000dc [ 2811.338836][T27135] RAX: ffffffffffffffda RBX: 00007f6d91b36130 RCX: 00007f6d9197dff9 [ 2811.346830][T27135] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000000 [ 2811.354830][T27135] RBP: 00007f6d927ff090 R08: 0000000000000000 R09: 0000000000000000 [ 2811.362822][T27135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2811.370822][T27135] R13: 0000000000000000 R14: 00007f6d91b36130 R15: 00007fffb77f6cc8 [ 2811.378931][T27135] [ 2813.597457][ T5765] usb 2-1: string descriptor 0 read error: -71 [ 2813.603838][ T5765] qmi_wwan 2-1:0.0: probe with driver qmi_wwan failed with error -22 [ 2813.633735][ T5765] usb 2-1: USB disconnect, device number 28 [ 2814.116541][T27151] misc userio: Invalid payload size [ 2815.165087][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 2815.165107][ T29] audit: type=1400 audit(1728067553.990:711): avc: denied { bind } for pid=27154 comm="syz.2.3856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2815.393169][T20950] Bluetooth: hci3: command 0x0406 tx timeout [ 2816.221346][ T29] audit: type=1400 audit(1728067555.050:712): avc: denied { mount } for pid=27154 comm="syz.2.3856" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 2816.386179][ T935] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 2816.430735][ T29] audit: type=1400 audit(1728067555.260:713): avc: denied { unmount } for pid=25839 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 2816.547503][ T935] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2816.578499][ T935] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2816.597268][ T935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2817.017357][ T935] usb 4-1: config 0 descriptor?? [ 2817.033917][ T935] pwc: Askey VC010 type 2 USB webcam detected. [ 2817.262679][T27167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2817.291424][T27167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2817.324332][T27177] FAULT_INJECTION: forcing a failure. [ 2817.324332][T27177] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2817.356033][T27177] CPU: 0 UID: 0 PID: 27177 Comm: syz.2.3861 Not tainted 6.12.0-rc1-syzkaller-00125-g0c559323bbaa #0 [ 2817.366827][T27177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2817.376879][T27177] Call Trace: [ 2817.380151][T27177] [ 2817.383100][T27177] dump_stack_lvl+0x16c/0x1f0 [ 2817.387781][T27177] should_fail_ex+0x497/0x5b0 [ 2817.392487][T27177] _copy_from_iter+0x2a1/0x1540 [ 2817.397396][T27177] ? __pfx__copy_from_iter+0x10/0x10 [ 2817.402671][T27177] ? __virt_addr_valid+0x1a4/0x590 [ 2817.407824][T27177] ? __virt_addr_valid+0x5e/0x590 [ 2817.412849][T27177] ? __phys_addr_symbol+0x30/0x80 [ 2817.417878][T27177] ? __check_object_size+0x488/0x710 [ 2817.423157][T27177] kernfs_fop_write_iter+0x19d/0x500 [ 2817.428443][T27177] vfs_write+0x6b5/0x1140 [ 2817.432768][T27177] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 2817.438573][T27177] ? trace_lock_acquire+0x14a/0x1d0 [ 2817.443767][T27177] ? __pfx_vfs_write+0x10/0x10 [ 2817.448527][T27177] ? __pfx___mutex_lock+0x10/0x10 [ 2817.453560][T27177] ksys_write+0x12f/0x260 [ 2817.457892][T27177] ? __pfx_ksys_write+0x10/0x10 [ 2817.462749][T27177] do_syscall_64+0xcd/0x250 [ 2817.467254][T27177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2817.473147][T27177] RIP: 0033:0x7f6d9197dff9 [ 2817.477556][T27177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2817.497157][T27177] RSP: 002b:00007f6d92841038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2817.505564][T27177] RAX: ffffffffffffffda RBX: 00007f6d91b35f80 RCX: 00007f6d9197dff9 [ 2817.513540][T27177] RDX: 000000000001000a RSI: 00000000200109c0 RDI: 0000000000000003 [ 2817.521518][T27177] RBP: 00007f6d92841090 R08: 0000000000000000 R09: 0000000000000000 [ 2817.529495][T27177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2817.537456][T27177] R13: 0000000000000000 R14: 00007f6d91b35f80 R15: 00007fffb77f6cc8 [ 2817.545450][T27177] [ 2817.630947][ T935] pwc: recv_control_msg error -71 req 02 val 2b00 [ 2817.697824][ T935] pwc: recv_control_msg error -71 req 02 val 2700 [ 2817.710165][ T935] pwc: recv_control_msg error -71 req 02 val 2c00 [ 2817.735800][T27179] FAULT_INJECTION: forcing a failure. [ 2817.735800][T27179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2817.752857][T27179] CPU: 0 UID: 0 PID: 27179 Comm: syz.1.3862 Not tainted 6.12.0-rc1-syzkaller-00125-g0c559323bbaa #0 [ 2817.763626][T27179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2817.773676][T27179] Call Trace: [ 2817.776961][T27179] [ 2817.779887][T27179] dump_stack_lvl+0x16c/0x1f0 [ 2817.784613][T27179] should_fail_ex+0x497/0x5b0 [ 2817.789295][T27179] _copy_to_user+0x30/0xc0 [ 2817.793712][T27179] simple_read_from_buffer+0xd0/0x160 [ 2817.799166][T27179] proc_fail_nth_read+0x198/0x270 [ 2817.804181][T27179] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2817.809725][T27179] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2817.815265][T27179] vfs_read+0x1ce/0xbd0 [ 2817.819447][T27179] ? __fget_files+0x23a/0x3f0 [ 2817.824128][T27179] ? fdget_pos+0x24c/0x360 [ 2817.828540][T27179] ? __pfx_lock_release+0x10/0x10 [ 2817.833557][T27179] ? trace_lock_acquire+0x14a/0x1d0 [ 2817.838767][T27179] ? __pfx_vfs_read+0x10/0x10 [ 2817.843456][T27179] ? __pfx___mutex_lock+0x10/0x10 [ 2817.848479][T27179] ? __fget_files+0x244/0x3f0 [ 2817.853176][T27179] ksys_read+0x12f/0x260 [ 2817.857443][T27179] ? __pfx_ksys_read+0x10/0x10 [ 2817.862211][T27179] do_syscall_64+0xcd/0x250 [ 2817.866821][T27179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2817.872712][T27179] RIP: 0033:0x7fa04df7ca3c [ 2817.877118][T27179] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 2817.896721][T27179] RSP: 002b:00007fa04ed5c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2817.905142][T27179] RAX: ffffffffffffffda RBX: 00007fa04e135f80 RCX: 00007fa04df7ca3c [ 2817.913133][T27179] RDX: 000000000000000f RSI: 00007fa04ed5c0a0 RDI: 0000000000000003 [ 2817.921301][T27179] RBP: 00007fa04ed5c090 R08: 0000000000000000 R09: 0000000000000000 [ 2817.929272][T27179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2817.937255][T27179] R13: 0000000000000000 R14: 00007fa04e135f80 R15: 00007fff064519a8 [ 2817.945230][T27179] [ 2817.949381][ T935] pwc: recv_control_msg error -71 req 04 val 1000 [ 2817.965669][ T935] pwc: recv_control_msg error -71 req 04 val 1300 [ 2817.989628][ T935] pwc: recv_control_msg error -71 req 04 val 1400 [ 2818.130125][ T935] pwc: recv_control_msg error -71 req 02 val 2000 [ 2818.140027][ T935] pwc: recv_control_msg error -71 req 02 val 2100 [ 2818.150643][ T935] pwc: recv_control_msg error -71 req 04 val 1500 [ 2818.158316][ T935] pwc: recv_control_msg error -71 req 02 val 2500 [ 2818.165045][ T935] pwc: recv_control_msg error -71 req 02 val 2400 [ 2818.179405][T17186] Bluetooth: hci0: command 0x0406 tx timeout [ 2818.193658][ T935] pwc: recv_control_msg error -71 req 02 val 2600 [ 2818.208842][ T935] pwc: recv_control_msg error -71 req 02 val 2900 [ 2818.218658][ T935] pwc: recv_control_msg error -71 req 02 val 2800 [ 2818.229573][ T935] pwc: recv_control_msg error -71 req 04 val 1100 [ 2818.237357][ T935] pwc: recv_control_msg error -71 req 04 val 1200 [ 2818.950524][ T935] pwc: Registered as video71. [ 2818.983951][ T935] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 2819.014553][ T935] usb 4-1: USB disconnect, device number 52 [ 2819.092683][ T29] audit: type=1400 audit(1728067557.920:714): avc: denied { setcurrent } for pid=27185 comm="syz.3.3865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 2819.300305][T27187] misc userio: Invalid payload size [ 2819.810830][ T29] audit: type=1400 audit(1728067558.500:715): avc: denied { block_suspend } for pid=27206 comm="syz.2.3871" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2820.589666][T25338] Bluetooth: hci0: command 0x0406 tx timeout [ 2821.150195][ T29] audit: type=1400 audit(1728067559.980:716): avc: denied { read append } for pid=27217 comm="syz.1.3874" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 2821.199499][ T29] audit: type=1400 audit(1728067560.010:717): avc: denied { open } for pid=27217 comm="syz.1.3874" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 2821.255533][ T29] audit: type=1400 audit(1728067560.010:718): avc: denied { write } for pid=27217 comm="syz.1.3874" name="task" dev="proc" ino=138572 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 2821.321448][ T29] audit: type=1400 audit(1728067560.010:719): avc: denied { add_name } for pid=27217 comm="syz.1.3874" name="cpuacct.usage_percpu_user" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 2821.374680][ T29] audit: type=1400 audit(1728067560.020:720): avc: denied { create } for pid=27217 comm="syz.1.3874" name="cpuacct.usage_percpu_user" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 2821.403365][T27219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2821.444780][ T29] audit: type=1400 audit(1728067560.020:721): avc: denied { associate } for pid=27217 comm="syz.1.3874" name="cpuacct.usage_percpu_user" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 2821.549340][ T29] audit: type=1400 audit(1728067560.330:722): avc: denied { ioctl } for pid=27216 comm="syz.2.3875" path="/dev/usbmon4" dev="devtmpfs" ino=717 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 2822.633039][T27233] bridge0: port 2(bridge_slave_1) entered disabled state [ 2822.691138][ T29] audit: type=1400 audit(1728067561.520:723): avc: denied { getopt } for pid=27229 comm="syz.0.3880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2823.600504][T25338] Bluetooth: hci0: command 0x0406 tx timeout [ 2823.757420][T27249] capability: warning: `syz.4.3883' uses deprecated v2 capabilities in a way that may be insecure [ 2836.508834][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.515258][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2846.746100][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2846.758585][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2846.770794][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2846.782953][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2846.795228][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2846.807607][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2846.819904][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2846.832270][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2846.844600][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2846.856957][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2851.755866][ C1] net_ratelimit: 43171 callbacks suppressed [ 2851.755891][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2851.774053][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2851.786238][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2851.798373][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2851.810605][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2851.822838][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2851.834982][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2851.847140][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2851.859194][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2851.859356][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2856.765911][ C0] net_ratelimit: 46918 callbacks suppressed [ 2856.765937][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2856.765949][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2856.766114][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2856.772064][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2856.783958][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2856.796020][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2856.807981][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2856.819910][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2856.831855][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2856.843785][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2861.775907][ C1] net_ratelimit: 46494 callbacks suppressed [ 2861.775935][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2861.775974][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2861.782060][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2861.794090][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2861.805989][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2861.817971][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2861.829938][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2861.841965][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2861.854032][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2861.866098][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2866.785844][ C1] net_ratelimit: 46923 callbacks suppressed [ 2866.785871][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2866.786022][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2866.791983][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2866.803932][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2866.815884][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2866.827841][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2866.839699][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2866.851838][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2866.863705][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2866.875582][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2871.795864][ C1] net_ratelimit: 47527 callbacks suppressed [ 2871.795891][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2871.795958][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2871.802127][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2871.814169][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2871.826061][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2871.838068][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2871.849967][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2871.861890][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2871.873868][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2871.885897][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2876.805832][ C1] net_ratelimit: 51649 callbacks suppressed [ 2876.805859][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2876.805921][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2876.811988][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2876.824000][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2876.835916][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2876.847809][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2876.859772][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2876.871754][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2876.883598][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2876.895592][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2881.815858][ C1] net_ratelimit: 53917 callbacks suppressed [ 2881.815884][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2881.815968][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2881.822356][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2881.834215][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2881.846186][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2881.858201][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2881.870080][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2881.882062][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2881.893947][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2881.905978][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2886.825876][ C1] net_ratelimit: 54161 callbacks suppressed [ 2886.825904][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2886.826053][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2886.832047][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2886.844041][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2886.855969][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2886.868101][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2886.879854][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2886.891763][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2886.903655][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2886.915736][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2891.835866][ C1] net_ratelimit: 54269 callbacks suppressed [ 2891.835893][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2891.835934][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2891.842006][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2891.854051][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2891.865970][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2891.877866][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2891.889764][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2891.901742][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2891.913621][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2891.925646][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2896.845899][ C1] net_ratelimit: 54402 callbacks suppressed [ 2896.845927][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2896.846090][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2896.852127][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2896.864306][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2896.876151][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2896.888046][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2896.899936][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2896.912043][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2896.923893][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2896.935927][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2901.855835][ C0] net_ratelimit: 53854 callbacks suppressed [ 2901.855860][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2901.855894][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2901.862052][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2901.873882][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2901.885910][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2901.897825][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2901.909761][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2901.921654][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2901.933630][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2901.945530][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2906.865837][ C0] net_ratelimit: 55112 callbacks suppressed [ 2906.865864][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2906.865895][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2906.871968][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2906.883860][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2906.895771][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2906.907678][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2906.919741][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2906.931605][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2906.943597][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2906.955870][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2911.875877][ C0] net_ratelimit: 55240 callbacks suppressed [ 2911.875904][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2911.876053][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2911.882004][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2911.894099][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2911.906081][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2911.917963][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2911.929968][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2911.941824][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2911.953740][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2911.965704][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2916.885855][ C0] net_ratelimit: 54524 callbacks suppressed [ 2916.885884][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2916.885902][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2916.886075][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2916.891983][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2916.903911][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2916.915923][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2916.928133][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2916.940033][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2916.955875][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2916.963844][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2921.895914][ C1] net_ratelimit: 54168 callbacks suppressed [ 2921.895941][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2921.895944][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2921.896124][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2921.902045][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2921.914055][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2921.926031][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2921.938056][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2921.950029][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2921.961912][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2921.973864][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2926.905929][ C0] net_ratelimit: 53971 callbacks suppressed [ 2926.905956][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2926.905972][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2926.906151][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2926.912069][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2926.924084][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2926.936109][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2926.948070][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2926.959949][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2926.971821][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2926.983735][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2931.915823][ C1] net_ratelimit: 51902 callbacks suppressed [ 2931.915850][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2931.915937][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2931.921952][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2931.933987][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2931.945916][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2931.957798][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2931.969685][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2931.981675][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2931.993613][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2932.005572][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2936.925845][ C1] net_ratelimit: 52300 callbacks suppressed [ 2936.925872][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2936.925938][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2936.931965][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2936.944053][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2936.955936][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2936.967836][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2936.979734][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2936.991759][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2937.003621][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2937.015605][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2941.935862][ C0] net_ratelimit: 55126 callbacks suppressed [ 2941.935889][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2941.936026][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2941.942016][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2941.953943][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2941.965870][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2941.977703][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2941.989878][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2942.001747][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2942.013742][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2942.025709][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2946.945927][ C1] net_ratelimit: 53558 callbacks suppressed [ 2946.945953][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2946.946086][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2946.952133][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2946.964136][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2946.976073][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2946.988162][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2947.000067][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2947.011952][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2947.023830][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2947.035845][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2951.955864][ C0] net_ratelimit: 53024 callbacks suppressed [ 2951.955890][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2951.956018][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2951.962098][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2951.974010][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2951.985993][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2951.997877][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2952.009783][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2952.021688][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2952.033657][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2952.045530][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2954.155776][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2954.162787][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P27237/1:b..l [ 2954.171148][ C1] rcu: (detected by 1, t=10503 jiffies, g=201085, q=341 ncpus=2) [ 2954.178982][ C1] task:syz.3.3881 state:R running task stack:26624 pid:27237 tgid:27234 ppid:24203 flags:0x00004002 [ 2954.191910][ C1] Call Trace: [ 2954.195223][ C1] [ 2954.198267][ C1] __schedule+0xef5/0x5750 [ 2954.202739][ C1] ? __pfx_mark_lock+0x10/0x10 [ 2954.207539][ C1] ? __free_zapped_classes+0x2f1/0x320 [ 2954.213063][ C1] ? __pfx___schedule+0x10/0x10 [ 2954.217947][ C1] ? unwind_next_frame+0xe5d/0x20c0 [ 2954.223187][ C1] ? hlock_class+0x4e/0x130 [ 2954.227771][ C1] preempt_schedule_irq+0x51/0x90 [ 2954.232838][ C1] irqentry_exit+0x36/0x90 [ 2954.237301][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2954.243324][ C1] RIP: 0010:lock_acquire.part.0+0x155/0x380 [ 2954.249255][ C1] Code: b8 ff ff ff ff 65 0f c1 05 c0 d5 97 7e 83 f8 01 0f 85 d0 01 00 00 9c 58 f6 c4 02 0f 85 e5 01 00 00 48 85 ed 0f 85 b6 01 00 00 <48> b8 00 00 00 00 00 fc ff df 48 01 c3 48 c7 03 00 00 00 00 48 c7 [ 2954.268986][ C1] RSP: 0018:ffffc900040e7120 EFLAGS: 00000206 [ 2954.275176][ C1] RAX: 0000000000000046 RBX: 1ffff9200081ce25 RCX: 0000000000000001 [ 2954.283176][ C1] RDX: 0000000000000001 RSI: ffffffff8b6cd340 RDI: ffffffff8bd19d40 [ 2954.291260][ C1] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff2dc4988 [ 2954.299257][ C1] R10: ffffffff96e24c47 R11: 0000000000000000 R12: 0000000000000000 [ 2954.307265][ C1] R13: ffffffff8e1b8340 R14: 0000000000000000 R15: 0000000000000000 [ 2954.315286][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 2954.320963][ C1] ? rcu_is_watching+0x12/0xc0 [ 2954.325770][ C1] ? trace_lock_acquire+0x14a/0x1d0 [ 2954.331018][ C1] ? page_ext_get+0x34/0x310 [ 2954.335645][ C1] ? lock_acquire+0x2f/0xb0 [ 2954.340263][ C1] ? page_ext_get+0x34/0x310 [ 2954.344897][ C1] page_ext_get+0x3a/0x310 [ 2954.349360][ C1] ? page_ext_get+0x34/0x310 [ 2954.353986][ C1] __reset_page_owner+0x32/0x400 [ 2954.358966][ C1] free_unref_folios+0x956/0x1310 [ 2954.364033][ C1] ? const_folio_flags+0x30/0x1f0 [ 2954.369141][ C1] folios_put_refs+0x551/0x750 [ 2954.373951][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 2954.379281][ C1] ? const_folio_flags.constprop.0+0x56/0x150 [ 2954.385408][ C1] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 2954.391796][ C1] shmem_undo_range+0x586/0x1170 [ 2954.396787][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 2954.402228][ C1] ? hlock_class+0x4e/0x130 [ 2954.406774][ C1] ? mark_lock+0xb5/0xc60 [ 2954.411162][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 2954.416390][ C1] ? hlock_class+0x4e/0x130 [ 2954.420938][ C1] ? percpu_counter_add_batch+0xb5/0x1e0 [ 2954.426628][ C1] shmem_evict_inode+0x3a3/0xba0 [ 2954.431604][ C1] ? find_held_lock+0x2d/0x110 [ 2954.436417][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 2954.441917][ C1] ? evict+0x3c8/0x970 [ 2954.446024][ C1] ? __pfx_lock_release+0x10/0x10 [ 2954.451088][ C1] ? lock_acquire+0x2f/0xb0 [ 2954.455626][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 2954.461126][ C1] evict+0x409/0x970 [ 2954.465060][ C1] ? __pfx_evict+0x10/0x10 [ 2954.469527][ C1] iput+0x530/0x890 [ 2954.473377][ C1] ? __pfx_generic_delete_inode+0x10/0x10 [ 2954.479148][ C1] dentry_unlink_inode+0x29c/0x480 [ 2954.484299][ C1] __dentry_kill+0x1d0/0x600 [ 2954.488935][ C1] dput.part.0+0x4b1/0x9b0 [ 2954.493393][ C1] dput+0x1f/0x30 [ 2954.497063][ C1] __fput+0x513/0xb60 [ 2954.501088][ C1] task_work_run+0x14e/0x250 [ 2954.505718][ C1] ? __pfx_task_work_run+0x10/0x10 [ 2954.510859][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 2954.516102][ C1] do_exit+0xadd/0x2d70 [ 2954.520308][ C1] ? get_signal+0x8f2/0x2770 [ 2954.524938][ C1] ? __pfx_do_exit+0x10/0x10 [ 2954.529576][ C1] ? do_raw_spin_lock+0x12d/0x2c0 [ 2954.534652][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2954.540075][ C1] do_group_exit+0xd3/0x2a0 [ 2954.544637][ C1] get_signal+0x25fb/0x2770 [ 2954.549184][ C1] ? __pfx___sched_core_set+0x10/0x10 [ 2954.554631][ C1] ? __pfx_get_signal+0x10/0x10 [ 2954.559527][ C1] ? sched_core_share_pid+0x22e/0xa00 [ 2954.564953][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2954.570921][ C1] arch_do_signal_or_restart+0x90/0x7e0 [ 2954.576538][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2954.582776][ C1] ? __pfx___do_sys_prctl+0x10/0x10 [ 2954.588024][ C1] syscall_exit_to_user_mode+0x150/0x2a0 [ 2954.593705][ C1] do_syscall_64+0xda/0x250 [ 2954.598265][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2954.604198][ C1] RIP: 0033:0x7f553b77dff9 [ 2954.608643][ C1] RSP: 002b:00007f553c543038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 2954.617096][ C1] RAX: 0000000000000000 RBX: 00007f553b936130 RCX: 00007f553b77dff9 [ 2954.625094][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000003e [ 2954.633093][ C1] RBP: 00007f553b7f0296 R08: 0000000000000000 R09: 0000000000000000 [ 2954.641100][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2954.649099][ C1] R13: 0000000000000001 R14: 00007f553b936130 R15: 00007ffd241d48f8 [ 2954.657117][ C1] [ 2954.660158][ C1] rcu: rcu_preempt kthread starved for 8118 jiffies! g201085 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 2954.671383][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2954.681372][ C1] rcu: RCU grace-period kthread stack dump: [ 2954.687275][ C1] task:rcu_preempt state:R running task stack:27504 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 2954.699085][ C1] Call Trace: [ 2954.702384][ C1] [ 2954.705338][ C1] __schedule+0xef5/0x5750 [ 2954.709801][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 2954.715033][ C1] ? _raw_spin_lock_irqsave+0x1/0x60 [ 2954.720364][ C1] ? __pfx___schedule+0x10/0x10 [ 2954.725263][ C1] ? schedule+0x298/0x350 [ 2954.729639][ C1] ? __pfx_lock_release+0x10/0x10 [ 2954.734699][ C1] ? trace_lock_acquire+0x14a/0x1d0 [ 2954.739954][ C1] ? lock_acquire+0x2f/0xb0 [ 2954.744491][ C1] ? schedule+0x1fd/0x350 [ 2954.748860][ C1] schedule+0xe7/0x350 [ 2954.752972][ C1] schedule_timeout+0x136/0x2a0 [ 2954.757866][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 2954.763271][ C1] ? __pfx_process_timeout+0x10/0x10 [ 2954.768608][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2954.774457][ C1] ? prepare_to_swait_event+0xf3/0x470 [ 2954.779963][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 2954.784854][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 2954.790259][ C1] ? rcu_gp_init+0xc82/0x1630 [ 2954.794971][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 2954.800210][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2954.806053][ C1] rcu_gp_kthread+0x271/0x380 [ 2954.810769][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2954.816003][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 2954.821238][ C1] ? __kthread_parkme+0x148/0x220 [ 2954.826302][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2954.831531][ C1] kthread+0x2c1/0x3a0 [ 2954.835635][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 2954.840866][ C1] ? __pfx_kthread+0x10/0x10 [ 2954.845500][ C1] ret_from_fork+0x45/0x80 [ 2954.849978][ C1] ? __pfx_kthread+0x10/0x10 [ 2954.854607][ C1] ret_from_fork_asm+0x1a/0x30 [ 2954.859474][ C1] [ 2954.862508][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 2954.868853][ C1] Sending NMI from CPU 1 to CPUs 0: [ 2954.874080][ C0] NMI backtrace for cpu 0 [ 2954.874102][ C0] CPU: 0 UID: 0 PID: 10024 Comm: kworker/0:0 Not tainted 6.12.0-rc1-syzkaller-00125-g0c559323bbaa #0 [ 2954.874135][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2954.874153][ C0] Workqueue: events_long defense_work_handler [ 2954.874251][ C0] RIP: 0010:write_comp_data+0x24/0x90 [ 2954.874294][ C0] Code: 90 90 90 90 90 90 49 89 d2 49 89 f8 49 89 f1 65 48 8b 15 0f 53 76 7e 65 8b 05 10 53 76 7e a9 00 01 ff 00 74 1d f6 c4 01 74 67 00 00 0f 00 75 60 a9 00 00 f0 00 75 59 8b 82 1c 16 00 00 85 c0 [ 2954.874320][ C0] RSP: 0018:ffffc900000069e0 EFLAGS: 00000202 [ 2954.874340][ C0] RAX: 0000000080000101 RBX: ffff888024a0f000 RCX: ffffffff89ca42a9 [ 2954.874359][ C0] RDX: ffff88806444da00 RSI: 0000000000000000 RDI: 0000000000000005 [ 2954.874377][ C0] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 2954.874394][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 2954.874411][ C0] R13: ffffc90000006cf0 R14: 0000000000000000 R15: ffff88807b8ee8b8 [ 2954.874429][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 2954.874455][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2954.874475][ C0] CR2: 00007f74c9a4eff8 CR3: 0000000026e82000 CR4: 00000000003526f0 [ 2954.874500][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2954.874516][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2954.874534][ C0] Call Trace: [ 2954.874542][ C0] [ 2954.874551][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 2954.874611][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 2954.874656][ C0] ? nmi_handle+0x1a9/0x5c0 [ 2954.874685][ C0] ? write_comp_data+0x24/0x90 [ 2954.874724][ C0] ? default_do_nmi+0x6a/0x160 [ 2954.874765][ C0] ? exc_nmi+0x170/0x1e0 [ 2954.874788][ C0] ? end_repeat_nmi+0xf/0x53 [ 2954.874824][ C0] ? __find_rr_leaf+0x379/0xe00 [ 2954.874873][ C0] ? write_comp_data+0x24/0x90 [ 2954.874912][ C0] ? write_comp_data+0x24/0x90 [ 2954.874952][ C0] ? write_comp_data+0x24/0x90 [ 2954.874991][ C0] [ 2954.875000][ C0] [ 2954.875008][ C0] __find_rr_leaf+0x379/0xe00 [ 2954.875036][ C0] ? __pfx___find_rr_leaf+0x10/0x10 [ 2954.875062][ C0] ? fib6_node_lookup+0x125/0x180 [ 2954.875100][ C0] ? __pfx_fib6_node_lookup+0x10/0x10 [ 2954.875140][ C0] ? br_handle_frame_finish+0xda5/0x1c80 [ 2954.875215][ C0] fib6_table_lookup+0x57e/0xa30 [ 2954.875249][ C0] ? __pfx_fib6_table_lookup+0x10/0x10 [ 2954.875276][ C0] ? trace_lock_acquire+0x14a/0x1d0 [ 2954.875311][ C0] ? mark_held_locks+0x9f/0xe0 [ 2954.875336][ C0] ? lock_acquire+0x2f/0xb0 [ 2954.875360][ C0] ? ip6_pol_route+0x186/0x1120 [ 2954.875389][ C0] ip6_pol_route+0x1cd/0x1120 [ 2954.875416][ C0] ? rt6_multipath_hash+0x1f0/0x1830 [ 2954.875444][ C0] ? __pfx_ip6_pol_route+0x10/0x10 [ 2954.875471][ C0] ? __pfx_rt6_multipath_hash+0x10/0x10 [ 2954.875510][ C0] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 2954.875538][ C0] fib6_rule_lookup+0x536/0x720 [ 2954.875607][ C0] ? hlock_class+0x4e/0x130 [ 2954.875640][ C0] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 2954.875681][ C0] ? __pfx_mark_lock+0x10/0x10 [ 2954.875705][ C0] ? hlock_class+0x4e/0x130 [ 2954.875738][ C0] ? mark_lock+0xb5/0xc60 [ 2954.875765][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2954.875794][ C0] ip6_route_input+0x663/0xc10 [ 2954.875822][ C0] ? __pfx_ip6_route_input+0x10/0x10 [ 2954.875865][ C0] ip6_rcv_finish_core.constprop.0+0x1a0/0x5d0 [ 2954.875915][ C0] ip6_rcv_finish+0x12c/0x5b0 [ 2954.875943][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 2954.875972][ C0] ? __pfx_ip_sabotage_in+0x10/0x10 [ 2954.876017][ C0] ip_sabotage_in+0x21b/0x290 [ 2954.876048][ C0] nf_hook_slow+0xbb/0x200 [ 2954.876122][ C0] nf_hook.constprop.0+0x42e/0x750 [ 2954.876150][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 2954.876180][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 2954.876211][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 2954.876243][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 2954.876270][ C0] ipv6_rcv+0xa4/0x680 [ 2954.876297][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 2954.876323][ C0] __netif_receive_skb_one_core+0x12e/0x1e0 [ 2954.876376][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 2954.876412][ C0] ? trace_lock_acquire+0x14a/0x1d0 [ 2954.876445][ C0] ? netif_receive_skb+0x109/0x7b0 [ 2954.876481][ C0] __netif_receive_skb+0x1d/0x160 [ 2954.876519][ C0] netif_receive_skb+0x13f/0x7b0 [ 2954.876551][ C0] ? __pfx_netif_receive_skb+0x10/0x10 [ 2954.876590][ C0] br_pass_frame_up+0x346/0x490 [ 2954.876623][ C0] br_handle_frame_finish+0xdcf/0x1c80 [ 2954.876660][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 2954.876700][ C0] ? ip6t_do_table+0xd20/0x1d40 [ 2954.876738][ C0] ? __local_bh_enable_ip+0xa4/0x120 [ 2954.876770][ C0] ? ip6t_do_table+0xd50/0x1d40 [ 2954.876796][ C0] ? nf_hook_slow+0x132/0x200 [ 2954.876835][ C0] br_nf_hook_thresh+0x303/0x410 [ 2954.876868][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 2954.876904][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 2954.876940][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 2954.876976][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2954.877002][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2954.877029][ C0] br_nf_pre_routing_finish_ipv6+0x76a/0xfb0 [ 2954.877065][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 2954.877103][ C0] br_nf_pre_routing_ipv6+0x3ce/0x8c0 [ 2954.877139][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 2954.877174][ C0] ? __pfx_lock_release+0x10/0x10 [ 2954.877198][ C0] ? trace_lock_acquire+0x14a/0x1d0 [ 2954.877233][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 2954.877275][ C0] br_nf_pre_routing+0x860/0x15b0 [ 2954.877312][ C0] br_handle_frame+0x9eb/0x1490 [ 2954.877347][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 2954.877381][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 2954.877415][ C0] ? mark_lock+0xb5/0xc60 [ 2954.877441][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 2954.877474][ C0] __netif_receive_skb_core.constprop.0+0xa3d/0x4330 [ 2954.877518][ C0] ? mark_lock+0xb5/0xc60 [ 2954.877541][ C0] ? hlock_class+0x4e/0x130 [ 2954.877573][ C0] ? mark_lock+0xb5/0xc60 [ 2954.877595][ C0] ? __pfx_mark_lock+0x10/0x10 [ 2954.877618][ C0] ? __pfx_mark_lock+0x10/0x10 [ 2954.877642][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 2954.877679][ C0] ? hlock_class+0x4e/0x130 [ 2954.877710][ C0] ? __lock_acquire+0xbdd/0x3ce0 [ 2954.877739][ C0] ? mark_lock+0xb5/0xc60 [ 2954.877762][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 2954.877787][ C0] ? __pfx_mark_lock+0x10/0x10 [ 2954.877811][ C0] ? __lock_acquire+0x163e/0x3ce0 [ 2954.877839][ C0] ? process_backlog+0x3f1/0x15f0 [ 2954.877871][ C0] __netif_receive_skb_one_core+0xb1/0x1e0 [ 2954.877906][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 2954.877942][ C0] ? trace_lock_acquire+0x14a/0x1d0 [ 2954.877975][ C0] ? process_backlog+0x3f1/0x15f0 [ 2954.878009][ C0] ? process_backlog+0x3f1/0x15f0 [ 2954.878041][ C0] __netif_receive_skb+0x1d/0x160 [ 2954.878074][ C0] process_backlog+0x443/0x15f0 [ 2954.878111][ C0] __napi_poll.constprop.0+0xb7/0x550 [ 2954.878147][ C0] net_rx_action+0xa92/0x1010 [ 2954.878181][ C0] ? tmigr_handle_remote+0x153/0xdd0 [ 2954.878219][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 2954.878252][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 2954.878281][ C0] ? run_timer_base+0x119/0x190 [ 2954.878325][ C0] ? run_timer_base+0x11e/0x190 [ 2954.878360][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 2954.878398][ C0] handle_softirqs+0x213/0x8f0 [ 2954.878430][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 2954.878461][ C0] ? irqtime_account_irq+0x18d/0x2e0 [ 2954.878503][ C0] ? update_defense_level+0x5c9/0xf50 [ 2954.878531][ C0] do_softirq+0xb2/0xf0 [ 2954.878561][ C0] [ 2954.878569][ C0] [ 2954.878578][ C0] __local_bh_enable_ip+0x100/0x120 [ 2954.878611][ C0] update_defense_level+0x5ce/0xf50 [ 2954.878638][ C0] ? __pfx_update_defense_level+0x10/0x10 [ 2954.878673][ C0] ? process_one_work+0x921/0x1ba0 [ 2954.878703][ C0] defense_work_handler+0x26/0xd0 [ 2954.878732][ C0] process_one_work+0x9c5/0x1ba0 [ 2954.878763][ C0] ? __pfx_defense_work_handler+0x10/0x10 [ 2954.878792][ C0] ? __pfx_process_one_work+0x10/0x10 [ 2954.878824][ C0] ? assign_work+0x1a0/0x250 [ 2954.878866][ C0] worker_thread+0x6c8/0xf00 [ 2954.878896][ C0] ? __kthread_parkme+0x148/0x220 [ 2954.878931][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2954.878957][ C0] kthread+0x2c1/0x3a0 [ 2954.878988][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 2954.879018][ C0] ? __pfx_kthread+0x10/0x10 [ 2954.879051][ C0] ret_from_fork+0x45/0x80 [ 2954.879076][ C0] ? __pfx_kthread+0x10/0x10 [ 2954.879109][ C0] ret_from_fork_asm+0x1a/0x30 [ 2954.879154][ C0] [ 2956.965888][ C1] net_ratelimit: 47650 callbacks suppressed [ 2956.965914][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2956.965930][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2956.966108][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2956.972002][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2956.984009][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2956.995915][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2957.007894][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2957.019810][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2957.031778][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2957.045895][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2961.975860][ C0] net_ratelimit: 54790 callbacks suppressed [ 2961.975887][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2961.975919][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2961.982007][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2961.993891][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2962.005837][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2962.017688][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:76:f9:96:b6:e8, vlan:0) [ 2962.029673][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2962.041544][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2962.053548][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2962.065856][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)