last executing test programs: 19.274113022s ago: executing program 4 (id=775): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={0x0}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x494, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x193}, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffd}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f0000000400)) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000002440)={'nat\x00', 0x0, [0x632, 0x9, 0x7fff, 0x80008000, 0x4]}, &(0x7f00000003c0)=0x54) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r5, &(0x7f0000000140)={&(0x7f0000000040), 0x14, &(0x7f0000000080)={0x0}, 0x7}, 0x80) recvmmsg(r5, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40012042, 0x0) 18.882232673s ago: executing program 4 (id=779): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x551e00, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x22, 0x51, 0xae, 0x10, 0x1a0a, 0x102, 0xe597, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x66, 0x0, 0x0, 0xf8, 0xaa, 0xb2}}]}}]}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000540)=[@out_dx={0xaa, 0x28, {0xd1a7, 0x3, 0x1}}, @rdmsr={0x32, 0x18, {0x2bd}}, @wr_crn={0x46, 0x20, {0x0, 0x69f}}, @in_dx={0x82, 0x20, {0xaea, 0x7}}, @in_dx={0x82, 0x20, {0xfd90, 0x6}}, @rdmsr={0x32, 0x18, {0x300}}, @set_irq_handler={0xbe, 0x20, {0xa9}}], 0xd8}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0xe) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2000000002, 0x42142) writev(r0, &(0x7f0000000840), 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r7, r7, 0x0, 0x200900) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000140)={0x1d, 0xcc, &(0x7f0000000640)="907a3e07ffa1daf13ce119749a5bcba82d123dc45c98b99e64fd8d37519e2412618019d1269af065e79001d42111d4d8897f2868b9ab6f14d7013bcb123661f3bfad57314bf6311cbf7359512557fc1732a3e671b6473621f7c768b65b576014b6642113149a425bab790ae787df91a33f8892310b4e9cd06f090000002680de0e4ea6dd1543f5e41f494f124d466571a31b628afb9fcfb844054d8096046d6d1f8206522ed235a436d0e32e66a7aa3c5b53eba6523ca2659822a5b44ab4bd57ab1501d037647230f9289dbc"}) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f00000000c0)={0x3}) 17.823644935s ago: executing program 1 (id=782): semctl$IPC_INFO(0x0, 0x3, 0x3, &(0x7f00000000c0)=""/77) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="140000000400000004000000ff00000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000064ff294df392c2f703c5020c5e5cf2bddd7b8059c7d922fb175ef76897a29663e6b397baa0", @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f00000000c0)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) getpid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43, 0x3}}, @common=@inet=@socket3={{0x28}, 0x51}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0x40045b0a, &(0x7f0000000040)) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x300, 0x26, 0x90, 0x4a, 0x8, 0x711, 0x918, 0x156a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x7, 0x20, 0x0, [{{0x9, 0x4, 0xa6, 0x0, 0x0, 0xd6, 0xd7, 0x12, 0x2}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) 16.885271198s ago: executing program 2 (id=785): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003a80)=ANY=[@ANYBLOB="883800003f000701feffffff02000000027c00000400f6000c000180060006008035"], 0x3888}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) timer_delete(0x0) 16.729012319s ago: executing program 3 (id=786): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socket(0x1e, 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, &(0x7f00000005c0)) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000600), 0x0, 0x0) ioctl$CEC_TRANSMIT(r0, 0xc0386105, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f00000000c0)=""/111) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) syz_usb_connect(0x2, 0x3f, &(0x7f0000000880)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d00010000000009040000032eb47d0009"], 0x0) 16.583438929s ago: executing program 0 (id=787): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'dt2817\x00', [0x4f27, 0x0, 0x4, 0x4, 0x5, 0x5, 0x4, 0x3, 0x54c6cff3, 0x4e4, 0x4, 0x1, 0x1, 0xfffffffd, 0x100, 0x101, 0x0, 0x7f, 0x3, 0x40000003, 0x89, 0x0, 0x4, 0x20001e5b, 0x3, 0xe66, 0x3, 0x4, 0x4086, 0x0, 0xfffffff8]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 16.582975051s ago: executing program 2 (id=788): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x50401, 0x1b) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = io_uring_setup(0x2cee, &(0x7f0000000200)={0x0, 0x93b0, 0x3, 0x0, 0x315}) io_uring_register$IORING_REGISTER_CLOCK(r1, 0x1d, &(0x7f0000000000)={0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4010, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$int_out(r2, 0x0, &(0x7f0000000040)) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x40000000, 0x0, &(0x7f0000000080)={&(0x7f0000000080)=ANY=[], 0x80}}, 0x0) sendmsg$key(r4, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x0) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x21, &(0x7f0000000000)={[{@nr_blocks={'nr_blocks', 0x3d, [0x6d]}}]}) 16.401093042s ago: executing program 0 (id=789): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}}, 0x4044054) openat$dsp(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, 0x0) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000440)={0x8, &(0x7f0000000240)=[{0x400, 0x5, 0x1, 0xffffffff}, {0x3, 0x6, 0xa3}, {0x10, 0x8, 0x7, 0xf34e}, {0x8, 0xd, 0x16, 0x7f}, {0x6, 0x5, 0x43, 0x5}, {0x6, 0x6, 0x1, 0x4}, {0x6, 0xd, 0x40, 0xfffffffe}, {0x100, 0x9, 0x7c, 0x8}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x408442) writev(r3, &(0x7f0000000840)=[{&(0x7f0000000400)="94", 0x1}, {0x0}], 0x2) r4 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xdf7c, 0x3010, 0x1, 0x39d}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x47b6, 0x2949, 0x30, 0x0, 0xffffffffffffffd9) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0xd8}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) 16.399270672s ago: executing program 2 (id=790): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x40000, 0x38) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000d4713b10d105012000090102030109021200010000000009040000004d2f9c0008447872b764675fae6c87037629197cb589fe3d9e7558e336cb"], 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x56}, 0x94) r3 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x758e, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="2318f7cc03dff22787c5ea8eb1"], 0x0, 0x0}) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010000ff0000008eaa9031f636a21d6cc5fac94f"], 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="00e906030000000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000080)={0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="62f1a9e1b0265723"], 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @local, 0x4}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x1bc}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5}, 0x5}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 16.174437382s ago: executing program 4 (id=791): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x721701, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeda, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb9, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0xfffffffffffffe5f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r6, &(0x7f00000021c0), 0x5b, 0x40, 0x0) write(r2, &(0x7f00000001c0)="240000005800410f9c00f4f90085b3025cb1fddf08000100050100000800028001000000", 0x24) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f00000003c0)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r9, @ANYBLOB="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"], 0xcc}, 0x1, 0x0, 0x0, 0x4800}, 0x5) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a0000000e00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='sched_switch\x00', r11, 0x0, 0x7}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000840)={r10, &(0x7f0000000640), 0x0}, 0x20) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="33fae1fffffffcdbdf250700000008000300", @ANYRES32=r8, @ANYBLOB="0c009900070000006700000008000500020000001400040070696d367265673100000000000000000500530001000000"], 0x4c}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) 15.204952049s ago: executing program 4 (id=792): socket$inet(0x2, 0x4000000000000001, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x400}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a72b7a104c05e102c8e2010203010902"], 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x40, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x8, 0x3, @multicast2}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 14.892918884s ago: executing program 3 (id=793): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c085) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e040a260c"], 0x7) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000000)={0xfffffc64, 0x0}) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) bind$qrtr(r3, &(0x7f0000000200), 0xc) r4 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x8, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2}) readv(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f0000000680)=""/182, 0xb6}, {&(0x7f0000000040)=""/35, 0x23}, {&(0x7f0000000100)=""/52, 0x34}, {&(0x7f0000000140)=""/60, 0x3c}], 0x5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x5, 0x90, 0x1, 'queue0\x00', 0x3}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_GET_PIT(r6, 0xc048ae65, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000ec0)={0x800100, 0x244, 0x23, 0x100, 0x81, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) 12.978504824s ago: executing program 1 (id=794): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0xc) r7 = fsopen(0x0, 0x0) r8 = fcntl$getown(0xffffffffffffffff, 0x9) lstat(&(0x7f00000004c0)='./file1/file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000000500)=[0xee00, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xee01]) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000006c0)=0x0) statx(r0, &(0x7f0000000700)='./file0\x00', 0x2000, 0x200, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r3, &(0x7f00000008c0)={&(0x7f0000000240)=@file={0x1, './file1/file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000580)="98aafac164649cf4ec25876fb55956b3586ae66a1d231b2eae8f18f7eea827013024d21058769c4cece7957a78d7d81706131d833aa0f83e3f969a604bb6026e5aa15b0ca88ed9b027032c0ed933004a6f63e39944cd7a758fa036330ec52d038833e7780cd9f2a675d975a5d99a0120e9298e35b0fa3052b1fb4c9bd796a2669e480ea0f6bc601210adabc7fb6dbacc0b98d1d90bec4370c3bc7a64a8361d1f7b3e4e87d06bb9fb87cbc203cae3826898eec9f0f60b079d837bc1b6e2ef", 0xbe}, {&(0x7f0000000100)="22b1ec02760968f948bc0b8988", 0xd}, {&(0x7f00000001c0)="ebba56", 0x3}, {&(0x7f00000003c0)="639d9a504646", 0x6}], 0x4, &(0x7f0000000840)=[@cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}, @cred={{0x1c, 0x1, 0x2, {r1, r11, r12}}}, @rights={{0x14, 0x1, 0x1, [r6]}}], 0x58}, 0x4004014) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r13 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r13, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x64000600) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11.19288216s ago: executing program 1 (id=795): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}}) 9.610235377s ago: executing program 4 (id=796): syz_emit_ethernet(0x76, &(0x7f0000000040)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "081000", 0x40, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], @param_prob={0x4, 0x2, 0x0, 0xffff, {0x5, 0x6, "5436ea", 0x400, 0x88, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@dstopts={0x0, 0x0, '\x00', [@pad1, @padn]}]}}}}}}}, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x30, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xe, 0x20, 0x6, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x5, {0x9, 0x21, 0xd049, 0xa, 0x1, {0x22, 0x936}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x9, 0x3, 0x4}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0x2c, 0x7, 0x5, 0x10, 0x4}, 0x93, &(0x7f00000001c0)={0x5, 0xf, 0x93, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "f494c3c06e306bff7f34ec01a8d92382"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xed, 0x9, 0x7f, 0x7f, 0x21}, @generic={0x68, 0x10, 0xa, "cc609d8fdecc05610eb3f5ccba32133c1cb9476fb53248a76b1ec38ca82ea25cd1a1b0819b11a60827c5f9853f4ae3251cc77eb8019bae3df5b0ab744581b93595f471ba512e42a69a10660df04766ca36a4a1d2b920dd0217edd8a2b86b309ffaf56c62de"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xa, 0x4, 0x4}]}, 0x3, [{0xd0, &(0x7f0000000280)=@string={0xd0, 0x3, "89cf381d0315f097e4a33de788626450a9d31230ae6ae93bbaa01102b6f87cbc77c42dc168d2bccd3b6c3ad6acc087f3ed26125cf006ae20ee1604946c477b9cb660e431b219449ff2cbca2ecaad8f4f5fcf82965c7b478171fa9d18efed7500ce89bd245e0f4ff1026e3b0da242d2cf582d2e97e616502083c5d171187d391fc822eee06483e4ab3fd7a514773f61ffe85b28d43abb54a73bf2722e7a0c4d7103f18657ddffc5fb1cbcdf98109b571f1727668f3ec49a0028ed9b1efb856a65654d2e81fc9c3f5399fbbc9a1408"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x422}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x455}}]}) close_range(r1, 0xffffffffffffffff, 0x0) 9.601947739s ago: executing program 3 (id=797): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) timerfd_create(0x2, 0x1800) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x4}}, './file1\x00'}) getsockopt(r1, 0xc, 0x7, &(0x7f00000002c0)=""/180, &(0x7f0000000380)=0xb4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r2, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x16a00) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000440)) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) rename(&(0x7f0000000100)='./file2\x00', &(0x7f00000000c0)='./file0/../file0/file0\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x1a, 0x80805, 0xfe8a) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x1, 'queue0\x00', 0x1}) setsockopt$netlink_NETLINK_RX_RING(r4, 0x10e, 0x6, &(0x7f0000000400)={0x80000000, 0x442, 0xf, 0x386}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x129a01) ioctl$USBDEVFS_CONNECTINFO(r5, 0x80045520, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a464357177330772"}}, 0x48}}, 0x810) 9.476527924s ago: executing program 0 (id=798): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="041c"], 0xe) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0xe, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0xa, 0x0, 0xfffffff5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000300)="bc", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e23, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000140)="db", 0x1}], 0x1}}], 0x2, 0x20000055) r5 = socket(0x1, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)={0x128, 0x2, 0x2, 0x0, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_NAT={0xc0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x84, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x28}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xfffffc00}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_NAT={0x3c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0xa9}, &(0x7f0000000200)=0x8) 9.280178209s ago: executing program 2 (id=799): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r3, 0x200, 0x70bd2b, 0x2, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x4040}]}, 0x24}}, 0x20000000) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000540)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="78171203550aeb0e2afdf247811e4eea01a81fb506da199c6cafee12d8cee2d4277a5c8e568b1cefb7e91269313a7908f26dfa716e7743ffd7f7d8aa4b822588443f9a87db3309129cee875c604539133632f609f672fe0bf0814fd3d0d3194dc7c6932f4b0042e9c88ca5f8d5c7706175387df88e10d0d08ed9b5dfb6f20254598c9fc5fe0fd426986809ee12264d70824ad7a0f8a017d20e953bf8bdbd9f06812854fec67aea1602034230623e1a6bb6"], 0x28}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100081, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x29) connect$unix(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0xfffffffffffffdb5, 0x0) r7 = getegid() getgroups(0x4, &(0x7f0000000100)=[0xffffffffffffffff, 0xee00, 0xee01, 0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000180)=[r7, r8]) read$FUSE(r6, &(0x7f00000010c0)={0x2020}, 0x2020) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x44, 0xffffffffffffff75, 0x1, 0x4}, 0x28) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) r11 = socket$unix(0x1, 0x5, 0x0) bind$unix(r11, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x402) r12 = socket$unix(0x1, 0x5, 0x0) connect$unix(r12, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r11, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r10, 0x58}, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="0700de00", @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf25010000000c00060000000000000000000800010001000000"], 0x28}, 0x1, 0x0, 0x0, 0x4044800}, 0x4000000) 9.279184047s ago: executing program 3 (id=800): capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_clone3(&(0x7f0000000200)={0x4001000, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text32={0x20, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000008604"]) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r6, 0x110, 0x5, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r7) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r7, 0x550c, 0x0) syz_usb_control_io$uac1(r8, 0x0, 0x0) syz_usb_control_io$lan78xx(r8, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r8, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000004400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e27, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x29, 0x3}], 0x10}, 0x0) syz_usb_control_io$uac1(r8, 0x0, 0x0) syz_usb_control_io$lan78xx(r8, 0x0, 0x0) syz_usb_control_io$printer(r8, 0x0, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000140)={r5, 0x1}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) sendmsg$inet(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 8.951515891s ago: executing program 0 (id=801): socket$inet(0x2, 0x4000000000000001, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x400}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a72b7a104c05e102c8e2010203010902"], 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x40, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x8, 0x3, @multicast2}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 8.592918435s ago: executing program 2 (id=802): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x20, [0xffffffff, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x0, 0x24, 0xffffffff, 0x3, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) getpgid(0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x426e59fc9dad529e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r4 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r4, 0xc008551a, &(0x7f0000000340)=ANY=[]) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00'}) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="4000000066001fff0000000000000000"], 0x40}}, 0x4000800) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r6, 0xff08, 0x0) socket$nl_route(0x10, 0x3, 0x0) 8.480993891s ago: executing program 1 (id=803): syz_emit_ethernet(0x4e, &(0x7f0000000800)={@multicast, @link_local={0x17, 0x80, 0xc2, 0x2, 0x9, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "001958", 0x18, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x18}, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x8, '\x00', @private0={0xfc, 0x0, '\x00', 0x1}}}}}}}, 0x0) socket(0xa, 0x3, 0x87) signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) epoll_create1(0x0) socket$packet(0x11, 0x2, 0x300) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, &(0x7f0000000000), 0x1) socket$inet(0x2, 0x4000000000000001, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(0x3) openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xbbe8, 0x0, 0x0, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r1, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x11, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r6, &(0x7f0000002480)={0x2020}, 0x2020) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) socket$igmp(0x2, 0x3, 0x2) 6.603442742s ago: executing program 3 (id=804): semctl$IPC_INFO(0x0, 0x3, 0x3, &(0x7f00000000c0)=""/77) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="140000000400000004000000ff00000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000064ff294df392c2f703c5020c5e5cf2bddd7b8059c7d922fb175ef76897a29663e6b397baa0", @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f00000000c0)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) getpid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43, 0x3}}, @common=@inet=@socket3={{0x28}, 0x51}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0x40045b0a, &(0x7f0000000040)) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x300, 0x26, 0x90, 0x4a, 0x8, 0x711, 0x918, 0x156a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x7, 0x20, 0x0, [{{0x9, 0x4, 0xa6, 0x0, 0x0, 0xd6, 0xd7, 0x12, 0x2}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) 4.719336719s ago: executing program 0 (id=805): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000011c0)={&(0x7f0000000500)=[0x0], 0x1, r3, r4, 0x5ac9, 0x2, 0x2, 0x802, {0xac78, 0x1, 0xa, 0x68, 0x4f49, 0x2, 0x4, 0x45, 0x412f, 0xe154, 0x4, 0x8007, 0x1, 0x7fff, "fe1d00e13313000000000000276e9e440000c1261e09cb5b1b73840900"}}) 4.718777029s ago: executing program 4 (id=806): r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$ttynull(0xffffffffffffff9c, 0x0, 0x141440, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x9000000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r4 = fsmount(r0, 0x0, 0x3) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) socket$tipc(0x1e, 0x2, 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) 4.694834303s ago: executing program 1 (id=807): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) getdents64(r0, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0x0, 0x0, &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x1, 0x2, 0x1, 0x20, 0x2}, 0x0, 0x0, 0x4, [{0x37, &(0x7f0000000180)=@string={0x37, 0x3, "45d87b41b0e458a4d3e7ccaf39a8ce95f418fa61165e8187df5b1ab5ef5765cf955c0716a94f9726b913020a3d825065cf9911297d"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x80c}}, {0x80, &(0x7f0000000440)=@string={0x80, 0x3, "2bdafb12e98ff5f4d72933759c6ba5f8841089c57f847fdd3156917e1bf317e00262316fabcbe73dee7c4f3dee875ebf4eec8b6d6a718d102cf698f547a91bf40a89465d6147875cd891486df6060036209177fac55c93bb6e768145a7afd0ea85fd5c6583ddb10ed333ecefec3d7f0133d41fb5278827b7f8c976afde54"}}, {0x1a, &(0x7f00000006c0)=ANY=[@ANYBLOB="1a0372051df386212c7638749bb290b73e4094caa787bd291e7e02d26e1951478eed215b5e5f520e6f308418232377215916de82ef5bbc6533f7f09159ebd76567fdd298763bf5f65d4b5ce942b1b6a538a947a5e10a46d8eb741cd0e3d93d438ced1ea1fd3e8acfa525f21cc2091e34a94e1e9130aca6b81e1cb1683dfb76e3a3fed0506fd663a4e1fb346043b9b1eb51236b40f3934c020df1e6c1cedcf07a264a7cea1f11358723a7c519ddee1f300c1e931fd2192e72084362c185aec3870c4527f14ff10301c4f1f05f11ab"]}]}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) socket(0x10, 0x3, 0x7) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) pread64(r5, 0x0, 0x0, 0x1) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl2\x00', 0x0, 0x2f, 0x9, 0x81, 0x7, 0x40, @remote, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x7, 0x7800, 0x0, 0x1}}) bind$xdp(0xffffffffffffffff, &(0x7f0000000940)={0x2c, 0x8, r6, 0x6, r2}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) tkill(r8, 0x12) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f0000000980)={0xd0, r9, 0x400, 0x70bd2b, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x8001}, {0x8, 0x13, 0x7}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0x4}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0xc41}, {0x5, 0x14, 0x1}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000000}, 0x804) 4.355272447s ago: executing program 0 (id=808): rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) socket$inet6(0xa, 0x1, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x41}, 0x14819) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r4 = syz_clone(0x48002000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x31) ioctl$KVM_RESET_DIRTY_RINGS(r5, 0xaec7) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x801, 0x0) socket$unix(0x1, 0x1, 0x0) 2.44804772s ago: executing program 3 (id=809): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x2004000, &(0x7f0000000000)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@index_off}]}) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40004}, [@IFLA_MTU={0x8, 0x4, 0x3f9}, @IFLA_PORT_SELF={0x0, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x0, 0x1, 0x17}, @IFLA_PORT_INSTANCE_UUID={0x0, 0x4, "3b42807228ab1751f74565a677d1b01c"}]}]}, 0x6d}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) chdir(&(0x7f00000001c0)='./file0\x00') r1 = open(&(0x7f00000000c0)='.\x00', 0xd5b203, 0x8) lseek(r1, 0xfffffffffffffffb, 0x0) 2.264807984s ago: executing program 2 (id=810): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) socket(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socketpair$unix(0x1, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0xc1) r2 = userfaultfd(0x800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00004a3000/0x5000)=nil, 0x400000, 0x3, 0x2}) 0s ago: executing program 1 (id=811): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x50401, 0x1b) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = io_uring_setup(0x2cee, &(0x7f0000000200)={0x0, 0x93b0, 0x3, 0x0, 0x315}) io_uring_register$IORING_REGISTER_CLOCK(r1, 0x1d, &(0x7f0000000000)={0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4010, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$int_out(r2, 0x0, &(0x7f0000000040)) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x0) sendmsg$key(r4, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x0) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(r5, r5, 0x0, 0x200900) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x21, &(0x7f0000000000)={[{@nr_blocks={'nr_blocks', 0x3d, [0x6d]}}]}) kernel console output (not intermixed with test programs): cd.2/usb3/3-1/3-1:0.0/0003:0458:5013.0003/input/input11 [ 271.241381][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 271.565499][ T5891] usb 1-1: Manufacturer: syz [ 271.573576][ T5891] usb 1-1: SerialNumber: syz [ 271.589341][ T5891] usb 1-1: config 0 descriptor?? [ 271.592840][ T5871] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5013.0003/input/input12 [ 271.612100][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 271.626634][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 271.631892][ T5891] ati_remote 1-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 271.642407][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 271.672689][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.681839][ T24] usb 2-1: Product: syz [ 271.690325][ T24] usb 2-1: Manufacturer: syz [ 271.696902][ T24] usb 2-1: SerialNumber: syz [ 271.720401][ T24] usb 2-1: config 0 descriptor?? [ 271.745303][ T24] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 271.755898][ T5871] kye 0003:0458:5013.0003: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.2-1/input0 [ 271.793269][ T24] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 271.812552][ T5891] usb 1-1: USB disconnect, device number 29 [ 272.073381][ T30] audit: type=1400 audit(1760824211.245:495): avc: denied { create } for pid=8550 comm="syz.4.608" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 272.083436][ T5871] usb 3-1: USB disconnect, device number 37 [ 272.114310][ T30] audit: type=1400 audit(1760824211.245:496): avc: denied { setattr } for pid=8550 comm="syz.4.608" name="file0" dev="tmpfs" ino=605 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 272.204824][ T24] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 272.215007][ T24] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 272.224363][ T24] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 272.231490][ T24] em28xx 2-1:0.0: No AC97 audio processor [ 272.252293][ T24] usb 2-1: USB disconnect, device number 30 [ 272.256483][ C0] hrtimer: interrupt took 33557 ns [ 272.259789][ T24] em28xx 2-1:0.0: Disconnecting em28xx [ 272.285722][ T24] em28xx 2-1:0.0: Freeing device [ 272.795320][ T5820] udevd[5820]: symlink '../../loop2' '/dev/disk/by-diskseq/72.tmp-b7:2' failed: Read-only file system [ 273.004016][ T5920] usb 4-1: USB disconnect, device number 36 [ 273.314072][ T24] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 273.694019][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 273.713827][ T24] usb 3-1: config 0 has an invalid interface number: 83 but max is 0 [ 273.725170][ T24] usb 3-1: config 0 has no interface number 0 [ 273.731585][ T24] usb 3-1: config 0 interface 83 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 273.791357][ T24] usb 3-1: config 0 interface 83 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 273.819545][ T24] usb 3-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 273.829343][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.892830][ T24] usb 3-1: Product: syz [ 273.904005][ T24] usb 3-1: Manufacturer: syz [ 273.978661][ T30] audit: type=1400 audit(1760824213.165:497): avc: denied { create } for pid=8567 comm="syz.3.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 274.003134][ T24] usb 3-1: SerialNumber: syz [ 274.031974][ T24] usb 3-1: config 0 descriptor?? [ 274.040609][ T24] redrat3 3-1:0.83: Couldn't find all endpoints [ 274.107419][ T30] audit: type=1400 audit(1760824213.185:498): avc: denied { connect } for pid=8567 comm="syz.3.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 274.270851][ T8563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.303904][ T8563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.313251][ T8563] netlink: 'syz.2.610': attribute type 1 has an invalid length. [ 274.382508][ T8563] 8021q: adding VLAN 0 to HW filter on device bond3 [ 274.419896][ T30] audit: type=1400 audit(1760824213.595:499): avc: denied { bind } for pid=8579 comm="syz.3.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 274.460882][ T8578] veth7: entered promiscuous mode [ 274.476825][ T8578] bond3: (slave veth7): Enslaving as an active interface with a down link [ 275.893894][ T24] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 275.928943][ T5920] usb 3-1: USB disconnect, device number 38 [ 276.033714][ T24] usb 2-1: device descriptor read/64, error -71 [ 276.090185][ T6060] udevd[6060]: symlink '../../loop2' '/dev/disk/by-diskseq/72.tmp-b7:2' failed: Read-only file system [ 276.359481][ T24] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 276.613758][ T5920] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 276.789413][ T5920] usb 3-1: unable to get BOS descriptor or descriptor too short [ 276.819361][ T5920] usb 3-1: not running at top speed; connect to a high speed hub [ 276.859586][ T5920] usb 3-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 276.888126][ T24] usb 2-1: device descriptor read/64, error -71 [ 276.921294][ T5920] usb 3-1: config 129 has 0 interfaces, different from the descriptor's value: 1 [ 276.942719][ T5920] usb 3-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57 [ 276.953393][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.979727][ T5920] usb 3-1: Product: syz [ 276.994028][ T5920] usb 3-1: Manufacturer: syz [ 277.003842][ T5920] usb 3-1: SerialNumber: syz [ 277.103635][ T24] usb usb2-port1: attempt power cycle [ 277.192013][ T8626] No source specified [ 277.250934][ T8626] __nla_validate_parse: 38 callbacks suppressed [ 277.250970][ T8626] netlink: 16 bytes leftover after parsing attributes in process `syz.3.625'. [ 277.539113][ T24] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 278.095983][ T24] usb 2-1: device descriptor read/8, error -71 [ 278.534137][ T5848] IPVS: starting estimator thread 0... [ 278.803891][ T8638] IPVS: using max 75 ests per chain, 180000 per kthread [ 279.054921][ T8637] 9pnet_fd: Insufficient options for proto=fd [ 279.196548][ T5920] usb 3-1: USB disconnect, device number 39 [ 280.007147][ T5809] udevd[5809]: symlink '../../loop2' '/dev/disk/by-diskseq/72.tmp-b7:2' failed: Read-only file system [ 280.101466][ T8658] fuse: Bad value for 'fd' [ 280.124923][ T8661] xt_socket: unknown flags 0x50 [ 280.274737][ T8663] netlink: 56 bytes leftover after parsing attributes in process `syz.4.634'. [ 280.308186][ T8658] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 280.322375][ T8658] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 280.362660][ T8659] fuse: Unknown parameter 'user_id00000000000000000000' [ 280.386313][ T8659] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 280.394698][ T8659] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 280.613682][ T5920] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 281.405461][ T5920] usb 2-1: Using ep0 maxpacket: 8 [ 281.503618][ T5920] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 281.536832][ T5920] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 281.603952][ T5920] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 281.621819][ T5920] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 282.283005][ T5920] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 282.292222][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.403611][ T5891] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 282.529770][ T5920] usb 2-1: GET_CAPABILITIES returned 0 [ 282.558236][ T5920] usbtmc 2-1:16.0: can't read capabilities [ 282.607211][ T30] audit: type=1400 audit(1760824221.795:500): avc: denied { connect } for pid=8684 comm="syz.3.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 282.626558][ C0] vkms_vblank_simulate: vblank timer overrun [ 282.653006][ T5891] usb 5-1: Using ep0 maxpacket: 8 [ 282.900354][ T30] audit: type=1400 audit(1760824221.825:501): avc: denied { getopt } for pid=8684 comm="syz.3.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 283.527264][ T5891] usb 5-1: config 162 has an invalid interface number: 97 but max is 0 [ 283.536468][ T8692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.562753][ T5891] usb 5-1: config 162 has an invalid descriptor of length 184, skipping remainder of the config [ 283.599532][ T5820] udevd[5820]: symlink '../../loop2' '/dev/disk/by-diskseq/72.tmp-b7:2' failed: Read-only file system [ 283.614747][ T8692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.635690][ T5891] usb 5-1: config 162 has no interface number 0 [ 283.665671][ T5891] usb 5-1: config 162 interface 97 altsetting 1 endpoint 0x3 has an invalid bInterval 205, changing to 11 [ 283.691300][ T5871] usb 2-1: USB disconnect, device number 35 [ 283.723590][ T5891] usb 5-1: config 162 interface 97 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 283.766337][ T5891] usb 5-1: config 162 interface 97 has no altsetting 0 [ 283.795946][ T5891] usb 5-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=e1.3b [ 283.805124][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.823655][ T5891] usb 5-1: Product: syz [ 283.842946][ T5891] usb 5-1: Manufacturer: syz [ 283.847884][ T5891] usb 5-1: SerialNumber: syz [ 283.953787][ T5848] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 284.145999][ T5848] usb 3-1: Using ep0 maxpacket: 32 [ 284.152815][ T5848] usb 3-1: config 0 has an invalid interface number: 83 but max is 0 [ 284.163817][ T5848] usb 3-1: config 0 has no interface number 0 [ 284.169955][ T5848] usb 3-1: config 0 interface 83 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 284.183599][ T5848] usb 3-1: config 0 interface 83 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 284.193676][ T9] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 284.198769][ T5848] usb 3-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 284.218957][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.227280][ T5848] usb 3-1: Product: syz [ 284.237201][ T5848] usb 3-1: Manufacturer: syz [ 284.242777][ T5848] usb 3-1: SerialNumber: syz [ 284.250183][ T5848] usb 3-1: config 0 descriptor?? [ 284.256940][ T5848] redrat3 3-1:0.83: Couldn't find all endpoints [ 284.270001][ T8698] netlink: 'syz.3.642': attribute type 10 has an invalid length. [ 284.375381][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 284.383870][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 284.407109][ T9] usb 1-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 284.472981][ T9] usb 1-1: config 129 has 0 interfaces, different from the descriptor's value: 1 [ 284.519993][ T9] usb 1-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57 [ 284.530131][ T8694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.539123][ T8694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.543812][ T5848] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 284.547037][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.565704][ T9] usb 1-1: Product: syz [ 284.588683][ T9] usb 1-1: Manufacturer: syz [ 284.597082][ T8694] netlink: 'syz.2.640': attribute type 1 has an invalid length. [ 284.608666][ T9] usb 1-1: SerialNumber: syz [ 284.669886][ T8694] 8021q: adding VLAN 0 to HW filter on device bond4 [ 284.726031][ T8694] veth9: entered promiscuous mode [ 284.735216][ T8694] bond4: (slave veth9): Enslaving as an active interface with a down link [ 284.755635][ T5848] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 284.764343][ T5848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.783483][ T5848] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 284.792699][ T5848] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 284.800769][ T5848] usb 4-1: Manufacturer: syz [ 284.807858][ T5848] usb 4-1: config 0 descriptor?? [ 284.952408][ T5848] rc_core: IR keymap rc-hauppauge not found [ 284.962621][ T5848] Registered IR keymap rc-empty [ 284.970195][ T5848] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 284.982321][ T5848] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input13 [ 285.719012][ T5891] metro_usb 5-1:162.97: required endpoints missing [ 285.735145][ C1] igorplugusb 4-1:0.0: receive overflow, at least 3 lost [ 285.749309][ T8712] rc rc0: two consecutive events of type space [ 285.758978][ T5891] usb 5-1: USB disconnect, device number 29 [ 286.739110][ T8698] netlink: 64 bytes leftover after parsing attributes in process `syz.3.642'. [ 286.758769][ T5928] usb 3-1: USB disconnect, device number 40 [ 286.789854][ T5871] usb 4-1: USB disconnect, device number 37 [ 286.816335][ T5848] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 286.962226][ T5820] udevd[5820]: symlink '../../loop2' '/dev/disk/by-diskseq/72.tmp-b7:2' failed: Read-only file system [ 287.019648][ T9] usb 1-1: USB disconnect, device number 30 [ 287.186676][ T5848] usb 2-1: config index 0 descriptor too short (expected 29285, got 36) [ 287.196034][ T5848] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.276382][ T5848] usb 2-1: config 0 has no interfaces? [ 287.295718][ T5848] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 287.328277][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.356723][ T5848] usb 2-1: Product: syz [ 287.373675][ T5848] usb 2-1: Manufacturer: syz [ 287.378302][ T5848] usb 2-1: SerialNumber: syz [ 287.396346][ T5848] usb 2-1: config 0 descriptor?? [ 287.427395][ T5813] udevd[5813]: symlink '../../loop2' '/dev/disk/by-diskseq/72.tmp-b7:2' failed: Read-only file system [ 287.454942][ T30] audit: type=1400 audit(1760824226.645:502): avc: denied { map } for pid=8732 comm="syz.0.650" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 287.478838][ T30] audit: type=1400 audit(1760824226.645:503): avc: denied { execute } for pid=8732 comm="syz.0.650" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 287.500036][ T8733] ptrace attach of "./syz-executor exec"[5823] was attempted by ""[8733] [ 287.858506][ T8740] 9pnet_fd: Insufficient options for proto=fd [ 288.119515][ T8721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.646'. [ 288.391214][ T8746] fuse: Unknown parameter 'gLoupSid' [ 288.421901][ T8721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.646'. [ 288.434287][ T8721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.646'. [ 288.818483][ T8721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.646'. [ 288.835117][ T8721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.646'. [ 288.945179][ T8721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.646'. [ 289.003628][ T8721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.646'. [ 289.017347][ T8721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.646'. [ 289.028973][ T8721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.646'. [ 289.058816][ T8742] bridge0: port 3(veth1_to_bridge) entered blocking state [ 289.068176][ T8742] bridge0: port 3(veth1_to_bridge) entered disabled state [ 289.077778][ T8742] veth1_to_bridge: entered allmulticast mode [ 289.081004][ T9] usb 2-1: USB disconnect, device number 36 [ 289.100662][ T8742] veth1_to_bridge: entered promiscuous mode [ 289.107194][ T8742] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 289.120571][ T8742] bridge0: port 3(veth1_to_bridge) entered blocking state [ 289.128002][ T8742] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 289.195150][ T30] audit: type=1400 audit(1760824228.385:504): avc: denied { ioctl } for pid=8753 comm="syz.4.656" path="socket:[22921]" dev="sockfs" ino=22921 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 289.359185][ T8758] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 289.556155][ T5891] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 290.147026][ T30] audit: type=1400 audit(1760824229.335:505): avc: denied { listen } for pid=8753 comm="syz.4.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 290.185193][ T5891] usb 1-1: config index 0 descriptor too short (expected 29285, got 36) [ 290.211765][ T5891] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.331074][ T5891] usb 1-1: config 0 has no interfaces? [ 290.364963][ T5891] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 290.390411][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.407977][ T5891] usb 1-1: Product: syz [ 290.417053][ T5891] usb 1-1: Manufacturer: syz [ 290.492844][ T5891] usb 1-1: SerialNumber: syz [ 290.544383][ T5891] usb 1-1: config 0 descriptor?? [ 290.700277][ T5820] udevd[5820]: symlink '../../loop2' '/dev/disk/by-diskseq/72.tmp-b7:2' failed: Read-only file system [ 290.813624][ T5871] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 290.903639][ T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 290.922569][ T5928] usb 1-1: USB disconnect, device number 31 [ 290.965280][ T5871] usb 4-1: unable to get BOS descriptor or descriptor too short [ 291.011838][ T5871] usb 4-1: not running at top speed; connect to a high speed hub [ 291.073140][ T5871] usb 4-1: config 129 has an invalid interface number: 28 but max is 0 [ 291.085320][ T5871] usb 4-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 291.085328][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 291.093690][ T9] usb 2-1: config 0 has no interfaces? [ 291.110595][ T5871] usb 4-1: config 129 has no interface number 0 [ 291.123604][ T5871] usb 4-1: config 129 interface 28 altsetting 250 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 291.155131][ T5871] usb 4-1: config 129 interface 28 has no altsetting 0 [ 291.162237][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 291.191659][ T5871] usb 4-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57 [ 291.201871][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.210521][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 291.222695][ T5871] usb 4-1: Product: syz [ 291.232823][ T5871] usb 4-1: Manufacturer: syz [ 291.240182][ T5871] usb 4-1: SerialNumber: syz [ 291.248808][ T9] usb 2-1: Manufacturer: syz [ 291.295930][ T9] usb 2-1: config 0 descriptor?? [ 292.373639][ T9] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 292.398657][ T8794] xt_socket: unknown flags 0x50 [ 292.540138][ T9] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 292.549222][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 292.561991][ T9] usb 5-1: Product: syz [ 292.573285][ T9] usb 5-1: Manufacturer: syz [ 292.589442][ T9] usb 5-1: SerialNumber: syz [ 292.596136][ T9] usb 5-1: config 0 descriptor?? [ 292.617999][ T9] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 292.644789][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 292.654444][ T24] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 292.680175][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 292.690901][ T9] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 292.709358][ T9] usb 5-1: media controller created [ 292.731180][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 292.813779][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 292.821072][ T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 292.870434][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 292.870474][ T9] cxusb: set interface failed [ 292.889986][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 292.900624][ T24] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 292.913544][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 292.919032][ T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 292.938874][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.993167][ T9] DVB: Unable to find symbol mt352_attach() [ 293.002776][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 293.016009][ T9] zl10353_read_register: readreg error (reg=127, ret==-121) [ 293.032284][ T9] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 293.113627][ T9] rc_core: IR keymap rc-dvico-mce not found [ 293.119604][ T9] Registered IR keymap rc-empty [ 293.126377][ T9] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 293.137965][ T9] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input14 [ 293.155485][ T9] dvb-usb: schedule remote query interval to 100 msecs. [ 293.162760][ T9] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 293.172647][ T24] usb 1-1: GET_CAPABILITIES returned 0 [ 293.187814][ T9] usb 5-1: USB disconnect, device number 30 [ 293.200153][ T24] usbtmc 1-1:16.0: can't read capabilities [ 293.273385][ T9] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 293.380460][ T8794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.394242][ T8794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.418359][ T5848] usb 1-1: USB disconnect, device number 32 [ 293.601439][ T5871] etas_es58x 4-1:129.28: Starting syz syz (Serial Number syz) [ 293.622170][ T5871] usb 4-1: USB disconnect, device number 38 [ 293.735930][ T5928] usb 2-1: USB disconnect, device number 37 [ 294.751152][ T30] audit: type=1400 audit(1760824233.935:506): avc: denied { map } for pid=8811 comm="syz.0.670" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 295.521243][ T5820] udevd[5820]: symlink '../../loop2' '/dev/disk/by-diskseq/72.tmp-b7:2' failed: Read-only file system [ 296.079171][ T30] audit: type=1400 audit(1760824235.255:507): avc: denied { ioctl } for pid=8814 comm="syz.1.672" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 296.477281][ T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 296.901265][ T8840] binder: 8837:8840 ioctl 0 200000000040 returned -22 [ 296.908611][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 297.001835][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.038313][ T8810] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8810 comm=syz.2.667 [ 297.063172][ T9] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 297.162509][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.173237][ T8841] netlink: 'syz.2.667': attribute type 1 has an invalid length. [ 297.230397][ T8841] bond5: (slave bridge1): making interface the new active one [ 297.238404][ T8841] bond5: (slave bridge1): Enslaving as an active interface with an up link [ 297.285518][ T9] usb 1-1: config 0 descriptor?? [ 297.337089][ T8810] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=8810 comm=syz.2.667 [ 297.545194][ T8844] tipc: Started in network mode [ 297.554535][ T8844] tipc: Node identity 1a2fbbee802f, cluster identity 4711 [ 297.564282][ T8844] tipc: Enabled bearer , priority 0 [ 297.634177][ T8845] syzkaller0: entered promiscuous mode [ 297.649400][ T8845] syzkaller0: entered allmulticast mode [ 297.659338][ T5820] udevd[5820]: symlink '../../loop2' '/dev/disk/by-diskseq/72.tmp-b7:2' failed: Read-only file system [ 297.781149][ T8844] tipc: Resetting bearer [ 297.798245][ T8843] tipc: Resetting bearer [ 297.855814][ T8843] tipc: Disabling bearer [ 297.872564][ T8849] xt_socket: unknown flags 0x50 [ 297.931461][ T9] mcp2221 0003:04D8:00DD.0004: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 298.477651][ T24] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 298.524506][ T5932] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 298.635052][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 298.643284][ T24] usb 3-1: not running at top speed; connect to a high speed hub [ 298.651876][ T24] usb 3-1: config 129 has an invalid interface number: 28 but max is 0 [ 298.660221][ T24] usb 3-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 298.670556][ T24] usb 3-1: config 129 has no interface number 0 [ 298.676860][ T24] usb 3-1: config 129 interface 28 altsetting 250 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 298.690693][ T24] usb 3-1: config 129 interface 28 has no altsetting 0 [ 298.694488][ T5932] usb 5-1: Using ep0 maxpacket: 8 [ 298.700568][ T24] usb 3-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57 [ 298.714740][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.722959][ T24] usb 3-1: Product: syz [ 298.727177][ T24] usb 3-1: Manufacturer: syz [ 298.732200][ T24] usb 3-1: SerialNumber: syz [ 298.821126][ T5932] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 298.838176][ T5932] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 298.848528][ T5932] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 298.863388][ T5932] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 298.909348][ T5932] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 298.936030][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.134911][ T5891] usb 1-1: USB disconnect, device number 33 [ 299.627255][ T5932] usb 5-1: GET_CAPABILITIES returned 0 [ 299.633004][ T5932] usbtmc 5-1:16.0: can't read capabilities [ 299.686747][ T5932] kernel write not supported for file /sequencer2 (pid: 5932 comm: kworker/0:5) [ 299.721528][ T8870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.735406][ T8870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.836528][ T5871] usb 5-1: USB disconnect, device number 31 [ 300.463616][ T5891] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 300.565718][ T5823] block device autoloading is deprecated and will be removed. [ 300.598361][ T6060] udevd[6060]: symlink '../../loop0' '/dev/disk/by-diskseq/78.tmp-b7:0' failed: Read-only file system [ 300.615569][ T5891] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 300.622036][ T8881] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 300.632141][ T8881] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 300.640174][ T5891] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 300.642451][ T8881] vhci_hcd vhci_hcd.0: Device attached [ 300.658836][ T5891] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 300.851207][ T24] etas_es58x 3-1:129.28: Starting syz syz (Serial Number syz) [ 300.874515][ T5871] vhci_hcd: vhci_device speed not set [ 300.895528][ T24] usb 3-1: USB disconnect, device number 41 [ 301.013803][ T5871] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 301.061030][ T8882] vhci_hcd: connection reset by peer [ 301.070966][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 301.079058][ T7103] vhci_hcd: stop threads [ 301.082196][ T6060] udevd[6060]: symlink '../../loop2' '/dev/disk/by-diskseq/72.tmp-b7:2' failed: Read-only file system [ 301.083596][ T7103] vhci_hcd: release socket [ 301.099295][ T7103] vhci_hcd: disconnect device [ 301.116614][ T5891] usb 2-1: SerialNumber: syz [ 301.181089][ T30] audit: type=1400 audit(1760824240.365:508): avc: denied { bind } for pid=8890 comm="syz.4.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 301.443590][ T5890] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 301.585646][ T8900] fuse: Unknown parameter '0x0000000000000005' [ 301.660412][ T8897] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 301.668263][ T8897] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 301.694802][ T30] audit: type=1400 audit(1760824240.875:509): avc: denied { ioctl } for pid=8873 comm="syz.1.687" path="/dev/ptyq6" dev="devtmpfs" ino=125 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 301.873673][ T5890] usb 5-1: Using ep0 maxpacket: 8 [ 301.883789][ T5890] usb 5-1: unable to get BOS descriptor or descriptor too short [ 301.885246][ T5891] usb 2-1: 0:2 : does not exist [ 301.892998][ T5890] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.917381][ T5890] usb 5-1: config 0 has no interfaces? [ 301.930450][ T5890] usb 5-1: New USB device found, idVendor=6d79, idProduct=4f80, bcdDevice=d7.15 [ 301.939657][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.948288][ T5890] usb 5-1: Product: syz [ 301.952560][ T5890] usb 5-1: Manufacturer: syz [ 301.957895][ T5890] usb 5-1: SerialNumber: syz [ 301.964310][ T5890] usb 5-1: config 0 descriptor?? [ 302.134087][ T5891] usb 2-1: USB disconnect, device number 38 [ 302.139697][ T5813] udevd[5813]: symlink '../../loop0' '/dev/disk/by-diskseq/78.tmp-b7:0' failed: Read-only file system [ 302.800252][ T5820] udevd[5820]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 303.065971][ T8909] netlink: 'syz.4.691': attribute type 4 has an invalid length. [ 303.073769][ T8909] __nla_validate_parse: 101 callbacks suppressed [ 303.073805][ T8909] netlink: 17 bytes leftover after parsing attributes in process `syz.4.691'. [ 303.249499][ T8909] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 303.261331][ T8909] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 303.299794][ T8909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.309995][ T8909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.339224][ T8909] netlink: 68 bytes leftover after parsing attributes in process `syz.4.691'. [ 305.020937][ T5820] udevd[5820]: symlink '../../loop0' '/dev/disk/by-diskseq/78.tmp-b7:0' failed: Read-only file system [ 305.107513][ T5920] usb 5-1: USB disconnect, device number 32 [ 305.623004][ T6060] udevd[6060]: symlink '../../loop2' '/dev/disk/by-diskseq/72.tmp-b7:2' failed: Read-only file system [ 305.696182][ T8919] netlink: 80 bytes leftover after parsing attributes in process `syz.1.696'. [ 305.872359][ T5820] udevd[5820]: symlink '../../loop0' '/dev/disk/by-diskseq/78.tmp-b7:0' failed: Read-only file system [ 305.906696][ T5920] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 306.028743][ T5820] udevd[5820]: symlink '../../loop2' '/dev/disk/by-diskseq/72.tmp-b7:2' failed: Read-only file system [ 306.046980][ T8932] xt_socket: unknown flags 0x50 [ 306.072005][ T5920] usb 5-1: no configurations [ 306.079435][ T5920] usb 5-1: can't read configurations, error -22 [ 306.133625][ T5891] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 306.193931][ T5871] vhci_hcd: vhci_device speed not set [ 306.212925][ T8930] kvm: MONITOR instruction emulated as NOP! [ 306.223673][ T5920] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 306.287042][ T5891] usb 1-1: unable to get BOS descriptor or descriptor too short [ 306.294831][ T5932] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 306.305632][ T5891] usb 1-1: not running at top speed; connect to a high speed hub [ 306.314995][ T5891] usb 1-1: config 129 has an invalid interface number: 28 but max is 0 [ 306.338097][ T5891] usb 1-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 306.349830][ T5891] usb 1-1: config 129 has no interface number 0 [ 306.362049][ T5891] usb 1-1: config 129 interface 28 altsetting 250 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 306.412537][ T9] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 306.444256][ T5891] usb 1-1: config 129 interface 28 has no altsetting 0 [ 306.451472][ T5920] usb 5-1: no configurations [ 306.457215][ T5932] usb 3-1: Using ep0 maxpacket: 8 [ 306.463094][ T5920] usb 5-1: can't read configurations, error -22 [ 306.473263][ T5932] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 306.483730][ T5932] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 306.495149][ T5920] usb usb5-port1: attempt power cycle [ 306.514339][ T5891] usb 1-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57 [ 306.524408][ T5932] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 306.534670][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.542713][ T5932] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 306.556069][ T5891] usb 1-1: Product: syz [ 306.560368][ T5891] usb 1-1: Manufacturer: syz [ 306.566892][ T5932] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 306.578936][ T5891] usb 1-1: SerialNumber: syz [ 306.684555][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.693699][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 306.759660][ T9] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 306.774635][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.808378][ T9] usb 4-1: config 0 descriptor?? [ 306.830075][ T9] gspca_main: sq930x-2.14.0 probing 041e:403c [ 306.943675][ T5920] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 306.968858][ T5920] usb 5-1: no configurations [ 307.096451][ T5932] usb 3-1: GET_CAPABILITIES returned 0 [ 307.101992][ T5932] usbtmc 3-1:16.0: can't read capabilities [ 307.126537][ T5920] usb 5-1: can't read configurations, error -22 [ 307.287435][ T5920] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 307.318932][ T8943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.345974][ T9] gspca_sq930x: reg_r 001f failed -110 [ 307.527787][ T9] sq930x 4-1:0.0: probe with driver sq930x failed with error -110 [ 307.542380][ T8943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.573681][ T5920] usb 5-1: no configurations [ 307.580722][ T5920] usb 5-1: can't read configurations, error -22 [ 307.606577][ T5920] usb usb5-port1: unable to enumerate USB device [ 307.638118][ T5932] usb 3-1: USB disconnect, device number 42 [ 308.668094][ T5920] usb 4-1: USB disconnect, device number 39 [ 308.801657][ T6060] udevd[6060]: symlink '../../loop2' '/dev/disk/by-diskseq/72.tmp-b7:2' failed: Read-only file system [ 308.960823][ T8958] netlink: 'syz.2.706': attribute type 1 has an invalid length. [ 308.974331][ T5891] etas_es58x 1-1:129.28: Starting syz syz (Serial Number syz) [ 309.001889][ T5891] usb 1-1: USB disconnect, device number 34 [ 309.085480][ T6060] udevd[6060]: symlink '../../loop0' '/dev/disk/by-diskseq/78.tmp-b7:0' failed: Read-only file system [ 309.108920][ T8963] lo: Caught tx_queue_len zero misconfig [ 309.133866][ T8963] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 309.233715][ T910] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 309.607745][ T910] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.648950][ T910] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 309.692429][ T910] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 309.705808][ T5820] udevd[5820]: symlink '../../loop0' '/dev/disk/by-diskseq/78.tmp-b7:0' failed: Read-only file system [ 309.713659][ T910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.849701][ T8958] gretap1: entered promiscuous mode [ 309.874923][ T910] usb 5-1: Product: syz [ 309.888332][ T910] usb 5-1: Manufacturer: syz [ 309.901250][ T910] usb 5-1: SerialNumber: syz [ 309.921363][ T910] usb 5-1: config 0 descriptor?? [ 309.949117][ T910] ati_remote 5-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 310.200322][ T5891] usb 5-1: USB disconnect, device number 37 [ 310.285128][ T6060] udevd[6060]: symlink '../../loop0' '/dev/disk/by-diskseq/78.tmp-b7:0' failed: Read-only file system [ 310.323645][ T910] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 310.815523][ T5820] udevd[5820]: symlink '../../loop2' '/dev/disk/by-diskseq/72.tmp-b7:2' failed: Read-only file system [ 310.895277][ T910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14385, setting to 64 [ 310.907248][ T910] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 310.983607][ T5920] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 310.994614][ T910] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 311.038069][ T910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.071864][ T910] usb 4-1: config 0 descriptor?? [ 311.255126][ T5920] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.283877][ T5920] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 311.323621][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 311.368300][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 311.485483][ T5920] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 311.500586][ T5920] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 311.511321][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.523053][ T5920] usb 1-1: Product: syz [ 311.652725][ T5920] usb 1-1: Manufacturer: syz [ 311.662435][ T5920] usb 1-1: SerialNumber: syz [ 312.209661][ T910] hid-multitouch 0003:0457:07DA.0005: unknown main item tag 0x0 [ 312.220857][ T5920] usb 1-1: config 0 descriptor?? [ 312.254810][ T910] hid-multitouch 0003:0457:07DA.0005: unknown main item tag 0x3 [ 312.380906][ T910] hid-multitouch 0003:0457:07DA.0005: unknown main item tag 0x0 [ 312.389149][ T910] hid-multitouch 0003:0457:07DA.0005: unknown main item tag 0x0 [ 312.397451][ T8988] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 312.404911][ T910] hid-multitouch 0003:0457:07DA.0005: unknown main item tag 0x0 [ 312.412623][ T910] hid-multitouch 0003:0457:07DA.0005: ignoring exceeding usage max [ 312.451805][ T910] hid-multitouch 0003:0457:07DA.0005: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.3-1/input0 [ 312.983407][ T5920] ati_remote 1-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 313.020344][ T5920] usb 1-1: USB disconnect, device number 35 [ 314.303961][ T9028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.722'. [ 314.490630][ T9028] bridge_slave_1: left allmulticast mode [ 314.868192][ T9028] bridge_slave_1: left promiscuous mode [ 314.888940][ T9028] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.003153][ T5820] udevd[5820]: symlink '../../loop2' '/dev/disk/by-diskseq/72.tmp-b7:2' failed: Read-only file system [ 315.014761][ T9032] netlink: 'syz.4.722': attribute type 1 has an invalid length. [ 315.038673][ T6060] udevd[6060]: symlink '../../loop0' '/dev/disk/by-diskseq/78.tmp-b7:0' failed: Read-only file system [ 315.070563][ T9028] bridge_slave_0: left allmulticast mode [ 315.078354][ T9028] bridge_slave_0: left promiscuous mode [ 315.084635][ T9028] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.491056][ T9039] [U]  [ 315.573700][ T5920] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 315.617985][ T9042] pim6reg: entered allmulticast mode [ 315.634627][ T5871] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 316.004189][ T5920] usb 1-1: Using ep0 maxpacket: 32 [ 316.025027][ T5920] usb 1-1: config 0 has an invalid interface number: 83 but max is 0 [ 316.033107][ T5920] usb 1-1: config 0 has no interface number 0 [ 316.040444][ T5920] usb 1-1: config 0 interface 83 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 316.071536][ T5920] usb 1-1: config 0 interface 83 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 316.125824][ T9053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.148573][ T5871] usb 3-1: Using ep0 maxpacket: 32 [ 316.150033][ T9053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.167266][ T5871] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.206696][ T5871] usb 3-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=d4.09 [ 316.215881][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.223945][ T5871] usb 3-1: Product: syz [ 316.228905][ T5871] usb 3-1: Manufacturer: syz [ 316.259426][ T5871] usb 3-1: SerialNumber: syz [ 316.271156][ T5871] usb 3-1: config 0 descriptor?? [ 316.334480][ T5920] usb 1-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 316.338504][ T5871] peak_usb 3-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 316.349967][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.470934][ T5871] peak_usb 3-1:0.0: unable to read PCAN-USB serial number (err -22) [ 317.002435][ T5920] usb 1-1: Product: syz [ 317.006683][ T5920] usb 1-1: Manufacturer: syz [ 317.013166][ T5920] usb 1-1: SerialNumber: syz [ 317.013603][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.030474][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.033013][ T5920] usb 1-1: config 0 descriptor?? [ 317.152362][ T5920] redrat3 1-1:0.83: Couldn't find all endpoints [ 317.168471][ T5871] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -22 [ 317.998731][ T9069] netlink: 'syz.4.732': attribute type 1 has an invalid length. [ 318.033723][ T9069] netlink: 224 bytes leftover after parsing attributes in process `syz.4.732'. [ 318.092693][ T9043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.154071][ T9043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.262944][ T9043] netlink: 'syz.0.725': attribute type 1 has an invalid length. [ 318.514526][ T9] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 318.559225][ T5932] usb 3-1: USB disconnect, device number 43 [ 318.578455][ T9072] ucma_write: process 570 (syz.1.733) changed security contexts after opening file descriptor, this is not allowed. [ 318.595601][ T30] audit: type=1400 audit(1760824257.765:510): avc: denied { setattr } for pid=9071 comm="syz.1.733" name="route" dev="proc" ino=4026532961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 318.673364][ T5820] udevd[5820]: symlink '../../loop2' '/dev/disk/by-diskseq/72.tmp-b7:2' failed: Read-only file system [ 318.690675][ T30] audit: type=1400 audit(1760824257.875:511): avc: denied { read } for pid=9079 comm="syz.2.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 318.721238][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 318.769744][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.780305][ T9043] 8021q: adding VLAN 0 to HW filter on device bond4 [ 318.808473][ T5820] udevd[5820]: symlink '../../loop2' '/dev/disk/by-diskseq/72.tmp-b7:2' failed: Read-only file system [ 318.813686][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 318.870308][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 318.887720][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 318.926569][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 318.941711][ T9] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 318.957050][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 318.973561][ T9] usb 5-1: Product: syz [ 318.983898][ T9] usb 5-1: Manufacturer: syz [ 318.988713][ T9] usb 5-1: SerialNumber: syz [ 319.008807][ T9] usb 5-1: config 0 descriptor?? [ 319.298462][ T9] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 319.305699][ T9] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 319.332291][ T9097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.737'. [ 319.339659][ T30] audit: type=1400 audit(1760824258.515:512): avc: denied { write } for pid=9090 comm="syz.3.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 319.555840][ T9] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 319.564422][ T9] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 319.579668][ T9] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 319.814486][ T9] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 320.023229][ T6060] udevd[6060]: symlink '../../loop2' '/dev/disk/by-diskseq/72.tmp-b7:2' failed: Read-only file system [ 320.108100][ T5871] usb 1-1: USB disconnect, device number 36 [ 320.256332][ T5809] udevd[5809]: symlink '../../loop0' '/dev/disk/by-diskseq/78.tmp-b7:0' failed: Read-only file system [ 320.280654][ T9] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 320.331855][ T9] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 320.890608][ T9104] FAULT_INJECTION: forcing a failure. [ 320.890608][ T9104] name failslab, interval 1, probability 0, space 0, times 0 [ 320.900715][ T9] usb 5-1: USB disconnect, device number 38 [ 320.917625][ T9104] CPU: 0 UID: 0 PID: 9104 Comm: syz.0.741 Not tainted syzkaller #0 PREEMPT(full) [ 320.917647][ T9104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 320.917659][ T9104] Call Trace: [ 320.917666][ T9104] [ 320.917672][ T9104] dump_stack_lvl+0x16c/0x1f0 [ 320.917699][ T9104] should_fail_ex+0x512/0x640 [ 320.917719][ T9104] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 320.917744][ T9104] should_failslab+0xc2/0x120 [ 320.917770][ T9104] kmem_cache_alloc_node_noprof+0x78/0x770 [ 320.917789][ T9104] ? do_syscall_64+0xcd/0xfa0 [ 320.917808][ T9104] ? __alloc_skb+0x2b2/0x380 [ 320.917832][ T9104] ? __alloc_skb+0x2b2/0x380 [ 320.917850][ T9104] __alloc_skb+0x2b2/0x380 [ 320.917867][ T9104] ? __pfx___alloc_skb+0x10/0x10 [ 320.917896][ T9104] netlink_dump+0x19b/0xd30 [ 320.917922][ T9104] ? __pfx_netlink_dump+0x10/0x10 [ 320.917941][ T9104] ? rcu_is_watching+0x12/0xc0 [ 320.917957][ T9104] ? kasan_quarantine_put+0x10a/0x240 [ 320.917992][ T9104] ? kfree_skbmem+0x1a4/0x1f0 [ 320.918016][ T9104] ? kfree_skbmem+0x1a4/0x1f0 [ 320.918042][ T9104] netlink_recvmsg+0x7dc/0xa90 [ 320.918066][ T9104] ? __pfx_netlink_recvmsg+0x10/0x10 [ 320.918100][ T9104] sock_recvmsg+0x1f9/0x250 [ 320.918126][ T9104] ____sys_recvmsg+0x218/0x6b0 [ 320.918156][ T9104] ? __pfx_____sys_recvmsg+0x10/0x10 [ 320.918199][ T9104] ? __lock_acquire+0x622/0x1c90 [ 320.918225][ T9104] ___sys_recvmsg+0x114/0x1a0 [ 320.918247][ T9104] ? __pfx____sys_recvmsg+0x10/0x10 [ 320.918292][ T9104] __sys_recvmsg+0x16a/0x220 [ 320.918314][ T9104] ? __pfx___sys_recvmsg+0x10/0x10 [ 320.918353][ T9104] do_syscall_64+0xcd/0xfa0 [ 320.918376][ T9104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.918394][ T9104] RIP: 0033:0x7f6188b8efc9 [ 320.918408][ T9104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.918425][ T9104] RSP: 002b:00007f6189a3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 320.918442][ T9104] RAX: ffffffffffffffda RBX: 00007f6188de5fa0 RCX: 00007f6188b8efc9 [ 320.918452][ T9104] RDX: 0000000000000000 RSI: 0000200000001700 RDI: 0000000000000003 [ 320.918463][ T9104] RBP: 00007f6189a3f090 R08: 0000000000000000 R09: 0000000000000000 [ 320.918473][ T9104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.918483][ T9104] R13: 00007f6188de6038 R14: 00007f6188de5fa0 R15: 00007ffcb67908d8 [ 320.918508][ T9104] [ 321.532228][ T5820] udevd[5820]: symlink '../../loop0' '/dev/disk/by-diskseq/78.tmp-b7:0' failed: Read-only file system [ 321.695034][ T5820] udevd[5820]: symlink '../../loop2' '/dev/disk/by-diskseq/72.tmp-b7:2' failed: Read-only file system [ 321.842555][ T5820] udevd[5820]: symlink '../../loop0' '/dev/disk/by-diskseq/78.tmp-b7:0' failed: Read-only file system [ 322.370005][ T5820] udevd[5820]: symlink '../../loop2' '/dev/disk/by-diskseq/72.tmp-b7:2' failed: Read-only file system [ 322.874172][ T30] audit: type=1326 audit(1760824262.045:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9124 comm="syz.2.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b0b8efc9 code=0x7ffc0000 [ 322.956654][ T9133] syz_tun: entered allmulticast mode [ 323.003659][ T30] audit: type=1326 audit(1760824262.045:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9124 comm="syz.2.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b0b8efc9 code=0x7ffc0000 [ 323.168758][ T9131] syz_tun: left allmulticast mode [ 323.245919][ T9135] netlink: 168 bytes leftover after parsing attributes in process `syz.3.749'. [ 323.511464][ T30] audit: type=1400 audit(1760824262.535:515): avc: denied { bind } for pid=9134 comm="syz.3.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 323.631444][ T5820] udevd[5820]: symlink '../../loop0' '/dev/disk/by-diskseq/78.tmp-b7:0' failed: Read-only file system [ 323.813270][ T9143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.825706][ T9143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.897202][ T5820] udevd[5820]: symlink '../../loop2' '/dev/disk/by-diskseq/72.tmp-b7:2' failed: Read-only file system [ 323.924690][ T910] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 323.949517][ T9145] binder: 9144:9145 ioctl 0 200000000040 returned -22 [ 323.998459][ T5820] udevd[5820]: symlink '../../loop2' '/dev/disk/by-diskseq/72.tmp-b7:2' failed: Read-only file system [ 324.084297][ T910] usb 5-1: Using ep0 maxpacket: 32 [ 324.098470][ T910] usb 5-1: config 0 has an invalid interface number: 83 but max is 0 [ 324.115328][ T910] usb 5-1: config 0 has no interface number 0 [ 324.121668][ T910] usb 5-1: config 0 interface 83 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 324.184560][ T910] usb 5-1: config 0 interface 83 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 324.199593][ T910] usb 5-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 324.219225][ T5132] block nbd0: Receive control failed (result -32) [ 324.231395][ T910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.242952][ T910] usb 5-1: Product: syz [ 324.247672][ T910] usb 5-1: Manufacturer: syz [ 324.292017][ T910] usb 5-1: SerialNumber: syz [ 324.376817][ T910] usb 5-1: config 0 descriptor?? [ 324.390921][ T910] redrat3 5-1:0.83: Couldn't find all endpoints [ 324.537131][ T5820] udevd[5820]: symlink '../../loop0' '/dev/disk/by-diskseq/78.tmp-b7:0' failed: Read-only file system [ 324.714448][ T9141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.724987][ T9141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.494744][ T5820] udevd[5820]: symlink '../../loop0' '/dev/disk/by-diskseq/78.tmp-b7:0' failed: Read-only file system [ 325.551502][ T30] audit: type=1400 audit(1760824264.738:516): avc: denied { ioctl } for pid=9173 comm="syz.0.762" path="socket:[25154]" dev="sockfs" ino=25154 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 325.909363][ T5813] udevd[5813]: symlink '../../loop2' '/dev/disk/by-diskseq/72.tmp-b7:2' failed: Read-only file system [ 326.272963][ T5820] udevd[5820]: symlink '../../loop2' '/dev/disk/by-diskseq/72.tmp-b7:2' failed: Read-only file system [ 326.406769][ T9189] binder: 9188:9189 ioctl 0 200000000040 returned -22 [ 326.517398][ T5820] udevd[5820]: symlink '../../loop2' '/dev/disk/by-diskseq/72.tmp-b7:2' failed: Read-only file system [ 326.748327][ T5890] usb 5-1: USB disconnect, device number 39 [ 326.904503][ T9] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 326.921063][ T5820] udevd[5820]: symlink '../../loop2' '/dev/disk/by-diskseq/72.tmp-b7:2' failed: Read-only file system [ 326.981678][ T5820] udevd[5820]: symlink '../../loop0' '/dev/disk/by-diskseq/78.tmp-b7:0' failed: Read-only file system [ 327.094218][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 327.109034][ T9] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 327.127655][ T9] usb 2-1: config 179 has no interface number 0 [ 327.151759][ T9] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 327.178977][ T9] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 327.190823][ T9] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 327.203079][ T9] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 327.217117][ T9] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 327.246810][ T9] usb 2-1: config 179 interface 65 has no altsetting 0 [ 327.263649][ T9] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 327.290110][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.355347][ T9] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input17 [ 327.457177][ T5871] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 327.638393][ T5871] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 327.660809][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.909030][ T5871] usb 3-1: config 0 descriptor?? [ 328.078634][ T9195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.092988][ T9195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.261677][ T5871] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 328.268821][ T30] audit: type=1400 audit(1760824267.458:517): avc: denied { watch } for pid=9200 comm="syz.2.769" path="/proc/615/net/pfkey" dev="proc" ino=4026533326 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 328.297094][ T9201] comedi comedi3: das16m1: I/O port conflict (0x60,16) [ 328.340913][ T5871] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 328.376422][ T5871] [drm] Initialized udl on minor 2 [ 328.404586][ T9222] netlink: 24 bytes leftover after parsing attributes in process `syz.3.774'. [ 328.540859][ T5871] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 328.558393][ T5871] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 328.574984][ T9226] binder: 9225:9226 ioctl 0 200000000040 returned -22 [ 328.640270][ T30] audit: type=1400 audit(1760824267.818:518): avc: denied { read } for pid=9223 comm="syz.4.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 328.713969][ T5820] udevd[5820]: symlink '../../loop0' '/dev/disk/by-diskseq/78.tmp-b7:0' failed: Read-only file system [ 329.219723][ T5848] usb 3-1: USB disconnect, device number 44 [ 329.226565][ T910] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 329.258269][ T910] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 329.373633][ T5891] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 329.523659][ T5891] usb 5-1: Using ep0 maxpacket: 16 [ 329.530422][ T5891] usb 5-1: config 0 has an invalid interface number: 102 but max is 0 [ 329.539092][ T5891] usb 5-1: config 0 has no interface number 0 [ 329.547396][ T5891] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=e5.97 [ 329.556866][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.573750][ T5891] usb 5-1: Product: syz [ 329.582565][ T5891] usb 5-1: Manufacturer: syz [ 329.593034][ T5891] usb 5-1: SerialNumber: syz [ 329.634455][ T5891] usb 5-1: config 0 descriptor?? [ 329.673759][ T30] audit: type=1400 audit(1760824268.858:519): avc: denied { ioctl } for pid=9244 comm="syz.3.781" path="socket:[25407]" dev="sockfs" ino=25407 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 329.713615][ T5891] usb_ehset_test 5-1:0.102: probe with driver usb_ehset_test failed with error -32 [ 329.826134][ T5891] usb 2-1: USB disconnect, device number 39 [ 329.908530][ T5820] udevd[5820]: symlink '../../loop2' '/dev/disk/by-diskseq/72.tmp-b7:2' failed: Read-only file system [ 329.973393][ T9250] xt_socket: unknown flags 0x50 [ 330.114899][ T9] usb 5-1: USB disconnect, device number 40 [ 330.131873][ T5820] udevd[5820]: symlink '../../loop0' '/dev/disk/by-diskseq/78.tmp-b7:0' failed: Read-only file system [ 330.771861][ T5891] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 330.816212][ T5820] udevd[5820]: symlink '../../loop2' '/dev/disk/by-diskseq/72.tmp-b7:2' failed: Read-only file system [ 330.843620][ T9260] netlink: 14436 bytes leftover after parsing attributes in process `syz.2.785'. [ 330.853211][ T9260] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 330.862723][ T30] audit: type=1326 audit(1760824270.048:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9259 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b0b8efc9 code=0x7ffc0000 [ 330.888291][ T30] audit: type=1326 audit(1760824270.078:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9259 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b0b8efc9 code=0x7ffc0000 [ 330.915494][ T30] audit: type=1326 audit(1760824270.098:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9259 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21b0b8efc9 code=0x7ffc0000 [ 330.938702][ T5891] usb 2-1: Using ep0 maxpacket: 8 [ 330.956018][ T5891] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 330.963100][ T30] audit: type=1326 audit(1760824270.148:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9259 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b0b8efc9 code=0x7ffc0000 [ 330.965931][ T5891] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 330.990050][ T30] audit: type=1326 audit(1760824270.148:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9259 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b0b8efc9 code=0x7ffc0000 [ 331.108365][ T5820] udevd[5820]: symlink '../../loop0' '/dev/disk/by-diskseq/78.tmp-b7:0' failed: Read-only file system [ 331.127391][ T6060] udevd[6060]: symlink '../../loop2' '/dev/disk/by-diskseq/72.tmp-b7:2' failed: Read-only file system [ 331.152328][ T9264] binder: 9263:9264 ioctl 0 200000000040 returned -22 [ 331.162107][ T5891] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 331.165347][ T9262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.183611][ T5891] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 331.196716][ T5891] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 331.205793][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.215020][ T30] audit: type=1326 audit(1760824270.178:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9259 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f21b0b8efc9 code=0x7ffc0000 [ 331.249327][ T30] audit: type=1326 audit(1760824270.178:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9259 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b0b8efc9 code=0x7ffc0000 [ 331.322326][ T5820] udevd[5820]: symlink '../../loop0' '/dev/disk/by-diskseq/78.tmp-b7:0' failed: Read-only file system [ 331.322352][ T30] audit: type=1326 audit(1760824270.178:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9259 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b0b8efc9 code=0x7ffc0000 [ 331.358227][ T30] audit: type=1326 audit(1760824270.258:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9259 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21b0b8efc9 code=0x7ffc0000 [ 331.363048][ T5813] udevd[5813]: symlink '../../loop2' '/dev/disk/by-diskseq/72.tmp-b7:2' failed: Read-only file system [ 331.381418][ C0] vkms_vblank_simulate: vblank timer overrun [ 331.427216][ T9262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.449472][ T30] audit: type=1326 audit(1760824270.258:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9259 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b0b8efc9 code=0x7ffc0000 [ 331.580407][ T5891] usb 2-1: GET_CAPABILITIES returned 0 [ 331.586118][ T5891] usbtmc 2-1:16.0: can't read capabilities [ 331.694341][ T9] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 332.189514][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 332.201819][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 332.214031][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 332.226258][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 332.238360][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 332.250408][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 332.262451][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 332.274499][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 332.286546][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 332.301925][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 332.318450][ T9] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 332.327851][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.371701][ T9279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.533529][ T9] usb 3-1: Product: syz [ 332.780024][ T9279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.993540][ T9] usb 3-1: Manufacturer: syz [ 333.034892][ T9] usb 3-1: SerialNumber: syz [ 333.052043][ T1208] usb 2-1: USB disconnect, device number 40 [ 333.236312][ T9] usb 3-1: config 0 descriptor?? [ 333.322843][ T9] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 333.362270][ T9] usb 3-1: Detected FT232H [ 333.544150][ T5932] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 333.790223][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 333.817630][ T5932] usb 5-1: config index 0 descriptor too short (expected 29285, got 36) [ 334.106467][ T5932] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.690642][ T5932] usb 5-1: config 0 has no interfaces? [ 334.738903][ T5932] usb 5-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 334.755128][ T9290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.763639][ T9] ftdi_sio 3-1:0.0: GPIO initialisation failed: -32 [ 334.807519][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.820009][ T9] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 334.843825][ T5932] usb 5-1: Product: syz [ 334.848005][ T5932] usb 5-1: Manufacturer: syz [ 335.453523][ T5932] usb 5-1: SerialNumber: syz [ 335.662423][ T5932] usb 5-1: config 0 descriptor?? [ 335.853518][ C1] net_ratelimit: 15590 callbacks suppressed [ 335.853535][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 335.871460][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 335.883519][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 335.895551][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 335.907564][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 335.919598][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 335.931611][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 335.943770][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 335.955947][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 335.968121][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 335.986961][ T9290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.524320][ T9] usb 5-1: USB disconnect, device number 41 [ 338.218187][ T5820] udevd[5820]: symlink '../../loop0' '/dev/disk/by-diskseq/78.tmp-b7:0' failed: Read-only file system [ 338.244683][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 338.244697][ T30] audit: type=1400 audit(1760824277.428:541): avc: denied { write } for pid=9301 comm="syz.3.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 338.375477][ T9] usb 3-1: USB disconnect, device number 45 [ 338.419011][ T5820] udevd[5820]: symlink '../../loop2' '/dev/disk/by-diskseq/72.tmp-b7:2' failed: Read-only file system [ 338.438869][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 338.507686][ T30] audit: type=1400 audit(1760824277.428:542): avc: denied { setopt } for pid=9301 comm="syz.3.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 338.541405][ T9] ftdi_sio 3-1:0.0: device disconnected [ 338.604284][ T5932] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 338.637730][ T9308] netlink: 12 bytes leftover after parsing attributes in process `syz.2.799'. [ 338.756491][ T5820] udevd[5820]: symlink '../../loop0' '/dev/disk/by-diskseq/78.tmp-b7:0' failed: Read-only file system [ 338.823576][ T5932] usb 5-1: Using ep0 maxpacket: 8 [ 338.894283][ T5932] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 338.929390][ T5932] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 339.006773][ T5932] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 339.036323][ T5932] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 339.065989][ T5932] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 339.201412][ T9309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.228812][ T5820] udevd[5820]: symlink '../../loop2' '/dev/disk/by-diskseq/72.tmp-b7:2' failed: Read-only file system [ 339.297777][ T5932] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 339.314415][ T9309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.350596][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.362811][ T9318] input: syz0 as /devices/virtual/input/input18 [ 339.369144][ T9] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 339.556187][ T9] usb 1-1: config index 0 descriptor too short (expected 29285, got 36) [ 339.577097][ T9320] netlink: 28 bytes leftover after parsing attributes in process `syz.2.802'. [ 339.943749][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.955287][ T5932] usb 5-1: GET_CAPABILITIES returned 0 [ 339.960770][ T5932] usbtmc 5-1:16.0: can't read capabilities [ 339.992866][ T9] usb 1-1: config 0 has no interfaces? [ 340.270691][ T9303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.293869][ T9303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.767683][ T9] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 340.781280][ T5932] usb 5-1: USB disconnect, device number 42 [ 340.863576][ C1] net_ratelimit: 22546 callbacks suppressed [ 340.863589][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.881623][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 340.893658][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.905675][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.917777][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 340.929800][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.941820][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.953921][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 340.965932][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.977955][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.069861][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.311187][ T9] usb 1-1: Product: syz [ 341.344558][ T9] usb 1-1: Manufacturer: syz [ 341.363138][ T9] usb 1-1: SerialNumber: syz [ 341.375697][ T9324] xt_socket: unknown flags 0x50 [ 342.805489][ T9324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.819853][ T9324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.862882][ T9] usb 1-1: config 0 descriptor?? [ 342.943195][ T9] usb 1-1: can't set config #0, error -71 [ 343.015167][ T9] usb 1-1: USB disconnect, device number 37 [ 343.082267][ T9328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.138516][ T9328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.190148][ T30] audit: type=1326 audit(1760824282.378:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9331 comm="syz.1.807" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe39eb8efc9 code=0x0 [ 343.226805][ T5809] udevd[5809]: symlink '../../loop0' '/dev/disk/by-diskseq/78.tmp-b7:0' failed: Read-only file system [ 343.341005][ T5820] udevd[5820]: symlink '../../loop0' '/dev/disk/by-diskseq/78.tmp-b7:0' failed: Read-only file system [ 343.374095][ T30] audit: type=1400 audit(1760824282.518:544): avc: denied { ioctl } for pid=9331 comm="syz.1.807" path="socket:[26444]" dev="sockfs" ino=26444 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 345.873656][ C1] net_ratelimit: 27847 callbacks suppressed [ 345.873668][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.891774][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.903983][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 345.916175][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.928503][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.940820][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 345.952929][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.965168][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.977328][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 345.989526][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 346.574786][ T9351] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 346.928564][ T5820] udevd[5820]: symlink '../../loop2' '/dev/disk/by-diskseq/72.tmp-b7:2' failed: Read-only file system [ 347.103928][ T9362] lo speed is unknown, defaulting to 1000 [ 347.187092][ T9362] lo speed is unknown, defaulting to 1000 [ 347.249378][ T9362] lo speed is unknown, defaulting to 1000 [ 350.883572][ C1] net_ratelimit: 27485 callbacks suppressed [ 350.883585][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.901622][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.913876][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 350.925912][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.937926][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.950031][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 350.962038][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.974057][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.986223][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 350.998250][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.328927][ T9385] binder: 9382:9385 ioctl 0 200000000040 returned -22 [ 355.893643][ C1] net_ratelimit: 29229 callbacks suppressed [ 355.893656][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.911838][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 355.923932][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.935988][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.948112][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 355.960145][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.972177][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.984335][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 355.996387][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.008429][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.052567][ C1] sched: DL replenish lagged too much [ 360.903642][ C1] net_ratelimit: 23261 callbacks suppressed [ 360.903662][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.904358][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 360.909857][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 360.922574][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 360.933852][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.946510][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 360.957734][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.970404][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 360.981641][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 360.994460][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 365.913492][ C1] net_ratelimit: 19367 callbacks suppressed [ 365.913511][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.914019][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 365.919687][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.932301][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 365.943589][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 365.956293][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 365.967540][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.980192][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 365.991431][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.004071][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 370.923569][ C1] net_ratelimit: 20527 callbacks suppressed [ 370.923587][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 370.924110][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 370.929750][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 370.942424][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 370.953717][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 370.966307][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 370.977619][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 370.990198][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 371.001497][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 371.014192][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 375.933583][ C1] net_ratelimit: 20312 callbacks suppressed [ 375.933601][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 375.934078][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 375.939773][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 375.952347][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 375.963656][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 375.976315][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 375.987629][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.000250][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 376.011524][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.024143][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 380.519826][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.943700][ C1] net_ratelimit: 19023 callbacks suppressed [ 380.943719][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 380.943931][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 380.949916][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 380.962336][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 380.973748][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 380.986143][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 380.997548][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 381.010043][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 381.021464][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.033882][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 385.953658][ C1] net_ratelimit: 19898 callbacks suppressed [ 385.953676][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.954284][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 385.959855][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 385.972406][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 385.983778][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.996230][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 386.007605][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.020035][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 386.031409][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 386.043956][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 390.963583][ C0] net_ratelimit: 19573 callbacks suppressed [ 390.963601][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 390.963629][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 390.970370][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 390.982167][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 390.994213][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 391.005559][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 391.018097][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 391.029474][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.041927][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 391.053280][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 395.973490][ C1] net_ratelimit: 20406 callbacks suppressed [ 395.973507][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 395.974274][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 395.979681][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 395.992128][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 396.003507][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 396.016054][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 396.027395][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.039857][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 396.051212][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.063710][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 400.983510][ C1] net_ratelimit: 20546 callbacks suppressed [ 400.983530][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 400.983814][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 400.989680][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 401.002243][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 401.013610][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.026060][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 401.037414][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.049900][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 401.061240][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 401.073800][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 405.993543][ C1] net_ratelimit: 19480 callbacks suppressed [ 405.993561][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 405.994245][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 405.999722][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 406.012297][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 406.023664][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.036105][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 406.047465][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.059929][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 406.071320][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 406.083889][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 411.003520][ C1] net_ratelimit: 20643 callbacks suppressed [ 411.003539][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.003792][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 411.009694][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.022166][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 411.033542][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 411.046097][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 411.057431][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.069894][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 411.081263][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.093720][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 416.013604][ C1] net_ratelimit: 20121 callbacks suppressed [ 416.013624][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 416.014106][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 416.019815][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 416.032340][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 416.043727][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 416.056165][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 416.067557][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 416.079991][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 416.091363][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 416.103883][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 421.023492][ C1] net_ratelimit: 20185 callbacks suppressed [ 421.023510][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 421.023619][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 421.029665][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 421.042159][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 421.053607][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 421.065981][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 421.077324][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 421.089895][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 421.101235][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 421.113885][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 426.033487][ C0] net_ratelimit: 20613 callbacks suppressed [ 426.033506][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 426.033538][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 426.040266][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 426.051637][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 426.064106][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 426.075452][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 426.088009][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 426.099364][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 426.111804][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 426.123182][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.043498][ C1] net_ratelimit: 20333 callbacks suppressed [ 431.043516][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.043832][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 431.049687][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.062146][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 431.073537][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 431.086059][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 431.097408][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.109966][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 431.121230][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.133686][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 436.053493][ C0] net_ratelimit: 20312 callbacks suppressed [ 436.053512][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 436.053547][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.060241][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 436.071650][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 436.084227][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 436.095536][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.107991][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 436.119365][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.131803][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 436.143180][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 439.817325][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.063467][ C1] net_ratelimit: 20131 callbacks suppressed [ 441.063485][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 441.063531][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 441.069652][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.082220][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 441.093570][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.106012][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 441.117374][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 441.129945][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 441.141275][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.153755][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 446.073515][ C1] net_ratelimit: 20205 callbacks suppressed [ 446.073532][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 446.073534][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 446.074369][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 446.079686][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.092195][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 446.103532][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.116073][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 446.127333][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 446.139943][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 446.151235][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.083451][ C1] net_ratelimit: 20196 callbacks suppressed [ 451.083469][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 451.084185][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 451.089633][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.102092][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 451.113490][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.125927][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 451.137294][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 451.149799][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 451.161186][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.173669][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 456.093459][ C1] net_ratelimit: 20350 callbacks suppressed [ 456.093478][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 456.094155][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 456.099636][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 456.112093][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 456.123490][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 456.136003][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 456.147384][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 456.159848][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 456.171200][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 456.183683][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 461.103677][ C1] net_ratelimit: 20342 callbacks suppressed [ 461.103696][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 461.104425][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 461.109862][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 461.122329][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 461.133698][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 461.146257][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 461.157609][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 461.170057][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 461.181406][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 461.193887][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 466.113446][ C1] net_ratelimit: 20195 callbacks suppressed [ 466.113463][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 466.113992][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 466.119635][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 466.132115][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 466.143478][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 466.156019][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 466.167365][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 466.179839][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 466.191179][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 466.203651][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 471.123478][ C1] net_ratelimit: 20268 callbacks suppressed [ 471.123497][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 471.123989][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 471.129661][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 471.142120][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 471.153506][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 471.165939][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 471.177307][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 471.189851][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 471.201207][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 471.213670][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 476.133465][ C1] net_ratelimit: 20330 callbacks suppressed [ 476.133483][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 476.133908][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 476.139671][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 476.152120][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 476.163496][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 476.175953][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 476.187301][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 476.199858][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 476.211198][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 476.223669][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 481.143517][ C1] net_ratelimit: 20374 callbacks suppressed [ 481.143535][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 481.143602][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 481.149724][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 481.162269][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 481.173637][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 481.186092][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 481.197446][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 481.209922][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 481.221267][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 481.233846][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 486.153522][ C1] net_ratelimit: 20217 callbacks suppressed [ 486.153542][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 486.154220][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 486.159719][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 486.172191][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 486.183554][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 486.195998][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 486.207354][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 486.219947][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 486.231271][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 486.243747][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 491.163492][ C1] net_ratelimit: 20257 callbacks suppressed [ 491.163510][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 491.163788][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 491.169663][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 491.182228][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 491.193503][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 491.205939][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 491.217317][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 491.229862][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 491.241203][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 491.253714][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 496.173514][ C1] net_ratelimit: 20273 callbacks suppressed [ 496.173533][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 496.173613][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 496.179720][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 496.192174][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 496.203545][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 496.216059][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 496.227424][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 496.239877][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 496.251243][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 496.263802][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 501.183493][ C1] net_ratelimit: 20340 callbacks suppressed [ 501.183527][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 501.183695][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 501.189706][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 501.202155][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 501.213550][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 501.225977][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 501.237343][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 501.249892][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 501.261242][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 501.273703][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 506.193515][ C0] net_ratelimit: 20242 callbacks suppressed [ 506.193535][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 506.193564][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 506.200309][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 506.211667][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 506.224164][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 506.235489][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 506.248037][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 506.259387][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 506.271866][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 506.283217][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 511.203483][ C1] net_ratelimit: 20150 callbacks suppressed [ 511.203501][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 511.203905][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 511.210091][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 511.222561][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 511.233930][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 511.246570][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 511.257869][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 511.270417][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 511.281693][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 511.294170][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 516.213483][ C1] net_ratelimit: 20233 callbacks suppressed [ 516.213503][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 516.213664][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 516.219675][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 516.232146][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 516.243529][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 516.256050][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 516.267402][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 516.279888][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 516.291218][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 516.303688][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 521.223424][ C1] net_ratelimit: 20209 callbacks suppressed [ 521.223442][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 521.223943][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 521.229618][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 521.242160][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 521.253533][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 521.266003][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 521.277339][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 521.289809][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 521.301160][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 521.313727][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 526.233628][ C1] net_ratelimit: 20306 callbacks suppressed [ 526.233645][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 526.233861][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 526.239807][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 526.252531][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 526.263667][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 526.276148][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 526.287492][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 526.300366][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 526.311421][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 526.323872][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 527.343353][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 527.350324][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9341/2:b..l P9362/1:b..l P5795/3:b..l P5805/1:b..l P5182/1:b..l [ 527.363227][ C1] rcu: (detected by 1, t=10503 jiffies, g=30105, q=455 ncpus=2) [ 527.370940][ C1] task:udevd state:R running task stack:24728 pid:5182 tgid:5182 ppid:1 task_flags:0x400140 flags:0x00080001 [ 527.385254][ C1] Call Trace: [ 527.388534][ C1] [ 527.391467][ C1] __schedule+0x1190/0x5de0 [ 527.395971][ C1] ? __schedule+0x11a3/0x5de0 [ 527.400652][ C1] ? __schedule+0x11a3/0x5de0 [ 527.405328][ C1] ? __pfx___schedule+0x10/0x10 [ 527.410177][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 527.415118][ C1] ? mark_held_locks+0x49/0x80 [ 527.419884][ C1] preempt_schedule_irq+0x51/0x90 [ 527.424909][ C1] irqentry_exit+0x36/0x90 [ 527.429320][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 527.435293][ C1] RIP: 0010:lock_acquire+0x62/0x350 [ 527.440487][ C1] Code: 87 0b 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 a2 20 ea 0e 0f 82 74 02 00 00 8b 35 1a 51 ea 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 b9 86 0b 12 0f 85 c7 02 00 00 48 83 c4 [ 527.460085][ C1] RSP: 0018:ffffc9000458f468 EFLAGS: 00000206 [ 527.466148][ C1] RAX: 0000000000000046 RBX: ffffffff8e3c4460 RCX: 000000006b6d924c [ 527.474109][ C1] RDX: 0000000000000000 RSI: ffffffff8dade5b8 RDI: ffffffff8bf1ea40 [ 527.482073][ C1] RBP: 0000000000000002 R08: 616cc6d321971e69 R09: 0000000000000000 [ 527.490038][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 527.498001][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 527.505980][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 527.511190][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 527.517341][ C1] unwind_next_frame+0xd1/0x20a0 [ 527.522283][ C1] ? unwind_next_frame+0xbd/0x20a0 [ 527.527398][ C1] ? tomoyo_realpath_from_path+0x18f/0x6e0 [ 527.533210][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 527.539358][ C1] arch_stack_walk+0x94/0x100 [ 527.544043][ C1] ? tomoyo_realpath_from_path+0x18f/0x6e0 [ 527.549853][ C1] stack_trace_save+0x8e/0xc0 [ 527.554525][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 527.559894][ C1] ? __lock_acquire+0x622/0x1c90 [ 527.564831][ C1] save_stack+0x160/0x1f0 [ 527.569160][ C1] ? __pfx_save_stack+0x10/0x10 [ 527.574011][ C1] ? __free_frozen_pages+0x7df/0x1160 [ 527.579374][ C1] ? __put_partials+0x130/0x170 [ 527.584223][ C1] ? qlist_free_all+0x4d/0x120 [ 527.588986][ C1] ? kasan_quarantine_reduce+0x195/0x1e0 [ 527.594616][ C1] ? __kasan_slab_alloc+0x69/0x90 [ 527.599640][ C1] ? __kmalloc_noprof+0x2e8/0x880 [ 527.604655][ C1] ? tomoyo_encode2+0x100/0x3e0 [ 527.609504][ C1] ? tomoyo_encode+0x29/0x50 [ 527.614092][ C1] ? tomoyo_realpath_from_path+0x18f/0x6e0 [ 527.619903][ C1] ? page_ext_put+0x3e/0xd0 [ 527.624410][ C1] __reset_page_owner+0x84/0x1a0 [ 527.629350][ C1] __free_frozen_pages+0x7df/0x1160 [ 527.634548][ C1] ? mark_held_locks+0x49/0x80 [ 527.639315][ C1] __put_partials+0x130/0x170 [ 527.643994][ C1] qlist_free_all+0x4d/0x120 [ 527.648585][ C1] kasan_quarantine_reduce+0x195/0x1e0 [ 527.654044][ C1] __kasan_slab_alloc+0x69/0x90 [ 527.658894][ C1] __kmalloc_noprof+0x2e8/0x880 [ 527.663738][ C1] ? tomoyo_encode2+0x100/0x3e0 [ 527.668596][ C1] ? tomoyo_encode2+0x100/0x3e0 [ 527.673448][ C1] tomoyo_encode2+0x100/0x3e0 [ 527.678130][ C1] tomoyo_encode+0x29/0x50 [ 527.682546][ C1] tomoyo_realpath_from_path+0x18f/0x6e0 [ 527.688185][ C1] tomoyo_path_perm+0x274/0x460 [ 527.693033][ C1] ? tomoyo_path_perm+0x260/0x460 [ 527.698061][ C1] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 527.703463][ C1] ? find_held_lock+0x2b/0x80 [ 527.708132][ C1] ? __might_fault+0xe3/0x190 [ 527.712808][ C1] ? __might_fault+0xe3/0x190 [ 527.717482][ C1] ? __might_fault+0x13b/0x190 [ 527.722246][ C1] security_inode_getattr+0x116/0x290 [ 527.727620][ C1] vfs_statx+0x121/0x3f0 [ 527.731866][ C1] ? __pfx_vfs_statx+0x10/0x10 [ 527.736633][ C1] ? getname_flags.part.0+0x1c5/0x550 [ 527.742004][ C1] vfs_fstatat+0x7b/0xf0 [ 527.746243][ C1] __do_sys_newfstatat+0x97/0x120 [ 527.751261][ C1] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 527.756904][ C1] ? xfd_validate_state+0x61/0x180 [ 527.762023][ C1] do_syscall_64+0xcd/0xfa0 [ 527.766527][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.772415][ C1] RIP: 0033:0x7f4b93711b0a [ 527.776823][ C1] RSP: 002b:00007ffd0db225a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 527.785231][ C1] RAX: ffffffffffffffda RBX: 0000559cf9673418 RCX: 00007f4b93711b0a [ 527.793197][ C1] RDX: 00007ffd0db225b0 RSI: 0000559cf9661ef3 RDI: 00000000ffffff9c [ 527.801161][ C1] RBP: 0000559d1e5ed668 R08: 00064175c6889ec2 R09: 00007f4b93f2f000 [ 527.809127][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.817090][ C1] R13: 00007ffd0db225b0 R14: 0000000000000000 R15: 00064175c6889ec2 [ 527.825073][ C1] [ 527.828085][ C1] task:syz-executor state:R running task stack:23336 pid:5805 tgid:5805 ppid:5801 task_flags:0x400140 flags:0x00080001 [ 527.841569][ C1] Call Trace: [ 527.844838][ C1] [ 527.847767][ C1] __schedule+0x1190/0x5de0 [ 527.852276][ C1] ? is_bpf_text_address+0x8a/0x1a0 [ 527.857487][ C1] ? __pfx___schedule+0x10/0x10 [ 527.862336][ C1] ? __lock_acquire+0x622/0x1c90 [ 527.867282][ C1] ? mark_held_locks+0x49/0x80 [ 527.872042][ C1] ? irqentry_exit+0x3b/0x90 [ 527.876628][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 527.881824][ C1] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 527.887891][ C1] preempt_schedule_notrace+0x62/0xe0 [ 527.893263][ C1] preempt_schedule_notrace_thunk+0x16/0x30 [ 527.899161][ C1] rcu_is_watching+0x8e/0xc0 [ 527.903746][ C1] lock_acquire+0x2cd/0x350 [ 527.908250][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 527.913455][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 527.919604][ C1] unwind_next_frame+0xd1/0x20a0 [ 527.924541][ C1] ? unwind_next_frame+0xbd/0x20a0 [ 527.929653][ C1] ? __do_sys_newfstatat+0x97/0x120 [ 527.934848][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 527.940996][ C1] arch_stack_walk+0x94/0x100 [ 527.945677][ C1] ? __do_sys_newfstatat+0x97/0x120 [ 527.950872][ C1] stack_trace_save+0x8e/0xc0 [ 527.955546][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 527.960914][ C1] ? __lock_acquire+0x622/0x1c90 [ 527.965854][ C1] save_stack+0x160/0x1f0 [ 527.970180][ C1] ? __pfx_save_stack+0x10/0x10 [ 527.975028][ C1] ? __free_frozen_pages+0x7df/0x1160 [ 527.980397][ C1] ? qlist_free_all+0x4d/0x120 [ 527.985157][ C1] ? kasan_quarantine_reduce+0x195/0x1e0 [ 527.990787][ C1] ? __kasan_kmalloc+0x8a/0xb0 [ 527.995550][ C1] ? __kmalloc_noprof+0x32f/0x880 [ 528.000567][ C1] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 528.006285][ C1] ? tomoyo_path_perm+0x274/0x460 [ 528.011313][ C1] ? security_inode_getattr+0x116/0x290 [ 528.016873][ C1] ? vfs_statx+0x121/0x3f0 [ 528.021293][ C1] ? vfs_fstatat+0x7b/0xf0 [ 528.025700][ C1] ? __do_sys_newfstatat+0x97/0x120 [ 528.030895][ C1] ? page_ext_put+0x3e/0xd0 [ 528.035405][ C1] __reset_page_owner+0x84/0x1a0 [ 528.040350][ C1] __free_frozen_pages+0x7df/0x1160 [ 528.045553][ C1] qlist_free_all+0x4d/0x120 [ 528.050148][ C1] kasan_quarantine_reduce+0x195/0x1e0 [ 528.055607][ C1] __kasan_kmalloc+0x8a/0xb0 [ 528.060198][ C1] __kmalloc_noprof+0x32f/0x880 [ 528.065044][ C1] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 528.070771][ C1] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 528.076493][ C1] tomoyo_realpath_from_path+0xc2/0x6e0 [ 528.082041][ C1] ? tomoyo_profile+0x47/0x60 [ 528.086718][ C1] tomoyo_path_perm+0x274/0x460 [ 528.091565][ C1] ? tomoyo_path_perm+0x260/0x460 [ 528.096589][ C1] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 528.101987][ C1] ? find_held_lock+0x2b/0x80 [ 528.106659][ C1] ? __might_fault+0xe3/0x190 [ 528.111335][ C1] ? __might_fault+0xe3/0x190 [ 528.116019][ C1] ? __might_fault+0x13b/0x190 [ 528.120784][ C1] security_inode_getattr+0x116/0x290 [ 528.126157][ C1] vfs_statx+0x121/0x3f0 [ 528.130406][ C1] ? __pfx_vfs_statx+0x10/0x10 [ 528.135174][ C1] ? getname_flags.part.0+0x1c5/0x550 [ 528.140545][ C1] vfs_fstatat+0x7b/0xf0 [ 528.144781][ C1] __do_sys_newfstatat+0x97/0x120 [ 528.149797][ C1] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 528.155438][ C1] ? xfd_validate_state+0x61/0x180 [ 528.160554][ C1] do_syscall_64+0xcd/0xfa0 [ 528.165056][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.170945][ C1] RIP: 0033:0x7fe39eb8d6ba [ 528.175355][ C1] RSP: 002b:00007ffe6db1aca8 EFLAGS: 00000286 ORIG_RAX: 0000000000000106 [ 528.183762][ C1] RAX: ffffffffffffffda RBX: 00007fe39ec11d7d RCX: 00007fe39eb8d6ba [ 528.191725][ C1] RDX: 00007ffe6db1acd0 RSI: 00007ffe6db1ad60 RDI: 00000000ffffff9c [ 528.199686][ C1] RBP: 00007ffe6db1ad60 R08: 0000000000000000 R09: 0000000000000000 [ 528.207674][ C1] R10: 0000000000000100 R11: 0000000000000286 R12: 00007ffe6db1bdf0 [ 528.215642][ C1] R13: 00007fe39ec11d7d R14: 0000000000056694 R15: 00007ffe6db1be30 [ 528.223622][ C1] [ 528.226633][ C1] task:syz-executor state:R running task stack:23816 pid:5795 tgid:5795 ppid:5794 task_flags:0x400100 flags:0x00080001 [ 528.240113][ C1] Call Trace: [ 528.243383][ C1] [ 528.246310][ C1] __schedule+0x1190/0x5de0 [ 528.250846][ C1] ? __pfx___schedule+0x10/0x10 [ 528.255695][ C1] ? sch_direct_xmit+0x39a/0xcf0 [ 528.260633][ C1] ? _raw_spin_unlock+0x28/0x50 [ 528.265478][ C1] ? sch_direct_xmit+0x23f/0xcf0 [ 528.270412][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 528.275782][ C1] preempt_schedule_common+0x44/0xc0 [ 528.281063][ C1] preempt_schedule_thunk+0x16/0x30 [ 528.286267][ C1] ? __dev_queue_xmit+0xaf1/0x4490 [ 528.291373][ C1] __local_bh_enable_ip+0x107/0x120 [ 528.296566][ C1] ? __dev_queue_xmit+0xaf1/0x4490 [ 528.301669][ C1] __dev_queue_xmit+0xb06/0x4490 [ 528.306607][ C1] ? is_bpf_text_address+0x8a/0x1a0 [ 528.311809][ C1] ? bpf_ksym_find+0x127/0x1c0 [ 528.316569][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 528.321936][ C1] ? selinux_ip_postroute+0x660/0xde0 [ 528.327303][ C1] ? __pfx_selinux_ip_postroute+0x10/0x10 [ 528.333016][ C1] ? arch_stack_walk+0xa6/0x100 [ 528.337868][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 528.342827][ C1] ip_finish_output2+0xc38/0x21a0 [ 528.347861][ C1] ? __pfx_ip_finish_output2+0x10/0x10 [ 528.353321][ C1] ? skb_gso_transport_seglen+0x1a5/0x3b0 [ 528.359050][ C1] __ip_finish_output.part.0+0x1b4/0x350 [ 528.364685][ C1] ip_output+0x35f/0xa90 [ 528.368932][ C1] __ip_queue_xmit+0x1bee/0x2330 [ 528.373877][ C1] ? __pfx_ip_queue_xmit+0x10/0x10 [ 528.378991][ C1] __tcp_transmit_skb+0x2caf/0x44d0 [ 528.384196][ C1] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 528.389738][ C1] ? __build_skb_around+0x278/0x3b0 [ 528.394943][ C1] ? get_page+0x12b/0x270 [ 528.399289][ C1] tcp_write_xmit+0x12a9/0x86e0 [ 528.404155][ C1] ? sk_leave_memory_pressure+0x7c/0x130 [ 528.409793][ C1] ? __pfx__copy_from_iter+0x10/0x10 [ 528.415076][ C1] __tcp_push_pending_frames+0xaf/0x390 [ 528.420623][ C1] tcp_push+0x225/0x700 [ 528.424778][ C1] tcp_sendmsg_locked+0x189b/0x42e0 [ 528.429990][ C1] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 528.435533][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 528.440561][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 528.445941][ C1] ? __local_bh_enable_ip+0xa4/0x120 [ 528.451224][ C1] tcp_sendmsg+0x2e/0x50 [ 528.455459][ C1] ? __pfx_tcp_sendmsg+0x10/0x10 [ 528.460388][ C1] inet_sendmsg+0xb9/0x140 [ 528.464800][ C1] sock_write_iter+0x509/0x610 [ 528.469566][ C1] ? __pfx_sock_write_iter+0x10/0x10 [ 528.474851][ C1] ? ___pte_offset_map+0x2ad/0x4f0 [ 528.479971][ C1] ? bpf_lsm_file_permission+0x9/0x10 [ 528.485341][ C1] ? security_file_permission+0x71/0x210 [ 528.490982][ C1] ? rw_verify_area+0xcf/0x6c0 [ 528.495742][ C1] vfs_write+0x7d3/0x11d0 [ 528.500076][ C1] ? __pfx_sock_write_iter+0x10/0x10 [ 528.505372][ C1] ? __pfx_vfs_write+0x10/0x10 [ 528.510136][ C1] ? find_held_lock+0x2b/0x80 [ 528.514815][ C1] ? handle_mm_fault+0x61e/0xd10 [ 528.519751][ C1] ksys_write+0x1f8/0x250 [ 528.524079][ C1] ? __pfx_ksys_write+0x10/0x10 [ 528.528935][ C1] do_syscall_64+0xcd/0xfa0 [ 528.533439][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.539329][ C1] RIP: 0033:0x7fa03ed8da40 [ 528.543741][ C1] RSP: 002b:00007ffd6dc03618 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 528.552149][ C1] RAX: ffffffffffffffda RBX: 00000008e6356f80 RCX: 00007fa03ed8da40 [ 528.560112][ C1] RDX: 00000000000046b0 RSI: 00007fa03bdfb950 RDI: 0000000000000003 [ 528.568075][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 00000000003ffde8 [ 528.576043][ C1] R10: f8ce62fbefefc408 R11: 0000000000000202 R12: 00000000000046b0 [ 528.584010][ C1] R13: 00005555683edb30 R14: 00007ffd6dc03b20 R15: 00007fa03bdfb950 [ 528.591992][ C1] [ 528.595004][ C1] task:syz.3.809 state:R running task stack:23208 pid:9362 tgid:9347 ppid:5808 task_flags:0x400140 flags:0x00080003 [ 528.608487][ C1] Call Trace: [ 528.611760][ C1] [ 528.614685][ C1] __schedule+0x1190/0x5de0 [ 528.619185][ C1] ? trace_sched_exit_tp+0xd1/0x120 [ 528.624401][ C1] ? __pfx___schedule+0x10/0x10 [ 528.629253][ C1] ? __lock_acquire+0x622/0x1c90 [ 528.634191][ C1] ? mark_held_locks+0x49/0x80 [ 528.638955][ C1] preempt_schedule_irq+0x51/0x90 [ 528.643978][ C1] irqentry_exit+0x36/0x90 [ 528.648388][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 528.654372][ C1] RIP: 0010:stack_access_ok+0x21/0x200 [ 528.659830][ C1] Code: 90 90 90 90 90 90 90 90 90 48 b8 00 00 00 00 00 fc ff df 41 57 41 56 4c 8d 77 08 41 55 41 54 49 89 d4 4c 89 f2 55 48 c1 ea 03 <48> 89 f5 53 48 89 fb 48 83 ec 08 80 3c 02 00 0f 85 94 01 00 00 4c [ 528.679431][ C1] RSP: 0018:ffffc9000469e670 EFLAGS: 00000a02 [ 528.685498][ C1] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffffff912b61cc [ 528.693463][ C1] RDX: 1ffff920008d3ce3 RSI: ffffc9000469ed78 RDI: ffffc9000469e710 [ 528.701428][ C1] RBP: ffffc9000469e758 R08: ffffffff912b61d0 R09: 0000000000000000 [ 528.709390][ C1] R10: 0000000000000000 R11: 0000000000016626 R12: 0000000000000008 [ 528.717353][ C1] R13: ffffc9000469e710 R14: ffffc9000469e718 R15: ffffc9000469e744 [ 528.725335][ C1] unwind_next_frame+0xcfe/0x20a0 [ 528.730368][ C1] ? __kernfs_create_file+0x53/0x350 [ 528.735656][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 528.741807][ C1] arch_stack_walk+0x94/0x100 [ 528.746489][ C1] ? __kernfs_create_file+0x53/0x350 [ 528.751778][ C1] stack_trace_save+0x8e/0xc0 [ 528.756453][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 528.761821][ C1] ? __lock_acquire+0x622/0x1c90 [ 528.766759][ C1] save_stack+0x160/0x1f0 [ 528.771084][ C1] ? __pfx_save_stack+0x10/0x10 [ 528.775929][ C1] ? __free_frozen_pages+0x7df/0x1160 [ 528.781294][ C1] ? __put_partials+0x130/0x170 [ 528.786136][ C1] ? qlist_free_all+0x4d/0x120 [ 528.790894][ C1] ? kasan_quarantine_reduce+0x195/0x1e0 [ 528.796524][ C1] ? __kasan_slab_alloc+0x69/0x90 [ 528.801545][ C1] ? __kmalloc_node_track_caller_noprof+0x2fd/0x8a0 [ 528.808128][ C1] ? kstrdup+0x53/0x100 [ 528.812278][ C1] ? kstrdup_const+0x63/0x80 [ 528.816861][ C1] ? __kernfs_new_node+0x9b/0x8e0 [ 528.821876][ C1] ? kernfs_new_node+0x13c/0x1e0 [ 528.826807][ C1] ? __kernfs_create_file+0x53/0x350 [ 528.832096][ C1] ? page_ext_put+0x3e/0xd0 [ 528.836601][ C1] __reset_page_owner+0x84/0x1a0 [ 528.841540][ C1] __free_frozen_pages+0x7df/0x1160 [ 528.846730][ C1] ? mark_held_locks+0x49/0x80 [ 528.851495][ C1] __put_partials+0x130/0x170 [ 528.856173][ C1] qlist_free_all+0x4d/0x120 [ 528.860764][ C1] kasan_quarantine_reduce+0x195/0x1e0 [ 528.866221][ C1] __kasan_slab_alloc+0x69/0x90 [ 528.871072][ C1] __kmalloc_node_track_caller_noprof+0x2fd/0x8a0 [ 528.877483][ C1] ? kstrdup_const+0x63/0x80 [ 528.882074][ C1] ? kstrdup+0x53/0x100 [ 528.886226][ C1] kstrdup+0x53/0x100 [ 528.890204][ C1] kstrdup_const+0x63/0x80 [ 528.894616][ C1] __kernfs_new_node+0x9b/0x8e0 [ 528.899464][ C1] ? __pfx___kernfs_new_node+0x10/0x10 [ 528.904923][ C1] ? find_held_lock+0x2b/0x80 [ 528.909595][ C1] ? kernfs_root+0xee/0x2a0 [ 528.914099][ C1] kernfs_new_node+0x13c/0x1e0 [ 528.918866][ C1] __kernfs_create_file+0x53/0x350 [ 528.923978][ C1] sysfs_add_file_mode_ns+0x207/0x3c0 [ 528.929362][ C1] internal_create_group+0x578/0xf30 [ 528.934649][ C1] ? __pfx_internal_create_group+0x10/0x10 [ 528.940450][ C1] ? __pfx_kobject_add+0x10/0x10 [ 528.945402][ C1] internal_create_groups+0x9d/0x150 [ 528.950685][ C1] ib_setup_port_attrs+0x41f/0x600 [ 528.955800][ C1] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 528.961439][ C1] ? rdma_counter_init+0x1f8/0x3f0 [ 528.966549][ C1] ? __pfx_rxe_ib_alloc_hw_port_stats+0x10/0x10 [ 528.972795][ C1] ib_register_device+0x85f/0xe00 [ 528.977833][ C1] ? __pfx_ib_register_device+0x10/0x10 [ 528.983377][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 528.988579][ C1] ? ib_device_set_netdev+0x7e/0x860 [ 528.993869][ C1] rxe_register_device+0x275/0x320 [ 528.998982][ C1] rxe_net_add+0x95/0xf0 [ 529.003222][ C1] rxe_newlink+0x70/0x190 [ 529.007549][ C1] nldev_newlink+0x3a6/0x680 [ 529.012138][ C1] ? __pfx_nldev_newlink+0x10/0x10 [ 529.017240][ C1] ? __lock_acquire+0x622/0x1c90 [ 529.022244][ C1] ? cred_has_capability.isra.0+0x190/0x310 [ 529.028141][ C1] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 529.034400][ C1] ? security_capable+0x7e/0x260 [ 529.039339][ C1] ? ns_capable+0xd7/0x110 [ 529.043759][ C1] ? __pfx_nldev_newlink+0x10/0x10 [ 529.048869][ C1] rdma_nl_rcv_msg+0x38a/0x6e0 [ 529.053633][ C1] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 529.058918][ C1] ? __lock_acquire+0x622/0x1c90 [ 529.063858][ C1] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 529.070271][ C1] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 529.077210][ C1] ? netlink_deliver_tap+0x1ae/0xd30 [ 529.082504][ C1] netlink_unicast+0x5aa/0x870 [ 529.087272][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 529.092569][ C1] netlink_sendmsg+0x8c8/0xdd0 [ 529.097338][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 529.102636][ C1] ____sys_sendmsg+0xa98/0xc70 [ 529.107403][ C1] ? copy_msghdr_from_user+0x10a/0x160 [ 529.112865][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 529.118167][ C1] ___sys_sendmsg+0x134/0x1d0 [ 529.122840][ C1] ? futex_private_hash_put+0x176/0x300 [ 529.128387][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 529.133580][ C1] ? __lock_acquire+0x622/0x1c90 [ 529.138551][ C1] __sys_sendmsg+0x16d/0x220 [ 529.143149][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 529.148256][ C1] ? __x64_sys_futex+0x1e0/0x4c0 [ 529.153209][ C1] do_syscall_64+0xcd/0xfa0 [ 529.157716][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.163605][ C1] RIP: 0033:0x7fcf8758efc9 [ 529.168010][ C1] RSP: 002b:00007fcf884c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 529.176419][ C1] RAX: ffffffffffffffda RBX: 00007fcf877e6090 RCX: 00007fcf8758efc9 [ 529.184387][ C1] RDX: 0000000000000810 RSI: 0000200000000240 RDI: 0000000000000003 [ 529.192350][ C1] RBP: 00007fcf87611f91 R08: 0000000000000000 R09: 0000000000000000 [ 529.200312][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 529.208275][ C1] R13: 00007fcf877e6128 R14: 00007fcf877e6090 R15: 00007ffc9e155778 [ 529.216258][ C1] [ 529.219272][ C1] task:syz.4.806 state:R running task stack:24232 pid:9341 tgid:9334 ppid:5806 task_flags:0x400140 flags:0x00080003 [ 529.232755][ C1] Call Trace: [ 529.236024][ C1] [ 529.238950][ C1] __schedule+0x1190/0x5de0 [ 529.243465][ C1] ? __pfx_tun_net_xmit+0x10/0x10 [ 529.248496][ C1] ? __pfx___schedule+0x10/0x10 [ 529.253341][ C1] ? dev_hard_start_xmit+0x5f0/0x740 [ 529.258627][ C1] ? sch_direct_xmit+0x23f/0xcf0 [ 529.263566][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 529.268937][ C1] preempt_schedule_common+0x44/0xc0 [ 529.274219][ C1] preempt_schedule_thunk+0x16/0x30 [ 529.279425][ C1] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 529.285405][ C1] ? __dev_queue_xmit+0xaf1/0x4490 [ 529.290514][ C1] __local_bh_enable_ip+0x107/0x120 [ 529.295706][ C1] ? __dev_queue_xmit+0xaf1/0x4490 [ 529.300811][ C1] __dev_queue_xmit+0xb06/0x4490 [ 529.305755][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 529.311123][ C1] ? selinux_ip_postroute+0x660/0xde0 [ 529.316494][ C1] ? __pfx_selinux_ip_postroute+0x10/0x10 [ 529.322211][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 529.327161][ C1] ? find_held_lock+0x2b/0x80 [ 529.331839][ C1] ip_finish_output2+0xc38/0x21a0 [ 529.336873][ C1] ? __pfx_ip_finish_output2+0x10/0x10 [ 529.342333][ C1] ? __pfx_ip_skb_dst_mtu+0x10/0x10 [ 529.347529][ C1] ? __pfx_ip_finish_output+0x10/0x10 [ 529.352909][ C1] __ip_finish_output.part.0+0x1b4/0x350 [ 529.358547][ C1] ip_output+0x35f/0xa90 [ 529.362793][ C1] ip_send_skb+0x437/0x590 [ 529.367222][ C1] udp_send_skb+0x71d/0x15b0 [ 529.371825][ C1] udp_sendmsg+0x1813/0x2870 [ 529.376420][ C1] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 529.381972][ C1] ? avc_has_perm_noaudit+0x110/0x3b0 [ 529.387339][ C1] ? __pfx_udp_sendmsg+0x10/0x10 [ 529.392277][ C1] ? avc_has_perm+0x144/0x1f0 [ 529.396953][ C1] ? rcu_is_watching+0x12/0xc0 [ 529.401731][ C1] ? __import_iovec+0x1dd/0x650 [ 529.406580][ C1] ? __might_fault+0xe3/0x190 [ 529.411254][ C1] ? __might_fault+0x13b/0x190 [ 529.416018][ C1] ? __pfx_udp_sendmsg+0x10/0x10 [ 529.420960][ C1] inet_sendmsg+0x105/0x140 [ 529.425463][ C1] ____sys_sendmsg+0x973/0xc70 [ 529.430229][ C1] ? copy_msghdr_from_user+0x10a/0x160 [ 529.435685][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 529.440973][ C1] ? kfree+0x252/0x6d0 [ 529.445036][ C1] ? __pfx___schedule+0x10/0x10 [ 529.449888][ C1] ___sys_sendmsg+0x134/0x1d0 [ 529.454564][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 529.459761][ C1] ? rcu_is_watching+0x12/0xc0 [ 529.464544][ C1] ? __pfx___might_resched+0x10/0x10 [ 529.469829][ C1] __sys_sendmmsg+0x200/0x420 [ 529.474508][ C1] ? __pfx___sys_sendmmsg+0x10/0x10 [ 529.479699][ C1] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 529.486466][ C1] ? __pfx_do_futex+0x10/0x10 [ 529.491138][ C1] ? rcu_is_watching+0x12/0xc0 [ 529.495910][ C1] ? xfd_validate_state+0x61/0x180 [ 529.501020][ C1] ? __sys_setsockopt+0x1c0/0x230 [ 529.506047][ C1] __x64_sys_sendmmsg+0x9c/0x100 [ 529.510982][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 529.516182][ C1] do_syscall_64+0xcd/0xfa0 [ 529.520686][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.526570][ C1] RIP: 0033:0x7fad1058efc9 [ 529.530978][ C1] RSP: 002b:00007fad113cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 529.539386][ C1] RAX: ffffffffffffffda RBX: 00007fad107e6180 RCX: 00007fad1058efc9 [ 529.547352][ C1] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000005 [ 529.555315][ C1] RBP: 00007fad10611f91 R08: 0000000000000000 R09: 0000000000000000 [ 529.563280][ C1] R10: 0000000009000000 R11: 0000000000000246 R12: 0000000000000000 [ 529.571243][ C1] R13: 00007fad107e6218 R14: 00007fad107e6180 R15: 00007ffe4b126da8 [ 529.579224][ C1] [ 529.582237][ C1] rcu: rcu_preempt kthread starved for 7808 jiffies! g30105 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 529.593361][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 529.603322][ C1] rcu: RCU grace-period kthread stack dump: [ 529.609196][ C1] task:rcu_preempt state:R running task stack:28648 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 529.622683][ C1] Call Trace: [ 529.625952][ C1] [ 529.628878][ C1] __schedule+0x1190/0x5de0 [ 529.633395][ C1] ? __pfx___schedule+0x10/0x10 [ 529.638252][ C1] ? find_held_lock+0x2b/0x80 [ 529.642924][ C1] ? schedule+0x2d7/0x3a0 [ 529.647252][ C1] schedule+0xe7/0x3a0 [ 529.651319][ C1] schedule_timeout+0x123/0x290 [ 529.656162][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 529.661529][ C1] ? __pfx_process_timeout+0x10/0x10 [ 529.666815][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 529.672620][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 529.678092][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 529.682862][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 529.688147][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 529.693343][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 529.698280][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 529.703137][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 529.708943][ C1] rcu_gp_kthread+0x26d/0x380 [ 529.713620][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 529.718816][ C1] ? rcu_is_watching+0x12/0xc0 [ 529.723576][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 529.728777][ C1] ? __kthread_parkme+0x19e/0x250 [ 529.733798][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 529.738998][ C1] kthread+0x3c5/0x780 [ 529.743073][ C1] ? __pfx_kthread+0x10/0x10 [ 529.747666][ C1] ? rcu_is_watching+0x12/0xc0 [ 529.752425][ C1] ? __pfx_kthread+0x10/0x10 [ 529.757022][ C1] ret_from_fork+0x675/0x7d0 [ 529.761609][ C1] ? __pfx_kthread+0x10/0x10 [ 529.766198][ C1] ret_from_fork_asm+0x1a/0x30 [ 529.770973][ C1] [ 529.773986][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 529.780300][ C1] CPU: 1 UID: 0 PID: 7175 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 529.789833][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 529.799880][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 529.806124][ C1] RIP: 0010:write_comp_data+0x0/0x90 [ 529.811410][ C1] Code: 48 8b 05 0b 6e e7 11 48 8b 80 70 16 00 00 e9 87 55 ac 09 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <49> 89 d2 49 89 f8 49 89 f1 65 48 8b 15 d7 6d e7 11 65 8b 05 e8 6d [ 529.831016][ C1] RSP: 0018:ffffc90000a083d0 EFLAGS: 00000296 [ 529.837077][ C1] RAX: 00000000fffffffd RBX: 0000000000000003 RCX: ffffffff8a116dc1 [ 529.845042][ C1] RDX: 00000000fffffffd RSI: 00000000ffffffff RDI: 0000000000000005 [ 529.853003][ C1] RBP: ffffc90000a084e0 R08: 0000000000000005 R09: 0000000000000000 [ 529.860964][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: 00000000fffffffd [ 529.868926][ C1] R13: ffff8880565a2cc8 R14: 1ffff9200014108a R15: 0000000000000000 [ 529.876890][ C1] FS: 0000000000000000(0000) GS:ffff888124ad6000(0000) knlGS:0000000000000000 [ 529.885815][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 529.892394][ C1] CR2: 00007fa03ba00218 CR3: 0000000079969000 CR4: 00000000003526f0 [ 529.900364][ C1] Call Trace: [ 529.903634][ C1] [ 529.906470][ C1] find_match+0x231/0x15d0 [ 529.910893][ C1] ? br_pass_frame_up+0x31f/0x490 [ 529.915922][ C1] ? __pfx_find_match+0x10/0x10 [ 529.920773][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 529.926672][ C1] __find_rr_leaf+0x140/0xe00 [ 529.931356][ C1] ? __pfx___find_rr_leaf+0x10/0x10 [ 529.936553][ C1] ? fib6_node_lookup+0x12d/0x190 [ 529.941577][ C1] ? __pfx_fib6_node_lookup+0x10/0x10 [ 529.946959][ C1] fib6_table_lookup+0x57c/0xa30 [ 529.951909][ C1] ? __pfx_fib6_table_lookup+0x10/0x10 [ 529.957382][ C1] ip6_pol_route+0x1cc/0x1230 [ 529.962055][ C1] ? __pfx_ip6_pol_route+0x10/0x10 [ 529.967164][ C1] ? __pfx_rt6_multipath_hash+0x10/0x10 [ 529.972728][ C1] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 529.978353][ C1] fib6_rule_lookup+0x536/0x720 [ 529.983205][ C1] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 529.988579][ C1] ? nf_nat_ipv6_fn+0xff/0x2e0 [ 529.993340][ C1] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 529.998535][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 530.004444][ C1] ip6_route_input+0x662/0xc70 [ 530.009204][ C1] ? __pfx_ip6_route_input+0x10/0x10 [ 530.014483][ C1] ? lock_acquire+0x179/0x350 [ 530.019178][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 530.024375][ C1] ip6_rcv_finish_core.constprop.0+0x1a0/0x5d0 [ 530.030530][ C1] ipv6_rcv+0x1e8/0x650 [ 530.034681][ C1] ? __pfx_ipv6_rcv+0x10/0x10 [ 530.039347][ C1] __netif_receive_skb_one_core+0x12d/0x1e0 [ 530.045236][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 530.051644][ C1] ? lock_acquire+0x179/0x350 [ 530.056323][ C1] ? process_backlog+0x3e7/0x15e0 [ 530.061342][ C1] __netif_receive_skb+0x1d/0x160 [ 530.066369][ C1] process_backlog+0x439/0x15e0 [ 530.071223][ C1] __napi_poll.constprop.0+0xba/0x550 [ 530.076595][ C1] ? skb_defer_free_flush+0x149/0x280 [ 530.081967][ C1] net_rx_action+0x97f/0xef0 [ 530.086559][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 530.091663][ C1] ? __print_lock_name+0xb0/0xe0 [ 530.096599][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 530.101793][ C1] ? sched_clock+0x38/0x60 [ 530.106204][ C1] ? sched_clock_cpu+0x6c/0x530 [ 530.111063][ C1] ? mark_held_locks+0x49/0x80 [ 530.115825][ C1] handle_softirqs+0x219/0x8e0 [ 530.120595][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 530.125882][ C1] ? cfg80211_put_bss+0x1b4/0x280 [ 530.130904][ C1] do_softirq+0xb2/0xf0 [ 530.135051][ C1] [ 530.137972][ C1] [ 530.140896][ C1] __local_bh_enable_ip+0x100/0x120 [ 530.146085][ C1] cfg80211_put_bss+0x1b4/0x280 [ 530.150934][ C1] ieee80211_rx_bss_put+0x43/0x60 [ 530.155960][ C1] ieee80211_ibss_rx_queued_mgmt+0x1a97/0x2fe0 [ 530.162130][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 530.168630][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 530.173588][ C1] ? kcov_remote_start+0x3c9/0x6d0 [ 530.178700][ C1] ieee80211_iface_work+0xe2e/0x1360 [ 530.183979][ C1] ? rcu_is_watching+0x12/0xc0 [ 530.188737][ C1] cfg80211_wiphy_work+0x2c7/0x580 [ 530.193853][ C1] process_one_work+0x9cf/0x1b70 [ 530.198799][ C1] ? __pfx_process_one_work+0x10/0x10 [ 530.204180][ C1] ? assign_work+0x1a0/0x250 [ 530.208772][ C1] worker_thread+0x6c8/0xf10 [ 530.213378][ C1] ? __pfx_worker_thread+0x10/0x10 [ 530.218491][ C1] kthread+0x3c5/0x780 [ 530.222561][ C1] ? __pfx_kthread+0x10/0x10 [ 530.227152][ C1] ? rcu_is_watching+0x12/0xc0 [ 530.231913][ C1] ? __pfx_kthread+0x10/0x10 [ 530.236503][ C1] ret_from_fork+0x675/0x7d0 [ 530.241090][ C1] ? __pfx_kthread+0x10/0x10 [ 530.245680][ C1] ret_from_fork_asm+0x1a/0x30 [ 530.250455][ C1] [ 531.243707][ C0] net_ratelimit: 11555 callbacks suppressed [ 531.243720][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 531.253408][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 531.262473][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 531.273667][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 531.286247][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 531.297508][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 531.310104][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 531.321425][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 531.334040][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 531.345236][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 535.118399][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 536.253450][ C1] net_ratelimit: 19575 callbacks suppressed [ 536.253469][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 536.253887][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 536.259644][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 536.272189][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 536.283469][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 536.296111][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 536.307362][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 536.319935][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0) [ 536.331194][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 536.343743][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:ca:0b:e0:e2:de, vlan:0)