last executing test programs: 4m8.625528858s ago: executing program 1 (id=16): r0 = socket$inet(0x2, 0x3, 0x6) arch_prctl$ARCH_GET_UNTAG_MASK(0x1003, 0xfffffffffffffffc) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r2 = epoll_create1(0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f00000010c0)={{0x56, @loopback, 0x4e21, 0x4, 'wlc\x00', 0x0, 0xae6, 0x27}, {@remote, 0x4e21, 0x3, 0x7, 0xfffffffd, 0x2}}, 0x44) r3 = eventfd2(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000b80)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000180)={0x20000005}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x7ff, 0x7, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f00000000c0)={0x0, 0x7a120, 0x8001}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x84, &(0x7f0000000000), 0x90) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$NBD_SET_SOCK(r6, 0xab00, r8) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file0\x00'}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r9, 0x7a8, &(0x7f0000000100)={{@my=0x1, 0x6}, @host, 0x6, 0x2, 0x401, 0x6, 0xfe4, 0xe7, 0x31b}) sendmmsg$inet(r5, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000001180)="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", 0x90}, {&(0x7f0000000180)="1234009951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0xffffff5a}, {&(0x7f0000000500)="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", 0xb94}], 0x5}}], 0x1, 0x0) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r10, &(0x7f0000000400)='ns/cgroup\x00') sched_setscheduler(r10, 0x5, &(0x7f0000000140)) shutdown(r5, 0x1) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)={[{@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x33, 0x32, 0x24, 0x2d, 0x30, 0x32]}}, {@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x39, 0x38]}}, {@quota}, {@huge_never}], [{@smackfsroot={'smackfsroot', 0x3d, '/dev/dma_heap/system\x00'}}, {@euid_gt={'euid>', 0xee00}}]}) 4m7.882579955s ago: executing program 1 (id=18): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10) fadvise64(r2, 0x36000000, 0x5, 0x3) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001d80)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES64=r4, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYBLOB="494a2110597a50e4c4c0f83b71a1568c874a0809036e5acb962735a5b3c051785144f447a9c3af622d76a7b38add77c04e97834ab4e3073b84a57159745da18a6238d3c32e1c53be91c67a6b20295ff49b5cb51e904825cd45290dbe3d2d"], 0x50}, 0x1, 0xba01}, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f0000000080)=0xffffffff, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {0x0, 0xfff8}}}, 0x24}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000740)={'#! ', './file0'}, 0xb) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000007, 0x4000010, r10, 0x8000000) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000002ff0100000000000000000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r13, r12, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r14 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000017c0)=@bpf_lsm={0x1d, 0x11, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx_val={0x18, 0x7, 0x6, 0x0, 0x6}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000500)='GPL\x00', 0xd9c, 0x1000, &(0x7f00000007c0)=""/4096, 0x41000, 0x2c, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000005c0)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000640)=[{0x5, 0x5, 0x2, 0x4}, {0x1, 0x1, 0xd, 0x9}, {0x4, 0x5, 0xd, 0x5}, {0x2, 0x4, 0x8, 0x1}, {0x2, 0x3, 0xa, 0x4}], 0x10, 0x0, @void, @value}, 0x94) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', r7, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r16 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001c80)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0xa, 0x11, &(0x7f00000002c0)=ANY=[@ANYBLOB="183a0000020000000003000000000000fb89f806fc0c000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r16, @ANYBLOB="000000000000000018150000", @ANYRES32=r10, @ANYBLOB="000000000000000054610c00fbffffff"], &(0x7f0000000180)='syzkaller\x00', 0xfffffffe, 0xb3, &(0x7f0000000380)=""/179, 0x41100, 0x49, '\x00', r7, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0xc, 0x0, 0x401}, 0x10, r13, r14, 0x0, &(0x7f0000001880)=[r15, 0x1], 0x0, 0x10, 0x2, @void, @value}, 0x94) 4m6.665755584s ago: executing program 1 (id=23): sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, 0x0, 0x8040) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_x_policy={0x2, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private1, @in6=@private1}}, @sadb_lifetime={0x4, 0x4}]}, 0xc0}}, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_script(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000002000128008000100687372001400028008000200", @ANYRES32=r5, @ANYBLOB="a8870100", @ANYRES32=r4, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) bind$can_j1939(r2, &(0x7f00000001c0)={0x1d, r4, 0x3, {0x2, 0xf0, 0xe4947fbf43f20e8b}, 0xff}, 0x18) r6 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x5, &(0x7f0000000200)={0x77359400}, 0x1, 0x4}) io_uring_enter(r6, 0x2def, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x7fffffff}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xfff}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x3, r10, 0x3, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r6, 0x18, &(0x7f0000000140)={0x5, r6, 0x0, {0x8001, 0x1}, 0x6}, 0x1) 4m6.507204708s ago: executing program 1 (id=24): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020601020010000000000000000000000c0007809f000640000006ff0500010006000000050005000a00000013000300686173683a6e65742c696661632500000900020073797a31000000000500040003000000"], 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r5}, 0x4) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x10, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x7ffa, {0x0, 0x0, 0x0, r4, {0x5, 0x7}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) (async) r8 = getpid() syz_open_procfs$pagemap(r8, &(0x7f0000000000)) 4m6.044483407s ago: executing program 1 (id=26): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x4, 0xa, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc90}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@fallback, 0x4, 0x1, 0x7, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000194c0)={r2, 0x0, 0x25, 0x1f, @val=@tcx={@void, @value=r2, @void, @void, r3}}, 0x1c) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@fallback=r0, 0xffffffffffffffff, 0x0, 0x1, r1, @void, @value, @void, @void, r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bind$pptp(r2, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0x1e) chroot(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='ext4\x00', 0x8000, 0x0) 4m5.863925054s ago: executing program 1 (id=29): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = io_uring_setup(0xaab, &(0x7f0000000340)={0x0, 0x5326, 0x1}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x62, 0xa1, 0xb, 0x40, 0xc45, 0x1010, 0xe6fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x32, 0x0, 0x1, 0x97, 0x40, 0xa4, 0x0, [], [{{0x9, 0x5, 0x82, 0x3, 0x3ff, 0x0, 0x7e}}]}}]}}]}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000100)=[{0x0, 0x1, {0x2, 0xff, 0x4}, {0x2, 0x62e061e93d064d32, 0xc0c31c18c98c2631}, 0x2}, {0x1, 0x0, {0x0, 0x0, 0x4}, {0x2, 0xf0, 0x4}, 0xfe, 0xff}], 0x40) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r7, {0xfffd, 0x10}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x840) sendmmsg$inet(r1, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000001c0)="3929b928e02904c171a10ad8b816ea301b600fa0d5d29673b89debc5bda42b8c87eae2b0bccf5f0e10a9be9a27726770eb1ee328e0d201c82682f43367e371d752f3ddc027fc185a89b9799de74fe2d1a59f79371140d4d8e9f93c6fe07f7968da0cdc1e06bf5e4bd80059f7def3d4e0741975e4121f1f649fe414ee00d8d9ee", 0x80}], 0x1}}], 0x1, 0x20000000) socket$packet(0x11, 0x3, 0x300) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c9"], 0x15) 3m50.785773794s ago: executing program 32 (id=29): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = io_uring_setup(0xaab, &(0x7f0000000340)={0x0, 0x5326, 0x1}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x62, 0xa1, 0xb, 0x40, 0xc45, 0x1010, 0xe6fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x32, 0x0, 0x1, 0x97, 0x40, 0xa4, 0x0, [], [{{0x9, 0x5, 0x82, 0x3, 0x3ff, 0x0, 0x7e}}]}}]}}]}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000100)=[{0x0, 0x1, {0x2, 0xff, 0x4}, {0x2, 0x62e061e93d064d32, 0xc0c31c18c98c2631}, 0x2}, {0x1, 0x0, {0x0, 0x0, 0x4}, {0x2, 0xf0, 0x4}, 0xfe, 0xff}], 0x40) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r7, {0xfffd, 0x10}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x840) sendmmsg$inet(r1, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000001c0)="3929b928e02904c171a10ad8b816ea301b600fa0d5d29673b89debc5bda42b8c87eae2b0bccf5f0e10a9be9a27726770eb1ee328e0d201c82682f43367e371d752f3ddc027fc185a89b9799de74fe2d1a59f79371140d4d8e9f93c6fe07f7968da0cdc1e06bf5e4bd80059f7def3d4e0741975e4121f1f649fe414ee00d8d9ee", 0x80}], 0x1}}], 0x1, 0x20000000) socket$packet(0x11, 0x3, 0x300) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c9"], 0x15) 2m29.210032581s ago: executing program 0 (id=372): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)={{0x12, 0x1, 0x0, 0xe2, 0x79, 0x3b, 0x10, 0x5d1, 0x2001, 0x900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x2f, 0x9c}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000980)={0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="002902"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000100)={0x20, 0xd, 0x2, "fe85"}, 0x0, 0x0}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r3 = accept4(r2, 0x0, 0x0, 0x80000) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000080)={{r2}, 0xfffffffffffffff7, 0x10, 0x6}) r4 = dup(r3) r5 = accept4(r4, 0x0, 0x0, 0x180000) sendmmsg$unix(r5, &(0x7f0000003440)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)='Y', 0x1}, {&(0x7f0000000100)="d5", 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000b40)="bb5f0a120bea463c1779fd329b8c20d2eb4d7d2396bbfbff51eb8e68613606963ba21efe76fb9efa5d4fe899318b6a858518e95d0c69f914bb642b5d5b48d6fc4fdefc0807770aa7b8be8f89563e32c52e9c6251e528259506396593cb56a7127bd802f3f484a3dd6020859331fc2029903a349d61dd8f2fee19a4", 0x7b}, {&(0x7f0000000bc0)="6f8dcd0d2a0bf144ed62de090e13ec217370e8ea22fe2c1805939cda6606275047e49b41994af0f3f29d954952ccfd5714cf362e56f2b50623bdb88119663a0dd93d6f0eba959d5dd5802dc95c1255266728264a1cee48f5e7151dc58cccf7b0f8a34e68ef4f05bd4e1092a49e6bd8", 0x6f}, {&(0x7f0000000c80)="4ff782ac79bc548cc0a6c4ba0dcfae8ea389cda6dbce0f28529a5ab5b5085d48f8bf27aa400a9b9ba90a74af72", 0x2d}], 0x3, &(0x7f0000000d40)=ANY=[], 0x68, 0x24040090}}], 0x2, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d10402064d8c57ff202030109021b0001000000000904"], 0x0) 2m27.096206262s ago: executing program 5 (id=381): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000600)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0}, 0x68) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() kcmp$KCMP_EPOLL_TFD(r1, 0x0, 0x7, 0xffffffffffffffff, 0x0) r2 = inotify_init1(0x0) dup3(r2, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x3, 0x6) r4 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000000)={{0x2, 0x3, @local}, {0x1, @remote}, 0x4a, {0x2, 0x0, @remote}, 'veth1_to_bridge\x00'}) ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @multicast2}, 'syz_tun\x00'}) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000240)={'vxcan1\x00'}) readv(0xffffffffffffffff, &(0x7f0000000400)=[{0x0}], 0x1) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) getpgrp(0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x8000000000000100, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3e06e00d96072081000000000000002000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d88f0eb541a89a34dac70fe800008000020004", [0x6, 0x3]}}) 2m26.985219305s ago: executing program 0 (id=383): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000580)={{0x12, 0x1, 0x110, 0x1b, 0xe4, 0xbf, 0x8, 0xbc7, 0x6, 0xddfa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4c, 0x0, 0x2, 0xb5, 0x3b, 0xdb, 0x0, [], [{{0x9, 0x5, 0x9, 0x2, 0x10, 0x5, 0x8, 0xb}}, {{0x9, 0x5, 0xe, 0xb, 0x0, 0x0, 0x81, 0xe}}]}}]}}]}}, 0x0) 2m26.370586525s ago: executing program 5 (id=386): r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net\x00') lseek(r0, 0x1, 0x0) getdents(r0, 0x0, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}, @printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xdf) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003f7a7e40720c8600972201020101"], 0x0) syz_emit_ethernet(0x7e, &(0x7f00000003c0)={@local, @random="56c9d5282097", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x70, 0x68, 0x0, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x43}}, @parameter_prob={0xc, 0x0, 0x0, 0x6, 0xc, 0x0, {0x15, 0x4, 0x1, 0x5, 0x9, 0x64, 0x9, 0x8, 0x32, 0x5, @multicast1, @loopback, {[@generic={0x83, 0x2}, @generic={0x88, 0xa, "9b8feced469c7269"}, @cipso={0x86, 0x31, 0x1, [{0x7, 0xa, "1060fb88b5b4452c"}, {0x1, 0x5, "3bee8a"}, {0x6, 0x11, "28fa5f9711aa76a0053be6ceeeea9b"}, {0x2, 0xb, "71fd35ebaeb683f518"}]}]}}}}}}}, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@delqdisc={0x24, 0x25, 0x2, 0x70bd28, 0x27dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x8}, {0x3, 0xd}, {0x8, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x20040013) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x1a, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="101fa51609dbf1a3fb77464e990cf83dc9c67ce5ce5a7819dcba319ec4de1ffa68e2dce492f220f2faf81734c85ac198a68b267d6ad8d6a000a5f5d6f846fc5b038d6b2644afb829566b12062c4bf24bb48fa9d99a7901259d47199c04da16b9cc0f69a2955eefb129bc236ec02cd7d195465448d005ac3a5f7e11811780037775ef660837b54a13b989936c122c2980b4d46f8169fbaa30e33989ce4452c102e0696028aa1904ecb7eaf6a3ecea760b6ee80d5ebdbd86fb2e2c72b22387ef31c22e86e967cab7b2d0d6693d06ae3bcd044107"], 0x34}}, 0x84) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYRESOCT=r2]) 2m24.067472567s ago: executing program 0 (id=392): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @loopback={0x2000000}, @local, [@srh={0x2b, 0x0, 0x4, 0x0, 0x0, 0x10}]}}}}}}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000131401"], 0x38}}, 0x14) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) accept4(r2, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r1, @ANYRESOCT=r1, @ANYBLOB="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", @ANYRES16=r2], 0x60}}, 0x0) 2m24.066755499s ago: executing program 0 (id=393): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x90, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2m23.699488017s ago: executing program 5 (id=397): socket(0x10, 0x2, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00'}) (async) syz_usb_connect(0x4, 0x2d, &(0x7f0000000180)=ANY=[@ANYRESHEX], 0x0) r1 = fsopen(&(0x7f0000000280)='9p\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000640)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) r5 = epoll_create1(0x0) (async) r6 = socket(0x1, 0x3, 0x200009) (async) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000080)={0x40002004}) (async) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000000c0)={0x10000001}) (async) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) (async) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) (async) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x5c98c0) write$char_usb(r8, &(0x7f0000000040)="e2", 0x918) shutdown(r6, 0x0) 2m22.653873212s ago: executing program 3 (id=398): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x200000000000000, 0x1, 0x1}}, 0x3c) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x200000000000000, 0x1, 0x1}}, 0x3c) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100), 0x3f00, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e}, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) (async) socket$inet(0x2, 0x4000000000000001, 0x0) socket$igmp(0x2, 0x3, 0x2) r6 = socket$inet6(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001300)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYRESDEC=r5], 0x6c}}, 0x840) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001300)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYRESDEC=r5], 0x6c}}, 0x840) read$msr(r0, &(0x7f0000000180)=""/9, 0x9) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c00000010000104000000000000000004000000", @ANYRES32=0x0, @ANYRESHEX=r2], 0x5c}}, 0x800) 2m22.595702283s ago: executing program 5 (id=399): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000005900)=[{{&(0x7f0000000180)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000400)=""/153, 0x99}, {&(0x7f0000000380)=""/44, 0x2c}, {&(0x7f00000004c0)=""/155, 0x9b}, {&(0x7f0000005cc0)=""/198, 0xc6}, {&(0x7f0000000640)=""/92, 0x5c}, {0xfffffffffffffffc}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/22, 0x16}], 0x8, &(0x7f0000005b00)=""/226, 0xe2}, 0x90c4}, {{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001a40)=""/147, 0x93}], 0x1, &(0x7f0000001b00)=""/251, 0xfb}, 0xfffffc00}, {{&(0x7f0000001c00)=@tipc, 0x80, &(0x7f00000030c0), 0x0, &(0x7f0000003180)=""/221, 0xdd}, 0x10000}, {{&(0x7f0000003280)=@hci, 0x80, &(0x7f0000003600)=[{&(0x7f0000003300)=""/234, 0xea}, {&(0x7f0000003400)=""/82, 0x52}, {&(0x7f0000003480)}, {&(0x7f0000000040)=""/8, 0x8}, {&(0x7f0000003500)=""/44, 0x2c}, {&(0x7f0000003540)=""/179, 0xb3}], 0x6, &(0x7f0000003680)=""/65, 0x41}, 0xd7e3}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000000580)=""/119, 0x77}, {&(0x7f0000003780)=""/233, 0xe9}, {&(0x7f0000003880)=""/130, 0x82}, {&(0x7f0000003940)=""/199, 0xc7}, {&(0x7f0000003a40)=""/75, 0x4b}], 0x5, &(0x7f0000003b40)=""/234, 0xea}, 0x40}, {{&(0x7f0000003c40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000003f00)=[{&(0x7f0000003cc0)=""/103, 0x67}, {&(0x7f0000003d40)=""/43, 0x2b}, {&(0x7f0000003d80)=""/108, 0x6c}, {&(0x7f0000003e00)=""/117, 0x75}, {&(0x7f0000003480)=""/66, 0x42}], 0x5, &(0x7f0000003f80)=""/4096, 0x1000}}, {{&(0x7f0000004f80)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f00000051c0)=[{&(0x7f0000005000)=""/203, 0xcb}, {&(0x7f0000005100)=""/27, 0x1b}, {&(0x7f0000005140)=""/66, 0x42}], 0x3}, 0xc0000000}, {{&(0x7f0000005200)=@alg, 0x80, &(0x7f0000005880)=[{&(0x7f0000005280)=""/199, 0xc7}, {&(0x7f0000005380)=""/100, 0x64}, {&(0x7f0000005400)=""/227, 0xe3}, {&(0x7f0000005dc0)=""/150, 0x96}, {&(0x7f00000055c0)=""/161, 0xa1}, {&(0x7f0000005680)=""/83, 0x53}, {&(0x7f0000005700)=""/151, 0x97}, {&(0x7f00000057c0)=""/162, 0xa2}], 0x8}, 0x1}], 0x8, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48042) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r5, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4d, 0x32, 0xf7, 0x3, 0x80, 0x7, 0xc2, 0xc, 0x66, 0x4, [0x40, 0x9, 0xf, 0x10000, 0x6, 0x8, 0xfffffeff, 0x2174]}}) accept4$rose(r4, &(0x7f0000001780)=@short={0xb, @dev, @netrom, 0x1, @bcast}, &(0x7f00000017c0)=0x1c, 0x800) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2275, &(0x7f00000018c0)) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000005c00)=ANY=[@ANYBLOB="dd00000000004eab6d4886c737580f2aba1a00000000000005000000950000000000000026513b2d36aa146ba87a3e67c590d48408a883a94408634bdb2e226ae640c76fdaf01c3a6fc852c4118504d1d52c49784822f6049fccdfab835bb40c57695be0d89aa7e1e52a5e7c71fa210814a500000f67618100edf8d0844b1ddedf9b688fa4d366e588c790becd4e3c52ffb700000000224f770af4000498692a8c673e8a715647002d3c31c8ef8dc9194bb040d754633161"], &(0x7f0000000080)='GPL\x00', 0xa, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r6, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) 2m22.40320828s ago: executing program 3 (id=400): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x5452, &(0x7f0000000000)) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0x6) setsockopt$inet_tcp_int(r3, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r3, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r5, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}, 0x7}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) recvmmsg(r3, 0x0, 0x0, 0x40, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 2m21.599464841s ago: executing program 5 (id=403): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) prctl$PR_MCE_KILL(0x23, 0x0, 0xabb4e1ce1e1cd1e3) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f0000000280)={[{0x8, 0x4e00, "00934f3a08aab88d"}]}) 2m21.495013338s ago: executing program 3 (id=404): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r1}, 0x18) sync() r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x6c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xf, 0x0, 0xfffd, 0x5, 0x6, 0x8}, {0x74, 0x2, 0x8, 0x576, 0x5d7, 0x2}, 0xa, 0xc0000, 0xc58}}, @TCA_TBF_PBURST={0x8, 0x7, 0x19df}, @TCA_TBF_PRATE64={0xc, 0x5, 0x67eb6bf12151d490}]}}]}, 0x6c}}, 0x44080) 2m21.25147002s ago: executing program 4 (id=408): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/144, 0x90}, {&(0x7f0000000000)=""/21, 0x15}, {&(0x7f0000000140)=""/19, 0x13}, {&(0x7f0000000280)=""/13, 0xd}, {&(0x7f0000000480)=""/130, 0x82}], 0x5, &(0x7f0000000680)=""/147, 0x93}, 0x1) r0 = socket$inet6(0xa, 0x3, 0x4) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) shutdown(r0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)='B', 0x1}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r2, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x2, 0x0) 2m21.240533627s ago: executing program 0 (id=409): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$inet(r1, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000cc0)="af0ca5", 0x3}, {&(0x7f0000000140)='0', 0x1}], 0x2}}], 0x1, 0x0) 2m21.230571463s ago: executing program 3 (id=410): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x5452, &(0x7f0000000000)) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0x6) setsockopt$inet_tcp_int(r3, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r3, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r5, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}, 0x7}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) recvmmsg(r3, 0x0, 0x0, 0x40, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 2m21.075265466s ago: executing program 0 (id=411): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002c00011ad9bd70f7fbdbdf2503ee003bb740a2bb"], 0x18}, 0x1, 0x0, 0x0, 0x400000c}, 0x40000) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = socket$inet6(0xa, 0x3, 0x7) getsockopt(r5, 0xff, 0x24, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x5) 2m20.264200272s ago: executing program 3 (id=413): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0xb0200, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfb, 0x323, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = socket$unix(0x1, 0x2, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000740), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r5, 0xc0305615, &(0x7f0000000000)={0x0, {0xfffff41a}}) r6 = socket$inet6(0xa, 0x806, 0xa) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r6, 0x3) r7 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r7, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) sendmmsg(r7, &(0x7f0000003f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x10}}], 0x1, 0x0) r8 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0x0, 0x40, 0x2, 0x18}, &(0x7f0000000100), &(0x7f00000000c0)) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r9, 0x84, 0x1c, &(0x7f0000000240), &(0x7f0000000280)=0x4) io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x22, 0x0, 0x1) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1c, "f42a97b96d025891dd3f75fdda624457ad3d5c36389c308570204262"}}) 2m19.835460685s ago: executing program 2 (id=415): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='nv\x00', 0x3) shutdown(r0, 0x1) 2m19.663913957s ago: executing program 2 (id=416): r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={0x0, r1}, 0x18) (async) ustat(0xb3c, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ipvlan0\x00'}) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) r4 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) (async) ptrace$getregset(0x4204, r4, 0x200, &(0x7f00000004c0)={&(0x7f00000003c0)=""/128, 0x80}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f00000000c0)) read$dsp(r6, &(0x7f0000000300)=""/79, 0x4f) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), r2) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r3, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, [@tail_call]}, &(0x7f00000001c0)='GPL\x00', 0x5, 0x3a, &(0x7f0000000280)=""/58, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2f, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x2, 0x4, 0x5, 0x2}, 0x10, r7, 0xffffffffffffffff, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff], 0x0, 0x10, 0x58, @void, @value}, 0x94) 2m19.362603832s ago: executing program 5 (id=417): r0 = syz_io_uring_setup(0x1370, 0x0, 0x0, &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4820}, 0x11) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xc, 0x3, 0x7ffc1ffb}]}) modify_ldt$write2(0x11, &(0x7f0000000040), 0x10) modify_ldt$read(0x0, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r5, 0x4b48, &(0x7f0000003d40)=""/175) r6 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 2m19.147336485s ago: executing program 2 (id=418): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) shutdown(r0, 0x1) 2m18.096952514s ago: executing program 4 (id=419): r0 = syz_io_uring_setup(0x5179, &(0x7f00000002c0)={0x0, 0x4414000, 0x10100, 0x3, 0x210}, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_setup(0x1bef, &(0x7f00000000c0)={0x0, 0xe6e8, 0x8, 0x1, 0x26e, 0x0, r0}, &(0x7f0000000080)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0xb15, 0x0, 0x0, 0x0, 0x0) 2m17.64311627s ago: executing program 3 (id=420): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0xbf, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2m17.197703372s ago: executing program 4 (id=421): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$inet(r1, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000cc0)="af0ca5", 0x3}, {&(0x7f0000000140)='0', 0x1}], 0x2}}], 0x1, 0x0) 2m16.927418628s ago: executing program 2 (id=422): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xd, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180200000000000000000000ffffffff851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bda100000000000007010000f8ffffffb702000008b19200b703000000ffb000850000002e00000095"], &(0x7f0000000200)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m16.51477584s ago: executing program 4 (id=423): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f40)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000400)="f2e0b7531e2063b7a6345c67a555f26bf2ef0fbc7006a89c01a5517e64a10b791358670701b411733c3a0934877d466f0cd8cb7f6a170fc7a990fb07b3e8d4c588345e6b8fdf025851f3aadc6c3abde6ba8a4b5ece8598be1d57bd1e85c8e8660cbc3a", 0x63}], 0x1}}], 0x1, 0x48100) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3a8, 0x2b0, 0x2b0, 0x2b0, 0x138, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000980)=[@text32={0x20, 0x0}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x7, 0xf, 0x9, '\x00', 0x5}) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r5, 0x0, 0xa0028000}, 0x38) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) 2m10.220275152s ago: executing program 2 (id=424): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x281}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000f00)=ANY=[], 0x78) close(r2) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000c80), 0x2, 0x0) r4 = dup2(r3, r3) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x8008af00, &(0x7f0000000040)=0x1) execveat(r2, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x800) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, 0x0, 0x0, 0x0) r5 = getpgrp(0x0) r6 = socket$igmp(0x2, 0x3, 0x2) socket$igmp(0x2, 0x3, 0x2) statx(r2, &(0x7f00000002c0)='./file1\x00', 0x1800, 0x400, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$nfs(&(0x7f0000000080)='rpc_pipefs\x00', &(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x1000000, &(0x7f0000000400)={[{'/'}, {'rpc_pipefs\x00'}], [{@fsuuid={'fsuuid', 0x3d, {[0x38, 0x6b, 0x37, 0x39, 0x30, 0x35, 0x65, 0x63], 0x2d, [0x35, 0x32, 0x36, 0x39], 0x2d, [0x39, 0x34, 0xaeea6cc89886f8d8, 0x37], 0x2d, [0x32, 0x30, 0x65, 0x34], 0x2d, [0x30, 0x33, 0x38, 0x36, 0x36, 0x6e, 0x32, 0x36]}}}, {@uid_lt={'uid<', r7}}, {@obj_user={'obj_user', 0x3d, '$-'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0xfffffffd}, 0x3c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELOBJ={0x40, 0x14, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_OBJ_USERDATA={0x2b, 0x8, "6762ccdad070ba9ee324100976be1ca0aa1d6cb518798900e5ce9dab4adf4418d7d018733f4165"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xac}, 0x1, 0x0, 0x0, 0x618b37b523276f6c}, 0x20000000) r8 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) setsockopt$MRT_DEL_MFC_PROXY(r6, 0x0, 0xd3, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x2, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x518, 0x4000000}, 0x3c) capset(&(0x7f00000000c0)={0x20071026, r5}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x460c80, 0x200) 2m9.907310418s ago: executing program 4 (id=425): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x3, @remote, 0x140}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [{0x808, 0x0, 0x7}, {0x8a2, 0x0, 0xffffffffffffffff}, {0x660, 0x0, 0x27155391}]}) setresuid(0x0, 0xee00, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) syz_io_uring_setup(0x4e3, &(0x7f0000000380)={0x0, 0x59e2, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180), &(0x7f00000001c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x80}}, './file0\x00'}) r3 = syz_open_dev$radio(&(0x7f0000000140), 0x0, 0x2) readv(r3, &(0x7f00000018c0)=[{&(0x7f0000001400)=""/185, 0xb9}], 0x1) name_to_handle_at(r2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@orangefs_parent={0x28, 0x2, {{"c65dbe851518094a12e2f76c7ca31025", 0x5}, {"95d14bba14d20432010cc917b306153c", 0x9}}}, &(0x7f0000000080), 0x1600) 2m2.151871945s ago: executing program 33 (id=411): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002c00011ad9bd70f7fbdbdf2503ee003bb740a2bb"], 0x18}, 0x1, 0x0, 0x0, 0x400000c}, 0x40000) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071100000000000001d400500000000004704000001ed00000f0300ff900000001d44000000000000620a00fe000000007203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = socket$inet6(0xa, 0x3, 0x7) getsockopt(r5, 0xff, 0x24, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x5) 2m1.114109544s ago: executing program 34 (id=417): r0 = syz_io_uring_setup(0x1370, 0x0, 0x0, &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4820}, 0x11) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xc, 0x3, 0x7ffc1ffb}]}) modify_ldt$write2(0x11, &(0x7f0000000040), 0x10) modify_ldt$read(0x0, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r5, 0x4b48, &(0x7f0000003d40)=""/175) r6 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 1m59.820175991s ago: executing program 35 (id=420): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0xbf, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1m59.664761849s ago: executing program 2 (id=429): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/144, 0x90}, {&(0x7f0000000000)=""/21, 0x15}, {&(0x7f0000000140)=""/19, 0x13}, {&(0x7f0000000280)=""/13, 0xd}, {&(0x7f0000000480)=""/130, 0x82}], 0x5, &(0x7f0000000680)=""/147, 0x93}, 0x1) r0 = socket$inet6(0xa, 0x3, 0x4) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) shutdown(r0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)='B', 0x1}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r2, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x2, 0x0) 1m59.595930445s ago: executing program 4 (id=430): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x34}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000240000000000219078ac1e0001ac141400000000000401907804c1db15c2ed60"], 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x32000, 0x164}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) truncate(0x0, 0xf000) close(0xffffffffffffffff) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r2, &(0x7f0000000240)="14000000140005b7ffccca38b9000000060860eb", 0x14) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000700)={0x7, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x21], &(0x7f0000000100)}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x12100}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0xbc, 0x15, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_OBJ_USERDATA={0xa7, 0x8, "fbe2194227f7e56d79bb9fd26e885e31b9f0a6e42984ff02cdf132c884021802a7f1d2c3f6abb73c121bccc0cca888b272f9b6a3ed64b202529a8a04280cbb9de5c25468e7f827355ecb6d0a5866ec2d74d89b413bf1d7109ecda3da1a8504551a7b30f1303866bbcebffd52cfaf3e4cb542f4a7f5a91e7dad951778dc2b7202a8b0385ba670ad7b1c1f931a216ffa06f97bc4eb1fa9eb756f22ef77ea921d6d0d2613"}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8000}, 0x200000c0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004800)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000020a01010000000000000000010000000900010073797a30"], 0x1b4}}, 0x0) 0s ago: executing program 36 (id=429): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/144, 0x90}, {&(0x7f0000000000)=""/21, 0x15}, {&(0x7f0000000140)=""/19, 0x13}, {&(0x7f0000000280)=""/13, 0xd}, {&(0x7f0000000480)=""/130, 0x82}], 0x5, &(0x7f0000000680)=""/147, 0x93}, 0x1) r0 = socket$inet6(0xa, 0x3, 0x4) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) shutdown(r0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)='B', 0x1}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r2, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x2, 0x0) kernel console output (not intermixed with test programs): recv_control_msg error -71 req 04 val 1100 [ 103.989848][ T951] pwc: recv_control_msg error -71 req 04 val 1200 [ 104.007758][ T951] pwc: Registered as video103. [ 104.018877][ T951] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input13 [ 104.125679][ T951] usb 6-1: USB disconnect, device number 3 [ 104.134932][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.265955][ T5874] usb 5-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 104.325753][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.362634][ T5874] usb 5-1: config 0 descriptor?? [ 104.503623][ T5865] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 104.653860][ T5865] usb 1-1: device descriptor read/64, error -71 [ 104.685346][ T6432] loop2: detected capacity change from 0 to 7 [ 104.720034][ T6432] Dev loop2: unable to read RDB block 7 [ 104.737644][ T6432] loop2: AHDI p1 p2 [ 104.747280][ T6432] loop2: partition table partially beyond EOD, truncated [ 104.777328][ T6432] loop2: p1 size 4227858431 extends beyond EOD, truncated [ 104.831365][ T5874] playstation 0003:054C:0BA0.0007: unknown main item tag 0x0 [ 104.886283][ T5874] playstation 0003:054C:0BA0.0007: unknown main item tag 0x0 [ 104.903774][ T5952] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 104.911335][ T5865] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 104.934923][ T5874] playstation 0003:054C:0BA0.0007: unknown main item tag 0x0 [ 104.975685][ T5874] playstation 0003:054C:0BA0.0007: unknown main item tag 0x0 [ 105.013284][ T5874] playstation 0003:054C:0BA0.0007: unknown main item tag 0x0 [ 105.025940][ T5874] playstation 0003:054C:0BA0.0007: hidraw0: USB HID v0.09 Device [HID 054c:0ba0] on usb-dummy_hcd.4-1/input0 [ 105.076566][ T5952] usb 4-1: Using ep0 maxpacket: 16 [ 105.082586][ T5865] usb 1-1: device descriptor read/64, error -71 [ 105.090946][ T5952] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 105.169635][ T5874] playstation 0003:054C:0BA0.0007: Failed to retrieve feature with reportID 18: -71 [ 105.181770][ T5874] playstation 0003:054C:0BA0.0007: Failed to retrieve DualShock4 pairing info: -71 [ 105.192852][ T5874] playstation 0003:054C:0BA0.0007: Failed to get MAC address from DualShock4 [ 105.201740][ T5874] playstation 0003:054C:0BA0.0007: Failed to create dualshock4. [ 105.207077][ T5865] usb usb1-port1: attempt power cycle [ 105.219719][ T5952] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 105.219943][ T5874] playstation 0003:054C:0BA0.0007: probe with driver playstation failed with error -71 [ 105.259612][ T5874] usb 5-1: USB disconnect, device number 9 [ 105.261474][ T5952] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 105.701501][ T6441] netlink: 8 bytes leftover after parsing attributes in process `syz.5.133'. [ 105.710466][ T6441] netlink: 8 bytes leftover after parsing attributes in process `syz.5.133'. [ 105.799763][ T5952] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.811137][ T5952] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 105.824471][ T5952] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 105.834967][ T5198] Dev loop2: unable to read RDB block 7 [ 105.840532][ T5198] loop2: AHDI p1 p2 [ 105.845102][ T5952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.853089][ T5952] usb 4-1: Product: syz [ 105.857409][ T5198] loop2: partition table partially beyond EOD, truncated [ 105.864981][ T5198] loop2: p1 size 4227858431 extends beyond EOD, truncated [ 105.872993][ T5952] usb 4-1: Manufacturer: syz [ 105.877945][ T5952] usb 4-1: SerialNumber: syz [ 105.894985][ T5952] usb 4-1: config 0 descriptor?? [ 105.900479][ T6431] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 106.021585][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 106.021599][ T30] audit: type=1400 audit(1744428154.685:496): avc: denied { ioctl } for pid=6442 comm="syz.2.134" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10620 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 106.059614][ T6444] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6444 comm=syz.2.134 [ 106.081212][ T5865] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 106.116455][ T5952] mcba_usb 4-1:0.0 can0: couldn't setup read URBs [ 106.149514][ T5865] usb 1-1: device descriptor read/8, error -71 [ 106.156748][ T5952] mcba_usb 4-1:0.0 can0: couldn't start device: -90 [ 106.164737][ T30] audit: type=1400 audit(1744428154.725:497): avc: denied { setopt } for pid=6442 comm="syz.2.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 106.184484][ T30] audit: type=1400 audit(1744428154.795:498): avc: denied { write } for pid=6445 comm="syz.4.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 106.223631][ T30] audit: type=1400 audit(1744428154.795:499): avc: denied { connect } for pid=6445 comm="syz.4.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 106.264530][ T5952] mcba_usb 4-1:0.0: probe with driver mcba_usb failed with error -90 [ 106.299093][ T5952] usb 4-1: USB disconnect, device number 6 [ 106.320579][ T30] audit: type=1400 audit(1744428154.795:500): avc: denied { name_connect } for pid=6445 comm="syz.4.136" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 106.322092][ T30] audit: type=1400 audit(1744428154.925:501): avc: denied { watch } for pid=6450 comm="syz.5.135" path="/8" dev="tmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 106.423340][ T5865] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 106.453711][ T5865] usb 1-1: device descriptor read/8, error -71 [ 106.563551][ T5865] usb usb1-port1: unable to enumerate USB device [ 106.786848][ T30] audit: type=1400 audit(1744428155.455:502): avc: denied { bind } for pid=6459 comm="syz.5.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 107.454815][ T30] audit: type=1400 audit(1744428155.885:503): avc: denied { nlmsg_read } for pid=6463 comm="syz.3.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 107.566499][ T6473] pim6reg: entered allmulticast mode [ 107.584599][ T30] audit: type=1400 audit(1744428156.245:504): avc: denied { create } for pid=6461 comm="syz.2.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 107.661614][ T30] audit: type=1400 audit(1744428156.285:505): avc: denied { search } for pid=5180 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.287987][ T6482] veth0_vlan: entered allmulticast mode [ 108.305729][ T6482] veth0_vlan: left promiscuous mode [ 108.312474][ T6482] veth0_vlan: entered promiscuous mode [ 109.298196][ T6505] kernel read not supported for file /eth0 (pid: 6505 comm: syz.5.150) [ 110.048687][ T5952] IPVS: starting estimator thread 0... [ 110.153518][ T6517] IPVS: using max 41 ests per chain, 98400 per kthread [ 112.512733][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 112.512771][ T30] audit: type=1400 audit(1744428161.175:515): avc: denied { read } for pid=6561 comm="syz.0.166" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 113.086422][ T30] audit: type=1400 audit(1744428161.235:516): avc: denied { open } for pid=6561 comm="syz.0.166" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 114.513902][ T5865] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 114.675270][ T30] audit: type=1400 audit(1744428163.245:517): avc: denied { shutdown } for pid=6588 comm="syz.3.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 114.824140][ T30] audit: type=1400 audit(1744428163.485:518): avc: denied { mount } for pid=6602 comm="syz.5.177" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 114.950703][ T6610] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 114.962347][ T6610] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 115.185022][ T5865] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 115.217117][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.247355][ T30] audit: type=1400 audit(1744428163.845:519): avc: denied { append } for pid=6606 comm="syz.2.179" name="sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 115.271096][ T5865] usb 5-1: Product: syz [ 115.275671][ T5865] usb 5-1: Manufacturer: syz [ 115.280428][ T5865] usb 5-1: SerialNumber: syz [ 115.291939][ T5865] usb 5-1: config 0 descriptor?? [ 115.297229][ T30] audit: type=1400 audit(1744428163.865:520): avc: denied { create } for pid=6606 comm="syz.2.179" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 115.320678][ T30] audit: type=1400 audit(1744428163.875:521): avc: denied { write } for pid=6606 comm="syz.2.179" name="file0" dev="tmpfs" ino=229 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 115.343938][ T30] audit: type=1400 audit(1744428163.875:522): avc: denied { open } for pid=6606 comm="syz.2.179" path="/39/file0" dev="tmpfs" ino=229 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 115.366904][ T30] audit: type=1400 audit(1744428163.875:523): avc: denied { ioctl } for pid=6606 comm="syz.2.179" path="/39/file0" dev="tmpfs" ino=229 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 115.488194][ T30] audit: type=1400 audit(1744428164.075:524): avc: denied { read } for pid=6606 comm="syz.2.179" name="file0" dev="tmpfs" ino=229 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 115.537357][ T5865] usb 5-1: ignoring: probably an ADSL modem [ 115.833391][ T5872] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 115.933270][ T977] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 115.963265][ T951] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 115.996700][ T5872] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.007871][ T5865] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 116.015666][ T5872] usb 4-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 116.038442][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.079834][ T5872] usb 4-1: config 0 descriptor?? [ 116.095406][ T977] usb 1-1: too many configurations: 23, using maximum allowed: 8 [ 116.105821][ T5872] usb 4-1: bad CDC descriptors [ 116.133416][ T951] usb 6-1: Using ep0 maxpacket: 32 [ 116.139947][ T951] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 116.149589][ T951] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.161192][ T951] usb 6-1: config 0 descriptor?? [ 116.168934][ T951] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 116.195177][ T977] usb 1-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 116.224315][ T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=19 [ 116.240570][ T977] usb 1-1: SerialNumber: syz [ 116.248734][ T5874] usb 5-1: USB disconnect, device number 10 [ 116.258382][ T977] usb 1-1: config 0 descriptor?? [ 116.472130][ T5874] usb 1-1: USB disconnect, device number 13 [ 116.570096][ T951] gspca_nw80x: reg_r err -71 [ 116.578082][ T951] nw80x 6-1:0.0: probe with driver nw80x failed with error -71 [ 116.591223][ T951] usb 6-1: USB disconnect, device number 4 [ 117.748526][ T6643] input: syz0 as /devices/virtual/input/input14 [ 117.870935][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 117.870949][ T30] audit: type=1400 audit(1744428166.535:535): avc: denied { connect } for pid=6645 comm="syz.0.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 118.020496][ T30] audit: type=1400 audit(1744428166.685:536): avc: denied { append } for pid=6651 comm="syz.4.192" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 118.043597][ C0] vkms_vblank_simulate: vblank timer overrun [ 118.336903][ T5874] usb 4-1: USB disconnect, device number 7 [ 119.001227][ T30] audit: type=1400 audit(1744428167.655:537): avc: denied { read write } for pid=6657 comm="syz.0.193" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 119.025592][ C0] vkms_vblank_simulate: vblank timer overrun [ 119.065700][ T30] audit: type=1400 audit(1744428167.655:538): avc: denied { open } for pid=6657 comm="syz.0.193" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 119.090008][ C0] vkms_vblank_simulate: vblank timer overrun [ 119.678005][ T5872] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 119.804375][ T977] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 119.823418][ T5872] usb 4-1: device descriptor read/64, error -71 [ 120.028474][ T977] usb 3-1: Using ep0 maxpacket: 16 [ 120.076184][ T5872] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 120.258952][ T977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.280008][ T977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.320865][ T977] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 120.331340][ T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.342793][ T977] usb 3-1: config 0 descriptor?? [ 120.413243][ T5872] usb 4-1: device descriptor read/64, error -71 [ 120.523692][ T5872] usb usb4-port1: attempt power cycle [ 120.720930][ T6687] pim6reg1: entered promiscuous mode [ 120.733521][ T6687] pim6reg1: entered allmulticast mode [ 120.758150][ T30] audit: type=1400 audit(1744428169.425:539): avc: denied { name_connect } for pid=6676 comm="syz.2.200" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 120.781390][ T977] kye 0003:0458:5016.0008: control desc unexpectedly large [ 120.803055][ T977] kye 0003:0458:5016.0008: control desc unexpectedly large [ 120.823297][ T977] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.0008/input/input15 [ 120.873892][ T5872] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 120.906603][ T5872] usb 4-1: device descriptor read/8, error -71 [ 120.935340][ T977] kye 0003:0458:5016.0008: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.2-1/input0 [ 121.006161][ T977] usb 3-1: USB disconnect, device number 5 [ 121.283402][ T5872] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 121.328028][ T5872] usb 4-1: device descriptor read/8, error -71 [ 121.455346][ T5872] usb usb4-port1: unable to enumerate USB device [ 121.597986][ T30] audit: type=1400 audit(1744428170.195:540): avc: denied { create } for pid=6701 comm="syz.4.207" name="#9" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 121.639473][ T30] audit: type=1400 audit(1744428170.195:541): avc: denied { link } for pid=6701 comm="syz.4.207" name="#9" dev="tmpfs" ino=212 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 121.662628][ T5865] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 121.688380][ T30] audit: type=1400 audit(1744428170.195:542): avc: denied { rename } for pid=6701 comm="syz.4.207" name="#a" dev="tmpfs" ino=212 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 121.739890][ T5872] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 121.903794][ T5865] usb 1-1: Using ep0 maxpacket: 16 [ 121.942295][ T5865] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.952777][ T5872] usb 6-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 121.962152][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.018959][ T5872] usb 6-1: Product: syz [ 122.025218][ T5865] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 122.034942][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.042943][ T5865] usb 1-1: Product: syz [ 122.047207][ T5872] usb 6-1: Manufacturer: syz [ 122.056518][ T5872] usb 6-1: SerialNumber: syz [ 122.063158][ T5872] usb 6-1: config 0 descriptor?? [ 122.068432][ T5865] usb 1-1: Manufacturer: syz [ 122.074023][ T5865] usb 1-1: SerialNumber: syz [ 122.081709][ T5865] usb 1-1: config 0 descriptor?? [ 122.143881][ T6711] netlink: 24 bytes leftover after parsing attributes in process `syz.2.209'. [ 122.295167][ T6699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.316598][ T5872] cx82310_eth 6-1:0.0: probe with driver cx82310_eth failed with error -22 [ 122.320974][ T6699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.429839][ T30] audit: type=1400 audit(1744428171.095:543): avc: denied { setopt } for pid=6720 comm="syz.4.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 122.462390][ T30] audit: type=1400 audit(1744428171.125:544): avc: denied { bind } for pid=6710 comm="syz.2.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 122.712866][ T5872] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 122.730397][ T5872] usb 6-1: USB disconnect, device number 5 [ 123.033321][ T977] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 123.062407][ T5872] usb 1-1: USB disconnect, device number 14 [ 123.161180][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 123.161194][ T30] audit: type=1400 audit(1744428171.825:547): avc: denied { read append } for pid=6737 comm="syz.0.215" name="btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 123.249028][ T977] usb 5-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=16.e3 [ 123.283324][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.309514][ T977] usb 5-1: Product: syz [ 123.329932][ T30] audit: type=1400 audit(1744428171.825:548): avc: denied { open } for pid=6737 comm="syz.0.215" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 123.364936][ T977] usb 5-1: Manufacturer: syz [ 123.371224][ T977] usb 5-1: SerialNumber: syz [ 123.484241][ T977] usb 5-1: config 0 descriptor?? [ 123.512165][ T977] comedi comedi0: Wrong number of endpoints [ 123.684913][ T977] dt9812 5-1:0.0: driver 'dt9812' failed to auto-configure device. [ 123.717108][ T6750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.218'. [ 123.725970][ T6750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.218'. [ 123.780587][ T977] usb 5-1: USB disconnect, device number 11 [ 124.853390][ T30] audit: type=1400 audit(1744428173.445:549): avc: denied { search } for pid=6763 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.915971][ T30] audit: type=1400 audit(1744428173.465:550): avc: denied { read } for pid=6769 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.054676][ T30] audit: type=1400 audit(1744428173.465:551): avc: denied { open } for pid=6769 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.079609][ C0] vkms_vblank_simulate: vblank timer overrun [ 125.085826][ T977] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 125.121023][ T30] audit: type=1400 audit(1744428173.465:552): avc: denied { getattr } for pid=6769 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.146258][ C0] vkms_vblank_simulate: vblank timer overrun [ 125.316819][ T977] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 125.326635][ T977] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.336831][ T30] audit: type=1400 audit(1744428173.465:553): avc: denied { getattr } for pid=6769 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1748 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 125.363011][ C0] vkms_vblank_simulate: vblank timer overrun [ 125.384186][ T977] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 125.480304][ T977] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.493156][ T30] audit: type=1400 audit(1744428173.565:554): avc: denied { read } for pid=6773 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1748 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 125.524109][ T977] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 125.553767][ T977] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 125.561902][ T977] usb 6-1: Product: syz [ 125.566619][ T30] audit: type=1400 audit(1744428173.565:555): avc: denied { open } for pid=6773 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1748 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 125.601941][ T977] usb 6-1: Manufacturer: syz [ 125.632658][ T977] cdc_wdm 6-1:1.0: skipping garbage [ 125.852446][ T30] audit: type=1400 audit(1744428173.965:556): avc: denied { write } for pid=6763 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1707 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.891548][ T977] cdc_wdm 6-1:1.0: skipping garbage [ 125.919743][ T977] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 125.964438][ T977] usb 6-1: USB disconnect, device number 6 [ 126.643579][ T951] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 127.348949][ T951] usb 6-1: Using ep0 maxpacket: 16 [ 127.369252][ T951] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.454175][ T951] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 127.506934][ T951] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 127.568613][ T951] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.609064][ T951] usb 6-1: Product: syz [ 127.622025][ T951] usb 6-1: Manufacturer: syz [ 127.657327][ T951] usb 6-1: SerialNumber: syz [ 127.980123][ T6801] Cannot find del_set index 0 as target [ 128.555112][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 128.555127][ T30] audit: type=1400 audit(1744428177.225:566): avc: denied { write } for pid=6800 comm="syz.5.227" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 128.555167][ T30] audit: type=1400 audit(1744428177.225:567): avc: denied { read } for pid=6800 comm="syz.5.227" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 128.555202][ T30] audit: type=1400 audit(1744428177.225:568): avc: denied { open } for pid=6800 comm="syz.5.227" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 128.560917][ T30] audit: type=1400 audit(1744428177.225:569): avc: denied { ioctl } for pid=6800 comm="syz.5.227" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 128.695302][ T30] audit: type=1400 audit(1744428177.325:570): avc: denied { create } for pid=6800 comm="syz.5.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 128.799920][ T6835] ceph: No mds server is up or the cluster is laggy [ 128.816164][ T977] libceph: connect (1)[c::]:6789 error -101 [ 128.818041][ T977] libceph: mon0 (1)[c::]:6789 connect error [ 129.203735][ T951] usb 6-1: 0:2 : does not exist [ 129.499469][ T6842] netlink: 12 bytes leftover after parsing attributes in process `syz.2.234'. [ 129.544612][ T951] usb 6-1: USB disconnect, device number 7 [ 129.744760][ C0] vkms_vblank_simulate: vblank timer overrun [ 129.974170][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 130.605756][ T6858] netlink: 8 bytes leftover after parsing attributes in process `syz.5.236'. [ 130.605843][ T6858] netlink: 8 bytes leftover after parsing attributes in process `syz.5.236'. [ 130.823623][ T951] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 130.985832][ T6865] netlink: 12 bytes leftover after parsing attributes in process `syz.2.237'. [ 131.027025][ T951] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.027067][ T951] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 131.027090][ T951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 131.027112][ T951] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 131.027145][ T951] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 131.027164][ T951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.029497][ T951] usb 5-1: config 0 descriptor?? [ 131.036230][ T951] em28xx 5-1:0.0: New device @ 480 Mbps (2040:1605, interface 0, class 0) [ 131.036260][ T951] em28xx 5-1:0.0: Video interface 0 found: isoc [ 131.773263][ T951] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 131.852590][ T951] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 131.852669][ T951] em28xx 5-1:0.0: board has no eeprom [ 131.944359][ T951] em28xx 5-1:0.0: Identified as Hauppauge WinTV HVR 930C (card=81) [ 131.944387][ T951] em28xx 5-1:0.0: Currently, V4L2 is not supported on this model [ 131.945366][ T5952] em28xx 5-1:0.0: Binding DVB extension [ 131.945690][ T5952] em28xx 5-1:0.0: no endpoint for DVB mode and transfer type 0 [ 131.945706][ T5952] em28xx 5-1:0.0: failed to pre-allocate USB transfer buffers for DVB. [ 131.946487][ T5952] em28xx 5-1:0.0: Registering input extension [ 131.963448][ T977] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 131.966273][ T951] usb 5-1: USB disconnect, device number 12 [ 131.967335][ T951] em28xx 5-1:0.0: Disconnecting em28xx [ 131.967420][ T951] em28xx 5-1:0.0: Closing input extension [ 132.055831][ T951] em28xx 5-1:0.0: Freeing device [ 132.166237][ T977] usb 6-1: Using ep0 maxpacket: 16 [ 132.167878][ T977] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.167904][ T977] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.167920][ T977] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 132.167954][ T977] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 132.167973][ T977] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.180275][ T977] usb 6-1: config 0 descriptor?? [ 132.183478][ T5902] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 132.424839][ T5952] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 132.447676][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.447699][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.447717][ T5902] usb 3-1: New USB device found, idVendor=1b96, idProduct=000e, bcdDevice= 0.00 [ 132.447728][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.450216][ T5902] usb 3-1: config 0 descriptor?? [ 132.573541][ T5952] usb 4-1: Using ep0 maxpacket: 8 [ 132.577269][ T5952] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db59, bcdDevice=e9.9b [ 132.577292][ T5952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.577309][ T5952] usb 4-1: Product: syz [ 132.577321][ T5952] usb 4-1: Manufacturer: syz [ 132.577334][ T5952] usb 4-1: SerialNumber: syz [ 132.587558][ T5952] usb 4-1: config 0 descriptor?? [ 132.621042][ T5952] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 2' in warm state. [ 132.621405][ T5952] dvb-usb: bulk message failed: -22 (2/0) [ 132.624184][ T5952] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 132.631320][ T977] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0009/input/input17 [ 132.646685][ T5952] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T Dual Digital 2) [ 132.646739][ T5952] usb 4-1: media controller created [ 132.652359][ T977] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 132.683344][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.683417][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.737536][ T5952] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 132.923627][ T5902] ntrig 0003:1B96:000E.000A: unknown main item tag 0x0 [ 132.923659][ T5902] ntrig 0003:1B96:000E.000A: item fetching failed at offset 6/7 [ 132.924033][ T5902] ntrig 0003:1B96:000E.000A: parse failed [ 132.924076][ T5902] ntrig 0003:1B96:000E.000A: probe with driver ntrig failed with error -22 [ 133.122990][ T5872] usb 3-1: USB disconnect, device number 6 [ 133.674809][ T30] audit: type=1400 audit(1744428182.335:571): avc: denied { create } for pid=6898 comm="syz.4.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 133.913673][ T5902] usb 6-1: reset high-speed USB device number 8 using dummy_hcd [ 134.107496][ T977] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 134.233790][ T5952] cxusb: set interface failed [ 134.233809][ T5952] dvb-usb: bulk message failed: -22 (1/0) [ 134.312586][ T5952] DVB: Unable to find symbol mt352_attach() [ 134.312889][ T5952] dvb-usb: bulk message failed: -22 (5/0) [ 134.312928][ T5952] zl10353_read_register: readreg error (reg=127, ret==-121) [ 134.312967][ T5952] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T Dual Digital 2' [ 134.739429][ T6910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.242'. [ 134.739495][ T6910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.242'. [ 135.102819][ T977] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 135.102839][ T977] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 135.102851][ T977] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 135.606208][ T977] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 135.606235][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.606252][ T977] usb 5-1: Product: а [ 135.606265][ T977] usb 5-1: Manufacturer: ë¡¤æ’¥î†Šê¼°ç¼¡âªœè”™æ±œâ±†æœ„î¦ˆâ±ªá¶¢ê¿ [ 135.606278][ T977] usb 5-1: SerialNumber: â³ [ 135.658870][ T5969] usb 6-1: USB disconnect, device number 8 [ 135.833244][ T5952] rc_core: IR keymap rc-dvico-mce not found [ 135.833261][ T5952] Registered IR keymap rc-empty [ 135.834514][ T5952] rc rc0: DViCO FusionHDTV DVB-T Dual Digital 2 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 135.836721][ T5952] input: DViCO FusionHDTV DVB-T Dual Digital 2 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input18 [ 135.881536][ T5952] dvb-usb: schedule remote query interval to 100 msecs. [ 135.881554][ T5952] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 2 successfully initialized and connected. [ 135.896650][ T5952] usb 4-1: USB disconnect, device number 12 [ 136.052414][ T6923] netlink: 'syz.2.245': attribute type 10 has an invalid length. [ 136.056028][ T30] audit: type=1400 audit(1744428184.715:572): avc: denied { ioctl } for pid=6918 comm="syz.2.245" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 136.248745][ T5952] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 2 successfully deinitialized and disconnected. [ 136.285899][ T30] audit: type=1400 audit(1744428184.955:573): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 136.788657][ T6945] netlink: 12 bytes leftover after parsing attributes in process `syz.3.249'. [ 136.995563][ T977] cdc_ncm 5-1:1.0: bind() failure [ 137.006741][ T977] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 137.006763][ T977] cdc_ncm 5-1:1.1: bind() failure [ 137.011087][ T977] usb 5-1: USB disconnect, device number 13 [ 137.339230][ T30] audit: type=1400 audit(1744428186.005:574): avc: denied { listen } for pid=6953 comm="syz.2.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 137.727649][ T6959] tipc: Started in network mode [ 137.732655][ T6959] tipc: Node identity 8266b042271b, cluster identity 4711 [ 137.854951][ T6959] tipc: Enabled bearer , priority 0 [ 138.056351][ T6958] tipc: Disabling bearer [ 139.031204][ T6976] netlink: 8 bytes leftover after parsing attributes in process `syz.5.256'. [ 139.040140][ T6976] netlink: 8 bytes leftover after parsing attributes in process `syz.5.256'. [ 139.508983][ T5872] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 139.543244][ T977] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 139.618157][ T6992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.263'. [ 139.693319][ T977] usb 5-1: device descriptor read/64, error -71 [ 139.972094][ T30] audit: type=1400 audit(1744428188.505:575): avc: denied { mount } for pid=6989 comm="syz.5.262" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 140.218861][ T6999] netlink: 16 bytes leftover after parsing attributes in process `syz.2.264'. [ 140.303940][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 140.720905][ T30] audit: type=1400 audit(1744428188.885:576): avc: denied { mount } for pid=6993 comm="syz.2.264" name="/" dev="configfs" ino=1119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 140.822456][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1455, setting to 64 [ 140.833862][ T5872] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 140.847498][ T5872] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 140.860490][ T30] audit: type=1400 audit(1744428188.885:577): avc: denied { search } for pid=6993 comm="syz.2.264" name="/" dev="configfs" ino=1119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 141.087685][ T977] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 141.102136][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.154111][ T5872] usb 4-1: config 0 descriptor?? [ 141.154716][ T6979] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 141.161039][ T30] audit: type=1400 audit(1744428188.885:578): avc: denied { read } for pid=6993 comm="syz.2.264" name="/" dev="configfs" ino=1119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 141.161078][ T30] audit: type=1400 audit(1744428188.885:579): avc: denied { open } for pid=6993 comm="syz.2.264" path="/" dev="configfs" ino=1119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 141.170126][ T7002] raw_sendmsg: syz.5.265 forgot to set AF_INET. Fix it! [ 141.282507][ T977] usb 5-1: device descriptor read/64, error -71 [ 141.488501][ T977] usb usb5-port1: attempt power cycle [ 142.651336][ T5872] cmedia_hs100b 0003:0D8C:0014.000B: unknown main item tag 0x0 [ 142.669992][ T5872] cmedia_hs100b 0003:0D8C:0014.000B: unknown main item tag 0x0 [ 142.693268][ T5872] cmedia_hs100b 0003:0D8C:0014.000B: unknown main item tag 0x0 [ 142.700881][ T5872] cmedia_hs100b 0003:0D8C:0014.000B: unknown main item tag 0x0 [ 142.733422][ T5872] cmedia_hs100b 0003:0D8C:0014.000B: unknown main item tag 0x0 [ 142.828124][ T5872] cmedia_hs100b 0003:0D8C:0014.000B: unknown main item tag 0x0 [ 142.843291][ T977] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 142.849780][ T5872] cmedia_hs100b 0003:0D8C:0014.000B: unknown main item tag 0x0 [ 142.870739][ T5872] cmedia_hs100b 0003:0D8C:0014.000B: hidraw0: USB HID v1.fb Device [HID 0d8c:0014] on usb-dummy_hcd.3-1/input0 [ 142.953605][ T30] audit: type=1400 audit(1744428191.605:580): avc: denied { bind } for pid=7018 comm="syz.5.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 143.010959][ T7022] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 143.133533][ T5872] usb 4-1: USB disconnect, device number 13 [ 143.150625][ T30] audit: type=1400 audit(1744428191.615:581): avc: denied { name_bind } for pid=7018 comm="syz.5.270" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 143.180348][ T977] usb 5-1: Using ep0 maxpacket: 16 [ 143.196764][ T977] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.221036][ T30] audit: type=1400 audit(1744428191.615:582): avc: denied { node_bind } for pid=7018 comm="syz.5.270" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 143.253302][ T977] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.266938][ T977] usb 5-1: config 0 interface 0 has no altsetting 0 [ 143.273656][ T977] usb 5-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 143.292859][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.097792][ T977] usb 5-1: config 0 descriptor?? [ 144.507840][ T7016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.524023][ T7016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.570216][ T977] apple 0003:05AC:0247.000C: unexpected long global item [ 144.592184][ T30] audit: type=1400 audit(1744428193.255:583): avc: denied { read } for pid=7041 comm="syz.0.275" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 144.602185][ T977] apple 0003:05AC:0247.000C: parse failed [ 144.635222][ T977] apple 0003:05AC:0247.000C: probe with driver apple failed with error -22 [ 144.706131][ T30] audit: type=1400 audit(1744428193.255:584): avc: denied { open } for pid=7041 comm="syz.0.275" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 144.801715][ T977] usb 5-1: USB disconnect, device number 16 [ 145.123767][ T7042] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 145.141128][ T7042] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 145.162402][ T7042] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 145.177474][ T7042] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 145.187413][ T7042] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 145.199543][ T7042] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 145.212231][ T7042] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 145.218642][ T7042] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 145.229152][ T7042] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 145.229561][ T30] audit: type=1400 audit(1744428193.905:585): avc: denied { kexec_image_load } for pid=7053 comm="syz.2.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 145.458161][ T7057] ======================================================= [ 145.458161][ T7057] WARNING: The mand mount option has been deprecated and [ 145.458161][ T7057] and is ignored by this kernel. Remove the mand [ 145.458161][ T7057] option from the mount to silence this warning. [ 145.458161][ T7057] ======================================================= [ 145.494690][ T7057] overlayfs: missing 'lowerdir' [ 145.785461][ T30] audit: type=1400 audit(1744428194.115:586): avc: denied { create } for pid=7053 comm="syz.2.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 145.804798][ C0] vkms_vblank_simulate: vblank timer overrun [ 145.837672][ T7042] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 145.851979][ T7042] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 145.864524][ T30] audit: type=1400 audit(1744428194.205:587): avc: denied { setopt } for pid=7053 comm="syz.2.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 145.885220][ T7042] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 145.936348][ T7042] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 145.964400][ T7042] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 145.990848][ T7060] sp0: Synchronizing with TNC [ 146.015192][ T7042] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 146.124389][ T7060] netlink: 12 bytes leftover after parsing attributes in process `syz.4.280'. [ 146.215724][ T7062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.281'. [ 146.236016][ T7060] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 146.591390][ T7070] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7070 comm=syz.4.284 [ 146.608254][ T30] audit: type=1400 audit(1744428195.255:588): avc: denied { module_request } for pid=7066 comm="syz.0.283" kmod="snd-timer-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 146.753274][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout [ 147.366339][ T5828] Bluetooth: hci3: command 0x0c1a tx timeout [ 147.386867][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout [ 147.733974][ T30] audit: type=1400 audit(1744428196.405:589): avc: denied { bind } for pid=7089 comm="syz.4.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 147.789867][ T30] audit: type=1400 audit(1744428196.425:590): avc: denied { name_bind } for pid=7089 comm="syz.4.290" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 147.873283][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout [ 147.970873][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 147.971782][ T7097] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20000 [ 148.134591][ T30] audit: type=1400 audit(1744428196.425:591): avc: denied { node_bind } for pid=7089 comm="syz.4.290" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 148.155284][ T30] audit: type=1400 audit(1744428196.635:592): avc: denied { bind } for pid=7092 comm="syz.0.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 148.398348][ T7100] sp0: Synchronizing with TNC [ 148.833804][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 149.031116][ T30] audit: type=1400 audit(1744428197.695:593): avc: denied { connect } for pid=7111 comm="syz.3.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 149.056115][ T30] audit: type=1400 audit(1744428197.725:594): avc: denied { read } for pid=7111 comm="syz.3.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 149.061553][ T7098] [U] è [ 149.223492][ T5952] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 149.373937][ T7120] FAULT_INJECTION: forcing a failure. [ 149.373937][ T7120] name failslab, interval 1, probability 0, space 0, times 1 [ 149.386598][ T7120] CPU: 0 UID: 0 PID: 7120 Comm: syz.5.298 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 149.386613][ T7120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 149.386620][ T7120] Call Trace: [ 149.386625][ T7120] [ 149.386628][ T7120] dump_stack_lvl+0x16c/0x1f0 [ 149.386648][ T7120] should_fail_ex+0x512/0x640 [ 149.386660][ T7120] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 149.386677][ T7120] should_failslab+0xc2/0x120 [ 149.386689][ T7120] __kmalloc_cache_noprof+0x6a/0x3e0 [ 149.386705][ T7120] ? __pfx_ksys_write+0x10/0x10 [ 149.386713][ T7120] ? __do_sys_timerfd_create+0x2d2/0x3e0 [ 149.386727][ T7120] __do_sys_timerfd_create+0x2d2/0x3e0 [ 149.386738][ T7120] ? do_syscall_64+0x91/0x260 [ 149.386752][ T7120] do_syscall_64+0xcd/0x260 [ 149.386767][ T7120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.386778][ T7120] RIP: 0033:0x7fe3b838d169 [ 149.386786][ T7120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.386797][ T7120] RSP: 002b:00007fe3b913a038 EFLAGS: 00000246 ORIG_RAX: 000000000000011b [ 149.386806][ T7120] RAX: ffffffffffffffda RBX: 00007fe3b85a5fa0 RCX: 00007fe3b838d169 [ 149.386813][ T7120] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 149.386818][ T7120] RBP: 00007fe3b913a090 R08: 0000000000000000 R09: 0000000000000000 [ 149.386824][ T7120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.386830][ T7120] R13: 0000000000000000 R14: 00007fe3b85a5fa0 R15: 00007ffe08cc9fc8 [ 149.386842][ T7120] [ 149.391891][ T7120] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 149.558523][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 149.558559][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 149.614873][ T5952] usb 3-1: unable to get BOS descriptor or descriptor too short [ 149.633603][ T5952] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 149.651615][ T5952] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 149.662112][ T5952] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 149.671990][ T5952] usb 3-1: language id specifier not provided by device, defaulting to English [ 149.698928][ T5952] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 149.710065][ T5952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.793309][ T5836] Bluetooth: hci5: command 0x1003 tx timeout [ 149.793469][ T5828] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 150.014685][ T5828] Bluetooth: hci4: command 0x0c1a tx timeout [ 150.031824][ T7124] netlink: 144 bytes leftover after parsing attributes in process `syz.4.300'. [ 150.043390][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout [ 150.073287][ T977] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 150.226215][ T977] usb 6-1: Using ep0 maxpacket: 8 [ 150.263626][ T977] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 150.272971][ T977] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.299826][ T977] usb 6-1: config 0 descriptor?? [ 150.339661][ T5952] usb 3-1: 0:2 : does not exist [ 150.516956][ T977] asix 6-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 150.983268][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout [ 151.055591][ T5874] usb 3-1: USB disconnect, device number 7 [ 151.296543][ T30] audit: type=1400 audit(1744428199.965:595): avc: denied { ioctl } for pid=7134 comm="syz.0.303" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 151.398493][ T7142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.305'. [ 151.588943][ T7140] input: syz1 as /devices/virtual/input/input19 [ 151.634675][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 151.640733][ T5828] Bluetooth: hci3: command 0x0c1a tx timeout [ 151.951381][ T30] audit: type=1400 audit(1744428200.615:596): avc: denied { create } for pid=7151 comm="syz.0.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 151.976056][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 152.021722][ T30] audit: type=1400 audit(1744428200.635:597): avc: denied { bind } for pid=7151 comm="syz.0.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 152.042194][ T5828] Bluetooth: hci4: command 0x0c1a tx timeout [ 152.052266][ T977] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 152.073093][ T977] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 152.093063][ T977] asix 6-1:0.0: probe with driver asix failed with error -71 [ 152.154124][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout [ 152.160229][ T977] usb 6-1: USB disconnect, device number 9 [ 152.345560][ T7157] FAULT_INJECTION: forcing a failure. [ 152.345560][ T7157] name failslab, interval 1, probability 0, space 0, times 0 [ 152.346723][ T7158] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 152.366318][ T7157] CPU: 1 UID: 0 PID: 7157 Comm: syz.4.309 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 152.366342][ T7157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 152.366351][ T7157] Call Trace: [ 152.366356][ T7157] [ 152.366362][ T7157] dump_stack_lvl+0x16c/0x1f0 [ 152.366387][ T7157] should_fail_ex+0x512/0x640 [ 152.366402][ T7157] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 152.366421][ T7157] should_failslab+0xc2/0x120 [ 152.366439][ T7157] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 152.366454][ T7157] ? __pfx___schedule+0x10/0x10 [ 152.366471][ T7157] ? __d_alloc+0x31/0xaa0 [ 152.366496][ T7157] __d_alloc+0x31/0xaa0 [ 152.366511][ T7157] ? irqentry_exit+0x3b/0x90 [ 152.366532][ T7157] d_alloc_pseudo+0x1c/0xc0 [ 152.366552][ T7157] alloc_file_pseudo+0xcf/0x230 [ 152.366572][ T7157] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 152.366591][ T7157] ? preempt_schedule_thunk+0x16/0x30 [ 152.366611][ T7157] __anon_inode_getfile+0xf7/0x370 [ 152.366631][ T7157] anon_inode_getfile_fmode+0x37/0xa0 [ 152.366647][ T7157] __do_sys_timerfd_create+0x216/0x3e0 [ 152.366663][ T7157] ? do_syscall_64+0x91/0x260 [ 152.366683][ T7157] do_syscall_64+0xcd/0x260 [ 152.366704][ T7157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.366719][ T7157] RIP: 0033:0x7f64ac18d169 [ 152.366731][ T7157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.366746][ T7157] RSP: 002b:00007f64acf05038 EFLAGS: 00000246 ORIG_RAX: 000000000000011b [ 152.366761][ T7157] RAX: ffffffffffffffda RBX: 00007f64ac3a6080 RCX: 00007f64ac18d169 [ 152.366771][ T7157] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 152.366779][ T7157] RBP: 00007f64acf05090 R08: 0000000000000000 R09: 0000000000000000 [ 152.366788][ T7157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.366797][ T7157] R13: 0000000000000001 R14: 00007f64ac3a6080 R15: 00007fff449cb2a8 [ 152.366816][ T7157] [ 152.570588][ C1] vkms_vblank_simulate: vblank timer overrun [ 153.039898][ T30] audit: type=1400 audit(1744428201.705:598): avc: denied { read } for pid=7159 comm="syz.4.310" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 153.178311][ T30] audit: type=1400 audit(1744428201.835:599): avc: denied { name_bind } for pid=7159 comm="syz.4.310" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 153.206643][ T30] audit: type=1400 audit(1744428201.865:600): avc: denied { mount } for pid=7159 comm="syz.4.310" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 153.246567][ T30] audit: type=1400 audit(1744428201.895:601): avc: denied { remount } for pid=7159 comm="syz.4.310" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 153.289629][ T30] audit: type=1400 audit(1744428201.955:602): avc: denied { setopt } for pid=7159 comm="syz.4.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 153.503711][ T7163] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 154.045566][ T7170] xt_hashlimit: size too large, truncated to 1048576 [ 154.052434][ T7171] xt_hashlimit: size too large, truncated to 1048576 [ 154.368881][ T30] audit: type=1400 audit(1744428203.025:603): avc: denied { create } for pid=7179 comm="syz.0.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 154.878872][ T30] audit: type=1400 audit(1744428203.545:604): avc: denied { append } for pid=7183 comm="syz.4.316" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 155.648957][ T7199] input: syz0 as /devices/virtual/input/input20 [ 157.343028][ T7220] FAULT_INJECTION: forcing a failure. [ 157.343028][ T7220] name failslab, interval 1, probability 0, space 0, times 0 [ 157.355868][ T7220] CPU: 0 UID: 0 PID: 7220 Comm: syz.3.326 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 157.355891][ T7220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 157.355901][ T7220] Call Trace: [ 157.355907][ T7220] [ 157.355913][ T7220] dump_stack_lvl+0x16c/0x1f0 [ 157.355938][ T7220] should_fail_ex+0x512/0x640 [ 157.355953][ T7220] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 157.355971][ T7220] should_failslab+0xc2/0x120 [ 157.355989][ T7220] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 157.356006][ T7220] ? security_file_alloc+0x34/0x2b0 [ 157.356032][ T7220] security_file_alloc+0x34/0x2b0 [ 157.356037][ T7221] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 157.356055][ T7220] init_file+0x93/0x4c0 [ 157.356073][ T7220] alloc_empty_file+0x73/0x1e0 [ 157.356091][ T7220] alloc_file_pseudo+0x13a/0x230 [ 157.356109][ T7220] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 157.356127][ T7220] ? preempt_schedule_thunk+0x16/0x30 [ 157.356147][ T7220] __anon_inode_getfile+0xf7/0x370 [ 157.356171][ T7220] anon_inode_getfile_fmode+0x37/0xa0 [ 157.356187][ T7220] __do_sys_timerfd_create+0x216/0x3e0 [ 157.356202][ T7220] ? do_syscall_64+0x91/0x260 [ 157.356222][ T7220] do_syscall_64+0xcd/0x260 [ 157.356242][ T7220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.356256][ T7220] RIP: 0033:0x7f4348b8d169 [ 157.356268][ T7220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.356282][ T7220] RSP: 002b:00007f434993b038 EFLAGS: 00000246 ORIG_RAX: 000000000000011b [ 157.356296][ T7220] RAX: ffffffffffffffda RBX: 00007f4348da6080 RCX: 00007f4348b8d169 [ 157.356306][ T7220] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 157.356314][ T7220] RBP: 00007f434993b090 R08: 0000000000000000 R09: 0000000000000000 [ 157.356322][ T7220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.356331][ T7220] R13: 0000000000000001 R14: 00007f4348da6080 R15: 00007ffff5a240c8 [ 157.356350][ T7220] [ 157.782346][ T7218] vivid-000: disconnect [ 157.955307][ T7214] vivid-000: reconnect [ 158.007041][ T7231] capability: warning: `syz.0.327' uses 32-bit capabilities (legacy support in use) [ 158.322196][ T30] audit: type=1400 audit(1744428206.975:605): avc: denied { create } for pid=7233 comm="syz.4.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 158.452323][ T30] audit: type=1400 audit(1744428207.105:606): avc: denied { ioctl } for pid=7233 comm="syz.4.331" path="socket:[14363]" dev="sockfs" ino=14363 ioctlcmd=0x942a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 158.929056][ T30] audit: type=1400 audit(1744428207.115:607): avc: denied { open } for pid=7233 comm="syz.4.331" path="/dev/ttyqd" dev="devtmpfs" ino=388 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 158.963027][ T30] audit: type=1326 audit(1744428207.205:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7235 comm="syz.0.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7618d169 code=0x7ffc0000 [ 159.011401][ T30] audit: type=1326 audit(1744428207.205:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7235 comm="syz.0.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7618d169 code=0x7ffc0000 [ 159.043372][ T30] audit: type=1326 audit(1744428207.205:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7235 comm="syz.0.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7fdd7618d169 code=0x7ffc0000 [ 159.070304][ T5874] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 159.083426][ T30] audit: type=1326 audit(1744428207.205:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7235 comm="syz.0.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7618d169 code=0x7ffc0000 [ 159.108852][ T30] audit: type=1326 audit(1744428207.205:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7235 comm="syz.0.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7618d169 code=0x7ffc0000 [ 159.171588][ T30] audit: type=1326 audit(1744428207.205:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7235 comm="syz.0.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7fdd7618d169 code=0x7ffc0000 [ 159.198761][ T30] audit: type=1326 audit(1744428207.205:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7235 comm="syz.0.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7618d169 code=0x7ffc0000 [ 159.243349][ T5874] usb 5-1: Invalid ep0 maxpacket: 64 [ 159.313240][ T951] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 159.346850][ T7249] netlink: 36 bytes leftover after parsing attributes in process `syz.3.334'. [ 159.393401][ T5874] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 159.563690][ T5874] usb 5-1: Invalid ep0 maxpacket: 64 [ 159.590785][ T5874] usb usb5-port1: attempt power cycle [ 160.276243][ T5874] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 160.513985][ T5874] usb 5-1: Invalid ep0 maxpacket: 64 [ 160.609384][ T951] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.658053][ T5874] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 160.707028][ T5874] usb 5-1: Invalid ep0 maxpacket: 64 [ 160.714904][ T5874] usb usb5-port1: unable to enumerate USB device [ 160.723300][ T951] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 160.776856][ T951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.820201][ T951] usb 1-1: config 0 descriptor?? [ 160.841954][ T951] pwc: Askey VC010 type 2 USB webcam detected. [ 160.890295][ T7267] veth0_vlan: entered allmulticast mode [ 161.135416][ T7277] nlmon0: Master is either lo or non-ether device [ 161.243515][ T951] pwc: recv_control_msg error -32 req 02 val 2b00 [ 161.624657][ T7279] netlink: 12 bytes leftover after parsing attributes in process `syz.3.342'. [ 162.209256][ T7295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.218663][ T7295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.337209][ T951] pwc: recv_control_msg error -71 req 02 val 2700 [ 162.345548][ T951] pwc: recv_control_msg error -71 req 02 val 2c00 [ 162.352459][ T951] pwc: recv_control_msg error -71 req 04 val 1000 [ 162.360648][ T951] pwc: recv_control_msg error -71 req 04 val 1300 [ 162.376458][ T951] pwc: recv_control_msg error -71 req 04 val 1400 [ 162.392342][ T951] pwc: recv_control_msg error -71 req 02 val 2000 [ 162.406545][ T951] pwc: recv_control_msg error -71 req 02 val 2100 [ 162.422140][ T951] pwc: recv_control_msg error -71 req 04 val 1500 [ 162.429743][ T951] pwc: recv_control_msg error -71 req 02 val 2500 [ 162.658287][ T5865] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 162.678046][ T951] pwc: recv_control_msg error -71 req 02 val 2400 [ 162.689866][ T7300] overlayfs: failed to resolve './file1': -2 [ 162.696498][ T951] pwc: recv_control_msg error -71 req 02 val 2600 [ 162.703468][ T951] pwc: recv_control_msg error -71 req 02 val 2900 [ 162.711458][ T951] pwc: recv_control_msg error -71 req 02 val 2800 [ 162.719729][ T7300] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7300 comm=syz.0.347 [ 162.743062][ T951] pwc: recv_control_msg error -71 req 04 val 1100 [ 162.754947][ T951] pwc: recv_control_msg error -71 req 04 val 1200 [ 162.785491][ T951] pwc: Registered as video103. [ 162.802078][ T951] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input21 [ 162.833473][ T5865] usb 5-1: Using ep0 maxpacket: 8 [ 162.855567][ T951] usb 1-1: USB disconnect, device number 15 [ 162.869925][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 162.922792][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 162.961455][ T5865] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 162.979401][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.992756][ T5865] usb 5-1: config 0 descriptor?? [ 163.408317][ T5865] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 163.481810][ T5865] usb 5-1: USB disconnect, device number 21 [ 163.612706][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 163.612720][ T30] audit: type=1400 audit(1744428212.275:648): avc: denied { write } for pid=7320 comm="syz.2.354" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 163.703355][ T5969] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 164.394416][ T5969] usb 1-1: Using ep0 maxpacket: 32 [ 164.400049][ T5969] usb 1-1: no configurations [ 164.409837][ T5969] usb 1-1: can't read configurations, error -22 [ 164.543291][ T5969] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 164.750475][ T30] audit: type=1326 audit(1744428213.375:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7331 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ac18d169 code=0x7ffc0000 [ 165.033343][ T5865] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 165.041141][ T30] audit: type=1326 audit(1744428213.375:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7331 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ac18d169 code=0x7ffc0000 [ 165.068389][ T30] audit: type=1326 audit(1744428213.385:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7331 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f64ac18d169 code=0x7ffc0000 [ 165.093036][ T30] audit: type=1326 audit(1744428213.385:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7331 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ac18d169 code=0x7ffc0000 [ 165.116968][ T30] audit: type=1326 audit(1744428213.385:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7331 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ac18d169 code=0x7ffc0000 [ 165.142193][ T30] audit: type=1326 audit(1744428213.385:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7331 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f64ac18d169 code=0x7ffc0000 [ 165.168618][ T5969] usb 1-1: Using ep0 maxpacket: 32 [ 165.183788][ T5969] usb 1-1: no configurations [ 165.190302][ T30] audit: type=1326 audit(1744428213.385:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7331 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ac18d169 code=0x7ffc0000 [ 165.221374][ T5969] usb 1-1: can't read configurations, error -22 [ 165.233313][ T5969] usb usb1-port1: attempt power cycle [ 165.251213][ T30] audit: type=1326 audit(1744428213.385:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7331 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ac18d169 code=0x7ffc0000 [ 165.278924][ T30] audit: type=1326 audit(1744428213.385:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7331 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f64ac18bad0 code=0x7ffc0000 [ 165.325622][ T5865] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.499684][ T5865] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 165.517867][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.529587][ T5865] usb 5-1: config 0 descriptor?? [ 165.541648][ T5865] pwc: Askey VC010 type 2 USB webcam detected. [ 165.583440][ T5969] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 165.604308][ T5969] usb 1-1: Using ep0 maxpacket: 32 [ 165.611797][ T5969] usb 1-1: no configurations [ 165.621563][ T5969] usb 1-1: can't read configurations, error -22 [ 165.633961][ T7346] futex_wake_op: syz.5.360 tries to shift op by 144; fix this program [ 165.763296][ T5969] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 165.783910][ T5969] usb 1-1: Using ep0 maxpacket: 32 [ 165.798227][ T5969] usb 1-1: no configurations [ 165.802912][ T5969] usb 1-1: can't read configurations, error -22 [ 165.811413][ T5969] usb usb1-port1: unable to enumerate USB device [ 165.944111][ T5865] pwc: recv_control_msg error -32 req 02 val 2b00 [ 165.987751][ T7351] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=55 sclass=netlink_tcpdiag_socket pid=7351 comm=syz.2.363 [ 166.758668][ T951] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 167.541618][ T7369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.367'. [ 167.550532][ T7369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.367'. [ 167.645209][ T5865] pwc: recv_control_msg error -71 req 02 val 2700 [ 167.760295][ T5865] pwc: recv_control_msg error -71 req 02 val 2c00 [ 167.845529][ T951] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 167.941792][ T5865] pwc: recv_control_msg error -71 req 04 val 1000 [ 168.010848][ T951] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.037681][ T5865] pwc: recv_control_msg error -71 req 04 val 1300 [ 168.055618][ T5865] pwc: recv_control_msg error -71 req 04 val 1400 [ 168.065968][ T951] usb 6-1: Product: syz [ 168.070878][ T951] usb 6-1: Manufacturer: syz [ 168.082415][ T5865] pwc: recv_control_msg error -71 req 02 val 2000 [ 168.089177][ T951] usb 6-1: SerialNumber: syz [ 168.098489][ T5865] pwc: recv_control_msg error -71 req 02 val 2100 [ 168.124162][ T5865] pwc: recv_control_msg error -71 req 04 val 1500 [ 168.143078][ T5865] pwc: recv_control_msg error -71 req 02 val 2500 [ 168.162410][ T951] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 168.179572][ T5865] pwc: recv_control_msg error -71 req 02 val 2400 [ 168.187595][ T7374] input: syz1 as /devices/virtual/input/input22 [ 168.212569][ T5865] pwc: recv_control_msg error -71 req 02 val 2600 [ 168.230039][ T5865] pwc: recv_control_msg error -71 req 02 val 2900 [ 168.258701][ T5865] pwc: recv_control_msg error -71 req 02 val 2800 [ 168.279442][ T5952] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 168.288857][ T5865] pwc: recv_control_msg error -71 req 04 val 1100 [ 168.305163][ T5865] pwc: recv_control_msg error -71 req 04 val 1200 [ 168.315380][ T5865] pwc: Registered as video103. [ 168.327349][ T7374] sctp: failed to load transform for md5: -4 [ 168.336219][ T5865] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input23 [ 168.361694][ T7379] syzkaller0: entered promiscuous mode [ 168.367713][ T977] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 168.386468][ T7379] syzkaller0: entered allmulticast mode [ 168.392484][ T5865] usb 5-1: USB disconnect, device number 22 [ 168.533842][ T977] usb 3-1: Using ep0 maxpacket: 8 [ 168.559173][ T977] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 168.588472][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.604237][ T951] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 168.609473][ T977] usb 3-1: Product: syz [ 168.618155][ T977] usb 3-1: Manufacturer: syz [ 168.647027][ T977] usb 3-1: SerialNumber: syz [ 168.668441][ T977] usb 3-1: config 0 descriptor?? [ 168.707645][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 168.707662][ T30] audit: type=1400 audit(1744428217.375:697): avc: denied { audit_read } for pid=7394 comm="syz.4.375" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 168.763311][ T951] usb 1-1: Using ep0 maxpacket: 16 [ 168.784174][ T951] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 168.793594][ T951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.807505][ T951] usb 1-1: Product: syz [ 168.811741][ T951] usb 1-1: Manufacturer: syz [ 168.825869][ T951] usb 1-1: SerialNumber: syz [ 168.839896][ T951] usb 1-1: config 0 descriptor?? [ 168.849752][ T951] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 168.861287][ T951] usb 1-1: Detected FT232H [ 168.973827][ T977] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 169.053498][ T951] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 169.314682][ T5952] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 169.325761][ T5952] ath9k_htc: Failed to initialize the device [ 169.398861][ T5952] usb 6-1: ath9k_htc: USB layer deinitialized [ 169.495814][ T951] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 169.673771][ T951] usb 6-1: USB disconnect, device number 10 [ 169.699368][ T7388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.716081][ T977] gspca_sunplus: reg_w_riv err -71 [ 169.721263][ T977] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 169.723938][ T7388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.741739][ T977] usb 3-1: USB disconnect, device number 8 [ 169.762685][ T5865] usb 1-1: USB disconnect, device number 20 [ 169.784951][ T5865] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 169.795540][ T5865] ftdi_sio 1-1:0.0: device disconnected [ 170.452258][ T30] audit: type=1400 audit(1744428219.115:698): avc: denied { watch_mount watch_reads } for pid=7411 comm="syz.2.382" path="/79" dev="tmpfs" ino=436 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 170.762786][ T30] audit: type=1400 audit(1744428219.425:699): avc: denied { read } for pid=7410 comm="syz.3.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 171.111628][ T7422] syz.2.384 uses obsolete (PF_INET,SOCK_PACKET) [ 171.162522][ T7423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.197553][ T7423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.434052][ T7433] ALSA: mixer_oss: invalid OSS volume '' [ 171.436595][ T5902] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 171.501401][ T951] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 171.513202][ T977] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 171.624051][ T5902] usb 1-1: Using ep0 maxpacket: 8 [ 171.631301][ T5902] usb 1-1: config 0 has an invalid interface number: 76 but max is 0 [ 171.640112][ T5902] usb 1-1: config 0 has no interface number 0 [ 171.650484][ T977] usb 5-1: device descriptor read/64, error -71 [ 171.660845][ T5902] usb 1-1: config 0 interface 76 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 16 [ 171.674487][ T5902] usb 1-1: config 0 interface 76 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 171.687960][ T5902] usb 1-1: config 0 interface 76 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 171.701886][ T5902] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0006, bcdDevice=dd.fa [ 171.717303][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.723222][ T951] usb 6-1: Using ep0 maxpacket: 32 [ 171.726855][ T5902] usb 1-1: Product: syz [ 171.732763][ T951] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 171.738044][ T5902] usb 1-1: Manufacturer: syz [ 171.742690][ T951] usb 6-1: config 0 has no interface number 0 [ 171.748125][ T5902] usb 1-1: SerialNumber: syz [ 171.755104][ T951] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 171.767145][ T951] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.775365][ T951] usb 6-1: Product: syz [ 171.779520][ T951] usb 6-1: Manufacturer: syz [ 171.786314][ T951] usb 6-1: SerialNumber: syz [ 171.966534][ T951] usb 6-1: config 0 descriptor?? [ 172.052648][ T977] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 172.058379][ T951] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 172.101467][ T5902] usb 1-1: config 0 descriptor?? [ 172.235108][ T7419] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 172.244425][ T5902] ati_remote 1-1:0.76: ati_remote_probe: Unexpected endpoint_in [ 172.314073][ T951] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 172.326761][ T951] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 172.383250][ T977] usb 5-1: device descriptor read/64, error -71 [ 172.473267][ T951] usb 1-1: USB disconnect, device number 21 [ 172.513413][ T977] usb usb5-port1: attempt power cycle [ 172.536005][ T7426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.549734][ T7426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.654353][ T7441] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 172.661002][ T7441] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 172.677867][ T7441] vhci_hcd vhci_hcd.0: Device attached [ 172.745509][ T7446] vhci_hcd: connection closed [ 172.746185][ T2898] vhci_hcd: stop threads [ 172.755575][ T2898] vhci_hcd: release socket [ 172.760268][ T2898] vhci_hcd: disconnect device [ 173.110516][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 173.169255][ T5865] IPVS: starting estimator thread 0... [ 173.174925][ T5952] usb 6-1: USB disconnect, device number 11 [ 173.182524][ T5952] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 173.196772][ T5952] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 173.203472][ T977] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 173.209218][ T5952] quatech2 6-1:0.51: device disconnected [ 173.233784][ T977] usb 5-1: device descriptor read/8, error -71 [ 173.273238][ T7451] IPVS: using max 44 ests per chain, 105600 per kthread [ 173.372867][ T7453] netlink: 40 bytes leftover after parsing attributes in process `syz.0.392'. [ 173.473524][ T977] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 173.603500][ T977] usb 5-1: device descriptor read/8, error -71 [ 173.747447][ T977] usb usb5-port1: unable to enumerate USB device [ 173.750082][ T7460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.395'. [ 174.988524][ T7476] netlink: 60 bytes leftover after parsing attributes in process `syz.3.398'. [ 175.031747][ T30] audit: type=1400 audit(1744428223.695:700): avc: denied { map } for pid=7477 comm="syz.5.399" path="/dev/sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 175.640215][ T7485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.400'. [ 175.649079][ T7485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.400'. [ 176.091043][ T7496] netlink: 36 bytes leftover after parsing attributes in process `syz.4.405'. [ 176.117482][ T7500] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 176.120247][ T7496] netlink: 32 bytes leftover after parsing attributes in process `syz.4.405'. [ 176.147769][ T951] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 176.294211][ T7504] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 176.431948][ T951] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 176.448323][ T951] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.448721][ T7511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.411'. [ 176.458320][ T951] usb 6-1: Product: syz [ 176.694224][ T5865] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 176.775437][ T7514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.410'. [ 176.784397][ T7514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.410'. [ 176.987764][ T951] usb 6-1: Manufacturer: syz [ 176.995181][ T951] usb 6-1: SerialNumber: syz [ 177.016358][ T951] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 177.031372][ T5823] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 177.063974][ T5865] usb 5-1: Using ep0 maxpacket: 32 [ 177.079877][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.093532][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.121602][ T5865] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 177.121643][ T5865] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 177.121663][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.344014][ T5865] usb 5-1: config 0 descriptor?? [ 177.488804][ T5902] usb 6-1: USB disconnect, device number 12 [ 177.957225][ T5865] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.000D/input/input24 [ 178.027388][ T5865] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.000D/input/input25 [ 178.045671][ T5865] kye 0003:0458:5011.000D: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 178.151302][ T5823] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 178.151466][ T5823] ath9k_htc: Failed to initialize the device [ 178.153086][ T5902] usb 6-1: ath9k_htc: USB layer deinitialized [ 178.160649][ T30] audit: type=1400 audit(1744428226.755:701): avc: denied { read write } for pid=7530 comm="syz.2.416" dev="sockfs" ino=15279 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 178.259674][ T30] audit: type=1400 audit(1744428226.925:702): avc: denied { shutdown } for pid=7501 comm="syz.4.408" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 178.296208][ T30] audit: type=1400 audit(1744428226.955:703): avc: denied { connect } for pid=7521 comm="syz.3.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 178.296255][ T30] audit: type=1400 audit(1744428226.955:704): avc: denied { name_connect } for pid=7521 comm="syz.3.413" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 178.297941][ T30] audit: type=1400 audit(1744428226.965:705): avc: denied { write } for pid=7521 comm="syz.3.413" lport=57136 faddr=127.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 178.298490][ T7528] bridge0: port 3(veth0_to_bridge) entered blocking state [ 178.298564][ T7528] bridge0: port 3(veth0_to_bridge) entered disabled state [ 178.298688][ T7528] veth0_to_bridge: entered allmulticast mode [ 178.299963][ T7528] veth0_to_bridge: entered promiscuous mode [ 178.300081][ T7528] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 178.302480][ T7528] bridge0: port 3(veth0_to_bridge) entered blocking state [ 178.302580][ T7528] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 178.553393][ T30] audit: type=1326 audit(1744428227.185:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7535 comm="syz.5.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b838d169 code=0x7ffc0000 [ 178.553596][ T30] audit: type=1326 audit(1744428227.185:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7535 comm="syz.5.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b838d169 code=0x7ffc0000 [ 178.553726][ T30] audit: type=1326 audit(1744428227.185:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7535 comm="syz.5.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7fe3b838d169 code=0x7ffc0000 [ 178.553878][ T30] audit: type=1326 audit(1744428227.195:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7535 comm="syz.5.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b838d169 code=0x7ffc0000 [ 178.754591][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 178.754897][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 178.755052][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 178.755204][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 178.755354][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 178.755505][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 178.755656][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 178.755805][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 178.755965][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 178.756114][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 179.520594][ T951] usb 5-1: USB disconnect, device number 27 [ 179.566058][ T5823] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 179.879445][ T5823] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.879492][ T5823] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 179.879513][ T5823] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.894554][ T5823] usb 6-1: config 0 descriptor?? [ 179.897623][ T5823] pwc: Askey VC010 type 2 USB webcam detected. [ 180.323278][ T5823] pwc: recv_control_msg error -32 req 02 val 2b00 [ 183.763221][ C0] net_ratelimit: 24216 callbacks suppressed [ 183.763233][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 183.763443][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 183.763639][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 183.763825][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 183.764032][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 183.764224][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 183.764403][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 183.764611][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 183.764812][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 183.764991][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 185.393499][ T5823] pwc: recv_control_msg error -110 req 02 val 2700 [ 186.589337][ T162] sched: DL replenish lagged too much [ 186.863553][ T5823] pwc: recv_control_msg error -32 req 02 val 2c00 [ 186.875666][ T5823] pwc: recv_control_msg error -32 req 04 val 1000 [ 186.876215][ T5823] pwc: recv_control_msg error -32 req 04 val 1300 [ 186.876877][ T5823] pwc: recv_control_msg error -32 req 04 val 1400 [ 186.877610][ T5823] pwc: recv_control_msg error -32 req 02 val 2000 [ 186.877962][ T5823] pwc: recv_control_msg error -32 req 02 val 2100 [ 186.878298][ T5823] pwc: recv_control_msg error -32 req 04 val 1500 [ 186.883311][ T5823] pwc: recv_control_msg error -32 req 02 val 2500 [ 186.883797][ T5823] pwc: recv_control_msg error -32 req 02 val 2400 [ 186.884150][ T5823] pwc: recv_control_msg error -32 req 02 val 2600 [ 186.884484][ T5823] pwc: recv_control_msg error -32 req 02 val 2900 [ 186.884814][ T5823] pwc: recv_control_msg error -32 req 02 val 2800 [ 186.885254][ T5823] pwc: recv_control_msg error -32 req 04 val 1100 [ 186.885580][ T5823] pwc: recv_control_msg error -32 req 04 val 1200 [ 186.886963][ T5823] pwc: Registered as video103. [ 186.888488][ T5823] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input26 [ 188.773279][ C0] net_ratelimit: 32137 callbacks suppressed [ 188.773293][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 188.773443][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 188.773595][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 188.773751][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 188.773890][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 188.774032][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 188.774171][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 188.774324][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 188.774464][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 188.774602][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 193.783315][ C0] net_ratelimit: 36824 callbacks suppressed [ 193.783329][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 193.783478][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 193.783615][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 193.783764][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 193.783902][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 193.784042][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 193.784187][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 193.784323][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 193.784459][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 193.784604][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 195.069793][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.069850][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.296536][ T7564] syz.4.425 (7564) used greatest stack depth: 19944 bytes left [ 198.773424][ T5823] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 198.773881][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 198.793188][ C0] net_ratelimit: 17373 callbacks suppressed [ 198.793220][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 198.794048][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.794942][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.797663][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 198.798436][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.799325][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.802039][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 198.802795][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.803650][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.806260][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 198.903348][ T5823] usb 3-1: device descriptor read/64, error -32 [ 203.803201][ C1] net_ratelimit: 26652 callbacks suppressed [ 203.803220][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.803520][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.803807][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.804096][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.804167][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 203.804376][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.804406][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.804656][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.804730][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.804956][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.813192][ C1] net_ratelimit: 26900 callbacks suppressed [ 208.813212][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.813507][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.813789][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.813862][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 208.814089][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.814098][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.814370][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.814415][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.814670][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.814951][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 213.823263][ C1] net_ratelimit: 26469 callbacks suppressed [ 213.823283][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 213.823562][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 213.823844][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 213.824074][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 213.824127][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 213.824342][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.824419][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 213.824700][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.824717][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 213.824997][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.833291][ C0] net_ratelimit: 27749 callbacks suppressed [ 218.833311][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 218.833379][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.833582][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.833664][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.833935][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.833954][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.834233][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.834510][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.834806][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.834998][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 223.843292][ C0] net_ratelimit: 28056 callbacks suppressed [ 223.843313][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.843358][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 223.843651][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 223.843927][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 223.844212][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 223.844252][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 223.844489][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.844489][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 223.844766][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 223.844819][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.853209][ C1] net_ratelimit: 28030 callbacks suppressed [ 228.853229][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 228.853465][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 228.853519][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 228.853705][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.853792][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 228.854059][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.854063][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 228.854356][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 228.854631][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 228.854902][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 233.863246][ C1] net_ratelimit: 27894 callbacks suppressed [ 233.863264][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 233.863551][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 233.863600][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 233.863846][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 233.863866][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.864141][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 233.864182][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.864435][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 233.864716][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 233.864996][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 238.873200][ C1] net_ratelimit: 27564 callbacks suppressed [ 238.873218][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 238.873257][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.873505][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 238.873801][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 238.874081][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 238.874209][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 238.874402][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 238.874445][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.874696][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 238.874761][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.883185][ C1] net_ratelimit: 27709 callbacks suppressed [ 243.883203][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.883400][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.883488][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.883770][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.884065][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.884336][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 243.884352][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.884585][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.884647][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.884904][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.893200][ C1] net_ratelimit: 27509 callbacks suppressed [ 248.893220][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.893266][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.893582][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.893691][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.893937][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.894301][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.894659][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.894991][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 248.895011][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.895313][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.903164][ C0] net_ratelimit: 27602 callbacks suppressed [ 253.903184][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.903445][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 253.903503][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.903726][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 253.904029][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 253.904312][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 253.904435][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 253.904591][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 253.904686][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.904884][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 258.913186][ C0] net_ratelimit: 27534 callbacks suppressed [ 258.913205][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.913254][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 258.913535][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 258.913813][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 258.914111][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 258.914156][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 258.914393][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 258.914394][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.914688][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 258.914733][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.923196][ C1] net_ratelimit: 27608 callbacks suppressed [ 263.923215][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 263.923497][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 263.923688][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 263.923783][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 263.923943][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.924081][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 263.924252][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.924376][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 263.924672][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 263.924950][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 266.604743][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.621401][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 268.933144][ C1] net_ratelimit: 27686 callbacks suppressed [ 268.933163][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 268.933449][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 268.933729][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 268.933819][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 268.933999][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 268.934070][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.934289][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 268.934391][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.934560][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 268.934838][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 273.943175][ C0] net_ratelimit: 28404 callbacks suppressed [ 273.943194][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 273.943432][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 273.943475][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.943717][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 273.943828][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.944005][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 273.944296][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 273.944578][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 273.944854][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 273.944883][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 278.953211][ C1] net_ratelimit: 31638 callbacks suppressed [ 278.953229][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 278.953516][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 278.953575][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.953786][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 278.954062][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 278.954354][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 278.954650][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 278.954702][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 278.954928][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 278.954988][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.963208][ C1] net_ratelimit: 32200 callbacks suppressed [ 283.963227][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 283.963276][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.963512][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 283.963651][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.963788][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 283.964017][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 283.964166][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 283.964319][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 283.964458][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 283.964596][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 288.973243][ C1] net_ratelimit: 31824 callbacks suppressed [ 288.973262][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 288.973379][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 288.973557][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 288.973627][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.973901][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 288.973937][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.974173][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 288.974458][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 288.974736][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 288.974875][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 289.221440][ T5823] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 291.910669][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 293.983308][ C1] net_ratelimit: 28543 callbacks suppressed [ 293.983328][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 293.983343][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 293.983656][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 293.983967][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 293.984026][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 293.984284][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 293.984298][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.984608][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 293.984651][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.984918][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 298.993295][ C0] net_ratelimit: 28790 callbacks suppressed [ 298.993317][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.993395][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 298.993673][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.993702][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 298.994008][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 298.994329][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 298.994372][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 298.994653][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 298.994960][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 298.995057][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 304.003158][ C1] net_ratelimit: 28071 callbacks suppressed [ 304.003177][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.003465][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.003534][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 304.003740][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.003799][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.004014][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.004170][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.004323][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.004603][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.004853][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 309.013174][ C0] net_ratelimit: 27879 callbacks suppressed [ 309.013192][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 309.013219][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.013467][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.013496][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.013782][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.013818][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.014152][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.014442][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.014499][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 309.014714][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.023254][ C1] net_ratelimit: 27867 callbacks suppressed [ 314.023273][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.023579][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.023696][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 314.023851][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.024126][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.024391][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 314.024398][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.024655][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.024671][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.024958][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 317.571615][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.580558][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.033270][ C1] net_ratelimit: 28323 callbacks suppressed [ 319.033289][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.033569][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.033627][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 319.033857][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.033916][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.034154][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.034285][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.034433][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.034709][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.034969][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:1c:6e:2c:8c:be, vlan:0) [ 322.533890][ T31] INFO: task syz.5.417:7542 blocked for more than 143 seconds. [ 322.533913][ T31] Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 [ 322.533925][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 322.533933][ T31] task:syz.5.417 state:D stack:27400 pid:7542 tgid:7535 ppid:6188 task_flags:0x400140 flags:0x00004004 [ 322.533990][ T31] Call Trace: [ 322.533997][ T31] [ 322.534008][ T31] __schedule+0x116f/0x5de0 [ 322.534051][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 322.534076][ T31] ? __pfx___schedule+0x10/0x10 [ 322.534103][ T31] ? find_held_lock+0x2b/0x80 [ 322.534126][ T31] ? schedule+0x2d7/0x3a0 [ 322.534149][ T31] schedule+0xe7/0x3a0 [ 322.534170][ T31] schedule_timeout+0x257/0x290 [ 322.534189][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 322.534216][ T31] ? mark_held_locks+0x49/0x80 [ 322.534232][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 322.534255][ T31] ___down_common+0x2d8/0x460 [ 322.534285][ T31] ? __pfx____down_common+0x10/0x10 [ 322.534319][ T31] __down+0x20/0x30 [ 322.534342][ T31] down+0x74/0xa0 [ 322.534364][ T31] console_lock+0x5b/0xa0 [ 322.534383][ T31] con_install+0x99/0x600 [ 322.534411][ T31] ? __pfx_con_install+0x10/0x10 [ 322.534441][ T31] ? __pfx_con_install+0x10/0x10 [ 322.534466][ T31] tty_init_dev.part.0+0x99/0x500 [ 322.534486][ T31] tty_open+0xa50/0xf90 [ 322.534507][ T31] ? __pfx_tty_open+0x10/0x10 [ 322.534522][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 322.534546][ T31] ? __pfx_tty_open+0x10/0x10 [ 322.534561][ T31] chrdev_open+0x231/0x6a0 [ 322.534582][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 322.534603][ T31] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 322.534650][ T31] do_dentry_open+0x741/0x1c10 [ 322.534676][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 322.534701][ T31] vfs_open+0x82/0x3f0 [ 322.534726][ T31] path_openat+0x1e5e/0x2d40 [ 322.534754][ T31] ? __pfx_path_openat+0x10/0x10 [ 322.534778][ T31] do_filp_open+0x20b/0x470 [ 322.534796][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 322.534833][ T31] ? alloc_fd+0x471/0x7d0 [ 322.534858][ T31] do_sys_openat2+0x11b/0x1d0 [ 322.534880][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 322.534900][ T31] ? rcu_is_watching+0x12/0xc0 [ 322.534923][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 322.534952][ T31] __x64_sys_openat+0x174/0x210 [ 322.534975][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 322.535000][ T31] ? __secure_computing+0x28e/0x3b0 [ 322.535035][ T31] do_syscall_64+0xcd/0x260 [ 322.535060][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.535078][ T31] RIP: 0033:0x7fe3b838bad0 [ 322.535093][ T31] RSP: 002b:00007fe3b61f5b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 322.535112][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fe3b838bad0 [ 322.535124][ T31] RDX: 0000000000000002 RSI: 00007fe3b61f5c10 RDI: 00000000ffffff9c [ 322.535136][ T31] RBP: 00007fe3b61f5c10 R08: 0000000000000000 R09: 00007fe3b61f5987 [ 322.535147][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 322.535158][ T31] R13: 0000000000000000 R14: 00007fe3b85a6160 R15: 00007ffe08cc9fc8 [ 322.535182][ T31] [ 322.535193][ T31] [ 322.535193][ T31] Showing all locks held in the system: [ 322.535200][ T31] 2 locks held by kthreadd/2: [ 322.535212][ T31] 1 lock held by kworker/R-kvfre/6: [ 322.535221][ T31] #0: ffffffff8e2790c8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 322.535267][ T31] 2 locks held by kworker/0:0/9: [ 322.535277][ T31] 4 locks held by kworker/0:1/10: [ 322.535287][ T31] #0: ffff88803202b548 ((wq_completion)wg-kex-wg2#10){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 322.535338][ T31] #1: ffffc900000f7d18 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 322.535400][ T31] #2: ffff88805eac9308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x880 [ 322.535451][ T31] #3: ffff88805c9aaad8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x666/0x880 [ 322.535505][ T31] 3 locks held by kworker/u8:0/12: [ 322.535516][ T31] 4 locks held by kworker/u8:1/13: [ 322.535525][ T31] 1 lock held by kworker/R-mm_pe/14: [ 322.535535][ T31] #0: ffffffff8e2790c8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x839/0xea0 [ 322.535582][ T31] 3 locks held by kworker/1:0/24: [ 322.535592][ T31] 1 lock held by khungtaskd/31: [ 322.535602][ T31] #0: ffffffff8e3c15c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 322.535645][ T31] 4 locks held by kworker/u8:2/36: [ 322.535656][ T31] 5 locks held by kworker/u8:3/52: [ 322.535667][ T31] 3 locks held by kworker/u8:4/62: [ 322.535676][ T31] #0: ffff88801b481148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 322.535721][ T31] #1: ffffc90001547d18 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 322.535766][ T31] #2: ffffffff9012bda8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 322.535817][ T31] 2 locks held by kworker/1:1/82: [ 322.535829][ T31] 3 locks held by kworker/u8:5/162: [ 322.535839][ T31] #0: ffff888031f10148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 322.535885][ T31] #1: ffffc90002edfd18 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 322.535930][ T31] #2: ffffffff9012bda8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 [ 322.535979][ T31] 3 locks held by kworker/1:2/951: [ 322.535990][ T31] 2 locks held by kworker/0:2/977: [ 322.536001][ T31] 5 locks held by kworker/u8:6/1158: [ 322.536025][ T31] 4 locks held by kworker/u8:7/2898: [ 322.536036][ T31] 4 locks held by kworker/u8:8/2932: [ 322.536045][ T31] 4 locks held by kworker/u8:9/3028: [ 322.536056][ T31] 1 lock held by kworker/R-bat_e/3401: [ 322.536066][ T31] #0: ffffffff8e2790c8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x839/0xea0 [ 322.536112][ T31] 3 locks held by syslogd/5180: [ 322.536121][ T31] 2 locks held by klogd/5187: [ 322.536131][ T31] 1 lock held by udevd/5198: [ 322.536140][ T31] #0: ffffffff8e3c15c0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x20a0 [ 322.536189][ T31] 1 lock held by dhcpcd/5491: [ 322.536200][ T31] 2 locks held by getty/5586: [ 322.536209][ T31] #0: ffff8880379b20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 322.536257][ T31] #1: ffffc900033232f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 322.536302][ T31] 3 locks held by syz-executor/5810: [ 322.536312][ T31] 7 locks held by kworker/1:3/5823: [ 322.536322][ T31] 3 locks held by syz-executor/5832: [ 322.536333][ T31] 1 lock held by kworker/R-wg-cr/5852: [ 322.536343][ T31] #0: ffffffff8e2790c8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 322.536387][ T31] 1 lock held by kworker/R-wg-cr/5853: [ 322.536396][ T31] #0: ffffffff8e2790c8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 322.536440][ T31] 1 lock held by kworker/R-wg-cr/5855: [ 322.536449][ T31] 1 lock held by kworker/R-wg-cr/5857: [ 322.536459][ T31] #0: ffffffff8e2790c8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 322.536503][ T31] 1 lock held by kworker/R-wg-cr/5859: [ 322.536513][ T31] #0: ffffffff8e2790c8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 322.536556][ T31] 1 lock held by kworker/R-wg-cr/5860: [ 322.536566][ T31] #0: ffffffff8e2790c8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x839/0xea0 [ 322.536611][ T31] 2 locks held by kworker/R-wg-cr/5861: [ 322.536621][ T31] 1 lock held by kworker/R-wg-cr/5863: [ 322.536630][ T31] #0: ffffffff8e2790c8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x839/0xea0 [ 322.536675][ T31] 1 lock held by kworker/R-wg-cr/5864: [ 322.536685][ T31] #0: ffffffff8e2790c8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x839/0xea0 [ 322.536729][ T31] 4 locks held by kworker/1:4/5865: [ 322.536739][ T31] #0: ffff8880356b7148 ((wq_completion)wg-kex-wg1#6){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 322.536788][ T31] #1: ffffc90004147d18 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 322.536850][ T31] #2: ffff88805e085308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x880 [ 322.536900][ T31] #3: ffff88805cd95c60 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x5ac/0x880 [ 322.536947][ T31] 1 lock held by kworker/R-wg-cr/5866: [ 322.536957][ T31] #0: ffffffff8e2790c8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 322.537000][ T31] 1 lock held by kworker/R-wg-cr/5867: [ 322.537014][ T31] #0: ffffffff8e2790c8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 322.537058][ T31] 1 lock held by kworker/R-wg-cr/5868: [ 322.537068][ T31] 1 lock held by kworker/R-wg-cr/5869: [ 322.537079][ T31] #0: ffffffff8e2790c8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 322.537121][ T31] 1 lock held by kworker/R-wg-cr/5870: [ 322.537132][ T31] #0: ffffffff8e2790c8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 322.537175][ T31] 1 lock held by kworker/R-wg-cr/5871: [ 322.537185][ T31] 5 locks held by kworker/1:5/5872: [ 322.537196][ T31] 4 locks held by kworker/1:6/5873: [ 322.537206][ T31] 4 locks held by kworker/0:3/5874: [ 322.537215][ T31] #0: ffff888012b5b548 ((wq_completion)wg-kex-wg2#12){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 322.537264][ T31] #1: ffffc900041f7d18 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 322.537326][ T31] #2: ffff8880363a5308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x880 [ 322.537376][ T31] #3: ffff88807adbb4c0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x5ac/0x880 [ 322.537425][ T31] 3 locks held by kworker/0:4/5875: [ 322.537435][ T31] 4 locks held by kworker/0:5/5902: [ 322.537444][ T31] 3 locks held by kworker/1:8/5952: [ 322.537454][ T31] 2 locks held by kworker/0:6/5960: [ 322.537464][ T31] 3 locks held by kworker/0:7/5969: [ 322.537474][ T31] 1 lock held by syz.1.29/6016: [ 322.537483][ T31] #0: ffffffff9012bda8 (rtnl_mutex){+.+.}-{4:4}, at: netdev_run_todo+0xebf/0x1320 [ 322.537531][ T31] 2 locks held by syz-executor/6188: [ 322.537540][ T31] #0: ffffffff9012bda8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 322.537585][ T31] #1: ffffffff8e3ccaf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x280/0x3c0 [ 322.537637][ T31] 1 lock held by kworker/R-wg-cr/6204: [ 322.537648][ T31] 1 lock held by kworker/R-wg-cr/6206: [ 322.537658][ T31] #0: ffffffff8e2790c8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 322.537701][ T31] 1 lock held by kworker/R-wg-cr/6208: [ 322.537711][ T31] #0: ffffffff8e2790c8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 322.537755][ T31] 4 locks held by kworker/u8:10/6409: [ 322.537765][ T31] 2 locks held by syz.0.411/7520: [ 322.537775][ T31] 2 locks held by syz.2.412/7518: [ 322.537785][ T31] 2 locks held by syz.5.417/7542: [ 322.537794][ T31] #0: ffffffff8f0a5148 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x53e/0xf90 [ 322.537833][ T31] #1: ffff8880343891c0 (&tty->legacy_mutex){+.+.}-{4:4}, at: tty_init_dev.part.0+0x37/0x500 [ 322.537874][ T31] 1 lock held by syz-executor/7566: [ 322.537884][ T31] 1 lock held by syz-executor/7568: [ 322.537894][ T31] 2 locks held by syz-executor/7570: [ 322.537904][ T31] 4 locks held by syz.2.429/7575: [ 322.537914][ T31] 4 locks held by kworker/0:8/7578: [ 322.537923][ T31] [ 322.537927][ T31] ============================================= [ 322.537927][ T31] [ 322.537935][ T31] NMI backtrace for cpu 0 [ 322.537946][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 322.537965][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 322.537974][ T31] Call Trace: [ 322.537979][ T31] [ 322.537985][ T31] dump_stack_lvl+0x116/0x1f0 [ 322.538008][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 322.538031][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 322.538050][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 322.538069][ T31] watchdog+0xf70/0x12c0 [ 322.538090][ T31] ? __pfx_watchdog+0x10/0x10 [ 322.538105][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 322.538127][ T31] ? __kthread_parkme+0x19e/0x250 [ 322.538151][ T31] ? __pfx_watchdog+0x10/0x10 [ 322.538167][ T31] kthread+0x3c2/0x780 [ 322.538184][ T31] ? __pfx_kthread+0x10/0x10 [ 322.538199][ T31] ? __pfx_kthread+0x10/0x10 [ 322.538213][ T31] ? __pfx_kthread+0x10/0x10 [ 322.538229][ T31] ? __pfx_kthread+0x10/0x10 [ 322.538244][ T31] ? rcu_is_watching+0x12/0xc0 [ 322.538264][ T31] ? __pfx_kthread+0x10/0x10 [ 322.538281][ T31] ret_from_fork+0x45/0x80 [ 322.538298][ T31] ? __pfx_kthread+0x10/0x10 [ 322.538314][ T31] ret_from_fork_asm+0x1a/0x30 [ 322.538350][ T31] [ 322.538356][ T31] Sending NMI from CPU 0 to CPUs 1: [ 322.538378][ C1] NMI backtrace for cpu 1 [ 322.538388][ C1] CPU: 1 UID: 0 PID: 52 Comm: kworker/u8:3 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 322.538405][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 322.538414][ C1] Workqueue: bat_events batadv_tt_purge [ 322.538429][ C1] RIP: 0010:unwind_next_frame+0x560/0x20a0 [ 322.538447][ C1] Code: 04 4c 89 fe 48 b8 00 00 00 00 00 fc ff df 4c 89 c2 48 c1 ee 03 48 c1 ea 03 0f b6 14 02 0f b6 04 06 4c 89 c6 83 e6 07 40 38 f2 <40> 0f 9e c6 84 d2 0f 95 c2 40 84 d6 0f 85 b8 13 00 00 41 83 e7 07 [ 322.538459][ C1] RSP: 0018:ffffc90000a07898 EFLAGS: 00000297 [ 322.538469][ C1] RAX: 0000000000000000 RBX: 0000000000000002 RCX: ffffffff9128e4a0 [ 322.538478][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff90a0cc0c [ 322.538487][ C1] RBP: ffffc90000a07950 R08: ffffffff9128e4a4 R09: 0000000000000000 [ 322.538495][ C1] R10: 0000000000000005 R11: 000000000001209f R12: ffffc90000a07958 [ 322.538503][ C1] R13: ffffc90000a07908 R14: ffffc90000a0793d R15: ffffffff9128e4a5 [ 322.538513][ C1] FS: 0000000000000000(0000) GS:ffff888124ab3000(0000) knlGS:0000000000000000 [ 322.538527][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 322.538536][ C1] CR2: 00007fff449c9d88 CR3: 000000007ae36000 CR4: 00000000003526f0 [ 322.538545][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 322.538552][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 322.538560][ C1] Call Trace: [ 322.538564][ C1] [ 322.538569][ C1] ? kasan_save_free_info+0x3b/0x60 [ 322.538589][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 322.538606][ C1] arch_stack_walk+0x94/0x100 [ 322.538625][ C1] ? kasan_save_free_info+0x3b/0x60 [ 322.538643][ C1] stack_trace_save+0x8e/0xc0 [ 322.538658][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 322.538676][ C1] ? __lock_acquire+0xaa4/0x1ba0 [ 322.538688][ C1] kasan_save_stack+0x33/0x60 [ 322.538701][ C1] ? kasan_save_stack+0x33/0x60 [ 322.538713][ C1] ? kasan_save_track+0x14/0x30 [ 322.538724][ C1] ? kasan_save_free_info+0x3b/0x60 [ 322.538755][ C1] kasan_save_track+0x14/0x30 [ 322.538773][ C1] kasan_save_free_info+0x3b/0x60 [ 322.538789][ C1] __kasan_slab_free+0x51/0x70 [ 322.538802][ C1] kmem_cache_free+0x2d4/0x4d0 [ 322.538814][ C1] ? __skb_ext_put+0x102/0x2c0 [ 322.538828][ C1] __skb_ext_put+0x102/0x2c0 [ 322.538840][ C1] __skb_ext_del+0xf3/0x340 [ 322.538853][ C1] br_nf_dev_queue_xmit+0x7b7/0x2cb0 [ 322.538870][ C1] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 322.538886][ C1] br_nf_post_routing+0x8e7/0x1190 [ 322.538902][ C1] ? __pfx_br_nf_post_routing+0x10/0x10 [ 322.538917][ C1] nf_hook_slow+0xbb/0x200 [ 322.538933][ C1] nf_hook+0x45e/0x780 [ 322.538944][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 322.538957][ C1] ? __pfx_nf_hook+0x10/0x10 [ 322.538970][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 322.538982][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 322.539000][ C1] ? __pfx_ip6table_mangle_hook+0x10/0x10 [ 322.539020][ C1] br_forward_finish+0xcd/0x130 [ 322.539032][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 322.539045][ C1] br_nf_hook_thresh+0x301/0x410 [ 322.539059][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 322.539073][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 322.539087][ C1] ? lock_acquire+0x179/0x350 [ 322.539099][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 322.539111][ C1] ? net_generic+0xea/0x2a0 [ 322.539126][ C1] br_nf_forward_finish+0x66a/0xba0 [ 322.539140][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 322.539154][ C1] br_nf_forward_ip.part.0+0x609/0x810 [ 322.539170][ C1] br_nf_forward+0xf0f/0x1be0 [ 322.539187][ C1] ? __pfx_br_nf_forward+0x10/0x10 [ 322.539201][ C1] nf_hook_slow+0xbb/0x200 [ 322.539214][ C1] nf_hook+0x45e/0x780 [ 322.539225][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 322.539238][ C1] ? __pfx_nf_hook+0x10/0x10 [ 322.539251][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 322.539266][ C1] __br_forward+0x1be/0x5b0 [ 322.539278][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 322.539291][ C1] br_flood+0x39c/0x650 [ 322.539305][ C1] br_handle_frame_finish+0xe8e/0x1c20 [ 322.539321][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 322.539339][ C1] ? ip6t_do_table+0xc20/0x1be0 [ 322.539357][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 322.539374][ C1] ? nf_hook_slow+0x132/0x200 [ 322.539388][ C1] br_nf_hook_thresh+0x301/0x410 [ 322.539402][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 322.539418][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 322.539434][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 322.539448][ C1] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 322.539460][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 322.539473][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 322.539487][ C1] br_nf_pre_routing_finish_ipv6+0x76a/0xfb0 [ 322.539502][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 322.539518][ C1] br_nf_pre_routing_ipv6+0x3cd/0x8c0 [ 322.539534][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 322.539549][ C1] ? lock_acquire+0x179/0x350 [ 322.539562][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 322.539578][ C1] ? net_generic+0xea/0x2a0 [ 322.539593][ C1] br_nf_pre_routing+0x860/0x15b0 [ 322.539610][ C1] br_handle_frame+0xad5/0x14a0 [ 322.539625][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 322.539640][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 322.539656][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 322.539669][ C1] __netif_receive_skb_core.constprop.0+0xa23/0x4a00 [ 322.539685][ C1] ? kasan_quarantine_put+0x70/0x240 [ 322.539700][ C1] ? kmem_cache_free+0x2d4/0x4d0 [ 322.539713][ C1] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 322.539729][ C1] ? sk_skb_reason_drop+0x136/0x1a0 [ 322.539747][ C1] ? ip6_mc_input+0x46c/0xfd0 [ 322.539775][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 322.539789][ C1] ? process_backlog+0x3f0/0x15e0 [ 322.539802][ C1] __netif_receive_skb_one_core+0xb0/0x1e0 [ 322.539816][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 322.539831][ C1] ? lock_acquire+0x179/0x350 [ 322.539846][ C1] ? process_backlog+0x3f0/0x15e0 [ 322.539859][ C1] __netif_receive_skb+0x1d/0x160 [ 322.539872][ C1] process_backlog+0x442/0x15e0 [ 322.539889][ C1] __napi_poll.constprop.0+0xb7/0x550 [ 322.539905][ C1] net_rx_action+0xa97/0x1010 [ 322.539923][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 322.539937][ C1] ? find_held_lock+0x2b/0x80 [ 322.539953][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 322.539967][ C1] ? sched_clock+0x38/0x60 [ 322.539979][ C1] ? sched_clock_cpu+0x6c/0x530 [ 322.540003][ C1] ? mark_held_locks+0x49/0x80 [ 322.540016][ C1] handle_softirqs+0x216/0x8e0 [ 322.540035][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 322.540051][ C1] ? batadv_tt_local_purge+0x21c/0x3c0 [ 322.540066][ C1] do_softirq+0xb2/0xf0 [ 322.540080][ C1] [ 322.540085][ C1] [ 322.540089][ C1] __local_bh_enable_ip+0x100/0x120 [ 322.540106][ C1] batadv_tt_local_purge+0x21c/0x3c0 [ 322.540122][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 322.540136][ C1] ? __pfx_batadv_tt_local_purge+0x10/0x10 [ 322.540153][ C1] batadv_tt_purge+0x8b/0xb80 [ 322.540169][ C1] ? __pfx_batadv_tt_purge+0x10/0x10 [ 322.540187][ C1] ? rcu_is_watching+0x12/0xc0 [ 322.540203][ C1] process_one_work+0x9cc/0x1b70 [ 322.540221][ C1] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 322.540241][ C1] ? __pfx_process_one_work+0x10/0x10 [ 322.540259][ C1] ? assign_work+0x1a0/0x250 [ 322.540274][ C1] worker_thread+0x6c8/0xf10 [ 322.540294][ C1] ? __pfx_worker_thread+0x10/0x10 [ 322.540308][ C1] kthread+0x3c2/0x780 [ 322.540321][ C1] ? __pfx_kthread+0x10/0x10 [ 322.540333][ C1] ? __pfx_kthread+0x10/0x10 [ 322.540345][ C1] ? __pfx_kthread+0x10/0x10 [ 322.540357][ C1] ? __pfx_kthread+0x10/0x10 [ 322.540369][ C1] ? rcu_is_watching+0x12/0xc0 [ 322.540384][ C1] ? __pfx_kthread+0x10/0x10 [ 322.540398][ C1] ret_from_fork+0x45/0x80 [ 322.540411][ C1] ? __pfx_kthread+0x10/0x10 [ 322.540423][ C1] ret_from_fork_asm+0x1a/0x30 [ 322.540448][ C1] [ 322.541376][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 322.541387][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 322.541408][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 322.541418][ T31] Call Trace: [ 322.541423][ T31] [ 322.541430][ T31] dump_stack_lvl+0x3d/0x1f0 [ 322.541453][ T31] panic+0x71c/0x800 [ 322.541470][ T31] ? __pfx_panic+0x10/0x10 [ 322.541483][ T31] ? __pfx__printk+0x10/0x10 [ 322.541497][ T31] ? ret_from_fork_asm+0x1a/0x30 [ 322.541524][ T31] ? nmi_backtrace_stall_check+0x6e/0x540 [ 322.541546][ T31] ? irq_work_queue+0xce/0x100 [ 322.541566][ T31] ? watchdog+0xdda/0x12c0 [ 322.541583][ T31] ? watchdog+0xdcd/0x12c0 [ 322.541602][ T31] watchdog+0xdeb/0x12c0 [ 322.541624][ T31] ? __pfx_watchdog+0x10/0x10 [ 322.541639][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 322.541662][ T31] ? __kthread_parkme+0x19e/0x250 [ 322.541687][ T31] ? __pfx_watchdog+0x10/0x10 [ 322.541704][ T31] kthread+0x3c2/0x780 [ 322.541721][ T31] ? __pfx_kthread+0x10/0x10 [ 322.541736][ T31] ? __pfx_kthread+0x10/0x10 [ 322.541752][ T31] ? __pfx_kthread+0x10/0x10 [ 322.541766][ T31] ? __pfx_kthread+0x10/0x10 [ 322.541782][ T31] ? rcu_is_watching+0x12/0xc0 [ 322.541803][ T31] ? __pfx_kthread+0x10/0x10 [ 322.541820][ T31] ret_from_fork+0x45/0x80 [ 322.541837][ T31] ? __pfx_kthread+0x10/0x10 [ 322.541854][ T31] ret_from_fork_asm+0x1a/0x30 [ 322.541889][ T31] [ 322.542086][ T31] Kernel Offset: disabled