last executing test programs: 5m2.071466198s ago: executing program 0 (id=1): mount(0x0, 0x0, &(0x7f0000000140)='fusectl\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) openat$cuse(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) write$sndseq(r2, 0x0, 0x0) r3 = dup(r2) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) socket$inet6_tcp(0xa, 0x1, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x325000, 0x800}, 0x1c) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 5m0.163595227s ago: executing program 0 (id=14): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socket(0x1, 0x803, 0x0) socket(0xa, 0x3, 0x3a) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}, {}, {}, {0x0, 0xfffffffc}, {}, {0x0, 0xfffffffd}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRES32, @ANYBLOB="feff0300000000000000000000000400001a0010", @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000540)="e348be0c067e2cc553809d59792a316dfd223b032324785da120dc3013a6fd408f0ab2", 0x1003, r2}, 0x38) syz_usb_connect(0x0, 0x24, 0x0, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000002180)='smaps\x00') read$FUSE(r4, &(0x7f0000000080)={0x2020}, 0x2020) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xff}) 4m57.94238493s ago: executing program 0 (id=25): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe800000"], 0xfe1b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00008b", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) msgsnd(0x0, 0x0, 0x2000, 0x800) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x2, 0x200080) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) 4m57.937475217s ago: executing program 0 (id=27): openat$nullb(0xffffffffffffff9c, 0x0, 0x162e02, 0x0) mremap(&(0x7f000062b000/0x2000)=nil, 0x1d5000, 0x40000000, 0x3, &(0x7f00009f6000/0x3000)=nil) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) openat$vimc1(0xffffff9c, 0x0, 0x2, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setitimer(0x2, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/crash_elfcorehdr_size', 0x20000, 0x20) read$FUSE(r4, &(0x7f0000003700)={0x2020}, 0x2020) syz_emit_ethernet(0x1c6, &(0x7f00000004c0)=ANY=[], 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x208, 0x8, 0xfa04, 0x0, 0x6c02, 0x208, 0x194, 0x194, 0x208, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'batadv_slave_0\x00', 'pimreg\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) syz_open_dev$MSR(0x0, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYRES64=0x0], &(0x7f0000000000)='syzkaller\x00', 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) syz_usb_connect(0x2, 0x3b9, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000041914140f30c75932efd010203010902a703010000000209046d000c3fdae20009050402ff03"], 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000280)=0x10) 4m54.612336993s ago: executing program 0 (id=48): r0 = eventfd2(0xffffffff, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xfffffffffffffffe, 0x8) (fail_nth: 1) read$eventfd(r0, &(0x7f0000000040), 0x8) 4m39.386741351s ago: executing program 32 (id=48): r0 = eventfd2(0xffffffff, 0x0) write$eventfd(r0, &(0x7f0000000080)=0xfffffffffffffffe, 0x8) (fail_nth: 1) read$eventfd(r0, &(0x7f0000000040), 0x8) 2m57.757446673s ago: executing program 1 (id=764): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) socket$packet(0x11, 0x0, 0x300) syz_open_dev$tty1(0xc, 0x4, 0x3) socket$alg(0x26, 0x5, 0x0) syz_open_dev$amidi(&(0x7f0000000000), 0x4000000004, 0x1193c0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0) mremap(&(0x7f000062b000/0x2000)=nil, 0x1d5000, 0x40000000, 0x3, &(0x7f00009f6000/0x3000)=nil) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) openat$vimc1(0xffffff9c, 0x0, 0x2, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) setitimer(0x2, 0x0, 0x0) syz_emit_ethernet(0x1c6, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0) r5 = socket$inet(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x208, 0x8, 0xfa04, 0x0, 0x6c02, 0x208, 0x194, 0x194, 0x208, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'batadv_slave_0\x00', 'pimreg\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) 2m56.638700837s ago: executing program 1 (id=770): msgget$private(0x0, 0x790) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$setstatus(r1, 0x4, 0x400) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000ffffff90000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) keyctl$join(0x1, &(0x7f0000000340)={'syz', 0x1}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x801, 0x0, 0x25dfdbfd, {}, [@IFLA_XDP={0x4}, @IFLA_ALT_IFNAME={0x14, 0x35, 'ipvlan1\x00'}]}, 0x38}}, 0x0) 2m55.169402803s ago: executing program 1 (id=775): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r2, &(0x7f0000000400)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x40000004}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r5, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @local}, @ib={0x1b, 0x4, 0x0, {}, 0x0, 0x800000}}}, 0x118) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYRES8=r3, @ANYRESDEC=r2], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4004) 2m54.617256732s ago: executing program 1 (id=779): setgroups(0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000040)='./file1\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="376cd986b39285495ddf4bd643ae6e1941265eda7926884d6d4cc781a3b510578cd2000000000000eaab3115dba8f520bb23254f6503ef5510e4cf21bd348a4e32b9a738009784b2b3573bdb54a73e7257b1e9c17143f91c81d0a56517f3efdb6392dc3838f26eebeea878e98ce9cc07e304d25383bdb9dd769020eec32c591ebfdccd92497456259f06173c18", 0x8d}], 0x1}, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x1c, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000001140)='contention_end\x00', r2}, 0x26) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) gettid() r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000080)={0xd, 0x1, 0x0, "bb1e000064000080007f28becf0500063475de71000077a16c80b6db943400"}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x28, 0x0, 0x0, 0x7ffff024}, {0x6}]}, 0x10) write$binfmt_misc(r5, &(0x7f0000000100), 0x7c) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) socket$netlink(0x10, 0x3, 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000000a010100000000000000000100000028000000090a010400000000000000180100000008000a40000000000901020073797a3200000000140000001000010000000000000000000000000a"], 0x64}, 0x1, 0x0, 0x0, 0x15}, 0x14) r8 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x6, 0x101}) ppoll(&(0x7f0000000100)=[{r8}], 0x1, 0x0, 0x0, 0x0) mq_timedsend(r8, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r8, &(0x7f0000000140)=""/4096, 0x1000, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) ptrace(0x10, r1) 2m54.486365486s ago: executing program 1 (id=780): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000000800000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000a00)={r0, 0x0, 0x0}, 0x20) (fail_nth: 2) 2m54.343769459s ago: executing program 1 (id=782): r0 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f00000002c0)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x20000000000005, 0x3a, 'g\x9a\a\xafdev/bus/u\x01e8\xc2O\xa9wTX=\x10m\x00'/39, 0x3a, '/dev\xc4\xf8\x98WBbus+u\xe8b/\"0#/\xfc:\xf7\x05i\xd3\xeb\x9e9\xd7\xa5)M\x7f\xd8\xc3\x04\xf4*\x82;\x8c\xdaO\xb3\bB<\x93\xba}V\xe1\xd9\xc9\xa0F]1u\x16\x18 \x88\xf8\xf5N\x03\xbcZ\xf7\xbb{\"2a\x97\x99BO\xa4V=gN1>!\f\xed\xef\xf5\x9d\x18\x83\xde\xe7+\x05N\xed\x93\x99g.9+\x11\'\x00\'\x14\x17\xb0\xb4\x10\xda,z\x15%\x85\xd2)\x01\"{=m\x12fZ\x1cY?(\xee\xe9\xb4x\xd1\x13\xed\x80r\xfd\x91\x05\xd7\x97p\xab\xe4\xb8\n\x96d*o\xc0\xcf\x97\xa6\xfa\xd6\xe1\x85\x8e\xce\x92\xaa\xb2\xb52/A\xdb\xe9\xf3\xa2\x8a\x0e\x81`\xb1\xe9u\xa8\xb3\x85:Y\x11\x89\xea\xda\f@B\xb5\xd88\x98bsF\xec+\x82\x9b^b\a@q{\xb9`\x8b\xdf1K\x1a\xf9\xfbR\x13\x9c\x81\x00\xec\\\xa4\xe8\x83\x8f\xe7\x88\xbc\x81\\\x1aj\xe7\xdd\t\\)?EE\x99nj\xc7S\x9c&u\x9a\t\xb9\x86\xd1\x8d\xa7\x8bj\xb1\xb3\x82!\f\xed\xef\xf5\x9d\x18\x83\xde\xe7+\x05N\xed\x93\x99g.9+\x11\'\x00\'\x14\x17\xb0\xb4\x10\xda,z\x15%\x85\xd2)\x01\"{=m\x12fZ\x1cY?(\xee\xe9\xb4x\xd1\x13\xed\x80r\xfd\x91\x05\xd7\x97p\xab\xe4\xb8\n\x96d*o\xc0\xcf\x97\xa6\xfa\xd6\xe1\x85\x8e\xce\x92\xaa\xb2\xb52/A\xdb\xe9\xf3\xa2\x8a\x0e\x81`\xb1\xe9u\xa8\xb3\x85:Y\x11\x89\xea\xda\f@B\xb5\xd88\x98bsF\xec+\x82\x9b^b\a@q{\xb9`\x8b\xdf1K\x1a\xf9\xfbR\x13\x9c\x81\x00\xec\\\xa4\xe8\x83\x8f\xe7\x88\xbc\x81\\\x1aj\xe7\xdd\t\\)?EE\x99nj\xc7S\x9c&u\x9a\t\xb9\x86\xd1\x8d\xa7\x8bj\xb1\xb3\x820x0, 0x7, 0x7800, 0xb4, 0x5, {{0x22, 0x4, 0x0, 0xb, 0x88, 0x64, 0x0, 0x34, 0x29, 0x0, @empty, @empty, {[@generic={0x7, 0xc, "e3ce47f945c84c5641ba"}, @timestamp_prespec={0x44, 0x1c, 0x92, 0x3, 0x4, [{@empty, 0xfffffff9}, {@loopback, 0x10000}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @cipso={0x86, 0x2d, 0x2, [{0x1, 0xc, "ef81815f30543e0c1cbe"}, {0x1, 0x8, "d497b7084084"}, {0x2, 0xb, "eb181af56583e0aaae"}, {0x2, 0x8, "197b7fed29e6"}]}, @timestamp={0x44, 0x18, 0x5, 0x0, 0x7, [0xffffffff, 0xff, 0x0, 0x808, 0x0]}, @noop, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYRES32=r1], 0x28}}, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) creat(&(0x7f0000000100)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$int_in(r4, 0x5421, &(0x7f0000000480)=0x200) accept4(r4, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000010x000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, 0x0, 0x0) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x61f285}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) 31.718212599s ago: executing program 6 (id=1653): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240000000010000904b8070296d1ca000905060200020d000609058202000200"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000e40)={0x34, &(0x7f0000000c00)={0x40, 0x15, 0x4, 'U$i$'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000440)={0x0, 0x11, 0x5, "f5a9b9cf9b"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 30.474500469s ago: executing program 5 (id=1664): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mlockall(0x5) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r1, 0x4f, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001b40), 0x0, 0xf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r4, &(0x7f0000000300)="4ead9cc8da2dd2c004a8acb6ca29b3", 0xf) sendto$packet(r2, &(0x7f0000000000)="19", 0x1, 0x4045, &(0x7f0000000180)={0x11, 0xc, r3, 0x1, 0x0, 0x6, @dev}, 0x14) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) semget$private(0x0, 0x1, 0x180) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)={0x88, 0x1403, 0x0, 0x70bd29, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pim6reg1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x60, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x0, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x0, 0x1, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x0, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x0, 0x1, 0x1, 0x0, 0xa66}]}, @CTA_TIMEOUT_L4PROTO={0x0, 0x3, 0x88}]}, 0x60}}, 0x4004000) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='stack\x00') read$FUSE(r8, &(0x7f0000004480)={0x2020}, 0x2020) 30.170952732s ago: executing program 5 (id=1665): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x2, 0x0, @mcast1={0xff, 0x7}, 0xffffffff}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00', 0x6}}}, 0x108) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff060000000100003f4500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 30.047732486s ago: executing program 5 (id=1666): pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_usb_connect$uac1(0x0, 0xa1, &(0x7f0000001c80)=ANY=[@ANYBLOB="12010000000000086b1d010140000102030109028f0003010000000904000000010100000a24010000090201020924030004030000000904010000010200000904010101010200001024020200000000003a0e6b46ad3bf90724010000030009050109000403000007250100000000090402000001020000090402010101029d9d0724010702000009240201000400016d0905820920000600000725"], 0x0) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 29.966028839s ago: executing program 3 (id=1668): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') openat$cgroup_ro(r0, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0xcf5) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x1c, 0x0, &(0x7f0000000240)) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x7, 0x1, 0x0, r4, 0x0, 0x0, 0x20}, {}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x9, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x4}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000680)={0x4, 0x6, 0xf, 0xc, 0x4, "1d451546ed47cd95e7c9744ce42b45e4bada7b", 0x7, 0x234}) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 29.589292485s ago: executing program 3 (id=1670): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time_for_children\x00') pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x800) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file1\x00'}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xc}) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000013c0), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000300)={0xa, @pix_mp={0x0, 0x0, 0x33565348, 0x0, 0x0, [], 0x7}}) syz_usb_connect$cdc_ncm(0x6, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a44000010203010902640002010000000904000001020d000008240600015a25b505240000000d240f0100000000000000000006241a00000005240100000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100009c147010861246205bb4018203010902240001000000000904000002ff04"], 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c000180060006008848000004050280"], 0x528}}, 0xc000) 29.205894202s ago: executing program 6 (id=1672): mknod(&(0x7f0000000040)='./file0\x00', 0x10, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x8, 0x7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000340)={{0x0, 0x0, 0xd, 0x0, '\x00', 0x6943}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x401, 0x9c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x1, 0x1, 0x0, 0x6, 0x8be, 0x0, 0x0, 0x8c, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x85b, 0x10000000000, 0x0, 0xfffffffffffffffc, 0x200, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xa000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46020000000d0200aa1e1c170003003e000839a59434d90a2742a24e000000000000000000deef14b40028e27ebdfd74dafc20380003"], 0xfebe) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) 28.236301825s ago: executing program 5 (id=1675): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x40) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) socketpair$tipc(0x1e, 0x3f, 0x0, 0x0) (async) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x1d) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x85, &(0x7f0000000080)={r5}, &(0x7f00000000c0)=0x3930) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000000c0)={0x0, 0x46, "3923c9911efbd9987611fe9b27119f5720107bf8daf2ab63718de27eb2d03c43ba7ac1a27f976f58bdea11a69d4b4660135af3571f9d68ae107afd9b3fea0a6b5b6dbc77bf9d"}, &(0x7f0000000040)=0x4e) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000001c0)={r5, 0xce80, 0x6, 0x3, 0xe, 0x8000, 0x13aa, 0x6, {r6, @in6={{0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x44}, 0x6}}, 0xbbb3, 0x100, 0x4, 0xf, 0x4}}, &(0x7f0000000140)=0xb0) (async, rerun: 64) write$binfmt_aout(r2, &(0x7f00000010c0)=ANY=[], 0x1a3) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='kvm_set_irq\x00', r2, 0x0, 0x9}, 0x18) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000400)="ceaf6ab0f26595e69491032cb8e541cd96b48946e3813c70c08eb4f98a66c023ce19d12dcb9724aabf4ff1586fab9070e85a94d957663b082b5eb35d5774c3dcaf6e75b09fe2fe59bce7a7e44ddb213699da5462041466a033870ac64ece98e260d3", 0x62}], 0x1) (async) r7 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x2180) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x5, 0x400001, 0x0, 0x0, 0x7, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x400, 0x80000000000]}}) (async, rerun: 64) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) (rerun: 64) sendmsg$SOCK_DESTROY(r8, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xd8, 0x15, 0x400, 0x70bd29, 0x25dfdbff, {0x1d, 0x7}, [@INET_DIAG_REQ_BYTECODE={0xc1, 0x1, "55cf15e992d77111bdc03d80e220e43d1102aaff303324a47f8f8a0aaf2c2dbed30c85e296082c6cc269aa14760862ba7a65e6bf7c26f25a43970c444d81de57547f64fc324bb089c81d6a1eee7bb167923acaf22f9c19bdead01b8b021e8dd36fa38c42d4c8ffe2dfd9834d70269beb970cb7fb119cf1fcda862f6346d17579bed8aac795a60ebadc1ef6f7de56f2827c667f5027268cd872dc1b62547c12c7c9a7e141f08e6cbdd1c08e9dc0c54afab040e251d4c00871c845e1bacf"}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4040040}, 0x4000040) 27.885330152s ago: executing program 3 (id=1678): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x0, 0x7fffffff, 0x3, 0x0, 0x6, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x80) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000008800000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) 27.884960467s ago: executing program 4 (id=1679): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) dup(r0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve1\x00'}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x98}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) prlimit64(0x0, 0x0, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0x7, 0x100800}, 0x10) socket(0x23, 0x805, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendto(r4, 0x0, 0x0, 0x80, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @rand_addr=0x64010102}, 0x3, 0x1, 0x1, 0x3}}, 0x80) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000500)) r5 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r5, &(0x7f0000000280)={0x2, 0x0, @local, 0x4}, 0x10) 27.804531222s ago: executing program 5 (id=1680): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) dup(r0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve1\x00'}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x98}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) prlimit64(0x0, 0x0, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0x7, 0x100800}, 0x10) socket(0x23, 0x805, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendto(r4, 0x0, 0x0, 0x80, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @rand_addr=0x64010102}, 0x3, 0x1, 0x1, 0x3}}, 0x80) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000500)) r5 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r5, &(0x7f0000000280)={0x2, 0x0, @local, 0x4}, 0x10) 27.069561053s ago: executing program 4 (id=1681): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x3, @remote, 0x19}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000600)="56501366ff47fd29ff39cc10d7e7ae240fee90ea7a4c89f1cdfe3f2e0f12891baba90886caf8977d0dcc", 0x2a}], 0x1, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)="95dbf7", 0x3}], 0x1}}], 0x2, 0x8048041) 27.03836237s ago: executing program 5 (id=1682): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240000000010000904b8070296d1ca000905060200020d000609058202000200"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000e40)={0x34, &(0x7f0000000c00)={0x40, 0x15, 0x4, 'U$i$'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000440)={0x0, 0x11, 0x5, "f5a9b9cf9b"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 26.970247653s ago: executing program 4 (id=1683): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010007000000000000017c0000040000000c000180060006008848000004050280"], 0x528}}, 0xc000) 26.969494459s ago: executing program 3 (id=1684): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r0, 0x89ee, &(0x7f0000002200)=0x5b) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x23}, [@ldst={0x4, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7, 0x8}}, './file0\x00'}) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x600, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/48, 0x30}], 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) r5 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r5, 0x0) ftruncate(r5, 0x51a9497) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0x0, 0x9, 0x8}, 0xc) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004042, 0x0) dup(r7) r8 = syz_io_uring_setup(0x417a, &(0x7f00000000c0)={0x0, 0x0, 0x10711, 0x1, 0xffffffff}, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}) io_uring_enter(r8, 0x567, 0x20, 0x0, 0x0, 0x0) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xa18b, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x1f, &(0x7f00000005c0)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @alu={0x7, 0x1, 0xa, 0x1, 0x2, 0xfffffffffffffff8, 0x8}, @exit, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x7c}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x4, 0x2, 0x9, 0x3, 0xffff}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf5be}], &(0x7f00000001c0)='GPL\x00', 0x2, 0xbc, &(0x7f0000000200)=""/188, 0x41100, 0x6c7ef5a9c51f3de7, '\x00', r4, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x3, 0x5, 0x40}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[r6, r11], &(0x7f0000000400)=[{0x1, 0x3, 0x10000002, 0x5}, {0x4, 0x3, 0x7, 0x8}, {0x4, 0x3, 0x6, 0x3}], 0x10, 0x80000000, @value=r1}, 0x94) 26.947575985s ago: executing program 3 (id=1685): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_init1(0x800) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0x138, 0x0, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'ip6erspan0\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) syz_pidfd_open(r0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$l2tp6(0xa, 0x2, 0x73) r5 = open(&(0x7f0000000180)='./bus\x00', 0x1092fc, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25c861ca7bd76ecf, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) 26.884118921s ago: executing program 4 (id=1687): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) accept(r1, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) syz_emit_ethernet(0x68, &(0x7f0000005a40)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "75e700", 0x32, 0x3a, 0x0, @dev, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a3579e", 0x0, 0x2c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [], "6be2"}}}}}}}, 0x0) socket$igmp(0x2, 0x3, 0x2) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r6 = socket$inet_dccp(0x2, 0x6, 0x0) listen(0xffffffffffffffff, 0x5) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmmsg(r6, &(0x7f0000002980), 0x400000000000239, 0x0) 26.802687707s ago: executing program 2 (id=1689): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d100090507000000000000090589"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4c083) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$VT_DISALLOCATE(r1, 0x5608) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x7, @remote}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303}, '\x00\x00\x00\x00\x00\x00P\x00', "6b6aab000000440000000000000800", "00000200", "0300000400ce0c00"}, 0x28) socket$igmp(0x2, 0x3, 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) listen(r4, 0x5) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0) r5 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000140)) ioctl$VT_WAITACTIVE(r1, 0x5607) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r7}, 0x10) lremovexattr(0x0, 0x0) 26.013355241s ago: executing program 3 (id=1690): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920001000109021b1901000000d40904150001da40df000905", @ANYRES32], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) prlimit64(0x0, 0xa, &(0x7f0000000140)={0x7, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000440)=0x6, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000004bc0)=[{{0x0, 0xffffffffffffff04, &(0x7f0000000100)=[{&(0x7f0000000180)="316f825a3d29f96a392ea917017b4cd300000000bee700d6dd1fb41a20baf7f7343067fd40cdd4f16742e94b000000005d0200b7f3028100ae8180db94b9de7456ae62b0e61861f615947de10ae3c4fa199fb5fe7766a0842912179154a96fa88e161d861e77a486e10d1d1d0b90c8997e6917226fe4bb5d77e85706336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d186ac9b2382a75ac68920ca3d542aece1ba7920a8f39b270458224e74a22fa1d", 0xc4}, {&(0x7f0000000f00)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df28a3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25cb51279b18c8e5bfbc52152", 0x72}, {&(0x7f0000000800)="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", 0x152}], 0x3}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000014c0)='#\x00N', 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001bc0)="5c89eeb1aa86c6f680f09cc1c1d4bc5fc6a067d295afd3aa97af3d777b81db48f9ceb270e506af840503c6fbf20760e4cd8df9c220cd0728585229123d5c61507d00561b8f1a15e64fa2779be424fdeff46058eaee7acfc80b2ae9840e9ac1", 0x5f}], 0x1}}], 0x3, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x101bff, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @rand_addr=0x64010102}, 0xc) setsockopt$inet_msfilter(r5, 0x0, 0x29, 0x0, 0x1c) r6 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r6, {0x2}}, './file0\x00'}) open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) fcntl$setlease(r6, 0x400, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0xfffffe00, 0x800000, 0x34324152, 0x0, 0x8, [{}, {0x6, 0x6}, {}, {0x1, 0xfffffffc}, {0x3}, {0x4, 0x3}, {}, {0x4}], 0x0, 0x0, 0x8, 0x0, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 26.010275333s ago: executing program 4 (id=1691): r0 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r5, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0x10003) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449, 0x0, 0x0, 0x3}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000000)={{@host}, 0x20000000}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x230, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xede}]}, @TIPC_NLA_MEDIA={0xd4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x48}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe0000000}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff57b}]}]}, @TIPC_NLA_MEDIA={0xec, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x82}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x17ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}]}, 0x230}}, 0x40004) syz_clone(0x206000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 25.913252989s ago: executing program 6 (id=1692): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'}) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001a000100000000000000000002000000000000000000000008"], 0x34}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8815}, 0x24000004) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3], 0x0, 0x41901}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 25.788511558s ago: executing program 2 (id=1693): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) socket$packet(0x11, 0x0, 0x300) syz_open_dev$tty1(0xc, 0x4, 0x3) socket$alg(0x26, 0x5, 0x0) syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000000080)) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000000000)={0x0, 0x300}) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r5}, 0x20) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000380)=[r2], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000003c0)}) 25.370110368s ago: executing program 6 (id=1694): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x6c, &(0x7f0000000080)=@generic={0x4, 0x0, 0x64, ';VwU', "5fc440785a99ff046e3112919482a611a7de4cdfdf8a22def5850f4c6c73a55c2030afccd017a4b962e76e9094320fe548ee0dee5f43475cf5ab587505331d80a376ed6e44d99ca0cf639cf4d41d95dfbd2810a89a91eb7a8fa772e1ac53cdc58a090f98"}) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1000004, 0x40010, 0xffffffffffffffff, 0xb000) syz_usb_ep_write(r0, 0x9d, 0xda, &(0x7f0000000100)="dd79fcfbcdb02667020bae84b4e1816ad06c68fd95b6ce9dbc0a16fe885c36f8dc7d450129bec87abb93af54d4969334fb98835dd5474310df6e288baa6ee085c6753f429fc07ad70c634e7f51cdae1c96374dd77e6aefbcd325b2fadb1c07a7999b639c231ffce90a0a0a0e920cc001c1cef64b1b7d4420eea866ebfd641c93d3a239987e488c1fe77874a0eed40adedb0f77cd3e52b0d4c06ddf96110dd9341a4b532ac4339e3e8d1175a164b7e2625a9ad49dbce8bb73ce3a51f2eeabe54e495f30c023f3b637d154107ed922d2aba1dff4818af26b947669") ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) sendmsg$kcm(r1, &(0x7f0000000900)={&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3, 0x0, 0x0, 0x1}}, 0x80, &(0x7f0000000880)=[{&(0x7f00000002c0)="2e2b28da99409bacea0020222f00fad98a8b0f179b6498e6fec58217b7b1b0a43d15ae3d23e16cc15da32318ac4b06aa93da8585c0efafed3ef3e64c93f3fcfaba9c80b6673e99ceaaa7c8cc8cdb58720818cd5ea019521f73cc377aa7ec1c77e077ca7b10d7d0dc07414b8642db253351d9e1872abacb62a16eb76a8763719546b661dbf3f0e43b865d2c77676b364ecaf3c871083c765195b6ad2ee360460d2a056b2ae241bbbe54cb389afb334ff7ab3cef5b9f41b6ca3b7848932d292ec1c22402e1dd42a815bb0fac1e9f7d4112bf", 0xd1}, {&(0x7f00000003c0)="3c620cfb29fa78fc448b902f0183cbb19855ebe306be90d3dadce085cb3334c50ef517fee19d7a1fc0815d2060537cf288eecf80437d6a61672918379d78f9bf0138511e4e7fc50293dbf7541c126264de63fa7660fbc04fc8de18b2b0eb99631ea54b3c2ec6a1b8cf7ae9c2b5aad80ee2f7e88c6b84f5100a5c6eb78e69f1544cfb739466", 0x85}, {&(0x7f0000000480)="13cfeb37e031a377cd819e1895b30fd63a22c429da2ef61c49bef467145519c9f03298f95804d3bca3326165fe040adb89844c7b9f51c4f4e8b3f2a60a7da847f4ab8c25f730dfc6d525d04af3cf4e2b776f802d869ea55afeed1f97cdcb9977edac080f648bd201697976d1158fa30dc7cb67bbd237c56798bfa403af90ad68065bf10f4d111c953021b1555a59ba9beffbc361831101a5d36b008dc3fb", 0x9e}, {&(0x7f0000000540)="457056ee4967f9e8bd21565ccd5fa1b4c5525660d139733c0548cd7f1958bc26b8d7975716d3a8e1bbbdadb1885ec9e93b4f69d0843d23e2b3cd940ff26836437ab617478ef830f3f1c0e4b350aedbb2e4e52d5715dbecf21d15dc76908f2963cc2d9ce3b6448a94e7a75d958750349e0ea975c3ef483edb65689cdd17cac788eac6013e896b1afdb580520b376ec514f6dc2bd3de8a94ab53209f59e4519ece857f071820072b3381829c4dd24934224c1d953dc48f7fdf274443172b49f51794e661a5501a", 0xc6}, {&(0x7f0000000640)="c927d81851db5212df59e84612fdbb35db173fcdf92b703861ae723413b9587dfb2b60db0814d43daabc03158324d1a772460b07889dfc3608ed66ef3ce3e78f295458fc953b4e153c1c92dea5073a9f875ccfa4608ccbe387147a63b217b5e51a04dd2b37f83a67ca97c0fe9b100aedb6e6a72984a354796a50ec9c35d678cd97d453a0c6431223ff824a7c5306250befa2812e706e5d10054680d30763dbc19d595ae0f2f7537b03ca15dd7646c2e506f6dd5b8ae4109662c587255327a2d6dbc8989e6792a5a09d76ecd8ec8ac0", 0xcf}, {&(0x7f0000000740)="18acef3d3ffeb891d5acec6c8b93e08b234ef45bfa3d3d0d7109745426a616e9ca52715d040d84fdc6e13c5c017d40daf626028417dbbdc0909c6d64752636de7cf1e2420deb0b385ebc02b6301c9ad91c4aa982afbdb401003629fb6d4a2406a80922fcbf6163a1ece3db5849a1f266155a33ff0d7c638f8b0c493ad00626f720f17382e75625a1a765df0e80b1709deb72b12758329f5a4c40ca4ad759e8ca948a943e542c7717a9dc93cc31bb43", 0xaf}, {&(0x7f0000000800)="c5749e18daed62ed420941795b5acf93bb8d898379edcbb1753cc446614c6fe1cf2434af666517b9474468238f1c72b39d18af2a125be1e88557028092b77e3b24731f5f003349c54935da706bebbb00d5aa0c5bb8e504e409df7c802da6ffc688a2", 0x62}], 0x7}, 0x490) 25.024615024s ago: executing program 4 (id=1695): mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000002000000021000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000fa38da20e8fd7232ed5dd81b"], 0x50) openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x80000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x0, 0x5, 0x4, 0x8fc3, 0x1, 0x20000, 0x0, 0xf}}) syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b00010127000009040000060206000f052406000005240000000d240f010000000000000000000905820208020000000905030240"], 0x0) 24.922252286s ago: executing program 2 (id=1696): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) socket$unix(0x1, 0x1, 0x0) io_setup(0x4, 0x0) io_submit(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000070000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000180100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000008740000000c0a010300000000000000000100000008000440000000000900010073797a300000000038000380340000800400018004000680140007800c000100636f756e746572"], 0xe4}}, 0x0) 24.839306566s ago: executing program 2 (id=1697): munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) brk(0x20ffc004) r0 = syz_open_dev$evdev(&(0x7f000001fa80), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x40084504, &(0x7f0000ffcffc)) 24.577467807s ago: executing program 2 (id=1698): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100050005000700000000000800090000003f0014002000ff20010010ffa7000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 24.490092141s ago: executing program 2 (id=1699): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r4 = socket$inet(0x2, 0x800, 0xffc00000) setsockopt$inet_msfilter(r4, 0x0, 0x29, 0x0, 0x57) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0xa756d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setreuid(0xee01, 0x0) r8 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) setreuid(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x4008032, 0xffffffffffffffff, 0xea7e8000) madvise(&(0x7f0000a26000/0x2000)=nil, 0x2000, 0x15) socket$xdp(0x2c, 0x3, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000000)={0x40, 0xfffffffc, 0xb, 0xfffffffc, 0x9, "b5f201ffdf9857510d8d2ae135624d92a08f00", 0x8000}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000680)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r9, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="dbdf256b00000008000300", @ANYRES32=r10, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x48040}, 0x800) 0s ago: executing program 34 (id=1682): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240000000010000904b8070296d1ca000905060200020d000609058202000200"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000e40)={0x34, &(0x7f0000000c00)={0x40, 0x15, 0x4, 'U$i$'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000440)={0x0, 0x11, 0x5, "f5a9b9cf9b"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): e=1400 audit(2000000146.340:507): avc: denied { write } for pid=9991 comm="syz.5.1043" path="socket:[25874]" dev="sockfs" ino=25874 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 232.897452][ T5916] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 233.344751][ T5916] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 233.353970][ T5916] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 233.361087][ T969] usb 5-1: USB disconnect, device number 21 [ 233.369893][ T5916] usb 7-1: USB disconnect, device number 8 [ 233.461134][ T5824] usb 6-1: USB disconnect, device number 29 [ 233.962301][T10025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1050'. [ 234.016629][T10025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1050'. [ 234.041521][ T5814] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 234.459226][T10033] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1051'. [ 234.493415][T10033] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1051'. [ 235.407777][T10053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1060'. [ 235.493282][T10053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1060'. [ 235.502402][ T29] audit: type=1400 audit(2000000148.940:508): avc: denied { bind } for pid=10049 comm="syz.3.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 235.521681][ T29] audit: type=1400 audit(2000000148.940:509): avc: denied { bind } for pid=10049 comm="syz.3.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 236.649294][ T5863] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 237.019995][ T5863] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 237.145980][ T5863] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 237.163972][ T5863] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.174078][ T5863] usb 6-1: Product: syz [ 237.181419][ T5863] usb 6-1: Manufacturer: syz [ 237.189143][ T5863] usb 6-1: SerialNumber: syz [ 237.486229][T10057] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 238.334835][ T29] audit: type=1400 audit(2000000151.780:510): avc: denied { setopt } for pid=10108 comm="syz.6.1076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 238.453609][T10114] xt_ecn: cannot match TCP bits for non-tcp packets [ 238.481408][T10094] syz.3.1071 (10094): drop_caches: 2 [ 238.544744][T10094] syz.3.1071 (10094): drop_caches: 2 [ 238.552371][ T5863] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 238.619442][ T5863] usb 6-1: USB disconnect, device number 30 [ 238.770978][T10123] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1080'. [ 238.805209][T10123] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1080'. [ 239.116868][T10129] xt_NFQUEUE: number of total queues is 0 [ 239.302823][ T5863] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 239.332036][T10134] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1085'. [ 240.593936][T10149] xt_CT: You must specify a L4 protocol and not use inversions on it [ 241.068070][T10163] overlayfs: failed to resolve './file1': -2 [ 242.079272][ T29] audit: type=1326 audit(2000000155.520:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10173 comm="syz.5.1096" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c87d85d29 code=0x0 [ 243.620897][T10216] IPv6: NLM_F_CREATE should be specified when creating new route [ 243.983074][T10224] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.950814][ T5863] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 244.966050][ T29] audit: type=1400 audit(2000000158.420:512): avc: denied { shutdown } for pid=10237 comm="syz.4.1110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 245.372806][T10249] netlink: 'syz.3.1112': attribute type 4 has an invalid length. [ 245.644265][ T5863] usb 7-1: Using ep0 maxpacket: 16 [ 245.650702][T10245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1111'. [ 245.659977][T10251] netlink: 'syz.3.1112': attribute type 4 has an invalid length. [ 245.733039][ T5863] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.745669][ T5863] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 245.762428][ T5863] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 245.772011][ T5863] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.780908][ T5863] usb 7-1: Product: syz [ 245.790989][ T5863] usb 7-1: Manufacturer: syz [ 245.793526][T10256] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1114'. [ 245.795862][ T5863] usb 7-1: SerialNumber: syz [ 245.819192][T10256] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 246.516532][ T5863] usb 7-1: cannot find UAC_HEADER [ 246.733001][ T5863] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 246.772497][T10271] netlink: 512 bytes leftover after parsing attributes in process `syz.5.1116'. [ 246.899868][ T5821] udevd[5821]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 247.097375][ T5863] usb 7-1: USB disconnect, device number 9 [ 247.521519][ T29] audit: type=1400 audit(2000000160.970:513): avc: denied { nlmsg_read } for pid=10290 comm="syz.6.1124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 247.542000][ C1] vkms_vblank_simulate: vblank timer overrun [ 247.578965][ T29] audit: type=1400 audit(2000000161.030:514): avc: denied { append } for pid=10290 comm="syz.6.1124" name="sg0" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 247.806647][ T5864] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 247.824262][ T5894] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 247.831937][ T969] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 248.236854][ T5864] usb 5-1: Using ep0 maxpacket: 8 [ 248.245349][ T5864] usb 5-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 248.255561][ T5864] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 248.264540][ T5864] usb 5-1: New USB device found, idVendor=04d9, idProduct=a000, bcdDevice= 0.00 [ 248.273940][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.284928][ T5864] usb 5-1: config 0 descriptor?? [ 248.323987][ T5894] usb 4-1: Using ep0 maxpacket: 8 [ 248.329209][ T969] usb 7-1: Using ep0 maxpacket: 16 [ 248.338170][ T5894] usb 4-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=46.ac [ 248.348161][ T969] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 248.357539][ T969] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.365633][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.373736][ T5894] usb 4-1: Product: syz [ 248.378326][ T969] usb 7-1: Product: syz [ 248.382498][ T969] usb 7-1: Manufacturer: syz [ 248.387985][ T5894] usb 4-1: Manufacturer: syz [ 248.392661][ T969] usb 7-1: SerialNumber: syz [ 248.397517][ T5894] usb 4-1: SerialNumber: syz [ 248.417909][ T969] r8152-cfgselector 7-1: Unknown version 0x0000 [ 248.424600][ T5894] usb 4-1: config 0 descriptor?? [ 248.429723][ T969] r8152-cfgselector 7-1: config 0 descriptor?? [ 248.439984][ T5894] kl5kusb105 4-1:0.0: KL5KUSB105D / PalmConnect converter detected [ 248.452580][ T5894] usb 4-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 248.754789][T10319] atomic_op ffff88805cefc198 conn xmit_atomic 0000000000000000 [ 249.053908][T10321] atomic_op ffff888028b76198 conn xmit_atomic 0000000000000000 [ 249.354274][ T29] audit: type=1400 audit(2000000162.740:515): avc: denied { setopt } for pid=10325 comm="syz.5.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 249.516889][ T5824] r8152-cfgselector 7-1: USB disconnect, device number 10 [ 250.332287][ T5863] usb 5-1: USB disconnect, device number 22 [ 250.736930][ T969] usb 4-1: USB disconnect, device number 21 [ 250.753543][ T969] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 250.995480][ T969] kl5kusb105 4-1:0.0: device disconnected [ 251.676295][T10365] netlink: 'syz.6.1146': attribute type 10 has an invalid length. [ 251.757074][T10367] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1145'. [ 252.057199][T10365] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 252.074510][T10368] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1145'. [ 252.123934][ T969] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 253.263933][ T969] usb 4-1: Using ep0 maxpacket: 16 [ 253.606568][ T969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.617950][ T969] usb 4-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00 [ 254.460354][ T969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.473469][ T969] usb 4-1: config 0 descriptor?? [ 254.515343][T10399] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 254.595146][ T969] usb 4-1: can't set config #0, error -71 [ 254.715537][ T969] usb 4-1: USB disconnect, device number 22 [ 255.708279][T10432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1167'. [ 255.731811][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.934218][T10447] openvswitch: netlink: IP tunnel dst address not specified [ 256.510976][T10461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1176'. [ 256.525757][T10463] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1177'. [ 256.715228][T10469] netlink: 'syz.4.1177': attribute type 30 has an invalid length. [ 256.723131][T10469] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1177'. [ 256.733044][T10469] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 256.742372][T10469] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 257.268057][T10478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1179'. [ 258.570367][T10496] nbd: must specify at least one socket [ 258.827896][ T5866] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 259.092196][T10500] capability: warning: `syz.6.1186' uses 32-bit capabilities (legacy support in use) [ 259.183996][ T5866] usb 6-1: Using ep0 maxpacket: 32 [ 259.207968][ T5866] usb 6-1: config 0 has an invalid interface number: 184 but max is -1 [ 259.233129][ T5866] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 259.255561][ T5866] usb 6-1: config 0 has no interface number 0 [ 259.267924][ T5866] usb 6-1: config 0 interface 184 has no altsetting 0 [ 259.285368][ T5866] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 259.295103][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.316540][ T5866] usb 6-1: Product: syz [ 259.329110][ T5866] usb 6-1: Manufacturer: syz [ 259.338914][ T5866] usb 6-1: SerialNumber: syz [ 259.357878][ T5866] usb 6-1: config 0 descriptor?? [ 259.370429][ T5866] smsc75xx v1.0.0 [ 260.056995][ T29] audit: type=1326 audit(2000000173.510:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10533 comm="syz.3.1194" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c5bb85d29 code=0x0 [ 260.126256][T10537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1192'. [ 260.164652][T10537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1192'. [ 260.383176][T10539] FAULT_INJECTION: forcing a failure. [ 260.383176][T10539] name failslab, interval 1, probability 0, space 0, times 0 [ 260.388185][T10541] nbd: must specify at least one socket [ 260.397242][T10539] CPU: 1 UID: 0 PID: 10539 Comm: syz.3.1194 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 260.412198][T10539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 260.422260][T10539] Call Trace: [ 260.425541][T10539] [ 260.428474][T10539] dump_stack_lvl+0x16c/0x1f0 [ 260.433171][T10539] should_fail_ex+0x497/0x5b0 [ 260.437865][T10539] ? fs_reclaim_acquire+0xae/0x150 [ 260.442985][T10539] should_failslab+0xc2/0x120 [ 260.447678][T10539] __kmalloc_cache_noprof+0x68/0x410 [ 260.452969][T10539] ? ww_mutex_lock_interruptible+0x37/0x160 [ 260.458866][T10539] vkms_atomic_crtc_duplicate_state+0x78/0x1d0 [ 260.465008][T10539] drm_atomic_get_crtc_state+0x162/0x440 [ 260.470624][T10539] drm_atomic_get_plane_state+0x436/0x590 [ 260.476319][T10539] drm_atomic_set_property+0xa05/0x3350 [ 260.481858][T10539] ? __pfx_drm_atomic_set_property+0x10/0x10 [ 260.487817][T10539] ? lock_acquire+0x2f/0xb0 [ 260.492300][T10539] ? __might_fault+0xe3/0x190 [ 260.496961][T10539] ? __might_fault+0xe3/0x190 [ 260.501621][T10539] drm_mode_atomic_ioctl+0x691/0x25d0 [ 260.506978][T10539] ? avc_has_extended_perms+0x902/0xf70 [ 260.512513][T10539] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 260.518314][T10539] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 260.523671][T10539] ? lock_acquire+0x2f/0xb0 [ 260.528154][T10539] ? drm_is_current_master+0x1a/0x40 [ 260.533422][T10539] ? do_raw_spin_unlock+0x172/0x230 [ 260.538606][T10539] drm_ioctl_kernel+0x1e6/0x3d0 [ 260.543436][T10539] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 260.549230][T10539] ? __might_fault+0x11/0x190 [ 260.553908][T10539] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 260.559280][T10539] ? __might_fault+0xe3/0x190 [ 260.563943][T10539] drm_ioctl+0x5d6/0xc00 [ 260.568183][T10539] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 260.573973][T10539] ? __pfx_drm_ioctl+0x10/0x10 [ 260.578717][T10539] ? __pfx_lock_release+0x10/0x10 [ 260.583725][T10539] ? selinux_file_ioctl+0x180/0x270 [ 260.588922][T10539] ? selinux_file_ioctl+0xb4/0x270 [ 260.594020][T10539] ? __pfx_drm_ioctl+0x10/0x10 [ 260.598769][T10539] __x64_sys_ioctl+0x190/0x200 [ 260.603518][T10539] do_syscall_64+0xcd/0x250 [ 260.608004][T10539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.613883][T10539] RIP: 0033:0x7f9c5bb85d29 [ 260.618302][T10539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.637910][T10539] RSP: 002b:00007f9c5c990038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 260.646311][T10539] RAX: ffffffffffffffda RBX: 00007f9c5bd76080 RCX: 00007f9c5bb85d29 [ 260.654275][T10539] RDX: 0000000020000180 RSI: 00000000c03864bc RDI: 000000000000000e [ 260.662235][T10539] RBP: 00007f9c5c990090 R08: 0000000000000000 R09: 0000000000000000 [ 260.670189][T10539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 260.678139][T10539] R13: 0000000000000000 R14: 00007f9c5bd76080 R15: 00007ffcf552d5d8 [ 260.686095][T10539] [ 261.608249][T10556] xt_NFQUEUE: number of total queues is 0 [ 261.790797][ T5866] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 261.802087][ T5866] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 261.891096][T10561] --map-set only usable from mangle table [ 261.909488][ T5866] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 261.920421][ T5866] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 261.930563][ T5866] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 261.941753][ T5866] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 261.951734][ T5866] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -32 [ 262.010682][T10565] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 262.914005][T10580] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1207'. [ 263.248116][ T5894] usb 6-1: USB disconnect, device number 32 [ 263.441766][T10586] xt_hashlimit: size too large, truncated to 1048576 [ 264.693985][ T5863] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 265.175219][ T5863] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.186279][ T5863] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 265.209540][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.223271][ T5863] usb 4-1: config 0 descriptor?? [ 265.859685][T10611] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1213'. [ 265.869322][T10611] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1213'. [ 265.881565][T10611] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1213'. [ 265.890983][T10611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1213'. [ 266.321723][T10616] overlayfs: missing 'lowerdir' [ 266.688375][T10622] pimreg: entered allmulticast mode [ 267.283167][ T5863] pwc: Askey VC010 type 2 USB webcam detected. [ 267.295155][ T5863] pwc: send_video_command error -71 [ 267.300380][ T5863] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 267.307986][ T5863] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 267.332237][T10633] bridge2: entered promiscuous mode [ 267.362197][ T5863] usb 4-1: USB disconnect, device number 23 [ 267.472984][ T29] audit: type=1326 audit(2000000180.920:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10635 comm="syz.4.1224" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2cdcf85d29 code=0x0 [ 267.550047][T10648] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1226'. [ 267.873994][ T8] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 268.065149][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 268.076379][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.086511][ T8] usb 5-1: New USB device found, idVendor=056a, idProduct=7a26, bcdDevice=ad.13 [ 268.102981][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.156101][ T8] usb 5-1: config 0 descriptor?? [ 268.494025][ T5824] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 268.663955][ T5863] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 268.671716][ T5824] usb 7-1: Using ep0 maxpacket: 16 [ 268.680073][ T5824] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 268.687834][ T5824] usb 7-1: can't read configurations, error -61 [ 268.768516][ T8] wacom 0003:056A:7A26.0002: Unknown device_type for 'HID 056a:7a26'. Ignoring. [ 268.828860][ T5824] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 268.836682][ T5863] usb 4-1: Using ep0 maxpacket: 16 [ 268.868602][ T5863] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 268.880954][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 268.893515][ T5863] usb 4-1: Product: syz [ 268.900520][ T5863] usb 4-1: Manufacturer: syz [ 268.908059][ T5863] usb 4-1: SerialNumber: syz [ 268.928853][ T5863] usb 4-1: config 0 descriptor?? [ 268.994257][ T5824] usb 7-1: Using ep0 maxpacket: 16 [ 269.002844][ T5824] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 269.010767][ T5824] usb 7-1: can't read configurations, error -61 [ 269.031416][ T5824] usb usb7-port1: attempt power cycle [ 269.374562][ T5824] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 269.394485][ T5824] usb 7-1: Using ep0 maxpacket: 16 [ 269.401568][ T5824] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 269.409243][ T5824] usb 7-1: can't read configurations, error -61 [ 270.082882][ T5824] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 270.105212][ T5824] usb 7-1: Using ep0 maxpacket: 16 [ 270.112227][ T5824] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 270.120529][ T5824] usb 7-1: can't read configurations, error -61 [ 270.130730][ T5824] usb usb7-port1: unable to enumerate USB device [ 270.515514][ T8] usb 5-1: USB disconnect, device number 23 [ 270.662589][T10690] IPv6: NLM_F_CREATE should be specified when creating new route [ 270.893929][ T969] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 271.053931][ T969] usb 6-1: Using ep0 maxpacket: 16 [ 271.123548][T10695] usb usb1: usbfs: process 10695 (syz.4.1239) did not claim interface 7 before use [ 271.446630][ T29] audit: type=1400 audit(2000000184.590:518): avc: denied { setopt } for pid=10692 comm="syz.4.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 271.502527][ T969] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 271.537878][ T5863] usb 4-1: USB disconnect, device number 24 [ 271.547243][ T969] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 271.575783][ T969] usb 6-1: Product: syz [ 271.579984][ T969] usb 6-1: Manufacturer: syz [ 271.591100][ T969] usb 6-1: SerialNumber: syz [ 271.978394][ T969] usb 6-1: config 0 descriptor?? [ 272.379806][T10714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1243'. [ 272.447229][T10712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1243'. [ 272.974108][ T8] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 273.051509][T10733] misc userio: Begin command sent, but we're already running [ 273.062023][T10733] ipt_REJECT: TCP_RESET invalid for non-tcp [ 273.154256][ T8] usb 7-1: Using ep0 maxpacket: 32 [ 273.160644][ T8] usb 7-1: config 0 has an invalid descriptor of length 197, skipping remainder of the config [ 273.171058][ T8] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 273.181639][ T8] usb 7-1: New USB device found, idVendor=03f0, idProduct=421d, bcdDevice=bf.81 [ 273.190890][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.358760][T10739] xt_CT: You must specify a L4 protocol and not use inversions on it [ 273.484116][ T8] usb 7-1: Product: syz [ 273.484269][ T5814] Bluetooth: hci1: command 0x0406 tx timeout [ 273.488290][ T8] usb 7-1: Manufacturer: syz [ 273.488306][ T8] usb 7-1: SerialNumber: syz [ 273.508774][ T8] usb 7-1: config 0 descriptor?? [ 273.884044][T10760] netlink: 'syz.2.1259': attribute type 9 has an invalid length. [ 274.179845][ T8] usb 6-1: USB disconnect, device number 33 [ 274.198653][T10764] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 274.580771][T10774] x_tables: duplicate underflow at hook 1 [ 275.191716][ T5824] usb 7-1: USB disconnect, device number 15 [ 275.418126][T10794] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1269'. [ 275.490280][T10799] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.692737][T10809] xt_CT: You must specify a L4 protocol and not use inversions on it [ 276.098410][T10815] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1277'. [ 276.328967][T10826] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1276'. [ 276.342494][T10826] netlink: 'syz.4.1276': attribute type 12 has an invalid length. [ 276.608874][T10827] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 277.440030][T10847] IPv6: sit1: Disabled Multicast RS [ 277.493290][T10854] netlink: 'syz.4.1287': attribute type 4 has an invalid length. [ 277.501856][T10854] netlink: 'syz.4.1287': attribute type 4 has an invalid length. [ 277.574851][ T5824] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 277.744132][ T5824] usb 6-1: Using ep0 maxpacket: 32 [ 277.763288][ T5824] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.775515][ T5824] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 277.804016][ T5894] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 277.844505][ T5824] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 277.864130][ T5824] usb 6-1: New USB device strings: Mfr=14, Product=0, SerialNumber=1 [ 277.872572][ T5824] usb 6-1: Manufacturer: syz [ 277.882805][ T5824] usb 6-1: SerialNumber: syz [ 277.934131][ T5824] cdc_acm 6-1:1.0: Zero length descriptor references [ 277.942260][ T5824] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -22 [ 278.015038][ T5894] usb 5-1: Using ep0 maxpacket: 32 [ 278.045467][ T5894] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 278.058639][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 278.070332][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 278.081609][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 278.096348][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 278.111737][ T5894] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 278.207309][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.216398][ T5894] usb 5-1: Product: syz [ 278.221664][ T5894] usb 5-1: Manufacturer: syz [ 278.227397][ T5894] usb 5-1: SerialNumber: syz [ 278.367177][ T5894] usb 5-1: config 0 descriptor?? [ 278.517900][ T969] usb 6-1: USB disconnect, device number 34 [ 278.640546][ T5894] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 278.654265][T10856] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1288'. [ 278.677028][ T5894] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 278.686854][ T5894] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 278.694052][ T5894] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 278.700529][ T5894] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 278.709022][ T5894] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 278.715533][ T5894] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 278.721870][ T5894] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 278.729602][ T5894] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 278.739803][ T5894] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 278.747483][ T5894] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 278.755142][ T5894] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 278.761473][ T5894] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 278.783967][ T5894] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 278.795246][ T5894] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 278.804383][ T5894] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 278.813135][ T5894] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 278.821246][ T5894] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 278.828391][ T5894] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 278.837580][ T5894] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 278.859314][ T5894] input input28: Timeout waiting for response from device. [ 278.884032][ T5894] usb 5-1: USB disconnect, device number 24 [ 278.892876][ T29] audit: type=1326 audit(2000000192.340:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10871 comm="syz.6.1293" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9228b85d29 code=0x400000 [ 279.026960][T10876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1294'. [ 279.082826][T10876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1294'. [ 279.557662][T10886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1297'. [ 279.591825][T10886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1297'. [ 279.851065][ T29] audit: type=1400 audit(2000000193.300:520): avc: denied { listen } for pid=10878 comm="syz.5.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 281.155131][T10898] xt_CT: You must specify a L4 protocol and not use inversions on it [ 281.988142][ T29] audit: type=1400 audit(2000000195.440:521): avc: denied { mount } for pid=10904 comm="syz.3.1302" name="/" dev="hugetlbfs" ino=28958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 282.158145][T10912] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1304'. [ 282.389677][T10917] bridge1: entered promiscuous mode [ 282.415475][ T29] audit: type=1400 audit(2000000195.860:522): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 282.473975][ T29] audit: type=1804 audit(2000000195.900:523): pid=10919 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.1305" name="/newroot/152/file1" dev="fuse" ino=1 res=1 errno=0 [ 282.523973][ T29] audit: type=1800 audit(2000000195.910:524): pid=10919 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.1305" name="/" dev="fuse" ino=1 res=0 errno=0 [ 282.609873][T10931] nbd: must specify a size in bytes for the device [ 283.023026][ T29] audit: type=1400 audit(2000000196.470:525): avc: denied { mount } for pid=10942 comm="syz.4.1314" name="/" dev="autofs" ino=29902 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 283.243979][ T5824] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 283.383917][ T5894] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 283.394394][ T5824] usb 4-1: Using ep0 maxpacket: 16 [ 283.401224][ T5824] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.480122][ T5824] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 283.491185][ T5824] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 283.502106][ T5824] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 283.516225][ T5824] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 283.527071][ T5824] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 283.837123][ T5814] Bluetooth: hci4: command 0x0406 tx timeout [ 283.844312][ T5824] usb 4-1: Manufacturer: syz [ 283.886157][ T5824] usb 4-1: config 0 descriptor?? [ 283.913230][ T5894] usb 5-1: Using ep0 maxpacket: 32 [ 283.947226][ T5894] usb 5-1: unable to get BOS descriptor or descriptor too short [ 283.972746][ T5894] usb 5-1: config 127 has an invalid interface number: 25 but max is 0 [ 283.993669][ T5894] usb 5-1: config 127 has no interface number 0 [ 284.003716][T10955] netlink: 116 bytes leftover after parsing attributes in process `syz.5.1317'. [ 284.013731][ T5894] usb 5-1: config 127 interface 25 has no altsetting 0 [ 284.017294][T10955] netlink: 116 bytes leftover after parsing attributes in process `syz.5.1317'. [ 284.044558][T10955] netlink: 380 bytes leftover after parsing attributes in process `syz.5.1317'. [ 284.075076][ T5894] usb 5-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice=f4.11 [ 284.087309][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.102792][ T5894] usb 5-1: Product: syz [ 284.130187][ T5894] usb 5-1: Manufacturer: syz [ 284.135008][ T5894] usb 5-1: SerialNumber: syz [ 284.209533][ T5824] rc_core: IR keymap rc-hauppauge not found [ 284.215532][ T5824] Registered IR keymap rc-empty [ 284.237824][ T5824] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 284.302653][ T5824] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 284.334321][ T5824] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 284.346530][ T5824] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input29 [ 284.353501][ T5894] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9000) Rev (0XF411): ADI930 [ 284.382804][ T5824] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 284.390684][ T29] audit: type=1400 audit(2000000197.850:526): avc: denied { watch } for pid=10961 comm="syz.2.1320" path="/330" dev="tmpfs" ino=1749 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 284.414559][ T5824] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 284.463993][ T969] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 284.473935][ T5824] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 284.539211][ T5824] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 284.575144][ T5824] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 284.615678][ T5824] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 284.625815][ T969] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.638408][ T969] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.676375][ T5824] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 284.688755][ T969] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 284.948768][ T969] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.968328][ T969] usb 6-1: config 0 descriptor?? [ 285.004415][ T5894] usb 5-1: reset high-speed USB device number 25 using dummy_hcd [ 285.049420][ T5824] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 285.074148][ T5824] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 285.094145][ T5824] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 285.425500][ T5824] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 285.435417][ T5824] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 285.471751][ T5824] usb 4-1: USB disconnect, device number 25 [ 285.492690][ T5894] usb 5-1: unable to get BOS descriptor or descriptor too short [ 285.501886][ T5894] usb 5-1: device firmware changed [ 285.508086][ T5894] ueagle-atm 5-1:127.25: usbatm_usb_probe: bind failed: -19! [ 285.587333][ T969] hid (null): bogus close delimiter [ 285.664071][ T5894] usb 5-1: USB disconnect, device number 25 [ 285.775859][ T969] usb 6-1: string descriptor 0 read error: -71 [ 285.837549][ T969] uclogic 0003:256C:006D.0003: failed retrieving string descriptor #200: -71 [ 285.846435][ T969] uclogic 0003:256C:006D.0003: failed retrieving pen parameters: -71 [ 285.854780][ T969] uclogic 0003:256C:006D.0003: failed probing pen v2 parameters: -71 [ 285.863979][ T969] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 285.871617][ T969] uclogic 0003:256C:006D.0003: probe with driver uclogic failed with error -71 [ 285.893584][ T969] usb 6-1: USB disconnect, device number 35 [ 286.156564][T10987] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1327'. [ 286.187685][ T29] audit: type=1400 audit(2000000199.640:527): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 286.312757][T11000] usb usb4: usbfs: process 11000 (syz.5.1331) did not claim interface 0 before use [ 286.783785][T11021] netlink: 748 bytes leftover after parsing attributes in process `syz.3.1339'. [ 287.093209][ T29] audit: type=1400 audit(2000000200.530:528): avc: denied { mount } for pid=11022 comm="syz.2.1340" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 287.584442][ T5824] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 287.765219][ T5824] usb 4-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 287.774438][ T5824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.783191][ T5824] usb 4-1: config 0 descriptor?? [ 287.790831][ T5824] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input31 [ 288.019175][ T5824] usb 4-1: USB disconnect, device number 26 [ 288.105881][T11058] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1351'. [ 288.172873][ T29] audit: type=1400 audit(2000000201.620:529): avc: denied { ioctl } for pid=11059 comm="syz.5.1352" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 288.503986][ T5894] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 288.684187][ T5894] usb 7-1: Using ep0 maxpacket: 16 [ 288.699265][ T5894] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.728521][ T5894] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.741225][ T5894] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 288.758138][ T5894] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.796936][ T5894] usb 7-1: config 0 descriptor?? [ 288.838939][T11061] syz.4.1348 (11061) used greatest stack depth: 19632 bytes left [ 289.130827][T11084] netlink: 'syz.4.1360': attribute type 4 has an invalid length. [ 289.140464][T11084] netlink: 'syz.4.1360': attribute type 4 has an invalid length. [ 289.223021][ T5894] corsair 0003:1B1C:1B02.0004: unknown main item tag 0x0 [ 289.232478][ T5894] corsair 0003:1B1C:1B02.0004: unknown main item tag 0x0 [ 289.254893][ T5894] corsair 0003:1B1C:1B02.0004: unknown main item tag 0x0 [ 289.270242][ T5894] corsair 0003:1B1C:1B02.0004: unknown main item tag 0x0 [ 289.281528][ T5894] corsair 0003:1B1C:1B02.0004: unknown main item tag 0x0 [ 289.290983][ T5894] corsair 0003:1B1C:1B02.0004: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.6-1/input0 [ 289.423348][ T5894] corsair 0003:1B1C:1B02.0004: Read invalid backlight brightness: 9d. [ 289.437598][T11094] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1364'. [ 289.675533][ T969] usb 7-1: USB disconnect, device number 16 [ 290.192405][T11112] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1369'. [ 290.202623][T11112] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1369'. [ 290.211697][T11112] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1369'. [ 290.222457][T11112] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1369'. [ 290.427530][T11122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1372'. [ 291.354211][ T969] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 291.395166][ T52] Bluetooth: hci5: Frame reassembly failed (-84) [ 291.402524][T11137] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 291.874076][ T969] usb 7-1: Using ep0 maxpacket: 8 [ 291.885063][ T969] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 291.893277][ T969] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 291.942123][ T969] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 291.969094][ T969] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 291.988878][ T29] audit: type=1400 audit(2000000205.420:530): avc: denied { getopt } for pid=11147 comm="syz.5.1379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 292.124038][ T969] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 292.354789][ T969] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 292.381459][ T969] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.853775][T11167] netlink: 'syz.4.1385': attribute type 9 has an invalid length. [ 293.138466][ T969] usb 7-1: usb_control_msg returned -32 [ 293.144143][ T969] usbtmc 7-1:16.0: can't read capabilities [ 293.438924][ T5826] Bluetooth: hci5: command 0x1003 tx timeout [ 293.447520][ T5814] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 293.495384][T11177] usbtmc 7-1:16.0: stb usb_control_msg returned -32 [ 293.804977][T11181] xt_hashlimit: size too large, truncated to 1048576 [ 294.162185][ T29] audit: type=1400 audit(2000000207.610:531): avc: denied { getopt } for pid=11185 comm="syz.2.1390" lport=46858 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 294.243443][T11186] sctp: [Deprecated]: syz.2.1390 (pid 11186) Use of struct sctp_assoc_value in delayed_ack socket option. [ 294.243443][T11186] Use struct sctp_sack_info instead [ 294.307166][T11187] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 294.574969][ T5824] usb 7-1: USB disconnect, device number 17 [ 295.394210][ T5864] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 296.224953][ T5864] usb 7-1: unable to get BOS descriptor or descriptor too short [ 296.233556][ T5864] usb 7-1: not running at top speed; connect to a high speed hub [ 296.248196][ T5864] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 296.258735][ T5864] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 296.270048][ T5864] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 296.279281][ T5864] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.287965][ T5864] usb 7-1: Product: syz [ 296.613957][ T5864] usb 7-1: Manufacturer: syz [ 296.618628][ T5864] usb 7-1: SerialNumber: syz [ 296.908890][ T5864] usb 7-1: cannot find UAC_HEADER [ 296.921461][ T5864] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 296.929603][ T29] audit: type=1400 audit(2000000210.380:532): avc: denied { write } for pid=11255 comm="syz.3.1414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 296.945572][ T5864] usb 7-1: USB disconnect, device number 18 [ 296.955779][T11257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1414'. [ 297.336066][T11266] 9pnet_fd: Insufficient options for proto=fd [ 297.474660][ T5821] udevd[5821]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 298.632372][T11289] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 298.711089][T11295] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 298.720847][T11295] QAT: Invalid ioctl 1075883590 [ 298.726164][T11295] QAT: Invalid ioctl 1075883590 [ 298.731333][T11295] QAT: Invalid ioctl 1075883590 [ 298.740786][T11295] QAT: Invalid ioctl 1075883590 [ 298.786863][T11298] QAT: Invalid ioctl -2147191718 [ 298.801051][T11295] QAT: Invalid ioctl 1075883590 [ 298.817118][T11295] QAT: Invalid ioctl 1075883590 [ 298.828961][T11295] QAT: Invalid ioctl 1075883590 [ 299.813382][T11305] veth0_vlan: left promiscuous mode [ 299.818971][T11305] vlan1: entered promiscuous mode [ 299.832297][T11305] vlan1: entered allmulticast mode [ 300.417360][ T29] audit: type=1400 audit(2000000213.870:533): avc: denied { write } for pid=11326 comm="syz.4.1437" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 301.019401][ T29] audit: type=1326 audit(2000000214.470:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11345 comm="syz.3.1443" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c5bb85d29 code=0x0 [ 301.168444][ T969] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 301.665038][ T969] usb 6-1: Using ep0 maxpacket: 16 [ 301.672871][ T969] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 301.683288][ T969] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 301.696675][ T969] usb 6-1: Product: syz [ 301.700866][ T969] usb 6-1: Manufacturer: syz [ 301.707040][ T969] usb 6-1: SerialNumber: syz [ 301.712692][ T969] usb 6-1: config 0 descriptor?? [ 301.868486][T11365] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1448'. [ 302.191777][T11373] xt_CT: You must specify a L4 protocol and not use inversions on it [ 302.735959][T11369] overlayfs: missing 'lowerdir' [ 303.126514][T11395] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1458'. [ 303.140561][T11395] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1458'. [ 303.151992][T11395] netlink: 380 bytes leftover after parsing attributes in process `syz.4.1458'. [ 303.294068][ T5863] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 303.679565][T11408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1461'. [ 303.687614][T11409] 9pnet_fd: Insufficient options for proto=fd [ 303.724032][ T5863] usb 7-1: Using ep0 maxpacket: 32 [ 303.734989][ T5863] usb 7-1: config 0 has an invalid interface number: 184 but max is -1 [ 303.744245][ T5863] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 303.769663][ T5863] usb 7-1: config 0 has no interface number 0 [ 303.780594][ T5863] usb 7-1: config 0 interface 184 has no altsetting 0 [ 303.870929][ T5863] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 303.880876][ T5863] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.888971][ T5863] usb 7-1: Product: syz [ 303.893184][ T5863] usb 7-1: Manufacturer: syz [ 303.897875][ T5863] usb 7-1: SerialNumber: syz [ 303.935096][ T5863] usb 7-1: config 0 descriptor?? [ 303.949775][ T5894] usb 6-1: USB disconnect, device number 36 [ 303.954673][ T5863] smsc75xx v1.0.0 [ 304.120239][T11418] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1465'. [ 304.280580][ T9281] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.209560][ T9281] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.264536][ T9281] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.355733][ T9281] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.362974][ T29] audit: type=1326 audit(2000000218.810:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11450 comm="syz.2.1475" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1b1a185d29 code=0x0 [ 305.388950][ C0] vkms_vblank_simulate: vblank timer overrun [ 305.448425][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 305.456757][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 305.465551][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 305.473173][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 305.481051][ T5826] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 305.507381][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 305.570311][ T9281] bridge_slave_1: left allmulticast mode [ 305.579814][ T9281] bridge_slave_1: left promiscuous mode [ 305.588882][ T9281] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.607638][ T9281] bridge_slave_0: left allmulticast mode [ 305.613497][ T9281] bridge_slave_0: left promiscuous mode [ 305.625422][ T9281] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.931776][ T5863] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 305.944843][ T5863] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 306.117626][ T9281] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.127737][ T9281] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.137525][ T9281] bond0 (unregistering): Released all slaves [ 306.146439][ T9281] bond1 (unregistering): Released all slaves [ 306.208135][T11452] chnl_net:caif_netlink_parms(): no params data found [ 306.356185][ T5863] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 306.367462][ T5863] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 306.378555][ T5863] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 306.716609][T11452] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.718943][ T5863] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 306.738480][T11452] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.746866][ T5863] usb 7-1: USB disconnect, device number 19 [ 306.755884][T11452] bridge_slave_0: entered allmulticast mode [ 306.774533][T11452] bridge_slave_0: entered promiscuous mode [ 306.788209][ T9281] hsr_slave_0: left promiscuous mode [ 306.795305][ T9281] hsr_slave_1: left promiscuous mode [ 306.801205][ T9281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.809549][ T9281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.818182][ T9281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.827468][ T9281] veth1_macvtap: left promiscuous mode [ 306.833022][ T9281] veth0_macvtap: left promiscuous mode [ 306.839333][ T9281] veth1_vlan: left promiscuous mode [ 306.846382][ T9281] veth0_vlan: left promiscuous mode [ 306.975023][ T9281] team0 (unregistering): Port device team_slave_1 removed [ 306.984830][ T9281] team0 (unregistering): Port device team_slave_0 removed [ 307.024344][T11452] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.031549][T11452] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.040155][T11452] bridge_slave_1: entered allmulticast mode [ 307.046872][T11452] bridge_slave_1: entered promiscuous mode [ 307.115530][T11486] pim6reg1: entered promiscuous mode [ 307.121304][T11486] pim6reg1: entered allmulticast mode [ 307.141918][T11452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.152801][T11452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.191513][T11452] team0: Port device team_slave_0 added [ 307.202123][T11452] team0: Port device team_slave_1 added [ 307.373669][T11452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.380815][T11452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.717939][T11452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.735314][ T5814] Bluetooth: hci4: command tx timeout [ 307.749336][T11452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.756622][T11452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.782921][T11452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.842749][T11452] hsr_slave_0: entered promiscuous mode [ 307.850786][T11452] hsr_slave_1: entered promiscuous mode [ 307.858989][T11452] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 307.867035][T11452] Cannot create hsr debugfs directory [ 307.957563][T11504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1485'. [ 308.084014][T11505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1485'. [ 308.390751][T11508] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1486'. [ 308.600350][T11452] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 308.608826][T11452] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 308.620060][T11452] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 308.630188][T11452] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 308.671650][T11452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.696138][T11452] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.718766][ T7127] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.725933][ T7127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.734878][ T7127] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.742004][ T7127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.969257][T11524] netlink: 'syz.3.1489': attribute type 12 has an invalid length. [ 309.401669][T11452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.629623][T11452] veth0_vlan: entered promiscuous mode [ 309.641657][T11452] veth1_vlan: entered promiscuous mode [ 309.676032][T11452] veth0_macvtap: entered promiscuous mode [ 309.684353][T11452] veth1_macvtap: entered promiscuous mode [ 309.697364][T11452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.708185][T11452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.718540][T11452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.729105][T11452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.742535][T11452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.758277][T11452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.769012][T11452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.779333][T11452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.790261][T11452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.805322][T11452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.807394][ T5814] Bluetooth: hci4: command tx timeout [ 309.819206][T11452] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.827990][T11452] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.837492][T11452] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.894913][T11452] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.007376][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.015932][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.062953][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.081425][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.110277][ T29] audit: type=1400 audit(2000000223.560:536): avc: denied { mounton } for pid=11452 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 310.231650][T11552] netlink: 260 bytes leftover after parsing attributes in process `syz.6.1493'. [ 310.674668][T11561] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1498'. [ 310.852977][T11567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1499'. [ 310.887429][T11567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1499'. [ 311.874086][ T5814] Bluetooth: hci4: command tx timeout [ 312.465465][T11603] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1513'. [ 312.896793][T11610] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1511'. [ 313.167926][T11606] hfs: unable to load iocharset "io#harseton#" [ 313.956002][ T5814] Bluetooth: hci4: command tx timeout [ 314.161321][T11622] netlink: 'syz.2.1515': attribute type 10 has an invalid length. [ 314.325682][T11626] lo speed is unknown, defaulting to 1000 [ 314.331518][T11626] lo speed is unknown, defaulting to 1000 [ 314.337631][T11626] lo speed is unknown, defaulting to 1000 [ 314.344736][T11626] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 314.350063][T11631] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1519'. [ 314.355109][T11626] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 314.374369][ T5916] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 314.383155][T11626] lo speed is unknown, defaulting to 1000 [ 314.389926][T11626] lo speed is unknown, defaulting to 1000 [ 314.396355][T11626] lo speed is unknown, defaulting to 1000 [ 314.402688][T11626] lo speed is unknown, defaulting to 1000 [ 314.409097][T11626] lo speed is unknown, defaulting to 1000 [ 314.415518][T11626] lo speed is unknown, defaulting to 1000 [ 314.565001][ T5916] usb 7-1: Using ep0 maxpacket: 16 [ 314.600006][ T5916] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 314.655087][ T5916] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 314.663200][ T5916] usb 7-1: Product: syz [ 314.677041][ T5916] usb 7-1: Manufacturer: syz [ 314.691899][ T5916] usb 7-1: SerialNumber: syz [ 314.710579][ T29] audit: type=1400 audit(2000000228.160:537): avc: denied { setopt } for pid=11646 comm="syz.5.1523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 314.752433][ T5916] usb 7-1: config 0 descriptor?? [ 315.022383][T11671] Bluetooth: MGMT ver 1.23 [ 315.032513][T11671] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1530'. [ 315.434859][ T5916] usb 7-1: USB disconnect, device number 20 [ 316.187081][T11688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1534'. [ 316.210521][ T29] audit: type=1400 audit(2000000229.660:538): avc: denied { read } for pid=11687 comm="syz.3.1534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 316.336417][T11692] FAULT_INJECTION: forcing a failure. [ 316.336417][T11692] name failslab, interval 1, probability 0, space 0, times 0 [ 316.363150][ T29] audit: type=1400 audit(2000000229.810:539): avc: denied { shutdown } for pid=11687 comm="syz.3.1534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 316.401046][T11692] CPU: 1 UID: 0 PID: 11692 Comm: syz.4.1537 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 316.411865][T11692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 316.421936][T11692] Call Trace: [ 316.425204][T11692] [ 316.428121][T11692] dump_stack_lvl+0x16c/0x1f0 [ 316.432794][T11692] should_fail_ex+0x497/0x5b0 [ 316.437467][T11692] ? fs_reclaim_acquire+0xae/0x150 [ 316.442568][T11692] should_failslab+0xc2/0x120 [ 316.447237][T11692] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 316.453046][T11692] ? __alloc_skb+0x2b1/0x380 [ 316.457658][T11692] __alloc_skb+0x2b1/0x380 [ 316.462091][T11692] ? __pfx___alloc_skb+0x10/0x10 [ 316.467042][T11692] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 316.473035][T11692] netlink_alloc_large_skb+0x69/0x130 [ 316.478415][T11692] netlink_sendmsg+0x689/0xd70 [ 316.483189][T11692] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.488488][T11692] ____sys_sendmsg+0xaaf/0xc90 [ 316.493260][T11692] ? copy_msghdr_from_user+0x10b/0x160 [ 316.498723][T11692] ? __pfx_____sys_sendmsg+0x10/0x10 [ 316.504017][T11692] ? rcu_is_watching+0x12/0xc0 [ 316.508792][T11692] ? lock_release+0x4e2/0x6f0 [ 316.513475][T11692] ? get_pid_task+0xfc/0x250 [ 316.518067][T11692] ___sys_sendmsg+0x135/0x1e0 [ 316.522747][T11692] ? get_pid_task+0x35/0x250 [ 316.527339][T11692] ? __pfx____sys_sendmsg+0x10/0x10 [ 316.532545][T11692] ? lock_release+0x4e2/0x6f0 [ 316.537231][T11692] ? __pfx_lock_release+0x10/0x10 [ 316.542260][T11692] ? trace_lock_acquire+0x14e/0x1f0 [ 316.547480][T11692] ? __fget_files+0x206/0x3a0 [ 316.552165][T11692] __sys_sendmsg+0x16e/0x220 [ 316.556759][T11692] ? __pfx___sys_sendmsg+0x10/0x10 [ 316.561885][T11692] ? rcu_is_watching+0x12/0xc0 [ 316.566665][T11692] ? rcu_is_watching+0x12/0xc0 [ 316.571456][T11692] do_syscall_64+0xcd/0x250 [ 316.575981][T11692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.581886][T11692] RIP: 0033:0x7f2cdcf85d29 [ 316.586316][T11692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.605942][T11692] RSP: 002b:00007f2cddd72038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 316.614369][T11692] RAX: ffffffffffffffda RBX: 00007f2cdd175fa0 RCX: 00007f2cdcf85d29 [ 316.622362][T11692] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 316.630342][T11692] RBP: 00007f2cddd72090 R08: 0000000000000000 R09: 0000000000000000 [ 316.638319][T11692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.644227][T11697] netlink: 'syz.6.1538': attribute type 9 has an invalid length. [ 316.646290][T11692] R13: 0000000000000000 R14: 00007f2cdd175fa0 R15: 00007fff9d115268 [ 316.661969][T11692] [ 317.245084][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.563985][ T5824] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 317.713973][ T5824] usb 7-1: Using ep0 maxpacket: 16 [ 317.744941][ T5824] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.778680][ T5824] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 317.820366][ T5824] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 317.841524][ T5824] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 317.885543][ T5824] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 317.904018][ T5824] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 317.937636][ T5824] usb 7-1: Manufacturer: syz [ 317.949769][ T5824] usb 7-1: config 0 descriptor?? [ 317.950714][ T29] audit: type=1400 audit(2000000231.400:540): avc: denied { execute } for pid=11721 comm="syz.4.1546" path="/dev/dsp" dev="devtmpfs" ino=1283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 318.058107][T11734] 9pnet_fd: Insufficient options for proto=fd [ 318.064597][ T5864] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 318.114057][T11736] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1550'. [ 318.217356][ T5824] rc_core: IR keymap rc-hauppauge not found [ 318.223403][ T5824] Registered IR keymap rc-empty [ 318.233751][ T5824] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 318.243922][ T5864] usb 6-1: Using ep0 maxpacket: 16 [ 318.279498][ T5864] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 318.284233][ T5824] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 318.293062][ T5864] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 318.336428][ T5824] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 318.338925][ T5864] usb 6-1: Product: syz [ 318.381904][ T5824] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input33 [ 318.388809][ T5864] usb 6-1: Manufacturer: syz [ 318.422690][ T5824] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 318.423373][ T5864] usb 6-1: SerialNumber: syz [ 318.459967][ T5864] usb 6-1: config 0 descriptor?? [ 318.465956][ T5824] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 318.495603][ T5824] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 318.547631][ T5824] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 318.575969][ T5824] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 318.604153][ T5824] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 318.634114][ T5824] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 318.902195][ T5824] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 318.944151][ T5824] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 318.964169][ T5824] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 318.985294][ T5824] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 318.994780][ T5824] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 319.022321][ T5824] usb 7-1: USB disconnect, device number 21 [ 319.043699][T11748] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1553'. [ 319.129632][T11751] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.153621][ T29] audit: type=1400 audit(2000000233.600:541): avc: denied { getopt } for pid=11765 comm="syz.6.1559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 320.293784][T11774] 9pnet_fd: Insufficient options for proto=fd [ 320.466451][ T29] audit: type=1400 audit(2000000233.900:542): avc: denied { read } for pid=11776 comm="syz.4.1564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 320.517386][ T8] usb 6-1: USB disconnect, device number 37 [ 320.627327][T11783] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1566'. [ 320.660022][ T29] audit: type=1400 audit(2000000234.110:543): avc: denied { ioctl } for pid=11765 comm="syz.6.1559" path="socket:[34054]" dev="sockfs" ino=34054 ioctlcmd=0xf516 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 320.794037][ T5864] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 320.946189][ T5864] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 320.958351][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.980190][ T5864] usb 5-1: config 0 descriptor?? [ 320.996749][ T29] audit: type=1400 audit(2000000234.440:544): avc: denied { sqpoll } for pid=11792 comm="syz.5.1569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 321.021914][ T5864] cp210x 5-1:0.0: cp210x converter detected [ 321.240393][ T5864] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 321.264441][ T5864] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 321.280400][ T5863] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 321.292453][ T5864] usb 5-1: cp210x converter now attached to ttyUSB0 [ 321.366659][T11809] 9pnet_fd: Insufficient options for proto=fd [ 321.399906][ T5864] usb 5-1: USB disconnect, device number 26 [ 321.444498][ T5863] usb 7-1: Using ep0 maxpacket: 16 [ 321.460658][ T5863] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.470179][ T5864] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 321.503813][ T5864] cp210x 5-1:0.0: device disconnected [ 321.506076][ T5863] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 321.557499][ T5863] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 321.587591][ T5863] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 321.599211][T11822] netlink: 'syz.5.1579': attribute type 4 has an invalid length. [ 321.621811][ T5863] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 321.624474][ T8] lo speed is unknown, defaulting to 1000 [ 321.637205][T11822] netlink: 'syz.5.1579': attribute type 4 has an invalid length. [ 321.642829][ T5863] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 321.656919][T11824] fuse: Unknown parameter ':ÀÁxs÷ßp' [ 321.664089][ T5863] usb 7-1: Manufacturer: syz [ 321.676094][ T5863] usb 7-1: config 0 descriptor?? [ 321.815840][ T5916] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 322.240675][ T5916] usb 4-1: Using ep0 maxpacket: 8 [ 322.247205][T11838] openvswitch: netlink: IP tunnel dst address not specified [ 322.258539][ T5916] usb 4-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=46.ac [ 322.267874][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.280772][ T5916] usb 4-1: Product: syz [ 322.285019][ T5916] usb 4-1: Manufacturer: syz [ 322.289638][ T5916] usb 4-1: SerialNumber: syz [ 322.295468][ T5916] usb 4-1: config 0 descriptor?? [ 322.302373][ T5916] kl5kusb105 4-1:0.0: KL5KUSB105D / PalmConnect converter detected [ 322.312510][ T5916] usb 4-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 322.327737][ T5863] rc_core: IR keymap rc-hauppauge not found [ 322.333724][ T5863] Registered IR keymap rc-empty [ 322.338960][ T5863] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 322.364379][ T5863] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 322.384354][ T5863] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 322.396523][ T5863] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input35 [ 322.409866][ T5863] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 322.434056][ T5863] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 322.454294][ T5863] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 322.474100][ T5863] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 322.494546][ T5863] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 322.533948][ T5863] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 322.643217][ T5863] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 322.667762][ T5863] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 322.694319][ T5863] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 322.714366][ T5863] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 322.750533][ T5863] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 322.759863][ T5863] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 323.027993][ T5863] usb 7-1: USB disconnect, device number 22 [ 323.850743][T11864] bridge0: port 3(veth0_to_bridge) entered blocking state [ 323.858214][T11864] bridge0: port 3(veth0_to_bridge) entered disabled state [ 323.960038][T11864] veth0_to_bridge: entered allmulticast mode [ 323.999935][T11868] overlayfs: missing 'lowerdir' [ 324.000739][T11864] veth0_to_bridge: entered promiscuous mode [ 324.062640][T11864] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.082125][T11864] bridge0: port 3(veth0_to_bridge) entered blocking state [ 324.089362][T11864] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 324.199485][T11880] netlink: 116 bytes leftover after parsing attributes in process `syz.6.1594'. [ 324.209683][T11880] netlink: 116 bytes leftover after parsing attributes in process `syz.6.1594'. [ 324.221392][T11880] netlink: 380 bytes leftover after parsing attributes in process `syz.6.1594'. [ 324.230585][ T29] audit: type=1400 audit(2000000237.670:545): avc: denied { write } for pid=5916 comm="kworker/1:6" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=33323 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 324.394313][ T5863] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 324.888592][ T5864] usb 4-1: USB disconnect, device number 27 [ 325.161172][ T5864] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 325.171751][ T5864] kl5kusb105 4-1:0.0: device disconnected [ 325.223954][ T5863] usb 5-1: Using ep0 maxpacket: 16 [ 325.268877][T11903] netlink: 748 bytes leftover after parsing attributes in process `syz.6.1603'. [ 325.405422][ T5863] usb 5-1: config 8 has an invalid interface number: 206 but max is 0 [ 325.413639][ T5863] usb 5-1: config 8 has an invalid descriptor of length 1, skipping remainder of the config [ 325.429720][ T5863] usb 5-1: config 8 has no interface number 0 [ 325.437043][ T5863] usb 5-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 325.449096][ T5863] usb 5-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 325.460486][ T5863] usb 5-1: config 8 interface 206 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 325.473594][ T5863] usb 5-1: config 8 interface 206 has no altsetting 0 [ 325.546778][ T8] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 325.600887][ T5863] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 325.610158][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.618322][ T5863] usb 5-1: Product: syz [ 325.622543][ T5863] usb 5-1: Manufacturer: syz [ 325.627284][ T5863] usb 5-1: SerialNumber: syz [ 325.923948][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 325.936627][ T8] usb 6-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=46.ac [ 325.946838][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.959568][ T8] usb 6-1: Product: syz [ 325.964697][ T8] usb 6-1: Manufacturer: syz [ 325.969536][ T8] usb 6-1: SerialNumber: syz [ 325.981944][ T8] usb 6-1: config 0 descriptor?? [ 325.991538][ T8] kl5kusb105 6-1:0.0: KL5KUSB105D / PalmConnect converter detected [ 326.006308][ T8] usb 6-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 326.134745][ T5863] garmin_gps 5-1:8.206: Garmin GPS usb/tty converter detected [ 326.142617][ T5863] garmin_gps ttyUSB1: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 326.153344][ T5863] garmin_gps ttyUSB1: probe with driver garmin_gps failed with error -8 [ 326.161889][ T5866] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 326.231470][ T5863] usb 5-1: USB disconnect, device number 27 [ 326.318374][ T5863] garmin_gps 5-1:8.206: device disconnected [ 326.327370][ T5866] usb 4-1: config 0 has an invalid descriptor of length 14, skipping remainder of the config [ 326.337771][ T5866] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 326.347302][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.568081][ T5866] usb 4-1: config 0 descriptor?? [ 326.906474][ T29] audit: type=1400 audit(2000000240.350:546): avc: denied { connect } for pid=11934 comm="syz.4.1613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 326.933694][ T29] audit: type=1400 audit(2000000240.380:547): avc: denied { create } for pid=11934 comm="syz.4.1613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 326.988735][ T5866] ath6kl: Failed to read usb control message: -71 [ 326.995286][ T5866] ath6kl: Unable to read the bmi data from the device: -71 [ 327.002597][ T5866] ath6kl: Unable to recv target info: -71 [ 327.008694][ T5866] ath6kl: Failed to init ath6kl core: -71 [ 327.014798][ T5866] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 327.025420][T11936] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1612'. [ 327.035795][ T5866] usb 4-1: USB disconnect, device number 28 [ 327.090706][T11940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1615'. [ 327.460143][ T5866] usb 6-1: USB disconnect, device number 38 [ 327.468361][ T5866] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 327.485105][ T5866] kl5kusb105 6-1:0.0: device disconnected [ 328.545004][T11972] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1625'. [ 328.558710][ T29] audit: type=1804 audit(2000000242.010:548): pid=11959 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.1621" name="/newroot/349/file1" dev="fuse" ino=1 res=1 errno=0 [ 328.634614][ T29] audit: type=1800 audit(2000000242.040:549): pid=11959 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1621" name="/" dev="fuse" ino=1 res=0 errno=0 [ 328.751133][T11982] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 329.380246][ T5894] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 329.544384][ T5894] usb 5-1: Using ep0 maxpacket: 16 [ 329.551036][ T5894] usb 5-1: unable to get BOS descriptor or descriptor too short [ 329.559698][ T5894] usb 5-1: config 128 has an invalid interface number: 66 but max is 0 [ 329.567990][ T5894] usb 5-1: config 128 has no interface number 0 [ 329.574377][ T5894] usb 5-1: config 128 interface 66 has no altsetting 0 [ 329.582757][ T5894] usb 5-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=1e.90 [ 329.593402][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.601486][ T5894] usb 5-1: Product: syz [ 329.606889][ T5894] usb 5-1: Manufacturer: syz [ 329.611567][ T5894] usb 5-1: SerialNumber: syz [ 329.829347][ T5894] comedi comedi0: could not set alternate setting 3 in high speed [ 329.838104][ T5894] usbduxsigma 5-1:128.66: driver 'usbduxsigma' failed to auto-configure device. [ 329.860274][ T5894] usbduxsigma 5-1:128.66: probe with driver usbduxsigma failed with error -71 [ 329.893919][ T5894] usb 5-1: USB disconnect, device number 28 [ 330.308244][T12032] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1647'. [ 330.421640][T12038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1650'. [ 330.438727][T12038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1650'. [ 330.532278][T12041] fuse: Bad value for 'rootmode' [ 330.709851][T12045] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1652'. [ 330.950915][ T5866] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 331.252867][T12061] trusted_key: syz.2.1658 sent an empty control message without MSG_MORE. [ 331.303927][ T5866] usb 7-1: Using ep0 maxpacket: 32 [ 331.311455][ T5866] usb 7-1: config 0 has an invalid interface number: 184 but max is -1 [ 331.320496][ T5866] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 331.329570][ T5866] usb 7-1: config 0 has no interface number 0 [ 331.337037][ T5866] usb 7-1: config 0 interface 184 has no altsetting 0 [ 331.346460][ T5866] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 331.360408][ T5866] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.369015][ T5866] usb 7-1: Product: syz [ 331.373487][ T5866] usb 7-1: Manufacturer: syz [ 331.378978][ T5866] usb 7-1: SerialNumber: syz [ 331.394481][ T5866] usb 7-1: config 0 descriptor?? [ 331.404457][ T5866] smsc75xx v1.0.0 [ 331.569970][T12064] overlayfs: failed to resolve './file1': -2 [ 331.577867][T12066] overlayfs: failed to resolve './file1': -2 [ 332.243098][T12086] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1664'. [ 332.330437][T12088] netlink: 'syz.5.1665': attribute type 4 has an invalid length. [ 332.341287][T12088] netlink: 'syz.5.1665': attribute type 4 has an invalid length. [ 332.432018][ T5866] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 332.443825][ T5866] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 332.682548][ T5863] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 332.691215][ T5866] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 332.803646][ T5866] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 332.813601][ T5866] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 332.824913][ T5866] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -32 [ 332.942658][ T5866] usb 7-1: USB disconnect, device number 23 [ 333.073980][ T5863] usb 6-1: Using ep0 maxpacket: 8 [ 333.080278][ T5863] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 333.091904][ T5863] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 333.101345][ T5863] usb 6-1: config 1 has no interface number 1 [ 333.112929][ T5863] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 333.123376][ T5863] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.131464][ T5863] usb 6-1: Product: syz [ 333.143966][ T5863] usb 6-1: Manufacturer: syz [ 333.152590][ T5863] usb 6-1: SerialNumber: syz [ 333.233982][ T5824] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 333.384570][ T5824] usb 4-1: Using ep0 maxpacket: 16 [ 333.401313][ T5824] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 333.418605][ T5824] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 333.458013][ T5863] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 333.498314][T12113] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1671'. [ 333.655079][ T5863] usb 6-1: 2:1 : format type 0 is detected, processed as PCM [ 333.662732][ T5824] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 333.672591][ T5863] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 333.678961][ T5824] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 333.688787][ T5863] usb 6-1: 2:1 : invalid channels 0 [ 333.704037][ T29] audit: type=1400 audit(2000000246.940:550): avc: denied { create } for pid=12106 comm="syz.4.1671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 333.745052][ T5863] usb 6-1: USB disconnect, device number 39 [ 333.768349][ T5824] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 333.778555][ T5824] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 333.788175][ T5824] usb 4-1: Product: syz [ 333.792458][ T5824] usb 4-1: Manufacturer: syz [ 333.798182][ T5824] usb 4-1: SerialNumber: syz [ 333.810406][ T5824] usb 4-1: config 0 descriptor?? [ 333.925472][ T5821] udevd[5821]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 334.033680][T12103] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 334.043101][ T5894] usb 4-1: USB disconnect, device number 29 [ 334.084452][ T5824] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 334.244170][ T5824] usb 7-1: Using ep0 maxpacket: 16 [ 334.435210][ T5824] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 334.446459][ T5824] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 334.464000][ T5824] usb 7-1: Product: syz [ 334.470583][ T5824] usb 7-1: Manufacturer: syz [ 334.478337][ T5824] usb 7-1: SerialNumber: syz [ 334.489377][ T5824] usb 7-1: config 0 descriptor?? [ 334.502112][T12122] loop8: detected capacity change from 0 to 53 [ 334.883451][T12138] xt_CT: You must specify a L4 protocol and not use inversions on it [ 335.084943][ T29] audit: type=1326 audit(2000000248.180:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12130 comm="syz.2.1676" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1b1a185d29 code=0x0 [ 335.499812][T12149] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 335.578652][T12158] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1688'. [ 336.107604][T12163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1687'. [ 336.124404][T12163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1687'. [ 336.175433][ T5863] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 336.324025][ T5863] usb 6-1: Using ep0 maxpacket: 32 [ 336.330587][ T5863] usb 6-1: config 0 has an invalid interface number: 184 but max is -1 [ 336.338923][ T5863] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 336.347958][ T5863] usb 6-1: config 0 has no interface number 0 [ 336.356994][ T5863] usb 6-1: config 0 interface 184 has no altsetting 0 [ 336.396928][ T8] usb 7-1: USB disconnect, device number 24 [ 336.444205][ T5863] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 336.453902][ T5863] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.461915][ T5863] usb 6-1: Product: syz [ 336.471438][ T5863] usb 6-1: Manufacturer: syz [ 336.477331][ T5863] usb 6-1: SerialNumber: syz [ 336.483620][ T5863] usb 6-1: config 0 descriptor?? [ 336.490092][ T5863] smsc75xx v1.0.0 [ 336.547670][T12174] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1692'. [ 336.635839][ T29] audit: type=1326 audit(2000000250.090:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12177 comm="syz.2.1693" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1b1a185d29 code=0x0 [ 336.723997][ T5894] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 337.224000][ T5894] usb 4-1: Using ep0 maxpacket: 8 [ 337.230418][ T5894] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 337.238981][ T5894] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 337.248192][ T5894] usb 4-1: config 0 has no interface number 0 [ 337.254758][ T5894] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 337.266344][ T5894] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 337.277319][ T5894] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 337.289343][ T5894] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 337.298513][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 337.306561][ T5894] usb 4-1: Product: syz [ 337.311869][ T5894] usb 4-1: config 0 descriptor?? [ 337.319610][T12170] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 337.340250][ T51] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 337.499671][ T51] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 337.512652][ T51] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.530877][T12188] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1696'. [ 337.540073][ T51] usb 7-1: Product: syz [ 337.544021][T12188] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1696'. [ 337.550379][ T51] usb 7-1: Manufacturer: syz [ 337.553721][T12188] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1696'. [ 337.566072][ T51] usb 7-1: SerialNumber: syz [ 337.566989][T12188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1696'. [ 337.581167][ T51] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 337.645503][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.657828][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.670162][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.682387][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.694617][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.706820][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.719129][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.731355][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.826982][ T5824] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 338.117808][ T5863] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 338.128771][ T5863] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 339.033912][ C1] net_ratelimit: 9583 callbacks suppressed [ 339.033935][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 339.033935][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.034072][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.040188][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 339.052206][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.064152][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 339.076000][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.088009][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 339.099998][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.111935][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 342.808358][ T5894] usb 4-1: USB disconnect, device number 30 [ 344.043936][ C0] net_ratelimit: 44114 callbacks suppressed [ 344.043957][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.044037][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 344.050008][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.062354][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 344.073980][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 344.086226][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 344.097852][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.110084][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 344.121628][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.134032][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 345.907961][ T5824] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 345.939652][ T5824] ath9k_htc: Failed to initialize the device [ 349.054000][ C0] net_ratelimit: 40484 callbacks suppressed [ 349.054024][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.054494][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 349.060092][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 349.072341][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 349.084024][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.096242][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 349.107795][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.120134][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 349.131724][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 349.143977][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 349.939286][ T5863] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -110 [ 349.970301][ T5863] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -110 [ 350.069019][ T5863] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -110 [ 350.161188][ T5863] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -110 [ 354.064041][ C0] net_ratelimit: 39481 callbacks suppressed [ 354.064062][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 354.064380][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 354.070167][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.082425][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 354.093987][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.106333][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 354.117917][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 354.130185][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 354.141774][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.154004][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 359.074026][ C0] net_ratelimit: 37538 callbacks suppressed [ 359.074053][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 359.074539][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 359.080160][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.092386][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 359.103966][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.116288][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 359.127900][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 359.140138][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 359.151744][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.163973][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 362.550014][ T5831] Bluetooth: hci3: command tx timeout [ 364.083950][ C0] net_ratelimit: 36694 callbacks suppressed [ 364.083971][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.084424][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 364.090046][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 364.102840][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 364.114045][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.126235][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 364.137812][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.150177][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 364.161800][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 364.174029][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 369.094114][ C0] net_ratelimit: 38882 callbacks suppressed [ 369.094136][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 369.094211][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 369.100296][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.112371][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 369.124194][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.136321][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 369.148145][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.160263][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 369.171983][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.184185][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 374.103972][ C1] net_ratelimit: 41165 callbacks suppressed [ 374.103995][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 374.104021][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.110344][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 374.122092][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.134274][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 374.146011][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 374.158111][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 374.169873][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 374.181945][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 374.193683][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.514149][ T969] usb 7-1: USB disconnect, device number 25 [ 377.135646][ T969] usb 7-1: ath9k_htc: USB layer deinitialized [ 379.113928][ C0] net_ratelimit: 40784 callbacks suppressed [ 379.113950][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 379.114112][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 379.120048][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 379.132181][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 379.143924][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 379.156333][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 379.167799][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 379.179839][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 379.191590][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 379.204121][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 384.123985][ C0] net_ratelimit: 41097 callbacks suppressed [ 384.124008][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 384.124312][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 384.130067][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.142483][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 384.153995][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.166039][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 384.177790][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.190254][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 384.201723][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.213910][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 389.133925][ C0] net_ratelimit: 38712 callbacks suppressed [ 389.133954][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 389.134240][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 389.140072][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 389.152219][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 389.163996][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 389.176439][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 389.187917][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 389.200001][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 389.211751][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 389.224125][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 392.428596][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 394.143926][ C0] net_ratelimit: 40188 callbacks suppressed [ 394.143949][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 394.144095][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 394.150077][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 394.162399][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 394.173926][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 394.185992][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 394.197791][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 394.210206][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 394.221622][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 394.233717][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 399.153931][ C0] net_ratelimit: 41645 callbacks suppressed [ 399.153954][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 399.154166][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 399.160035][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 399.172093][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 399.183900][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 399.196348][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 399.207775][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 399.219998][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 399.231739][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 399.244102][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 404.163943][ C1] net_ratelimit: 41566 callbacks suppressed [ 404.163966][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 404.163978][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.164132][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 404.170256][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 404.182069][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 404.194400][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 404.205814][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.217979][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 404.229676][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.242093][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 409.173885][ C0] net_ratelimit: 41681 callbacks suppressed [ 409.173907][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 409.174463][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 409.180004][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.192096][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 409.203900][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.216232][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 409.227720][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.239864][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 409.251634][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.264116][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 414.183894][ C1] net_ratelimit: 41398 callbacks suppressed [ 414.183917][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 414.183998][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 414.190178][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 414.201987][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 414.214324][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 414.225837][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 414.237886][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 414.249641][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 414.262112][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 414.273578][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 419.193982][ C0] net_ratelimit: 41452 callbacks suppressed [ 419.194005][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 419.194053][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 419.200074][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 419.212156][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 419.223944][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 419.236302][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 419.247771][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 419.259832][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 419.271659][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 419.284203][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 424.203913][ C0] net_ratelimit: 41527 callbacks suppressed [ 424.203936][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 424.203997][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 424.210130][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 424.222419][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 424.233912][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 424.245969][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 424.257750][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 424.270100][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 424.281563][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 424.293712][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 429.213960][ C0] net_ratelimit: 41457 callbacks suppressed [ 429.213983][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 429.214015][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 429.220073][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.232435][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 429.243961][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.256101][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 429.267795][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.280240][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 429.291698][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.303898][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 434.224026][ C0] net_ratelimit: 41377 callbacks suppressed [ 434.224048][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.224351][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 434.230099][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.242295][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 434.254071][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 434.266422][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 434.277901][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 434.289972][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 434.301750][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.314121][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 439.233928][ C0] net_ratelimit: 43993 callbacks suppressed [ 439.233951][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 439.234101][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 439.240011][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 439.251932][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 439.263893][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 439.275951][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 439.287686][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 439.300386][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 439.311659][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 439.323550][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 444.244008][ C0] net_ratelimit: 44291 callbacks suppressed [ 444.244030][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 444.244075][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 444.250136][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 444.262466][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 444.273969][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 444.285905][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 444.297850][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 444.310026][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 444.321778][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 444.334141][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 449.254013][ C0] net_ratelimit: 41399 callbacks suppressed [ 449.254034][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 449.254254][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 449.260070][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 449.272098][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 449.284048][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 449.296203][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 449.307976][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 449.320720][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 449.331817][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 449.343726][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 452.576396][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 454.263899][ C0] net_ratelimit: 38433 callbacks suppressed [ 454.263921][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 454.264099][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 454.270029][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 454.282751][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 454.293878][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 454.305825][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 454.317774][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 454.329939][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 454.341712][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 454.354783][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 459.273950][ C0] net_ratelimit: 39061 callbacks suppressed [ 459.273973][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 459.274020][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 459.280008][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 459.292209][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 459.304001][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 459.316706][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 459.327857][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 459.339736][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 459.351717][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 459.363779][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 464.283937][ C0] net_ratelimit: 41260 callbacks suppressed [ 464.283959][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 464.284239][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 464.290012][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 464.302058][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 464.313994][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 464.326059][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 464.337852][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 464.350560][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 464.361690][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 464.373654][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 469.293936][ C0] net_ratelimit: 41310 callbacks suppressed [ 469.293960][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 469.294182][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 469.300025][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 469.311954][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 469.323937][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 469.335972][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 469.347740][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 469.360547][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 469.371641][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 469.383657][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 471.633866][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 471.640839][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5188/1:b..l P5810/1:b..l [ 471.649904][ C0] rcu: (detected by 0, t=10503 jiffies, g=33241, q=406 ncpus=2) [ 471.657625][ C0] task:syz-executor state:R running task stack:23856 pid:5810 tgid:5810 ppid:5807 flags:0x00000000 [ 471.669397][ C0] Call Trace: [ 471.672675][ C0] [ 471.675606][ C0] __schedule+0xe58/0x5ad0 [ 471.680036][ C0] ? is_bpf_text_address+0x30/0x1a0 [ 471.685258][ C0] ? bpf_ksym_find+0x61/0x1c0 [ 471.689967][ C0] ? is_bpf_text_address+0x94/0x1a0 [ 471.695183][ C0] ? __pfx___schedule+0x10/0x10 [ 471.700047][ C0] ? trace_irq_enable.constprop.0+0xea/0x140 [ 471.706047][ C0] ? __reset_page_owner+0x8c/0x400 [ 471.711171][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 471.716553][ C0] preempt_schedule_common+0x44/0xc0 [ 471.721851][ C0] preempt_schedule_thunk+0x1a/0x30 [ 471.727062][ C0] unwind_next_frame+0x1776/0x20c0 [ 471.732183][ C0] ? __reset_page_owner+0x8d/0x400 [ 471.737308][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 471.743477][ C0] arch_stack_walk+0x95/0x100 [ 471.748168][ C0] ? free_unref_page+0x661/0x1080 [ 471.753200][ C0] stack_trace_save+0x95/0xd0 [ 471.757892][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 471.763282][ C0] ? debug_check_no_obj_freed+0x327/0x600 [ 471.769013][ C0] ? __pfx_lock_release+0x10/0x10 [ 471.774047][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 471.779434][ C0] save_stack+0x162/0x1f0 [ 471.783773][ C0] ? __pfx_save_stack+0x10/0x10 [ 471.788635][ C0] __reset_page_owner+0x8d/0x400 [ 471.793583][ C0] free_unref_page+0x661/0x1080 [ 471.798443][ C0] __put_partials+0x14c/0x170 [ 471.803131][ C0] qlist_free_all+0x4e/0x120 [ 471.807736][ C0] kasan_quarantine_reduce+0x195/0x1e0 [ 471.813207][ C0] __kasan_slab_alloc+0x69/0x90 [ 471.818068][ C0] kmem_cache_alloc_noprof+0x226/0x3d0 [ 471.823536][ C0] ? _raw_spin_unlock+0x28/0x50 [ 471.828399][ C0] ? getname_flags.part.0+0x4c/0x550 [ 471.833696][ C0] getname_flags.part.0+0x4c/0x550 [ 471.838816][ C0] ? __pfx_mntput_no_expire+0x10/0x10 [ 471.844205][ C0] getname+0x8d/0xe0 [ 471.848107][ C0] vfs_fstatat+0xdf/0xf0 [ 471.852361][ C0] __do_sys_newfstatat+0xa2/0x130 [ 471.857397][ C0] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 471.863049][ C0] ? __x64_sys_umount+0x125/0x1a0 [ 471.868083][ C0] ? rcu_is_watching+0x12/0xc0 [ 471.872873][ C0] ? rcu_is_watching+0x12/0xc0 [ 471.877655][ C0] do_syscall_64+0xcd/0x250 [ 471.882180][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.888091][ C0] RIP: 0033:0x7f1b1a18453a [ 471.892511][ C0] RSP: 002b:00007ffd86e423f8 EFLAGS: 00000286 ORIG_RAX: 0000000000000106 [ 471.900930][ C0] RAX: ffffffffffffffda RBX: 00007f1b1a2018f4 RCX: 00007f1b1a18453a [ 471.908906][ C0] RDX: 00007ffd86e42420 RSI: 00007ffd86e424b0 RDI: 00000000ffffff9c [ 471.916882][ C0] RBP: 00007ffd86e424b0 R08: 0000000000000000 R09: 0000000000000000 [ 471.924861][ C0] R10: 0000000000000100 R11: 0000000000000286 R12: 00007ffd86e43530 [ 471.932838][ C0] R13: 00007f1b1a2018f4 R14: 00007ffd86e43570 R15: 00000000000001b3 [ 471.940827][ C0] [ 471.943843][ C0] task:udevd state:R running task stack:24896 pid:5188 tgid:5188 ppid:1 flags:0x00004002 [ 471.955601][ C0] Call Trace: [ 471.958875][ C0] [ 471.961805][ C0] __schedule+0xe58/0x5ad0 [ 471.966234][ C0] ? lock_release+0x4e2/0x6f0 [ 471.970929][ C0] ? is_bpf_text_address+0x30/0x1a0 [ 471.976139][ C0] ? __pfx___schedule+0x10/0x10 [ 471.980999][ C0] ? is_bpf_text_address+0x94/0x1a0 [ 471.986209][ C0] ? __kernel_text_address+0xd/0x40 [ 471.991415][ C0] ? arch_stack_walk+0xa7/0x100 [ 471.996283][ C0] ? rcu_is_watching+0x12/0xc0 [ 472.001058][ C0] preempt_schedule_irq+0x51/0x90 [ 472.006095][ C0] irqentry_exit+0x36/0x90 [ 472.010518][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 472.016511][ C0] RIP: 0010:unwind_next_frame+0x21/0x20c0 [ 472.022239][ C0] Code: 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 48 89 fa 41 57 48 c1 ea 03 41 56 41 55 49 89 fd 41 54 55 <53> 48 83 ec 38 0f b6 04 02 84 c0 74 08 3c 03 0f 8e 48 0a 00 00 41 [ 472.041865][ C0] RSP: 0018:ffffc9000474f500 EFLAGS: 00000a06 [ 472.047943][ C0] RAX: dffffc0000000000 RBX: ffffc9000474f530 RCX: 0000000000000000 [ 472.055923][ C0] RDX: 1ffff920008e9ea6 RSI: ffffffff81fcd26e RDI: ffffc9000474f530 [ 472.063901][ C0] RBP: ffffc9000474f5c0 R08: ffffc9000474f564 R09: ffffffff90ff1ab2 [ 472.071875][ C0] R10: ffffc9000474f530 R11: 000000000000f1fa R12: ffffffff8185d250 [ 472.079849][ C0] R13: ffffc9000474f530 R14: 0000000000000000 R15: ffff888021778000 [ 472.087828][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 472.094005][ C0] ? qlist_free_all+0x4e/0x120 [ 472.098779][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 472.104950][ C0] arch_stack_walk+0x95/0x100 [ 472.109639][ C0] ? qlist_free_all+0x4e/0x120 [ 472.114409][ C0] stack_trace_save+0x95/0xd0 [ 472.119095][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 472.124480][ C0] ? debug_check_no_obj_freed+0x327/0x600 [ 472.130208][ C0] ? __pfx_lock_release+0x10/0x10 [ 472.135251][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 472.140634][ C0] save_stack+0x162/0x1f0 [ 472.144969][ C0] ? __pfx_save_stack+0x10/0x10 [ 472.149823][ C0] ? free_unref_page+0x661/0x1080 [ 472.154849][ C0] ? __put_partials+0x14c/0x170 [ 472.159704][ C0] ? qlist_free_all+0x4e/0x120 [ 472.164477][ C0] __reset_page_owner+0x8d/0x400 [ 472.169422][ C0] free_unref_page+0x661/0x1080 [ 472.174282][ C0] __put_partials+0x14c/0x170 [ 472.178966][ C0] qlist_free_all+0x4e/0x120 [ 472.183564][ C0] kasan_quarantine_reduce+0x195/0x1e0 [ 472.189038][ C0] __kasan_slab_alloc+0x69/0x90 [ 472.193897][ C0] __kmalloc_cache_noprof+0x243/0x410 [ 472.199276][ C0] kernfs_fop_open+0x28b/0xdb0 [ 472.204046][ C0] do_dentry_open+0xf59/0x1ea0 [ 472.208813][ C0] ? __pfx_kernfs_fop_open+0x10/0x10 [ 472.214102][ C0] ? inode_permission+0xdd/0x5f0 [ 472.219049][ C0] vfs_open+0x82/0x3f0 [ 472.223123][ C0] ? may_open+0x1f2/0x400 [ 472.227464][ C0] path_openat+0x1e6a/0x2d60 [ 472.232060][ C0] ? __pfx_path_openat+0x10/0x10 [ 472.237004][ C0] do_filp_open+0x20c/0x470 [ 472.241511][ C0] ? __pfx_do_filp_open+0x10/0x10 [ 472.246550][ C0] ? alloc_fd+0x41f/0x760 [ 472.250886][ C0] do_sys_openat2+0x17a/0x1e0 [ 472.255572][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 472.260780][ C0] ? __rseq_handle_notify_resume+0x695/0x10b0 [ 472.266858][ C0] ? rcu_is_watching+0x12/0xc0 [ 472.271639][ C0] __x64_sys_openat+0x175/0x210 [ 472.276507][ C0] ? __pfx___x64_sys_openat+0x10/0x10 [ 472.281891][ C0] ? rcu_is_watching+0x12/0xc0 [ 472.286671][ C0] ? rcu_is_watching+0x12/0xc0 [ 472.291448][ C0] do_syscall_64+0xcd/0x250 [ 472.295960][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.301862][ C0] RIP: 0033:0x7fd4f55169a4 [ 472.306283][ C0] RSP: 002b:00007ffe9cc2fa40 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 472.314700][ C0] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007fd4f55169a4 [ 472.322681][ C0] RDX: 0000000000080000 RSI: 00007ffe9cc2fb78 RDI: 00000000ffffff9c [ 472.330673][ C0] RBP: 00007ffe9cc2fb78 R08: 0000000000000008 R09: 0000000000000001 [ 472.338651][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000080000 [ 472.346628][ C0] R13: 000055b9f206fb42 R14: 0000000000000001 R15: 0000000000000000 [ 472.354607][ C0] [ 472.357624][ C0] rcu: rcu_preempt kthread starved for 10574 jiffies! g33241 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 472.368823][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 472.378787][ C0] rcu: RCU grace-period kthread stack dump: [ 472.384670][ C0] task:rcu_preempt state:R running task stack:27216 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 472.396441][ C0] Call Trace: [ 472.399721][ C0] [ 472.402651][ C0] __schedule+0xe58/0x5ad0 [ 472.407080][ C0] ? trace_irq_enable.constprop.0+0xea/0x140 [ 472.413069][ C0] ? __pfx___schedule+0x10/0x10 [ 472.417923][ C0] ? lock_release+0x4e2/0x6f0 [ 472.422600][ C0] ? schedule+0x298/0x350 [ 472.426933][ C0] ? __pfx_lock_release+0x10/0x10 [ 472.431963][ C0] ? schedule+0x1fd/0x350 [ 472.436297][ C0] ? lock_acquire+0x2f/0xb0 [ 472.440802][ C0] ? schedule+0x1fd/0x350 [ 472.445139][ C0] schedule+0xe7/0x350 [ 472.449216][ C0] schedule_timeout+0x124/0x280 [ 472.454072][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 472.459444][ C0] ? __pfx_process_timeout+0x10/0x10 [ 472.464743][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 472.470554][ C0] ? prepare_to_swait_event+0xf3/0x470 [ 472.476022][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 472.480795][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 472.486091][ C0] ? rcu_gp_init+0xc82/0x1630 [ 472.490775][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 472.495983][ C0] ? trace_irq_enable.constprop.0+0xea/0x140 [ 472.501972][ C0] rcu_gp_kthread+0x271/0x380 [ 472.506656][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 472.511869][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 472.517081][ C0] ? __kthread_parkme+0x148/0x220 [ 472.522120][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 472.527331][ C0] kthread+0x2c1/0x3a0 [ 472.531410][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 472.536618][ C0] ? __pfx_kthread+0x10/0x10 [ 472.541219][ C0] ret_from_fork+0x45/0x80 [ 472.545640][ C0] ? __pfx_kthread+0x10/0x10 [ 472.550238][ C0] ret_from_fork_asm+0x1a/0x30 [ 472.555024][ C0] [ 472.558038][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 472.564359][ C0] CPU: 0 UID: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 472.574949][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 472.585006][ C0] RIP: 0010:write_comp_data+0x8b/0x90 [ 472.590406][ C0] Code: 00 00 4a 8d 34 dd 28 00 00 00 48 39 f2 72 1b 48 83 c7 01 48 89 38 4c 89 44 30 e0 4c 89 4c 30 e8 4c 89 54 30 f0 4a 89 4c d8 20 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 [ 472.610024][ C0] RSP: 0018:ffffc90000157588 EFLAGS: 00000246 [ 472.616102][ C0] RAX: 0000000000000000 RBX: ffff8880241b0000 RCX: ffffffff89dbde08 [ 472.624073][ C0] RDX: ffff88801d6b8000 RSI: 0000000000000000 RDI: 0000000000000005 [ 472.632044][ C0] RBP: ffffc90000157680 R08: 0000000000000005 R09: 0000000000000000 [ 472.640020][ C0] R10: 0000000000000000 R11: 0000000000000b92 R12: ffffc90000157918 [ 472.647994][ C0] R13: ffff8881776bddc0 R14: 0000000000000000 R15: 0000000000000000 [ 472.655969][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 472.664905][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 472.671494][ C0] CR2: 00007f2097e00000 CR3: 0000000062752000 CR4: 00000000003526f0 [ 472.679467][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 472.687445][ C0] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 472.695417][ C0] Call Trace: [ 472.698694][ C0] [ 472.701536][ C0] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 472.707880][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 472.713094][ C0] ? rcu_sched_clock_irq+0x247a/0x3310 [ 472.718574][ C0] ? rcu_is_watching+0x12/0xc0 [ 472.723352][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 472.728996][ C0] ? lock_release+0x4e2/0x6f0 [ 472.733676][ C0] ? debug_object_deactivate+0x1ef/0x370 [ 472.739312][ C0] ? __pfx_lock_release+0x10/0x10 [ 472.744341][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 472.749726][ C0] ? cpuacct_account_field+0x45/0x210 [ 472.755106][ C0] ? rcu_is_watching+0x12/0xc0 [ 472.759882][ C0] ? update_process_times+0x178/0x2d0 [ 472.765269][ C0] ? __pfx_update_process_times+0x10/0x10 [ 472.771009][ C0] ? read_tsc+0x9/0x20 [ 472.775111][ C0] ? ktime_get+0x1ac/0x300 [ 472.779545][ C0] ? tick_nohz_handler+0x376/0x530 [ 472.784675][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 472.790151][ C0] ? __hrtimer_run_queues+0x5fb/0xae0 [ 472.795546][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 472.801280][ C0] ? read_tsc+0x9/0x20 [ 472.805373][ C0] ? hrtimer_interrupt+0x392/0x8e0 [ 472.810508][ C0] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 472.816672][ C0] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 472.822488][ C0] [ 472.825414][ C0] [ 472.828349][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 472.834523][ C0] ? fib6_select_path+0x588/0xd40 [ 472.839556][ C0] ? write_comp_data+0x8b/0x90 [ 472.844326][ C0] ? __siphash_unaligned+0x1e5/0x360 [ 472.849619][ C0] fib6_select_path+0x588/0xd40 [ 472.854485][ C0] ip6_pol_route+0x229/0x1120 [ 472.859174][ C0] ? rt6_multipath_hash+0x1f0/0x1830 [ 472.864469][ C0] ? __pfx_ip6_pol_route+0x10/0x10 [ 472.869586][ C0] ? __pfx_rt6_multipath_hash+0x10/0x10 [ 472.875141][ C0] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 472.880784][ C0] fib6_rule_lookup+0x536/0x720 [ 472.885640][ C0] ? ip6t_do_table+0xd50/0x1d40 [ 472.890499][ C0] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 472.895878][ C0] ? nf_nat_ipv6_fn+0x103/0x2e0 [ 472.900743][ C0] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 472.905959][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 472.911875][ C0] ip6_route_input+0x663/0xc10 [ 472.916656][ C0] ? __pfx_ip6_route_input+0x10/0x10 [ 472.921950][ C0] ? __pfx_lock_release+0x10/0x10 [ 472.926985][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 472.932201][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 472.937414][ C0] ip6_rcv_finish_core.constprop.0+0x1a0/0x5d0 [ 472.943587][ C0] ipv6_rcv+0x1e4/0x680 [ 472.947753][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 472.952442][ C0] __netif_receive_skb_one_core+0x12e/0x1e0 [ 472.958349][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 472.964775][ C0] ? rcu_is_watching+0x12/0xc0 [ 472.969550][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 472.974927][ C0] ? process_backlog+0x3f1/0x15f0 [ 472.979964][ C0] ? process_backlog+0x3f1/0x15f0 [ 472.985009][ C0] __netif_receive_skb+0x1d/0x160 [ 472.990045][ C0] process_backlog+0x443/0x15f0 [ 472.994905][ C0] __napi_poll.constprop.0+0xb7/0x550 [ 473.000289][ C0] net_rx_action+0xa94/0x1010 [ 473.004977][ C0] ? tmigr_handle_remote+0x153/0xdd0 [ 473.010294][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 473.015415][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 473.021069][ C0] ? run_timer_base+0x11c/0x190 [ 473.025941][ C0] ? run_timer_base+0x121/0x190 [ 473.030799][ C0] ? rcu_is_watching+0x12/0xc0 [ 473.035574][ C0] handle_softirqs+0x213/0x8f0 [ 473.040349][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 473.045643][ C0] ? rcu_is_watching+0x12/0xc0 [ 473.050416][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 473.055539][ C0] ? smpboot_thread_fn+0x59d/0xa30 [ 473.060661][ C0] run_ksoftirqd+0x3a/0x60 [ 473.065239][ C0] smpboot_thread_fn+0x661/0xa30 [ 473.070186][ C0] ? __kthread_parkme+0x148/0x220 [ 473.075260][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 473.080731][ C0] kthread+0x2c1/0x3a0 [ 473.084807][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 473.090015][ C0] ? __pfx_kthread+0x10/0x10 [ 473.094613][ C0] ret_from_fork+0x45/0x80 [ 473.099035][ C0] ? __pfx_kthread+0x10/0x10 [ 473.103635][ C0] ret_from_fork_asm+0x1a/0x30 [ 473.108421][ C0] [ 474.303928][ C0] net_ratelimit: 31989 callbacks suppressed [ 474.303950][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 474.303974][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 474.310025][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 474.322178][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 474.333939][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 474.346748][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 474.357873][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 474.369756][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 474.381704][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 474.393769][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 479.313938][ C0] net_ratelimit: 41357 callbacks suppressed [ 479.313959][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 479.314399][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 479.320015][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 479.331916][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 479.343923][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 479.355981][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 479.367684][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 479.380492][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0) [ 479.391640][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 479.403544][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:f3:d5:21:df:10, vlan:0)