last executing test programs: 8m5.185626854s ago: executing program 4 (id=18): r0 = syz_open_dev$I2C(&(0x7f0000000280), 0xffffffffffffff00, 0x2) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000006c0)={&(0x7f0000000640)=[{0xa, 0x400, 0x0, 0xfffffffffffffffc}, {0x4, 0xd800, 0x4b, &(0x7f00000002c0)="e68d50cb97c03b83c98e1567a191a6aba0375dea59f37c50a956db454d266950dd10f27148ed831d524b5ac6d5d7635efae4bbaff5c15a400723ede5d05bb4faaaa981102173b9f0f720eb"}, {0x3, 0x0, 0xff, &(0x7f0000000440)="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"}, {0xe, 0x6000, 0x18, &(0x7f00000005c0)="68f9fd8b407ed847989b8159af2df702c4d814b6aa681277"}, {0x1ff, 0xa000, 0x1e, &(0x7f0000000600)="a8ad71eee6f2bfa1f1aabb4e20e7a189f1b2690d4244c3f72bd90e7c7f88"}], 0x5}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58) close(0x3) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r4}, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x19, &(0x7f0000002280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x466}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r6, r5}, 0xc) socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x3, 0x1}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000001480)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r8, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r7, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}) r9 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) bind$inet(r9, &(0x7f00000000c0)={0x2, 0x4e20, @private=0xa010100}, 0x10) read$char_usb(r2, 0x0, 0x0) 8m2.158696214s ago: executing program 4 (id=26): add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c9000c0008"], 0x11) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/hardlockup_count', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000021, 0x0, 0x1af}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) ioctl$KVM_RUN(r5, 0xae80, 0x0) 8m0.965375841s ago: executing program 4 (id=29): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() setns(0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) keyctl$set_reqkey_keyring(0xe, 0x3) syz_emit_ethernet(0x86, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "a162bf39823cf0e0b21d295eb624da29cb9582b3b34118d04ce50e5096f6e489", "354df87a9d379b7d3fd110d20ebb6112", {"8524a8dbca4cfc4a2fc17d1911fb10bd", "6c44cf21a718511e8177ca90b5e6025c"}}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000080)=0x5, 0x4) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r3, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f00000017c0)=""/130, 0x82}], 0x1}, 0xa1}], 0x2, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000027c0)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r5, 0x0, 0x0) ioctl$UFFDIO_MOVE(r5, 0xc028aa05, 0x0) 7m58.698787801s ago: executing program 4 (id=36): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000780)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x2d}, 0x1, 0x0, 0x19000000, 0x14}, 0x804) 7m58.411949746s ago: executing program 4 (id=38): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80300, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x10c5408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000200)={0x0, 0x40072, 0x1}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) madvise(&(0x7f000046d000/0x1000)=nil, 0x1000, 0x16) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$loop(0x0, 0x75f, 0xa382) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x100, 0x4, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ATTR(r4, &(0x7f0000000440)={0x78, 0xfffffffffffffffe, 0x0, {0x7, 0x1740, 0x0, {0x1, 0x80000001, 0x3, 0x0, 0x7fffffff, 0x7, 0x7, 0x93, 0x6, 0x1000, 0x2, 0xffffffffffffffff, r5, 0x6, 0x83}}}, 0x78) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6}, {0x0, [0x0, 0x0, 0x30, 0x5f]}}, &(0x7f0000000000)=""/140, 0x1e, 0x8c, 0x1}, 0x28) r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x8, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xffff, 0xfd, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000380)={0x0, 0x0, r2, 0x0, 0x0, 0x1f5, 0x100000, 0x0, {0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8001, 0xfffffffa, "b4bc323ef77d1f000071849800000000dfff00"}}) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) setuid(0xee01) ioctl$FS_IOC_RESVSP(r7, 0xc0189436, &(0x7f0000000740)={0x0, 0x4, 0x0, 0x7, 0x3}) 7m54.232227303s ago: executing program 4 (id=43): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x3, 0x7, 0x7ffc0001}]}) r0 = socket(0x5, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e21, 0xcb, @empty, 0x4000000}, 0x1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x3) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000200)={0xc}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0xfffff, 0x12) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000180)={0x1f, 0x4a, &(0x7f0000000100)="b6afbd7cfd12e169df6ba4206b97673f73a5215113ce9c9f73c9773e19638392707f88f24710248d85fd53c97a74aad95d2e7b63a4f82f1d4579e6c838d412880c3fe7f5ee0b95d19d13"}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x2) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000120001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r5, 0x29, 0x16, 0x0, 0x0) socket$inet6(0xa, 0x80003, 0xff) socket$inet6(0xa, 0x3, 0xff) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x181100) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000100)={0x20004, r6}) r9 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r8}) ioctl$DRM_IOCTL_GEM_FLINK(r9, 0xc008640a, &(0x7f0000000300)={r10}) close_range(r4, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000000040)=0x2000007, 0x4) 7m50.803213893s ago: executing program 0 (id=48): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x200, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x2, 0x5, 0x6, 0x1}, 0x10, 0x2a9bf, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb763e", 0x28, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x41}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, [{0x18, 0x3, "007c4de20278ab96e88afd5c976b4c1ce4a945b1aafb"}]}}}}}}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r1}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) eventfd(0xffff) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000540)={@private1, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x14, 0x30, 0x48b, 0x70bd26, 0x3ffffffc}, 0x14}}, 0x2000e994) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x30, r6, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r7 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000480)=0x9) sendmsg$IPSET_CMD_ADD(r7, 0x0, 0x11) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @private=0xa010100, @multicast1}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x1000000}}}}}, 0x0) 7m49.514983881s ago: executing program 0 (id=50): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003200), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000003280)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000003340)={0x0, 0x0, &(0x7f0000003300)={&(0x7f00000032c0)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x25, 0x0, 0x0, 0x8840}, 0x40048014) 7m47.482180009s ago: executing program 0 (id=52): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x200, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x2, 0x5, 0x6, 0x1}, 0x10, 0x2a9bf, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb763e", 0x28, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x41}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, [{0x18, 0x3, "007c4de20278ab96e88afd5c976b4c1ce4a945b1aafb"}]}}}}}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) eventfd(0xffff) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000540)={@private1, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x14, 0x30, 0x48b, 0x70bd26, 0x3ffffffc}, 0x14}}, 0x2000e994) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x30, r6, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r7 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000480)=0x9) sendmsg$IPSET_CMD_ADD(r7, 0x0, 0x11) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @private=0xa010100, @multicast1}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x1000000}}}}}, 0x0) 7m33.124826186s ago: executing program 32 (id=43): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x3, 0x7, 0x7ffc0001}]}) r0 = socket(0x5, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e21, 0xcb, @empty, 0x4000000}, 0x1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x3) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000200)={0xc}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0xfffff, 0x12) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000180)={0x1f, 0x4a, &(0x7f0000000100)="b6afbd7cfd12e169df6ba4206b97673f73a5215113ce9c9f73c9773e19638392707f88f24710248d85fd53c97a74aad95d2e7b63a4f82f1d4579e6c838d412880c3fe7f5ee0b95d19d13"}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x2) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000120001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r5, 0x29, 0x16, 0x0, 0x0) socket$inet6(0xa, 0x80003, 0xff) socket$inet6(0xa, 0x3, 0xff) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x181100) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000100)={0x20004, r6}) r9 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r8}) ioctl$DRM_IOCTL_GEM_FLINK(r9, 0xc008640a, &(0x7f0000000300)={r10}) close_range(r4, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000000040)=0x2000007, 0x4) 7m32.571885858s ago: executing program 0 (id=57): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000c80)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070296d1ca000905060200020d000609058202000200011017c9a3c4cd9519ba3f6bfcea3ae11089bb60fb4ab69d1deb85db628a8dc406aaaebed22740e43b4f2d56558cd83c9998971ff7d4ae2ba13d8a90d2f0b77398"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$netlink(0x10, 0x3, 0x14) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0xa, r2, 0x0, 0x3, 0x1}}, 0x20) io_setup(0x1, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x5c5727, 0x0) r4 = syz_io_uring_setup(0x360c, &(0x7f0000000d00)={0x0, 0x7, 0x8000, 0x2, 0x33e}, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x100000000000000, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x27e9, 0x0, 0x0, 0x0, 0x0) write$P9_RSTATu(r3, 0x0, 0x217) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000c40)={0x0, 0x7f, 0x3}) read$msr(r5, &(0x7f000001b240)=""/102374, 0x160be) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x125003, 0x0) r6 = socket(0x23, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0x20000000000001a3, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720af3fef8ffffff71a400fe000000007110100000000000e5000600000000004704000001ed030407030000060000001d440000000000006b0a20fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$kcm(0x29, 0x5, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x400, 0x70bd6a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d522802f1}, 0x48c4) 7m32.571264206s ago: executing program 1 (id=58): socket$unix(0x1, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 7m31.748321409s ago: executing program 1 (id=61): socket(0x400000000010, 0x3, 0x0) socket(0x11, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) read$midi(r1, 0x0, 0x20) 7m31.748096711s ago: executing program 2 (id=62): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xb000, 0xf000, 0x8, 0x80, 0x2, 0x5, 0xd, 0x8, 0xb4, 0x3, 0xff, 0x8}, {0xffffffff, 0x70000, 0x0, 0x2, 0x2, 0x4, 0x8, 0xa, 0x4c, 0xf1, 0x7, 0x3}, {0xe000, 0x26000, 0xd, 0xf4, 0x5, 0xb, 0x3, 0x5, 0x15, 0x10, 0x5c, 0xaf}, {0x100000, 0xeeee8000, 0xa, 0x2, 0x5, 0x39, 0xb, 0xa, 0x3, 0x6, 0x5, 0xb0}, {0x80a0000, 0xf000, 0x10, 0x4, 0x81, 0xf3, 0xe, 0xa, 0x6, 0x3, 0xf4, 0x3}, {0x70000, 0xe000, 0xd, 0x5, 0x3, 0x4d, 0x8, 0x38, 0x3, 0xff, 0x6, 0x2}, {0xb002, 0x1000, 0xc, 0x5, 0x9, 0x7, 0x40, 0xe, 0x3, 0x3, 0x81, 0x6}, {0xdddd1000, 0xeeee8000, 0xc, 0xc, 0x2, 0x1, 0x7f, 0x9, 0x9, 0xb, 0xfe, 0x2}, {0xc000, 0x3}, {0xb000, 0x4}, 0x1, 0x0, 0x8000000, 0x80c6984444d44456, 0xc, 0x8000, 0x7000, [0x9816, 0xdd10, 0x9, 0x8]}) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) 7m30.596862354s ago: executing program 1 (id=63): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0xfe4d}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0xf000, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0xa}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xfffffffffffffefc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0xa}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x5}]}}]}}]}, 0x54}}, 0x0) 7m30.176401379s ago: executing program 2 (id=64): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0000000000000005df250700000008090000070000000500050205000000"], 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r6 = syz_open_dev$loop(&(0x7f0000002580), 0x7, 0x0) sendmmsg$unix(r5, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000000300)="6c7805ca6a940523", 0x8}, {&(0x7f0000002440)="1de5a2d21a7e4961eabdad526e3afbf6a55749e2fc3e3ab8a4c7c07ab460c5fe3162d82bd122e63bfa3ee56b7924b26f8f90989ab3e03cd8e4f2f28d4d78928ac5ada35a7c6377f861a4276b4ec7aa383af45229d4796f7e90839a9fc174f513a9dad170148f0267dba6a993789ccd0c179a4ff9747f06c003155b389d575a2454e650b2218478d164a0b301a378cb25b967b31ecdbbb52d18d7b3acbecb45e234c1c377c0124aa49f755d939db5425bb503241e41db5e435178fd7f95a47a6024e06889e1bc149a6f67d6edd6d3e34538ced73f25ebf9d84345ea9c47ed", 0xde}], 0x2, &(0x7f0000002600)=[@rights={{0x30, 0x1, 0x1, [r6, r2, r4, r6, r5, 0xffffffffffffffff, r2, r2]}}], 0x30, 0x20}}, {{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000002640)="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", 0x1000}], 0x1, &(0x7f0000003700)=[@cred={{0x1c}}], 0x20, 0x24008090}}, {{&(0x7f0000003740)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000039c0), 0x0, &(0x7f00000037c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001000000020004006e0e1f24bf69b723f08575bb3a0e848f690ab48e9b9150eb2295a43d763979043bb0e958a8eb0f29d7a4374a604838667d85edc0fc75df6768a3f5d2c5f8ac575c2fd453dff0b0000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x1}}], 0x3, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r3, 0x1, &(0x7f0000000180)=0x3) r7 = userfaultfd(0x80801) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, r7, 0x0) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x1b2}) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f00006c0000/0x1000)=nil, 0x800000, 0x1}) syz_io_uring_submit(r8, 0x0, 0x0) r9 = eventfd2(0x0, 0x80000) close(r9) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8440, &(0x7f0000002380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB="2c00591074c819ae168abf69d430308d45253aa6d16c726b0a32b0a2dd2f8e36e4ac418b07fe2e7c7972e1f8b4ffc3a3eed6c9739e683f4c4c8a08fe768c552810f3251ac227b5eaf18dc3c5d5791fc05ba2b2aff8a862a86b2015edd0e8193ae346d26d0334ad5d24a2c449ec04ce92d426792f325ac41c23c3b49babf37cb70e"]) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020}, 0x2020) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r10, &(0x7f0000000180)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3e}, 0x1c) 7m28.870886735s ago: executing program 2 (id=65): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x8000]}, 0x8) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x280040, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00'}) mmap(&(0x7f0000104000/0x3000)=nil, 0x3000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xfffffeb7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f67fe4)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) connect$inet6(r5, &(0x7f0000000380)={0xa, 0x4f23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xb}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000000500)=ANY=[], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 7m28.804060627s ago: executing program 1 (id=66): socket$unix(0x1, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000002c0)={0x8, {{0xa, 0x4e20, 0x4, @mcast2, 0x6}}, {{0xa, 0x4e21, 0x4e11, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5}}}, 0x108) getsockopt$inet6_buf(r3, 0x29, 0x30, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x7}}]}}]}, 0x48}}, 0x0) 7m28.500175163s ago: executing program 0 (id=67): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000480)=""/82, 0x52, 0x0) r2 = socket(0x1d, 0x2, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, 0x0, 0x4014) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000000104010131000000000000"], 0x24}}, 0x0) close(0x3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000500)={0x4c, 0x0, 0x10, 0x30bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4048044}, 0x20004014) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@delqdisc={0x1b0, 0x25, 0x200, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xa}, {0x1, 0xffff}, {0xc, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x3}}, @TCA_STAB={0xe0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x7f, 0x6, 0x2, 0x2, 0xffff, 0x7, 0x7}}, {0x12, 0x2, [0x6, 0xcf, 0x5, 0xfffb, 0x37f, 0xb5fd, 0x8000]}}, {{0x1c, 0x1, {0x89, 0x6, 0x5ca5, 0x0, 0x1, 0x6, 0x7, 0x5}}, {0xe, 0x2, [0x4, 0xec6, 0x8, 0x2, 0xe58]}}, {{0x1c, 0x1, {0x1, 0x2, 0x5, 0x9dc, 0x2, 0x40000, 0x1, 0x1}}, {0x6, 0x2, [0x4]}}, {{0x1c, 0x1, {0x7, 0x6, 0x9cf8, 0x200, 0x1, 0x7fffffff, 0x1, 0x7}}, {0x12, 0x2, [0x6, 0xca, 0x101, 0xff6c, 0x8, 0x30ef, 0x0]}}, {{0x1c, 0x1, {0xd7, 0x3, 0xf, 0x0, 0x0, 0xbc7, 0xfffffffb, 0x5}}, {0xe, 0x2, [0x5, 0xa9, 0x5, 0x2f0c, 0x8]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xd75}, @qdisc_kind_options=@q_htb={{0x8}, {0x64, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0x3}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x3ff}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0x8}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xffff9ef4}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0x1}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x1000}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x41}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xbfd1}, @qdisc_kind_options=@q_atm={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140), 0xc, &(0x7f00000003c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="78010000f854f2c8eb2501000000000000002abd7000fddbdf25ee000000", @ANYRES32=0x0, @ANYBLOB="8510040000000000180118802c0001800f0002002f6465762f747479533300000800010003000000050006000a00000008000100020000003400018008000100ab00000014000500ef0d9a3ef706596e6b5201a69f8bbc981400050044f9c0d3b8a951e3e8dab57b314fa7613c000180140004008b2e6d63808b74c9abacc43cd52789560500060001000000080001007f00000014000500f63d72c474da2e4ce168c8ec8e9df1c13c00018005000600060000001400050022c56f6a7976894ddda37d769c59e5d908000100070000001400040061b371271e0716c80e1d6b037eca6b723c000180060002002700000006000200290000001400040002191ee998fb8dd40534db114b3e67f8140004003759e1dad0e4d3cde82fa96fb4d0b984050011000200000008000a00", @ANYRES32=r8, @ANYBLOB="2800128008000100767469001c0002800800050000000000080005006401010108000500ffffffff0800200005000000"], 0x178}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1b341783cf4457a32f93fc367f04c9d4cbda2bdd7ff59445488cf435f1d43c1ee45b843f6e6f89b774559d9ad388bf568744eaf4500c5ae5ea46477bbf12bca39ba36a39e34b4efe6a20c3aa2c6fc83e5571ac4b41bca3ed99028e591abdaf6491e5c16722e6384fbdc458be5beaac43f19529f4b0b141ba169c03407920dc73eac5abab1d838277483e7cbcd5638a78626b7131ed862b3b10c7e43ced2a18987afcfa2d88391b26bb8c5ae5b0e00af0a558ba3b776fe001179e12006cd8a192d1475da861f76419708a1a19fb43434b3f4f48544f5231bb100292966ab4dae846ba", @ANYRES16=r7, @ANYBLOB="2000feffffff0000010017000000500006804c00040067636d286165732900000000000000000000000000000000000000000000000024000000cc1c330db16595fc777de774fcbf8ccca419890025435b0ca9f37c3d940ac0602ddc17fb"], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_open_dev$vim2m(&(0x7f0000000340), 0x10000000008, 0x2) 7m26.988927001s ago: executing program 2 (id=68): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) close(r0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r0, 0x0, 0x0) recvmsg$unix(r5, &(0x7f0000000340)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000240)=""/243, 0xf3}], 0x1, &(0x7f0000000400)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128}, 0x0) connect$unix(r5, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) 7m25.597663317s ago: executing program 2 (id=70): socket$unix(0x1, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 7m25.292479431s ago: executing program 1 (id=72): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) close(0x3) eventfd(0x5ef) r2 = memfd_create(&(0x7f00000003c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2\xff\x90z\xea{\xe5\xa0\xceyY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) write$binfmt_elf32(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc82200005"], 0xbc) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 7m25.279652199s ago: executing program 2 (id=73): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0xc000) write$vhost_msg_v2(r0, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f0000000440)=""/119, 0x77, 0x0, 0x0, 0x3}}, 0x48) write(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2002c810) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x30, 0x40, 0x107, 0xfffffffe, 0x3000000, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @u32=0x20000}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 7m23.14532147s ago: executing program 0 (id=76): openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0480, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x305cc6, 0x1, 0x800004, 0x20a}, &(0x7f0000000380)=0x0, &(0x7f00000000c0)=0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x881) io_uring_setup(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "4aaf41dcefb8acad", "6301be207ae86709252de108867a82e9ef5ffbf6efeead6477321c29c53b59ea", "48588489", "4e11d0f9a1600288"}, 0x38) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x101101, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket$inet6(0xa, 0x80002, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f00000000c0)={0x1f, 0x4}, 0x6) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x40, &(0x7f0000000200)=0x4, 0x4) write$bt_hci(r7, &(0x7f0000000200)=ANY=[], 0x6) 7m22.94667153s ago: executing program 1 (id=77): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @empty}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xf, 0xffff, 0x20000, 0x1f4, 0x36, 0x0, 0x4}, 0x9c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x168, 0x9, 0x230, 0xb, 0x320, 0x250, 0x250, 0x320, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0x208, 0x230, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@rt={{0x138}, {0x0, [0x4, 0x8], 0x6, 0x17, 0x4, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private2, @dev={0xfe, 0x80, '\x00', 0x38}, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, @private0, @private2, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @mcast1, @loopback, @dev={0xfe, 0x80, '\x00', 0x26}], 0xe}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x6, 0x4}, {0x3, 0x5, 0x1}}}}, {{@ipv6={@loopback, @mcast1, [0x0, 0xffffff00, 0x0, 0xff000000], [0xffffff00, 0xffffff00, 0x0, 0xff000000], 'gretap0\x00', 'bridge_slave_0\x00', {}, {}, 0x2b, 0x2, 0x4, 0x3}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3c2, 0x5fb8, 0x77, 'syz0\x00', {0x2b}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) r3 = memfd_secret(0x80000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x44, r4, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac02}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x55ecf8253745800b}, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r7, 0x6, 0x19, &(0x7f00000001c0)=0x7, 0x4) bind$inet(r7, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg(r7, &(0x7f0000003a80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x80, 0x0}}], 0x1, 0x20000020) write$binfmt_script(r7, &(0x7f0000000240)={'#! ', './file0', [], 0xa, "0cf6a15628e8855e0f5666bd9f557580b6e13349297c3921ff32"}, 0x25) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f0000000100)={0x1, 0x0, [{0x5, 0x6, 0x10001, [0x8, 0x0, 0x5, 0x4, 0x4, 0x2, 0x7, 0x47]}]}) 7m7.450601289s ago: executing program 33 (id=73): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0xc000) write$vhost_msg_v2(r0, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f0000000440)=""/119, 0x77, 0x0, 0x0, 0x3}}, 0x48) write(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2002c810) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x30, 0x40, 0x107, 0xfffffffe, 0x3000000, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @u32=0x20000}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 7m6.743610657s ago: executing program 34 (id=76): openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0480, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x305cc6, 0x1, 0x800004, 0x20a}, &(0x7f0000000380)=0x0, &(0x7f00000000c0)=0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x881) io_uring_setup(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "4aaf41dcefb8acad", "6301be207ae86709252de108867a82e9ef5ffbf6efeead6477321c29c53b59ea", "48588489", "4e11d0f9a1600288"}, 0x38) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x101101, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket$inet6(0xa, 0x80002, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f00000000c0)={0x1f, 0x4}, 0x6) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x40, &(0x7f0000000200)=0x4, 0x4) write$bt_hci(r7, &(0x7f0000000200)=ANY=[], 0x6) 7m6.580815761s ago: executing program 35 (id=77): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @empty}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xf, 0xffff, 0x20000, 0x1f4, 0x36, 0x0, 0x4}, 0x9c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x168, 0x9, 0x230, 0xb, 0x320, 0x250, 0x250, 0x320, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0x208, 0x230, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@rt={{0x138}, {0x0, [0x4, 0x8], 0x6, 0x17, 0x4, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private2, @dev={0xfe, 0x80, '\x00', 0x38}, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, @private0, @private2, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @mcast1, @loopback, @dev={0xfe, 0x80, '\x00', 0x26}], 0xe}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x6, 0x4}, {0x3, 0x5, 0x1}}}}, {{@ipv6={@loopback, @mcast1, [0x0, 0xffffff00, 0x0, 0xff000000], [0xffffff00, 0xffffff00, 0x0, 0xff000000], 'gretap0\x00', 'bridge_slave_0\x00', {}, {}, 0x2b, 0x2, 0x4, 0x3}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3c2, 0x5fb8, 0x77, 'syz0\x00', {0x2b}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) r3 = memfd_secret(0x80000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x44, r4, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac02}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x55ecf8253745800b}, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r7, 0x6, 0x19, &(0x7f00000001c0)=0x7, 0x4) bind$inet(r7, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg(r7, &(0x7f0000003a80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x80, 0x0}}], 0x1, 0x20000020) write$binfmt_script(r7, &(0x7f0000000240)={'#! ', './file0', [], 0xa, "0cf6a15628e8855e0f5666bd9f557580b6e13349297c3921ff32"}, 0x25) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f0000000100)={0x1, 0x0, [{0x5, 0x6, 0x10001, [0x8, 0x0, 0x5, 0x4, 0x4, 0x2, 0x7, 0x47]}]}) 6m7.023411742s ago: executing program 3 (id=105): socket(0x10, 0x803, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fanotify_init(0xf00, 0x1) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) socket(0x10, 0x2, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, 0x0, &(0x7f0000000300)=0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x10040) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r7, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000380)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r8, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) 6m5.484365578s ago: executing program 3 (id=106): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) (async) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 6m4.736018129s ago: executing program 3 (id=107): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000680)=[@increfs={0x40046304, 0x10000}], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20000014) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000104bda000000c7f4191b74e954ec00000000000000000000000200000408ef010073797a30000000080900e00093797a32000000002c0004800000017a7600000000000069740000001400028008000140800020010000"], 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r4, 0xc04064aa, &(0x7f0000000400)={&(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, r5, 0x0, '\x00', 0x5}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f0000000180)={r5}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x3c, 0x0, &(0x7f0000000340)=[@acquire_done, @decrefs={0x40046307, 0x1}, @request_death={0x400c630e, 0x1}, @clear_death={0x400c630f, 0x2}], 0x0, 0x0, 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000007c0)={'wpan0\x00'}) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc7, &(0x7f0000000580)=""/199, 0x41000, 0x0, '\x00', 0x0, @sk_msg=0x7, r2}, 0x94) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d18205179bca4bd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1e6bf69843844c7"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xbf, &(0x7f000000cf3d)=""/191, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES16=0x0, @ANYRES32=r10, @ANYBLOB="30fed483d340197dc7fac3ae3e4c0cbb6dbc38cc79f0f5e671f3ca135c2354333ce8086989942fd4"], 0x10) sendmsg$inet(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r11}, &(0x7f0000000000), &(0x7f00000002c0)=r7}, 0x20) sendmsg$inet(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) 6m4.349232871s ago: executing program 3 (id=108): r0 = getpid() r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendfile(r1, r1, 0x0, 0xb) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = getpgrp(r2) syz_usb_connect(0x3, 0x6a, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0xc7, 0xba, 0xf8, 0x20, 0x763, 0x1041, 0x64bd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x58, 0x1, 0x0, 0x0, 0xe0, 0x0, [{{0x9, 0x4, 0xb8, 0x0, 0x6, 0xff, 0x6f, 0x9, 0x0, [], [{{0x9, 0x5, 0x8e, 0x1c, 0x10, 0x4, 0xff, 0xf9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x100}]}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0x5, 0x1, 0xd6}}, {{0x9, 0x5, 0x9, 0x10, 0xb58b13b306631ca3, 0x30, 0xb2, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0xb}]}}, {{0x9, 0x5, 0xa, 0x2, 0x10, 0x2, 0x5, 0xcb}}, {{0x9, 0x5, 0x1, 0x4, 0x200, 0x9, 0x80, 0x6, [@generic={0x2, 0x5}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x10, 0x6, 0xa}}]}}]}}]}}, 0x0) r4 = gettid() rt_tgsigqueueinfo(r4, r3, 0x20, &(0x7f00000003c0)={0x2a, 0xc, 0xc}) 6m2.679910893s ago: executing program 3 (id=109): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000016c0)) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x1}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000080)={0x20, {{0xa, 0x4e22, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x4e24, 0x2, @remote, 0x3}}}, 0x104) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040), 0xc) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r4, &(0x7f0000000180)=[{&(0x7f0000002680)="1e", 0xfdef}], 0x1) close_range(r3, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[], 0x14}}, 0x0) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x140, 0x0) 6m1.671809305s ago: executing program 3 (id=110): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40400, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'hsr0\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0xfe6c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$int_in(r6, 0x5421, &(0x7f0000000080)=0x1) listen(r6, 0x1ad72f7) accept4(r6, 0x0, 0x0, 0x80000) r7 = syz_io_uring_setup(0xcd3, &(0x7f0000000400)={0x0, 0x5889, 0x1000, 0x0, 0xffeffc03}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r10 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r11 = fcntl$dupfd(r10, 0x0, r10) ioctl$USBDEVFS_SUBMITURB(r11, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r11, 0x4004550d, 0x0) write$sndseq(r11, &(0x7f0000000180), 0x0) syz_usb_connect(0x3, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007000300390c"], 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r5, 0x61, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}}) io_uring_enter(r7, 0x3516, 0x483, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) syz_io_uring_setup(0x111, &(0x7f0000000380)={0x0, 0x5887, 0x1000, 0x0, 0x36f}, &(0x7f0000001140)=0x0, &(0x7f0000001080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 5m46.294798987s ago: executing program 36 (id=110): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40400, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'hsr0\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0xfe6c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$int_in(r6, 0x5421, &(0x7f0000000080)=0x1) listen(r6, 0x1ad72f7) accept4(r6, 0x0, 0x0, 0x80000) r7 = syz_io_uring_setup(0xcd3, &(0x7f0000000400)={0x0, 0x5889, 0x1000, 0x0, 0xffeffc03}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r10 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r11 = fcntl$dupfd(r10, 0x0, r10) ioctl$USBDEVFS_SUBMITURB(r11, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r11, 0x4004550d, 0x0) write$sndseq(r11, &(0x7f0000000180), 0x0) syz_usb_connect(0x3, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007000300390c"], 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r5, 0x61, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}}) io_uring_enter(r7, 0x3516, 0x483, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) syz_io_uring_setup(0x111, &(0x7f0000000380)={0x0, 0x5887, 0x1000, 0x0, 0x36f}, &(0x7f0000001140)=0x0, &(0x7f0000001080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 1m43.241495197s ago: executing program 8 (id=921): syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) close(r2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000fedbdf250c000000080006"], 0x24}, 0x1, 0x0, 0x0, 0x4c001}, 0x10) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1m42.220672705s ago: executing program 9 (id=925): mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random="1c00"}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x18, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x400040, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000080)=0x7, 0x4) inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x40000020) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r3, &(0x7f0000048040)=""/102392, 0x18ff8) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x1, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000004c0)=[@in6={0xa, 0x4e24, 0x20b, @loopback, 0x7fff}]}, &(0x7f0000000440)=0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000140)={r6}, &(0x7f0000000080)=0x8) kcmp(0x0, 0x0, 0x4, r2, r3) 1m41.405385601s ago: executing program 8 (id=927): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x61d0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_ECHOREQ(r1, 0x0, 0x8010) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4011}, 0x8040) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0x2f) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000000000040000390abccd0e480f38311800000000000000000000e91bb88a84de22a889c852e756f5e9e875a730bfea2d0e50efaa9535e9ecf7de1db7fb808c78621c1f91614cbdbb812019a22b13289f5b15da77", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000060049655bbefa03df"], 0x48) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={0x0}) 1m41.191842835s ago: executing program 9 (id=928): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c07005400128008000100687372"], 0x90}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000140)='vfat\x00', 0x208000, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0xfffffffffffffebf}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x800) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$inet(r5, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 1m41.01682329s ago: executing program 8 (id=930): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000840)={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x40, 0x21, 0x7b, {0x7b, 0x23, "7b0e796e9e041be3ea7de57671fd88574e020951e00dc41a3deb59b13b10b3dfcbb18b14c30316b91a80bc7f926aaf66f9de283f8c3b2d5bf3a26a265b4c139812d0ac0c95f6d8d8f7f0f673343050bfa2c4de240505c43a5bb4219b952b5408b1a694a6c629ee0896239b7edb49da1afcaa2581fee3a44242"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000440)={0x1c, &(0x7f00000001c0)={0x0, 0x9, 0xfb, "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"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x80}}) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000100)='memory.pressure\x00', 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 1m39.832379488s ago: executing program 9 (id=937): socket$nl_route(0x10, 0x3, 0x0) mount(&(0x7f0000000180)=@rnullb, 0x0, &(0x7f00000003c0)='gadgetfs\x00', 0x1, 0x0) mq_open(0x0, 0x42, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0xc0, &(0x7f00000001c0)=0x6, 0x0, 0x4) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f0000000180)={0x18, r3, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r2, 0x3b86, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r3, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLL', 0xe, 0x2}) ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r5, r3, 0x1c, 0x3, 0x2}) ioctl$IOMMU_DESTROY$ioas(r2, 0x3b80, &(0x7f0000000540)={0x8, r5}) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f0000000580)={0x18, r3}) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xafe, 0x4e22, 0x18, 0x0, @wg=@data={0x4, 0x40000000}}}}}}, 0x0) 1m38.756713458s ago: executing program 9 (id=940): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x61d0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_ECHOREQ(r1, 0x0, 0x8010) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4011}, 0x8040) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0x2f) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000000000040000390abccd0e480f38311800000000000000000000e91bb88a84de22a889c852e756f5e9e875a730bfea2d0e50efaa9535e9ecf7de1db7fb808c78621c1f91614cbdbb812019a22b13289f5b15da77", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000060049655bbefa03df"], 0x48) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={0x0}) 1m38.039226187s ago: executing program 5 (id=943): r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000000000000000000008000400", 0x20) 1m37.968400934s ago: executing program 5 (id=944): socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 1m37.885943566s ago: executing program 5 (id=946): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x200, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x2, 0x5, 0x6, 0x1}, 0x10, 0x2a9bf, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb763e", 0x28, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x41}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, [{0x18, 0x3, "007c4de20278ab96e88afd5c976b4c1ce4a945b1aafb"}]}}}}}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) eventfd(0xffff) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000540)={@private1, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x14, 0x30, 0x48b, 0x70bd26, 0x3ffffffc}, 0x14}}, 0x2000e994) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x30, r6, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r7 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000480)=0x9) sendmsg$IPSET_CMD_ADD(r7, 0x0, 0x11) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @private=0xa010100, @multicast1}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x1000000}}}}}, 0x0) 1m36.286864738s ago: executing program 7 (id=950): openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000280)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x0, 0xe0ba}) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) splice(r2, 0x0, r2, &(0x7f0000000500)=0x8, 0x23c1056a, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140)="4e535093980e8b66aa83a313a54bd2187471ea921a63db0d1c27a89c14aab7f5d45a8a13284aa8321101d06bc9cff4bb1dcf888ca57a2a70a50d458d4d8eb17eba2647cd86507a7716015c6e70a00c682a875c5d58c53ed470278cff41eaa8e02dac739dd1dff30c9d7942050d2f64eb926ec9f118c0df8810eead26d8e1071072c2f15ce7c2cd8675a0ac38469c4da75fe06e60ccf2d9debaba", &(0x7f0000000100)=""/11, 0x2}, 0x20) 1m35.655548094s ago: executing program 8 (id=951): socket$nl_route(0x10, 0x3, 0x0) mount(&(0x7f0000000180)=@rnullb, 0x0, &(0x7f00000003c0)='gadgetfs\x00', 0x1, 0x0) mq_open(0x0, 0x42, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0xc0, &(0x7f00000001c0)=0x6, 0x0, 0x4) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f0000000180)={0x18, r3, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r3, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r3, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLL', 0xe, 0x2}) ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r5, r3, 0x1c, 0x3, 0x2}) ioctl$IOMMU_DESTROY$ioas(r2, 0x3b80, &(0x7f0000000540)={0x8, r5}) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f0000000580)={0x18, r3}) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xafe, 0x4e22, 0x18, 0x0, @wg=@data={0x4, 0x40000000}}}}}}, 0x0) 1m35.456088028s ago: executing program 6 (id=952): eventfd(0x401) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x80000000, 0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000"], 0x50) r0 = dup(0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f00000a0000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0xb64a2f7672fc9c3e, 0x0, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f00000003c0)={0x3c76, [0x4, 0xd2e, 0x6, 0x2, 0x5, 0x8, 0x1ff, 0x4, 0x8, 0x4e8, 0xfffe, 0x0, 0x9, 0x2, 0x8484, 0x7f, 0x320e, 0xfff, 0x3, 0x1cf4, 0x5, 0x2, 0x1ff, 0x7, 0xf, 0x9, 0x7d, 0x3, 0xfff8, 0xffff, 0x84, 0xfffd, 0x6, 0x57d5, 0xff06, 0x48e, 0x9, 0xa, 0x1, 0x1, 0x9, 0x4, 0x6, 0x6, 0x401, 0xcc4, 0x5a4, 0x8], 0x4}) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) mkdir(0x0, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3d, &(0x7f0000000080)={0x300}, 0x8) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1800, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b5080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000006b3e000000b705000008000000f1bdfb8270ac89ad7156498733133885000000b30000009500000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m35.297956059s ago: executing program 7 (id=953): mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random="1c00"}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x18, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x400040, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000080)=0x7, 0x4) inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x40000020) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r3, &(0x7f0000048040)=""/102392, 0x18ff8) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x1, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000004c0)=[@in6={0xa, 0x4e24, 0x20b, @loopback, 0x7fff}]}, &(0x7f0000000440)=0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000140)={r6}, &(0x7f0000000080)=0x8) kcmp(0x0, 0x0, 0x4, r2, r3) 1m34.507790998s ago: executing program 8 (id=954): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x58, 0x3, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xffa}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_REPLIED={0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xc4}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x58}}, 0x0) 1m34.197204751s ago: executing program 6 (id=955): r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000000000000000000008000400", 0x20) 1m34.133891794s ago: executing program 7 (id=956): syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) close(r2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000fedbdf250c000000080006"], 0x24}, 0x1, 0x0, 0x0, 0x4c001}, 0x10) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1m34.120497661s ago: executing program 5 (id=957): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x1000) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, 0x0) 1m34.032127888s ago: executing program 8 (id=958): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x15) io_setup(0x1, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000980)={0x0, 0x8, 0x40}, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) write$P9_RSTATu(r1, 0x0, 0x217) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x125003, 0x0) r4 = socket(0x23, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xe0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVKEY={0xbc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x54, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7fffffff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2a4}]}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_ID={0x38, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10000}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20040842}, 0x4000000) socket$kcm(0x29, 0x5, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x400, 0x70bd6a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d522802f1}, 0x48c4) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m34.001542365s ago: executing program 9 (id=959): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xfff2}, {0x2, 0xfffc}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0xc090) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = inotify_init() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x885}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x2, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbabd, 0x81, 0x5, 0x1, 0xfff}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r4, 0x118, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000140)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f00000001c0)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r6, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0, 0x800000}, 0x76f8, "884fbe2726aa0a32f3e65f909acda971a093228292456e0332e6c11577b514f0bb8db731789d860e9589c4cbdd60b7a851a8a3c55ada2f90c51a69bf4a5c3e32296535dc838ef00dc18a32a79118dc858628f741f107552021e5a81d38e4374a8a717a7ca9015083cfff5d16156ef9cabf4f60c0da46870a10bf520cc5abcf9e3a437761ea75776763139fadd55c46daf5338870951822f6a803ccfbab9c3f507672d7c39ea9ccf81d9bc2b4649e7b44ed9fd7cb9bd389240cd41c415113d1caac4536f05c07e596d6addad2a4d27ba21a3b655753c508caedcc812ca235a7cd1686426b208bdecf8a4265ba8f6824aa60306e2d623481eed301b6dc21041fa8b6592be00bb74de1989a45a5aa32c189e9f5a5bb878281d0129afcfb8410cd1fa5acd080993d2d084213130a9b8d517d13251e6605a03d9b8faf507e820205a1f471af7b261419e79e09c547f7c10fd3f1ad876f59fdcc5e07d0ff4dee6ea2e3856616a352d648b9b5261b6263020fc3ae8eb404bc25703b3d3b83172d07ff22907d6631d226c8247c92c1826ff814590dfe8c7fc54dfb265e906f756846546316b20e0105e2a5355a210b2b7f5db61d8f90bb783b41ce368233bd08044e9283531fffe49e3d305ecfb16075a047557f57bb7baf8babfc02975ad0d60ed8de9cb8adc9f667bc6826cbea8e260e4bff28a5ec19d38d1fc019db3cfaf310e764d78619cb27fb17af05a0e8ae831ce8413721e71138e62cc4ad8e7974d1506b4fb581c549a3dd7b7ef44ac37201aa3bce6f37f648d781bcb4f329fd45ffa640f1b04efb38a36e0ed0e2abcb07e4ad88ae3edfb6d840d75340204243d0e1c1c3139823b0d5ad196430bf4566619a1a97df4376a7e9a9e9c1d97b9f773c921778f2cb5165c02da1423305c502076177e4af50cb3343c10b01b78e3fe5520bdfae2b3dbe42db0f0eb55bbcb19038018d45ccdb8b0df400085a02c61b033f430fb6a7408e090c65798bc49d35e049d276fd1952d2b3dfd92a2548411e21be26216fe68fc3cf1c6625031260153708a53255b3d3d0411d5f0e8ab2102a97e539c34e9c769a7dafb87c5918deb59ef05e928c2c52775de467fa843cbcdabc290097eeb2ee7c58d86e3fccc39a5b694c18a4cc0d6af1e61d9c69e6466bc0cbef15365109e4f67a6268625f8c3f358fb7d567cbea52e1bc289bd8effda4e362a729e8cd3064970b97e3f72535d9ba88e97a14834cfd8dc86b5d2f9b35425a4162e6abe8b785ef462883e716c91b8eb281d81f68f606f16fcbc5cddfdec3b515818a647d86a4c17bae6ad525e95598052c49cdee821ceb45b2350dda13628db0dd266f30285241a2b147d65113b8ed3665a3451f7a56cf430ec98aeac702d9b9f776d97520a9d039e5b2fff34ac4d4e0a32e1f35c8f38e4f4fe1b3212a70f185ad71ec86b8c9"}, 0x11000}) setsockopt(r5, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 1m33.985950357s ago: executing program 6 (id=960): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) read(r1, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x335, @tick=0xe, 0x52}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f00000000c0)={0x9ee, 0x1, 'client0\x00', 0x0, "a44bf30000051057", "c2382b4c6bb074dcb971c144adc7e6576c93d30263c40dbdd1b75d7917ca30cb", 0x15, 0x800}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$inet_icmp(0x2, 0x2, 0x1) close(r3) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x42901, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90224fc602f1a99000a740100053582c137", 0x21}], 0x1}, 0x0) r7 = syz_open_dev$vcsa(0x0, 0x3, 0x103100) r8 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYRES16=r8, @ANYBLOB], 0xc4}, 0x1, 0x0, 0x0, 0x20}, 0x4c814) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) socket$packet(0x11, 0x3, 0x300) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x4a80) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000040)='xfs\x00', 0x800000, 0x0) tkill(r0, 0x7) 1m33.881922803s ago: executing program 5 (id=961): openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0480, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x305cc6, 0x1, 0x800004, 0x20a}, &(0x7f0000000380)=0x0, &(0x7f00000000c0)=0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x881) io_uring_setup(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "4aaf41dcefb8acad", "6301be207ae86709252de108867a82e9ef5ffbf6efeead6477321c29c53b59ea", "48588489", "4e11d0f9a1600288"}, 0x38) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x101101, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000140), 0x21c804, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) socket$inet6(0xa, 0x80002, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f00000000c0)={0x1f, 0x4}, 0x6) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x40, &(0x7f0000000200)=0x4, 0x4) write$bt_hci(r8, &(0x7f0000000200)=ANY=[], 0x6) 1m33.672153291s ago: executing program 9 (id=962): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000840)={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000440)={0x1c, &(0x7f00000001c0)={0x0, 0x9, 0xfb, "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"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x80}}) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000100)='memory.pressure\x00', 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 1m32.756858731s ago: executing program 6 (id=963): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x20) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x2, &(0x7f0000000000)=0x3, 0x4) 1m32.723563369s ago: executing program 7 (id=964): socket$nl_route(0x10, 0x3, 0x0) mount(&(0x7f0000000180)=@rnullb, 0x0, &(0x7f00000003c0)='gadgetfs\x00', 0x1, 0x0) mq_open(0x0, 0x42, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0xc0, &(0x7f00000001c0)=0x6, 0x0, 0x4) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f0000000180)={0x18, r3, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r3, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r3, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLL', 0xe, 0x2}) ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r5, r3, 0x1c, 0x3, 0x2}) ioctl$IOMMU_DESTROY$ioas(r2, 0x3b80, &(0x7f0000000540)={0x8, r5}) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f0000000580)={0x18, r3}) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xafe, 0x4e22, 0x18, 0x0, @wg=@data={0x4, 0x40000000}}}}}}, 0x0) 1m32.665527173s ago: executing program 5 (id=965): eventfd(0x401) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x80000000, 0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000"], 0x50) r0 = dup(0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f00000a0000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0xb64a2f7672fc9c3e, 0x0, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f00000003c0)={0x3c76, [0x4, 0xd2e, 0x6, 0x2, 0x5, 0x8, 0x1ff, 0x4, 0x8, 0x4e8, 0xfffe, 0x0, 0x9, 0x2, 0x8484, 0x7f, 0x320e, 0xfff, 0x3, 0x1cf4, 0x5, 0x2, 0x1ff, 0x7, 0xf, 0x9, 0x7d, 0x3, 0xfff8, 0xffff, 0x84, 0xfffd, 0x6, 0x57d5, 0xff06, 0x48e, 0x9, 0xa, 0x1, 0x1, 0x9, 0x4, 0x6, 0x6, 0x401, 0xcc4, 0x5a4, 0x8], 0x4}) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) mkdir(0x0, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3d, &(0x7f0000000080)={0x300}, 0x8) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1800, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b5080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000006b3e000000b705000008000000f1bdfb8270ac89ad7156498733133885000000b30000009500000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m32.520318765s ago: executing program 6 (id=966): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) r1 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000000000/0x4000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmat(r1, &(0x7f0000ffd000/0x2000)=nil, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000180)={0x0, 0x1, 0x2, 0x6dd, 0x10, 0x200, 0x2, 0x3, 0x20, 0xffffffff, 0x20, 0x7, &(0x7f00000000c0)=[0x4], 0x1, 0x0}) 1m31.685711804s ago: executing program 7 (id=967): mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random="1c00"}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x18, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x400040, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000080)=0x7, 0x4) inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x40000020) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r3, &(0x7f0000048040)=""/102392, 0x18ff8) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x1, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000004c0)=[@in6={0xa, 0x4e24, 0x20b, @loopback, 0x7fff}]}, &(0x7f0000000440)=0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000140)={r6}, &(0x7f0000000080)=0x8) kcmp(0x0, 0x0, 0x4, r2, r3) 1m31.645274199s ago: executing program 6 (id=968): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x200, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x2, 0x5, 0x6, 0x1}, 0x10, 0x2a9bf, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r2}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) eventfd(0xffff) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000540)={@private1, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r4}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x14, 0x30, 0x48b, 0x70bd26, 0x3ffffffc}, 0x14}}, 0x2000e994) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x30, r7, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r8 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000480)=0x9) sendmsg$IPSET_CMD_ADD(r8, 0x0, 0x11) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @private=0xa010100, @multicast1}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x1000000}}}}}, 0x0) 1m19.178786563s ago: executing program 7 (id=969): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x61d0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_ECHOREQ(r1, 0x0, 0x8010) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4011}, 0x8040) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0x2f) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000000000040000390abccd0e480f38311800000000000000000000e91bb88a84de22a889c852e756f5e9e875a730bfea2d0e50efaa9535e9ecf7de1db7fb808c78621c1f91614cbdbb812019a22b13289f5b15da77", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000060049655bbefa03df"], 0x48) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={0x0}) 0s ago: executing program 37 (id=958): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x15) io_setup(0x1, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000980)={0x0, 0x8, 0x40}, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) write$P9_RSTATu(r1, 0x0, 0x217) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x125003, 0x0) r4 = socket(0x23, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xe0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVKEY={0xbc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x54, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7fffffff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2a4}]}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_ID={0x38, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10000}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20040842}, 0x4000000) socket$kcm(0x29, 0x5, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x400, 0x70bd6a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d522802f1}, 0x48c4) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): e=1400 audit(1769531240.884:470): avc: denied { write } for pid=9050 comm="syz.9.582" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 359.397748][ T30] audit: type=1400 audit(1769531240.884:471): avc: denied { open } for pid=9050 comm="syz.9.582" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 359.431275][ T30] audit: type=1400 audit(1769531240.974:472): avc: denied { ioctl } for pid=9050 comm="syz.9.582" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x330f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 359.515560][ T9069] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.586'. [ 359.600566][ T24] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 360.028070][ T30] audit: type=1400 audit(1769531241.794:473): avc: denied { mount } for pid=9070 comm="syz.7.587" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 360.260631][ T24] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 360.269220][ T24] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 360.279423][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 360.288555][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 360.310139][ T30] audit: type=1400 audit(1769531241.934:474): avc: denied { read } for pid=9070 comm="syz.7.587" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 360.343891][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 360.356338][ T24] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 360.365516][ T24] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 360.373670][ T24] usb 7-1: Product: syz [ 360.377834][ T24] usb 7-1: Manufacturer: syz [ 360.421181][ T24] cdc_wdm 7-1:1.0: skipping garbage [ 360.449799][ T24] cdc_wdm 7-1:1.0: skipping garbage [ 360.469715][ T24] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 360.475778][ T24] cdc_wdm 7-1:1.0: Unknown control protocol [ 360.480438][ T30] audit: type=1400 audit(1769531241.944:475): avc: denied { open } for pid=9070 comm="syz.7.587" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 360.628930][ T30] audit: type=1400 audit(1769531242.464:476): avc: denied { read write } for pid=9065 comm="syz.6.585" name="cdc-wdm0" dev="devtmpfs" ino=3052 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 360.690399][ T30] audit: type=1400 audit(1769531242.464:477): avc: denied { open } for pid=9065 comm="syz.6.585" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3052 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 361.014903][ T5813] usb 7-1: USB disconnect, device number 24 [ 361.261011][ T9076] ceph: No mds server is up or the cluster is laggy [ 361.268982][ T9081] ceph: No mds server is up or the cluster is laggy [ 361.890400][ T5813] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 362.214632][ T9109] XFS (nbd7): SB validate failed with error -5. [ 362.257537][ T5813] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 362.356631][ T5813] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.417041][ T5813] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.459095][ T5813] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 362.511003][ T24] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 362.559937][ T5813] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 362.608590][ T5813] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 362.679914][ T5813] usb 9-1: Manufacturer: syz [ 362.719431][ T5813] usb 9-1: config 0 descriptor?? [ 362.738430][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.772196][ T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 362.885356][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 362.896795][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 362.906953][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 362.925770][ T24] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 362.940550][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 362.954832][ T24] usb 6-1: Product: syz [ 362.959000][ T24] usb 6-1: Manufacturer: syz [ 362.969011][ T9128] netlink: 8 bytes leftover after parsing attributes in process `syz.7.598'. [ 362.992664][ T24] usb 6-1: SerialNumber: syz [ 363.052549][ T24] usb 6-1: config 0 descriptor?? [ 363.446282][ T24] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 363.474756][ T24] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 363.605663][ T9131] orangefs_mount: mount request failed with -4 [ 363.674159][ T5813] usbhid 9-1:0.0: can't add hid device: -71 [ 363.681946][ T5813] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 363.700915][ T24] radio-si470x 6-1:0.0: software version 0, hardware version 0 [ 363.712208][ T24] radio-si470x 6-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 363.731605][ T5813] usb 9-1: USB disconnect, device number 12 [ 363.759236][ T24] radio-si470x 6-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 363.901482][ T24] radio-si470x 6-1:0.0: submitting int urb failed (-90) [ 364.095565][ T9143] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.603'. [ 364.661266][ T793] kernel read not supported for file /audio1 (pid: 793 comm: kworker/0:2) [ 365.034937][ T24] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 365.330369][ T24] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -22 [ 365.670642][ T793] usb 6-1: USB disconnect, device number 19 [ 365.837793][ T9163] XFS (nbd7): SB validate failed with error -5. [ 368.029943][ T9189] orangefs_mount: mount request failed with -4 [ 368.297217][ T9198] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.616'. [ 368.411638][ T43] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 368.692777][ T43] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 368.857142][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.066840][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.132676][ T9200] netlink: 8 bytes leftover after parsing attributes in process `syz.7.615'. [ 369.155895][ T43] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 369.741665][ T43] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 369.791007][ T43] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 369.800138][ T43] usb 7-1: Manufacturer: syz [ 369.832339][ T43] usb 7-1: config 0 descriptor?? [ 370.297939][ T43] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 370.320494][ T43] appleir 0003:05AC:8243.0008: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 370.678761][ T43] kernel read not supported for file /audio1 (pid: 43 comm: kworker/1:1) [ 370.850892][ T9223] tipc: Invalid UDP bearer configuration [ 370.850938][ T9223] tipc: Enabling of bearer rejected, failed to enable media [ 371.303878][ T9234] XFS (nbd9): SB validate failed with error -5. [ 371.940408][ T43] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 371.960117][ T10] usb 7-1: USB disconnect, device number 25 [ 372.658776][ T43] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.670963][ T43] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 372.681925][ T30] audit: type=1400 audit(1769531254.514:478): avc: denied { create } for pid=9243 comm="syz.9.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 372.682915][ T43] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 372.713865][ T43] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 372.730859][ T43] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 372.834798][ T43] usb 8-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 372.974459][ T9247] orangefs_mount: mount request failed with -4 [ 374.760246][ T30] audit: type=1400 audit(1769531254.754:479): avc: denied { getopt } for pid=9243 comm="syz.9.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 375.186429][ T43] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 375.196598][ T43] usb 8-1: Product: syz [ 375.201640][ T43] usb 8-1: Manufacturer: syz [ 375.206369][ T43] usb 8-1: SerialNumber: syz [ 375.239070][ T43] usb 8-1: config 0 descriptor?? [ 375.673219][ T43] radio-si470x 8-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 375.720722][ T43] radio-si470x 8-1:0.0: probe with driver radio-si470x failed with error -5 [ 375.762505][ T43] usb 8-1: USB disconnect, device number 16 [ 376.125775][ T30] audit: type=1400 audit(1769531257.964:480): avc: denied { shutdown } for pid=9279 comm="syz.7.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 376.192285][ T9284] netlink: 8 bytes leftover after parsing attributes in process `syz.5.634'. [ 376.890388][ T43] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 377.201999][ T43] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 377.280342][ T43] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.299200][ T43] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.309199][ T43] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 377.487802][ T9296] XFS (nbd6): SB validate failed with error -5. [ 377.783976][ T43] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 377.803190][ T43] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 377.896047][ T5813] kernel read not supported for file /audio1 (pid: 5813 comm: kworker/1:3) [ 377.906104][ T43] usb 9-1: Manufacturer: syz [ 378.150802][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.413345][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.422873][ T43] usb 9-1: config 0 descriptor?? [ 378.591790][ T9320] FAULT_INJECTION: forcing a failure. [ 378.591790][ T9320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.602257][ T9313] orangefs_mount: mount request failed with -4 [ 378.625821][ T9320] CPU: 1 UID: 0 PID: 9320 Comm: syz.6.644 Tainted: G L syzkaller #0 PREEMPT(full) [ 378.625849][ T9320] Tainted: [L]=SOFTLOCKUP [ 378.625855][ T9320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 378.625866][ T9320] Call Trace: [ 378.625871][ T9320] [ 378.625878][ T9320] dump_stack_lvl+0x100/0x190 [ 378.625906][ T9320] should_fail_ex.cold+0x5/0xa [ 378.625940][ T9320] _copy_to_user+0x32/0xd0 [ 378.625966][ T9320] simple_read_from_buffer+0xcb/0x170 [ 378.625988][ T9320] proc_fail_nth_read+0x1af/0x230 [ 378.626013][ T9320] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 378.626039][ T9320] ? rw_verify_area+0xce/0x6d0 [ 378.626055][ T9320] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 378.626078][ T9320] vfs_read+0x1e4/0xb30 [ 378.626100][ T9320] ? __pfx_vfs_read+0x10/0x10 [ 378.626117][ T9320] ? find_held_lock+0x2b/0x80 [ 378.626141][ T9320] ? __fget_files+0x215/0x3d0 [ 378.626166][ T9320] ? __fget_files+0x21f/0x3d0 [ 378.626193][ T9320] ksys_read+0x12a/0x250 [ 378.626211][ T9320] ? __pfx_ksys_read+0x10/0x10 [ 378.626229][ T9320] ? fput+0x79/0x100 [ 378.626257][ T9320] do_syscall_64+0xc9/0xf80 [ 378.626278][ T9320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.626295][ T9320] RIP: 0033:0x7fca0595b78e [ 378.626310][ T9320] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 378.626325][ T9320] RSP: 002b:00007fca03bf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 378.626342][ T9320] RAX: ffffffffffffffda RBX: 00007fca03bf66c0 RCX: 00007fca0595b78e [ 378.626353][ T9320] RDX: 000000000000000f RSI: 00007fca03bf60a0 RDI: 0000000000000003 [ 378.626363][ T9320] RBP: 00007fca03bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 378.626373][ T9320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.626383][ T9320] R13: 00007fca05c16038 R14: 00007fca05c15fa0 R15: 00007fffe3759788 [ 378.626408][ T9320] [ 379.042146][ T43] appleir 0003:05AC:8243.0009: unknown main item tag 0x0 [ 379.065678][ T43] appleir 0003:05AC:8243.0009: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0 [ 379.120487][ T793] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 379.271643][ T793] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.281864][ T793] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 379.294842][ T793] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 379.308029][ T793] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 379.318425][ T793] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 379.332975][ T793] usb 8-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 379.342142][ T793] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 379.350197][ T793] usb 8-1: Product: syz [ 379.354448][ T793] usb 8-1: Manufacturer: syz [ 379.359032][ T793] usb 8-1: SerialNumber: syz [ 379.365917][ T793] usb 8-1: config 0 descriptor?? [ 379.490729][ T9349] XFS (nbd9): SB validate failed with error -5. [ 379.690404][ T793] radio-si470x 8-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 380.072042][ T793] radio-si470x 8-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 380.090368][ T793] radio-si470x 8-1:0.0: software version 0, hardware version 0 [ 380.097932][ T793] radio-si470x 8-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 380.111343][ T793] radio-si470x 8-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 380.253445][ T793] radio-si470x 8-1:0.0: submitting int urb failed (-90) [ 380.292141][ T5854] usb 9-1: USB disconnect, device number 13 [ 380.386391][ T9366] netlink: 8 bytes leftover after parsing attributes in process `syz.5.653'. [ 381.134358][ T793] radio-si470x 8-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 381.165683][ T793] radio-si470x 8-1:0.0: probe with driver radio-si470x failed with error -22 [ 381.384824][ T793] usb 8-1: USB disconnect, device number 17 [ 381.666856][ T9373] orangefs_mount: mount request failed with -4 [ 381.779324][ T30] audit: type=1400 audit(1769531263.614:481): avc: denied { read write } for pid=9382 comm="syz.9.662" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 381.818850][ T30] audit: type=1400 audit(1769531263.614:482): avc: denied { open } for pid=9382 comm="syz.9.662" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 381.843244][ T30] audit: type=1400 audit(1769531263.614:483): avc: denied { ioctl } for pid=9382 comm="syz.9.662" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 382.210775][ T5813] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 382.342918][ T9402] XFS (nbd7): SB validate failed with error -5. [ 382.463656][ T5813] usb 10-1: config 0 has no interfaces? [ 382.496966][ T5813] usb 10-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 382.568842][ T5813] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.741467][ T5813] usb 10-1: config 0 descriptor?? [ 383.040737][ T43] usb 10-1: USB disconnect, device number 16 [ 383.126658][ T9422] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.669'. [ 383.167016][ T793] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 383.505932][ T793] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 383.565651][ T793] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.671190][ T793] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.751157][ T9423] netlink: 8 bytes leftover after parsing attributes in process `syz.5.670'. [ 383.762747][ T793] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 383.872701][ T793] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 383.978860][ T793] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 384.022215][ T793] usb 7-1: Manufacturer: syz [ 384.043120][ T793] usb 7-1: config 0 descriptor?? [ 384.508646][ T793] appleir 0003:05AC:8243.000A: unknown main item tag 0x0 [ 384.534096][ T793] appleir 0003:05AC:8243.000A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 384.614716][ T9426] orangefs_mount: mount request failed with -4 [ 384.707768][ T30] audit: type=1400 audit(1769531266.544:484): avc: denied { ioctl } for pid=9437 comm="syz.8.676" path="socket:[29072]" dev="sockfs" ino=29072 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 384.709324][ T9438] vcan0: tx address claim with dlc 0 [ 384.860914][ T793] kernel read not supported for file /audio1 (pid: 793 comm: kworker/0:2) [ 384.893006][ T9445] tc_dump_action: action bad kind [ 385.029960][ T9448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.043452][ T9448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.253460][ T9455] netlink: 4 bytes leftover after parsing attributes in process `syz.8.679'. [ 385.442193][ T30] audit: type=1400 audit(1769531267.284:485): avc: denied { setopt } for pid=9460 comm="syz.8.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 385.472771][ T5813] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 385.634031][ T5813] usb 8-1: Using ep0 maxpacket: 8 [ 385.646248][ T5813] usb 8-1: config 0 interface 0 has no altsetting 0 [ 385.653310][ T5813] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 385.665396][ T5813] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.718714][ T5813] usb 8-1: config 0 descriptor?? [ 385.768318][ T30] audit: type=1400 audit(1769531267.604:486): avc: denied { read } for pid=9466 comm="syz.9.683" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 385.800494][ T793] usb 7-1: USB disconnect, device number 26 [ 385.821853][ T30] audit: type=1400 audit(1769531267.604:487): avc: denied { open } for pid=9466 comm="syz.9.683" path="/114/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 385.870786][ T30] audit: type=1400 audit(1769531267.604:488): avc: denied { ioctl } for pid=9466 comm="syz.9.683" path="/114/file0/file0" dev="fuse" ino=0 ioctlcmd=0x70cc scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 385.902773][ T30] audit: type=1400 audit(1769531267.604:489): avc: denied { connect } for pid=9466 comm="syz.9.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 386.145659][ T5813] mcp2221 0003:04D8:00DD.000B: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 386.546912][ T9479] XFS (nbd9): SB validate failed with error -5. [ 386.663003][ T5813] usb 8-1: USB disconnect, device number 18 [ 387.200350][ T10] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 387.653065][ T10] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.668406][ T10] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 387.680393][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 387.694975][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 387.710985][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 387.733509][ T10] usb 9-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 387.747754][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 387.756174][ T10] usb 9-1: Product: syz [ 387.767826][ T10] usb 9-1: Manufacturer: syz [ 387.781907][ T10] usb 9-1: SerialNumber: syz [ 387.821506][ T9494] orangefs_mount: mount request failed with -4 [ 388.076739][ T10] usb 9-1: config 0 descriptor?? [ 388.096456][ T9505] netlink: 8 bytes leftover after parsing attributes in process `syz.6.692'. [ 388.191454][ T9509] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.693'. [ 388.658755][ T10] radio-si470x 9-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 388.957117][ T10] radio-si470x 9-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 388.970520][ T10] radio-si470x 9-1:0.0: software version 0, hardware version 0 [ 388.978081][ T10] radio-si470x 9-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 388.990664][ T10] radio-si470x 9-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 389.004281][ T10] radio-si470x 9-1:0.0: submitting int urb failed (-90) [ 389.321104][ T5854] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 389.521943][ T5854] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 389.542126][ T5854] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.563117][ T5854] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.713625][ T5854] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 389.781316][ T5854] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 389.798898][ T5854] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 389.817175][ T5854] usb 8-1: Manufacturer: syz [ 389.891533][ T5854] usb 8-1: config 0 descriptor?? [ 389.929690][ T9524] netlink: 288 bytes leftover after parsing attributes in process `syz.6.697'. [ 389.939821][ T10] radio-si470x 9-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 389.949503][ T10] radio-si470x 9-1:0.0: probe with driver radio-si470x failed with error -22 [ 390.267026][ T5813] usb 9-1: USB disconnect, device number 15 [ 390.303076][ T9536] XFS (nbd5): SB validate failed with error -5. [ 390.356125][ T5854] appleir 0003:05AC:8243.000C: unknown main item tag 0x0 [ 390.871834][ T5854] appleir 0003:05AC:8243.000C: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0 [ 391.046391][ T9548] FAULT_INJECTION: forcing a failure. [ 391.046391][ T9548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 391.064856][ T9548] CPU: 0 UID: 0 PID: 9548 Comm: syz.9.702 Tainted: G L syzkaller #0 PREEMPT(full) [ 391.064884][ T9548] Tainted: [L]=SOFTLOCKUP [ 391.064890][ T9548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 391.064900][ T9548] Call Trace: [ 391.064906][ T9548] [ 391.064913][ T9548] dump_stack_lvl+0x100/0x190 [ 391.064940][ T9548] should_fail_ex.cold+0x5/0xa [ 391.064967][ T9548] _copy_from_iter+0x1f4/0x1690 [ 391.064989][ T9548] ? __alloc_skb+0x220/0x410 [ 391.065008][ T9548] ? __alloc_skb+0x35d/0x410 [ 391.065027][ T9548] ? __pfx__copy_from_iter+0x10/0x10 [ 391.065048][ T9548] ? netlink_autobind.isra.0+0x140/0x370 [ 391.065081][ T9548] netlink_sendmsg+0x808/0xda0 [ 391.065109][ T9548] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.065131][ T9548] ? __might_fault+0x70/0x140 [ 391.065159][ T9548] ____sys_sendmsg+0xa54/0xc30 [ 391.065178][ T9548] ? __pfx_____sys_sendmsg+0x10/0x10 [ 391.065205][ T9548] ___sys_sendmsg+0x190/0x1e0 [ 391.065225][ T9548] ? __pfx____sys_sendmsg+0x10/0x10 [ 391.065254][ T9548] ? find_held_lock+0x2b/0x80 [ 391.065291][ T9548] __sys_sendmsg+0x170/0x220 [ 391.065314][ T9548] ? __pfx___sys_sendmsg+0x10/0x10 [ 391.065359][ T9548] do_syscall_64+0xc9/0xf80 [ 391.065381][ T9548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.065397][ T9548] RIP: 0033:0x7f6b6179aeb9 [ 391.065412][ T9548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.065429][ T9548] RSP: 002b:00007f6b62615028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 391.065445][ T9548] RAX: ffffffffffffffda RBX: 00007f6b61a15fa0 RCX: 00007f6b6179aeb9 [ 391.065456][ T9548] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 391.065466][ T9548] RBP: 00007f6b62615090 R08: 0000000000000000 R09: 0000000000000000 [ 391.065476][ T9548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.065486][ T9548] R13: 00007f6b61a16038 R14: 00007f6b61a15fa0 R15: 00007ffc5043c938 [ 391.065510][ T9548] [ 391.459879][ T9559] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.706'. [ 392.324050][ T5854] usb 8-1: USB disconnect, device number 19 [ 392.770845][ T5854] kernel read not supported for file /audio1 (pid: 5854 comm: kworker/0:3) [ 392.872129][ T9574] netlink: 8 bytes leftover after parsing attributes in process `syz.7.708'. [ 393.209415][ T9583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 393.603998][ T9597] XFS (nbd9): SB validate failed with error -5. [ 393.660806][ T10] usb 8-1: new full-speed USB device number 20 using dummy_hcd [ 393.860116][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.923862][ T10] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 394.017956][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 394.107232][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 394.194596][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 394.265705][ T10] usb 8-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 394.287040][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 394.339253][ T10] usb 8-1: Product: syz [ 394.352014][ T9605] netlink: 48 bytes leftover after parsing attributes in process `syz.6.716'. [ 394.380434][ T10] usb 8-1: Manufacturer: syz [ 394.395337][ T10] usb 8-1: SerialNumber: syz [ 394.404527][ T10] usb 8-1: config 0 descriptor?? [ 394.658309][ T9616] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.720'. [ 394.675597][ T5910] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 395.114498][ T10] radio-si470x 8-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 395.439101][ T10] radio-si470x 8-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 395.452750][ T10] radio-si470x 8-1:0.0: software version 0, hardware version 0 [ 395.460605][ T10] radio-si470x 8-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 395.474555][ T10] radio-si470x 8-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 395.490156][ T10] radio-si470x 8-1:0.0: submitting int urb failed (-90) [ 395.772175][ T5910] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 395.783042][ T5910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.826406][ T5910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.846337][ T5910] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 395.868398][ T5910] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 395.906443][ T5910] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 395.927007][ T5910] usb 6-1: Manufacturer: syz [ 395.962918][ T5910] usb 6-1: config 0 descriptor?? [ 396.106973][ T30] audit: type=1400 audit(1769531277.804:490): avc: denied { ioctl } for pid=9629 comm="syz.9.724" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 396.293348][ T30] audit: type=1326 audit(1769531278.104:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9632 comm="syz.8.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552f79aeb9 code=0x7ffc0000 [ 396.592805][ T10] radio-si470x 8-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 396.603334][ T5910] appleir 0003:05AC:8243.000D: unknown main item tag 0x0 [ 396.611035][ T10] radio-si470x 8-1:0.0: probe with driver radio-si470x failed with error -22 [ 396.629271][ T5910] appleir 0003:05AC:8243.000D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 396.660616][ T30] audit: type=1326 audit(1769531278.104:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9632 comm="syz.8.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552f79aeb9 code=0x7ffc0000 [ 396.692637][ T30] audit: type=1326 audit(1769531278.104:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9632 comm="syz.8.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f552f79aeb9 code=0x7ffc0000 [ 396.729074][ T9639] netlink: 8 bytes leftover after parsing attributes in process `syz.9.725'. [ 396.757958][ T30] audit: type=1326 audit(1769531278.104:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9632 comm="syz.8.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552f79aeb9 code=0x7ffc0000 [ 396.790103][ T30] audit: type=1326 audit(1769531278.104:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9632 comm="syz.8.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552f79aeb9 code=0x7ffc0000 [ 396.867594][ T5813] usb 8-1: USB disconnect, device number 20 [ 396.876763][ T30] audit: type=1326 audit(1769531278.104:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9632 comm="syz.8.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f552f79aeb9 code=0x7ffc0000 [ 396.900619][ T30] audit: type=1326 audit(1769531278.104:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9632 comm="syz.8.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552f79aeb9 code=0x7ffc0000 [ 396.924638][ T30] audit: type=1326 audit(1769531278.104:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9632 comm="syz.8.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552f79aeb9 code=0x7ffc0000 [ 397.034848][ T30] audit: type=1326 audit(1769531278.104:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9632 comm="syz.8.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f552f79c747 code=0x7ffc0000 [ 397.469719][ T9653] netlink: 24 bytes leftover after parsing attributes in process `syz.8.727'. [ 397.760091][ T9662] XFS (nbd9): SB validate failed with error -5. [ 398.017366][ T9660] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 398.107902][ T9670] netlink: 48 bytes leftover after parsing attributes in process `syz.6.731'. [ 398.132124][ T43] usb 6-1: USB disconnect, device number 20 [ 398.152636][ T9653] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 398.376787][ T9653] block device autoloading is deprecated and will be removed. [ 398.419691][ T9660] block device autoloading is deprecated and will be removed. [ 398.747516][ T9674] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.732'. [ 400.265225][ T9700] netlink: 8 bytes leftover after parsing attributes in process `syz.6.738'. [ 400.680350][ T5910] usb 8-1: new full-speed USB device number 21 using dummy_hcd [ 400.851593][ T5910] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.882320][ T5910] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 400.925708][ T5910] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 400.960355][ T5910] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 401.009540][ T5910] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 401.173489][ T5910] usb 8-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 401.180926][ T9707] orangefs_mount: mount request failed with -4 [ 401.184987][ T5910] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 401.207221][ T5910] usb 8-1: Product: syz [ 401.217247][ T5910] usb 8-1: Manufacturer: syz [ 401.237484][ T5910] usb 8-1: SerialNumber: syz [ 401.264152][ T5910] usb 8-1: config 0 descriptor?? [ 401.320351][ T10] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 401.472077][ T10] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 401.487250][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.498344][ T5910] radio-si470x 8-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 401.512033][ T5910] radio-si470x 8-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 401.524657][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.535199][ T10] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 401.549726][ T10] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 401.588300][ T10] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 401.604246][ T10] usb 10-1: Manufacturer: syz [ 401.619680][ T10] usb 10-1: config 0 descriptor?? [ 401.687788][ T5910] radio-si470x 8-1:0.0: software version 0, hardware version 0 [ 401.705569][ T5910] radio-si470x 8-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 401.739112][ T5910] radio-si470x 8-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 401.888280][ T5910] radio-si470x 8-1:0.0: submitting int urb failed (-90) [ 402.038063][ T10] appleir 0003:05AC:8243.000E: unknown main item tag 0x0 [ 402.076405][ T10] appleir 0003:05AC:8243.000E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0 [ 402.370517][ T43] kernel read not supported for file /audio1 (pid: 43 comm: kworker/1:1) [ 402.567212][ T9726] XFS (nbd6): SB validate failed with error -5. [ 403.232876][ T5910] radio-si470x 8-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 403.257412][ T5910] radio-si470x 8-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 403.324821][ T5910] usb 8-1: USB disconnect, device number 21 [ 403.465255][ T9740] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.747'. [ 404.153052][ T5813] usb 10-1: USB disconnect, device number 17 [ 404.360489][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 404.360505][ T30] audit: type=1400 audit(1769531286.204:509): avc: denied { append } for pid=9743 comm="syz.7.749" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 404.677649][ T30] audit: type=1400 audit(1769531286.504:510): avc: denied { bind } for pid=9743 comm="syz.7.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 404.804081][ T30] audit: type=1400 audit(1769531286.534:511): avc: denied { setopt } for pid=9743 comm="syz.7.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 404.895981][ T5131] Bluetooth: hci3: unexpected event for opcode 0x0c13 [ 405.224245][ T9767] bridge0: port 3(veth0_to_bridge) entered blocking state [ 405.232837][ T9767] bridge0: port 3(veth0_to_bridge) entered disabled state [ 405.247828][ T9767] veth0_to_bridge: entered allmulticast mode [ 405.307689][ T9767] veth0_to_bridge: entered promiscuous mode [ 405.554102][ T9767] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 405.572802][ T9767] bridge0: port 3(veth0_to_bridge) entered blocking state [ 405.580090][ T9767] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 407.838879][ T30] audit: type=1400 audit(1769531289.664:512): avc: denied { create } for pid=9769 comm="syz.7.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 408.243751][ T9797] XFS (nbd8): SB validate failed with error -5. [ 409.090345][ T5910] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 409.220676][ T5813] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 409.245680][ T5910] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 409.257795][ T5910] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.278293][ T5910] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.306711][ T5910] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 409.329534][ T5910] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 409.340573][ T5910] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 409.352583][ T5910] usb 10-1: Manufacturer: syz [ 409.369252][ T5910] usb 10-1: config 0 descriptor?? [ 409.381823][ T5813] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 409.398432][ T5813] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 409.411800][ T5813] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 409.423188][ T5813] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 409.434416][ T5813] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 409.440458][ T9819] netlink: 8 bytes leftover after parsing attributes in process `syz.5.769'. [ 409.486361][ T5813] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 409.497019][ T5813] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 409.505783][ T5813] usb 7-1: Product: syz [ 409.512240][ T5813] usb 7-1: Manufacturer: syz [ 409.520517][ T5813] usb 7-1: SerialNumber: syz [ 409.556581][ T5813] usb 7-1: config 0 descriptor?? [ 409.790170][ T5910] appleir 0003:05AC:8243.000F: unknown main item tag 0x0 [ 409.818525][ T5910] appleir 0003:05AC:8243.000F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0 [ 409.827783][ T5813] radio-si470x 7-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 409.844836][ T5813] radio-si470x 7-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 410.121235][ T5813] radio-si470x 7-1:0.0: software version 0, hardware version 0 [ 410.137963][ T5813] radio-si470x 7-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 410.159269][ T5813] radio-si470x 7-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 410.318813][ T5813] radio-si470x 7-1:0.0: submitting int urb failed (-90) [ 410.484210][ T9833] netlink: 24 bytes leftover after parsing attributes in process `syz.5.772'. [ 410.970387][ T9829] orangefs_mount: mount request failed with -4 [ 411.480417][ T5910] kernel read not supported for file /audio1 (pid: 5910 comm: kworker/0:6) [ 411.552013][ T9841] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.774'. [ 411.625315][ T5813] radio-si470x 7-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 412.029792][ T5813] radio-si470x 7-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 412.060152][ T5813] usb 7-1: USB disconnect, device number 27 [ 412.139081][ T24] usb 10-1: USB disconnect, device number 18 [ 412.893030][ T9860] XFS (nbd5): SB validate failed with error -5. [ 413.715531][ T9874] bridge0: port 3(veth0_to_bridge) entered blocking state [ 413.725302][ T9874] bridge0: port 3(veth0_to_bridge) entered disabled state [ 413.734486][ T9874] veth0_to_bridge: entered allmulticast mode [ 413.742163][ T9874] veth0_to_bridge: entered promiscuous mode [ 413.748254][ T9874] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 413.762295][ T9874] bridge0: port 3(veth0_to_bridge) entered blocking state [ 413.769479][ T9874] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 414.472193][ T9884] netlink: 8 bytes leftover after parsing attributes in process `syz.6.783'. [ 415.280370][ T24] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 415.546008][ T9897] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.787'. [ 415.640678][ T24] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 416.314401][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.325461][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.335818][ T24] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 416.351570][ T24] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 416.362901][ T24] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 416.375589][ T24] usb 9-1: Manufacturer: syz [ 416.441554][ T24] usb 9-1: config 0 descriptor?? [ 416.660417][ T5854] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 416.853797][ T24] appleir 0003:05AC:8243.0010: unknown main item tag 0x0 [ 416.871983][ T5854] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 416.880000][ T24] appleir 0003:05AC:8243.0010: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0 [ 416.890880][ T5854] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 417.056775][ T5854] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 417.190491][ T5854] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 417.201510][ T5854] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 417.214270][ T43] kernel read not supported for file /audio1 (pid: 43 comm: kworker/1:1) [ 417.232780][ T5854] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 417.260336][ T5854] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 417.289519][ T5854] usb 7-1: Product: syz [ 417.310484][ T5854] usb 7-1: Manufacturer: syz [ 417.336272][ T5854] usb 7-1: SerialNumber: syz [ 417.362076][ T5854] usb 7-1: config 0 descriptor?? [ 417.606647][ T5854] radio-si470x 7-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 417.641030][ T5854] radio-si470x 7-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 417.897495][ T5854] radio-si470x 7-1:0.0: software version 0, hardware version 0 [ 417.915088][ T5854] radio-si470x 7-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 417.960146][ T5854] radio-si470x 7-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 418.031206][ T9920] XFS (nbd9): SB validate failed with error -5. [ 418.152303][ T5854] radio-si470x 7-1:0.0: submitting int urb failed (-90) [ 418.360592][ T24] usb 9-1: reset high-speed USB device number 16 using dummy_hcd [ 418.937068][ T9943] bridge0: port 3(veth0_to_bridge) entered blocking state [ 418.944479][ T9943] bridge0: port 3(veth0_to_bridge) entered disabled state [ 418.952059][ T9943] veth0_to_bridge: entered allmulticast mode [ 418.960212][ T9943] veth0_to_bridge: entered promiscuous mode [ 418.966768][ T9943] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 418.979748][ T9943] bridge0: port 3(veth0_to_bridge) entered blocking state [ 418.986947][ T9943] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 419.152888][ T43] usb 9-1: USB disconnect, device number 16 [ 419.447184][ T5854] radio-si470x 7-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 419.455948][ T5854] radio-si470x 7-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 419.529868][ T9941] netlink: 8 bytes leftover after parsing attributes in process `syz.5.798'. [ 419.551730][ T5854] usb 7-1: USB disconnect, device number 28 [ 419.769630][ T9955] netlink: 212408 bytes leftover after parsing attributes in process `syz.9.801'. [ 421.377427][ T9960] orangefs_mount: mount request failed with -4 [ 421.552958][ T9979] netlink: 16 bytes leftover after parsing attributes in process `syz.6.807'. [ 421.833222][ T9984] XFS (nbd9): SB validate failed with error -5. [ 423.130414][ T5813] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 423.163434][ T43] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 423.333286][ T5813] usb 6-1: Using ep0 maxpacket: 32 [ 423.359123][ T5813] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 423.385789][ T43] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 423.415721][ T5813] usb 6-1: config 0 has no interface number 0 [ 423.434093][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.445463][ T5813] usb 6-1: config 0 interface 184 has no altsetting 0 [ 423.457047][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.469098][ T43] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 423.497745][ T43] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 423.509959][ T43] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 423.632236][ T43] usb 7-1: Manufacturer: syz [ 423.642710][ T5813] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 423.655441][ T43] usb 7-1: config 0 descriptor?? [ 423.675742][ T5813] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.728979][ T5813] usb 6-1: Product: syz [ 423.737345][ T5813] usb 6-1: Manufacturer: syz [ 423.748131][ T5813] usb 6-1: SerialNumber: syz [ 423.776060][ T5813] usb 6-1: config 0 descriptor?? [ 423.811275][ T5813] smsc75xx v1.0.0 [ 423.932369][T10008] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.814'. [ 424.135979][ T43] appleir 0003:05AC:8243.0011: unknown main item tag 0x0 [ 424.348554][ T43] appleir 0003:05AC:8243.0011: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 424.385003][ T5813] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 424.485884][ T5813] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 424.612165][ T5813] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 424.719356][ T5813] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -32 [ 425.920342][ T30] audit: type=1400 audit(1769531307.754:513): avc: denied { create } for pid=10025 comm="syz.8.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 425.971861][ T30] audit: type=1400 audit(1769531307.754:514): avc: denied { setopt } for pid=10025 comm="syz.8.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 426.226440][ T24] usb 6-1: USB disconnect, device number 21 [ 426.291532][ T43] usb 7-1: USB disconnect, device number 29 [ 426.575149][T10043] XFS (nbd5): SB validate failed with error -5. [ 427.160384][ T10] kernel read not supported for file /audio1 (pid: 10 comm: kworker/0:1) [ 427.820968][T10068] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.829'. [ 427.836188][T10067] netlink: 8 bytes leftover after parsing attributes in process `syz.7.827'. [ 428.020465][ T24] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 428.296756][ T24] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 428.383508][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.460692][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.492676][T10071] netlink: 16 bytes leftover after parsing attributes in process `syz.6.830'. [ 428.532119][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 428.667309][ T24] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 428.703913][ T24] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 428.833085][ T24] usb 6-1: Manufacturer: syz [ 429.025398][ T24] usb 6-1: config 0 descriptor?? [ 429.485792][ T30] audit: type=1400 audit(1769531311.294:515): avc: denied { write } for pid=10082 comm="syz.6.834" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 429.604432][T10091] XFS (nbd8): SB validate failed with error -5. [ 429.743982][ T30] audit: type=1400 audit(1769531311.294:516): avc: denied { open } for pid=10082 comm="syz.6.834" path="/149/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 429.808642][ T24] appleir 0003:05AC:8243.0012: unknown main item tag 0x0 [ 430.086092][ T30] audit: type=1400 audit(1769531311.294:517): avc: denied { ioctl } for pid=10082 comm="syz.6.834" path="/149/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 430.168737][ T24] appleir 0003:05AC:8243.0012: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 430.326963][T10105] bridge0: port 3(veth0_to_bridge) entered blocking state [ 430.334321][T10105] bridge0: port 3(veth0_to_bridge) entered disabled state [ 430.345983][T10105] veth0_to_bridge: entered allmulticast mode [ 430.353593][T10105] veth0_to_bridge: entered promiscuous mode [ 430.359720][T10105] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 430.403811][T10105] bridge0: port 3(veth0_to_bridge) entered blocking state [ 430.411041][T10105] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 431.194544][T10109] orangefs_mount: mount request failed with -4 [ 431.889543][ T43] usb 6-1: USB disconnect, device number 22 [ 432.000152][T10111] fido_id[10111]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 432.092690][T10121] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.842'. [ 433.124305][T10126] netlink: 8 bytes leftover after parsing attributes in process `syz.6.843'. [ 433.183524][T10130] netlink: 8 bytes leftover after parsing attributes in process `syz.5.845'. [ 433.533925][ T10] kernel read not supported for file /audio1 (pid: 10 comm: kworker/0:1) [ 434.330333][ T10] usb 7-1: new full-speed USB device number 30 using dummy_hcd [ 434.410693][ T5910] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 434.639110][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.027019][T10160] orangefs_mount: mount request failed with -4 [ 435.447490][ T10] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 435.459096][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 435.470082][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 435.479825][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 435.494524][ T10] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 435.504722][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 435.512822][ T10] usb 7-1: Product: syz [ 435.516985][ T10] usb 7-1: Manufacturer: syz [ 435.521948][ T10] usb 7-1: SerialNumber: syz [ 435.528627][ T10] usb 7-1: config 0 descriptor?? [ 435.595282][T10166] bridge0: port 3(veth0_to_bridge) entered blocking state [ 435.602920][T10157] XFS (nbd8): SB validate failed with error -5. [ 435.615089][T10166] bridge0: port 3(veth0_to_bridge) entered disabled state [ 435.626185][T10166] veth0_to_bridge: entered allmulticast mode [ 435.636891][ T5910] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 435.660643][ T5910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.790930][T10166] veth0_to_bridge: entered promiscuous mode [ 435.811600][T10166] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 435.874104][ T5910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.890200][ T5910] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 435.909937][ T10] radio-si470x 7-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 435.950811][ T10] radio-si470x 7-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 435.965754][ T5910] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 435.971434][T10166] bridge0: port 3(veth0_to_bridge) entered blocking state [ 435.981948][T10166] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 436.114461][ T10] radio-si470x 7-1:0.0: software version 0, hardware version 0 [ 436.130414][ T5910] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 436.148742][ T5910] usb 6-1: Manufacturer: syz [ 436.153777][ T10] radio-si470x 7-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 436.184639][ T5910] usb 6-1: config 0 descriptor?? [ 436.192345][ T10] radio-si470x 7-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 436.314398][ T10] radio-si470x 7-1:0.0: submitting int urb failed (-90) [ 436.452605][T10182] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.856'. [ 436.645388][ T5910] appleir 0003:05AC:8243.0013: unknown main item tag 0x0 [ 436.831567][ T5910] appleir 0003:05AC:8243.0013: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 437.521312][ T10] radio-si470x 7-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 437.562555][ T10] radio-si470x 7-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 437.588267][ T10] usb 7-1: USB disconnect, device number 30 [ 437.648655][T10199] netlink: 8 bytes leftover after parsing attributes in process `syz.8.863'. [ 438.080473][ T5910] kernel read not supported for file /audio1 (pid: 5910 comm: kworker/0:6) [ 438.834931][ T10] usb 6-1: USB disconnect, device number 23 [ 438.891069][ T5910] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 438.993585][T10224] XFS (nbd9): SB validate failed with error -5. [ 439.510322][ T5910] usb 7-1: Using ep0 maxpacket: 32 [ 439.516835][ T5910] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 439.534166][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.540559][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.609728][T10240] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.872'. [ 439.657103][T10239] netlink: 8 bytes leftover after parsing attributes in process `syz.5.871'. [ 440.369034][ T5910] usb 7-1: config 0 has no interface number 0 [ 440.380468][ T5910] usb 7-1: config 0 interface 184 has no altsetting 0 [ 440.388991][ T5910] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 440.398182][ T5910] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.406247][ T5910] usb 7-1: Product: syz [ 440.410615][ T5910] usb 7-1: Manufacturer: syz [ 440.415199][ T5910] usb 7-1: SerialNumber: syz [ 440.423235][ T5910] usb 7-1: config 0 descriptor?? [ 440.430494][ T5910] smsc75xx v1.0.0 [ 440.730408][ T24] usb 10-1: new full-speed USB device number 19 using dummy_hcd [ 440.839028][ T5910] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 440.890736][ T10] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 440.910059][ T24] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 440.940439][ T24] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 440.999342][ T5910] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 441.002593][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 441.019316][ T5910] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 441.020700][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 441.044445][ T5910] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -32 [ 441.056638][ T24] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 441.089310][ T24] usb 10-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 441.099245][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 441.115407][ T24] usb 10-1: Product: syz [ 441.120184][ T24] usb 10-1: Manufacturer: syz [ 441.131723][ T24] usb 10-1: SerialNumber: syz [ 441.174358][ T24] usb 10-1: config 0 descriptor?? [ 441.215603][ T10] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 441.289073][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.331075][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.369809][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 441.472018][ T24] radio-si470x 10-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 441.489056][ T24] radio-si470x 10-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 441.751214][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 441.765798][ T10] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 441.790868][ T24] radio-si470x 10-1:0.0: software version 0, hardware version 0 [ 441.798750][ T10] usb 6-1: Manufacturer: syz [ 441.798773][ T24] radio-si470x 10-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 441.831409][ T10] usb 6-1: config 0 descriptor?? [ 441.868534][ T24] radio-si470x 10-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 441.887313][T10265] netlink: 8 bytes leftover after parsing attributes in process `syz.8.879'. [ 441.999240][ T24] radio-si470x 10-1:0.0: submitting int urb failed (-90) [ 442.473692][ T10] appleir 0003:05AC:8243.0014: unknown main item tag 0x0 [ 442.493410][ T10] appleir 0003:05AC:8243.0014: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 443.231880][ T10] usb 7-1: USB disconnect, device number 31 [ 443.562648][T10291] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.886'. [ 443.811268][ T24] radio-si470x 10-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 444.461891][T10292] XFS (nbd7): SB validate failed with error -5. [ 444.483396][ T10] usb 6-1: reset high-speed USB device number 24 using dummy_hcd [ 444.533798][ T24] radio-si470x 10-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 444.547997][ T24] usb 10-1: USB disconnect, device number 19 [ 445.239725][T10316] netlink: 8 bytes leftover after parsing attributes in process `syz.5.892'. [ 445.400430][ T24] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 445.674905][ T5854] usb 6-1: USB disconnect, device number 24 [ 445.859464][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 445.871307][ T24] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 445.886011][ T24] usb 7-1: config 0 has no interface number 0 [ 446.117691][ T24] usb 7-1: config 0 interface 184 has no altsetting 0 [ 446.163916][ T24] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 446.190750][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.198753][ T24] usb 7-1: Product: syz [ 446.220322][ T24] usb 7-1: Manufacturer: syz [ 446.230486][ T24] usb 7-1: SerialNumber: syz [ 446.250111][ T24] usb 7-1: config 0 descriptor?? [ 446.270714][ T24] smsc75xx v1.0.0 [ 446.358892][T10329] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.895'. [ 446.838247][ T24] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 446.992090][ T24] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 447.098834][ T24] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 447.185225][ T24] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -32 [ 447.692510][T10343] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.898'. [ 448.710122][ T793] usb 7-1: USB disconnect, device number 32 [ 448.993561][ T5854] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 449.170948][ T5854] usb 8-1: Using ep0 maxpacket: 16 [ 449.178650][ T5854] usb 8-1: config index 0 descriptor too short (expected 8192, got 36) [ 449.187729][ T5854] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.199432][ T5854] usb 8-1: config 0 has no interfaces? [ 449.205005][ T5854] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 449.221356][T10364] netlink: 8 bytes leftover after parsing attributes in process `syz.8.906'. [ 449.232408][ T5854] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.242142][ T5854] usb 8-1: config 0 descriptor?? [ 449.350353][ T24] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 449.500474][T10351] binder: BINDER_SET_CONTEXT_MGR already set [ 449.507263][T10351] binder: 10350:10351 ioctl 4018620d 200000000040 returned -16 [ 449.516815][ T5854] usb 8-1: USB disconnect, device number 22 [ 449.581193][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.619767][ T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 449.640387][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 449.651805][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 449.704326][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 449.745904][ T24] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 449.760442][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 449.814475][ T24] usb 6-1: Product: syz [ 449.829056][ T24] usb 6-1: Manufacturer: syz [ 449.844227][ T24] usb 6-1: SerialNumber: syz [ 449.868991][ T24] usb 6-1: config 0 descriptor?? [ 449.988582][ T30] audit: type=1400 audit(1769531331.824:518): avc: denied { ioctl } for pid=10370 comm="syz.9.908" path="socket:[32669]" dev="sockfs" ino=32669 ioctlcmd=0x61d0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 450.092392][ T5854] kernel read not supported for file /audio1 (pid: 5854 comm: kworker/0:3) [ 450.101254][ T24] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 450.114647][ T24] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 450.205668][ T30] audit: type=1400 audit(1769531332.044:519): avc: denied { read } for pid=5474 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 450.301674][ T24] radio-si470x 6-1:0.0: software version 0, hardware version 0 [ 450.327430][ T24] radio-si470x 6-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 450.360314][ T24] radio-si470x 6-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 450.507802][ T24] radio-si470x 6-1:0.0: submitting int urb failed (-90) [ 450.911651][T10391] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.912'. [ 451.297026][ T30] audit: type=1400 audit(1769531333.134:520): avc: denied { write } for pid=10370 comm="syz.9.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 451.741335][ T24] radio-si470x 6-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 451.773277][ T24] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 451.837925][T10370] lec:lec_atm_close: lec0: Shut down! [ 452.161759][ T24] usb 6-1: USB disconnect, device number 25 [ 452.205331][ T5854] lec:lec_start_xmit: lec0:No lecd attached [ 453.747125][T10444] netlink: 8 bytes leftover after parsing attributes in process `syz.8.921'. [ 454.172164][T10454] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.924'. [ 454.720926][ T5854] kernel read not supported for file /audio1 (pid: 5854 comm: kworker/0:3) [ 455.768457][T10474] netlink: 28 bytes leftover after parsing attributes in process `syz.9.928'. [ 455.786652][T10474] netlink: 72 bytes leftover after parsing attributes in process `syz.9.928'. [ 455.881809][T10478] FAT-fs (nbd9): unable to read boot sector [ 456.001144][T10478] netlink: 8 bytes leftover after parsing attributes in process `syz.9.928'. [ 456.055470][ T30] audit: type=1400 audit(1769531337.894:521): avc: denied { write } for pid=10472 comm="syz.9.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 456.075076][ T5891] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 456.256401][ T5891] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 456.392007][ T5891] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 456.593584][ T5891] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 456.837061][ T5891] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 456.908652][ T5891] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 457.076491][ T5891] usb 9-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 457.087325][ T5891] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 457.096022][ T5891] usb 9-1: Product: syz [ 457.100250][ T5891] usb 9-1: Manufacturer: syz [ 457.105614][ T5891] usb 9-1: SerialNumber: syz [ 457.450294][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5240 ms [ 457.458514][ C0] lec:lec_tx_timeout: lec0 [ 457.463455][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 457.613712][T10501] netlink: 212408 bytes leftover after parsing attributes in process `syz.9.937'. [ 457.722460][ T5891] usb 9-1: config 0 descriptor?? [ 458.247682][T10507] netlink: 8 bytes leftover after parsing attributes in process `syz.7.938'. [ 458.258256][ T5891] radio-si470x 9-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 458.270199][ T5891] radio-si470x 9-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 458.627100][ T5891] radio-si470x 9-1:0.0: software version 0, hardware version 0 [ 458.639637][ T5891] radio-si470x 9-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 458.683831][ T5891] radio-si470x 9-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 458.834602][ T5891] radio-si470x 9-1:0.0: submitting int urb failed (-90) [ 459.480528][ T5854] kernel read not supported for file /audio1 (pid: 5854 comm: kworker/0:3) [ 460.243247][ T5891] radio-si470x 9-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 460.261679][ T5891] radio-si470x 9-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 460.305161][ T5891] usb 9-1: USB disconnect, device number 17 [ 461.219636][T10556] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.951'. [ 462.470299][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 462.478340][ C0] lec:lec_tx_timeout: lec0 [ 462.482901][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 462.763281][T10574] netlink: 8 bytes leftover after parsing attributes in process `syz.7.956'. [ 462.828892][T10578] netlink: 8 bytes leftover after parsing attributes in process `syz.9.959'. [ 462.853873][T10578] netlink: 12 bytes leftover after parsing attributes in process `syz.9.959'. [ 462.890667][ T30] audit: type=1400 audit(1769531344.724:522): avc: denied { create } for pid=10576 comm="syz.9.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 462.939861][ T30] audit: type=1400 audit(1769531344.754:523): avc: denied { setopt } for pid=10576 comm="syz.9.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 462.970478][ T793] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 463.463152][ T793] usb 9-1: Using ep0 maxpacket: 32 [ 463.476341][ T793] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 463.490190][ T793] usb 9-1: config 0 has no interface number 0 [ 463.516720][ T793] usb 9-1: config 0 interface 184 has no altsetting 0 [ 463.598449][ T793] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 463.626597][ T793] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.636448][ T793] usb 9-1: Product: syz [ 463.642492][ T793] usb 9-1: Manufacturer: syz [ 463.647477][ T793] usb 9-1: SerialNumber: syz [ 463.653047][ T5854] usb 10-1: new full-speed USB device number 20 using dummy_hcd [ 463.756480][ T793] usb 9-1: config 0 descriptor?? [ 463.804368][ T793] smsc75xx v1.0.0 [ 463.837444][ T5854] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 463.879131][ T5854] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 463.982782][ T5854] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 464.039006][ T5854] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 464.081599][ T30] audit: type=1400 audit(1769531345.924:524): avc: denied { setopt } for pid=10593 comm="syz.6.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 464.112277][T10595] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.964'. [ 464.608509][ T793] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 464.968041][ T5854] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 464.981054][ T793] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 464.981079][ T793] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 464.981284][ T793] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -32 [ 464.981351][ T30] audit: type=1800 audit(1769531346.814:525): pid=10602 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.966" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 465.001039][ T5854] usb 10-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 465.001063][ T5854] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 465.001081][ T5854] usb 10-1: Product: syz [ 465.001095][ T5854] usb 10-1: Manufacturer: syz [ 465.001109][ T5854] usb 10-1: SerialNumber: syz [ 465.003126][ T5854] usb 10-1: config 0 descriptor?? [ 465.131425][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 465.131804][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 465.132359][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 465.132755][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 465.133010][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 465.133295][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 465.133445][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 465.133622][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 465.133761][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 465.133937][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 467.496076][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 467.496153][ C0] lec:lec_tx_timeout: lec0 [ 467.506573][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 468.469719][ T5854] radio-si470x 10-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 468.469747][ T5854] radio-si470x 10-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 470.140482][ C0] net_ratelimit: 32529 callbacks suppressed [ 470.140503][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 470.140577][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 470.140780][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 470.140834][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 470.141087][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 470.141166][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 470.141364][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 470.141430][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 470.141642][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 470.141773][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 472.515445][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 472.515473][ C0] lec:lec_tx_timeout: lec0 [ 472.521601][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 475.150431][ C0] net_ratelimit: 36606 callbacks suppressed [ 475.150450][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 475.150461][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 475.150694][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 475.150704][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 475.150971][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 475.151046][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 475.151286][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 475.151302][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 475.151550][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 475.151615][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 475.479878][ T5854] radio-si470x 10-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 475.479906][ T5854] radio-si470x 10-1:0.0: si470x_get_scratch: si470x_get_report returned -110 [ 475.480116][ T5854] radio-si470x 10-1:0.0: probe with driver radio-si470x failed with error -5 [ 477.541302][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 477.541333][ C0] lec:lec_tx_timeout: lec0 [ 477.551757][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 480.160485][ C1] net_ratelimit: 28692 callbacks suppressed [ 480.160505][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 480.161047][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 480.161166][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 480.161305][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 480.161439][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 480.161607][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 480.161779][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 480.161896][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 480.162046][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 480.162232][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:eb:09:97:e6:1b, vlan:0) [ 482.564923][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 482.564952][ C0] lec:lec_tx_timeout: lec0 [ 482.574003][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 482.648819][ T5813] usb 10-1: USB disconnect, device number 20 [ 485.170318][ C0] net_ratelimit: 30002 callbacks suppressed [ 485.170339][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 485.170348][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 485.170600][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 485.170942][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:ff:82:84:93, vlan:0) [ 485.171237][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 485.171350][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 485.171488][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 485.171591][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 485.171860][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:ff:82:84:93, vlan:0) [ 485.171866][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 487.598311][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 487.598331][ C0] lec:lec_tx_timeout: lec0 [ 487.605744][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 490.180275][ C0] net_ratelimit: 30722 callbacks suppressed [ 490.180298][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 490.180359][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:ff:82:84:93, vlan:0) [ 490.180623][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 490.180661][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:03:c8:91:78:bc, vlan:0) [ 490.180923][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 490.180968][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 490.181239][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 490.181284][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:eb:09:97:e6:1b, vlan:0) [ 490.181543][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 490.181585][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:ff:82:84:93, vlan:0) [ 493.940290][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6340 ms [ 493.940318][ C0] lec:lec_tx_timeout: lec0 [ 493.960348][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 495.190328][ C0] net_ratelimit: 30556 callbacks suppressed [ 495.190346][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 495.190421][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:03:c8:91:78:bc, vlan:0) [ 495.190717][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 495.190737][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 495.191017][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 495.191371][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:ff:82:84:93, vlan:0) [ 495.191703][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:03:c8:91:78:bc, vlan:0) [ 495.191863][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:eb:09:97:e6:1b, vlan:0) [ 495.192015][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 495.192134][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 499.698106][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5730 ms [ 499.698136][ C0] lec:lec_tx_timeout: lec0 [ 499.708105][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 500.200412][ C0] net_ratelimit: 29453 callbacks suppressed [ 500.200432][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 500.200526][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:ff:82:84:93, vlan:0) [ 500.200805][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 500.200860][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:03:c8:91:78:bc, vlan:0) [ 500.201189][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 500.201455][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 500.201818][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:ff:82:84:93, vlan:0) [ 500.201843][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 500.202101][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 500.202130][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:03:c8:91:78:bc, vlan:0) [ 502.022784][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.031701][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.210355][ C0] net_ratelimit: 29802 callbacks suppressed [ 505.210376][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 505.210429][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:ff:82:84:93, vlan:0) [ 505.210667][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 505.210709][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:03:c8:91:78:bc, vlan:0) [ 505.210994][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 505.211258][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 505.211579][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:ff:82:84:93, vlan:0) [ 505.211661][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:eb:09:97:e6:1b, vlan:0) [ 505.211866][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:03:c8:91:78:bc, vlan:0) [ 505.211899][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 505.456719][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 505.456749][ C0] lec:lec_tx_timeout: lec0 [ 505.466455][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 510.220361][ C1] net_ratelimit: 27704 callbacks suppressed [ 510.220381][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:03:c8:91:78:bc, vlan:0) [ 510.220691][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 510.220946][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 510.221222][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:eb:09:97:e6:1b, vlan:0) [ 510.221267][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:ff:82:84:93, vlan:0) [ 510.221469][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 510.221552][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:03:c8:91:78:bc, vlan:0) [ 510.221741][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 510.221840][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 510.222061][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 510.473917][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 510.473945][ C0] lec:lec_tx_timeout: lec0 [ 510.481666][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 515.230319][ C1] net_ratelimit: 26604 callbacks suppressed [ 515.230339][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 515.230606][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 515.230818][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:eb:09:97:e6:1b, vlan:0) [ 515.231006][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:82:ad:f1:cb:65, vlan:0) [ 515.231049][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 515.231309][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:ff:82:84:93, vlan:0) [ 515.231347][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 515.231616][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:03:c8:91:78:bc, vlan:0) [ 515.231686][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 515.231933][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 515.499229][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 515.499259][ C0] lec:lec_tx_timeout: lec0 [ 515.508931][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 520.240377][ C1] net_ratelimit: 26834 callbacks suppressed [ 520.240398][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:82:ad:f1:cb:65, vlan:0) [ 520.240662][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:eb:09:97:e6:1b, vlan:0) [ 520.240680][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:ff:82:84:93, vlan:0) [ 520.240950][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 520.240976][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:03:c8:91:78:bc, vlan:0) [ 520.241255][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 520.241288][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 520.241499][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 520.241669][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 520.241831][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:82:ad:f1:cb:65, vlan:0) [ 520.521809][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 520.521839][ C0] lec:lec_tx_timeout: lec0 [ 520.531463][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 525.250357][ C1] net_ratelimit: 26339 callbacks suppressed [ 525.250376][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 525.250712][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:82:ad:f1:cb:65, vlan:0) [ 525.250998][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:ff:82:84:93, vlan:0) [ 525.251081][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:34:5b:89:2f:be, vlan:0) [ 525.251283][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:03:c8:91:78:bc, vlan:0) [ 525.251363][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 525.251589][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 525.251847][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 525.252181][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:82:ad:f1:cb:65, vlan:0) [ 525.252299][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:eb:09:97:e6:1b, vlan:0) [ 525.546894][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 525.546923][ C0] lec:lec_tx_timeout: lec0 [ 525.555618][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 530.260291][ C1] net_ratelimit: 26873 callbacks suppressed [ 530.260311][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:82:ad:f1:cb:65, vlan:0) [ 530.260622][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:ff:82:84:93, vlan:0) [ 530.260918][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:03:c8:91:78:bc, vlan:0) [ 530.260971][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:34:5b:89:2f:be, vlan:0) [ 530.261220][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 530.261468][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 530.261491][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 530.261807][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:82:ad:f1:cb:65, vlan:0) [ 530.262113][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:ff:82:84:93, vlan:0) [ 530.262413][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:03:c8:91:78:bc, vlan:0) [ 530.568115][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 530.568145][ C0] lec:lec_tx_timeout: lec0 [ 530.578674][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 535.270283][ C0] net_ratelimit: 26538 callbacks suppressed [ 535.270303][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 535.270490][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:03:c8:91:78:bc, vlan:0) [ 535.270794][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 535.271051][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 535.271270][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:eb:09:97:e6:1b, vlan:0) [ 535.271395][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:82:ad:f1:cb:65, vlan:0) [ 535.271509][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 535.271700][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:ff:82:84:93, vlan:0) [ 535.271807][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 535.271999][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:03:c8:91:78:bc, vlan:0) [ 535.581494][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 535.581525][ C0] lec:lec_tx_timeout: lec0 [ 535.591180][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 540.280383][ C0] net_ratelimit: 26596 callbacks suppressed [ 540.280403][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 540.280530][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:82:ad:f1:cb:65, vlan:0) [ 540.280825][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:ff:82:84:93, vlan:0) [ 540.281101][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:03:c8:91:78:bc, vlan:0) [ 540.281390][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 540.281650][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 540.281974][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:82:ad:f1:cb:65, vlan:0) [ 540.282089][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:34:5b:89:2f:be, vlan:0) [ 540.282254][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:ff:82:84:93, vlan:0) [ 540.282393][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 541.939689][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6340 ms [ 541.939718][ C0] lec:lec_tx_timeout: lec0 [ 541.949605][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 545.290376][ C1] net_ratelimit: 27235 callbacks suppressed [ 545.290396][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:03:c8:91:78:bc, vlan:0) [ 545.290430][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 545.290693][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 545.290738][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 545.290932][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 545.291106][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 545.291256][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:82:ad:f1:cb:65, vlan:0) [ 545.291534][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:ff:82:84:93, vlan:0) [ 545.292051][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:03:c8:91:78:bc, vlan:0) [ 545.292355][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.700276][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5760 ms [ 547.700310][ C0] lec:lec_tx_timeout: lec0 [ 547.720353][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 550.300318][ C1] net_ratelimit: 31312 callbacks suppressed [ 550.300339][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.300685][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:82:ad:f1:cb:65, vlan:0) [ 550.300963][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:ff:82:84:93, vlan:0) [ 550.301066][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.301247][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:03:c8:91:78:bc, vlan:0) [ 550.301346][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 550.301523][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.301679][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.301755][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.301996][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 553.455784][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5730 ms [ 553.455813][ C0] lec:lec_tx_timeout: lec0 [ 553.466400][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 555.310315][ C1] net_ratelimit: 28067 callbacks suppressed [ 555.310337][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:03:c8:91:78:bc, vlan:0) [ 555.310622][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 555.310876][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 555.311017][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 555.311203][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:82:ad:f1:cb:65, vlan:0) [ 555.311470][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:ff:82:84:93, vlan:0) [ 555.311766][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:03:c8:91:78:bc, vlan:0) [ 555.312068][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 555.312242][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 555.312317][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.473824][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 558.473856][ C0] lec:lec_tx_timeout: lec0 [ 558.483065][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 560.320404][ C1] net_ratelimit: 26366 callbacks suppressed [ 560.320423][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:82:ad:f1:cb:65, vlan:0) [ 560.320442][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 560.320735][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:ff:82:84:93, vlan:0) [ 560.321059][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:03:c8:91:78:bc, vlan:0) [ 560.321373][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 560.321640][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 560.322004][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:82:ad:f1:cb:65, vlan:0) [ 560.322257][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:34:5b:89:2f:be, vlan:0) [ 560.322317][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:ff:82:84:93, vlan:0) [ 560.322565][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.577721][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.586400][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.491471][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 563.491499][ C0] lec:lec_tx_timeout: lec0 [ 563.501132][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 565.330348][ C1] net_ratelimit: 27295 callbacks suppressed [ 565.330368][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:82:ad:f1:cb:65, vlan:0) [ 565.330373][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 565.330654][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 565.330671][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:ff:82:84:93, vlan:0) [ 565.330944][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 565.330973][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:03:c8:91:78:bc, vlan:0) [ 565.331230][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 565.331266][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 565.331509][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 565.331525][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.528717][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 568.528748][ C0] lec:lec_tx_timeout: lec0 [ 568.537891][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 570.340297][ C0] net_ratelimit: 27270 callbacks suppressed [ 570.340316][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 570.340369][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 570.340614][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 570.340949][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:82:ad:f1:cb:65, vlan:0) [ 570.341246][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:ff:82:84:93, vlan:0) [ 570.341282][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:eb:09:97:e6:1b, vlan:0) [ 570.341532][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 570.341548][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:03:c8:91:78:bc, vlan:0) [ 570.341810][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 570.341831][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.543506][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 573.543536][ C0] lec:lec_tx_timeout: lec0 [ 573.553594][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 575.350356][ C0] net_ratelimit: 26966 callbacks suppressed [ 575.350376][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 575.350469][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:ff:82:84:93, vlan:0) [ 575.350676][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 575.350786][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:03:c8:91:78:bc, vlan:0) [ 575.350958][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 575.351093][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 575.351248][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 575.351364][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 575.351543][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 575.351725][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:82:ad:f1:cb:65, vlan:0) [ 578.563717][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 578.563747][ C0] lec:lec_tx_timeout: lec0 [ 578.571420][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 580.360269][ C0] net_ratelimit: 27173 callbacks suppressed [ 580.360277][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 580.360288][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:34:5b:89:2f:be, vlan:0) [ 580.360528][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 580.360567][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 580.360867][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:82:ad:f1:cb:65, vlan:0) [ 580.361157][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:ff:82:84:93, vlan:0) [ 580.361445][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:03:c8:91:78:bc, vlan:0) [ 580.361498][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:eb:09:97:e6:1b, vlan:0) [ 580.361742][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 580.361746][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 583.584933][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 583.584964][ C0] lec:lec_tx_timeout: lec0 [ 583.594963][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 585.370345][ C1] net_ratelimit: 27120 callbacks suppressed [ 585.370348][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 585.370364][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:82:ad:f1:cb:65, vlan:0) [ 585.370673][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 585.370702][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:ff:82:84:93, vlan:0) [ 585.371019][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:03:c8:91:78:bc, vlan:0) [ 585.371327][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 585.371593][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 585.371967][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:82:ad:f1:cb:65, vlan:0) [ 585.372276][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:ff:82:84:93, vlan:0) [ 585.372322][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:34:5b:89:2f:be, vlan:0) [ 589.934150][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6340 ms [ 589.934179][ C0] lec:lec_tx_timeout: lec0 [ 589.943893][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 590.380435][ C1] net_ratelimit: 26453 callbacks suppressed [ 590.380454][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.380808][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:82:ad:f1:cb:65, vlan:0) [ 590.380940][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:eb:09:97:e6:1b, vlan:0) [ 590.381114][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:ff:82:84:93, vlan:0) [ 590.381200][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 590.381422][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:03:c8:91:78:bc, vlan:0) [ 590.381498][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.381723][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.381824][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.381992][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.390432][ C1] net_ratelimit: 28065 callbacks suppressed [ 595.390453][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:82:ad:f1:cb:65, vlan:0) [ 595.390737][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:ff:82:84:93, vlan:0) [ 595.391024][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:03:c8:91:78:bc, vlan:0) [ 595.391064][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 595.391303][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.391581][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.391897][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:82:ad:f1:cb:65, vlan:0) [ 595.392078][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.392182][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:ff:82:84:93, vlan:0) [ 595.392313][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 595.694938][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 595.694967][ C0] lec:lec_tx_timeout: lec0 [ 595.705379][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 600.400350][ C0] net_ratelimit: 27762 callbacks suppressed [ 600.400372][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 600.400395][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:ff:82:84:93, vlan:0) [ 600.400655][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.400703][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:03:c8:91:78:bc, vlan:0) [ 600.400996][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.401000][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.401245][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.401568][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:82:ad:f1:cb:65, vlan:0) [ 600.401859][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:ff:82:84:93, vlan:0) [ 600.402159][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:03:c8:91:78:bc, vlan:0) [ 601.450456][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 601.450485][ C0] lec:lec_tx_timeout: lec0 [ 601.458796][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 605.410293][ C0] net_ratelimit: 27315 callbacks suppressed [ 605.410314][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 605.410378][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:82:ad:f1:cb:65, vlan:0) [ 605.410596][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.410669][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:ff:82:84:93, vlan:0) [ 605.410917][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.410974][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:03:c8:91:78:bc, vlan:0) [ 605.411268][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.411536][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.411854][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 605.411883][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:82:ad:f1:cb:65, vlan:0) [ 606.474267][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 606.474298][ C0] lec:lec_tx_timeout: lec0 [ 606.483634][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 610.420328][ C1] net_ratelimit: 27408 callbacks suppressed [ 610.420348][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:82:ad:f1:cb:65, vlan:0) [ 610.420347][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 610.420647][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:ff:82:84:93, vlan:0) [ 610.420953][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:03:c8:91:78:bc, vlan:0) [ 610.421255][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.421309][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.421497][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.421561][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 610.421819][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:82:ad:f1:cb:65, vlan:0) [ 610.421857][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 611.502954][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 611.502983][ C0] lec:lec_tx_timeout: lec0 [ 611.512385][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 615.430263][ C0] net_ratelimit: 27327 callbacks suppressed [ 615.430284][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:34:5b:89:2f:be, vlan:0) [ 615.430485][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.430588][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.430735][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.431067][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:82:ad:f1:cb:65, vlan:0) [ 615.431351][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:ff:82:84:93, vlan:0) [ 615.431563][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:eb:09:97:e6:1b, vlan:0) [ 615.431668][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:03:c8:91:78:bc, vlan:0) [ 615.431813][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 615.431975][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 616.527934][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 616.527964][ C0] lec:lec_tx_timeout: lec0 [ 616.537370][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 620.440312][ C0] net_ratelimit: 27227 callbacks suppressed [ 620.440332][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 620.440341][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:ff:82:84:93, vlan:0) [ 620.440633][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:03:c8:91:78:bc, vlan:0) [ 620.440656][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 620.440920][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 620.441180][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 620.441508][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:82:ad:f1:cb:65, vlan:0) [ 620.441547][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 620.441806][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:ff:82:84:93, vlan:0) [ 620.442090][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:03:c8:91:78:bc, vlan:0) [ 621.543672][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 621.543702][ C0] lec:lec_tx_timeout: lec0 [ 621.550600][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 624.499180][ T31] INFO: task syz.8.958:10603 blocked for more than 145 seconds. [ 624.499208][ T31] Tainted: G L syzkaller #0 [ 624.499221][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 624.499230][ T31] task:syz.8.958 state:D stack:27944 pid:10603 tgid:10571 ppid:6604 task_flags:0x400140 flags:0x00080002 [ 624.499291][ T31] Call Trace: [ 624.499299][ T31] [ 624.499310][ T31] ? __schedule+0xf65/0x5e10 [ 624.499334][ T31] __schedule+0xfe4/0x5e10 [ 624.499353][ T31] ? __lock_acquire+0x4a5/0x2630 [ 624.499386][ T31] ? __pfx___schedule+0x10/0x10 [ 624.499402][ T31] ? find_held_lock+0x2b/0x80 [ 624.499426][ T31] ? schedule+0x2bf/0x390 [ 624.499449][ T31] schedule+0xdd/0x390 [ 624.499476][ T31] schedule_preempt_disabled+0x13/0x30 [ 624.499494][ T31] __mutex_lock+0xc9a/0x1b90 [ 624.499517][ T31] ? tty_open+0x539/0xfa0 [ 624.499549][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 624.499588][ T31] ? tty_open+0x539/0xfa0 [ 624.499612][ T31] ? __pfx_tty_open+0x10/0x10 [ 624.499636][ T31] tty_open+0x539/0xfa0 [ 624.499666][ T31] ? __pfx_tty_open+0x10/0x10 [ 624.499691][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 624.499717][ T31] ? __pfx_tty_open+0x10/0x10 [ 624.499742][ T31] chrdev_open+0x234/0x6a0 [ 624.499768][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 624.499792][ T31] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 624.499819][ T31] ? security_file_open+0x24/0x1e0 [ 624.499845][ T31] do_dentry_open+0x73e/0x1570 [ 624.499866][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 624.499889][ T31] ? security_inode_permission+0xbf/0x250 [ 624.499914][ T31] vfs_open+0x82/0x3f0 [ 624.499942][ T31] path_openat+0x21dc/0x3120 [ 624.499971][ T31] ? rcu_is_watching+0x12/0xc0 [ 624.499997][ T31] ? __pfx_path_openat+0x10/0x10 [ 624.500018][ T31] ? __schedule+0xff6/0x5e10 [ 624.500044][ T31] do_filp_open+0x1f7/0x420 [ 624.500069][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 624.500092][ T31] ? __pfx___schedule+0x10/0x10 [ 624.500126][ T31] ? _raw_spin_unlock+0x3e/0x50 [ 624.500154][ T31] ? alloc_fd+0x476/0x790 [ 624.500185][ T31] do_sys_openat2+0x12e/0x220 [ 625.450313][ C1] net_ratelimit: 27290 callbacks suppressed [ 625.450333][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:ff:82:84:93, vlan:0) [ 625.450352][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 625.450631][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 625.450633][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:03:c8:91:78:bc, vlan:0) [ 625.450910][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 625.450931][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 625.451188][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 625.451188][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 625.451492][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 625.451529][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:82:ad:f1:cb:65, vlan:0) [ 626.562796][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 626.562826][ C0] lec:lec_tx_timeout: lec0 [ 626.572556][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 630.460361][ C1] net_ratelimit: 27415 callbacks suppressed [ 630.460381][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 630.460631][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 630.460850][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 630.460967][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:82:ad:f1:cb:65, vlan:0) [ 630.461085][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 630.461250][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:ff:82:84:93, vlan:0) [ 630.461374][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 630.461548][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:03:c8:91:78:bc, vlan:0) [ 630.461654][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 630.461856][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.588722][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 631.588753][ C0] lec:lec_tx_timeout: lec0 [ 631.597837][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 635.470371][ C1] net_ratelimit: 27365 callbacks suppressed [ 635.470396][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 635.470642][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 635.470787][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 635.470976][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:82:ad:f1:cb:65, vlan:0) [ 635.471024][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 635.471272][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:ff:82:84:93, vlan:0) [ 635.471322][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 635.471573][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:03:c8:91:78:bc, vlan:0) [ 635.471608][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 635.471855][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 637.935843][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6340 ms [ 637.935872][ C0] lec:lec_tx_timeout: lec0 [ 637.945112][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 638.682121][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 638.690584][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 640.480295][ C1] net_ratelimit: 27365 callbacks suppressed [ 640.480315][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:82:ad:f1:cb:65, vlan:0) [ 640.480344][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:34:5b:89:2f:be, vlan:0) [ 640.480612][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:ff:82:84:93, vlan:0) [ 640.480653][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 640.480900][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:03:c8:91:78:bc, vlan:0) [ 640.481184][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 640.481443][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 640.481723][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:eb:09:97:e6:1b, vlan:0) [ 640.481787][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:82:ad:f1:cb:65, vlan:0) [ 640.481985][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 642.600192][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 642.620085][ T31] __x64_sys_openat+0x12d/0x210 [ 642.620127][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 642.620165][ T31] do_syscall_64+0xc9/0xf80 [ 642.620190][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.630282][ T31] RIP: 0033:0x7f552f79aeb9 [ 642.630304][ T31] RSP: 002b:00007f5530621028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 642.630331][ T31] RAX: ffffffffffffffda RBX: 00007f552fa16180 RCX: 00007f552f79aeb9 [ 642.630343][ T31] RDX: 0000000000125003 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 642.630355][ T31] RBP: 00007f552f808c1f R08: 0000000000000000 R09: 0000000000000000 [ 642.630368][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 642.630380][ T31] R13: 00007f552fa16218 R14: 00007f552fa16180 R15: 00007fff479847a8 [ 642.630408][ T31] [ 642.630422][ T31] [ 642.630422][ T31] Showing all locks held in the system: [ 642.630430][ T31] 1 lock held by kthreadd/2: [ 642.630443][ T31] 3 locks held by kworker/0:0/9: [ 642.630455][ T31] 2 locks held by kworker/0:1/10: [ 642.630467][ T31] 4 locks held by kworker/u8:0/12: [ 642.630477][ T31] 3 locks held by kworker/u8:1/13: [ 642.630490][ T31] 3 locks held by kworker/1:0/24: [ 642.630500][ T31] #0: ffff888058489948 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 642.630559][ T31] #1: ffffc900001e7c98 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 642.630628][ T31] #2: ffff888068d634c0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x30/0xe40 [ 642.630682][ T31] 1 lock held by khungtaskd/31: [ 642.630692][ T31] #0: ffffffff8e5e32e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 642.630748][ T31] 3 locks held by kworker/u8:2/36: [ 642.630759][ T31] 3 locks held by kworker/1:1/43: [ 642.630771][ T31] 3 locks held by kworker/u8:3/50: [ 642.630782][ T31] 4 locks held by kworker/u8:4/68: [ 642.630798][ T31] 1 lock held by kworker/1:2/794: [ 642.630812][ T31] 3 locks held by kworker/u8:5/1033: [ 642.630824][ T31] 1 lock held by aoe_tx0/1297: [ 642.630846][ T31] 3 locks held by kworker/u8:6/2910: [ 642.630858][ T31] 2 locks held by kworker/R-bat_e/3404: [ 642.630868][ T31] 4 locks held by kworker/u8:7/4329: [ 642.630881][ T31] 1 lock held by klogd/5168: [ 642.630891][ T31] 1 lock held by udevd/5179: [ 642.630902][ T31] 3 locks held by crond/5548: [ 642.630913][ T31] 2 locks held by getty/5574: [ 642.630923][ T31] #0: ffff8880323d50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 642.630973][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 642.631020][ T31] 1 lock held by syz-executor/5792: [ 642.631031][ T31] 6 locks held by kworker/1:3/5813: [ 642.631043][ T31] 4 locks held by kworker/0:3/5854: [ 642.631053][ T31] #0: ffff8880585f0948 ((wq_completion)wg-kex-wg1#6){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 642.631106][ T31] #1: ffffc90002ef7c98 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 642.631187][ T31] #2: ffff88805e9ad308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x860 [ 642.631241][ T31] #3: ffff8880560b3ea8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x5ac/0x860 [ 642.631294][ T31] 3 locks held by kworker/1:4/5869: [ 642.631306][ T31] 2 locks held by kworker/1:5/5891: [ 642.631316][ T31] 3 locks held by kworker/0:6/5910: [ 642.631333][ T31] 4 locks held by kworker/u8:8/5983: [ 642.631344][ T31] 3 locks held by kworker/u8:9/6225: [ 642.631355][ T31] 4 locks held by kworker/u8:10/6414: [ 642.631366][ T31] 3 locks held by kworker/u8:11/6528: [ 642.631377][ T31] 3 locks held by syz-executor/6561: [ 642.631388][ T31] 2 locks held by syz-executor/6618: [ 642.631398][ T31] 3 locks held by udevd/6622: [ 642.631416][ T31] 3 locks held by udevd/7581: [ 642.631427][ T31] 4 locks held by kworker/u8:12/8472: [ 642.631439][ T31] 4 locks held by kworker/u8:13/8473: [ 642.631449][ T31] 4 locks held by kworker/u8:14/8474: [ 642.631460][ T31] #0: ffff88805309e148 ((wq_completion)wg-kex-wg1){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 642.631510][ T31] #1: ffffc9000d22fc98 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 642.631561][ T31] #2: ffff88802a089308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0xec/0x610 [ 642.631611][ T31] #3: ffff888068d634c0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x100/0x610 [ 642.631663][ T31] 1 lock held by syz.8.958/10603: [ 642.631673][ T31] #0: ffffffff8f2d41a8 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 [ 642.631725][ T31] 3 locks held by syz.5.965/10596: [ 642.631737][ T31] 3 locks held by dhcpcd-run-hook/10613: [ 642.631748][ T31] [ 642.631752][ T31] ============================================= [ 642.631752][ T31] [ 642.631760][ T31] NMI backtrace for cpu 0 [ 642.631774][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 642.631798][ T31] Tainted: [L]=SOFTLOCKUP [ 642.631804][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 642.631814][ T31] Call Trace: [ 642.631820][ T31] [ 642.631827][ T31] dump_stack_lvl+0x100/0x190 [ 642.631851][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 642.631877][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 642.631898][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 642.631927][ T31] sys_info+0x141/0x190 [ 642.631948][ T31] watchdog+0xcc3/0xfe0 [ 642.631980][ T31] ? __pfx_watchdog+0x10/0x10 [ 642.632006][ T31] ? __kthread_parkme+0x18c/0x230 [ 642.632033][ T31] ? __pfx_watchdog+0x10/0x10 [ 642.632058][ T31] ? __pfx_watchdog+0x10/0x10 [ 642.632081][ T31] kthread+0x3b3/0x730 [ 642.632100][ T31] ? __pfx_kthread+0x10/0x10 [ 642.632116][ T31] ? ret_from_fork+0x79/0xaf0 [ 642.632135][ T31] ? ret_from_fork+0x79/0xaf0 [ 642.632154][ T31] ? rcu_is_watching+0x12/0xc0 [ 642.632178][ T31] ? __pfx_kthread+0x10/0x10 [ 642.632197][ T31] ret_from_fork+0x754/0xaf0 [ 642.632217][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 642.632239][ T31] ? __switch_to+0x7b9/0x10c0 [ 642.632262][ T31] ? __pfx_kthread+0x10/0x10 [ 642.632281][ T31] ret_from_fork_asm+0x1a/0x30 [ 642.632310][ T31] [ 642.632316][ T31] Sending NMI from CPU 0 to CPUs 1: [ 642.632347][ C1] NMI backtrace for cpu 1 [ 642.632359][ C1] CPU: 1 UID: 0 PID: 1297 Comm: aoe_tx0 Tainted: G L syzkaller #0 PREEMPT(full) [ 642.632378][ C1] Tainted: [L]=SOFTLOCKUP [ 642.632383][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 642.632391][ C1] RIP: 0010:ip6_pol_route+0x10e/0x1230 [ 642.632408][ C1] Code: e8 27 d8 e1 f7 48 8d bb 38 0d 00 00 83 e5 41 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 48 0f 00 00 <4c> 8b bb 38 0d 00 00 48 b8 00 00 00 00 00 fc ff df 49 8d 7f 0c 48 [ 642.632420][ C1] RSP: 0018:ffffc90000a07c78 EFLAGS: 00000246 [ 642.632431][ C1] RAX: dffffc0000000000 RBX: ffff88805f3e0000 RCX: ffffffff8a252728 [ 642.632440][ C1] RDX: 1ffff1100be7c1a7 RSI: ffffffff8a252339 RDI: ffff88805f3e0d38 [ 642.632448][ C1] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 642.632456][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc90000a07f90 [ 642.632464][ C1] R13: 1ffff92000140f93 R14: 0000000000000080 R15: 0000000000000001 [ 642.632473][ C1] FS: 0000000000000000(0000) GS:ffff8881246db000(0000) knlGS:0000000000000000 [ 642.632487][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 642.632496][ C1] CR2: 00007ffc5043bf40 CR3: 0000000066b08000 CR4: 00000000003526f0 [ 642.632505][ C1] Call Trace: [ 642.632510][ C1] [ 642.632517][ C1] ? __pfx_ip6_pol_route+0x10/0x10 [ 642.632531][ C1] ? __pfx_rt6_multipath_hash+0x10/0x10 [ 642.632544][ C1] ? __skb_ext_put+0x102/0x2d0 [ 642.632561][ C1] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 642.632574][ C1] fib6_rule_lookup+0x52f/0x720 [ 642.632599][ C1] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 642.632616][ C1] ? find_held_lock+0x2b/0x80 [ 642.632633][ C1] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 642.632648][ C1] ? br_nf_post_routing+0xafb/0x16a0 [ 642.632665][ C1] ? br_nf_post_routing+0x5f9/0x16a0 [ 642.632682][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 642.632701][ C1] ip6_route_input+0x662/0xc50 [ 642.632715][ C1] ? __pfx_ip6_route_input+0x10/0x10 [ 642.632728][ C1] ? find_held_lock+0x2b/0x80 [ 642.632747][ C1] ? br_forward_finish+0x10a/0x4d0 [ 642.632764][ C1] ? __lock_acquire+0x4a5/0x2630 [ 642.632777][ C1] ? __netif_receive_skb_core.constprop.0+0xd65/0x3460 [ 642.632794][ C1] ip6_rcv_finish_core.isra.0+0x1a9/0x5a0 [ 642.632809][ C1] ip6_rcv_finish+0x130/0x550 [ 642.632823][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 642.632837][ C1] ip_sabotage_in+0x21e/0x290 [ 642.632852][ C1] nf_hook_slow+0xbf/0x220 [ 642.632870][ C1] nf_hook.constprop.0+0x2a6/0x750 [ 642.632884][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 642.632898][ C1] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 642.632913][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 642.632925][ C1] ? ip6_rcv_core+0xbaf/0x1c50 [ 642.632940][ C1] ? __pfx_ipv6_rcv+0x10/0x10 [ 642.632952][ C1] ipv6_rcv+0xa4/0x610 [ 642.632965][ C1] ? __pfx_ipv6_rcv+0x10/0x10 [ 642.632977][ C1] __netif_receive_skb_one_core+0x12d/0x1e0 [ 642.632991][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 642.633006][ C1] ? lock_acquire+0x17c/0x330 [ 642.633021][ C1] __netif_receive_skb+0x1f/0x120 [ 642.633035][ C1] netif_receive_skb+0x139/0x760 [ 642.633048][ C1] ? br_multicast_count+0x8d/0xbc0 [ 642.633064][ C1] ? __pfx_netif_receive_skb+0x10/0x10 [ 642.633080][ C1] ? br_netif_receive_skb+0xff/0x1f0 [ 642.633096][ C1] br_pass_frame_up+0x346/0x490 [ 642.633113][ C1] br_handle_frame_finish+0x84f/0x1f00 [ 642.633130][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 642.633148][ C1] ? __local_bh_enable_ip+0x9e/0x120 [ 642.633168][ C1] ? ip6t_do_table+0xc1d/0x1c90 [ 642.633181][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 642.633193][ C1] ? nf_hook_slow+0x167/0x220 [ 642.633210][ C1] br_nf_hook_thresh+0x30d/0x420 [ 642.633227][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 642.633244][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 642.633262][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 642.633278][ C1] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 642.633293][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 642.633310][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 642.633329][ C1] br_nf_pre_routing_finish_ipv6+0x769/0xfb0 [ 642.633346][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 642.633365][ C1] br_nf_pre_routing_ipv6+0x39c/0x8b0 [ 642.633382][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 642.633398][ C1] ? lock_acquire+0x17c/0x330 [ 642.633412][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 642.633429][ C1] ? net_generic+0xea/0x2a0 [ 642.633446][ C1] br_nf_pre_routing+0x93b/0x1510 [ 642.633464][ C1] br_handle_frame+0xa68/0x1510 [ 642.633481][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 642.633499][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 642.633517][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 642.633532][ C1] __netif_receive_skb_core.constprop.0+0x6d7/0x3460 [ 642.633550][ C1] ? kmem_cache_free+0x143/0x720 [ 642.633563][ C1] ? find_held_lock+0x2b/0x80 [ 642.633584][ C1] ? ipv6_chk_mcast_addr+0x2b0/0x9a0 [ 642.633600][ C1] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 642.633616][ C1] ? kfree_skbmem+0x19a/0x210 [ 642.633627][ C1] ? kfree_skbmem+0x19f/0x210 [ 642.633639][ C1] ? sk_skb_reason_drop+0x114/0x1b0 [ 642.633657][ C1] ? ip6_mc_input+0x51a/0xf50 [ 642.633674][ C1] ? __lock_acquire+0x4a5/0x2630 [ 642.633688][ C1] ? process_backlog+0x32a/0x1580 [ 642.633702][ C1] __netif_receive_skb_one_core+0xb0/0x1e0 [ 642.633717][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 642.633732][ C1] ? lock_acquire+0x17c/0x330 [ 642.633745][ C1] ? process_backlog+0x32a/0x1580 [ 642.633760][ C1] ? process_backlog+0x32a/0x1580 [ 642.633773][ C1] __netif_receive_skb+0x1f/0x120 [ 642.633788][ C1] process_backlog+0x37a/0x1580 [ 642.633805][ C1] __napi_poll.constprop.0+0xaf/0x450 [ 642.633820][ C1] net_rx_action+0xa40/0xf20 [ 642.633837][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 642.633851][ C1] ? tmigr_handle_remote+0x250/0x380 [ 642.633869][ C1] ? rcu_is_watching+0x12/0xc0 [ 642.633885][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 642.633899][ C1] ? tmigr_handle_remote+0x132/0x380 [ 642.633919][ C1] ? run_timer_base+0x121/0x190 [ 642.633930][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 642.633943][ C1] handle_softirqs+0x1ea/0x910 [ 642.633962][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 642.633980][ C1] ? __dev_queue_xmit+0x7dc/0x46f0 [ 642.633995][ C1] do_softirq+0xac/0xe0 [ 642.634011][ C1] [ 642.634015][ C1] [ 642.634020][ C1] __local_bh_enable_ip+0xf8/0x120 [ 642.634037][ C1] ? __dev_queue_xmit+0x7dc/0x46f0 [ 642.634050][ C1] __dev_queue_xmit+0x7f1/0x46f0 [ 642.634066][ C1] ? finish_task_switch.isra.0+0x204/0xb70 [ 642.634084][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 642.634100][ C1] ? __lock_acquire+0x4a5/0x2630 [ 642.634112][ C1] ? ref_tracker_free+0x37e/0x6c0 [ 642.634131][ C1] ? do_raw_spin_lock+0x128/0x260 [ 642.634149][ C1] ? tx+0xa4/0x130 [ 642.634161][ C1] ? rcu_is_watching+0x12/0xc0 [ 642.634178][ C1] ? __pfx_tx+0x10/0x10 [ 642.634190][ C1] tx+0xc4/0x130 [ 642.634201][ C1] kthread+0x1d8/0x3c0 [ 642.634220][ C1] ? __kthread_parkme+0xbb/0x230 [ 642.634238][ C1] ? __pfx_kthread+0x10/0x10 [ 642.634255][ C1] ? rcu_is_watching+0x12/0xc0 [ 642.634271][ C1] ? __pfx_default_wake_function+0x10/0x10 [ 642.634290][ C1] ? __kthread_parkme+0x18c/0x230 [ 642.634310][ C1] ? __pfx_kthread+0x10/0x10 [ 642.634326][ C1] kthread+0x3b3/0x730 [ 642.634340][ C1] ? __pfx_kthread+0x10/0x10 [ 642.634353][ C1] ? ret_from_fork+0x79/0xaf0 [ 642.634367][ C1] ? ret_from_fork+0x79/0xaf0 [ 642.634381][ C1] ? rcu_is_watching+0x12/0xc0 [ 642.634397][ C1] ? __pfx_kthread+0x10/0x10 [ 642.634411][ C1] ret_from_fork+0x754/0xaf0 [ 642.634425][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 642.634441][ C1] ? __switch_to+0x7b9/0x10c0 [ 642.634457][ C1] ? __pfx_kthread+0x10/0x10 [ 642.634471][ C1] ret_from_fork_asm+0x1a/0x30 [ 642.634488][ C1] [ 642.635345][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 642.635360][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 642.635383][ T31] Tainted: [L]=SOFTLOCKUP [ 642.635389][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 642.635400][ T31] Call Trace: [ 642.635406][ T31] [ 642.635413][ T31] dump_stack_lvl+0x100/0x190 [ 642.635436][ T31] vpanic+0x20d/0x630 [ 642.635454][ T31] panic+0xd1/0xd1 [ 642.635470][ T31] ? __pfx_panic+0x10/0x10 [ 642.635489][ T31] ? wq_watchdog_touch+0xec/0x1a0 [ 642.635508][ T31] ? nmi_trigger_cpumask_backtrace+0x1be/0x230 [ 642.635532][ T31] ? watchdog.cold+0x198/0x1ca [ 642.635550][ T31] ? watchdog+0xcd3/0xfe0 [ 642.635576][ T31] watchdog.cold+0x1a9/0x1ca [ 642.635602][ T31] ? __pfx_watchdog+0x10/0x10 [ 642.635628][ T31] ? __kthread_parkme+0x18c/0x230 [ 642.635655][ T31] ? __pfx_watchdog+0x10/0x10 [ 642.635681][ T31] ? __pfx_watchdog+0x10/0x10 [ 642.635705][ T31] kthread+0x3b3/0x730 [ 642.635725][ T31] ? __pfx_kthread+0x10/0x10 [ 642.635742][ T31] ? ret_from_fork+0x79/0xaf0 [ 642.635761][ T31] ? ret_from_fork+0x79/0xaf0 [ 642.635782][ T31] ? rcu_is_watching+0x12/0xc0 [ 642.635805][ T31] ? __pfx_kthread+0x10/0x10 [ 642.635825][ T31] ret_from_fork+0x754/0xaf0 [ 642.635846][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 642.635869][ T31] ? __switch_to+0x7b9/0x10c0 [ 642.635893][ T31] ? __pfx_kthread+0x10/0x10 [ 642.635913][ T31] ret_from_fork_asm+0x1a/0x30 [ 642.635940][ T31] [ 642.636199][ T31] Kernel Offset: disabled