last executing test programs: 1m43.136043822s ago: executing program 3 (id=1210): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) r1 = socket$unix(0x1, 0x1, 0x0) sendmmsg$unix(r1, &(0x7f0000008280), 0x0, 0x20040804) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x4000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)={0x68, r6, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x40}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x68}, 0x1, 0x0, 0x0, 0x2004010}, 0x20000000) sendmmsg$unix(r4, &(0x7f0000001a40), 0x0, 0x40) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$netlink(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x13, 0x1, 0x1, "a90037e7f30f000080df4832c305f70000000000004840080400000000008300", 0x50313459}) syz_usb_connect(0x0, 0x24, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x5d, 0xba, 0xfc, 0x40, 0xbfd, 0x10c, 0x2d16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x21, 0xef, 0xb0}}]}}]}}, 0x0) 1m39.352990688s ago: executing program 0 (id=1214): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000001040)) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x42) open_by_handle_at(r2, &(0x7f0000000380)=ANY=[@ANYRES8=r2], 0x40000) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc04c565d, &(0x7f00000002c0)=@multiplanar_fd={0xc3b4eab, 0x7, 0x4, 0x400, 0x4, {0x77359400}, {0x2, 0x1, 0x7, 0xb, 0x4, 0x3, "f6de8be8"}, 0x7, 0x4, {0x0}, 0x6}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x88}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCFLSH(r5, 0x80045438, 0x0) r6 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x10, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xfed, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0xe2df, 0xaa14, 0x1, 0x4, 0x0, 0x7, 0xf58, 0x6]}) ioctl$COMEDI_INSN(r6, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x80000000}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, 0x0, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000340)={0x4, {0x966, 0x1, 0x0, 0x4, 0x615, 0x20000004}}) write$nci(0xffffffffffffffff, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], 0x83) keyctl$read(0x2, 0x0, &(0x7f00000000c0)=""/4096, 0x1000) move_pages(0x0, 0x0, &(0x7f0000000040), &(0x7f0000001280), &(0x7f0000000000), 0x4) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000001240)={[&(0x7f0000001200)='/dev/ptmx\x00']}, &(0x7f0000000a80)={[&(0x7f00000018c0)='.^*%$\'-\\:\x00\xfb\x12#\x19\t\x99n\x1e\xef,NA\xf3)\xc8\xcd\x9bM\x83\x9d\v\x80\xcbU\xdcV\xe4\xff\xa8\xf1']}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000180)={0xfb, 0x8, 0x0, "062383a78614d321eb086bebba55db0dfca05613826fffd4ee640ffed6cd68cb", 0x32314d54}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001000000000047000280050001"], 0xe4}}, 0x0) 1m39.177732718s ago: executing program 2 (id=1215): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) pipe(&(0x7f0000000480)={0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x891f, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0x6, &(0x7f0000000180)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f018581c0bc0065666765f36f0f33f0100a660f3a0cb9000000752066b9800000c00f3a32c632c6004000a50f01d70f0901", 0x32}], 0x1, 0x54, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x900000001, 0x800000000, 0x45b, 0x0, 0x0, 0x7, 0x5, 0x0, 0xfc, 0xfffffffdfffffffc, 0xfdfffffffffffffc, 0x0, 0x9, 0x4000000000000004, 0x767], 0xeeef0000, 0x80082}) socket$netlink(0x10, 0x3, 0x6) ioctl$KVM_RUN(r6, 0xae80, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f000019e000/0x1000)=nil, 0x1000}, 0x1}) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) process_vm_writev(r7, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0xf400000000000000) 1m38.479097533s ago: executing program 3 (id=1216): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad10102030109022400010000"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d05, 0x0, 0x2b34988d}]}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[], 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @empty, 0x20000007}, 0x1c) r9 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x20001, 0x44}, 0x18) open_tree(r9, &(0x7f0000000580)='./file0\x00', 0x100) sendto$inet6(r8, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_udp_int(r8, 0x11, 0x1, &(0x7f0000000080), 0x4) syz_io_uring_setup(0x237, 0x0, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0xf0) 1m31.958879187s ago: executing program 1 (id=1217): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = creat(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c000280050001000000000008000740000000001800068014000400200100"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$nfc_llcp(r7, &(0x7f0000009480)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x6, "be8e06b6a865e7ab561f559d74a73485c8abd655427185f720fd70c317170b887afc05cd30b91090e8571ca0d8f47c1e1a12c085d196fd2eb6853571e830e5", 0x33}, 0x60) lgetxattr(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='user'], 0x0, 0x0) linkat(r3, 0x0, 0xffffffffffffff9c, 0x0, 0x1400) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYRESDEC=r5, @ANYRESDEC=0x0, @ANYRES32=r3, @ANYRESOCT=r0, @ANYRESOCT=r4, @ANYBLOB="b729353b2f503d08eac02ea458763ee808174a83f39c8f0ac7add8069a9ca6566f65a2bfb37cbb71e949064bee58dd1ca2ba0b4513e9340ba8eb4299db723b904048c5b3f372b7131129e4ad296df85496f401ac8ed7a1d8533155a2e24e3d1effb33ba686748dd9d6172615f63a88832ebbdeeae551b35ba1c1204138013c4f48a210529d", @ANYRES16=r6, @ANYRESOCT=0x0, @ANYRESDEC=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x6) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r10, 0x2, &(0x7f0000000600)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r9, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x4, r9, 0x0}]) 1m31.909227005s ago: executing program 3 (id=1218): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) semctl$SEM_STAT(0x0, 0x0, 0x12, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000078000000030a01010000000000000000010000000900030073797a310000000028000480080002400000000208000140000000051400030076657468315f746f5f626174616476000900010073797a300000000008000a4097"], 0xc0}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000100)={0x3, 0x0, 0xfff, 0x0, 0x6, 0xa}) 1m31.809800119s ago: executing program 4 (id=1219): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000240)="7814ad7efe574455d72b8f73c5bdfeb572023b9af5b9d5a7fcc906f1d4768979b529cc191d95068a7681fcdcb035030fea8b3b62a1d00d3c2b6fc8ff687af0769f0be679a3878d7b199df53a37d3194083ef8e08e361587d1abeb7709fb7a2d8dae57b779234835ead595c2ef11ce57b1a7b5d3c765b873a920480c9af2ecf073b35629a", 0x84}, {&(0x7f0000000740)="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", 0x521}], 0x2}}], 0x1, 0x4000000) 1m30.61011831s ago: executing program 4 (id=1220): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x4400, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/13], &(0x7f00000007c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_open_dev$usbfs(0x0, 0x77, 0x141341) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000280)=0x1c) recvmsg(r1, &(0x7f00000005c0)={&(0x7f0000000440)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=""/208, 0xd0}, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$TIOCL_SETVESABLANK(r4, 0x560e, &(0x7f0000000140)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r5, 0x5607, 0x26) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000140)={0x5, 0x4, 0x9fc9}) fsetxattr$security_evm(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=@sha1={0x1, "3933fc4fcd7f28fa0ecc6444e439b367e09176e7"}, 0x15, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'wlan1\x00', {}, 0x108}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f47"]) r6 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 1m30.416667974s ago: executing program 1 (id=1221): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x300}, 0x20008000) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0xc0042, 0x1fe) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffff9, 0x1) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x193bc2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') close_range(r3, 0xffffffffffffffff, 0x0) futex(0x0, 0x80, 0x1, &(0x7f0000000840)={0x0, 0x3938700}, 0x0, 0x2) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000880)={"8b877600", 0xfffd, 0x2, 0x1, 0xe, 0x10000, "327c52b606ca66af7621dc3b3ea8e0", "0cf7f400", "81d322df", "ab31d5d4", ["7248f34e994af0315549cbb4", "af76d3e9b1f7acf22fdd7d84", "2f3aedfb3f87f29a8f24b0a4", "d29d330e6e62cb6f5549820d"]}) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000240)=""/166) socket$kcm(0x29, 0x2, 0x0) memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0xc) mremap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000008000/0x4000)=nil) 1m30.322971154s ago: executing program 2 (id=1222): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xd}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_disconnect(r4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="200002d80000000000800000000000000000000c001a8008000a80ef0771c3006414fe121c60d19fabdf456855db89de11f00cda8a66"], 0x20}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_WKALM_SET(r5, 0x4028700f, &(0x7f0000000080)={0x1, 0x0, {0x2c, 0x0, 0x0, 0xa, 0x0, 0x61}}) preadv2(r5, &(0x7f0000000200)=[{0x0}], 0x1, 0xfffffffc, 0x0, 0x0) faccessat2(0xffffffffffffffff, &(0x7f0000001400)='\x00', 0x0, 0x1100) clock_gettime(0x0, &(0x7f0000000300)) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) close_range(r6, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) 1m30.249918669s ago: executing program 3 (id=1223): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000240)="27050200340f3c0f3500002fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f600102c21880b00000000010040570000000600000000000000805db18fc083", 0x4d}, {&(0x7f00000002c0)="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", 0xf35}, {&(0x7f0000001200)="d0", 0x1}], 0x3}, 0x9cdc2384056b48b8) 1m29.378222757s ago: executing program 0 (id=1224): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0x2d, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) syz_clone3(0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) r1 = epoll_create1(0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x40b80) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000d40)={0x2, 0x3, 0x3, 0xfffffffc, 0x0, 0x4063, "57c1169b6664e261326ac71ae7213059", 0x0, 0x0, 0x0, 0xfd, 0x5, 0x1}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xa0000001}) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) close_range(r0, 0xffffffffffffffff, 0x0) 1m28.814991145s ago: executing program 0 (id=1225): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x300}, 0x20008000) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0xc0042, 0x1fe) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffff9, 0x1) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x193bc2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x2) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') close_range(r3, 0xffffffffffffffff, 0x0) futex(0x0, 0x80, 0x1, &(0x7f0000000840)={0x0, 0x3938700}, 0x0, 0x2) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000880)={"8b877600", 0xfffd, 0x2, 0x1, 0xe, 0x10000, "327c52b606ca66af7621dc3b3ea8e0", "0cf7f400", "81d322df", "ab31d5d4", ["7248f34e994af0315549cbb4", "af76d3e9b1f7acf22fdd7d84", "2f3aedfb3f87f29a8f24b0a4", "d29d330e6e62cb6f5549820d"]}) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000240)=""/166) socket$kcm(0x29, 0x2, 0x0) memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0xc) mremap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000008000/0x4000)=nil) 1m28.764665358s ago: executing program 4 (id=1226): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0xc345a9e22e3d86bf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000003e000701feffffff00000008017c0000040042800c00018006000600800a0000100002800c000380080009"], 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 1m28.741641025s ago: executing program 3 (id=1227): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x300}, 0x20008000) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0xc0042, 0x1fe) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffff9, 0x1) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x193bc2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x2) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') close_range(r3, 0xffffffffffffffff, 0x0) futex(0x0, 0x80, 0x1, &(0x7f0000000840)={0x0, 0x3938700}, 0x0, 0x2) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000880)={"8b877600", 0xfffd, 0x2, 0x1, 0xe, 0x10000, "327c52b606ca66af7621dc3b3ea8e0", "0cf7f400", "81d322df", "ab31d5d4", ["7248f34e994af0315549cbb4", "af76d3e9b1f7acf22fdd7d84", "2f3aedfb3f87f29a8f24b0a4", "d29d330e6e62cb6f5549820d"]}) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000240)=""/166) socket$kcm(0x29, 0x2, 0x0) memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0xc) mremap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000008000/0x4000)=nil) 1m28.104235353s ago: executing program 1 (id=1228): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000200)={{@my=0x0}, 0x0, 0x1}) pwritev(0xffffffffffffffff, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000380)}, {&(0x7f0000000040)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dee71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461fa3c930fb84b679bca11d47c56904a9d359442a5c3693048b8aa179cf9385", 0xa4}, {0x0}, {&(0x7f0000000680)}, {&(0x7f0000000300)="929b1ca75f17b26ba46f03c53cbf4c33674827fedc1df01f420c213e064b1783ee1350cea6d13870645e36f72584e50c66ceaf3b30d41770fb23104d8d487555bd4360c187b61f94f390568b9c84eb1e2a11818d89e49df652b1d7c7447924bd4e8afad9a59a1db0810b7142c5778bf62d2f95b153ddb80a6d7e83a74a43c8a073921221296d3d525f4884346bbb9eab46b076", 0x93}, {&(0x7f00000003c0)="f0f4c909c663fa7e991296e33162cf7b6a2667d76108cd0b82823ecf83d6ed726df301194632ff4ba20aec58eddda13b4da42d44d38d281fa3d8f89dfe52bdb01d774d", 0x43}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000000480)="15f8", 0x2}, {&(0x7f0000000440)="7c66a6d7e6178195647fae3b22b1384a3a0a629eae63069c0ccd41a7961db574af", 0x21}], 0xa, 0x4, 0xfffffff8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair(0x1, 0x1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x14b082, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x39000, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfffffe3e) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x58, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x5, 0x10000, 0x4, 0x5, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]}) ioctl$COMEDI_SETRSUBD(r7, 0x6410) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m27.531819961s ago: executing program 4 (id=1229): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x300}, 0x20008000) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0xc0042, 0x1fe) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffff9, 0x1) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x193bc2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000080), 0x2, 0x0) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') close_range(r3, 0xffffffffffffffff, 0x0) futex(0x0, 0x80, 0x1, &(0x7f0000000840)={0x0, 0x3938700}, 0x0, 0x2) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000880)={"8b877600", 0xfffd, 0x2, 0x1, 0xe, 0x10000, "327c52b606ca66af7621dc3b3ea8e0", "0cf7f400", "81d322df", "ab31d5d4", ["7248f34e994af0315549cbb4", "af76d3e9b1f7acf22fdd7d84", "2f3aedfb3f87f29a8f24b0a4", "d29d330e6e62cb6f5549820d"]}) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000240)=""/166) socket$kcm(0x29, 0x2, 0x0) memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0xc) mremap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000008000/0x4000)=nil) 1m27.495326019s ago: executing program 0 (id=1230): openat$ppp(0xffffffffffffff9c, 0x0, 0x86000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_open_dev$sndmidi(&(0x7f00000000c0), 0xfffffffffffff08c, 0x101000) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = inotify_init1(0x800) fcntl$dupfd(r1, 0x406, r2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=@base={0x5, 0x7fff, 0x5, 0x7}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9, r4}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x9, 0x8, 0x4, 0x7fc}, 0x50) r5 = fsopen(&(0x7f0000000200)='qnx6\x00', 0x1) syz_emit_ethernet(0xbc, &(0x7f0000000b00)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x86, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20000, 0x1000300, [{0x1, 0xc, "23d13a9528da89ca8687857fa1c05623e430a7e05df65bb50a75504311ee5de0f521d4ef8bdff765650746569fc64eab97bd29f1573ea4d0bf29234512d00dd30ae604dd40e3c151fd4d595866b48657d2cb4ed8721f45e586a02af6449001"}, {0x5, 0x2, "ef1dc0373c7ae5822ff95684d179152a6da709"}]}}}}}}, 0x0) r6 = open(&(0x7f0000000100)='./file0\x00', 0x440, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_G_MODULATOR(r6, 0xc0445636, &(0x7f00000003c0)={0x8, "390e9fa60efb16dbae589c689624dcc1e39494e113b6584361cb8da4ec643e04", 0x0, 0x98, 0x1, 0x10, 0x3}) r9 = dup(r8) write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB='\t\x00']) truncate(&(0x7f0000000240)='./file0\x00', 0x20eb12) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x13, r3, 0x2000) 1m27.228672881s ago: executing program 3 (id=1231): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES32], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fchmodat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x2d9) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r1 = socket(0x1e, 0x4, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="04140605c80005f029930100a2510000a2fc40ec78ff09f71fce05676c1aa1c576eee9fcfeb30ab5af617219bfa6"], 0x9) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x428, 0x2f8, 0x218, 0x218, 0x0, 0xc0, 0x390, 0x390, 0x390, 0x390, 0x390, 0x6, &(0x7f0000000200), {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x66}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x38}, 0xff000000, 0xff000000, 'team_slave_1\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x1d, 0x3, 0x84}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x5}}}, {{@ip={@rand_addr=0x64010102, @multicast2, 0xffffffff, 0xffffffff, 'hsr0\x00', 'veth0_vlan\x00', {}, {0x7557e77346af8124}, 0x0, 0x1, 0x38}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x99}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0xff000000, 'wg2\x00', 'macvtap0\x00', {0xff}, {}, 0xbf, 0x3, 0x18}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ttl={{0x28}, {0x3, 0x3}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0xfc}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x4, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) r2 = socket(0x1e, 0x4, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000100)={0x4, 0x0, 0x4, 0x0, 0x4002}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r1], 0xfe33) sendmsg$kcm(r6, 0x0, 0xd96a5d3c286b2fed) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syz_tun\x00', &(0x7f0000000a40)=@ethtool_drvinfo={0x3, "ba035ef0aea96ca9633134c0861afc3505002169b593f962a73d7587f9d65f63", "453ca2d104e7825e5d430f9e0c5e8d4a3e459c8a51a27fa040a85cab6c7addd5", "5eabf92e5ff3feed69207f222febd5162a445ff470f6bf378f2cc55b2e28486f", "bf1b487fe99fbf8b3dea17a129af6f9f0c9db8168a3ae695488de6f66ba6f7dd", "0af697777a9388e4afbd1d42b32b4063fd80c7d8344ba1c76cc6ee84a5abafe8", "bdfabfb1c629d6f7b0e7fda7", 0x5, 0x3, 0xfffffff8, 0x41, 0x6}}) bind$inet6(r2, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe33) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x2, 0x202, 0x800, 0x6}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r7, 0x84, 0x1a, 0x0, &(0x7f0000000180)) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000706010800000000000000000000000005000100060000001cf705e86914eb2d0a27fc8f31f50bebc6d5dc06876ebcc32d72c862eb53cabc5341531e553d735f101d8a39c4d0f18ec9cc1883a1d43cd2782f6489180ead90cbd889c1387147a1fba604cda3a0934c3c355b202c7bfd1b5485fb89"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x73, r8, 0x201, 0x400000, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000003240), 0x4000000000000e4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m25.634794783s ago: executing program 4 (id=1232): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000001040)) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x42) open_by_handle_at(r2, &(0x7f0000000380)=ANY=[@ANYRES8=r2], 0x40000) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc04c565d, &(0x7f00000002c0)=@multiplanar_fd={0xc3b4eab, 0x7, 0x4, 0x400, 0x4, {0x77359400}, {0x2, 0x1, 0x7, 0xb, 0x4, 0x3, "f6de8be8"}, 0x7, 0x4, {0x0}, 0x6}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x88}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) read$nci(0xffffffffffffffff, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCFLSH(r4, 0x80045438, 0x0) r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x10, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xfed, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0xe2df, 0xaa14, 0x1, 0x4, 0x0, 0x7, 0xf58, 0x6]}) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x80000000}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, 0x0, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x4, {0x966, 0x1, 0x0, 0x4, 0x615, 0x20000004}}) write$nci(0xffffffffffffffff, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], 0x83) keyctl$read(0x2, 0x0, &(0x7f00000000c0)=""/4096, 0x1000) move_pages(0x0, 0x0, &(0x7f0000000040), &(0x7f0000001280), &(0x7f0000000000), 0x4) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000001240)={[&(0x7f0000001200)='/dev/ptmx\x00']}, &(0x7f0000000a80)={[&(0x7f00000018c0)='.^*%$\'-\\:\x00\xfb\x12#\x19\t\x99n\x1e\xef,NA\xf3)\xc8\xcd\x9bM\x83\x9d\v\x80\xcbU\xdcV\xe4\xff\xa8\xf1']}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000180)={0xfb, 0x8, 0x0, "062383a78614d321eb086bebba55db0dfca05613826fffd4ee640ffed6cd68cb", 0x32314d54}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001000000000047000280050001"], 0xe4}}, 0x0) 1m25.606614042s ago: executing program 2 (id=1233): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000740)={&(0x7f0000000300)=@ieee802154={0x24, @short={0x2, 0x3}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)="2b09a22443eb", 0x6}, {&(0x7f0000000380)="4b0e5ddd96f4b238564a1d09d9e1c4863bf4190ace2edb5475b4fff74bf0d2ed04471f9bc7be608857b97311fde4298c6e3233302de9b829eec8a54c7c4723f16e14b2f695", 0x45}, {&(0x7f0000000480)="1c31f0fe73f8de63cb75c0a3547dd5b1d8f747e4fa1624f89e2dcc8d25f1ff29dbad8aa455f2d638c812edaa1635ef8e99b1530884ab83aa1a72f267c69b7d", 0x3f}, {&(0x7f0000000680)="2f0b9103cb0fee50698705293c930cfcd2196d4fa9bbd062cec6031d8f67f520c9d91d95e0b72dccdcd6fb9df0d144259d8b2ab0294fd8d67a7575cda6ef35250c4a456061149c5ee62a75a905513e2e720d81730cd23daf6fc9d71631a22be1982e4d03ea39444fc55c60fa83cb6bebcf97cde7b7c64277b546b9fdeeadbd96fe87ed8dccafc3e5e325f9d9b67be6483b6c015e3d845d7e049082d1f95e8d4418eb3931dac74371a8fbc4104225fadc2013dfe3422f5ef6fa178fa9d1f233", 0xbf}, {&(0x7f0000000800)="3e895d167c64a04f16895e74cd18baf151073c18b7781113e45ab711cf5d342c3c15acf3994c231dfdb710cb59882aeb6927e426d2cb7d38887ba7eb931a461b570f919bbb01211ec129c8b4c6f7942470df56104024fcb36da5cfbd2bd3d2efe467056d223283f157e2914729470b496e515f7ef05bc1c22ce080c5b11d7ee8002b36020df65f2d34357324478fb6c1a0ce24df8995dd61f454909e04820f3018457c7f66aeae89408681625f3825dad9cfaded7b3124bdb90a", 0xba}, {&(0x7f00000004c0)="00c595b11613d7cc6e80586afce8962a47e20de5cb24c162fc3b2d4203b397406c842f860b2c6c60b2f3b98f791de9307b485f0bd5f99827cbc9616ed60d274f864a53470f102ce887e4c3bddc2618152413f96d351e54f32f2a9e034b3c815408d4643d", 0x64}, {&(0x7f00000008c0)="ee076d6d506f6fff0340d0b1bdc21e1ea18c56b80c6c7d65a9ccf756e0ab50df04a10b095dd915b2eabe69fb4046ff529e20a654215969e5e6b6f5071d4e42218600c850304356a7b572b8cc050860a39beec0a8e3560b6df4b4ec603b448a2790dd06d7f81b6f1a770525039383d65074005d26c8b1bcdee4779b48c56cdd122ff21ce28a31", 0x86}], 0x7, &(0x7f0000000980)=[{0xb8, 0x10e, 0x8, "cfed768328124270ba86dbb95708205ba9db76a9028bef45da65ecae47e3f62511ec1ebb3692276e47dfc11f4827b1d74754f2c5b37905a392dd6a1bcf7bcbcfc01c48cbc8a99662f50e3de7ec28295bf1a178131e1d183bfed653a39ecd9ec1ab89e4af14ac008639e4e13ad7542477bac622c98f75d6c27b4e6104f297ef3e4acdfd441b2c0ae39789618f49881bc84f917741cae0d63922daaed5ffb89bb32fcb4856cf79a8"}, {0x90, 0x3a, 0x4, "ce36fda0a8470e5967f99a9714acaae8552505e99ff4e2b2fcfaf0be0bbd60f32264f51e9f5588206b5df20e168e529f070234bd207c12251e9152961f1e50916582d5789c0b271b7d1e372ba58a885aee13706dc680e5842f227f6426cc94391617be8f728094cf3877367b1a3400db6f8d9327ea8b1b7cdd73e20d74182b99"}, {0x70, 0x1c, 0x401, "74d5e4924a20124418ca59bb5150237c81f0a383650fe2896f0baae2338c750678d8b4cf2e4ed6a3c124f6389baa41b32c912292cbabfa47de750496272b52078f4ebffbe1efe7ae13f8ac27695b34fe788d7b37dfdc30b02d"}, {0x60, 0x108, 0x2851c51c, "c336b9c27577da48e16d6ac8e6dda2f250abe2dd73081901223fd204e51111e055010805641c1ae85966d59b5db600d09d8746761829dd58cb31ed757f00d9ff6ffefe1774686851f1c09eb961c312"}, {0x60, 0x1, 0x3, "39cb80b95a6a3d031fff7bd6cede01a4862839cc894628ca113f0d0a239fa60bcbaaf0adc51ff7c8543d5212506ff6e692b82b7e0ff1cc52733f343dcae7781aac49babea0d3a5565b73df"}, {0x68, 0x109, 0x4, "4b6df3798d7c008b3fc7a7a49433133decea9ce1772b058c0f031e0803c8faaa943a84eaa41a1c4a87c9fceabfb990daab6c19900526dbde7c1d17bb0953638ebf5a027e8fc37be886a4ffc72223dd2ced1a179d56"}, {0xd0, 0x3a, 0x8000, "9df2610458842000bef7f51a6a4f1fc1842c27ff06552ecf3ccbb2b5a8c7606073e54898f743afea172c7492e07ff43f6260e70f613e68bb559a9511c4aea2db88d46fb799cba333b1a8c039463dfe208e2ffc21b5c7c146f074ece1128e13c163d89b33ac26be2304068e251c1b7e854018891cfd6efd45039c296b0078ce307cead76acba5b158722aa4b2353ea32e831fe8925e85ce2f6a4d924854e1da1df1dc8201fd678f3b0075eef69138e8846ded58a0591039a25786361615"}], 0x3b0}, 0x20004810) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) fanotify_mark(0xffffffffffffffff, 0x90, 0x40100000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000780)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000200)="442d3ad11752a171df318767ddf8", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) setsockopt$MRT_INIT(r5, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000540)={0x11, 0x1, 0xc, 0x8001, @vifc_lcl_ifindex, @local}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'batadv_slave_1\x00'}}]}, 0x38}}, 0x4000000) 1m24.790564282s ago: executing program 1 (id=1234): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) r1 = socket$unix(0x1, 0x1, 0x0) sendmmsg$unix(r1, &(0x7f0000008280), 0x0, 0x20040804) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x4000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)={0x68, r6, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x40}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x68}, 0x1, 0x0, 0x0, 0x2004010}, 0x20000000) sendmmsg$unix(r4, &(0x7f0000001a40), 0x0, 0x40) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$netlink(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x13, 0x1, 0x1, "a90037e7f30f000080df4832c305f70000000000004840080400000000008300", 0x50313459}) syz_usb_connect(0x0, 0x24, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x5d, 0xba, 0xfc, 0x40, 0xbfd, 0x10c, 0x2d16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x21, 0xef, 0xb0}}]}}]}}, 0x0) 1m24.726028556s ago: executing program 4 (id=1235): syz_emit_ethernet(0x4e, &(0x7f0000000140)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a7a096", 0x18, 0x3a, 0x0, @local, @mcast2, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) r0 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{}, 0x0, &(0x7f0000000180)}, 0x1c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f0000000180)={0x5000, 0x6000, 0x2, 0x1, 0x75}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x185220, 0x0) ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0xfffff) syz_open_procfs(0x0, 0x0) syz_open_dev$loop(0x0, 0x5, 0x414202) openat(0xffffffffffffff9c, 0x0, 0x1e3442, 0x0) r8 = socket(0x15, 0x5, 0x0) sendmmsg$inet(r8, 0x0, 0x0, 0xd0) getsockopt(r8, 0x200000000114, 0x271b, 0x0, &(0x7f0000000000)) close(r0) 1m23.477272591s ago: executing program 0 (id=1236): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000240)="7814ad7efe574455d72b8f73c5bdfeb572023b9af5b9d5a7fcc906f1d4768979b529cc191d95068a7681fcdcb035030fea8b3b62a1d00d3c2b6fc8ff687af0769f0be679a3878d7b199df53a37d3194083ef8e08e361587d1abeb7709fb7a2d8dae57b779234835ead595c2ef11ce57b1a7b5d3c765b873a920480c9af2ecf073b35629a9bae48ff", 0x88}, {&(0x7f0000000740)="428381d809a2fbad719de0727cd6b6bd31ef55dba0c2bd249b16bc9160967e39ab318c76f0561e6c5d5baba2993597fb9c8b9ed774eaab9deca698b13f0fac382aad73fba573b3a28d5e7d9472e39eea663d1ca9ff86d83ff2ee7043d127ed2b1139db1ba19ebceaa66d1b027d9d835d33ef11a306a242de009ddc3efea679338ada0b40ff5963f067a219a694f797bb448609faf009e0ae9b934eb08afb430c12b6588e12022e4f1db9170291ee6753a9f7060dff52f2497d876286f84cde877286775ad66490ea7b73d68f220e589ca68753136bbaf04ace17319c6edbf5fc6bf258921eb2756780eda62b2d19ed08426a27ff90378ca75685cd59299f7b18409d493bacd246679d15ef195ebfc52a7f7b599455ebdf307aff43836dad1a1893fc3f2cd2a57ea856796d89cc5ec86863b91c6dd77cb9f059d4d054dfc56943e1fb49769d1e8b33871112ff45e836f8b3aab08005cb5ad84adb9fb966e1d50bf1a8db86779ce0b75047e91d55834fe623df4fa24bf02e82117219b2a035ae393644e702a2bd99ba5c49eb7a298205949d5c1b506f6d15227ba818f8a95cb1ae0fe2ba7990d7b1296c95ea769e3c62616ce80e5ada2750a576a09bc2ea2ac6c44875acc1bcbc1323fd457222aa4c056bff8634f5592da8e6c1a7024954df0d0d0ea9c3ee0925909747981d2371e5656fb295bf72b0b3b8ffdd02ea82dc631dfdf3cda58aa06045c8d3c54eccc1a490f2b74c83c2df3460c1803a0a2a5032d806ad6f096178b6435d4b38b6b3232550f3f37977b6bf0628dc55b0d69c7ae9434383df1759e43303f4825e5499030e95717f175de3124c668a7164c3d9bd94e8797b3582b9220078cb762a4d1c901d9f07fa47847c4835c07bce0cd84ab4d4bdfb18b05640f86a5d8cdebd15b2e838304ac5d51c5bed4e5b8660f4fb2b89d6ba2f421157c1c4230fa380f93d8adc474718eb2c8bb9ff6817a318dcd8bb9d8b68739a4704aff89711f71292a2185f6d87f9b35a19b263fe9b14c0d98370c8237f90450bc7344ebc1d0f88db4e9741eb9b529318a3b3f7e9d32c2b9648a71fb5f277250b23d174de03d6b9f5047c7143b7c6f4f9daa5dd93aac350354c4618a02b03792fa65a27701edb3456c92d39a8cf7f8d0182751c690111747cd5258f1822bce54c0b9668346da9c9fcdb04b568f186aeaadea79070da5a7a50b77e397f27d50fc95309b659b3049f617d229982be68f4d5cad7a50231f2cbb9aebbcaaa3532033a735622c6dd17f53b95a5a87c3c21b4341e2ebdb25bb760ae11f578517c12460e4cba797881e29872f34014c0cf6ed9f2915c8c1efb597f20b2a46bb15339c0c6b20356df1f67ea01f92e3fed718b53eaea50a0261923692c45434d0ea7be3e9a5dbb70fdb9f75dac54adf3cdb81ced615b37a164de99b8a1d4f7f4f399ab344e91338ba9133fc1150ce6e481175e603365fef9c484797654b8efa63707003ca1bb9761f0b6a708c258f6931e0c2a8aad24ff87cf56e08337a01e0c46b5dd2951f08c9bac0149aa91a0470bf487d451a4bebb4921334babb47fb867d365e45454347f08d638ae20c81c7922ca72df21938c323d161a343eaa8bcd5572896cd7fe37438ee85f7c2b816dd1e11a9d29ac7bf0325d4ba333c7cbd7108eecc0c001cc8d0261c0a7dd15b54815030dc2fb29a3f25f06e002f3465c4cb0d5fc394ba45bacb35d04ea7184cd3c42c20bb94e804543fb38165bee73c34cad02fde88a3ca92be3bafeb3f7e07ede2d7b7e596d935af64a09cb8419eb58d8de83adfcfa2e4422205ab1085f92f62bb13e3b0b85d7c008919ca24c2b1c9ad1aa724cf5b1a6", 0x521}], 0x2}}], 0x1, 0x4000000) 1m23.331900149s ago: executing program 0 (id=1237): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x4400, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/13], &(0x7f00000007c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_open_dev$usbfs(0x0, 0x77, 0x141341) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000280)=0x1c) recvmsg(r1, &(0x7f00000005c0)={&(0x7f0000000440)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=""/208, 0xd0}, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$TIOCL_SETVESABLANK(r4, 0x560e, &(0x7f0000000140)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r5, 0x5607, 0x26) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000140)={0x5, 0x4, 0x9fc9}) fsetxattr$security_evm(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=@sha1={0x1, "3933fc4fcd7f28fa0ecc6444e439b367e09176e7"}, 0x15, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'wlan1\x00', {}, 0x108}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f47"]) r6 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 1m23.02588165s ago: executing program 2 (id=1238): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = epoll_create1(0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0x2d, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) syz_clone3(0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) r2 = epoll_create1(0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x40b80) ioctl$CEC_TRANSMIT(r3, 0xc0386105, &(0x7f0000000d40)={0x2, 0x3, 0x3, 0xfffffffc, 0x0, 0x4063, "57c1169b6664e261326ac71ae7213059", 0x0, 0x0, 0x0, 0xfd, 0x5, 0x1}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0xa0000001}) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) close_range(r0, 0xffffffffffffffff, 0x0) 1m22.717653372s ago: executing program 2 (id=1239): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x300}, 0x20008000) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0xc0042, 0x1fe) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffff9, 0x1) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x2) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000080), 0x2, 0x0) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(0x0, 0x80, 0x1, &(0x7f0000000840)={0x0, 0x3938700}, 0x0, 0x2) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000880)={"8b877600", 0xfffd, 0x2, 0x1, 0xe, 0x10000, "327c52b606ca66af7621dc3b3ea8e0", "0cf7f400", "81d322df", "ab31d5d4", ["7248f34e994af0315549cbb4", "af76d3e9b1f7acf22fdd7d84", "2f3aedfb3f87f29a8f24b0a4", "d29d330e6e62cb6f5549820d"]}) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000240)=""/166) socket$kcm(0x29, 0x2, 0x0) memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0xc) mremap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000008000/0x4000)=nil) 1m21.63492822s ago: executing program 1 (id=1240): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000001040)) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x42) open_by_handle_at(r2, &(0x7f0000000380)=ANY=[@ANYRES8=r2], 0x40000) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc04c565d, &(0x7f00000002c0)=@multiplanar_fd={0xc3b4eab, 0x7, 0x4, 0x400, 0x4, {0x77359400}, {0x2, 0x1, 0x7, 0xb, 0x4, 0x3, "f6de8be8"}, 0x7, 0x4, {0x0}, 0x6}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x88}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) read$nci(r3, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCFLSH(r4, 0x80045438, 0x0) r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x10, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xfed, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0xe2df, 0xaa14, 0x1, 0x4, 0x0, 0x7, 0xf58, 0x6]}) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x80000000}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, 0x0, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000340)={0x4, {0x966, 0x1, 0x0, 0x4, 0x615, 0x20000004}}) write$nci(0xffffffffffffffff, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], 0x83) keyctl$read(0x2, 0x0, &(0x7f00000000c0)=""/4096, 0x1000) move_pages(0x0, 0x0, &(0x7f0000000040), &(0x7f0000001280), &(0x7f0000000000), 0x4) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000001240)={[&(0x7f0000001200)='/dev/ptmx\x00']}, &(0x7f0000000a80)={[&(0x7f00000018c0)='.^*%$\'-\\:\x00\xfb\x12#\x19\t\x99n\x1e\xef,NA\xf3)\xc8\xcd\x9bM\x83\x9d\v\x80\xcbU\xdcV\xe4\xff\xa8\xf1']}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000180)={0xfb, 0x8, 0x0, "062383a78614d321eb086bebba55db0dfca05613826fffd4ee640ffed6cd68cb", 0x32314d54}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001000000000047000280050001"], 0xe4}}, 0x0) 1m13.583243688s ago: executing program 1 (id=1241): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002801400038010"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x14) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000180)=0xe) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r7, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003300)=ANY=[@ANYBLOB="3c1100003e00010329bd700000dcdf250300000028"], 0x113c}}, 0x8004) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r9 = fanotify_init(0x8, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, 0x1410, 0x800, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0xfd17, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x0, 0x3, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c910) r10 = epoll_create1(0x0) fcntl$dupfd(r9, 0x0, r10) 1m0.122174194s ago: executing program 2 (id=1242): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x3) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfd, 0x4000000}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r4, 0x200, 0x70bd26, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x402441, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r5, 0x40045109, &(0x7f0000000280)=0x7) socket$packet(0x11, 0x1, 0x300) r6 = getpgid(r1) setpgid(r1, r6) ioctl$KVM_SET_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000300)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000002c0)={0x85, 0x7}}) recvmsg(r2, &(0x7f0000000640)={&(0x7f0000000340)=@qipcrtr, 0x80, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000000440)=""/215, 0xd7}], 0x2, &(0x7f0000000580)=""/157, 0x9d}, 0x60010000) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000680)={'veth1\x00'}) r7 = syz_open_procfs(r6, &(0x7f00000006c0)='net/sctp\x00') kcmp$KCMP_EPOLL_TFD(r1, r6, 0x7, r3, &(0x7f0000000700)={r7, r5, 0xbfb185e}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000780), r7) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r8, 0x100, 0x70bd29, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000085}, 0x20000017) setsockopt$IP_VS_SO_SET_DELDEST(r7, 0x0, 0x488, &(0x7f0000000880)={{0x3c, @remote, 0x4e22, 0x4, 'lblcr\x00', 0x1c, 0x4, 0x65}, {@broadcast, 0x4e23, 0x1, 0x8, 0x1ff, 0xfffffff9}}, 0x44) sendmsg$AUDIT_SET(r7, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x3c, 0x3e9, 0x300, 0x70bd25, 0x25dfdbfd, {0x62, 0x0, 0x2, r6, 0xffffff00, 0x7f, 0x3, 0x5e96, 0x0, 0x73f, 0xa7e}, [""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x20040000) r9 = openat$incfs(r7, &(0x7f0000000a00)='.log\x00', 0x200000, 0x12) io_uring_setup(0x2c13, &(0x7f0000000a40)={0x0, 0xcb8f, 0x1002, 0x0, 0x71, 0x0, r9}) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r9, 0xc1105517, &(0x7f0000000b00)={{0x7, 0x2, 0xd34, 0x4, '\x00', 0x2}, 0x4, 0x4, 0xb65b183c, r1, 0x5, 0xfffffff8, 'syz0\x00', &(0x7f0000000ac0)=['\x00', 'lblcr\x00', '}*\'.\'}$+%){\x00', 'lblcr\x00', '\x00'], 0x1a}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c80), r9) sendmsg$ETHTOOL_MSG_COALESCE_SET(r10, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, r11, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) 0s ago: executing program 32 (id=1237): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x4400, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/13], &(0x7f00000007c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_open_dev$usbfs(0x0, 0x77, 0x141341) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000280)=0x1c) recvmsg(r1, &(0x7f00000005c0)={&(0x7f0000000440)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=""/208, 0xd0}, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$TIOCL_SETVESABLANK(r4, 0x560e, &(0x7f0000000140)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r5, 0x5607, 0x26) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000140)={0x5, 0x4, 0x9fc9}) fsetxattr$security_evm(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=@sha1={0x1, "3933fc4fcd7f28fa0ecc6444e439b367e09176e7"}, 0x15, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'wlan1\x00', {}, 0x108}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f47"]) r6 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) kernel console output (not intermixed with test programs): 723] do_syscall_64+0xcd/0x4c0 [ 278.064735][T13723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.064752][T13723] RIP: 0033:0x7f9696d8ebe9 [ 278.064765][T13723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.064781][T13723] RSP: 002b:00007f9697cd8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 278.064800][T13723] RAX: ffffffffffffffda RBX: 00007f9696fb5fa0 RCX: 00007f9696d8ebe9 [ 278.064810][T13723] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000200000000140 [ 278.064819][T13723] RBP: 00007f9697cd8090 R08: 0000000000000000 R09: 0000000000000000 [ 278.064829][T13723] R10: 0000000000208000 R11: 0000000000000246 R12: 0000000000000001 [ 278.064839][T13723] R13: 00007f9696fb6038 R14: 00007f9696fb5fa0 R15: 00007ffe97968428 [ 278.064854][T13723] [ 278.064866][T13723] ERROR: Out of memory at tomoyo_realpath_from_path. [ 278.065276][ T9] usb 3-1: config 0 descriptor?? [ 278.562634][ T5955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.571885][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.430376][ T9] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 279.443555][ T9] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 279.461866][ T9] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 279.479919][ T9] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 279.569248][ T9] usb 3-1: USB disconnect, device number 31 [ 280.046956][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.133556][T13780] tmpfs: Bad value for 'mpol' [ 280.155052][T13780] loop6: detected capacity change from 0 to 512 [ 280.161700][T13780] Buffer I/O error on dev loop6, logical block 0, async page read [ 280.172940][T13780] Buffer I/O error on dev loop6, logical block 0, async page read [ 280.181148][T13780] Buffer I/O error on dev loop6, logical block 0, async page read [ 280.189749][T13780] Buffer I/O error on dev loop6, logical block 0, async page read [ 280.199098][T13780] Buffer I/O error on dev loop6, logical block 0, async page read [ 280.207851][T13780] Buffer I/O error on dev loop6, logical block 0, async page read [ 280.219829][T13780] Buffer I/O error on dev loop6, logical block 0, async page read [ 280.229385][T13780] Buffer I/O error on dev loop6, logical block 0, async page read [ 280.237875][T13780] ldm_validate_partition_table(): Disk read failed. [ 280.244663][T13780] Buffer I/O error on dev loop6, logical block 0, async page read [ 280.252569][T13780] Buffer I/O error on dev loop6, logical block 0, async page read [ 280.262413][T13780] Dev loop6: unable to read RDB block 0 [ 280.264396][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 280.264409][ T30] audit: type=1400 audit(1755488523.713:904): avc: denied { unmount } for pid=5841 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 280.269139][T13780] loop6: unable to read partition table [ 280.312137][T13780] loop_reread_partitions: partition scan of loop6 () failed (rc=-5) [ 280.351823][T13785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1007'. [ 280.362065][T13785] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1007'. [ 280.417129][ T30] audit: type=1400 audit(1755488523.863:905): avc: denied { ioctl } for pid=13796 comm="syz.2.1011" path="socket:[28036]" dev="sockfs" ino=28036 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 280.483634][T13804] netlink: 'syz.4.1010': attribute type 27 has an invalid length. [ 280.509453][T13808] NILFS (nullb0): couldn't find nilfs on the device [ 280.542258][ T92] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 280.593185][ T6016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.615650][T13810] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 280.702855][ T5954] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 280.714661][ T92] usb 1-1: not running at top speed; connect to a high speed hub [ 280.779000][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 280.789409][ T92] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 280.799873][ T92] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 6 [ 280.809012][ T92] usb 1-1: config 1 has no interface number 1 [ 280.817603][ T92] usb 1-1: config 1 interface 2 has no altsetting 0 [ 280.826481][ T92] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 280.835959][ T92] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.843193][ T5954] usb 3-1: device descriptor read/64, error -71 [ 281.664536][ T6016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.759156][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.787598][ T92] usb 1-1: Product: syz [ 281.802100][ T92] usb 1-1: Manufacturer: syz [ 281.810219][ T92] usb 1-1: SerialNumber: syz [ 281.876623][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.888527][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 281.901632][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 281.914333][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.926449][ T9] usb 5-1: config 0 descriptor?? [ 282.062816][ T5954] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 282.062825][ T6016] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 282.079020][T13780] ldm_validate_partition_table(): Disk read failed. [ 282.085969][T13780] Dev loop6: unable to read RDB block 0 [ 282.091872][T13780] loop6: unable to read partition table [ 282.098269][T13780] loop_reread_partitions: partition scan of loop6 () failed (rc=-5) [ 282.159578][ T92] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 282.181268][ T92] usb 1-1: selecting invalid altsetting 0 [ 282.189191][T13804] bond3: entered promiscuous mode [ 282.201873][T13804] bond3: entered allmulticast mode [ 282.207737][T13804] 8021q: adding VLAN 0 to HW filter on device bond3 [ 282.210051][ T92] usb 1-1: selecting invalid altsetting 0 [ 282.222766][ T5954] usb 3-1: device descriptor read/64, error -71 [ 282.239945][ T30] audit: type=1400 audit(1755488525.683:906): avc: denied { accept } for pid=13799 comm="syz.4.1010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 282.242077][ T5907] usb 5-1: USB disconnect, device number 29 [ 282.259791][ T6016] usb 2-1: Using ep0 maxpacket: 16 [ 282.320502][ T6016] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 282.342258][ T92] usb 1-1: USB disconnect, device number 32 [ 282.344778][ T5954] usb usb3-port1: attempt power cycle [ 282.349157][ T6016] usb 2-1: config 0 has no interface number 0 [ 282.371689][ T6016] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 282.375889][ T5862] udevd[5862]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 282.385750][ T6016] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 282.441641][ T6016] usb 2-1: config 0 interface 41 has no altsetting 0 [ 282.452037][ T6016] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 282.463051][ T6016] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.471233][ T6016] usb 2-1: Product: syz [ 282.476720][ T6016] usb 2-1: Manufacturer: syz [ 282.481480][ T6016] usb 2-1: SerialNumber: syz [ 282.497873][ T6016] usb 2-1: config 0 descriptor?? [ 282.503918][T13825] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 282.511236][T13825] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 282.733241][T13825] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 282.740528][T13825] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 282.748132][ T5954] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 282.790247][ T5954] usb 3-1: device descriptor read/8, error -71 [ 282.840030][ T2148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.042944][ T5954] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 283.097524][ T5954] usb 3-1: device descriptor read/8, error -71 [ 283.243165][ T5954] usb usb3-port1: unable to enumerate USB device [ 283.266312][T13915] 9pnet_fd: Insufficient options for proto=fd [ 283.522771][ T5954] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 285.175826][ T2148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.184371][ T9564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.244492][ T30] audit: type=1400 audit(1755488528.693:907): avc: denied { ioctl } for pid=13928 comm="syz.2.1020" path="socket:[28092]" dev="sockfs" ino=28092 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 285.344032][ T5954] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.376187][ T5954] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 285.395641][ T5954] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 285.415083][ T5954] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 285.436674][ T5954] usb 5-1: SerialNumber: syz [ 285.517225][ T30] audit: type=1400 audit(1755488528.963:908): avc: denied { mount } for pid=13938 comm="syz.0.1022" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 285.548913][ T6016] Error reading MAC address [ 285.569656][ T6016] sr9700 2-1:0.41: probe with driver sr9700 failed with error -71 [ 285.602900][ T57] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 285.607398][ T6016] usb 2-1: USB disconnect, device number 32 [ 285.696834][T13952] netlink: 'syz.3.1023': attribute type 2 has an invalid length. [ 285.704731][T13952] netlink: 'syz.3.1023': attribute type 4 has an invalid length. [ 285.744376][ T57] usb 3-1: device descriptor read/64, error -71 [ 285.843067][ T30] audit: type=1400 audit(1755488529.213:909): avc: denied { create } for pid=13940 comm="syz.3.1023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 285.895259][ T30] audit: type=1400 audit(1755488529.333:910): avc: denied { unmount } for pid=5847 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 286.007534][ T30] audit: type=1800 audit(1755488529.453:911): pid=13958 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1024" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 286.048709][ T57] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 286.104159][ T5954] usb 5-1: 0:2 : does not exist [ 286.109095][ T5954] usb 5-1: unit 5: unexpected type 0x03 [ 286.135483][ T30] audit: type=1400 audit(1755488529.453:912): avc: denied { ioctl } for pid=13948 comm="syz.1.1024" path="socket:[28953]" dev="sockfs" ino=28953 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 286.183551][ T5954] usb 5-1: USB disconnect, device number 30 [ 286.215257][ T2148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.242737][ T57] usb 3-1: device descriptor read/64, error -71 [ 286.550272][ T57] usb usb3-port1: attempt power cycle [ 286.612789][ T9564] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 286.706882][ T30] audit: type=1400 audit(1755488530.153:913): avc: denied { ioctl } for pid=13969 comm="syz.0.1025" path="/dev/sg0" dev="devtmpfs" ino=717 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 286.872751][ T9564] usb 4-1: Using ep0 maxpacket: 16 [ 286.880567][ T9564] usb 4-1: config 0 has an invalid interface number: 145 but max is 0 [ 286.902833][ T9564] usb 4-1: config 0 has no interface number 0 [ 286.912800][ T57] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 286.925567][ T9564] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 286.940293][ T30] audit: type=1400 audit(1755488530.383:914): avc: denied { append } for pid=13991 comm="syz.4.1027" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 287.274981][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.290828][ T9564] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.300957][ T57] usb 3-1: device descriptor read/8, error -71 [ 287.314636][ T9564] usb 4-1: Product: syz [ 287.342900][ T9564] usb 4-1: Manufacturer: syz [ 287.353169][ T9564] usb 4-1: SerialNumber: syz [ 287.358959][ T30] audit: type=1400 audit(1755488530.803:915): avc: denied { connect } for pid=13991 comm="syz.4.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 287.383426][ T9564] usb 4-1: config 0 descriptor?? [ 287.501420][T14006] netlink: 'syz.4.1030': attribute type 20 has an invalid length. [ 287.562867][ T57] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 287.584788][ T57] usb 3-1: device descriptor read/8, error -71 [ 287.647061][T14007] syz0: rxe_newlink: already configured on batadv_slave_1 [ 287.703083][ T57] usb usb3-port1: unable to enumerate USB device [ 287.730053][ T30] audit: type=1400 audit(1755488531.173:916): avc: denied { read write } for pid=13940 comm="syz.3.1023" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 287.782227][ T30] audit: type=1400 audit(1755488531.223:917): avc: denied { shutdown } for pid=13940 comm="syz.3.1023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 288.212803][ T6016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.354045][ T2148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.242823][ T57] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 289.429878][ T2148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.540668][T14043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.571630][T14043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.581091][T14043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.592452][T14043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.601272][T14043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.622774][ T57] usb 3-1: Using ep0 maxpacket: 16 [ 289.636022][ T9564] hub 4-1:0.145: bad descriptor, ignoring hub [ 289.646712][ T9564] hub 4-1:0.145: probe with driver hub failed with error -5 [ 289.681112][ T9564] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.145/input/input21 [ 289.708350][ T57] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.721974][ T57] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.734199][ T57] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 289.753857][ T57] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 289.774871][ T57] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.800710][ T9564] usb 4-1: USB disconnect, device number 29 [ 289.801706][ T57] usb 3-1: config 0 descriptor?? [ 289.806944][ T5855] Bluetooth: hci4: command 0x0405 tx timeout [ 289.962611][T14069] 9pnet_fd: Insufficient options for proto=fd [ 290.370055][ T6016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.433693][ T2148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.522130][ T57] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 290.525554][T14087] ======================================================= [ 290.525554][T14087] WARNING: The mand mount option has been deprecated and [ 290.525554][T14087] and is ignored by this kernel. Remove the mand [ 290.525554][T14087] option from the mount to silence this warning. [ 290.525554][T14087] ======================================================= [ 290.532191][ T57] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max [ 290.648803][ T57] microsoft 0003:045E:07DA.0008: unbalanced collection at end of report description [ 290.649856][ T57] microsoft 0003:045E:07DA.0008: parse failed [ 290.649907][ T57] microsoft 0003:045E:07DA.0008: probe with driver microsoft failed with error -22 [ 290.693891][ T9564] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 290.817670][ T6016] usb 3-1: USB disconnect, device number 40 [ 290.866264][ T9564] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.876653][ T9564] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 290.889360][ T9564] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 290.898982][ T9564] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 290.907570][ T9564] usb 4-1: SerialNumber: syz [ 291.448281][ T9564] usb 4-1: 0:2 : does not exist [ 291.453306][ T9564] usb 4-1: unit 5: unexpected type 0x03 [ 291.485032][ T9564] usb 4-1: USB disconnect, device number 30 [ 291.702789][ T57] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 292.019149][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 292.019163][ T30] audit: type=1326 audit(1755488535.463:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14138 comm="syz.2.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeabd8ebe9 code=0x7ffc0000 [ 292.078508][ T30] audit: type=1326 audit(1755488535.463:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14138 comm="syz.2.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fdeabd8ebe9 code=0x7ffc0000 [ 292.125832][ T57] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 292.134426][ T57] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.145236][ T57] usb 2-1: config 0 has no interface number 0 [ 292.185954][ T57] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 292.233952][ T57] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 292.247169][ T30] audit: type=1326 audit(1755488535.463:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14138 comm="syz.2.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeabd8ebe9 code=0x7ffc0000 [ 292.791553][ T30] audit: type=1326 audit(1755488535.463:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14138 comm="syz.2.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdeabd8ebe9 code=0x7ffc0000 [ 292.830525][ T57] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 292.839774][ T57] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.848193][ T57] usb 2-1: Product: syz [ 292.852390][ T57] usb 2-1: Manufacturer: syz [ 292.857032][ T57] usb 2-1: SerialNumber: syz [ 292.862443][ T57] usb 2-1: config 0 descriptor?? [ 293.180133][ T30] audit: type=1326 audit(1755488535.463:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14138 comm="syz.2.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeabd8ebe9 code=0x7ffc0000 [ 293.300966][ T30] audit: type=1326 audit(1755488535.463:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14138 comm="syz.2.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdeabd8ebe9 code=0x7ffc0000 [ 293.324470][ C1] net_ratelimit: 138 callbacks suppressed [ 293.324484][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.338436][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.428162][ T30] audit: type=1326 audit(1755488535.463:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14138 comm="syz.2.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeabd8ebe9 code=0x7ffc0000 [ 293.455538][ T30] audit: type=1326 audit(1755488535.463:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14138 comm="syz.2.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fdeabd8ebe9 code=0x7ffc0000 [ 293.509471][ T30] audit: type=1326 audit(1755488535.463:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14138 comm="syz.2.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeabd8ebe9 code=0x7ffc0000 [ 293.534078][ T30] audit: type=1326 audit(1755488535.463:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14138 comm="syz.2.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdeabd8ebe9 code=0x7ffc0000 [ 293.557578][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.565749][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.597457][T14167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.433426][ T9564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.567257][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.635856][ T9564] usb 2-1: USB disconnect, device number 33 [ 294.703415][T14198] FAULT_INJECTION: forcing a failure. [ 294.703415][T14198] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 294.717569][T14198] CPU: 1 UID: 0 PID: 14198 Comm: syz.2.1051 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 294.717594][T14198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 294.717603][T14198] Call Trace: [ 294.717609][T14198] [ 294.717615][T14198] dump_stack_lvl+0x16c/0x1f0 [ 294.717635][T14198] should_fail_ex+0x512/0x640 [ 294.717648][T14198] should_fail_alloc_page+0xe7/0x130 [ 294.717662][T14198] prepare_alloc_pages+0x3c2/0x610 [ 294.717677][T14198] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 294.717689][T14198] ? do_user_addr_fault+0x843/0x1370 [ 294.717701][T14198] ? rcu_is_watching+0x12/0xc0 [ 294.717715][T14198] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 294.717730][T14198] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 294.717743][T14198] ? rep_movs_alternative+0x4a/0x90 [ 294.717758][T14198] ? _copy_from_iter+0x15d/0x16f0 [ 294.717772][T14198] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 294.717785][T14198] ? policy_nodemask+0xea/0x4e0 [ 294.717797][T14198] alloc_pages_mpol+0x1fb/0x550 [ 294.717809][T14198] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 294.717822][T14198] alloc_pages_noprof+0x131/0x390 [ 294.717834][T14198] anon_pipe_write+0xbc2/0x1a90 [ 294.717848][T14198] ? get_pid_task+0x61/0x250 [ 294.717859][T14198] ? __pfx_anon_pipe_write+0x10/0x10 [ 294.717870][T14198] ? selinux_file_permission+0x126/0x660 [ 294.717888][T14198] ? bpf_lsm_file_permission+0x9/0x10 [ 294.717902][T14198] ? security_file_permission+0x71/0x210 [ 294.717919][T14198] ? rw_verify_area+0xcf/0x6c0 [ 294.717936][T14198] vfs_write+0x7d0/0x11d0 [ 294.717950][T14198] ? __pfx_anon_pipe_write+0x10/0x10 [ 294.717968][T14198] ? __pfx_vfs_write+0x10/0x10 [ 294.717983][T14198] ? lock_release+0x201/0x2f0 [ 294.718010][T14198] ksys_write+0x1f8/0x250 [ 294.718020][T14198] ? __pfx_ksys_write+0x10/0x10 [ 294.718032][T14198] do_syscall_64+0xcd/0x4c0 [ 294.718043][T14198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.718054][T14198] RIP: 0033:0x7fdeabd8ebe9 [ 294.718064][T14198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.718074][T14198] RSP: 002b:00007fdeacb52038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 294.718085][T14198] RAX: ffffffffffffffda RBX: 00007fdeabfb5fa0 RCX: 00007fdeabd8ebe9 [ 294.718092][T14198] RDX: 0000000000011000 RSI: 0000200000000340 RDI: 0000000000000004 [ 294.718098][T14198] RBP: 00007fdeacb52090 R08: 0000000000000000 R09: 0000000000000000 [ 294.718104][T14198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 294.718109][T14198] R13: 00007fdeabfb6038 R14: 00007fdeabfb5fa0 R15: 00007ffc3395da98 [ 294.718119][T14198] [ 295.062757][T14204] netlink: 'syz.1.1052': attribute type 4 has an invalid length. [ 295.193084][T14210] netlink: 'syz.1.1052': attribute type 4 has an invalid length. [ 295.209925][T14204] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=14204 comm=syz.1.1052 [ 295.612750][T14219] 9pnet_fd: Insufficient options for proto=fd [ 295.661651][T14215] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1053'. [ 295.741810][T14215] netlink: 59 bytes leftover after parsing attributes in process `syz.3.1053'. [ 296.499468][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.802494][ T57] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 296.977221][ T57] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 296.991685][ T57] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 297.016499][ T57] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 297.888412][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.898378][ T57] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 297.906694][ T57] usb 1-1: SerialNumber: syz [ 298.043875][ T9564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.172804][T14235] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=14235 comm=syz.4.1058 [ 298.209527][T14270] misc userio: Begin command sent, but we're already running [ 298.290640][T14278] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1060'. [ 298.494168][ T57] usb 1-1: 0:2 : does not exist [ 298.511534][ T57] usb 1-1: unit 5: unexpected type 0x03 [ 298.887833][ T57] usb 1-1: USB disconnect, device number 33 [ 298.921443][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.006481][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 299.052230][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 299.052365][ T30] audit: type=1400 audit(1755488542.483:942): avc: denied { bind } for pid=14315 comm="syz.4.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 299.057793][T14328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1070'. [ 299.350678][T14344] netlink: 'syz.2.1072': attribute type 20 has an invalid length. [ 299.559014][T14337] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1070'. [ 299.623166][T14352] netlink: 'syz.4.1074': attribute type 5 has an invalid length. [ 299.645105][T14342] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 299.673419][T14349] dvmrp17: entered allmulticast mode [ 299.682293][T14340] dvmrp17: left allmulticast mode [ 299.792884][ T9564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.888143][T14366] vivid-007: ================= START STATUS ================= [ 299.902365][T14366] vivid-007: Generate PTS: true [ 299.907679][T14366] vivid-007: Generate SCR: true [ 299.913065][T14366] tpg source WxH: 320x240 (Y'CbCr) [ 299.918450][T14366] tpg field: 1 [ 299.921848][T14366] tpg crop: (0,0)/320x240 [ 299.930172][T14366] tpg compose: (0,0)/320x240 [ 299.935091][T14366] tpg colorspace: 8 [ 299.939004][T14366] tpg transfer function: 0/0 [ 299.944745][T14366] tpg Y'CbCr encoding: 0/0 [ 299.949334][T14366] tpg quantization: 0/0 [ 299.954811][T14366] tpg RGB range: 0/2 [ 299.972882][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.010703][T14366] vivid-007: ================== END STATUS ================== [ 300.033033][ T5169] Bluetooth: hci4: unexpected event for opcode 0x2062 [ 300.143532][ T57] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 300.302726][ T57] usb 4-1: Using ep0 maxpacket: 8 [ 300.343082][ T57] usb 4-1: unable to get BOS descriptor or descriptor too short [ 300.385922][ T57] usb 4-1: config 4 interface 0 has no altsetting 0 [ 300.396346][ T57] usb 4-1: string descriptor 0 read error: -22 [ 300.402623][ T57] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 300.413081][ T57] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.477705][ T57] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 300.616520][ T57] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 300.628137][ T57] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 300.635616][ T57] usb 4-1: media controller created [ 300.645021][ T57] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 300.728578][ T30] audit: type=1400 audit(1755488544.153:943): avc: denied { append } for pid=14364 comm="syz.3.1078" name="sg0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 300.992935][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.076003][ T6016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.380708][T14409] dvmrp17: entered allmulticast mode [ 301.389221][ T30] audit: type=1400 audit(1755488544.793:944): avc: denied { setopt } for pid=14364 comm="syz.3.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 301.469810][T14409] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 301.633491][T14417] syz.4.1084: attempt to access beyond end of device [ 301.633491][T14417] nbd4: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 301.734728][T14417] hfsplus: unable to find HFS+ superblock [ 302.033097][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.162187][ T57] zl10353_read_register: readreg error (reg=127, ret==0) [ 302.301307][T14406] dvmrp17: left allmulticast mode [ 302.644686][T14433] bridge2: entered promiscuous mode [ 302.656636][ T30] audit: type=1400 audit(1755488546.103:945): avc: denied { watch_mount } for pid=14432 comm="syz.2.1089" path="/201" dev="tmpfs" ino=1079 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 303.073057][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.173046][ T9564] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 303.232821][ T6016] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 303.340389][ T9564] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.351411][ T9564] usb 1-1: config 0 has no interfaces? [ 303.361279][ T9564] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 303.371194][ T9564] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.400509][ T9564] usb 1-1: config 0 descriptor?? [ 303.406140][T14454] netlink: 'syz.1.1093': attribute type 20 has an invalid length. [ 303.421523][ T6016] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.462776][ T6016] usb 3-1: config 0 has no interfaces? [ 303.481142][ T6016] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 303.495434][ T6016] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.534961][T14458] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 303.535441][T14454] dvmrp17: entered allmulticast mode [ 303.663046][ T6016] usb 3-1: config 0 descriptor?? [ 303.698812][T14452] dvmrp17: left allmulticast mode [ 303.708045][ T92] usb 1-1: USB disconnect, device number 34 [ 303.721972][T14466] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1094'. [ 303.733610][T14466] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1094'. [ 303.762212][ T57] usb 4-1: USB disconnect, device number 31 [ 303.773561][T14466] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1094'. [ 303.785754][T14466] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1094'. [ 303.817114][T14477] fuse: Bad value for 'fd' [ 303.889446][T14466] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1094'. [ 303.899314][T14445] FAULT_INJECTION: forcing a failure. [ 303.899314][T14445] name failslab, interval 1, probability 0, space 0, times 0 [ 303.912117][T14445] CPU: 0 UID: 0 PID: 14445 Comm: syz.2.1092 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 303.912134][T14445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 303.912140][T14445] Call Trace: [ 303.912144][T14445] [ 303.912147][T14445] dump_stack_lvl+0x16c/0x1f0 [ 303.912163][T14445] should_fail_ex+0x512/0x640 [ 303.912177][T14445] should_failslab+0xc2/0x120 [ 303.912191][T14445] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 303.912203][T14445] ? __alloc_skb+0x2b2/0x380 [ 303.912214][T14445] __alloc_skb+0x2b2/0x380 [ 303.912223][T14445] ? __pfx___alloc_skb+0x10/0x10 [ 303.912232][T14445] ? trace_event_buffer_commit+0x204/0xa50 [ 303.912246][T14445] ? rcu_is_watching+0x12/0xc0 [ 303.912261][T14445] alloc_skb_with_frags+0xe0/0x860 [ 303.912274][T14445] sock_alloc_send_pskb+0x7fb/0x990 [ 303.912291][T14445] ? avc_has_perm+0x144/0x1f0 [ 303.912302][T14445] ? __pfx_avc_has_perm+0x10/0x10 [ 303.912312][T14445] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 303.912329][T14445] ? sock_has_perm+0x259/0x2f0 [ 303.912342][T14445] ? __pfx_sock_has_perm+0x10/0x10 [ 303.912355][T14445] hci_sock_sendmsg+0x1c7/0x25f0 [ 303.912373][T14445] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 303.912391][T14445] sock_write_iter+0x4ff/0x5b0 [ 303.912404][T14445] ? __pfx_sock_write_iter+0x10/0x10 [ 303.912417][T14445] ? lock_release+0x201/0x2f0 [ 303.912435][T14445] ? bpf_lsm_file_permission+0x9/0x10 [ 303.912449][T14445] ? security_file_permission+0x71/0x210 [ 303.912466][T14445] ? rw_verify_area+0xcf/0x6c0 [ 303.912483][T14445] vfs_write+0x7d0/0x11d0 [ 303.912493][T14445] ? __pfx_sock_write_iter+0x10/0x10 [ 303.912506][T14445] ? __pfx_vfs_write+0x10/0x10 [ 303.912516][T14445] ? lock_release+0x201/0x2f0 [ 303.912534][T14445] ksys_write+0x1f8/0x250 [ 303.912544][T14445] ? __pfx_ksys_write+0x10/0x10 [ 303.912556][T14445] do_syscall_64+0xcd/0x4c0 [ 303.912567][T14445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.912579][T14445] RIP: 0033:0x7fdeabd8ebe9 [ 303.912587][T14445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.912597][T14445] RSP: 002b:00007fdeacb52038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 303.912608][T14445] RAX: ffffffffffffffda RBX: 00007fdeabfb5fa0 RCX: 00007fdeabd8ebe9 [ 303.912614][T14445] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000005 [ 303.912620][T14445] RBP: 00007fdeacb52090 R08: 0000000000000000 R09: 0000000000000000 [ 303.912626][T14445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.912632][T14445] R13: 00007fdeabfb6038 R14: 00007fdeabfb5fa0 R15: 00007ffc3395da98 [ 303.912641][T14445] [ 304.174164][ C0] vkms_vblank_simulate: vblank timer overrun [ 304.181330][T14466] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1094'. [ 304.190440][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.198525][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.200609][ T6016] usb 3-1: USB disconnect, device number 41 [ 304.217027][ T57] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 304.301708][ T30] audit: type=1400 audit(1755488547.743:946): avc: denied { connect } for pid=14495 comm="syz.4.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 304.353574][ T57] usb 4-1: device descriptor read/64, error -71 [ 304.608526][ T57] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 304.742349][ T30] audit: type=1400 audit(1755488548.183:947): avc: denied { connect } for pid=14513 comm="syz.2.1101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 304.763743][ T57] usb 4-1: device descriptor read/64, error -71 [ 304.873162][ T57] usb usb4-port1: attempt power cycle [ 305.349858][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.361390][ T57] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 305.383352][ T57] usb 4-1: device descriptor read/8, error -71 [ 306.131518][ T57] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 306.176751][ T57] usb 4-1: device descriptor read/8, error -71 [ 306.314830][ T57] usb usb4-port1: unable to enumerate USB device [ 306.449030][T14553] FAULT_INJECTION: forcing a failure. [ 306.449030][T14553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.492619][T14553] CPU: 0 UID: 0 PID: 14553 Comm: syz.2.1108 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 306.492646][T14553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 306.492659][T14553] Call Trace: [ 306.492664][T14553] [ 306.492670][T14553] dump_stack_lvl+0x16c/0x1f0 [ 306.492692][T14553] should_fail_ex+0x512/0x640 [ 306.492713][T14553] _copy_to_user+0x32/0xd0 [ 306.492734][T14553] simple_read_from_buffer+0xcb/0x170 [ 306.492754][T14553] proc_fail_nth_read+0x197/0x240 [ 306.492775][T14553] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 306.492799][T14553] ? security_file_permission+0x71/0x210 [ 306.492826][T14553] ? rw_verify_area+0xcf/0x6c0 [ 306.492851][T14553] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 306.492869][T14553] vfs_read+0x1e4/0xcf0 [ 306.492886][T14553] ? __pfx___mutex_lock+0x10/0x10 [ 306.492905][T14553] ? __pfx_vfs_read+0x10/0x10 [ 306.492920][T14553] ? __fget_files+0x204/0x3c0 [ 306.492937][T14553] ? rcu_is_watching+0x12/0xc0 [ 306.492959][T14553] ? __fget_files+0x20e/0x3c0 [ 306.492977][T14553] ksys_read+0x12a/0x250 [ 306.492990][T14553] ? __pfx_ksys_read+0x10/0x10 [ 306.493005][T14553] ? rcu_is_watching+0x12/0xc0 [ 306.493025][T14553] do_syscall_64+0xcd/0x4c0 [ 306.493044][T14553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.493061][T14553] RIP: 0033:0x7fdeabd8d5fc [ 306.493075][T14553] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 306.493092][T14553] RSP: 002b:00007fdeacb52030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 306.493108][T14553] RAX: ffffffffffffffda RBX: 00007fdeabfb5fa0 RCX: 00007fdeabd8d5fc [ 306.493119][T14553] RDX: 000000000000000f RSI: 00007fdeacb520a0 RDI: 0000000000000005 [ 306.493129][T14553] RBP: 00007fdeacb52090 R08: 0000000000000000 R09: 0000000000000000 [ 306.493139][T14553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.493148][T14553] R13: 00007fdeabfb6038 R14: 00007fdeabfb5fa0 R15: 00007ffc3395da98 [ 306.493164][T14553] [ 306.494622][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.006217][T14556] netlink: 'syz.0.1109': attribute type 20 has an invalid length. [ 307.025379][T14556] dvmrp17: entered allmulticast mode [ 307.032474][T14556] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 307.039679][T14555] dvmrp17: left allmulticast mode [ 307.492617][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.554606][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.532800][ T57] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 308.966935][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.124923][T14603] vivid-007: ================= START STATUS ================= [ 309.186801][ T57] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.202272][T14603] vivid-007: Generate PTS: true [ 309.207933][T14603] vivid-007: Generate SCR: true [ 309.215107][ T57] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 309.217192][T14603] tpg source WxH: 320x240 (Y'CbCr) [ 309.231485][T14603] tpg field: 1 [ 309.235708][ T57] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.340313][ T57] usb 1-1: config 0 descriptor?? [ 309.347396][T14603] tpg crop: (0,0)/320x240 [ 309.462844][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.612723][T14603] tpg compose: (0,0)/320x240 [ 309.619162][T14603] tpg colorspace: 8 [ 309.624723][T14603] tpg transfer function: 0/0 [ 309.629766][T14603] tpg Y'CbCr encoding: 0/0 [ 309.635952][T14603] tpg quantization: 0/0 [ 309.642601][T14603] tpg RGB range: 0/2 [ 309.731051][T14603] vivid-007: ================== END STATUS ================== [ 309.775625][ T57] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 309.806555][ T57] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0009/input/input24 [ 309.994922][ T57] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 310.048994][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.347244][ T57] usb 1-1: USB disconnect, device number 35 [ 310.512907][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.590626][ T30] audit: type=1400 audit(1755488554.033:948): avc: denied { read } for pid=14673 comm="syz.1.1124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 310.762067][T14678] netlink: 'syz.1.1125': attribute type 20 has an invalid length. [ 310.791409][ T92] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 311.003449][T14677] dvmrp17: entered allmulticast mode [ 311.010209][T14677] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 311.017913][T14676] dvmrp17: left allmulticast mode [ 311.078115][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.096444][T14692] 9pnet_fd: Insufficient options for proto=fd [ 311.134451][ T92] usb 3-1: unable to get BOS descriptor or descriptor too short [ 311.147174][ T92] usb 3-1: config 2 has an invalid interface number: 218 but max is 0 [ 311.162309][ T92] usb 3-1: config 2 has no interface number 0 [ 311.170180][ T92] usb 3-1: config 2 interface 218 has no altsetting 0 [ 311.179430][ T92] usb 3-1: New USB device found, idVendor=0cf3, idProduct=7015, bcdDevice=95.ef [ 311.189393][ T92] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.197541][ T92] usb 3-1: Product: syz [ 311.201997][ T92] usb 3-1: Manufacturer: syz [ 311.212791][ T92] usb 3-1: SerialNumber: syz [ 311.406151][ T5900] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 311.492825][ T92] usb 3-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 311.504034][ T92] usb 3-1: USB disconnect, device number 42 [ 311.673428][ T5900] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 311.719581][ T5900] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 311.739024][ T5900] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 311.760846][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 311.770866][ T5900] usb 5-1: SerialNumber: syz [ 312.055065][T14729] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1133'. [ 312.115043][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.162837][T14729] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1133'. [ 312.316095][ T5900] usb 5-1: 0:2 : does not exist [ 312.462816][T14749] Invalid logical block size (6) [ 312.462839][ T5900] usb 5-1: unit 5: unexpected type 0x03 [ 312.601985][ T5900] usb 5-1: USB disconnect, device number 31 [ 312.708252][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 312.913026][T14777] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1141'. [ 312.922022][T14777] netlink: 59 bytes leftover after parsing attributes in process `syz.4.1141'. [ 313.072967][T14783] netlink: 'syz.0.1142': attribute type 20 has an invalid length. [ 313.149381][T14783] dvmrp17: entered allmulticast mode [ 313.182068][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.184713][T14783] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 313.260233][T14779] dvmrp17: left allmulticast mode [ 313.378346][ T30] audit: type=1400 audit(1755488556.763:949): avc: denied { execute } for pid=14788 comm="syz.2.1144" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=31040 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 313.796677][ T6016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.193655][ T30] audit: type=1400 audit(1755488557.643:950): avc: denied { ioctl } for pid=14833 comm="syz.4.1147" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 314.240693][ T30] audit: type=1400 audit(1755488557.683:951): avc: denied { read } for pid=14839 comm="syz.2.1148" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 314.251626][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.909210][ T6016] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 314.917867][ T30] audit: type=1400 audit(1755488558.073:952): avc: denied { mounton } for pid=14851 comm="syz.0.1150" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 314.951716][ T30] audit: type=1400 audit(1755488558.073:953): avc: denied { mount } for pid=14851 comm="syz.0.1150" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 315.007598][ T30] audit: type=1400 audit(1755488558.173:954): avc: denied { create } for pid=14851 comm="syz.0.1150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 315.008387][T14864] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1153'. [ 315.035145][ T30] audit: type=1400 audit(1755488558.273:955): avc: denied { write } for pid=14851 comm="syz.0.1150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 315.060303][ T30] audit: type=1400 audit(1755488558.273:956): avc: denied { read } for pid=14851 comm="syz.0.1150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 315.080553][ C1] vkms_vblank_simulate: vblank timer overrun [ 315.087751][ T30] audit: type=1400 audit(1755488558.343:957): avc: denied { map_create } for pid=14851 comm="syz.0.1150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 315.113249][T14868] 9pnet_fd: Insufficient options for proto=fd [ 315.159067][ T6016] usb 5-1: unable to get BOS descriptor or descriptor too short [ 315.173146][ T6016] usb 5-1: config 2 has an invalid interface number: 218 but max is 0 [ 315.181342][ T6016] usb 5-1: config 2 has no interface number 0 [ 315.194762][ T6016] usb 5-1: config 2 interface 218 has no altsetting 0 [ 315.215051][ T5900] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 315.281458][ T6016] usb 5-1: New USB device found, idVendor=0cf3, idProduct=7015, bcdDevice=95.ef [ 315.291031][ T6016] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.300098][ T6016] usb 5-1: Product: syz [ 315.304666][ T6016] usb 5-1: Manufacturer: syz [ 315.309271][ T6016] usb 5-1: SerialNumber: syz [ 315.323024][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.386328][ T57] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 315.397099][ T5900] usb 1-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 315.406211][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.414607][ T5900] usb 1-1: Product: syz [ 315.418793][ T5900] usb 1-1: Manufacturer: syz [ 315.423433][ T5900] usb 1-1: SerialNumber: syz [ 315.429513][ T5900] usb 1-1: config 0 descriptor?? [ 315.435510][ T5900] kvaser_usb 1-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 315.525917][ T6016] usb 5-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 315.541228][ T6016] usb 5-1: USB disconnect, device number 32 [ 315.554178][ T57] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 315.565528][ T57] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 315.577290][ T57] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 315.586506][ T57] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 315.595059][ T57] usb 2-1: SerialNumber: syz [ 315.806017][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 315.806033][ T30] audit: type=1400 audit(1755488559.253:986): avc: denied { map } for pid=14861 comm="syz.1.1151" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 315.842510][ T57] usb 2-1: 0:2 : does not exist [ 315.847539][ T57] usb 2-1: unit 5: unexpected type 0x03 [ 315.858946][ T57] usb 2-1: USB disconnect, device number 34 [ 315.987847][ T30] audit: type=1400 audit(1755488559.433:987): avc: denied { ioctl } for pid=14922 comm="syz.3.1158" path="socket:[31260]" dev="sockfs" ino=31260 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 316.012753][ C1] vkms_vblank_simulate: vblank timer overrun [ 316.019025][ T30] audit: type=1400 audit(1755488559.433:988): avc: denied { bind } for pid=14922 comm="syz.3.1158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 316.038600][ T30] audit: type=1400 audit(1755488559.433:989): avc: denied { append } for pid=14922 comm="syz.3.1158" name="v4l-subdev4" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 316.061839][ C1] vkms_vblank_simulate: vblank timer overrun [ 316.167560][ T30] audit: type=1400 audit(1755488559.613:990): avc: denied { create } for pid=14929 comm="syz.4.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 316.199479][T14931] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1159'. [ 316.293294][T14932] netlink: 'syz.4.1161': attribute type 20 has an invalid length. [ 316.442868][T14931] netlink: 59 bytes leftover after parsing attributes in process `syz.2.1159'. [ 316.444471][T14932] dvmrp17: entered allmulticast mode [ 316.481906][ T30] audit: type=1400 audit(1755488559.643:991): avc: denied { execute } for pid=14924 comm="syz.2.1159" name="file0" dev="tmpfs" ino=1160 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 316.484568][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.566566][ T30] audit: type=1400 audit(1755488559.643:992): avc: denied { execute_no_trans } for pid=14924 comm="syz.2.1159" path="/216/file0" dev="tmpfs" ino=1160 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 316.591250][ T30] audit: type=1400 audit(1755488559.643:993): avc: denied { create } for pid=14924 comm="syz.2.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 316.621375][T14930] syz0: rxe_newlink: already configured on batadv_slave_1 [ 316.628987][T14929] dvmrp17: left allmulticast mode [ 316.636177][ T30] audit: type=1400 audit(1755488559.643:994): avc: denied { write } for pid=14924 comm="syz.2.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 317.047703][ T6016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.077238][ T30] audit: type=1400 audit(1755488559.653:995): avc: denied { create } for pid=14929 comm="syz.4.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 317.077987][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.096638][ C1] vkms_vblank_simulate: vblank timer overrun [ 317.113318][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.218039][ T5900] usb 1-1: USB disconnect, device number 36 [ 317.589629][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.653230][ T57] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 317.882786][ T57] usb 3-1: Using ep0 maxpacket: 16 [ 317.889210][ T57] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.900259][ T57] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.910052][ T57] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 317.919209][ T57] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.928995][ T57] usb 3-1: config 0 descriptor?? [ 318.364972][ T57] usbhid 3-1:0.0: can't add hid device: -71 [ 318.385776][ T57] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 318.402419][ T57] usb 3-1: USB disconnect, device number 43 [ 318.592838][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.637534][T15012] vivid-007: ================= START STATUS ================= [ 318.645381][T15012] vivid-007: Generate PTS: true [ 318.650446][T15012] vivid-007: Generate SCR: true [ 318.655647][T15012] tpg source WxH: 320x240 (Y'CbCr) [ 318.660781][T15012] tpg field: 1 [ 318.664174][T15012] tpg crop: (0,0)/320x240 [ 318.668498][T15012] tpg compose: (0,0)/320x240 [ 318.673197][T15012] tpg colorspace: 8 [ 318.677014][T15012] tpg transfer function: 0/0 [ 318.681584][T15012] tpg Y'CbCr encoding: 0/0 [ 318.686038][T15012] tpg quantization: 0/0 [ 318.690181][T15012] tpg RGB range: 0/2 [ 318.694747][T15012] vivid-007: ================== END STATUS ================== [ 318.705498][ T5169] Bluetooth: hci1: unexpected event for opcode 0x2062 [ 318.965619][T14942] Process accounting resumed [ 319.004006][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.072711][ T6016] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 319.167270][T15027] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1175'. [ 319.234189][ T6016] usb 4-1: config 1 interface 0 has no altsetting 0 [ 319.244909][ T6016] usb 4-1: New USB device found, idVendor=056a, idProduct=0326, bcdDevice= 0.40 [ 319.327851][ T6016] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.373572][ T6016] usb 4-1: Product: syz [ 319.379307][ T6016] usb 4-1: Manufacturer: à°‡ [ 319.385918][ T6016] usb 4-1: SerialNumber: syz [ 319.603946][T15034] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 319.697891][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.333724][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.657959][T15047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.666532][T15047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.675214][T15047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.690485][T15047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.698846][T15047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.721161][T15047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.729654][T15047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.738123][T15047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.746309][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.991579][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 320.991595][ T30] audit: type=1400 audit(1755488564.433:1027): avc: denied { read } for pid=15052 comm="syz.2.1181" name="binder0" dev="binder" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 321.021346][ T30] audit: type=1400 audit(1755488564.433:1028): avc: denied { open } for pid=15052 comm="syz.2.1181" path="/dev/binderfs/binder0" dev="binder" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 321.098317][ T30] audit: type=1400 audit(1755488564.523:1029): avc: denied { bind } for pid=15052 comm="syz.2.1181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 321.117972][ T30] audit: type=1400 audit(1755488564.523:1030): avc: denied { write } for pid=15052 comm="syz.2.1181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 321.451276][T15067] netlink: 'syz.0.1184': attribute type 20 has an invalid length. [ 321.748996][ T6016] usbhid 4-1:1.0: can't add hid device: -71 [ 321.755171][ T6016] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 321.766344][ T6016] usb 4-1: USB disconnect, device number 36 [ 321.780453][ T30] audit: type=1400 audit(1755488565.223:1031): avc: denied { remount } for pid=15080 comm="syz.3.1186" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 321.933061][ T57] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 322.152758][ T57] usb 2-1: Using ep0 maxpacket: 16 [ 322.271574][ T57] usb 2-1: config 0 has an invalid interface number: 58 but max is 0 [ 322.288530][ T57] usb 2-1: config 0 has no interface number 0 [ 322.297401][ T57] usb 2-1: config 0 interface 58 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 322.310549][ T30] audit: type=1400 audit(1755488565.743:1032): avc: denied { create } for pid=15094 comm="syz.2.1188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 322.311191][ T57] usb 2-1: New USB device found, idVendor=1b3d, idProduct=012b, bcdDevice= 3.d3 [ 322.340353][ T57] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.350742][ T57] usb 2-1: Product: syz [ 322.355382][ T57] usb 2-1: Manufacturer: syz [ 322.362352][ T30] audit: type=1400 audit(1755488565.743:1033): avc: denied { block_suspend } for pid=15094 comm="syz.2.1188" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 322.370218][ T57] usb 2-1: SerialNumber: syz [ 322.404878][ T57] usb 2-1: config 0 descriptor?? [ 322.413535][ T57] ftdi_sio 2-1:0.58: FTDI USB Serial Device converter detected [ 322.425503][ T57] ftdi_sio ttyUSB0: unknown device type: 0x3d3 [ 322.582884][ T6016] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 322.692910][ T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 323.022727][ T9] usb 5-1: device descriptor read/64, error -71 [ 323.035808][ T6016] usb 4-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 323.045170][ T6016] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.054262][ T6016] usb 4-1: Product: syz [ 323.066725][ T6016] usb 4-1: Manufacturer: syz [ 323.073436][ T6016] usb 4-1: SerialNumber: syz [ 323.086628][ T6016] usb 4-1: config 0 descriptor?? [ 323.096320][ T6016] kvaser_usb 4-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 323.134725][T15125] vivid-007: ================= START STATUS ================= [ 323.142482][T15125] vivid-007: Generate PTS: true [ 323.149539][T15125] vivid-007: Generate SCR: true [ 323.155426][T15125] tpg source WxH: 320x240 (Y'CbCr) [ 323.160590][T15125] tpg field: 1 [ 323.164924][T15125] tpg crop: (0,0)/320x240 [ 323.169300][T15125] tpg compose: (0,0)/320x240 [ 323.174165][T15125] tpg colorspace: 8 [ 323.178056][T15125] tpg transfer function: 0/0 [ 323.183757][T15125] tpg Y'CbCr encoding: 0/0 [ 323.189146][T15125] tpg quantization: 0/0 [ 323.193527][T15125] tpg RGB range: 0/2 [ 323.197469][T15125] vivid-007: ================== END STATUS ================== [ 323.208562][ T5169] Bluetooth: hci3: unexpected event for opcode 0x2062 [ 323.339548][ T9] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 323.428069][ T30] audit: type=1400 audit(1755488566.873:1034): avc: denied { create } for pid=15069 comm="syz.1.1185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 323.475680][ T9] usb 5-1: device descriptor read/64, error -71 [ 323.596257][ T9] usb usb5-port1: attempt power cycle [ 323.623028][ T30] audit: type=1400 audit(1755488567.003:1035): avc: denied { getopt } for pid=15135 comm="syz.2.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 323.963934][ T9] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 324.013144][ T9] usb 5-1: device descriptor read/8, error -71 [ 324.552728][ T30] audit: type=1400 audit(1755488567.813:1036): avc: denied { module_request } for pid=15142 comm="syz.0.1197" kmod="net-pf-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 324.581019][ T9] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 324.605915][ T9] usb 5-1: device descriptor read/8, error -71 [ 324.722883][ T9] usb usb5-port1: unable to enumerate USB device [ 324.861505][ T57] usb 4-1: USB disconnect, device number 37 [ 324.913152][ T5169] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 324.921628][ T5169] Bluetooth: hci2: Injecting HCI hardware error event [ 324.928703][ T5855] Bluetooth: hci2: hardware error 0x00 [ 325.023662][ T2148] usb 2-1: USB disconnect, device number 35 [ 325.068658][ T2148] ftdi_sio 2-1:0.58: device disconnected [ 325.115145][T15182] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1203'. [ 325.124777][T15182] NCSI netlink: No device for ifindex 0 [ 325.145658][T15182] bridge0: port 3(veth0_to_bridge) entered blocking state [ 325.153298][T15182] bridge0: port 3(veth0_to_bridge) entered disabled state [ 325.161244][T15182] veth0_to_bridge: entered allmulticast mode [ 325.168701][T15182] veth0_to_bridge: entered promiscuous mode [ 325.176515][T15163] kvm: pic: non byte write [ 325.187868][T15182] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 325.200429][T15182] bridge0: port 3(veth0_to_bridge) entered blocking state [ 325.207629][T15182] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 325.238698][T15190] vivid-007: ================= START STATUS ================= [ 325.238709][T15190] vivid-007: Generate PTS: true [ 325.238721][T15190] vivid-007: Generate SCR: true [ 325.238732][T15190] tpg source WxH: 320x240 (Y'CbCr) [ 325.238740][T15190] tpg field: 1 [ 325.238744][T15190] tpg crop: (0,0)/320x240 [ 325.238751][T15190] tpg compose: (0,0)/320x240 [ 325.238758][T15190] tpg colorspace: 8 [ 325.238762][T15190] tpg transfer function: 0/0 [ 325.238767][T15190] tpg Y'CbCr encoding: 0/0 [ 325.238772][T15190] tpg quantization: 0/0 [ 325.238777][T15190] tpg RGB range: 0/2 [ 325.238781][T15190] vivid-007: ================== END STATUS ================== [ 325.240640][ T5169] Bluetooth: hci3: unexpected event for opcode 0x2062 [ 325.442417][T15198] FAULT_INJECTION: forcing a failure. [ 325.442417][T15198] name failslab, interval 1, probability 0, space 0, times 0 [ 325.456856][T15198] CPU: 1 UID: 0 PID: 15198 Comm: syz.0.1205 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 325.456881][T15198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 325.456890][T15198] Call Trace: [ 325.456895][T15198] [ 325.456902][T15198] dump_stack_lvl+0x16c/0x1f0 [ 325.456924][T15198] should_fail_ex+0x512/0x640 [ 325.456943][T15198] ? fuse_dev_do_write+0x1c50/0x3420 [ 325.456966][T15198] should_failslab+0xc2/0x120 [ 325.456986][T15198] __kmalloc_noprof+0xd2/0x510 [ 325.457003][T15198] ? fuse_copy_do+0x31b/0x430 [ 325.457023][T15198] fuse_dev_do_write+0x1c50/0x3420 [ 325.457047][T15198] ? _parse_integer_limit+0x17f/0x1d0 [ 325.457076][T15198] ? __pfx_fuse_dev_do_write+0x10/0x10 [ 325.457097][T15198] ? __pfx__kstrtoull+0x10/0x10 [ 325.457116][T15198] ? kstrtouint+0xdd/0x130 [ 325.457130][T15198] ? __pfx_kstrtouint+0x10/0x10 [ 325.457148][T15198] ? kstrtouint_from_user+0x13c/0x1d0 [ 325.457164][T15198] ? __asan_memset+0x23/0x50 [ 325.457190][T15198] fuse_dev_write+0x155/0x1e0 [ 325.457212][T15198] ? __pfx_fuse_dev_write+0x10/0x10 [ 325.457237][T15198] ? bpf_lsm_file_permission+0x9/0x10 [ 325.457263][T15198] ? security_file_permission+0x71/0x210 [ 325.457288][T15198] ? rw_verify_area+0xcf/0x6c0 [ 325.457313][T15198] vfs_write+0x7d0/0x11d0 [ 325.457329][T15198] ? __pfx_fuse_dev_write+0x10/0x10 [ 325.457353][T15198] ? __pfx_vfs_write+0x10/0x10 [ 325.457370][T15198] ? lock_release+0x201/0x2f0 [ 325.457401][T15198] ksys_write+0x12a/0x250 [ 325.457417][T15198] ? __pfx_ksys_write+0x10/0x10 [ 325.457432][T15198] ? xfd_validate_state+0x61/0x180 [ 325.457462][T15198] do_syscall_64+0xcd/0x4c0 [ 325.457481][T15198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.457498][T15198] RIP: 0033:0x7f10d6b8ebe9 [ 325.457511][T15198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.457527][T15198] RSP: 002b:00007f10d7a95038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 325.457549][T15198] RAX: ffffffffffffffda RBX: 00007f10d6db6180 RCX: 00007f10d6b8ebe9 [ 325.457560][T15198] RDX: 0000000000000030 RSI: 0000200000000140 RDI: 0000000000000004 [ 325.457570][T15198] RBP: 00007f10d7a95090 R08: 0000000000000000 R09: 0000000000000000 [ 325.457580][T15198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.457590][T15198] R13: 00007f10d6db6218 R14: 00007f10d6db6180 R15: 00007ffdf5552d88 [ 325.457606][T15198] [ 325.703166][ C1] vkms_vblank_simulate: vblank timer overrun [ 326.042615][ T5907] net_ratelimit: 90 callbacks suppressed [ 326.042634][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.446344][ T5955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.463675][ T5907] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 326.914638][T15236] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 327.129636][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 327.129671][ T30] audit: type=1400 audit(1755488570.343:1038): avc: denied { mount } for pid=15233 comm="syz.4.1212" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 327.133496][ T5855] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 327.176721][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.205609][ T30] audit: type=1400 audit(1755488570.363:1039): avc: denied { unlink } for pid=15233 comm="syz.4.1212" name="#14" dev="tmpfs" ino=1222 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 327.228096][ C1] vkms_vblank_simulate: vblank timer overrun [ 327.313741][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 327.325906][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 327.337981][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 327.350049][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 327.362101][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 327.374154][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 327.386197][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 327.742805][ T2148] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 327.762800][ T5907] usb 1-1: Using ep0 maxpacket: 8 [ 327.812761][ T5893] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 329.847015][ T30] audit: type=1400 audit(1755488570.373:1040): avc: denied { mount } for pid=15233 comm="syz.4.1212" name="/" dev="overlay" ino=1217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 329.883374][ T5907] usb 1-1: device descriptor read/all, error -71 [ 329.892040][ T30] audit: type=1400 audit(1755488571.133:1041): avc: denied { unmount } for pid=5841 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 329.911740][ C1] vkms_vblank_simulate: vblank timer overrun [ 330.051381][ T30] audit: type=1400 audit(1755488573.463:1042): avc: denied { unmount } for pid=5841 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 330.105523][ T2148] usb 4-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 330.249697][ T2148] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.465971][ T2148] usb 4-1: Product: syz [ 330.526592][ T2148] usb 4-1: Manufacturer: syz [ 331.042691][ C0] net_ratelimit: 34123 callbacks suppressed [ 331.042711][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 331.060756][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 331.072895][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 331.085012][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 331.097193][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 331.109319][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 331.121403][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 331.133494][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 331.145720][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 331.157824][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 331.287079][ T2148] usb 4-1: SerialNumber: syz [ 331.389559][ T2148] usb 4-1: config 0 descriptor?? [ 331.413014][ T2148] usb 4-1: can't set config #0, error -71 [ 331.425513][T15252] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1214'. [ 331.434789][T15252] netlink: 59 bytes leftover after parsing attributes in process `syz.0.1214'. [ 331.459051][ T2148] usb 4-1: USB disconnect, device number 38 [ 331.516536][ T30] audit: type=1400 audit(1755488574.913:1043): avc: denied { create } for pid=15249 comm="syz.4.1213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 334.762649][ C0] sched: DL replenish lagged too much [ 335.533417][ T5893] usb 2-1: device descriptor read/64, error -110 [ 335.540458][ T30] audit: type=1400 audit(1755488574.993:1044): avc: denied { bind } for pid=15249 comm="syz.4.1213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 335.562245][ T30] audit: type=1400 audit(1755488575.003:1045): avc: denied { accept } for pid=15249 comm="syz.4.1213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 335.582077][ T30] audit: type=1400 audit(1755488575.013:1046): avc: denied { setopt } for pid=15249 comm="syz.4.1213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 336.052709][ C0] net_ratelimit: 42002 callbacks suppressed [ 336.052724][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 336.070761][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 336.082887][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 336.094948][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 336.107066][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 336.119160][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 336.131213][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 336.143276][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 336.155330][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 336.167382][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 336.297245][ T30] audit: type=1400 audit(1755488575.123:1047): avc: denied { read } for pid=15249 comm="syz.4.1213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 336.332791][ T2148] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 336.340511][ T5893] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 336.992928][ T2148] usb 4-1: device descriptor read/64, error -71 [ 337.262752][ T5893] usb 2-1: device descriptor read/64, error -32 [ 337.372863][ T5893] usb usb2-port1: attempt power cycle [ 337.387664][ T2148] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 338.637865][ T30] audit: type=1400 audit(1755488581.863:1048): avc: denied { create } for pid=15285 comm="syz.1.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 338.667759][ T30] audit: type=1400 audit(1755488581.873:1049): avc: denied { bind } for pid=15285 comm="syz.1.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 338.725729][T15292] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1218'. [ 341.062669][ C0] net_ratelimit: 48680 callbacks suppressed [ 341.062688][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 341.080775][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 341.092831][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 341.104882][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 341.116927][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 341.128995][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 341.141140][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 341.153332][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 341.165596][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 341.177735][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 341.217646][ T6016] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 341.764011][ T6016] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 341.777544][ T6016] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 341.866391][ T6016] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 342.060153][ T6016] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.084095][ T30] audit: type=1400 audit(1755488585.503:1050): avc: denied { read } for pid=15328 comm="syz.1.1228" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 342.253313][T15318] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 342.266362][ T6016] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 343.521135][ T30] audit: type=1400 audit(1755488585.503:1051): avc: denied { open } for pid=15328 comm="syz.1.1228" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 343.545162][ C1] vkms_vblank_simulate: vblank timer overrun [ 343.660139][T15339] 9pnet_fd: Insufficient options for proto=fd [ 343.718368][ T5893] usb 3-1: USB disconnect, device number 44 [ 343.762840][ T30] audit: type=1400 audit(1755488586.963:1052): avc: denied { setopt } for pid=15357 comm="syz.3.1231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 343.913327][T15384] netlink: 'syz.2.1233': attribute type 20 has an invalid length. [ 344.170914][ T30] audit: type=1400 audit(1755488587.613:1053): avc: denied { bind } for pid=15357 comm="syz.3.1231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 344.174295][ T30] audit: type=1400 audit(1755488587.623:1054): avc: denied { getopt } for pid=15357 comm="syz.3.1231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 344.181828][ T30] audit: type=1400 audit(1755488587.623:1055): avc: denied { write } for pid=15357 comm="syz.3.1231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 344.302852][T15387] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1232'. [ 344.302873][T15387] netlink: 59 bytes leftover after parsing attributes in process `syz.4.1232'. [ 344.501902][ T5955] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 344.515541][T15383] dvmrp17: entered allmulticast mode [ 344.518602][T15383] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 344.573730][ C1] vkms_vblank_simulate: vblank timer overrun [ 344.751473][T15396] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1235'. [ 345.837010][ T5955] usb 1-1: device descriptor read/all, error -71 [ 346.033484][ T2148] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 346.072732][ C0] net_ratelimit: 40902 callbacks suppressed [ 346.072750][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 346.072895][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 346.073032][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 346.073172][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 346.073324][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 346.073471][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 346.073612][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 346.073751][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 346.073887][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 346.074031][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 346.269428][ T2148] usb 2-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 346.269455][ T2148] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.269474][ T2148] usb 2-1: Product: syz [ 346.269489][ T2148] usb 2-1: Manufacturer: syz [ 346.269502][ T2148] usb 2-1: SerialNumber: syz [ 346.272761][ T2148] usb 2-1: config 0 descriptor?? [ 346.274534][ T2148] kvaser_usb 2-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 346.321865][ T30] audit: type=1400 audit(1755488589.763:1056): avc: denied { read write } for pid=15394 comm="syz.4.1235" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 346.321907][ T30] audit: type=1400 audit(1755488589.763:1057): avc: denied { open } for pid=15394 comm="syz.4.1235" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 346.369288][ T30] audit: type=1400 audit(1755488589.793:1058): avc: denied { getopt } for pid=15394 comm="syz.4.1235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 347.574978][ C1] vkms_vblank_simulate: vblank timer overrun [ 347.641677][ T57] usb 2-1: USB disconnect, device number 39 [ 351.082777][ C0] net_ratelimit: 37855 callbacks suppressed [ 351.082796][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 351.082950][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 351.083102][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 351.083269][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 351.083422][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 351.083572][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 351.083732][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 351.083883][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 351.084035][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 351.084246][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 356.092770][ C0] net_ratelimit: 34218 callbacks suppressed [ 356.092788][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 356.092942][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 356.093093][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 356.093259][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 356.093421][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 356.093572][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 356.093722][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 356.093873][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 356.094024][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 356.094189][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 361.102761][ C0] net_ratelimit: 34560 callbacks suppressed [ 361.102779][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 361.102942][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 361.103099][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 361.103264][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 361.103438][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 361.103596][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 361.103751][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 361.103908][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 361.104067][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 361.104242][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 366.112754][ C0] net_ratelimit: 35132 callbacks suppressed [ 366.112773][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 366.112939][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 366.113100][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 366.113254][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 366.113429][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 366.113585][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 366.113748][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 366.113902][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 366.114063][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 366.114215][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 371.122777][ C0] net_ratelimit: 46320 callbacks suppressed [ 371.122796][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 371.122850][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 371.122944][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 371.122961][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 371.123142][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 371.123312][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 371.123357][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 371.123451][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 371.123473][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 371.123636][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 376.132669][ C1] net_ratelimit: 54843 callbacks suppressed [ 376.132687][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 376.132750][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 376.132790][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 376.132904][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 376.133062][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 376.133224][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 376.133241][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 376.133332][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 376.133376][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 376.133527][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 379.014407][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.025859][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.142689][ C0] net_ratelimit: 52747 callbacks suppressed [ 381.142701][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 381.142707][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 381.142795][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 381.142875][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 381.143041][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 381.143215][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 381.143257][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 381.143347][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 381.143389][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 381.143566][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 386.152717][ C0] net_ratelimit: 53317 callbacks suppressed [ 386.152736][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 386.152859][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 386.152896][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 386.152953][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 386.153047][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 386.153198][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 386.153351][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 386.153416][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 386.153505][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 386.153508][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 391.162681][ C0] net_ratelimit: 52360 callbacks suppressed [ 391.162684][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 391.162701][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 391.162794][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 391.162881][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 391.163051][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 391.163215][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 391.163251][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 391.163343][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 391.163434][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 391.163602][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 396.172621][ C0] net_ratelimit: 54026 callbacks suppressed [ 396.172642][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 396.172701][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 396.172788][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 396.172820][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 396.173000][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 396.173169][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 396.173224][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 396.173307][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 396.173347][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 396.173517][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 401.182728][ C0] net_ratelimit: 54008 callbacks suppressed [ 401.182749][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 401.182868][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 401.182911][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 401.182953][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 401.183078][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 401.183236][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 401.183385][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 401.183402][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 401.183470][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 401.183559][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 406.192665][ C1] net_ratelimit: 55502 callbacks suppressed [ 406.192668][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 406.192685][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 406.192770][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 406.192825][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 406.192985][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 406.193138][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 406.193195][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 406.193288][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 406.193300][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 406.193453][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 411.202709][ C0] net_ratelimit: 54812 callbacks suppressed [ 411.202728][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 411.202890][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 411.202997][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 411.203042][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 411.203091][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 411.203191][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 411.203357][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 411.203520][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 411.203585][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 411.203674][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 416.212621][ C0] net_ratelimit: 54788 callbacks suppressed [ 416.212639][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 416.212804][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 416.212874][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 416.212956][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 416.212967][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 416.213108][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 416.213269][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 416.213421][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 416.213444][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 416.213536][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 421.222719][ C0] net_ratelimit: 54335 callbacks suppressed [ 421.222745][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 421.222916][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 421.222958][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 421.223049][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 421.223084][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 421.223251][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 421.223418][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 421.223523][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 421.223602][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 421.223614][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 426.232616][ C0] net_ratelimit: 53650 callbacks suppressed [ 426.232620][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 426.232633][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 426.232713][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 426.232811][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 426.232980][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 426.233149][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 426.233175][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 426.233267][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 426.233317][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 426.233502][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 431.242778][ C0] net_ratelimit: 52317 callbacks suppressed [ 431.242784][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 431.242795][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 431.242882][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 431.242979][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 431.243176][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 431.243346][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 431.243363][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 431.243437][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 431.243537][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 431.243703][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 436.252621][ C0] net_ratelimit: 53836 callbacks suppressed [ 436.252639][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 436.252821][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 436.252991][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 436.253002][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 436.253104][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 436.253158][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 436.253331][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 436.253507][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 436.253577][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 436.253668][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 441.262589][ C0] net_ratelimit: 51832 callbacks suppressed [ 441.262608][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 441.262777][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 441.262789][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 441.262882][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 441.262949][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 441.263113][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 441.263276][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 441.263347][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 441.263437][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 441.263454][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 442.183940][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 442.195395][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.272766][ C0] net_ratelimit: 53790 callbacks suppressed [ 446.272785][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 446.272937][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 446.273092][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 446.273110][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 446.273211][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 446.273243][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 446.273413][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 446.273578][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 446.273667][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 446.273729][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 451.282705][ C0] net_ratelimit: 53688 callbacks suppressed [ 451.282726][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 451.282754][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 451.282840][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 451.282894][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 451.283079][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 451.283253][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 451.283265][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 451.283349][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 451.283417][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 451.283571][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 456.292630][ C0] net_ratelimit: 52790 callbacks suppressed [ 456.292650][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 456.292803][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 456.292816][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 456.292911][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 456.292955][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 456.293111][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 456.293272][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 456.293334][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 456.293418][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 456.293424][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 461.302595][ C1] net_ratelimit: 52678 callbacks suppressed [ 461.302612][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 461.302621][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 461.302705][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 461.302801][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 461.302977][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 461.303144][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 461.303165][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 461.303262][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 461.303311][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 461.303487][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 466.312662][ C0] net_ratelimit: 52427 callbacks suppressed [ 466.312680][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 466.312849][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 466.312975][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 466.313036][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 466.313068][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 466.313201][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 466.313365][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 466.313543][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 466.313647][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 466.313712][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 471.322607][ C1] net_ratelimit: 52215 callbacks suppressed [ 471.322627][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 471.322658][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 471.322813][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 471.322975][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 471.323070][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 471.323144][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 471.323153][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 471.323298][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 471.323452][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 471.323580][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 476.332613][ C0] net_ratelimit: 52276 callbacks suppressed [ 476.332633][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 476.332804][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 476.332830][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 476.332923][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 476.332972][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 476.333162][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 476.333328][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 476.333408][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 476.333495][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 476.333499][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 480.300287][ T5218] udevd[5218]: worker [5834] /devices/platform/dummy_hcd.1/usb2/2-1 is taking a long time [ 481.342657][ C1] net_ratelimit: 51971 callbacks suppressed [ 481.342677][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 481.342697][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 481.342788][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 481.342865][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 481.343047][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 481.343216][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 481.343244][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 481.343335][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 481.343384][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 481.343551][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 486.352645][ C0] net_ratelimit: 52553 callbacks suppressed [ 486.352664][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 486.352713][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 486.352800][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 486.352850][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 486.353022][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 486.353189][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 486.353228][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 486.353311][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 486.353357][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 486.353523][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 491.362563][ C0] net_ratelimit: 52646 callbacks suppressed [ 491.362582][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 491.362762][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 491.362874][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 491.362930][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 491.362969][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 491.363117][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 491.363284][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 491.363442][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 491.363453][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 491.363546][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 496.372609][ C1] net_ratelimit: 52599 callbacks suppressed [ 496.372628][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 496.372660][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 496.372729][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 496.372830][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 496.372995][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 496.373163][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 496.373211][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 496.373305][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 496.373333][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 496.373513][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 501.382548][ C0] net_ratelimit: 51646 callbacks suppressed [ 501.382569][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 501.382597][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 501.382689][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 501.382747][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 501.382911][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 501.383076][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 501.383165][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 501.383240][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 501.383255][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 501.383404][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:f1:c9:79:b0:46, vlan:0) [ 501.605949][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.613623][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.038095][ T31] INFO: task syz.0.1237:15413 blocked for more than 143 seconds. [ 502.038117][ T31] Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 [ 502.038129][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 502.038137][ T31] task:syz.0.1237 state:D stack:29032 pid:15413 tgid:15409 ppid:5847 task_flags:0x400140 flags:0x00004004 [ 502.038199][ T31] Call Trace: [ 502.038205][ T31] [ 502.038215][ T31] __schedule+0x1190/0x5de0 [ 502.038250][ T31] ? is_bpf_text_address+0x8a/0x1a0 [ 502.038270][ T31] ? rcu_is_watching+0x12/0xc0 [ 502.038295][ T31] ? is_bpf_text_address+0x94/0x1a0 [ 502.038317][ T31] ? __pfx___schedule+0x10/0x10 [ 502.038347][ T31] ? schedule+0x2d7/0x3a0 [ 502.038361][ T31] ? rcu_is_watching+0x12/0xc0 [ 502.038382][ T31] ? lock_release+0x201/0x2f0 [ 502.038406][ T31] schedule+0xe7/0x3a0 [ 502.038422][ T31] schedule_timeout+0x257/0x290 [ 502.038447][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 502.038474][ T31] ? rcu_is_watching+0x12/0xc0 [ 502.038496][ T31] ? rcu_is_watching+0x12/0xc0 [ 502.038526][ T31] ___down_common+0x2d8/0x460 [ 502.038545][ T31] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 502.038574][ T31] ? __pfx____down_common+0x10/0x10 [ 502.038599][ T31] __down+0x20/0x30 [ 502.038617][ T31] down+0x74/0xa0 [ 502.038636][ T31] console_lock+0x5b/0xa0 [ 502.038655][ T31] vt_ioctl+0x2ddb/0x30a0 [ 502.038681][ T31] ? __pfx_vt_ioctl+0x10/0x10 [ 502.038705][ T31] ? tomoyo_path_number_perm+0x295/0x580 [ 502.038731][ T31] ? tomoyo_path_number_perm+0x18d/0x580 [ 502.038754][ T31] ? __handle_mm_fault+0x5a8/0x2a50 [ 502.038783][ T31] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 502.038804][ T31] ? tty_jobctrl_ioctl+0x152/0xe00 [ 502.038830][ T31] ? __pfx_vt_ioctl+0x10/0x10 [ 502.038852][ T31] tty_ioctl+0x65e/0x1680 [ 502.038871][ T31] ? __pfx_tty_ioctl+0x10/0x10 [ 502.038890][ T31] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 502.038918][ T31] ? rcu_is_watching+0x12/0xc0 [ 502.038940][ T31] ? __fget_files+0x204/0x3c0 [ 502.038959][ T31] ? hook_file_ioctl_common+0x145/0x410 [ 502.038981][ T31] ? selinux_file_ioctl+0x180/0x270 [ 502.039005][ T31] ? selinux_file_ioctl+0xb4/0x270 [ 502.039031][ T31] ? __pfx_tty_ioctl+0x10/0x10 [ 502.039049][ T31] __x64_sys_ioctl+0x18e/0x210 [ 502.039078][ T31] do_syscall_64+0xcd/0x4c0 [ 502.039098][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.039118][ T31] RIP: 0033:0x7f10d6b8ebe9 [ 502.039132][ T31] RSP: 002b:00007f10d7a95038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 502.039150][ T31] RAX: ffffffffffffffda RBX: 00007f10d6db6180 RCX: 00007f10d6b8ebe9 [ 502.039163][ T31] RDX: 0000200000000140 RSI: 0000000000005609 RDI: 0000000000000009 [ 502.039174][ T31] RBP: 00007f10d6c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 502.039186][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 502.039197][ T31] R13: 00007f10d6db6218 R14: 00007f10d6db6180 R15: 00007ffdf5552d88 [ 502.039215][ T31] [ 502.039223][ T31] INFO: lockdep is turned off. [ 502.039229][ T31] NMI backtrace for cpu 1 [ 502.039240][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 502.039262][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 502.039272][ T31] Call Trace: [ 502.039277][ T31] [ 502.039283][ T31] dump_stack_lvl+0x116/0x1f0 [ 502.039302][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 502.039324][ T31] ? watchdog+0xd17/0x1260 [ 502.039342][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 502.039369][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 502.039394][ T31] watchdog+0xf0e/0x1260 [ 502.039414][ T31] ? __pfx_watchdog+0x10/0x10 [ 502.039432][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 502.039449][ T31] ? __kthread_parkme+0x19e/0x250 [ 502.039473][ T31] ? __pfx_watchdog+0x10/0x10 [ 502.039492][ T31] kthread+0x3c5/0x780 [ 502.039514][ T31] ? __pfx_kthread+0x10/0x10 [ 502.039531][ T31] ? rcu_is_watching+0x12/0xc0 [ 502.039552][ T31] ? __pfx_kthread+0x10/0x10 [ 502.039569][ T31] ret_from_fork+0x5d7/0x6f0 [ 502.039585][ T31] ? __pfx_kthread+0x10/0x10 [ 502.039602][ T31] ret_from_fork_asm+0x1a/0x30 [ 502.039628][ T31] [ 502.039634][ T31] Sending NMI from CPU 1 to CPUs 0: [ 502.039657][ C0] NMI backtrace for cpu 0 [ 502.039669][ C0] CPU: 0 UID: 0 PID: 5955 Comm: kworker/0:3 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 502.039687][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 502.039696][ C0] Workqueue: wg-kex-wg2 wg_packet_handshake_receive_worker [ 502.039719][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x8/0x20 [ 502.039736][ C0] Code: bf 03 00 00 00 e9 58 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 0c 24 <89> f2 89 fe bf 05 00 00 00 e9 2a fe ff ff 66 2e 0f 1f 84 00 00 00 [ 502.039749][ C0] RSP: 0018:ffffc900000069f0 EFLAGS: 00000246 [ 502.039764][ C0] RAX: 0000000000000000 RBX: ffff88802adcbc58 RCX: ffffffff8a4459af [ 502.039773][ C0] RDX: ffff88802ec84880 RSI: 0000000000000000 RDI: 0000000000000000 [ 502.039781][ C0] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 502.039789][ C0] R10: 0000000000000080 R11: 0000000000002c10 R12: ffff888074d34500 [ 502.039797][ C0] R13: ffffc90000006a90 R14: fffff52000000d53 R15: 0000000000000001 [ 502.039806][ C0] FS: 0000000000000000(0000) GS:ffff8881246bc000(0000) knlGS:0000000000000000 [ 502.039820][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 502.039829][ C0] CR2: 00005555607875c8 CR3: 0000000032604000 CR4: 00000000003526f0 [ 502.039838][ C0] DR0: 0000000000000680 DR1: 0000000000000003 DR2: 0000000000000007 [ 502.039845][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 502.039854][ C0] Call Trace: [ 502.039858][ C0] [ 502.039863][ C0] fib6_node_lookup_1+0x11f/0x9d0 [ 502.039880][ C0] ? __dev_queue_xmit+0xb12/0x4490 [ 502.039901][ C0] fib6_node_lookup+0xdb/0x190 [ 502.039919][ C0] ? __pfx_fib6_node_lookup+0x10/0x10 [ 502.039936][ C0] ? nf_hook+0x45e/0x780 [ 502.039947][ C0] ? br_forward_finish+0xcd/0x130 [ 502.039959][ C0] ? br_nf_hook_thresh+0x307/0x410 [ 502.039975][ C0] ? br_flood+0x39c/0x650 [ 502.039986][ C0] ? br_handle_frame_finish+0xf2d/0x1ca0 [ 502.040000][ C0] ? br_nf_hook_thresh+0x230/0x410 [ 502.040014][ C0] ? br_nf_pre_routing_finish_ipv6+0x76a/0xfb0 [ 502.040031][ C0] ? br_nf_pre_routing+0x860/0x15b0 [ 502.040045][ C0] ? br_handle_frame+0xad8/0x14b0 [ 502.040061][ C0] fib6_table_lookup+0xb1/0xa30 [ 502.040073][ C0] ? ip6_multipath_l3_keys.constprop.0+0x3ab/0xbd0 [ 502.040094][ C0] ? __pfx_ip6_multipath_l3_keys.constprop.0+0x10/0x10 [ 502.040113][ C0] ? __pfx_fib6_table_lookup+0x10/0x10 [ 502.040124][ C0] ? rcu_is_watching+0x12/0xc0 [ 502.040139][ C0] ? lock_acquire+0x2cd/0x350 [ 502.040160][ C0] ip6_pol_route+0x1cc/0x1230 [ 502.040172][ C0] ? rt6_multipath_hash+0x1de/0x1920 [ 502.040184][ C0] ? __pfx_ip6_pol_route+0x10/0x10 [ 502.040197][ C0] ? __pfx_rt6_multipath_hash+0x10/0x10 [ 502.040214][ C0] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 502.040226][ C0] fib6_rule_lookup+0x536/0x720 [ 502.040246][ C0] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 502.040264][ C0] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 502.040281][ C0] ? br_nf_post_routing+0x59b/0x1190 [ 502.040296][ C0] ? nf_hook+0x48d/0x780 [ 502.040307][ C0] ? rcu_is_watching+0x12/0xc0 [ 502.040322][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 502.040337][ C0] ip6_route_input+0x662/0xc00 [ 502.040351][ C0] ? __pfx_ip6_route_input+0x10/0x10 [ 502.040363][ C0] ? __pfx_nf_hook+0x10/0x10 [ 502.040374][ C0] ? do_softirq+0xb2/0xf0 [ 502.040391][ C0] ? worker_thread+0x6c8/0xf10 [ 502.040407][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 502.040422][ C0] ? __pfx_bond_handle_frame+0x10/0x10 [ 502.040442][ C0] ? __netif_receive_skb_core.constprop.0+0xa6c/0x48c0 [ 502.040463][ C0] ip6_rcv_finish_core.constprop.0+0x1a0/0x5d0 [ 502.040478][ C0] ip6_rcv_finish+0x130/0x580 [ 502.040492][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 502.040505][ C0] ? __pfx_ip_sabotage_in+0x10/0x10 [ 502.040519][ C0] ip_sabotage_in+0x21e/0x290 [ 502.040533][ C0] nf_hook_slow+0xbe/0x200 [ 502.040547][ C0] nf_hook.constprop.0+0x422/0x750 [ 502.040560][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 502.040574][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 502.040586][ C0] ? lock_release+0x201/0x2f0 [ 502.040606][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 502.040619][ C0] ? ip6_rcv_core+0xc70/0x1c30 [ 502.040633][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 502.040645][ C0] ipv6_rcv+0xa4/0x650 [ 502.040658][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 502.040670][ C0] __netif_receive_skb_one_core+0x12d/0x1e0 [ 502.040689][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 502.040710][ C0] ? lock_acquire+0x2cd/0x350 [ 502.040730][ C0] __netif_receive_skb+0x1d/0x160 [ 502.040749][ C0] netif_receive_skb+0x137/0x7b0 [ 502.040772][ C0] ? __pfx_netif_receive_skb+0x10/0x10 [ 502.040791][ C0] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 502.040805][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 502.040818][ C0] ? br_handle_vlan+0x278/0x550 [ 502.040830][ C0] ? rcu_read_lock_held+0x9/0x50 [ 502.040848][ C0] ? br_netif_receive_skb+0xff/0x200 [ 502.040862][ C0] br_pass_frame_up+0x346/0x490 [ 502.040877][ C0] br_handle_frame_finish+0xf5a/0x1ca0 [ 502.040893][ C0] ? net_rx_action+0xa9f/0xfe0 [ 502.040911][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 502.040925][ C0] ? kernel_fpu_end+0x5e/0x70 [ 502.040938][ C0] ? blake2s_compress_avx512+0x143/0x180 [ 502.040958][ C0] ? blake2s_update+0xef/0x360 [ 502.040974][ C0] ? ipvlan_init+0x630/0xf90 [ 502.040984][ C0] ? kdf.constprop.0+0x1a1/0x280 [ 502.040998][ C0] ? wg_packet_send_handshake_response+0x216/0x310 [ 502.041017][ C0] ? wg_receive_handshake_packet+0x247/0xbf0 [ 502.041037][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 502.041053][ C0] ? ipv6_ext_hdr+0x36/0x50 [ 502.041065][ C0] ? nf_ct_frag6_gather+0x1c9/0x2d70 [ 502.041079][ C0] ? nf_hook_slow+0x132/0x200 [ 502.041092][ C0] br_nf_hook_thresh+0x307/0x410 [ 502.041106][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 502.041123][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 502.041138][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 502.041153][ C0] ? rcu_is_watching+0x12/0xc0 [ 502.041168][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 502.041183][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 502.041198][ C0] br_nf_pre_routing_finish_ipv6+0x76a/0xfb0 [ 502.041215][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 502.041231][ C0] ? lock_release+0x201/0x2f0 [ 502.041250][ C0] br_nf_pre_routing_ipv6+0x3cd/0x8c0 [ 502.041266][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 502.041282][ C0] ? rcu_is_watching+0x12/0xc0 [ 502.041298][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 502.041314][ C0] ? lock_release+0x201/0x2f0 [ 502.041334][ C0] br_nf_pre_routing+0x860/0x15b0 [ 502.041351][ C0] br_handle_frame+0xad8/0x14b0 [ 502.041367][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 502.041383][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 502.041399][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 502.041413][ C0] __netif_receive_skb_core.constprop.0+0xa25/0x48c0 [ 502.041434][ C0] ? trace_irq_enable.constprop.0+0xa0/0x120 [ 502.041451][ C0] ? kmem_cache_free+0x2d1/0x4d0 [ 502.041464][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 502.041481][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 502.041502][ C0] ? sk_skb_reason_drop+0x136/0x1a0 [ 502.041518][ C0] ? ip6_mc_input+0x4f2/0xeb0 [ 502.041535][ C0] ? process_backlog+0x3f0/0x15e0 [ 502.041554][ C0] __netif_receive_skb_one_core+0xb0/0x1e0 [ 502.041572][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 502.041593][ C0] ? lock_acquire+0x2cd/0x350 [ 502.041611][ C0] ? process_backlog+0x3f0/0x15e0 [ 502.041630][ C0] ? rcu_is_watching+0x12/0xc0 [ 502.041646][ C0] ? process_backlog+0x3f0/0x15e0 [ 502.041664][ C0] __netif_receive_skb+0x1d/0x160 [ 502.041683][ C0] process_backlog+0x442/0x15e0 [ 502.041703][ C0] __napi_poll.constprop.0+0xba/0x550 [ 502.041722][ C0] ? rcu_is_watching+0x12/0xc0 [ 502.041738][ C0] net_rx_action+0xa9f/0xfe0 [ 502.041763][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 502.041782][ C0] ? try_to_wake_up+0x154/0x1870 [ 502.041799][ C0] ? tmigr_handle_remote+0x132/0x380 [ 502.041817][ C0] ? run_timer_base+0x121/0x190 [ 502.041836][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 502.041856][ C0] handle_softirqs+0x216/0x8e0 [ 502.041873][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 502.041889][ C0] ? kernel_fpu_end+0x59/0x70 [ 502.041903][ C0] do_softirq+0xb2/0xf0 [ 502.041918][ C0] [ 502.041922][ C0] [ 502.041927][ C0] __local_bh_enable_ip+0x100/0x120 [ 502.041943][ C0] kernel_fpu_end+0x5e/0x70 [ 502.041957][ C0] blake2s_compress+0x7f/0xe0 [ 502.041976][ C0] blake2s_update+0xef/0x360 [ 502.041993][ C0] hmac.constprop.0+0x23f/0x420 [ 502.042009][ C0] ? __pfx_hmac.constprop.0+0x10/0x10 [ 502.042026][ C0] ? kasan_save_stack+0x42/0x60 [ 502.042038][ C0] ? kasan_save_stack+0x33/0x60 [ 502.042050][ C0] ? kasan_save_track+0x14/0x30 [ 502.042063][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 502.042075][ C0] ? process_one_work+0x9cc/0x1b70 [ 502.042089][ C0] ? worker_thread+0x6c8/0xf10 [ 502.042101][ C0] ? kthread+0x3c5/0x780 [ 502.042112][ C0] ? ret_from_fork+0x5d7/0x6f0 [ 502.042128][ C0] kdf.constprop.0+0x1a1/0x280 [ 502.042143][ C0] ? __pfx_kdf.constprop.0+0x10/0x10 [ 502.042158][ C0] ? rcu_is_watching+0x12/0xc0 [ 502.042174][ C0] ? rcu_is_watching+0x12/0xc0 [ 502.042189][ C0] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 502.042206][ C0] wg_noise_handshake_begin_session+0x325/0xe80 [ 502.042225][ C0] wg_packet_send_handshake_response+0x216/0x310 [ 502.042245][ C0] ? wg_socket_set_peer_endpoint+0x31f/0xbd0 [ 502.042258][ C0] ? __pfx_wg_packet_send_handshake_response+0x10/0x10 [ 502.042283][ C0] wg_receive_handshake_packet+0x247/0xbf0 [ 502.042303][ C0] ? __pfx_wg_receive_handshake_packet+0x10/0x10 [ 502.042324][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 502.042338][ C0] ? wg_packet_handshake_receive_worker+0x16d/0x3a0 [ 502.042358][ C0] ? rcu_is_watching+0x12/0xc0 [ 502.042373][ C0] ? wg_packet_handshake_receive_worker+0x16d/0x3a0 [ 502.042393][ C0] ? rcu_is_watching+0x12/0xc0 [ 502.042408][ C0] ? wg_packet_handshake_receive_worker+0x16d/0x3a0 [ 502.042429][ C0] wg_packet_handshake_receive_worker+0x17f/0x3a0 [ 502.042452][ C0] process_one_work+0x9cc/0x1b70 [ 502.042469][ C0] ? __pfx_wg_packet_encrypt_worker+0x10/0x10 [ 502.042489][ C0] ? __pfx_process_one_work+0x10/0x10 [ 502.042506][ C0] ? assign_work+0x1a0/0x250 [ 502.042519][ C0] worker_thread+0x6c8/0xf10 [ 502.042542][ C0] ? __pfx_worker_thread+0x10/0x10 [ 502.042558][ C0] kthread+0x3c5/0x780 [ 502.042573][ C0] ? __pfx_kthread+0x10/0x10 [ 502.042587][ C0] ? ret_from_fork+0x25/0x6f0 [ 502.042601][ C0] ? rcu_is_watching+0x12/0xc0 [ 502.042620][ C0] ? rcu_is_watching+0x12/0xc0 [ 502.042639][ C0] ? __pfx_kthread+0x10/0x10 [ 502.042656][ C0] ret_from_fork+0x5d7/0x6f0 [ 502.042671][ C0] ? __pfx_kthread+0x10/0x10 [ 502.042687][ C0] ret_from_fork_asm+0x1a/0x30 [ 502.042711][ C0] [ 502.046517][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 502.046530][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 502.046553][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 502.046563][ T31] Call Trace: [ 502.046568][ T31] [ 502.046575][ T31] dump_stack_lvl+0x3d/0x1f0 [ 502.046594][ T31] vpanic+0x6e8/0x7a0 [ 502.046620][ T31] ? __pfx_vpanic+0x10/0x10 [ 502.046645][ T31] ? __irq_work_queue_local+0x1d7/0x580 [ 502.046665][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 502.046686][ T31] panic+0xca/0xd0 [ 502.046709][ T31] ? __pfx_panic+0x10/0x10 [ 502.046734][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 502.046759][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 502.046783][ T31] ? watchdog+0xd78/0x1260 [ 502.046801][ T31] ? watchdog+0xd6b/0x1260 [ 502.046819][ T31] watchdog+0xd89/0x1260 [ 502.046839][ T31] ? __pfx_watchdog+0x10/0x10 [ 502.046857][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 502.046874][ T31] ? __kthread_parkme+0x19e/0x250 [ 502.046899][ T31] ? __pfx_watchdog+0x10/0x10 [ 502.046917][ T31] kthread+0x3c5/0x780 [ 502.046934][ T31] ? __pfx_kthread+0x10/0x10 [ 502.046951][ T31] ? rcu_is_watching+0x12/0xc0 [ 502.046971][ T31] ? __pfx_kthread+0x10/0x10 [ 502.046988][ T31] ret_from_fork+0x5d7/0x6f0 [ 502.047003][ T31] ? __pfx_kthread+0x10/0x10 [ 502.047020][ T31] ret_from_fork_asm+0x1a/0x30 [ 502.047044][ T31] [ 502.047238][ T31] Kernel Offset: disabled