last executing test programs: 1m7.555733654s ago: executing program 4 (id=625): r0 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000500)={"a0453822", 0x3, 0x6, 0x2, 0x0, 0x0, "3377f877c734c4f928875ab8db00", "02008000", "00000001", "be4d22a4", ["c38600008000080000e6fc00", "51f3541a910080ffffcb3a10", "2ce50f8a285d9500c522afe1", "00060000000000c5098d2900"]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x18080, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000580)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYRESOCT=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1_macvtap\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x3b, 0x2, [{0x7}, {0xfffffffe, 0x80003}]}}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) 1m6.409830897s ago: executing program 2 (id=628): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x59f240) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket(0x2, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = shmget$private(0x0, 0x3000, 0x65d, &(0x7f0000ffa000/0x3000)=nil) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40003, @mcast1}, {0x2, 0xfff9, 0xc00, @remote, 0xffffffff}, 0xffffffffffffffff, 0x9dffffff}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0xfffffffffffffc5d, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x0) shmat(r2, &(0x7f0000001000/0x3000)=nil, 0x0) clock_getres(0x8, 0x0) 1m5.13136275s ago: executing program 4 (id=630): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = msgget$private(0x0, 0x100) msgsnd(r4, &(0x7f0000002900)=ANY=[@ANYBLOB="03"], 0xfc6, 0x0) msgctl$IPC_SET(r4, 0x1, &(0x7f0000002880)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x8}, 0x0, 0x0, 0xfffffffffffffffe, 0x1414, 0xffff, 0x2, 0xffffffffffffffca, 0x8, 0x8580, 0x3}) io_setup(0x3, 0x0) io_submit(0x0, 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000800)={'syz1\x00', {0x0, 0x401, 0x2}, 0x2c, [0x0, 0x100, 0x0, 0xfffffffd, 0x6, 0x2, 0xfffffffc, 0x3, 0x0, 0x7fffffff, 0xfffffffe, 0xc0, 0x0, 0x0, 0x8, 0x0, 0x4000, 0x10, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x84fd, 0x0, 0x7, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x4, 0x0, 0x7ff, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xe, 0x0, 0x2, 0x20, 0x0, 0xeae2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x3ff, 0x40000000, 0x7fffe, 0x0, 0xfffffffd, 0x0, 0xfffffffc, 0x2, 0x3, 0x7, 0x0, 0x3, 0x80000000, 0xffff], [0x4, 0x20e4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x800, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80, 0x100, 0x0, 0x0, 0x0, 0x2, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfff, 0x71f, 0x0, 0x1, 0xffffffff, 0x20, 0x8], [0x40000000, 0x4, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0xcaa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3]}, 0x45c) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0700000000000000050005000000180003800800040000000000080002000900000004000100180001801400020073797a5f74756e"], 0x44}}, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) 1m3.837029349s ago: executing program 4 (id=634): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000e50000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e3341"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x800051, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000080)=ANY=[]) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000080)) 1m3.335394196s ago: executing program 4 (id=638): open(0x0, 0x143142, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @random="6a2ddcf6177a", @val={@val={0x88a8, 0x3}, {0x8100, 0x7, 0x0, 0x3}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x68, 0x700, 0x7c, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x0, 0x2}}}}}}, 0x0) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0x3}}, 0x14) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x14, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}], 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000fc0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="01002cbd7000fcdbdf25180000000c000600010000000100000024003080200001800c000500010000000000000005000200010000000800010003000000"], 0x44}, 0x1, 0x0, 0x0, 0x404405d}, 0x24040010) 1m2.968154457s ago: executing program 1 (id=640): r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x2, 0x80805, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'rr\x00', 0x16, 0x2, 0x6f}, 0x2c) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f00008c3000/0x2000)=nil, 0x2000}, 0x8}) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0xff, @private=0xa010101, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x83, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x3d71, 0x2}}, 0x44) r5 = socket(0x2, 0x80805, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) mknod$loop(0x0, 0x0, 0x1) link(0x0, &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000ac0)={r6}, &(0x7f0000000b00)=0x8) (fail_nth: 5) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(0xffffffffffffffff, 0x40184152, 0x0) 1m2.099215321s ago: executing program 2 (id=641): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000040)={0x4, r0, 0x1}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000080)=0x7) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) rt_sigaction(0x19, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x6, &(0x7f0000000200)=0x7) 1m1.996196284s ago: executing program 1 (id=642): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x9}}}, 0x24}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) bpf$MAP_CREATE(0x0, 0x0, 0x50) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@mcast1, 0x0, 0xe, 0x4e20, 0x0, 0x2, 0x0, 0x20}, {0x1, 0x7, 0x0, 0x0, 0xfffffffffffffffe, 0x2, 0x10000}, {0x0, 0x0, 0x200000000000, 0x3}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4, 0x0, 0x0, 0x5}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 1m1.995226508s ago: executing program 4 (id=643): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r2, &(0x7f0000000040)={&(0x7f00000000c0)={0x1d, r1, 0x3f000000}, 0x10, &(0x7f0000000080)={0x0, 0x1e}, 0x2, 0x0, 0x0, 0x20000017}, 0x0) 1m1.374313927s ago: executing program 4 (id=646): syz_open_dev$tty1(0xc, 0x4, 0x1) accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000080)=0x1c) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x48, 0x0, &(0x7f0000000040)) 1m1.29363184s ago: executing program 3 (id=647): r0 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000500)={"a0453822", 0x3, 0x6, 0x2, 0x0, 0x0, "3377f877c734c4f928875ab8db00", "02008000", "00000001", "be4d22a4", ["c38600008000080000e6fc00", "51f3541a910080ffffcb3a10", "2ce50f8a285d9500c522afe1", "00060000000000c5098d2900"]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r2}, 0x8) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x18080, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, r3, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000580)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYRESOCT=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r10}, 0xc) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000500)={@link_local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}}}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1_macvtap\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x3b, 0x2, [{0x7}, {0xfffffffe, 0x80003}]}}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) 1m1.174208496s ago: executing program 0 (id=648): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000e50000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e3341"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x800051, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r1]) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, 0x0) 1m0.633448032s ago: executing program 2 (id=649): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = creat(&(0x7f0000000380)='./file0\x00', 0xecf86c37d53049e1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x200000, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6e654f9f266dbd84ed78de4622772064656661756c7420757365723a73797cb9303030303030303070303030303030303430393300"], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) write$binfmt_elf32(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="7f454c4604030003000000000000000002003e"], 0x58) close(r1) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) flock(0xffffffffffffffff, 0x3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r4, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) gettid() timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 1m0.523177257s ago: executing program 0 (id=650): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0, 0x0, 0x8}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x34, r5, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x48081}, 0x800) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000200)={0x71e5b317, 0x800000, 0x0, 0xffffffff, 0x40001000}) ptrace(0x10, r6) ptrace$getregs(0xc, r6, 0x869, &(0x7f0000000200)=""/166) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x5, 0x2, {0x0, 0x1}, {0x4b, 0x6}, @cond=[{0x84, 0x402, 0x404, 0x4, 0x1, 0x29}, {0x0, 0xa0, 0x3, 0x5, 0x800, 0xff01}]}) r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r8, &(0x7f0000000040)="e2", 0x12d8) ioctl$EVIOCGKEY(r8, 0x80404518, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) 59.603092152s ago: executing program 3 (id=651): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x3) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x204800, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r6, 0x3b89, &(0x7f0000000180)={0x28, 0x70e3529b2df0f55, r8, r7, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, r7}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000007c0)='usrquota') open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x766c618eb221465a) 59.501785837s ago: executing program 0 (id=652): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x140, 0x800, 0x3ff, 0x0, 0x0, 0x0, {0x4, 0x4}, {}, {0x0, 0x4}, {0x0, 0x0, 0x8}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, 0xc}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x1010, r0, 0x9d8a9000) 56.496032412s ago: executing program 3 (id=653): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x30, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x10}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x80) 56.247192919s ago: executing program 2 (id=654): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x3) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f0000000180)={0x28, 0x70e3529b2df0f55, r7, r6, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, r6}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000007c0)='usrquota') open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x766c618eb221465a) 56.083654723s ago: executing program 0 (id=655): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = memfd_create(&(0x7f0000000b80)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x109) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001"], 0x110) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0xe1515f8735398fb, @val=@netkit={@void, @void, @void, @value}}, 0x1c) r6 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r3, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r7, 0x0, 0x20000023896) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x4, 0x0, &(0x7f0000019400)) 51.754229983s ago: executing program 1 (id=656): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x88000000, 0x24, &(0x7f00000003c0)={@multicast2, @empty}, 0xc) 51.611530749s ago: executing program 2 (id=657): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x81) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[]) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x20, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x80}}, 0x50) syz_open_procfs$namespace(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x1, 0x8010000000000084) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000001000030400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008000100100000001c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaa0000000800030003"], 0x68}}, 0x64000004) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x275a, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) r7 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000000240)=r7) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)) write$binfmt_script(r5, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) close(r0) 50.837986826s ago: executing program 0 (id=658): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = socket(0x10, 0x80003, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0842b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b53c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ppoll(&(0x7f0000000080)=[{r3}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) syz_open_pts(r3, 0x121500) socketpair$unix(0x2d, 0x2, 0x0, &(0x7f0000000200)) close_range(r1, 0xffffffffffffffff, 0x0) 50.773113448s ago: executing program 3 (id=659): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000040)={0x4, r0, 0x1}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000080)=0x7) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) rt_sigaction(0x19, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x6, &(0x7f0000000200)=0x7) 50.323283231s ago: executing program 1 (id=660): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000e50000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e3341"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x800051, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r1]) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, 0x0) 46.744420484s ago: executing program 3 (id=661): r0 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000500)={"a0453822", 0x3, 0x6, 0x2, 0x0, 0x0, "3377f877c734c4f928875ab8db00", "02008000", "00000001", "be4d22a4", ["c38600008000080000e6fc00", "51f3541a910080ffffcb3a10", "2ce50f8a285d9500c522afe1", "00060000000000c5098d2900"]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r2}, 0x8) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x18080, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, r3, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000580)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYRESOCT=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r10}, 0xc) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000500)={@link_local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}}}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1_macvtap\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x3b, 0x2, [{0x7}, {0xfffffffe, 0x80003}]}}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) 43.726405997s ago: executing program 32 (id=646): syz_open_dev$tty1(0xc, 0x4, 0x1) accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000080)=0x1c) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x48, 0x0, &(0x7f0000000040)) 43.626617539s ago: executing program 0 (id=663): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x59f240) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket(0x2, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = shmget$private(0x0, 0x3000, 0x65d, &(0x7f0000ffa000/0x3000)=nil) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40003, @mcast1}, {0x2, 0xfff9, 0xc00, @remote, 0xffffffff}, 0xffffffffffffffff, 0x9dffffff}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0xfffffffffffffc5d, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x0) shmat(r2, &(0x7f0000001000/0x3000)=nil, 0x0) clock_getres(0x8, 0x0) 42.889145101s ago: executing program 2 (id=664): io_uring_setup(0x7fdb, &(0x7f0000000080)={0x0, 0x80000004, 0x20, 0xffffffff, 0x38b}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = syz_open_dev$sg(0x0, 0x0, 0x5) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb) ioctl$SG_IO(r2, 0x2285, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000840) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x10, 0x2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000400), 0x52, 0x10000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x810, 0xffffffffffffffff, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$TIOCMSET(r6, 0x5418, &(0x7f0000000140)=0xfffffdfb) socket(0xa, 0x3, 0x3a) 42.675409227s ago: executing program 3 (id=665): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040961b1200000000000001090224000100000000090400000103e0000009210700000122070009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000100)=ANY=[@ANYRESHEX=0x0], 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000006c0)={0xa, 0x3, 0x7a0000, @mcast2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x7ff, 0x2, 0x0, 0x1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'macsec0\x00', 0x10b}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = syz_open_dev$media(&(0x7f00000002c0), 0x8, 0x2a0404) ioctl$MEDIA_IOC_ENUM_ENTITIES(r6, 0xc1007c01, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r7, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) socket$pppl2tp(0x18, 0x1, 0x1) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="40242600000026021f236702f577ab9dc778ac4e2ad6a0ac48ed000eb7abca026ba5d86f131a"], &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000700)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="4014af000000ae50b08af2cfbc71af237c0709316e16cac01d09e3a6c3eed9719a943e5510697ecb68ee346dde9c7be41f50c313654d9bc728081c65c5edd2cf068fcd4eb66861099957f9cf87a814d8849b2c4be086fe398809b8ae558def9ec97cac18f93feddbecc44bd50ee469e4fb1b477590003869f59aee49ff47b39c106ad40e5a7ad83449c345bed8eb35065b8cac59391e7c7815edd25fc8b83b9e345fdf3bc21c20141488d2923d8b420542875c399f"], &(0x7f0000000440)={0x0, 0xa, 0x1, 0x97}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000500)={0x20, 0x80, 0x1c, {0x3ff, 0x9e, 0x1, 0x1, 0xfff, 0x3, 0x3, 0x8, 0xf061, 0x7, 0x14, 0x8000}}, &(0x7f0000000540)={0x20, 0x85, 0x4, 0xffffff95}, &(0x7f0000000580)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000005c0)={0x20, 0x87, 0x2, 0x7d}, &(0x7f0000000600)={0x20, 0x89, 0x2, 0x1}}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000340)={'virt_wifi0\x00', 0x400}) close_range(r2, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000008, 0x100010, 0xffffffffffffffff, 0x15322000) 41.874985825s ago: executing program 1 (id=666): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x9}}}, 0x24}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@mcast1, 0x0, 0xe, 0x4e20, 0x0, 0x2, 0x0, 0x20}, {0x1, 0x7, 0x0, 0x0, 0xfffffffffffffffe, 0x2, 0x10000}, {0x0, 0x0, 0x200000000000, 0x3}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4, 0x0, 0x0, 0x5}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 0s ago: executing program 1 (id=667): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x3) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f0000000180)={0x28, 0x70e3529b2df0f55, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x48}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000007c0)='usrquota') open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x766c618eb221465a) kernel console output (not intermixed with test programs): 0x22/0x1c0 [ 204.094395][ T7374] shmem_get_inode+0x19a/0xfb0 [ 204.094422][ T7374] shmem_symlink+0xf8/0x970 [ 204.094442][ T7374] ? __pfx_shmem_symlink+0x10/0x10 [ 204.094466][ T7374] vfs_symlink+0x400/0x680 [ 204.094489][ T7374] do_symlinkat+0x261/0x310 [ 204.094507][ T7374] ? __pfx_do_symlinkat+0x10/0x10 [ 204.094523][ T7374] ? getname_flags.part.0+0x1c5/0x550 [ 204.094548][ T7374] __x64_sys_symlink+0x75/0x90 [ 204.094564][ T7374] do_syscall_64+0xcd/0x260 [ 204.094588][ T7374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.094605][ T7374] RIP: 0033:0x7f55ccd8e969 [ 204.094618][ T7374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.094633][ T7374] RSP: 002b:00007f55cdbb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 204.094650][ T7374] RAX: ffffffffffffffda RBX: 00007f55ccfb6160 RCX: 00007f55ccd8e969 [ 204.094660][ T7374] RDX: 0000000000000000 RSI: 00002000000059c0 RDI: 00002000000049c0 [ 204.094670][ T7374] RBP: 00007f55cdbb4090 R08: 0000000000000000 R09: 0000000000000000 [ 204.094679][ T7374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.094687][ T7374] R13: 0000000000000000 R14: 00007f55ccfb6160 R15: 00007ffda34e0ec8 [ 204.094709][ T7374] [ 204.309684][ T30] audit: type=1400 audit(1747038174.035:280): avc: denied { bind } for pid=7365 comm="syz.1.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 204.332370][ T30] audit: type=1400 audit(1747038174.035:281): avc: denied { read } for pid=7365 comm="syz.1.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 204.351943][ T30] audit: type=1400 audit(1747038174.175:282): avc: denied { call } for pid=7361 comm="syz.2.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 204.548632][ T5864] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 204.870881][ T5864] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 204.890439][ T5864] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 62976, setting to 1024 [ 204.913853][ T5864] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 204.936598][ T5864] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 204.947910][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 204.957048][ T5864] usb 1-1: Product: syz [ 204.961755][ T5864] usb 1-1: Manufacturer: syz [ 204.968710][ T5864] usb 1-1: SerialNumber: syz [ 205.035170][ T5864] cdc_mbim 1-1:1.0: skipping garbage [ 205.036343][ T30] audit: type=1400 audit(1747038175.263:283): avc: denied { write } for pid=7385 comm="syz.2.362" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 206.047875][ T7364] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 206.108547][ T7384] netlink: 'syz.4.361': attribute type 4 has an invalid length. [ 206.441211][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 207.270333][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 207.270993][ T30] audit: type=1400 audit(1747038176.622:286): avc: denied { write } for pid=7391 comm="syz.3.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 207.308312][ T7364] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 207.452823][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 207.497717][ T9] usb 3-1: config index 0 descriptor too short (expected 19739, got 27) [ 207.510108][ T9] usb 3-1: config 239 has an invalid descriptor of length 70, skipping remainder of the config [ 207.523189][ T7408] netlink: 'syz.4.366': attribute type 10 has an invalid length. [ 207.529856][ T9] usb 3-1: config 239 has 0 interfaces, different from the descriptor's value: 12 [ 207.530906][ T7408] netlink: 40 bytes leftover after parsing attributes in process `syz.4.366'. [ 208.005473][ T5864] cdc_mbim 1-1:1.0: failed to get mac address [ 208.012643][ T5864] cdc_mbim 1-1:1.0: bind() failure [ 208.028092][ T5864] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 208.044785][ T5864] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 208.076338][ T30] audit: type=1400 audit(1747038178.279:287): avc: denied { mount } for pid=7407 comm="syz.4.366" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 208.098316][ C1] vkms_vblank_simulate: vblank timer overrun [ 208.175891][ T5864] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 208.191651][ T7408] team0: Port device geneve0 added [ 208.206361][ T9] usb 3-1: string descriptor 0 read error: -71 [ 208.224259][ T9] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 208.303853][ T5864] usb 1-1: USB disconnect, device number 11 [ 208.346173][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.466226][ T9] usb 3-1: can't set config #239, error -71 [ 208.498921][ T9] usb 3-1: USB disconnect, device number 9 [ 208.587294][ T7457] netlink: 80 bytes leftover after parsing attributes in process `syz.4.371'. [ 208.656828][ T7457] netlink: 80 bytes leftover after parsing attributes in process `syz.4.371'. [ 208.693089][ T7457] netlink: 80 bytes leftover after parsing attributes in process `syz.4.371'. [ 208.715946][ T7457] netlink: 80 bytes leftover after parsing attributes in process `syz.4.371'. [ 208.743205][ T7457] netlink: 80 bytes leftover after parsing attributes in process `syz.4.371'. [ 208.766104][ T7457] netlink: 80 bytes leftover after parsing attributes in process `syz.4.371'. [ 208.775692][ T7457] netlink: 80 bytes leftover after parsing attributes in process `syz.4.371'. [ 208.787148][ T7457] netlink: 80 bytes leftover after parsing attributes in process `syz.4.371'. [ 208.801921][ T7457] netlink: 80 bytes leftover after parsing attributes in process `syz.4.371'. [ 208.854400][ T5864] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 208.874379][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 208.979234][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 209.459148][ T5864] usb 2-1: config 8 has an invalid interface number: 223 but max is 0 [ 209.468375][ T10] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 209.481794][ T5864] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 209.492860][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.507322][ T5864] usb 2-1: config 8 has no interface number 0 [ 209.515955][ T10] usb 5-1: config 0 has no interface number 0 [ 209.522120][ T5864] usb 2-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 209.534153][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 209.542050][ T10] usb 5-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 209.553345][ T5864] usb 2-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 209.566650][ T10] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 209.577922][ T10] usb 5-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 209.593460][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 209.685725][ T7471] netlink: 'syz.2.375': attribute type 4 has an invalid length. [ 210.068903][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 210.079565][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 210.090136][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 210.110079][ T10] usb 5-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 210.120307][ T5864] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 210.141321][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.149406][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.160914][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 210.173722][ T10] usb 5-1: Product: syz [ 210.178034][ T5864] usb 2-1: Product: syz [ 210.182192][ T5864] usb 2-1: Manufacturer: syz [ 210.189156][ T10] usb 5-1: Manufacturer: syz [ 210.193747][ T10] usb 5-1: SerialNumber: syz [ 210.198628][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.206896][ T5864] usb 2-1: SerialNumber: syz [ 210.219098][ T10] usb 5-1: config 0 descriptor?? [ 210.273788][ T10] HFC-S_USB 5-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 210.511840][ T7458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.563483][ T7458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.573156][ T9] usb 4-1: GET_CAPABILITIES returned 0 [ 210.621368][ T7458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.634338][ T9] usbtmc 4-1:16.0: can't read capabilities [ 210.644586][ T7458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.680790][ T7458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.691442][ T7458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.703089][ T7458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.713504][ T7458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.730008][ T7458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.738427][ T1942] usb 4-1: USB disconnect, device number 8 [ 210.759527][ T7458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.782962][ T9] usb 5-1: USB disconnect, device number 7 [ 210.846174][ T5864] usb 2-1: USB disconnect, device number 10 [ 212.108810][ T872] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 212.124499][ T5864] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 212.328600][ T872] usb 4-1: Using ep0 maxpacket: 8 [ 212.346249][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.357417][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.368086][ T872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 212.466988][ T30] audit: type=1400 audit(1747038182.664:288): avc: denied { sqpoll } for pid=7499 comm="syz.0.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 212.486049][ C1] vkms_vblank_simulate: vblank timer overrun [ 212.781647][ T5864] usb 5-1: New USB device found, idVendor=1b96, idProduct=0012, bcdDevice= 0.00 [ 212.790805][ T872] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 212.800461][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.808977][ T872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.821707][ T5864] usb 5-1: config 0 descriptor?? [ 212.827034][ T872] usb 4-1: config 0 descriptor?? [ 213.360471][ T872] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 213.453078][ T7490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.645762][ T7490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.879975][ T5864] usbhid 5-1:0.0: can't add hid device: -71 [ 213.887237][ T5864] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 213.929263][ T5864] usb 5-1: USB disconnect, device number 8 [ 214.361619][ T7530] __nla_validate_parse: 24 callbacks suppressed [ 214.361918][ T7530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.388'. [ 214.649407][ T7530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.388'. [ 214.908458][ T5912] usb 4-1: USB disconnect, device number 9 [ 215.437261][ T7542] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 215.584038][ T7545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.392'. [ 217.150511][ T7559] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 217.509762][ T7562] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 217.540582][ T30] audit: type=1400 audit(1747038187.739:289): avc: denied { bind } for pid=7560 comm="syz.1.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 217.574472][ T30] audit: type=1400 audit(1747038187.739:290): avc: denied { name_bind } for pid=7560 comm="syz.1.397" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 217.650418][ T30] audit: type=1400 audit(1747038187.739:291): avc: denied { node_bind } for pid=7560 comm="syz.1.397" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 217.711166][ T30] audit: type=1400 audit(1747038187.889:292): avc: denied { node_bind } for pid=7557 comm="syz.3.396" saddr=fec0:ffff::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 217.796891][ T30] audit: type=1400 audit(1747038187.999:293): avc: denied { listen } for pid=7557 comm="syz.3.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 217.857254][ T30] audit: type=1400 audit(1747038187.999:294): avc: denied { connect } for pid=7557 comm="syz.3.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 217.889301][ T30] audit: type=1400 audit(1747038188.009:295): avc: denied { accept } for pid=7557 comm="syz.3.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 218.894565][ T872] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 219.157044][ T872] usb 5-1: config 0 has no interfaces? [ 219.171715][ T872] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 219.588548][ T872] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 219.598891][ T872] usb 5-1: Product: syz [ 219.604075][ T872] usb 5-1: Manufacturer: syz [ 219.608987][ T872] usb 5-1: SerialNumber: syz [ 219.623206][ T872] usb 5-1: config 0 descriptor?? [ 219.999790][ T7582] capability: warning: `syz.4.401' uses deprecated v2 capabilities in a way that may be insecure [ 220.012027][ T1942] usb 5-1: USB disconnect, device number 9 [ 220.268168][ T7601] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 221.021616][ T30] audit: type=1400 audit(1747038191.226:296): avc: denied { connect } for pid=7604 comm="syz.0.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 221.040921][ C0] vkms_vblank_simulate: vblank timer overrun [ 221.052005][ T7605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.406'. [ 221.100083][ T7605] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 221.122921][ T7605] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 221.650501][ T7622] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 222.152721][ T30] audit: type=1400 audit(1747038192.355:297): avc: denied { append } for pid=7629 comm="syz.0.411" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 222.175352][ C0] vkms_vblank_simulate: vblank timer overrun [ 222.183751][ T7619] hugetlbfs: syz.1.409 (7619): Using mlock ulimits for SHM_HUGETLB is obsolete [ 222.401391][ T30] audit: type=1400 audit(1747038192.615:298): avc: denied { setopt } for pid=7637 comm="syz.1.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 223.736068][ T30] audit: type=1400 audit(1747038193.944:299): avc: denied { getopt } for pid=7677 comm="syz.2.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 224.137470][ T7695] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 225.008628][ T7701] ./cgroup: Can't lookup blockdev [ 225.230409][ T30] audit: type=1400 audit(1747038195.443:300): avc: denied { bind } for pid=7707 comm="syz.2.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 226.460428][ T7698] netlink: 12 bytes leftover after parsing attributes in process `syz.4.420'. [ 226.471663][ T7698] netlink: 24 bytes leftover after parsing attributes in process `syz.4.420'. [ 226.568390][ T7718] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 227.006893][ T30] audit: type=1400 audit(1747038197.212:301): avc: denied { bind } for pid=7696 comm="syz.4.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 227.512672][ T7731] netlink: 12 bytes leftover after parsing attributes in process `syz.3.427'. [ 227.522091][ T5816] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 227.903269][ T5865] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 227.955475][ T5816] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 227.974745][ T5816] usb 2-1: config 19 has too many interfaces: 252, using maximum allowed: 32 [ 227.990410][ T5816] usb 2-1: config 19 has an invalid descriptor of length 0, skipping remainder of the config [ 228.009043][ T5816] usb 2-1: config 19 has 0 interfaces, different from the descriptor's value: 252 [ 228.018676][ T5816] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 228.030938][ T5816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.074384][ T5865] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 228.091815][ T5865] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 228.106739][ T5865] usb 3-1: config 0 interface 0 has no altsetting 0 [ 228.114295][ T5865] usb 3-1: New USB device found, idVendor=6666, idProduct=8802, bcdDevice= 0.00 [ 228.124560][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.429911][ T5865] usb 3-1: config 0 descriptor?? [ 228.452609][ T7727] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 228.738763][ T7736] ./cgroup: Can't lookup blockdev [ 229.835636][ T5865] smartjoyplus 0003:6666:8802.0001: hidraw0: USB HID v0.00 Device [HID 6666:8802] on usb-dummy_hcd.2-1/input0 [ 230.036345][ T872] usb 2-1: USB disconnect, device number 11 [ 230.197984][ T5865] smartjoyplus 0003:6666:8802.0001: Force feedback for SmartJoy PLUS PS2/USB adapter [ 230.334129][ T7759] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 232.595695][ T7770] netlink: 'syz.4.437': attribute type 4 has an invalid length. [ 232.696613][ T5816] usb 3-1: USB disconnect, device number 10 [ 232.798438][ T30] audit: type=1400 audit(1747038202.998:302): avc: denied { listen } for pid=7761 comm="syz.1.436" lport=60022 faddr=::ffff:100.1.1.1 fport=65532 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 233.174532][ T30] audit: type=1400 audit(1747038203.028:303): avc: denied { accept } for pid=7761 comm="syz.1.436" lport=60022 faddr=::ffff:100.1.1.1 fport=65532 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 233.964397][ T30] audit: type=1400 audit(1747038203.987:304): avc: denied { create } for pid=7776 comm="syz.3.439" name="#f" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 234.661078][ T30] audit: type=1400 audit(1747038203.987:305): avc: denied { link } for pid=7776 comm="syz.3.439" name="#f" dev="tmpfs" ino=480 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 234.684161][ T30] audit: type=1400 audit(1747038203.987:306): avc: denied { rename } for pid=7776 comm="syz.3.439" name="#10" dev="tmpfs" ino=480 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 235.052277][ T7787] IPVS: set_ctl: invalid protocol: 255 10.1.1.1:19999 [ 235.166861][ T5816] IPVS: starting estimator thread 0... [ 235.416440][ T30] audit: type=1400 audit(1747038205.616:307): avc: denied { bind } for pid=7761 comm="syz.1.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 235.507194][ T7788] IPVS: using max 39 ests per chain, 93600 per kthread [ 235.746632][ T7793] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 236.627947][ T5912] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 236.818032][ T5865] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 236.909623][ T5912] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 236.928093][ T5912] usb 3-1: config 19 has too many interfaces: 252, using maximum allowed: 32 [ 236.947169][ T5912] usb 3-1: config 19 has an invalid descriptor of length 0, skipping remainder of the config [ 236.958239][ T5912] usb 3-1: config 19 has 0 interfaces, different from the descriptor's value: 252 [ 236.968124][ T5912] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 236.977336][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.997972][ T5865] usb 1-1: Using ep0 maxpacket: 8 [ 237.004268][ T5865] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 237.028130][ T5865] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 237.058179][ T5865] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 237.108177][ T5865] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 237.138176][ T5865] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 237.161202][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.196119][ T7812] netlink: 20 bytes leftover after parsing attributes in process `syz.3.448'. [ 237.223356][ T7812] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 237.234869][ T30] audit: type=1400 audit(1747038207.395:308): avc: denied { create } for pid=7811 comm="syz.3.448" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 237.375614][ T5865] usb 1-1: GET_CAPABILITIES returned 0 [ 237.381459][ T5865] usbtmc 1-1:16.0: can't read capabilities [ 237.563111][ T7820] overlay: Unknown parameter 'fsuuid' [ 237.631300][ T30] audit: type=1400 audit(1747038207.765:309): avc: denied { mounton } for pid=7818 comm="syz.4.450" path="/90/file0/bus" dev="hugetlbfs" ino=14899 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 237.698697][ T30] audit: type=1400 audit(1747038207.825:310): avc: denied { listen } for pid=7818 comm="syz.4.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 237.862537][ T7823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.446'. [ 238.393057][ T30] audit: type=1400 audit(1747038208.594:311): avc: denied { unlink } for pid=5808 comm="syz-executor" name="file0" dev="tmpfs" ino=498 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 238.819610][ T1942] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 239.176057][ T1942] usb 4-1: config 0 has no interfaces? [ 239.181510][ T30] audit: type=1400 audit(1747038209.384:312): avc: denied { ioctl } for pid=7834 comm="syz.4.454" path="socket:[14296]" dev="sockfs" ino=14296 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 239.308057][ T872] usb 3-1: USB disconnect, device number 11 [ 239.669246][ T5912] usb 1-1: USB disconnect, device number 12 [ 239.699320][ T1942] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 239.708697][ T1942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.716773][ T1942] usb 4-1: Product: syz [ 239.723168][ T1942] usb 4-1: Manufacturer: syz [ 239.737710][ T1942] usb 4-1: SerialNumber: syz [ 239.847061][ T7838] netlink: 36 bytes leftover after parsing attributes in process `syz.4.454'. [ 240.008828][ T1942] usb 4-1: config 0 descriptor?? [ 240.131955][ T7849] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 240.468730][ T7850] fuse: Unknown parameter 'rœè}’!ootmode' [ 240.980098][ T7853] veth1_macvtap: left promiscuous mode [ 240.985573][ T7853] macsec0: entered promiscuous mode [ 241.069512][ T30] audit: type=1326 audit(1747038211.263:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7825 comm="syz.3.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ccd8e969 code=0x7ffc0000 [ 241.097597][ T7853] syz.1.458: attempt to access beyond end of device [ 241.097597][ T7853] nbd1: rw=0, sector=64, nr_sectors = 1 limit=0 [ 241.111152][ T7853] syz.1.458: attempt to access beyond end of device [ 241.111152][ T7853] nbd1: rw=0, sector=256, nr_sectors = 1 limit=0 [ 241.124638][ T7853] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 241.134332][ T7853] syz.1.458: attempt to access beyond end of device [ 241.134332][ T7853] nbd1: rw=0, sector=512, nr_sectors = 1 limit=0 [ 241.147145][ T7853] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 241.157832][ T7853] syz.1.458: attempt to access beyond end of device [ 241.157832][ T7853] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 241.170664][ T7853] syz.1.458: attempt to access beyond end of device [ 241.170664][ T7853] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 241.184701][ T7853] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 241.194268][ T7853] syz.1.458: attempt to access beyond end of device [ 241.194268][ T7853] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 241.207278][ T7853] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 241.217662][ T7853] syz.1.458: attempt to access beyond end of device [ 241.217662][ T7853] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 241.230473][ T7853] syz.1.458: attempt to access beyond end of device [ 241.230473][ T7853] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 241.244001][ T7853] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 241.253544][ T7853] syz.1.458: attempt to access beyond end of device [ 241.253544][ T7853] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 241.266531][ T7853] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 241.276890][ T7853] syz.1.458: attempt to access beyond end of device [ 241.276890][ T7853] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 241.290461][ T7853] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 241.300046][ T7853] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 241.310225][ T7853] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 241.327597][ T30] audit: type=1326 audit(1747038211.263:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7825 comm="syz.3.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f55ccd8e969 code=0x7ffc0000 [ 241.350693][ C1] vkms_vblank_simulate: vblank timer overrun [ 241.418885][ T30] audit: type=1326 audit(1747038211.263:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7825 comm="syz.3.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ccd8e969 code=0x7ffc0000 [ 241.462352][ T30] audit: type=1326 audit(1747038211.263:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7825 comm="syz.3.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f55ccd8e969 code=0x7ffc0000 [ 241.485467][ C1] vkms_vblank_simulate: vblank timer overrun [ 241.494730][ T30] audit: type=1326 audit(1747038211.263:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7825 comm="syz.3.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ccd8e969 code=0x7ffc0000 [ 241.517906][ C1] vkms_vblank_simulate: vblank timer overrun [ 241.531868][ T30] audit: type=1401 audit(1747038211.463:318): op=fscreate invalid_context="}" [ 241.540963][ T30] audit: type=1326 audit(1747038211.612:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7825 comm="syz.3.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f55ccd8e969 code=0x7ffc0000 [ 241.564552][ T30] audit: type=1400 audit(1747038211.612:320): avc: denied { watch watch_reads } for pid=7825 comm="syz.3.451" path="/87" dev="tmpfs" ino=500 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 241.852018][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 241.879147][ T7867] input input39: cannot allocate more than FF_MAX_EFFECTS effects [ 241.980696][ T1942] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 242.174888][ T1942] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 242.191720][ T1942] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.204267][ T1942] usb 2-1: config 0 has no interface number 0 [ 242.210408][ T1942] usb 2-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 242.232846][ T10] usb 1-1: config 0 has no interfaces? [ 242.240374][ T10] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 242.249659][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.259402][ T10] usb 1-1: Product: syz [ 242.434153][ T1942] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 242.530904][ T5865] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 242.650175][ T1942] usb 2-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 242.668949][ T10] usb 1-1: Manufacturer: syz [ 242.677977][ T1942] usb 2-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 242.689440][ T1942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.700060][ T1942] usb 2-1: Product: syz [ 242.705867][ T1942] usb 2-1: Manufacturer: syz [ 242.715299][ T10] usb 1-1: SerialNumber: syz [ 242.718110][ T1942] usb 2-1: SerialNumber: syz [ 242.737889][ T1942] usb 2-1: config 0 descriptor?? [ 242.745249][ T5865] usb 5-1: Using ep0 maxpacket: 16 [ 242.751887][ T5865] usb 5-1: config 0 has an invalid descriptor of length 249, skipping remainder of the config [ 242.764602][ T1942] HFC-S_USB 2-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 242.774056][ T5865] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 242.798420][ T5865] usb 5-1: New USB device found, idVendor=54ac, idProduct=91cf, bcdDevice= 0.71 [ 242.816726][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.833762][ T10] usb 1-1: config 0 descriptor?? [ 242.834937][ T5865] usb 5-1: config 0 descriptor?? [ 243.152171][ T7861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.176104][ T872] usb 4-1: USB disconnect, device number 10 [ 243.179714][ T5912] usb 2-1: USB disconnect, device number 12 [ 243.229795][ T7861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.534586][ T7885] FAULT_INJECTION: forcing a failure. [ 244.534586][ T7885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.584248][ T7885] CPU: 0 UID: 0 PID: 7885 Comm: syz.2.466 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 244.584273][ T7885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 244.584282][ T7885] Call Trace: [ 244.584287][ T7885] [ 244.584294][ T7885] dump_stack_lvl+0x16c/0x1f0 [ 244.584321][ T7885] should_fail_ex+0x512/0x640 [ 244.584344][ T7885] _copy_from_user+0x2e/0xd0 [ 244.584367][ T7885] load_msg+0x253/0x4a0 [ 244.584394][ T7885] do_msgsnd+0x1a7/0x17b0 [ 244.584411][ T7885] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 244.584438][ T7885] ? __pfx_do_msgsnd+0x10/0x10 [ 244.584455][ T7885] ? find_held_lock+0x2b/0x80 [ 244.584480][ T7885] ? __might_fault+0xe3/0x190 [ 244.584495][ T7885] ? __might_fault+0xe3/0x190 [ 244.584513][ T7885] ? __might_fault+0x13b/0x190 [ 244.584533][ T7885] ? __x64_sys_msgsnd+0xe5/0x130 [ 244.584556][ T7885] __x64_sys_msgsnd+0xe5/0x130 [ 244.584574][ T7885] do_syscall_64+0xcd/0x260 [ 244.584597][ T7885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.584613][ T7885] RIP: 0033:0x7f226698e969 [ 244.584625][ T7885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.584640][ T7885] RSP: 002b:00007f226785a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000045 [ 244.584656][ T7885] RAX: ffffffffffffffda RBX: 00007f2266bb6080 RCX: 00007f226698e969 [ 244.584667][ T7885] RDX: 0000000000002000 RSI: 0000200000000300 RDI: 0000000000000000 [ 244.584676][ T7885] RBP: 00007f226785a090 R08: 0000000000000000 R09: 0000000000000000 [ 244.584685][ T7885] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 244.584693][ T7885] R13: 0000000000000001 R14: 00007f2266bb6080 R15: 00007ffc0d5215c8 [ 244.584714][ T7885] [ 244.787318][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 244.787333][ T30] audit: type=1400 audit(1747038214.970:343): avc: denied { write } for pid=7886 comm="syz.1.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 244.896176][ T10] usb 1-1: USB disconnect, device number 13 [ 246.432507][ T5865] usb 5-1: string descriptor 0 read error: -71 [ 246.442752][ T5865] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 249.903013][ T7915] netlink: 'syz.4.473': attribute type 4 has an invalid length. [ 251.040970][ T5865] usb 5-1: USB disconnect, device number 10 [ 251.218375][ T30] audit: type=1326 audit(1747038734.264:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7919 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776ed8e969 code=0x7ffc0000 [ 251.337800][ T30] audit: type=1326 audit(1747038734.293:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7919 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776ed8e969 code=0x7ffc0000 [ 251.602593][ T7931] netlink: 'syz.1.475': attribute type 4 has an invalid length. [ 252.651970][ T30] audit: type=1326 audit(1747038734.293:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7919 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f776ed8e969 code=0x7ffc0000 [ 252.677319][ T30] audit: type=1326 audit(1747038734.293:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7919 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776ed8e969 code=0x7ffc0000 [ 252.712512][ T7934] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7934 comm=syz.0.479 [ 252.759677][ T7935] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=41 sclass=netlink_tcpdiag_socket pid=7935 comm=syz.0.479 [ 253.617389][ T30] audit: type=1326 audit(1747038734.293:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7919 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776ed8e969 code=0x7ffc0000 [ 256.827202][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.865513][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.002119][ T7980] binder: 7976:7980 ioctl c0306201 200000001a80 returned -11 [ 257.307809][ T30] audit: type=1400 audit(1747038740.235:349): avc: denied { mount } for pid=7981 comm="syz.0.491" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 257.689104][ T872] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 257.873988][ T872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.311948][ T872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.363128][ T872] usb 4-1: New USB device found, idVendor=1b96, idProduct=0012, bcdDevice= 0.00 [ 258.521762][ T872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.548707][ T872] usb 4-1: config 0 descriptor?? [ 258.673921][ T8005] hub 8-0:1.0: USB hub found [ 258.681576][ T8005] hub 8-0:1.0: 1 port detected [ 259.075484][ T30] audit: type=1400 audit(1747038741.978:350): avc: denied { write } for pid=8006 comm="syz.1.496" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 259.094317][ C0] vkms_vblank_simulate: vblank timer overrun [ 259.189744][ T30] audit: type=1400 audit(1747038742.076:351): avc: denied { create } for pid=8006 comm="syz.1.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 259.364719][ T30] audit: type=1400 audit(1747038742.086:352): avc: denied { ioctl } for pid=8006 comm="syz.1.496" path="socket:[15099]" dev="sockfs" ino=15099 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 259.938236][ T8016] /dev/nullb0: Can't open blockdev [ 260.005972][ T8017] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 260.823812][ T30] audit: type=1400 audit(1747038743.654:353): avc: denied { setopt } for pid=8025 comm="syz.1.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 261.573325][ T5912] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 261.749123][ T30] audit: type=1400 audit(1747038744.582:354): avc: denied { setopt } for pid=8041 comm="syz.4.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 262.050039][ T8047] netlink: 52 bytes leftover after parsing attributes in process `syz.0.505'. [ 262.415282][ T30] audit: type=1400 audit(1747038744.602:355): avc: denied { write } for pid=8041 comm="syz.4.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 262.708519][ T5912] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 262.716901][ T5912] usb 3-1: config 19 has too many interfaces: 252, using maximum allowed: 32 [ 262.735888][ T5912] usb 3-1: config 19 has an invalid descriptor of length 0, skipping remainder of the config [ 262.757410][ T5912] usb 3-1: config 19 has 0 interfaces, different from the descriptor's value: 252 [ 262.776935][ T5912] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 262.827751][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.849612][ T8040] FAULT_INJECTION: forcing a failure. [ 262.849612][ T8040] name failslab, interval 1, probability 0, space 0, times 0 [ 262.894111][ T8040] CPU: 0 UID: 0 PID: 8040 Comm: syz.1.504 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 262.894135][ T8040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 262.894145][ T8040] Call Trace: [ 262.894150][ T8040] [ 262.894157][ T8040] dump_stack_lvl+0x16c/0x1f0 [ 262.894188][ T8040] should_fail_ex+0x512/0x640 [ 262.894209][ T8040] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 262.894238][ T8040] should_failslab+0xc2/0x120 [ 262.894256][ T8040] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 262.894281][ T8040] ? security_file_alloc+0x34/0x2b0 [ 262.894308][ T8040] security_file_alloc+0x34/0x2b0 [ 262.894331][ T8040] init_file+0x93/0x4c0 [ 262.894350][ T8040] alloc_empty_file+0x73/0x1e0 [ 262.894369][ T8040] alloc_file_pseudo+0x13a/0x230 [ 262.894390][ T8040] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 262.894407][ T8040] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 262.894438][ T8040] create_pipe_files+0x364/0x930 [ 262.894457][ T8040] do_pipe2+0xaf/0x1c0 [ 262.894472][ T8040] ? __pfx_do_pipe2+0x10/0x10 [ 262.894491][ T8040] ? arch_syscall_is_vdso_sigreturn+0xb6/0x230 [ 262.894526][ T8040] __x64_sys_pipe+0x33/0x50 [ 262.894542][ T8040] do_syscall_64+0xcd/0x260 [ 262.894565][ T8040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.894581][ T8040] RIP: 0033:0x7f6ced18e969 [ 262.894595][ T8040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.894611][ T8040] RSP: 002b:00007f6cee02a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 262.894628][ T8040] RAX: ffffffffffffffda RBX: 00007f6ced3b5fa0 RCX: 00007f6ced18e969 [ 262.894639][ T8040] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000580 [ 262.894648][ T8040] RBP: 00007f6cee02a090 R08: 0000000000000000 R09: 0000000000000000 [ 262.894657][ T8040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.894667][ T8040] R13: 0000000000000000 R14: 00007f6ced3b5fa0 R15: 00007ffda8b92fd8 [ 262.894689][ T8040] [ 263.957074][ T872] usbhid 4-1:0.0: can't add hid device: -71 [ 263.967260][ T872] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 264.007441][ T872] usb 4-1: USB disconnect, device number 11 [ 264.098490][ T8069] netlink: 292 bytes leftover after parsing attributes in process `syz.4.511'. [ 264.109466][ T8069] netlink: 'syz.4.511': attribute type 1 has an invalid length. [ 264.118305][ T8069] netlink: 24 bytes leftover after parsing attributes in process `syz.4.511'. [ 264.366095][ T8076] IPVS: set_ctl: invalid protocol: 255 10.1.1.1:19999 [ 264.650351][ T8077] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 265.195633][ T1942] IPVS: starting estimator thread 0... [ 265.270330][ T10] usb 3-1: USB disconnect, device number 12 [ 265.324689][ T30] audit: type=1326 audit(1747038748.123:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8071 comm="syz.4.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630b98e969 code=0x7fc00000 [ 265.355258][ T8079] IPVS: using max 47 ests per chain, 112800 per kthread [ 265.401952][ T30] audit: type=1326 audit(1747038748.123:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8071 comm="syz.4.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f630b98e969 code=0x7fc00000 [ 265.530336][ T30] audit: type=1326 audit(1747038748.123:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8071 comm="syz.4.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630b98e969 code=0x7fc00000 [ 265.557362][ T30] audit: type=1326 audit(1747038748.123:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8071 comm="syz.4.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630b98e969 code=0x7fc00000 [ 265.668100][ T30] audit: type=1326 audit(1747038748.123:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8071 comm="syz.4.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630b98e969 code=0x7fc00000 [ 265.731932][ T30] audit: type=1326 audit(1747038748.123:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8071 comm="syz.4.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630b98e969 code=0x7fc00000 [ 265.759502][ T30] audit: type=1326 audit(1747038748.123:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8071 comm="syz.4.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630b98e969 code=0x7fc00000 [ 265.784953][ T30] audit: type=1326 audit(1747038748.123:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8071 comm="syz.4.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630b98e969 code=0x7fc00000 [ 265.813542][ T30] audit: type=1326 audit(1747038748.123:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8071 comm="syz.4.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630b98e969 code=0x7fc00000 [ 267.252154][ T8114] xt_CT: No such helper "snmp_trap" [ 268.141572][ T1942] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 268.324241][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 268.324257][ T30] audit: type=1400 audit(1747038751.125:423): avc: denied { read } for pid=8132 comm="syz.2.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 268.324601][ T1942] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 269.273637][ T1942] usb 5-1: config 19 has too many interfaces: 252, using maximum allowed: 32 [ 269.672757][ T1942] usb 5-1: config 19 has an invalid descriptor of length 0, skipping remainder of the config [ 269.959769][ T1942] usb 5-1: config 19 has 0 interfaces, different from the descriptor's value: 252 [ 270.039830][ T1942] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 270.122311][ T1942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.605465][ T1942] usb 5-1: USB disconnect, device number 11 [ 270.649533][ T30] audit: type=1400 audit(1747038753.418:424): avc: denied { create } for pid=8148 comm="syz.4.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 272.341555][ T5816] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 272.748647][ T5816] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 272.769794][ T5816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.791388][ T8180] ./cgroup: Can't lookup blockdev [ 272.998875][ T5816] usb 4-1: config 0 descriptor?? [ 273.028548][ T5816] gspca_main: spca508-2.14.0 probing 8086:0110 [ 273.258290][ T1942] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 273.389493][ T8172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.399781][ T5816] gspca_spca508: reg_read err -32 [ 273.481858][ T8172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.560828][ T1942] usb 2-1: Using ep0 maxpacket: 8 [ 273.573031][ T1942] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 273.581703][ T1942] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 273.590403][ T1942] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 273.600740][ T1942] usb 2-1: config 250 has no interface number 0 [ 273.607019][ T1942] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 273.618962][ T1942] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 273.630853][ T1942] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 273.643167][ T1942] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 273.653735][ T1942] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 273.692164][ T1942] usb 2-1: config 250 interface 228 has no altsetting 0 [ 273.711940][ T1942] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 273.732071][ T1942] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 273.736227][ T8201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.755131][ T1942] usb 2-1: Product: syz [ 273.759302][ T1942] usb 2-1: SerialNumber: syz [ 273.761383][ T8201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.777655][ T1942] hub 2-1:250.228: bad descriptor, ignoring hub [ 273.798741][ T1942] hub 2-1:250.228: probe with driver hub failed with error -5 [ 273.816694][ T5816] gspca_spca508: reg_read err -71 [ 273.857162][ T5816] gspca_spca508: reg_read err -71 [ 273.867304][ T5816] gspca_spca508: reg_read err -71 [ 273.883603][ T5816] gspca_spca508: reg write: error -71 [ 273.902603][ T5816] spca508 4-1:0.0: probe with driver spca508 failed with error -71 [ 273.935140][ T5816] usb 4-1: USB disconnect, device number 12 [ 273.983992][ T1942] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 13 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 274.385384][ T1942] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 274.606580][ T5912] usb 2-1: USB disconnect, device number 13 [ 274.614270][ T1942] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.628601][ T5912] usblp0: removed [ 274.651564][ T8219] netlink: 28 bytes leftover after parsing attributes in process `syz.0.544'. [ 274.655033][ T1942] usb 5-1: config 0 has no interfaces? [ 274.670686][ T1942] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 274.680924][ T1942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.692085][ T1942] usb 5-1: config 0 descriptor?? [ 274.787846][ T5816] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 274.959958][ T5816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.970997][ T5816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.980877][ T5816] usb 4-1: New USB device found, idVendor=1b96, idProduct=0012, bcdDevice= 0.00 [ 274.990124][ T5816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.000775][ T5816] usb 4-1: config 0 descriptor?? [ 275.059054][ T8224] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 275.066611][ T8224] UDF-fs: Scanning with blocksize 512 failed [ 275.073815][ T8224] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 275.081683][ T8224] UDF-fs: Scanning with blocksize 1024 failed [ 275.088857][ T8224] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 275.096328][ T8224] UDF-fs: Scanning with blocksize 2048 failed [ 275.102751][ T8224] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 275.110668][ T8224] UDF-fs: Scanning with blocksize 4096 failed [ 275.123826][ T8223] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 275.131403][ T8223] UDF-fs: Scanning with blocksize 512 failed [ 275.137720][ T8223] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 275.146073][ T8223] UDF-fs: Scanning with blocksize 1024 failed [ 275.152461][ T8223] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 275.160041][ T8223] UDF-fs: Scanning with blocksize 2048 failed [ 275.167076][ T8223] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 275.175347][ T8223] UDF-fs: Scanning with blocksize 4096 failed [ 275.290274][ T8228] FAULT_INJECTION: forcing a failure. [ 275.290274][ T8228] name failslab, interval 1, probability 0, space 0, times 0 [ 275.305211][ T8228] CPU: 0 UID: 0 PID: 8228 Comm: syz.1.546 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 275.305227][ T8228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 275.305233][ T8228] Call Trace: [ 275.305237][ T8228] [ 275.305241][ T8228] dump_stack_lvl+0x16c/0x1f0 [ 275.305259][ T8228] should_fail_ex+0x512/0x640 [ 275.305273][ T8228] ? fs_reclaim_acquire+0xae/0x150 [ 275.305289][ T8228] ? tomoyo_encode2+0x100/0x3e0 [ 275.305303][ T8228] should_failslab+0xc2/0x120 [ 275.305314][ T8228] __kmalloc_noprof+0xd2/0x510 [ 275.305330][ T8228] ? d_absolute_path+0x136/0x1a0 [ 275.305345][ T8228] tomoyo_encode2+0x100/0x3e0 [ 275.305360][ T8228] tomoyo_encode+0x29/0x50 [ 275.305373][ T8228] tomoyo_realpath_from_path+0x18f/0x6e0 [ 275.305393][ T8228] tomoyo_path_number_perm+0x245/0x580 [ 275.305405][ T8228] ? tomoyo_path_number_perm+0x237/0x580 [ 275.305418][ T8228] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 275.305431][ T8228] ? find_held_lock+0x2b/0x80 [ 275.305455][ T8228] ? find_held_lock+0x2b/0x80 [ 275.305466][ T8228] ? hook_file_ioctl_common+0x145/0x410 [ 275.305479][ T8228] ? __fget_files+0x20e/0x3c0 [ 275.305496][ T8228] security_file_ioctl+0x9b/0x240 [ 275.305511][ T8228] __x64_sys_ioctl+0xb7/0x200 [ 275.305525][ T8228] do_syscall_64+0xcd/0x260 [ 275.305540][ T8228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.305550][ T8228] RIP: 0033:0x7f6ced18e969 [ 275.305558][ T8228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.305567][ T8228] RSP: 002b:00007f6cee02a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 275.305577][ T8228] RAX: ffffffffffffffda RBX: 00007f6ced3b5fa0 RCX: 00007f6ced18e969 [ 275.305584][ T8228] RDX: 0000200000000080 RSI: 0000000000004b4c RDI: 0000000000000003 [ 275.305589][ T8228] RBP: 00007f6cee02a090 R08: 0000000000000000 R09: 0000000000000000 [ 275.305595][ T8228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.305600][ T8228] R13: 0000000000000000 R14: 00007f6ced3b5fa0 R15: 00007ffda8b92fd8 [ 275.305613][ T8228] [ 275.305636][ T8228] ERROR: Out of memory at tomoyo_realpath_from_path. [ 276.838256][ T10] usb 5-1: USB disconnect, device number 12 [ 278.343248][ T5816] usbhid 4-1:0.0: can't add hid device: -71 [ 278.350059][ T5816] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 278.387757][ T5816] usb 4-1: USB disconnect, device number 13 [ 278.526724][ T8271] hub 8-0:1.0: USB hub found [ 278.545367][ T8271] hub 8-0:1.0: 1 port detected [ 279.665433][ T8295] netlink: 24 bytes leftover after parsing attributes in process `syz.0.564'. [ 280.081430][ T30] audit: type=1400 audit(1747038762.806:425): avc: denied { wake_alarm } for pid=8289 comm="syz.2.563" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 280.237046][ T8301] netlink: 52 bytes leftover after parsing attributes in process `syz.2.563'. [ 280.629422][ T8307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.567'. [ 280.707824][ T8307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.567'. [ 280.726108][ T8307] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.735041][ T8307] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.743695][ T8307] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.752627][ T8307] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.176447][ T8307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.567'. [ 281.187494][ T8307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.567'. [ 282.496541][ T30] audit: type=1400 audit(1747038765.216:426): avc: denied { append } for pid=8328 comm="syz.1.573" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 283.170792][ T30] audit: type=1400 audit(1747038765.884:427): avc: denied { getopt } for pid=8338 comm="syz.0.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 283.411083][ T30] audit: type=1326 audit(1747038766.123:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8344 comm="syz.4.578" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f630b98e969 code=0x0 [ 283.781588][ T8347] can0: slcan on ttyS3. [ 283.788589][ T8350] FAULT_INJECTION: forcing a failure. [ 283.788589][ T8350] name failslab, interval 1, probability 0, space 0, times 0 [ 283.801712][ T8350] CPU: 1 UID: 0 PID: 8350 Comm: syz.1.579 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 283.801732][ T8350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 283.801741][ T8350] Call Trace: [ 283.801746][ T8350] [ 283.801752][ T8350] dump_stack_lvl+0x16c/0x1f0 [ 283.801778][ T8350] should_fail_ex+0x512/0x640 [ 283.801798][ T8350] ? fs_reclaim_acquire+0xae/0x150 [ 283.801821][ T8350] ? tomoyo_encode2+0x100/0x3e0 [ 283.801843][ T8350] should_failslab+0xc2/0x120 [ 283.801860][ T8350] __kmalloc_noprof+0xd2/0x510 [ 283.801885][ T8350] ? d_absolute_path+0x136/0x1a0 [ 283.801908][ T8350] tomoyo_encode2+0x100/0x3e0 [ 283.801931][ T8350] tomoyo_encode+0x29/0x50 [ 283.801953][ T8350] tomoyo_realpath_from_path+0x18f/0x6e0 [ 283.801983][ T8350] tomoyo_mount_acl+0x1ae/0x850 [ 283.802002][ T8350] ? kernel_text_address+0x8d/0x100 [ 283.802020][ T8350] ? __kernel_text_address+0xd/0x40 [ 283.802037][ T8350] ? unwind_get_return_address+0x59/0xa0 [ 283.802056][ T8350] ? arch_stack_walk+0xa6/0x100 [ 283.802076][ T8350] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 283.802122][ T8350] ? tomoyo_domain+0xbb/0x150 [ 283.802137][ T8350] ? tomoyo_profile+0x47/0x60 [ 283.802154][ T8350] tomoyo_mount_permission+0x16d/0x420 [ 283.802175][ T8350] ? tomoyo_mount_permission+0x14f/0x420 [ 283.802198][ T8350] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 283.802234][ T8350] security_sb_mount+0x9b/0x260 [ 283.802257][ T8350] path_mount+0x128/0x1f20 [ 283.802276][ T8350] ? kmem_cache_free+0x2d4/0x4d0 [ 283.802300][ T8350] ? __pfx_path_mount+0x10/0x10 [ 283.802321][ T8350] ? putname+0x154/0x1a0 [ 283.802342][ T8350] __x64_sys_mount+0x28d/0x310 [ 283.802360][ T8350] ? __pfx___x64_sys_mount+0x10/0x10 [ 283.802391][ T8350] do_syscall_64+0xcd/0x260 [ 283.802416][ T8350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.802432][ T8350] RIP: 0033:0x7f6ced18e969 [ 283.802446][ T8350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.802461][ T8350] RSP: 002b:00007f6cee02a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 283.802478][ T8350] RAX: ffffffffffffffda RBX: 00007f6ced3b5fa0 RCX: 00007f6ced18e969 [ 283.802488][ T8350] RDX: 00002000000000c0 RSI: 0000200000000040 RDI: 0000200000000000 [ 283.802499][ T8350] RBP: 00007f6cee02a090 R08: 0000000000000000 R09: 0000000000000000 [ 283.802508][ T8350] R10: 000000000021864a R11: 0000000000000246 R12: 0000000000000001 [ 283.802518][ T8350] R13: 0000000000000000 R14: 00007f6ced3b5fa0 R15: 00007ffda8b92fd8 [ 283.802540][ T8350] [ 283.802556][ T8350] ERROR: Out of memory at tomoyo_realpath_from_path. [ 284.462004][ T8353] can0 (unregistered): slcan off ttyS3. [ 284.655839][ T8362] can0: slcan on ttyS3. [ 284.702180][ T30] audit: type=1400 audit(1747038767.399:429): avc: denied { search } for pid=5480 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.768155][ T30] audit: type=1400 audit(1747038767.399:430): avc: denied { read } for pid=5480 comm="dhcpcd" name="n103" dev="tmpfs" ino=4092 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 284.825811][ T30] audit: type=1400 audit(1747038767.399:431): avc: denied { open } for pid=5480 comm="dhcpcd" path="/run/udev/data/n103" dev="tmpfs" ino=4092 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 284.857836][ T30] audit: type=1400 audit(1747038767.399:432): avc: denied { getattr } for pid=5480 comm="dhcpcd" path="/run/udev/data/n103" dev="tmpfs" ino=4092 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 284.886489][ T30] audit: type=1400 audit(1747038767.518:433): avc: denied { allowed } for pid=8367 comm="syz.0.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 284.921260][ T8360] can0 (unregistered): slcan off ttyS3. [ 285.473471][ T30] audit: type=1400 audit(1747038768.186:434): avc: denied { read } for pid=8383 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.496430][ C1] vkms_vblank_simulate: vblank timer overrun [ 285.816340][ T30] audit: type=1400 audit(1747038768.186:435): avc: denied { open } for pid=8383 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.940203][ T30] audit: type=1400 audit(1747038768.186:436): avc: denied { getattr } for pid=8383 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.965464][ C1] vkms_vblank_simulate: vblank timer overrun [ 286.060703][ T30] audit: type=1400 audit(1747038768.765:437): avc: denied { write } for pid=8372 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 286.083682][ C1] vkms_vblank_simulate: vblank timer overrun [ 287.591708][ T30] audit: type=1400 audit(1747038768.804:438): avc: denied { add_name } for pid=8372 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 287.614370][ T30] audit: type=1400 audit(1747038768.804:439): avc: denied { create } for pid=8372 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 287.636647][ C1] vkms_vblank_simulate: vblank timer overrun [ 287.838334][ T5816] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 288.113899][ T5816] usb 4-1: config 84 has an invalid interface number: 212 but max is 0 [ 288.136413][ T30] audit: type=1400 audit(1747038768.804:440): avc: denied { write } for pid=8372 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.can0.link" dev="tmpfs" ino=4108 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 288.162384][ C1] vkms_vblank_simulate: vblank timer overrun [ 288.174467][ T30] audit: type=1400 audit(1747038768.894:441): avc: denied { append } for pid=8372 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" dev="tmpfs" ino=4108 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 288.206608][ T5816] usb 4-1: config 84 has no interface number 0 [ 288.221268][ T5816] usb 4-1: New USB device found, idVendor=04b8, idProduct=0601, bcdDevice= 1.00 [ 288.254630][ T30] audit: type=1400 audit(1747038770.719:442): avc: denied { remove_name } for pid=8414 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=4108 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 288.345423][ T5816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.353744][ T5816] usb 4-1: Product: syz [ 288.357911][ T5816] usb 4-1: Manufacturer: syz [ 288.362657][ T5816] usb 4-1: SerialNumber: syz [ 288.379523][ T5816] usb-storage 4-1:84.212: USB Mass Storage device detected [ 288.398728][ T30] audit: type=1400 audit(1747038770.719:443): avc: denied { unlink } for pid=8414 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=4108 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 288.490589][ T872] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 289.073921][ T872] usb 5-1: config 0 has no interfaces? [ 289.155634][ T5816] usb-storage 4-1:84.212: Quirks match for vid 04b8 pid 0601: 8 [ 289.315070][ T8440] trusted_key: syz.0.598 sent an empty control message without MSG_MORE. [ 289.318770][ T5816] usb-storage 4-1:84.212: This device (04b8,0601,0100 S ba P 01) has an unneeded Protocol entry in unusual_devs.h (kernel 6.15.0-rc6-syzkaller) [ 289.318770][ T5816] Please send a copy of this message to and [ 289.363771][ T872] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 289.391284][ T872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.412547][ T872] usb 5-1: Product: syz [ 289.499065][ T872] usb 5-1: Manufacturer: syz [ 289.711806][ T872] usb 5-1: SerialNumber: syz [ 289.727998][ T872] usb 5-1: config 0 descriptor?? [ 290.050948][ T5816] usb 4-1: USB disconnect, device number 14 [ 291.206334][ T5864] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 292.924776][ T30] audit: type=1400 audit(1747038775.518:444): avc: denied { read write } for pid=8471 comm="syz.2.605" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 293.233623][ T30] audit: type=1400 audit(1747038775.518:445): avc: denied { open } for pid=8471 comm="syz.2.605" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 293.383776][ T30] audit: type=1400 audit(1747038775.528:446): avc: denied { ioctl } for pid=8471 comm="syz.2.605" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 293.508492][ T872] usb 5-1: can't set config #0, error -71 [ 293.531375][ T872] usb 5-1: USB disconnect, device number 13 [ 294.397898][ T5816] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 294.731619][ T5912] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 294.758654][ T5816] usb 4-1: Using ep0 maxpacket: 8 [ 295.184273][ T5816] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 295.296348][ T5816] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.308151][ T30] audit: type=1400 audit(1747038777.993:447): avc: denied { map } for pid=8512 comm="syz.0.615" path="socket:[17728]" dev="sockfs" ino=17728 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 295.331281][ C1] vkms_vblank_simulate: vblank timer overrun [ 295.333475][ T5816] usb 4-1: config 0 has no interface number 0 [ 295.345590][ T30] audit: type=1400 audit(1747038777.993:448): avc: denied { read accept } for pid=8512 comm="syz.0.615" path="socket:[17728]" dev="sockfs" ino=17728 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 295.369382][ C1] vkms_vblank_simulate: vblank timer overrun [ 295.391613][ T5816] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 295.402733][ T5816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.405204][ T5912] usb 5-1: device descriptor read/64, error -71 [ 295.418239][ T5816] usb 4-1: Product: syz [ 295.422666][ T5816] usb 4-1: Manufacturer: syz [ 295.428533][ T5816] usb 4-1: SerialNumber: syz [ 295.444999][ T5816] usb 4-1: config 0 descriptor?? [ 295.655763][ T5912] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 295.762753][ T5816] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 295.769524][ T5816] usb 4-1: No valid video chain found. [ 296.258011][ T5912] usb 5-1: device descriptor read/64, error -71 [ 296.316945][ T5816] usb 4-1: USB disconnect, device number 15 [ 296.367698][ T5912] usb usb5-port1: attempt power cycle [ 296.778489][ T5912] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 296.810136][ T5912] usb 5-1: device descriptor read/8, error -71 [ 298.081931][ T8551] bridge0: port 3(veth0_to_bridge) entered blocking state [ 298.089327][ T8551] bridge0: port 3(veth0_to_bridge) entered disabled state [ 298.191373][ T8551] veth0_to_bridge: entered allmulticast mode [ 298.304507][ T8551] veth0_to_bridge: entered promiscuous mode [ 298.310699][ T8551] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 298.360756][ T8551] bridge0: port 3(veth0_to_bridge) entered blocking state [ 298.368337][ T8551] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 299.040714][ T8570] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 299.688357][ T30] audit: type=1400 audit(1747038782.365:449): avc: denied { connect } for pid=8575 comm="syz.1.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 299.923485][ T8578] netlink: 24 bytes leftover after parsing attributes in process `syz.4.630'. [ 301.007807][ T8589] netlink: 12 bytes leftover after parsing attributes in process `syz.3.635'. [ 301.985784][ T8606] IPVS: set_ctl: invalid protocol: 255 10.1.1.1:19999 [ 302.464367][ T5864] IPVS: starting estimator thread 0... [ 302.773978][ T8608] IPVS: using max 49 ests per chain, 117600 per kthread [ 303.154887][ T8619] FAULT_INJECTION: forcing a failure. [ 303.154887][ T8619] name failslab, interval 1, probability 0, space 0, times 0 [ 303.172390][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 303.185073][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 303.197431][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 303.210237][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 303.210546][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 303.210828][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 303.211113][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 303.211394][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 303.211673][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 303.211954][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 303.231796][ T8619] CPU: 1 UID: 0 PID: 8619 Comm: syz.3.644 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 303.231820][ T8619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 303.231830][ T8619] Call Trace: [ 303.231836][ T8619] [ 303.231842][ T8619] dump_stack_lvl+0x16c/0x1f0 [ 303.231869][ T8619] should_fail_ex+0x512/0x640 [ 303.231894][ T8619] should_failslab+0xc2/0x120 [ 303.231912][ T8619] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 303.231939][ T8619] ? skb_clone+0x190/0x3f0 [ 303.231961][ T8619] skb_clone+0x190/0x3f0 [ 303.231980][ T8619] netlink_deliver_tap+0xabd/0xd30 [ 303.232004][ T8619] netlink_unicast+0x6b2/0x7f0 [ 303.232027][ T8619] ? __pfx_netlink_unicast+0x10/0x10 [ 303.232053][ T8619] netlink_ack+0x696/0xb80 [ 303.232079][ T8619] netlink_rcv_skb+0x347/0x440 [ 303.232099][ T8619] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 303.232119][ T8619] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 303.232152][ T8619] ? netlink_deliver_tap+0x1ae/0xd30 [ 303.232175][ T8619] netlink_unicast+0x53a/0x7f0 [ 303.232197][ T8619] ? __pfx_netlink_unicast+0x10/0x10 [ 303.232232][ T8619] netlink_sendmsg+0x8d1/0xdd0 [ 303.232256][ T8619] ? __pfx_netlink_sendmsg+0x10/0x10 [ 303.232284][ T8619] ____sys_sendmsg+0xa95/0xc70 [ 303.232307][ T8619] ? copy_msghdr_from_user+0x10a/0x160 [ 303.232323][ T8619] ? __pfx_____sys_sendmsg+0x10/0x10 [ 303.232356][ T8619] ___sys_sendmsg+0x134/0x1d0 [ 303.232375][ T8619] ? __pfx____sys_sendmsg+0x10/0x10 [ 303.232421][ T8619] __sys_sendmsg+0x16d/0x220 [ 303.232439][ T8619] ? __pfx___sys_sendmsg+0x10/0x10 [ 303.232463][ T8619] ? rcu_is_watching+0x12/0xc0 [ 303.232487][ T8619] do_syscall_64+0xcd/0x260 [ 303.232513][ T8619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.232529][ T8619] RIP: 0033:0x7f55ccd8e969 [ 303.232541][ T8619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.232557][ T8619] RSP: 002b:00007f55cdbf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 303.232576][ T8619] RAX: ffffffffffffffda RBX: 00007f55ccfb5fa0 RCX: 00007f55ccd8e969 [ 303.232587][ T8619] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 303.232596][ T8619] RBP: 00007f55cdbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 303.232606][ T8619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.232615][ T8619] R13: 0000000000000000 R14: 00007f55ccfb5fa0 R15: 00007ffda34e0ec8 [ 303.232637][ T8619] [ 304.216767][ T8639] process 'syz.2.649' launched './file0' with NULL argv: empty string added [ 304.236753][ T30] audit: type=1400 audit(1747038786.879:450): avc: denied { execute } for pid=8636 comm="syz.2.649" name="file0" dev="tmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 304.236860][ T30] audit: type=1400 audit(1747038786.889:451): avc: denied { execute_no_trans } for pid=8636 comm="syz.2.649" path="/136/file0" dev="tmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 306.623145][ T8651] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 307.891891][ T0] sched: DL replenish lagged too much [ 308.183295][ C0] net_ratelimit: 12624 callbacks suppressed [ 308.183308][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 308.183631][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 308.183780][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 308.183936][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 308.184080][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 308.184228][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 308.184381][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 308.184525][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 308.184678][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 308.184823][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 313.198370][ C0] net_ratelimit: 22493 callbacks suppressed [ 313.198384][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 313.198535][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 313.198691][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 313.198840][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 313.198988][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 313.199137][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 313.199298][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 313.199456][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 313.199606][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 313.199755][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 316.544431][ T8673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.657'. [ 317.624318][ T8673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.657'. [ 318.212641][ C0] net_ratelimit: 21037 callbacks suppressed [ 318.212653][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.212834][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.212973][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 318.213104][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.213266][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.213413][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 318.213530][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.213703][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.213969][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 318.214217][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.756060][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.756126][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.434841][ T8683] wg1: entered promiscuous mode [ 322.434864][ T8683] wg1: entered allmulticast mode [ 322.860832][ T5816] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 323.028690][ T5820] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 323.029749][ T5820] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 323.179725][ T5820] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 323.231783][ C0] net_ratelimit: 15673 callbacks suppressed [ 323.231799][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 323.232007][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 323.245992][ T8622] tty tty1: ldisc open failed (-12), clearing slot 0 [ 323.256754][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 323.269664][ T5820] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 323.280141][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 323.308825][ T5820] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 323.310168][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 323.668399][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 323.676499][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 323.678777][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 323.690797][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 323.697702][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 328.239902][ C1] net_ratelimit: 23169 callbacks suppressed [ 328.239921][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 328.240200][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 328.240283][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 328.240499][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 328.240579][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 328.240773][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 328.240827][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 328.241048][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 328.241326][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 328.241618][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 328.362143][ T5820] Bluetooth: hci5: command tx timeout [ 329.229704][ T5816] usb 4-1: unable to read config index 0 descriptor/start: -110 [ 329.229740][ T5816] usb 4-1: can't read configurations, error -110 [ 330.405377][ T5820] Bluetooth: hci5: command tx timeout [ 331.175491][ T8695] raw-gadget.0 gadget.3: fail, usb_ep_queue returned -108 [ 333.253178][ C1] net_ratelimit: 25534 callbacks suppressed [ 333.253197][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 333.253509][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 333.253821][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 333.254152][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 333.254158][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 333.254476][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 333.254478][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 333.254742][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 333.254791][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 333.255101][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 334.535574][ T5820] Bluetooth: hci5: command tx timeout [ 338.266232][ C0] net_ratelimit: 25373 callbacks suppressed [ 338.266252][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 338.266314][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 338.266628][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 338.266941][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 338.267253][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 338.267276][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 338.267537][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 338.267588][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 338.267774][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 338.267916][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 339.486086][ T5820] Bluetooth: hci5: command tx timeout [ 343.279035][ C1] net_ratelimit: 25857 callbacks suppressed [ 343.279055][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 343.279111][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 343.279367][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 343.279374][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 343.279696][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 343.280022][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 343.280329][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 343.280465][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 343.280635][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 343.280767][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 348.291930][ C1] net_ratelimit: 25411 callbacks suppressed [ 348.291948][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 348.292013][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 348.292265][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 348.292322][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 348.292565][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 348.292572][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 348.292867][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 348.293517][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 348.293568][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 348.293819][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 353.304584][ C1] net_ratelimit: 25677 callbacks suppressed [ 353.304603][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 353.304884][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 353.304918][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 353.305143][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 353.305235][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 353.305549][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 353.305890][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 353.306206][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 353.306217][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 353.306516][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 358.317152][ C0] net_ratelimit: 25830 callbacks suppressed [ 358.317171][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 358.317296][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 358.317474][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 358.317576][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 358.317731][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 358.317885][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 358.318169][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 358.318448][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 358.318730][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 358.318803][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 363.329949][ C1] net_ratelimit: 25563 callbacks suppressed [ 363.329967][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 363.330254][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 363.330285][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 363.330552][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 363.330628][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 363.330846][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 363.330895][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 363.331128][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 363.331413][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 363.331691][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 368.342483][ C0] net_ratelimit: 26061 callbacks suppressed [ 368.342503][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 368.342742][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 368.342774][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 368.343138][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 368.343485][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 368.343799][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 368.343848][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 368.344128][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 368.344152][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 368.344390][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 373.354838][ C1] net_ratelimit: 25273 callbacks suppressed [ 373.354857][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 373.355099][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 373.355155][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 373.355406][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 373.355468][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 373.355663][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 373.355777][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 373.356076][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 373.356365][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 373.357151][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 378.367475][ C1] net_ratelimit: 26542 callbacks suppressed [ 378.367496][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 378.367498][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 378.367823][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 378.368143][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 378.368443][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 378.368623][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 378.368758][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 378.368932][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 378.369063][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 378.369216][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 380.164911][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.174355][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.380020][ C0] net_ratelimit: 26668 callbacks suppressed [ 383.380039][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 383.380311][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 383.380321][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 383.380560][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 383.380621][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 383.380942][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 383.381538][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 383.381799][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 383.382019][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 383.382029][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 388.392526][ C1] net_ratelimit: 26292 callbacks suppressed [ 388.392544][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 388.392873][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 388.393196][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 388.393230][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.393490][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 388.393510][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 388.393747][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.393792][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 388.394099][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 388.394390][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 393.405007][ C0] net_ratelimit: 27514 callbacks suppressed [ 393.405027][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.405049][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 393.405328][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 393.405563][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.405584][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 393.405859][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 393.406154][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 393.406440][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 393.406546][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.406714][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 398.417613][ C1] net_ratelimit: 26747 callbacks suppressed [ 398.417632][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 398.417898][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.417955][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 398.418185][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 398.418272][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 398.418422][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.418573][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 398.418872][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 398.419169][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 398.419467][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.430117][ C0] net_ratelimit: 25190 callbacks suppressed [ 403.430135][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.430161][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 403.430444][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 403.430697][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.430801][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 403.431121][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 403.431723][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.431971][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 403.432045][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 403.432281][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 408.442661][ C1] net_ratelimit: 26632 callbacks suppressed [ 408.442680][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 408.442963][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 408.443073][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.443238][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 408.443366][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 408.443526][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 408.443615][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.444071][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 408.444359][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 408.444565][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.455111][ C0] net_ratelimit: 26743 callbacks suppressed [ 413.455130][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.455282][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 413.455608][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 413.456102][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.456373][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 413.456459][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 413.456609][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.456777][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 413.457088][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 413.457398][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 418.467733][ C1] net_ratelimit: 26004 callbacks suppressed [ 418.467757][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 418.468068][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 418.468116][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.468375][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 418.468417][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 418.468687][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.468689][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 418.469025][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 418.469333][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 418.469623][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 423.480118][ C0] net_ratelimit: 26339 callbacks suppressed [ 423.480137][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 423.480375][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.480396][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 423.480682][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 423.480961][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 423.481240][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 423.481356][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.481546][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 423.481648][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 423.481830][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 428.492545][ C0] net_ratelimit: 25833 callbacks suppressed [ 428.492564][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 428.492674][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 428.492802][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.492969][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 428.493263][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 428.493770][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.494043][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 428.494258][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.494714][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 428.495016][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 433.505142][ C1] net_ratelimit: 25821 callbacks suppressed [ 433.505161][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 433.505294][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 433.505479][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 433.505542][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.505797][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 433.506122][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 433.506433][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 433.506576][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.506761][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 433.506887][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 438.517565][ C1] net_ratelimit: 27003 callbacks suppressed [ 438.517583][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 438.517882][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 438.518157][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 438.518399][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.518446][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 438.518712][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 438.518719][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 438.518988][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.519002][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 438.519277][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 441.639973][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.656721][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.530153][ C0] net_ratelimit: 26778 callbacks suppressed [ 443.530171][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 443.530183][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 443.530413][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.530510][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 443.530818][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 443.531142][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 443.531396][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.531455][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 443.531678][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 443.531762][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 448.542756][ C1] net_ratelimit: 25710 callbacks suppressed [ 448.542775][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 448.543056][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 448.543304][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.543334][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 448.543611][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 448.543618][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 448.543879][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.543913][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 448.544204][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 448.544494][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 449.861255][ T5829] Bluetooth: hci5: command 0x0406 tx timeout [ 453.555197][ C1] net_ratelimit: 26213 callbacks suppressed [ 453.555217][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 453.555535][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 453.555646][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.555861][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 453.555931][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 453.556171][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 453.556176][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.556501][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 453.556822][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 453.557136][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 458.567734][ C1] net_ratelimit: 26671 callbacks suppressed [ 458.567753][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 458.568031][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 458.568296][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.568306][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 458.568582][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 458.568592][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 458.568818][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.569409][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 458.569688][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 458.569949][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 463.580074][ C1] net_ratelimit: 26147 callbacks suppressed [ 463.580094][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 463.580257][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 463.580424][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 463.580492][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.580734][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 463.581047][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 463.581376][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 463.581461][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.581684][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 463.581771][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 468.592697][ C1] net_ratelimit: 25492 callbacks suppressed [ 468.592716][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 468.593033][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 468.593319][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.593590][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 468.593811][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.594151][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 468.594463][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 468.594768][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.594784][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 468.595051][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 473.605192][ C1] net_ratelimit: 26387 callbacks suppressed [ 473.605212][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 473.605409][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.605526][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 473.605690][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 473.605832][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 473.605921][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.606146][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 473.606460][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 473.606793][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 473.606902][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 478.617757][ C1] net_ratelimit: 27037 callbacks suppressed [ 478.617776][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 478.618066][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 478.618093][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 478.618347][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 478.618393][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 478.618594][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 478.618700][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 478.619015][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 478.619315][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 478.619561][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.630106][ C1] net_ratelimit: 25684 callbacks suppressed [ 483.630127][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 483.630442][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 483.630764][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.630781][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 483.631051][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 483.631093][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 483.631317][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.631419][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 483.631738][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 483.632047][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 488.642790][ C1] net_ratelimit: 26368 callbacks suppressed [ 488.642810][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 488.643032][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 488.643140][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 488.643319][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d7:a3:f6:67:6b, vlan:0) [ 488.643459][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 488.643553][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 488.643773][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 488.644103][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 488.644399][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 488.644715][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 490.423955][ T31] INFO: task syz.2.664:8697 blocked for more than 146 seconds. [ 490.423979][ T31] Not tainted 6.15.0-rc6-syzkaller #0 [ 490.423990][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 490.423998][ T31] task:syz.2.664 state:D stack:28856 pid:8697 tgid:8689 ppid:5815 task_flags:0x400040 flags:0x00000004 [ 490.424056][ T31] Call Trace: [ 490.424064][ T31] [ 490.424074][ T31] __schedule+0x116f/0x5de0 [ 490.424115][ T31] ? __pfx___schedule+0x10/0x10 [ 490.424141][ T31] ? find_held_lock+0x2b/0x80 [ 490.424164][ T31] ? schedule+0x2d7/0x3a0 [ 490.424188][ T31] schedule+0xe7/0x3a0 [ 490.424209][ T31] schedule_preempt_disabled+0x13/0x30 [ 490.424230][ T31] __mutex_lock+0x6c7/0xb90 [ 490.424255][ T31] ? tty_open+0x53e/0xf90 [ 490.424278][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 490.424313][ T31] ? __pfx_tty_open+0x10/0x10 [ 490.424334][ T31] ? tty_open+0x53e/0xf90 [ 490.424351][ T31] tty_open+0x53e/0xf90 [ 490.424377][ T31] ? __pfx_tty_open+0x10/0x10 [ 490.424396][ T31] ? chrdev_open+0x10b/0x6a0 [ 490.424417][ T31] ? __pfx_tty_open+0x10/0x10 [ 490.424436][ T31] chrdev_open+0x231/0x6a0 [ 490.424454][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 490.424474][ T31] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 490.424509][ T31] do_dentry_open+0x741/0x1c10 [ 490.424535][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 490.424558][ T31] vfs_open+0x82/0x3f0 [ 490.424581][ T31] path_openat+0x1e5e/0x2d40 [ 490.424617][ T31] ? __pfx_path_openat+0x10/0x10 [ 490.424649][ T31] do_filp_open+0x20b/0x470 [ 490.424677][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 490.424720][ T31] ? alloc_fd+0x471/0x7d0 [ 490.424752][ T31] do_sys_openat2+0x11b/0x1d0 [ 490.424772][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 490.424801][ T31] __x64_sys_openat+0x174/0x210 [ 490.424822][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 490.424844][ T31] ? rcu_is_watching+0x12/0xc0 [ 490.424870][ T31] do_syscall_64+0xcd/0x260 [ 490.424896][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.424914][ T31] RIP: 0033:0x7f226698e969 [ 490.424929][ T31] RSP: 002b:00007f2267839038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 490.424947][ T31] RAX: ffffffffffffffda RBX: 00007f2266bb6160 RCX: 00007f226698e969 [ 490.424959][ T31] RDX: 0000000000080000 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 490.424970][ T31] RBP: 00007f2266a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 490.424980][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 490.424991][ T31] R13: 0000000000000000 R14: 00007f2266bb6160 R15: 00007ffc0d5215c8 [ 490.425014][ T31] [ 490.425023][ T31] [ 490.425023][ T31] Showing all locks held in the system: [ 490.425030][ T31] 1 lock held by kthreadd/2: [ 490.425042][ T31] 3 locks held by kworker/0:0/9: [ 490.425052][ T31] 4 locks held by kworker/0:1/10: [ 490.425061][ T31] #0: ffff888060dbbd48 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 490.425113][ T31] #1: ffffc900000f7d18 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 490.425172][ T31] #2: ffff888060811308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x880 [ 490.425228][ T31] #3: ffff88805f38a0f0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x5ac/0x880 [ 490.425281][ T31] 4 locks held by kworker/u8:0/12: [ 490.425292][ T31] 4 locks held by kworker/u8:1/13: [ 490.425304][ T31] 1 lock held by khungtaskd/31: [ 490.425313][ T31] #0: ffffffff8e3bf580 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 490.425363][ T31] 2 locks held by kworker/u8:2/36: [ 490.425374][ T31] 3 locks held by kworker/u8:3/53: [ 490.425385][ T31] 3 locks held by kworker/u8:4/81: [ 490.425395][ T31] 2 locks held by kswapd0/89: [ 490.425407][ T31] 2 locks held by kworker/0:2/872: [ 490.425420][ T31] 3 locks held by kworker/u8:5/1129: [ 490.425431][ T31] 4 locks held by kworker/u8:6/1169: [ 490.425450][ T31] 3 locks held by kworker/R-ipv6_/3163: [ 490.425460][ T31] #0: ffff88814d4eb148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 490.425508][ T31] #1: ffffc9000bb17cb0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 490.425552][ T31] #2: ffffffff901254e8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 [ 490.425598][ T31] 3 locks held by kworker/R-bat_e/3393: [ 490.425608][ T31] 4 locks held by kworker/u8:7/3457: [ 490.425619][ T31] 3 locks held by kworker/u8:8/3471: [ 490.425630][ T31] 1 lock held by jbd2/sda1-8/5147: [ 490.425640][ T31] 2 locks held by klogd/5174: [ 490.425650][ T31] 2 locks held by udevd/5185: [ 490.425659][ T31] 2 locks held by dhcpcd/5479: [ 490.425669][ T31] 1 lock held by dhcpcd/5480: [ 490.425678][ T31] 2 locks held by crond/5554: [ 490.425688][ T31] 2 locks held by getty/5575: [ 490.425697][ T31] #0: ffff888031d010a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 490.425748][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 490.425797][ T31] 3 locks held by syz-executor/5798: [ 490.425807][ T31] 3 locks held by syz-executor/5810: [ 490.425817][ T31] 9 locks held by kworker/0:3/5816: [ 490.425826][ T31] 7 locks held by kworker/u9:3/5820: [ 490.425835][ T31] #0: ffff888035769948 ((wq_completion)hci5){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 490.425878][ T31] #1: ffffc9000406fd18 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 490.425921][ T31] #2: ffff88802ab00d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x175/0x430 [ 490.425964][ T31] #3: ffff88802ab00078 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x146/0xb40 [ 490.426007][ T31] #4: ffffffff90392f48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x14f/0x330 [ 490.426050][ T31] #5: ffff888075e3d338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x730 [ 490.426100][ T31] #6: ffffffff8e3caab8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x280/0x3c0 [ 490.426153][ T31] 3 locks held by kworker/1:5/5865: [ 490.426163][ T31] 3 locks held by kworker/1:6/5866: [ 490.426173][ T31] 2 locks held by kworker/1:7/5911: [ 490.426183][ T31] 3 locks held by kworker/1:8/5912: [ 490.426193][ T31] 3 locks held by kworker/u8:9/6485: [ 490.426203][ T31] 3 locks held by kworker/u8:10/6546: [ 490.426213][ T31] 4 locks held by kworker/u8:11/7136: [ 490.426223][ T31] 3 locks held by kworker/u8:12/7432: [ 490.426233][ T31] 3 locks held by kworker/u8:13/7436: [ 490.426242][ T31] 4 locks held by kworker/u8:14/7439: [ 490.426251][ T31] 3 locks held by kworker/u8:15/7443: [ 490.426262][ T31] 3 locks held by kworker/u8:16/7445: [ 490.426272][ T31] 4 locks held by kworker/u8:17/7447: [ 490.426282][ T31] 4 locks held by kworker/u8:18/7452: [ 490.426292][ T31] 4 locks held by kworker/u8:19/7664: [ 490.426302][ T31] 3 locks held by syz.4.646/8622: [ 490.426313][ T31] 1 lock held by syz.2.664/8697: [ 490.426322][ T31] #0: ffffffff8f0a6168 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x53e/0xf90 [ 490.426365][ T31] 3 locks held by syz.3.665/8695: [ 490.426375][ T31] 3 locks held by syz-executor/8700: [ 490.426385][ T31] 2 locks held by kworker/u8:20/8708: [ 490.426395][ T31] [ 490.426399][ T31] ============================================= [ 490.426399][ T31] [ 490.426406][ T31] NMI backtrace for cpu 1 [ 490.426417][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 490.426435][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 490.426444][ T31] Call Trace: [ 490.426449][ T31] [ 490.426455][ T31] dump_stack_lvl+0x116/0x1f0 [ 490.426477][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 490.426500][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 490.426517][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 490.426536][ T31] watchdog+0xf70/0x12c0 [ 490.426556][ T31] ? __pfx_watchdog+0x10/0x10 [ 490.426570][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 490.426592][ T31] ? __kthread_parkme+0x19e/0x250 [ 490.426615][ T31] ? __pfx_watchdog+0x10/0x10 [ 490.426630][ T31] kthread+0x3c2/0x780 [ 490.426645][ T31] ? __pfx_kthread+0x10/0x10 [ 490.426658][ T31] ? __pfx_kthread+0x10/0x10 [ 490.426672][ T31] ? __pfx_kthread+0x10/0x10 [ 490.426686][ T31] ? __pfx_kthread+0x10/0x10 [ 490.426700][ T31] ? rcu_is_watching+0x12/0xc0 [ 490.426718][ T31] ? __pfx_kthread+0x10/0x10 [ 490.426734][ T31] ret_from_fork+0x45/0x80 [ 490.426748][ T31] ? __pfx_kthread+0x10/0x10 [ 490.426763][ T31] ret_from_fork_asm+0x1a/0x30 [ 490.426797][ T31] [ 490.426803][ T31] Sending NMI from CPU 1 to CPUs 0: [ 490.426824][ C0] NMI backtrace for cpu 0 [ 490.426835][ C0] CPU: 0 UID: 0 PID: 3393 Comm: kworker/R-bat_e Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 490.426850][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 490.426859][ C0] Workqueue: bat_events batadv_tt_purge [ 490.426874][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 490.426887][ C0] Code: e9 7d b8 5a 00 be 03 00 00 00 5b e9 e2 ba 15 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 34 24 <65> 48 8b 15 38 bf e8 11 65 8b 05 49 bf e8 11 a9 00 01 ff 00 74 1d [ 490.426899][ C0] RSP: 0018:ffffc90000007278 EFLAGS: 00000286 [ 490.426908][ C0] RAX: 0000000000000000 RBX: ffff88806096f000 RCX: ffff88802a934e3e [ 490.426917][ C0] RDX: 0000000000000000 RSI: ffffffff8a3f32b8 RDI: 0000000000000005 [ 490.426924][ C0] RBP: ffff88802a934e3c R08: 0000000000000005 R09: 0000000000000000 [ 490.426932][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88806096f000 [ 490.426939][ C0] R13: ffff88802a934e3a R14: 0000000000000000 R15: dffffc0000000000 [ 490.426947][ C0] FS: 0000000000000000(0000) GS:ffff8881249e1000(0000) knlGS:0000000000000000 [ 490.426960][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 490.426969][ C0] CR2: 00007fca7ec00218 CR3: 000000000e180000 CR4: 00000000003526f0 [ 490.426977][ C0] DR0: 0000080000001081 DR1: 0000000000000007 DR2: fffffffffffffffd [ 490.426985][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 490.426993][ C0] Call Trace: [ 490.426996][ C0] [ 490.427001][ C0] fdb_find_rcu+0x338/0x6e0 [ 490.427019][ C0] ? __pfx_fdb_find_rcu+0x10/0x10 [ 490.427034][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 490.427052][ C0] br_fdb_update+0x178/0x7d0 [ 490.427068][ C0] ? __pfx_br_fdb_update+0x10/0x10 [ 490.427083][ C0] ? br_allowed_ingress+0xdd/0x11b0 [ 490.427102][ C0] br_handle_frame_finish+0xd21/0x1c20 [ 490.427116][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 490.427131][ C0] ? ip6t_do_table+0xc20/0x1be0 [ 490.427147][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 490.427161][ C0] ? nf_hook_slow+0x132/0x200 [ 490.427192][ C0] br_nf_hook_thresh+0x301/0x410 [ 490.427204][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 490.427217][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 490.427230][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 490.427247][ C0] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 490.427264][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 490.427282][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 490.427302][ C0] br_nf_pre_routing_finish_ipv6+0x76a/0xfb0 [ 490.427315][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 490.427329][ C0] br_nf_pre_routing_ipv6+0x3cd/0x8c0 [ 490.427342][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 490.427354][ C0] ? lock_acquire+0x179/0x350 [ 490.427371][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 490.427385][ C0] ? net_generic+0xea/0x2a0 [ 490.427404][ C0] br_nf_pre_routing+0x860/0x15b0 [ 490.427418][ C0] br_handle_frame+0xad5/0x14a0 [ 490.427431][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 490.427443][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 490.427458][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 490.427469][ C0] __netif_receive_skb_core.constprop.0+0xa23/0x4a00 [ 490.427490][ C0] ? kasan_quarantine_put+0x40/0x240 [ 490.427509][ C0] ? kmem_cache_free+0x2d4/0x4d0 [ 490.427528][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 490.427547][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 490.427563][ C0] ? sk_skb_reason_drop+0x136/0x1a0 [ 490.427578][ C0] ? ip6_mc_input+0x46c/0xfd0 [ 490.427595][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 490.427612][ C0] ? __lock_acquire+0x5ca/0x1ba0 [ 490.427631][ C0] ? process_backlog+0x3f0/0x15e0 [ 490.427648][ C0] __netif_receive_skb_one_core+0xb0/0x1e0 [ 490.427666][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 490.427684][ C0] ? lock_acquire+0x179/0x350 [ 490.427703][ C0] ? process_backlog+0x3f0/0x15e0 [ 490.427719][ C0] __netif_receive_skb+0x1d/0x160 [ 490.427737][ C0] process_backlog+0x442/0x15e0 [ 490.427756][ C0] __napi_poll.constprop.0+0xb7/0x550 [ 490.427775][ C0] net_rx_action+0xa97/0x1010 [ 490.427789][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 490.427808][ C0] ? find_held_lock+0x2b/0x80 [ 490.427822][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 490.427836][ C0] ? sched_clock+0x38/0x60 [ 490.427852][ C0] ? sched_clock_cpu+0x6c/0x530 [ 490.427873][ C0] ? mark_held_locks+0x49/0x80 [ 490.427890][ C0] handle_softirqs+0x216/0x8e0 [ 490.427907][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 490.427922][ C0] ? batadv_tt_local_purge+0x21c/0x3c0 [ 490.427935][ C0] do_softirq+0xb2/0xf0 [ 490.427949][ C0] [ 490.427953][ C0] [ 490.427957][ C0] __local_bh_enable_ip+0x100/0x120 [ 490.427972][ C0] batadv_tt_local_purge+0x21c/0x3c0 [ 490.427987][ C0] ? __pfx_batadv_tt_local_purge+0x10/0x10 [ 490.428002][ C0] batadv_tt_purge+0x8b/0xb80 [ 490.428016][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 490.428031][ C0] ? debug_object_deactivate+0x1ec/0x3a0 [ 490.428050][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 490.428066][ C0] ? rcu_is_watching+0x12/0xc0 [ 490.428080][ C0] process_one_work+0x9cc/0x1b70 [ 490.428096][ C0] ? __pfx_process_one_work+0x10/0x10 [ 490.428111][ C0] ? assign_work+0x1a0/0x250 [ 490.428124][ C0] rescuer_thread+0x620/0xea0 [ 490.428139][ C0] ? rcu_is_watching+0x12/0xc0 [ 490.428153][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 490.428165][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 490.428180][ C0] ? __kthread_parkme+0x19e/0x250 [ 490.428197][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 490.428209][ C0] kthread+0x3c2/0x780 [ 490.428221][ C0] ? __pfx_kthread+0x10/0x10 [ 490.428235][ C0] ? __pfx_kthread+0x10/0x10 [ 490.428245][ C0] ? __pfx_kthread+0x10/0x10 [ 490.428256][ C0] ? __pfx_kthread+0x10/0x10 [ 490.428266][ C0] ? rcu_is_watching+0x12/0xc0 [ 490.428280][ C0] ? __pfx_kthread+0x10/0x10 [ 490.428291][ C0] ret_from_fork+0x45/0x80 [ 490.428302][ C0] ? __pfx_kthread+0x10/0x10 [ 490.428312][ C0] ret_from_fork_asm+0x1a/0x30 [ 490.428333][ C0] [ 490.428821][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 490.428833][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 490.428851][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 490.428861][ T31] Call Trace: [ 490.428867][ T31] [ 490.428873][ T31] dump_stack_lvl+0x3d/0x1f0 [ 490.428897][ T31] panic+0x71c/0x800 [ 490.428921][ T31] ? __pfx_panic+0x10/0x10 [ 490.428944][ T31] ? __pfx__printk+0x10/0x10 [ 490.428966][ T31] ? ret_from_fork_asm+0x1a/0x30 [ 490.428991][ T31] ? nmi_backtrace_stall_check+0x6e/0x540 [ 490.429012][ T31] ? irq_work_queue+0xce/0x100 [ 490.429030][ T31] ? watchdog+0xdda/0x12c0 [ 490.429045][ T31] ? watchdog+0xdcd/0x12c0 [ 490.429063][ T31] watchdog+0xdeb/0x12c0 [ 490.429083][ T31] ? __pfx_watchdog+0x10/0x10 [ 490.429097][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 490.429120][ T31] ? __kthread_parkme+0x19e/0x250 [ 490.429143][ T31] ? __pfx_watchdog+0x10/0x10 [ 490.429159][ T31] kthread+0x3c2/0x780 [ 490.429175][ T31] ? __pfx_kthread+0x10/0x10 [ 490.429188][ T31] ? __pfx_kthread+0x10/0x10 [ 490.429203][ T31] ? __pfx_kthread+0x10/0x10 [ 490.429217][ T31] ? __pfx_kthread+0x10/0x10 [ 490.429231][ T31] ? rcu_is_watching+0x12/0xc0 [ 490.429249][ T31] ? __pfx_kthread+0x10/0x10 [ 490.429265][ T31] ret_from_fork+0x45/0x80 [ 490.429279][ T31] ? __pfx_kthread+0x10/0x10 [ 490.429295][ T31] ret_from_fork_asm+0x1a/0x30 [ 490.429327][ T31] [ 490.429511][ T31] Kernel Offset: disabled