last executing test programs: 2m11.890678967s ago: executing program 2 (id=1908): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x8b) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x3000000, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2m11.761558191s ago: executing program 2 (id=1909): sched_setscheduler(0x0, 0x1, 0x0) (async) mq_open(&(0x7f0000000040)='{*]]\x00', 0x40, 0x120, &(0x7f00000000c0)={0x7, 0x726, 0x2, 0x2000000000000200}) r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) syz_open_dev$MSR(0x0, 0x0, 0x0) (async) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) ptrace$ARCH_GET_GS(0x1e, r0, &(0x7f00000001c0), 0x1004) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000140)={0x10}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 2m11.686595148s ago: executing program 2 (id=1910): io_setup(0x9, &(0x7f00000000c0)=0x0) r1 = eventfd(0x7) io_submit(r0, 0x2, &(0x7f0000000180)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0xe9b0, 0xffffffffffffffff, &(0x7f0000000200)="04408682e1916cc421840034bfa68ad63622defb4f68fdd3ed55d130ded4614815d3057d2b6e4c2b59739f961bdccc0bb1f3ea6b115c512222a9ce7f6ea04f22a23f75fc517d196fe9c3a605f5c9984f20a93942e768437daffac61329e3a8459f10283b85f4801f9dc3aaff9a2e352b73f16b89f8697cd27e29a86b45705c64b07bb60db89a96c8fa036c3120079a9acbefaa38c7ff7c81c9ca8bc724f4bd7c98e044d5f9526e844c0f29e252c6d951bda5b7d9f08e89c215b2f611c41c2bb4ea778691248e6712052d8e6fa84b591afcc69b18f82a354b24fdbf8328ce12219f166866ce27768b6f9df274ca6260ae216b788f94be09", 0xf7, 0x1ff, 0x0, 0x5, r1}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x2df6, 0xffffffffffffffff, &(0x7f0000000300)="c6df58fc908eb3ac3cc6089f72f474d51cb2fbbbc8bb50cbf2e4ae706e45684b0b5e1e73813fef3cf6e2b90a2f9de411931083cae6c78215aac250c319431ede83b13ea8099b6d8d0f410e72d64feb04fba9119048a2e5ff7c94d13f97374b389d9875264216b8454931261c6da270734c7daf5a4833a2f4be40ae18b764840605f84025a82b2da85a3ab015b9f13270dfe0aad4735cb9375e035df8b1e371507ec2ee019a41193379aa893d1cc0ac6443891a54f1", 0xb5, 0x3, 0x0, 0x1}]) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r3) sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000280)={0x14, r4, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x40) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$can_bcm(0x1d, 0x2, 0x2) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x11c2, 0x2208, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000240)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r8, &(0x7f0000000080)="b301", 0x2, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1c) 2m8.318912363s ago: executing program 2 (id=1923): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x12) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) syz_clone3(&(0x7f00000000c0)={0x200000400, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7f}, 0x1c, 0x0, 0x0, &(0x7f0000003f40)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x84, 0x2, 0x2, 0x1, 0x0, [@empty]}}}], 0x28}, 0x24004800) 2m7.236503467s ago: executing program 2 (id=1925): getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080)=0x7ff, 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f00000000c0)={0x7, 'veth0_vlan\x00', {0x7}, 0x8001}) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000100)={'syz_tun\x00', 0xb}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0xfff}, 0x8) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000240)=0xa4) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000280)=@x86={0x9, 0x4, 0x5, 0x0, 0x8, 0x24, 0xfc, 0x49, 0x1, 0x6, 0x82, 0x6, 0x0, 0x20, 0x24ba, 0x1, 0x8, 0x5, 0x5, '\x00', 0x4}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6, @in=@multicast2}}, {{@in=@multicast1}, 0x0, @in6=@remote}}, &(0x7f00000003c0)=0xe8) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x80081, 0x0) connect$unix(r3, &(0x7f0000000440)=@abs={0x1, 0x0, 0x4e24}, 0x6e) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e23, @local}}}, &(0x7f0000000580)=0x84) mknodat(r2, &(0x7f00000005c0)='./file0\x00', 0x8000, 0xe8) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000600)) acct(&(0x7f0000000640)='./file0/file0\x00') recvmsg(r0, &(0x7f0000002bc0)={&(0x7f0000000680)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000000700)=""/90, 0x5a}, {&(0x7f0000000780)=""/68, 0x44}, {&(0x7f0000000800)=""/89, 0x59}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000002880)=""/246, 0xf6}, {&(0x7f0000002980)=""/183, 0xb7}], 0x7, &(0x7f0000002ac0)=""/221, 0xdd}, 0x10041) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000002c00)) fcntl$setlease(r2, 0x400, 0x0) ptrace$setregs(0xf, 0xffffffffffffffff, 0x6, &(0x7f0000002c40)="62efef7554c02e11ff0c969f226a450e5f4b06bfb9bb5a9663e0a9750f9a83e901556e2141e39823d1244df2504e86cef2efeec997c55acdd00a5cff0da870eb3c779bf613a0777cfb56ac30cc232a3be12f9e0f8ea8c029ee9bba3b8d1be612607f0eefcda440d1c9a7b84ad96e54eca828") setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000002cc0)={0x0, 'wg2\x00', 0x2}, 0x18) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000002d00)={r4, 0x2}, &(0x7f0000002d40)=0x8) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000002d80), 0x400100, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r6, 0x80045017, &(0x7f0000002dc0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002e00)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002e80), r3) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000002f40)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002f00)={&(0x7f0000002ec0)={0x18, r7, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_RULES={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 2m7.148108145s ago: executing program 0 (id=1926): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x80, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0x64, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x5d, 0x4, "00cdcb3cc8efcda6d62ce07bb97655f5180ee07944ce2d060c3984556a06dc378f553f5a652af177c0076a912bf2ba931e1083c37c7e3422e01c4c1ad90592eb7e1ac3b8fb771098a8a58d424e7c86cd714fc39bd242056aea"}]}]}, 0x80}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) 2m5.847386372s ago: executing program 2 (id=1928): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200080}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}}, 0x4000000) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0x34db67fedfa68c99, 0x0, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x20000000, 0x7c3fee72}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 2m5.230343918s ago: executing program 0 (id=1930): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x8b) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x8000000, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2m4.938152205s ago: executing program 0 (id=1932): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_usb_connect$cdc_ncm(0x2, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004", @ANYRES32, @ANYBLOB="00000000000000000000408b0000000000000000", @ANYRES32=0x0, @ANYRES32], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0xe, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x600}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) 2m3.63845502s ago: executing program 1 (id=1935): r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000180)={0x1, 0x2, 0x0, 0xdffffffffffffffd}) r1 = openat$smackfs_cipso(0xffffff9c, &(0x7f00000000c0)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0) write$smackfs_cipso(r1, 0x0, 0x2d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x58, r4, 0x101, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random="c4"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x28, 0x51, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "b584aa6383"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}]}, 0x58}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0xfffffffe, @local, 0x6}, 0x1c) setsockopt$inet6_buf(r5, 0x29, 0x32, &(0x7f0000000080)="84c7436de9c48929676a3110817c0b372bf866de", 0x14) sched_setaffinity(0x0, 0x0, 0x0) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000003800), 0x40000, 0x0) lseek(r6, 0x7fffffffffffffff, 0x1) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='oom_adj\x00') write$smackfs_netlabel(r7, &(0x7f0000000180)=@l2={{0x4, 0x2e, 0x0, 0x2e, 0x6, 0x2e, 0x5}, 0x2f, 0x2, 0x20, '\'-@{+{[!\\\'&'}, 0x76) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$tun(r0, &(0x7f00000004c0)={@val={0x0, 0x836f}, @val={0x1, 0x1, 0x4, 0x54a, 0x0, 0xa}, @x25={0x3, 0x81, 0xe5, "f04b027c62f3ec4236c61bd77e5320eb31221625b022dae0077be7bf98457b1fcccef38540f6f8862c395d484c60863699a8b2d6d3f9e369b7b403af741bbecd1b5c573018e864cd6191a842ff10b1c70a50fbdb92142e02e2d6ba6ca129b4fd2c9c7c14ae280a233846ad31250f4752eb83801af3c9ec1b6ad4f7a91eeaef23169c5964e11f943f4a363c3c2afb201cb8c1adfa555689b9b5a1534268763ee1c94128402125d1401a73ee"}}, 0xbc) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file3\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r11, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x58, 0x140c, 0x400, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x40040}, 0x80) 2m2.862541922s ago: executing program 3 (id=1937): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000000dc0000000000000000000003ae7f7e7599b5dd6a5ba891d423c2d9486a49ea9773ca72623046c08ac31de45565d81f6781020000400000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) listen(0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000d00)=ANY=[@ANYBLOB="68010000100013070000000000000000ac1414bb00000092510000000000005659c5b98508ac1414aa0000000000000000000000000000000000000000000000fde4987fa5fd1a0e3cdef5251cfc404dd58e679081205384a23a3d25ffab3eda", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f00000100000000000000000000000000000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000480002006374722d63616d656c6c69612d6165736e69000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000014000e00fe8800000000000000000000000000011c0004000000000000000000fc00"/288], 0x168}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180100001c000000000000000000cd1b370000850000006d00000095f7ec7a2eb5940f2f846c69c93f4f8e6b8bc3bd8d0095cfd071c92989d7a696fbd880d9a134f6614e4b61afed8a2510a3b64c0783300dfe2ce52dee9dc74668ff70f4e9afe271e2bfe0f1473faf891b9c41b7576b3afc1ed0f421a2b4360844c333759123e60e5e9a44987272a1e7f3a80b783b7df3850673584fba41aa3a4a6ee7be61a0c3f2a804003fc03694c5d2f7674c4bb9e599c015204bd55d3ddc37fe8945fc906a44"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r5}, 0x18) socket$kcm(0x10, 0x5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r8, &(0x7f0000000080)=[{&(0x7f0000001400)=""/260, 0x104}], 0x1) ioctl$TCSETS(r8, 0x40045431, &(0x7f00000000c0)={0x0, 0x400000, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"}) r9 = syz_open_pts(r8, 0x101) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r11 = dup3(r7, r9, 0x80000) close_range(r10, 0xffffffffffffffff, 0x0) r12 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008740)=[{{&(0x7f0000000400)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000b00)="eee6e81ce508eeda79ea76267b6b0349a1f15cde95b2cbc1b9f109525c2fe9c0e74ddbd3d18794001826fbbbe745cb41703161cb44ccaf7062c7fd801c7ab1ef5ef9f831928cf3a2289116031f7ecdbc43cb867331088d7c1f01eee8a8c7bc1cd6b11889b6fc219888974a431aaf1248c34c57b0c307e313f29720b0cdaaae632922f584393becd0541f80e37486f9e0fc45342ff8e5ea0cff21f8f861ee961de53ccd6384cc7998e6578787827052b179b8cab8e910d36cd903d543367bd4efabbc4a83c4207cf34818c8043a90a22a66d5f604d81bf54d0144abff32d6f9ca12d1c8244699987cbb0e41b44cc5103a6e75ca1bb2e934a696a9b0af7a6ea8a00a0e3048f9057e4bab1037689682e03b6a56be2ba4d0baad4d0c9edc00d24e4f76d25c35ce49a1d15eb6000000000000000000000000002fd64db9a4758c9b4ae2e3cc22c52b48fb0e081ffe2588001a15be6a1914f39b48e17ad687673b7cf84d866d03f554a28fb2a39f397a83d32354e6a31bc36cb231cc41673491c97a4e89ebe9d6a6a90b438bf93cdaa2ad0bd6b72588fbb436399533c8b129e8ad734848eade4ffa6a26c46b8e84e8c1dd0a901d71c8d76933f477a350b4daa3a0802d6532cf25123009070fedf33a79287eb2221addd66c308e540f175841000b8d9ea60e5ffb1c5b55f5e7fb6e", 0x1eb}, {&(0x7f0000000300)="ab4bf230ad1dbe07b61797736bddac81b3176b6606094633908adb7ebdddfb1b8f3da1fac62a8315", 0x28}, {&(0x7f0000000780)="eea7358ac23d86b8febcbedded99ab86bab569e753cb80ba01bbec5dccb01255a4b923c8b32eed5e864e708b1c87c9f5e1202d827a31fbf2a24c691a0ff544d2d9748c1a1259fda5f88c52fb22d515ab697f58f7aee045b1c21f4b9efbedea0a420802a72a7a3e7a95e5423110020e8435324637db4d6f3e875c6df5ead1b57ffc92c9447887a5d48eb842", 0x8b}, {&(0x7f0000000840)="68a9604827b929ec3a38c8ed715728048fb4d8370c83091c742b144c62b9ecd6148571de1e44fe8f407da0b670d095fe226036cf1f7a76155d2de2a1ac98f189da1320685c60b0a536ee940fa468df6ece11e06eb1dde39c6edc6e22286b533613a50ce7a450f4727d1907a6d39226b2b1", 0x71}, {&(0x7f00000008c0)="19061f4d589e3f6134cf1b0bceedcb5bc4062e338b00b8f45ca9f93521d6f2642abfc4d2f4b4695503a5cd61f72c486869f8ab8a647980e463373863e8bbe4c80849b684a3aa042f65617385f5f242be7c7af48c4374cc73f75644c3c77189ff3124b867d24f041f4e355fe23bc5dd148f97a843a03a357d2b0d73813370507afef6a73e146dbea3d71fe548cbadb08e1ebce6a118bbd8ad370f85dc3def1d9251b43649ee282171b42d73feb6a73e8f332d1b", 0xb3}, {&(0x7f0000001540)="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", 0x1000}], 0x6, &(0x7f0000000ec0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r1, r12]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r7, r0, r7]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [r12, r12, r4]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100, 0x4000}}, {{&(0x7f00000061c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000008380)=[{&(0x7f0000006240)="9e21612e121b362c3ea461e3db61c3e05be965f451dfc633637fc0bf0d8b037e7d7ad3f3f1a91809534bfebbc0582acd1b05c993b3a1fbcd28f00a11864e97dd8e53fd90c0b6f35587e9dedfd20696263da515", 0x53}, {&(0x7f0000008300)="4c0007d904ab1f9cfeec66a22ede7874022426bcc8226a1eb7ef0fdbcb41f6b45d48ce32fb2934a928fbd2bb70a951c16675695e1ee5cae7860f8a72c6be013a2f3c49193e4b667788fa9d", 0x4b}, {&(0x7f00000062c0)="1fca5ed61b9eaaa0fa62037e492ef4a65b466d125f05165d638003dbab9f530ad259c25ded9ffb12f6fbc63bdc", 0x2d}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="3c577e1eb46418c6db1afe8e45f7f7b7534300"/31, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r8, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r11, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00'], 0x40, 0x20000090}}, {{0x0, 0x0, &(0x7f0000008400), 0x0, &(0x7f0000008600)=[@rights={{0x20, 0x1, 0x1, [r7, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r12, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r2, r3, r10]}}, @rights={{0x2c, 0x1, 0x1, [r8, r4, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff]}}], 0x128, 0x20008084}}], 0x3, 0x4000000) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0xa0c4, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x1, 0x6, @multicast}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) r13 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r13, 0x400452c8, &(0x7f0000000100)) syz_usb_connect(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d81000905f7ffffff00000009058303"], 0x0) 2m2.631526061s ago: executing program 1 (id=1938): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x36}}}}], 0x28}}], 0x1, 0x4000001) 2m2.446563681s ago: executing program 1 (id=1939): open(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x23) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000040)="86", 0x1}], 0x1}}], 0x1, 0x20004000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0700000040008100000002000000200001801400040000000000000000000000ffffac1414aa060001000a"], 0x34}, 0x1, 0x0, 0x0, 0x8081}, 0x24000800) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xc0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) read$msr(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000040000000200000000000011030000000200000000000000000000020000000002000000000000080200000000206100"], 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 2m2.398922317s ago: executing program 1 (id=1940): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000005c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pselect6(0x40, &(0x7f00000007c0)={0x0, 0x3, 0x0, 0x9}, &(0x7f0000000800)={0x7f, 0xfffffffffffffffc}, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2m1.797536625s ago: executing program 0 (id=1941): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x144, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet(0x2, 0x3, 0x8d) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000100)=ANY=[@ANYBLOB="070000000214010021bd84e7cc08b5dfe78ce4687000fcdbdf250900020073797a32000000000800010000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40010) socket$netlink(0x10, 0x3, 0x8000000005) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000050000000000000001000084000000000300000002000000"], 0x0, 0x41, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000001180)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1e, 0x4, 0x4, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x800, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000023000000040000000200230040000000", @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bind$alg(0xffffffffffffffff, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000002a00)="0b1c6840a936a0e377c392a7a3b38e1d", 0x10) r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000001d00)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="a1040da66a3ee83b95a84c509ab45adb1b9f4ba32411798ef0f9f5d09e65124ab20263b3a7faa9924a706e261f1a2be25a4103ed73f8828eae4580d7baa6a75517f85faeafcb2ffeee2ca1639fc02c38", 0x50}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4048000}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000003a40)=[{{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000000a80)=""/111, 0x50}], 0x1}}], 0x1, 0x0, 0x0) 2m1.542542807s ago: executing program 4 (id=1942): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a00000000000000fc0100000000000000000000ea2fa43c000000000000000005000500000000000a0000000000000000000000000000000000000000000700000000000000000008001200020002000000000000000000100033000203"], 0xa0}}, 0x0) 2m1.436105144s ago: executing program 4 (id=1943): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x8b) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0xb000200, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2m0.73232292s ago: executing program 0 (id=1944): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x5c, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x45, 0x11, 0x0, 0x0, @binary="fedcbb7d1d11c6d3139ebb7290e4d8a1c39156c2a7ef6ad7ecb70f506210f4f53fcc5cf5ca0895a0abb6ba14702d4f56729b90a05e1954183363e3e4b2103c9e3e"}]}, 0x5c}], 0x1, 0x0, 0x0, 0x24008841}, 0x0) 2m0.654352464s ago: executing program 3 (id=1945): r0 = socket(0x1, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x2f, &(0x7f0000000000), 0x20000000) io_uring_setup(0x113d, &(0x7f0000000000)) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x14, &(0x7f0000000140)='D', 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x101202, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000940)=@newtaction={0x488, 0x30, 0x12f, 0x40, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000, 0x0, 0x0, 0x7, 0x3, 0x8, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x20000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x3, 0xffffc3fd}, {0x0, 0xf6c5d7a4e5a498ca}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x4044840}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCFLSH(r2, 0x540b, 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000003c0)={{0xa, 0x4e21, 0xfffffb19, @remote, 0x7}, {0xa, 0x4e20, 0x40000, @remote, 0x2000}, 0x1, {[0x8000, 0x7, 0x3ff, 0x4007, 0x9, 0x4, 0x5, 0x3]}}, 0x5c) io_setup(0x222, &(0x7f0000000180)=0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r8, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f00000001c0)={0x18, 0x0, 0x9, 0x0, &(0x7f0000000280)=[{0x10000, 0x7ff}, {0x6, 0x1}, {0x1, 0x3}, {0xfffffffffffffffd, 0x6}, {0xfffffffffffffff8, 0xf1}, {0x8, 0xfffffffffffffff8}, {0x2, 0x8}, {0x7fffffff, 0xd}, {0x9, 0xfe4}]}) io_submit(r7, 0x2, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffff, r8, &(0x7f0000000440)="8e18", 0x2, 0x6ed}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7, 0x3, r8, 0x0}]) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r9, 0xc048aeca, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0xfffffff1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r10, &(0x7f0000000540)='P', &(0x7f0000000000)=""/7, 0x2}, 0x20) r11 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r11, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r11, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)='a', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="3000000000000000840000000100000000000000040000000000000000000000000000000000000000002000", @ANYRES32=r5], 0x30}], 0x1, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r10, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) socket$nl_route(0x10, 0x3, 0x0) 2m0.652208567s ago: executing program 4 (id=1946): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r3 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x4, 0x44800) ioctl$SNAPSHOT_SET_SWAP_AREA(r3, 0x400c330d, &(0x7f0000000100)={0xffffffffffffffff, 0x401}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="0e003300a0"], 0x3c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002ec0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000a6ea37825f00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async, rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r3, 0x58, &(0x7f0000001100)}, 0x10) (rerun: 32) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}}}]}, 0x48}}, 0x0) 2m0.496812216s ago: executing program 0 (id=1947): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb70000000109c630b3c5101fbc0b97c3"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x40, 0x13, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001480)={0x44, &(0x7f0000001180)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0xae03, 0xb7) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2m0.139541208s ago: executing program 1 (id=1948): r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r2, 0x400, 0x1) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x16d003, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) pread64(r3, &(0x7f0000001440)=""/126, 0x7e, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1m59.346988856s ago: executing program 3 (id=1949): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000005f005f0314f9f4070009040081", 0x11) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000000c0)=0x7f, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) unlink(&(0x7f0000000100)='./file0\x00') write$USERIO_CMD_REGISTER(r4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) process_vm_writev(0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r8, &(0x7f0000000340)={0x230, 0x7d, 0x40, {{0x500, 0xef, 0x0, 0xb000000, {0x0, 0x2, 0x7}, 0x0, 0x0, 0x0, 0x5, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1h\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\b\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x230) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="040000001000010000000000000000000000000a44000000090a010400000000000000000700000008000a40ca812670de35000040230000000000007a31000000000904010073797a3000000000080005400000000d08000640ffffff001400000010000100000000000000"], 0x6c}}, 0x0) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_TMR_START(r9, 0x5402) close_range(r0, 0xffffffffffffffff, 0x0) 1m59.346360238s ago: executing program 4 (id=1950): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x3, 0xd4bd) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xa4}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 1m59.049972152s ago: executing program 1 (id=1951): ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000040)=0x4) mknodat$loop(r0, &(0x7f0000000080)='./file0\x00', 0x2000, 0x1) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f00000000c0)) syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r0) prlimit64(0xffffffffffffffff, 0x4, &(0x7f0000000140)={0x1, 0xb73}, &(0x7f0000000180)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000001c0)) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000240), 0x4) write(r0, &(0x7f0000000280)="25b815eb3cf45a5c8ffcb3340b0fa694a3c81438b350181c03a0db1d7986fdf7cb72485b8f8c5c6c180671d88014e74e5da6475c0cff748d8110a78359905693", 0x40) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xc877, 0x7f, &(0x7f00000002c0)=0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x2}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000380)={r1, 0x9}, 0x8) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0xf37}}, './file0\x00'}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x7, &(0x7f0000000400)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r2) sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r4, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc8c0}, 0x100) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000580)={"928d6619423222b9cda0ba4af38741da", 0x0, 0x0, {0x9, 0xb48e}, {0x27, 0x4}, 0x100000000, [0x0, 0xb, 0x7, 0x5, 0x2, 0x200, 0xdbf, 0x3, 0x3, 0x7, 0x6, 0x10001, 0xffffffffffff0001, 0x0, 0x2, 0x7195]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000700)={{r3}, r5, 0x8, @inherit={0x60, &(0x7f0000000680)={0x20ac3c99df2c6d85, 0x3, 0x2507, 0x80000001, {0x0, 0x4, 0x6, 0x50, 0x4}, [0x8, 0x80, 0x8]}}, @subvolid=0x2}) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0x7, &(0x7f0000001700)={0x81, 0xfe, 0x6, 0xfffffffe}, 0x10) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000001740)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000001780), r7) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f00000017c0)=0x3, 0x4) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000001800)={[0x9, 0x9, 0x80, 0x6, 0x6, 0x8000000000000000, 0x9, 0x1, 0xb06, 0x150000, 0xd, 0x2, 0x1, 0x7, 0x10000, 0x59], 0x80a0000, 0x2004}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000018c0)={'wg1\x00'}) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) 1m58.853437617s ago: executing program 4 (id=1952): connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x800}, 0x6e) (async) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x800}, 0x6e) unshare(0x28000600) unshare(0x40000) msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) (async) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002440), 0x1, 0x0) write$FUSE_GETXATTR(r0, 0x0, 0x0) (async) write$FUSE_GETXATTR(r0, 0x0, 0x0) syz_io_uring_setup(0x400046ac, &(0x7f0000000000)={0x0, 0xaf7b, 0x4, 0x40000}, 0x0, 0x0) r1 = io_uring_setup(0x25f5, &(0x7f0000000340)={0x0, 0x40000, 0x2, 0x0, 0x257}) r2 = socket(0xf, 0x80000, 0x0) recvmmsg$unix(r2, &(0x7f0000001fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) io_uring_enter(r1, 0x2000000, 0x2, 0xf, &(0x7f0000000000), 0x18) semop(0x0, &(0x7f0000000000)=[{0x2, 0x3, 0x800}, {0x0, 0x5, 0x1000}, {0x1, 0x3, 0x1000}, {0x2, 0x9}], 0x4) 1m58.358127108s ago: executing program 3 (id=1953): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a00000000000000fc0100000000000000000000ea2fa43c000000000000000005000500000000000a0000000000000000000000000000ffffffffffffff8000000000000000000008001200020002000000000000000000100033000203"], 0xa0}}, 0x0) 1m58.166497604s ago: executing program 4 (id=1954): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x144, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet(0x2, 0x3, 0x8d) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000100)=ANY=[@ANYBLOB="070000000214010021bd84e7cc08b5dfe78ce4687000fcdbdf250900020073797a32000000000800010000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40010) socket$netlink(0x10, 0x3, 0x8000000005) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000050000000000000001000084000000000300000002000000"], 0x0, 0x41, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000001180)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1e, 0x4, 0x4, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x800, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000023000000040000000200230040000000", @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bind$alg(0xffffffffffffffff, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000002a00)="0b1c6840a936a0e377c392a7a3b38e1d", 0x10) r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000001d00)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="a1040da66a3ee83b95a84c509ab45adb1b9f4ba32411798ef0f9f5d09e65124ab20263b3a7faa9924a706e261f1a2be25a4103ed73f8828eae4580d7baa6a75517f85faeafcb2ffeee2ca1639fc02c38", 0x50}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4048000}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000003a40)=[{{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000000a80)=""/111, 0x50}], 0x1}}], 0x1, 0x0, 0x0) 1m58.152880957s ago: executing program 3 (id=1955): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r4}, &(0x7f00000001c0), 0x0}, 0x20) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f00000002c0)='./file0\x00', 0x600010c) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@known='user.incfs.metadata\x00') r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r6, 0x0) r7 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x84, &(0x7f0000000180)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x400, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x3, '^'}]}}}}}}}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000380)=@newqdisc={0x2ac, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x27c, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "76bf6ac5c169d2aeb6667dc5a0315bac08f078ef8e7f62cfb01a5b8e669fd047ab7e6effc6f1bbb2aed205ca4658846384940ba6aed76b13b284da54f329d70b79028342e3a80b16c03df1a7d78e94d3d6ca77098317e9971f796b7f47e8d6bed0d08633d93daede86e28832a667598c17dcaf8d540dc8a4ef37c0cdaaa4c4fd551b87f210a1f45d21534bdce0c2a12060f8eda77bc42973ae639435ff9c944584c22b85727b55ec62743c0657613f780d73fe75a3a9025ac05d5e5aa22ddf96e7a6efd2a59b8659ed1c712bc38847779a245722d88318795728776017a80f1e189ebba95d3f7d2d2327a167f8de80d5b1bf8692c844985c8db11aad425dbffa"}, @TCA_GRED_STAB={0x104, 0x2, "a9446811cfa0faeafc8de3b05ecd12842c62cc17da0fb8e9a31798b316251a0bdda9c884eac87d270f4e2c5df782234819910857dbe5cfe8b0c00075cc6ce8b4e6ec7350b74a0200000000000000a26c23e53b2a473635f00441c05bbc2e5fb3a971e666f8115e615a12d6e11fb79f7ba555b6afa7fae6ef825e39e3fa25737c2b7c3e43951e961799bb7790e47af31dd719c900f17743f87aa79998844ce708fa15b382f3f7311c7e068e95ba927138b874d6cbf270972004285c754da48af2a74062a8053e58425ec2342e0fcb2d8eef15777b8d1d672427621b676763e333644ca13393cd20f500"}, @TCA_GRED_DPS={0x10, 0x3, {0x0, 0x6, 0x0, 0x7}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x7}, @TCA_GRED_MAX_P={0x8, 0x4, 0x1}, @TCA_GRED_MAX_P={0x8, 0x4, 0x8}, @TCA_GRED_DPS={0x10, 0x3, {0xe, 0x0, 0x0, 0x5}}, @TCA_GRED_PARMS={0x38, 0x1, {0x9, 0x3, 0x2ca, 0x4, 0x3, 0x0, 0x6, 0x5, 0x1, 0x8, 0xfe, 0x7, 0x1f, 0x9, 0x401, 0x1ff}}]}}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x48001}, 0x0) 1m57.889131734s ago: executing program 3 (id=1956): ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000040c0)={0x8, {"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", 0x1000}}, 0x1006) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) (async) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[], 0x7) (async) syz_io_uring_setup(0x3c23, &(0x7f00000003c0)={0x0, 0x4bb6, 0x0, 0x1, 0x3e3}, &(0x7f00000002c0)=0x0, &(0x7f0000000340)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f0000007f80)=[{{&(0x7f0000000440)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000000580)=""/241, 0xf1}, {&(0x7f0000000680)=""/109, 0x6d}, {&(0x7f0000000780)=""/167, 0xa7}], 0x4, &(0x7f0000000840)=""/123, 0x7b}, 0x3}, {{&(0x7f00000008c0)=@isdn, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000940)=""/122, 0x7a}, {&(0x7f00000009c0)=""/183, 0xb7}, {&(0x7f0000000a80)=""/182, 0xb6}, {&(0x7f0000000b40)=""/139, 0x8b}, {&(0x7f0000000c00)=""/104, 0x68}, {&(0x7f0000000cc0)=""/192, 0xc0}, {&(0x7f0000000d80)=""/75, 0x4b}], 0x7, &(0x7f0000000e80)=""/95, 0x5f}, 0x7ff}, {{&(0x7f0000000f00)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f0000002280)=[{&(0x7f0000000f80)=""/112, 0x70}, {&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000002000)=""/135, 0x87}, {&(0x7f0000000300)=""/24, 0x18}, {&(0x7f00000020c0)=""/246, 0xf6}, {&(0x7f0000000380)}, {&(0x7f00000021c0)=""/162, 0xa2}], 0x7, &(0x7f0000002300)=""/115, 0x73}, 0x7}, {{&(0x7f0000002380)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000002940)=[{&(0x7f0000002400)=""/148, 0x94}, {&(0x7f00000024c0)=""/212, 0xd4}, {&(0x7f00000025c0)=""/160, 0xa0}, {&(0x7f0000002680)=""/169, 0xa9}, {&(0x7f0000002740)=""/208, 0xd0}, {&(0x7f0000002840)=""/205, 0xcd}, {&(0x7f0000000700)=""/15, 0xf}], 0x7}, 0x3ff}, {{&(0x7f00000029c0)=@can, 0x80, &(0x7f0000004000)=[{&(0x7f0000002a40)=""/196, 0xc4}, {&(0x7f0000002b40)}, {&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f0000003b80)=""/251, 0xfb}, {&(0x7f0000005100)=""/4096, 0x1000}, {&(0x7f0000003c80)=""/7, 0x7}, {&(0x7f0000003cc0)=""/190, 0xbe}, {&(0x7f0000003d80)=""/205, 0xcd}, {&(0x7f0000003e80)=""/133, 0x85}, {&(0x7f0000003f40)=""/190, 0xbe}], 0xa, &(0x7f0000006100)}, 0x1}, {{0x0, 0x0, &(0x7f00000072c0)=[{&(0x7f0000006140)=""/219, 0xdb}, {&(0x7f0000006240)=""/4096, 0x1000}, {&(0x7f0000007240)=""/69, 0x45}], 0x3, &(0x7f0000007300)=""/254, 0xfe}, 0x401}, {{&(0x7f0000007400)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000007500)=[{&(0x7f0000007480)=""/28, 0x1c}, {&(0x7f00000074c0)=""/49, 0x31}], 0x2, &(0x7f0000007540)=""/11, 0xb}, 0x8}, {{&(0x7f0000007580)=@nfc, 0x80, &(0x7f0000007900)=[{&(0x7f00000081c0)=""/74, 0x4a}, {&(0x7f0000007680)=""/186, 0xba}, {&(0x7f0000007740)=""/89, 0x59}, {&(0x7f00000077c0)=""/39, 0x27}, {&(0x7f0000007800)=""/235, 0xeb}], 0x5, &(0x7f0000007980)=""/21, 0x15}, 0x3}, {{&(0x7f00000079c0)=@nfc_llcp, 0x80, &(0x7f0000007ec0)=[{&(0x7f0000007a40)=""/51, 0x33}, {&(0x7f0000007a80)=""/44, 0x2c}, {&(0x7f0000007ac0)=""/130, 0x82}, {&(0x7f0000007b80)=""/234, 0xea}, {&(0x7f0000007c80)=""/20, 0x14}, {&(0x7f0000007cc0)=""/86, 0x56}, {&(0x7f0000007d40)=""/17, 0x11}, {&(0x7f0000007d80)=""/37, 0x25}, {&(0x7f0000007dc0)=""/252, 0xfc}], 0x9}, 0x4}], 0x9, 0x2, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r8 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x480, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0xc008ae88, &(0x7f0000000c80)=ANY=[@ANYBLOB="01000000000000ef75010000"]) (async) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) (async) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) (async) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x40400, 0x0) 0s ago: executing program 32 (id=1947): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb70000000109c630b3c5101fbc0b97c3"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x40, 0x13, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001480)={0x44, &(0x7f0000001180)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0xae03, 0xb7) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): Bluetooth: hci4: unexpected event 0x01 length: 4 > 1 [ 558.752138][T12303] netlink: 'syz.3.1641': attribute type 1 has an invalid length. [ 558.767444][T12304] netlink: 'syz.3.1641': attribute type 1 has an invalid length. [ 558.884556][ T974] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 559.224660][ T29] kauditd_printk_skb: 2748 callbacks suppressed [ 559.224705][ T29] audit: type=1400 audit(28164.147:39250): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12279 comm="syz.0.1635" name="189" dev="tmpfs" ino=1068 [ 559.243883][T12280] 9pnet_fd: Insufficient options for proto=fd [ 559.255007][T12317] 9pnet_fd: Insufficient options for proto=fd [ 559.269440][ T29] audit: type=1400 audit(28164.147:39251): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12279 comm="syz.0.1635" name="189" dev="tmpfs" ino=1068 [ 559.294505][ T29] audit: type=1400 audit(28164.147:39252): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=w pid=12279 comm="syz.0.1635" name="file0" dev="tmpfs" ino=1073 [ 559.313551][ T29] audit: type=1400 audit(28164.147:39253): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=12279 comm="syz.0.1635" path="/189/file0" dev="tmpfs" ino=1073 [ 559.332470][ T29] audit: type=1400 audit(28164.147:39254): lsm=SMACK fn=smack_inode_setattr action=granted subject="_" object="_" requested=w pid=12279 comm="syz.0.1635" name="file0" dev="tmpfs" ino=1073 [ 559.354041][ T29] audit: type=1400 audit(28164.147:39255): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5819 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 559.373238][ T29] audit: type=1400 audit(28164.147:39256): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5819 comm="syz-executor" name="346" dev="tmpfs" ino=1886 [ 559.392319][ T29] audit: type=1400 audit(28164.147:39257): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=5819 comm="syz-executor" path="/346/binderfs" dev="tmpfs" ino=1890 [ 559.411866][ T29] audit: type=1400 audit(28164.147:39258): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5819 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 559.430951][ T29] audit: type=1400 audit(28164.147:39259): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5819 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 559.624400][T12320] veth1_vlan: left allmulticast mode [ 559.715046][T12320] macvlan0: left promiscuous mode [ 559.720251][T12320] macvlan0: left allmulticast mode [ 559.736830][T12320] netlink: 'syz.4.1643': attribute type 2 has an invalid length. [ 560.087547][T12330] 9pnet_fd: Insufficient options for proto=fd [ 560.302999][ T974] usb write operation failed. (-71) [ 560.310231][ T974] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 560.332619][ T974] dvbdev: DVB: registering new adapter (Terratec H7) [ 560.356701][ T974] usb 1-1: media controller created [ 560.381288][ T974] usb read operation failed. (-71) [ 560.394569][ T974] usb write operation failed. (-71) [ 560.416619][ T974] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 560.475103][ T974] usb 1-1: USB disconnect, device number 87 [ 561.524110][T12342] 9pnet_fd: Insufficient options for proto=fd [ 562.624609][T12352] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1650'. [ 562.634237][T12352] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1650'. [ 563.080126][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.097282][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.894288][ T974] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 564.086916][ T974] usb 2-1: Using ep0 maxpacket: 16 [ 564.152232][ T974] usb 2-1: unable to get BOS descriptor or descriptor too short [ 564.245225][ T29] kauditd_printk_skb: 1929 callbacks suppressed [ 564.245243][ T29] audit: type=1400 audit(28169.217:40781): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10517 comm="syz-executor" name="90" dev="tmpfs" ino=492 [ 564.246850][ T974] usb 2-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 564.272949][ T29] audit: type=1400 audit(28169.217:40782): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10517 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 564.327577][ T974] usb 2-1: config 1 interface 0 has no altsetting 0 [ 564.345403][T12363] audit: audit_backlog=65 > audit_backlog_limit=64 [ 564.353265][T12363] audit: audit_lost=3284 audit_rate_limit=0 audit_backlog_limit=64 [ 564.380178][T12364] audit: audit_backlog=65 > audit_backlog_limit=64 [ 564.382994][ T29] audit: type=1400 audit(28169.217:40783): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10517 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 564.394632][T12360] audit: audit_backlog=65 > audit_backlog_limit=64 [ 564.418412][T12363] audit: backlog limit exceeded [ 564.433593][T12364] audit: audit_lost=3285 audit_rate_limit=0 audit_backlog_limit=64 [ 564.438616][ T29] audit: type=1400 audit(28169.217:40784): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10517 comm="syz-executor" name="90" dev="tmpfs" ino=492 [ 564.456161][ T974] usb 2-1: string descriptor 0 read error: -22 [ 564.476374][ T974] usb 2-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 564.491361][ T974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.526961][ T974] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input38 [ 564.864841][T12375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1656'. [ 565.703167][ T5899] usb 2-1: USB disconnect, device number 92 [ 565.714349][ T5177] bcm5974 2-1:1.0: could not read from device [ 565.765264][ T5177] bcm5974 2-1:1.0: could not read from device [ 565.870639][T12388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1661'. [ 566.129206][T12400] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 566.375223][ T974] usb 4-1: new full-speed USB device number 96 using dummy_hcd [ 566.871272][ T974] usb 4-1: config 0 has an invalid interface number: 112 but max is 0 [ 566.880702][ T974] usb 4-1: config 0 has no interface number 0 [ 566.896884][ T974] usb 4-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 566.932568][ T974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.959319][ T974] usb 4-1: Product: syz [ 566.980666][ T974] usb 4-1: Manufacturer: syz [ 566.987627][ T974] usb 4-1: SerialNumber: syz [ 567.108017][ T974] usb 4-1: config 0 descriptor?? [ 567.118005][T12408] netlink: 'syz.4.1669': attribute type 10 has an invalid length. [ 567.166670][T12408] 8021q: adding VLAN 0 to HW filter on device team0 [ 567.167404][ T974] mvusb_mdio 4-1:0.112: probe with driver mvusb_mdio failed with error -5 [ 567.176809][T12408] bond0: (slave team0): Enslaving as an active interface with an up link [ 567.264381][ T5898] usb 2-1: new low-speed USB device number 93 using dummy_hcd [ 567.358290][ T5899] usb 4-1: USB disconnect, device number 96 [ 567.460814][ T5898] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 567.474382][ T5898] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 567.484687][ T5898] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 567.544286][ T5909] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 567.710418][ T5909] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 567.727616][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.740570][ T5909] usb 5-1: Product: syz [ 567.749461][ T5909] usb 5-1: Manufacturer: syz [ 567.754145][ T5909] usb 5-1: SerialNumber: syz [ 567.774310][ T5909] usb 5-1: config 0 descriptor?? [ 567.871603][T12418] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1672'. [ 567.881175][T12418] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1672'. [ 568.866641][ T5909] hso 5-1:0.0: Failed to find BULK IN ep [ 568.886570][ T5909] usb-storage 5-1:0.0: USB Mass Storage device detected [ 568.996373][ T5909] usb 5-1: USB disconnect, device number 77 [ 569.270363][ T29] kauditd_printk_skb: 4005 callbacks suppressed [ 569.270508][ T29] audit: type=1400 audit(28174.237:44109): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=12441 comm="syz.3.1680" opid=12441 ocomm="syz.3.1680" [ 569.296913][T12443] Smack: duplicate mount options [ 569.301976][ T29] audit: type=1400 audit(28174.267:44110): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12441 comm="syz.3.1680" name="354" dev="tmpfs" ino=1928 [ 569.323316][T12443] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 569.331617][T12443] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 569.340143][T12443] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 569.349198][ T29] audit: type=1400 audit(28174.267:44111): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12441 comm="syz.3.1680" name="354" dev="tmpfs" ino=1928 [ 569.367970][ T29] audit: type=1400 audit(28174.267:44112): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=12441 comm="syz.3.1680" name="354" dev="tmpfs" ino=1928 [ 569.388859][ T29] audit: type=1400 audit(28174.267:44113): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12441 comm="syz.3.1680" name="354" dev="tmpfs" ino=1928 [ 569.407602][ T29] audit: type=1400 audit(28174.267:44114): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12441 comm="syz.3.1680" name="354" dev="tmpfs" ino=1928 [ 569.427292][ T29] audit: type=1400 audit(28174.287:44115): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12441 comm="syz.3.1680" name="/" dev="sda1" ino=2 [ 569.445962][ T29] audit: type=1400 audit(28174.287:44116): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12441 comm="syz.3.1680" name="lib" dev="sda1" ino=239 [ 569.466847][ T29] audit: type=1400 audit(28174.287:44117): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12441 comm="syz.3.1680" name="firmware" dev="sda1" ino=248 [ 569.487987][ T29] audit: type=1400 audit(28174.287:44118): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12441 comm="syz.3.1680" name="/" dev="sda1" ino=2 [ 569.524339][ T5909] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 569.674292][ T5909] usb 5-1: Using ep0 maxpacket: 16 [ 569.687422][ T5909] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 569.696711][ T5909] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 569.707032][ T5909] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 569.718974][ T5909] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 569.728399][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.736656][ T5909] usb 5-1: Product: Л [ 569.740878][ T5909] usb 5-1: Manufacturer: ëžä„¡íŸ”̱ᇱÈỎ栽駯ଘê“쵶쇓幓ã¯êµ¤æŠ§æ‚§É¯è»¨ë»© [ 569.750616][ T5909] usb 5-1: SerialNumber: syz [ 569.855873][ T5898] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 569.874111][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.902389][ T5898] usb 2-1: can't set config #1, error -71 [ 569.910184][ T5898] usb 2-1: USB disconnect, device number 93 [ 570.005381][ T5909] usb 5-1: 0:2 : does not exist [ 570.031764][ T5909] usb 5-1: USB disconnect, device number 78 [ 570.053497][T12446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1681'. [ 570.073836][T12446] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 571.695996][T12483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1691'. [ 571.719835][T12483] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1691'. [ 572.364000][T12501] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1696'. [ 572.385359][T12501] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1696'. [ 572.535079][ T5828] Bluetooth: hci3: command 0x0405 tx timeout [ 572.709193][T12511] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1695'. [ 572.718766][T12511] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1695'. [ 573.564380][ T5899] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 573.724384][ T5899] usb 2-1: Using ep0 maxpacket: 32 [ 573.743958][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 573.769966][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 573.799223][ T5899] usb 2-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 573.819242][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.846215][ T5899] usb 2-1: config 0 descriptor?? [ 574.274452][ T29] kauditd_printk_skb: 7995 callbacks suppressed [ 574.274470][ T29] audit: type=1400 audit(28179.247:49051): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8881 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 574.347400][ T5899] viewsonic 0003:2133:0018.001D: hidraw0: USB HID v0.00 Device [HID 2133:0018] on usb-dummy_hcd.1-1/input0 [ 574.374510][ T29] audit: type=1400 audit(28179.267:49052): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8881 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 574.506293][ T5899] libceph: connect (1)[c::]:6789 error -101 [ 574.513041][ T5899] libceph: mon0 (1)[c::]:6789 connect error [ 574.550117][T12550] audit: audit_backlog=65 > audit_backlog_limit=64 [ 574.556740][T12550] audit: audit_lost=4538 audit_rate_limit=0 audit_backlog_limit=64 [ 574.564757][T12550] audit: backlog limit exceeded [ 574.572372][T12550] audit: audit_backlog=65 > audit_backlog_limit=64 [ 574.579088][T12550] audit: audit_lost=4539 audit_rate_limit=0 audit_backlog_limit=64 [ 574.587185][T12550] audit: backlog limit exceeded [ 574.593269][T12550] audit: audit_backlog=65 > audit_backlog_limit=64 [ 574.600164][T12550] audit: audit_lost=4540 audit_rate_limit=0 audit_backlog_limit=64 [ 574.876765][ T5904] libceph: connect (1)[c::]:6789 error -101 [ 575.036923][T12547] ceph: No mds server is up or the cluster is laggy [ 575.057409][T12512] xt_SECMARK: invalid mode: 0 [ 575.064966][ T5904] libceph: mon0 (1)[c::]:6789 connect error [ 575.078879][ T5904] usb 2-1: USB disconnect, device number 94 [ 575.784297][ T5867] usb 4-1: new full-speed USB device number 97 using dummy_hcd [ 575.892644][T12563] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 575.916075][T12563] netlink: 'syz.0.1711': attribute type 2 has an invalid length. [ 575.924573][T12563] netlink: 'syz.0.1711': attribute type 8 has an invalid length. [ 575.932976][T12563] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1711'. [ 575.953875][ T5867] usb 4-1: device descriptor read/64, error -71 [ 576.204365][ T5867] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 576.262281][T12565] random: crng reseeded on system resumption [ 576.344485][ T5867] usb 4-1: device descriptor read/64, error -71 [ 576.499275][ T5867] usb usb4-port1: attempt power cycle [ 576.613271][T12568] vxcan1: tx drop: invalid sa for name 0x0000000000000001 [ 576.736059][T12575] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1716'. [ 576.747523][T12575] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1716'. [ 576.806664][T12578] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1715'. [ 576.924563][ T5867] usb 4-1: new full-speed USB device number 99 using dummy_hcd [ 576.956990][ T5867] usb 4-1: device descriptor read/8, error -71 [ 577.171302][ T47] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 577.528301][ T47] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 577.543251][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.574380][ T47] usb 3-1: Product: syz [ 577.578584][ T47] usb 3-1: Manufacturer: syz [ 577.603354][ T47] usb 3-1: SerialNumber: syz [ 577.622309][ T47] usb 3-1: config 0 descriptor?? [ 577.819266][T12592] netlink: 'syz.0.1721': attribute type 4 has an invalid length. [ 577.871293][T12594] netlink: 'syz.0.1721': attribute type 4 has an invalid length. [ 578.154302][ T5898] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 578.162054][ T5867] usb 4-1: new full-speed USB device number 100 using dummy_hcd [ 578.185120][ T5867] usb 4-1: device descriptor read/8, error -71 [ 578.243106][ T47] usb 3-1: Firmware version (0.0) predates our first public release. [ 578.265828][ T47] usb 3-1: Please update to version 0.2 or newer [ 579.011386][ T5867] usb usb4-port1: unable to enumerate USB device [ 579.037237][ T47] usb 3-1: USB disconnect, device number 76 [ 579.127651][ T5898] usb 5-1: device descriptor read/64, error -71 [ 579.284264][ T29] kauditd_printk_skb: 3414 callbacks suppressed [ 579.284280][ T29] audit: type=1400 audit(28184.247:51415): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8881 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 579.331370][T10517] audit: audit_backlog=65 > audit_backlog_limit=64 [ 579.334695][ T5819] audit: audit_backlog=65 > audit_backlog_limit=64 [ 579.342880][T10517] audit: audit_lost=4897 audit_rate_limit=0 audit_backlog_limit=64 [ 579.344754][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 579.359022][ C0] audit: audit_lost=4898 audit_rate_limit=0 audit_backlog_limit=64 [ 579.359693][T10517] audit: backlog limit exceeded [ 579.366928][ C0] audit: backlog limit exceeded [ 579.367480][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 579.381015][ T29] audit: type=1400 audit(28184.247:51416): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8881 comm="syz-executor" name="205" dev="tmpfs" ino=1167 [ 579.393985][ T5898] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 579.638643][ T5898] usb 5-1: device descriptor read/64, error -71 [ 579.652778][T12627] netlink: 1256 bytes leftover after parsing attributes in process `syz.2.1728'. [ 579.670485][T12627] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 580.442765][ T5898] usb usb5-port1: attempt power cycle [ 580.690283][T12647] block nbd0: shutting down sockets [ 581.146645][T12651] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1734'. [ 581.594473][ T974] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 581.673018][T12681] lo speed is unknown, defaulting to 1000 [ 581.784509][ T974] usb 3-1: Using ep0 maxpacket: 32 [ 581.806356][ T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 581.818480][ T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 581.854220][ T974] usb 3-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 581.864710][ T974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.984313][ T974] usb 3-1: config 0 descriptor?? [ 582.905819][T12663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.914667][T12663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.131412][ T47] IPVS: starting estimator thread 0... [ 583.294759][ T47] libceph: connect (1)[c::]:6789 error -101 [ 583.301965][ T47] libceph: mon0 (1)[c::]:6789 connect error [ 583.480333][T12710] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 583.489782][T12698] IPVS: using max 20 ests per chain, 48000 per kthread [ 583.595995][ T47] libceph: connect (1)[c::]:6789 error -101 [ 583.639441][ T47] libceph: mon0 (1)[c::]:6789 connect error [ 584.043014][T12714] binder_alloc: 12713: pid 12713 spamming oneway? 1 buffers allocated for a total size of 4096 [ 584.080789][T12714] binder: 12713:12714 ioctl 8914 20000100 returned -22 [ 584.226065][T12720] sg_write: data in/out 830110031/238 bytes for SCSI command 0x0-- guessing data in; [ 584.226065][T12720] program syz.1.1753 not setting count and/or reply_len properly [ 584.243929][ T5899] libceph: connect (1)[c::]:6789 error -101 [ 584.250575][ T5899] libceph: mon0 (1)[c::]:6789 connect error [ 584.302214][ T29] kauditd_printk_skb: 5328 callbacks suppressed [ 584.302231][ T29] audit: type=1400 audit(28189.267:54477): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12722 comm="syz-executor" name="/" dev="proc" ino=1 [ 584.343544][T12725] audit: audit_backlog=65 > audit_backlog_limit=64 [ 584.344116][T12724] audit: audit_backlog=65 > audit_backlog_limit=64 [ 584.358166][T12724] audit: audit_lost=5660 audit_rate_limit=0 audit_backlog_limit=64 [ 584.363554][T12725] audit: audit_lost=5661 audit_rate_limit=0 audit_backlog_limit=64 [ 584.366629][T12724] audit: backlog limit exceeded [ 584.378783][ T29] audit: type=1400 audit(28189.267:54478): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12722 comm="syz-executor" name="/" dev="proc" ino=1 [ 584.379680][T12724] audit: audit_backlog=65 > audit_backlog_limit=64 [ 584.404484][T12725] audit: backlog limit exceeded [ 584.405433][T12727] audit: audit_backlog=65 > audit_backlog_limit=64 [ 584.773110][T12735] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1757'. [ 584.936799][T12743] autofs: Unknown parameter 'Q‚¼' [ 584.999563][T12704] ceph: No mds server is up or the cluster is laggy [ 585.088565][ T974] usbhid 3-1:0.0: can't add hid device: -71 [ 585.097931][ T974] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 585.195640][ T974] usb 3-1: USB disconnect, device number 77 [ 585.434233][T12750] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 585.443364][T12750] macvlan3: entered allmulticast mode [ 585.449515][T12750] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 585.481685][T12750] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 585.489006][T12750] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 585.844286][ T5899] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 585.994986][ T5899] usb 5-1: Using ep0 maxpacket: 8 [ 586.083999][ T974] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 586.121934][ T5899] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 586.132287][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 586.143381][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 586.153139][ T5899] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 586.166687][ T5899] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 586.176031][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.186416][ T5899] usb 5-1: config 0 descriptor?? [ 586.256600][ T974] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 586.275051][ T974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.320799][ T974] usb 3-1: config 0 descriptor?? [ 586.357213][ T974] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 586.384259][T12769] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1767'. [ 586.400418][ T47] usb 5-1: USB disconnect, device number 82 [ 586.840693][ T974] gspca_stv06xx: I2C: Read error writing address: -71 [ 586.887759][ T974] usb 3-1: USB disconnect, device number 78 [ 587.926029][T12800] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1774'. [ 588.744305][ T974] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 588.955898][ T974] usb 3-1: Using ep0 maxpacket: 32 [ 588.967887][ T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 49306, setting to 1024 [ 588.982852][ T974] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 589.014235][ T974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.024946][ T974] usb 3-1: config 0 descriptor?? [ 589.035141][ T974] hub 3-1:0.0: USB hub found [ 589.237498][ T974] hub 3-1:0.0: 1 port detected [ 589.304262][ T29] kauditd_printk_skb: 5209 callbacks suppressed [ 589.304288][ T29] audit: type=1400 audit(28194.227:58274): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12839 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 589.330109][ T29] audit: type=1400 audit(28194.227:58275): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12839 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 589.354552][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 589.361086][ C0] audit: audit_lost=6134 audit_rate_limit=0 audit_backlog_limit=64 [ 589.369019][ C0] audit: backlog limit exceeded [ 589.374741][ T29] audit: type=1400 audit(28194.227:58276): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12839 comm="syz-executor" name="50" dev="tmpfs" ino=298 [ 589.408304][ T29] audit: type=1400 audit(28194.227:58277): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=12839 comm="syz-executor" opid=12839 ocomm="syz-executor" [ 589.434296][ T29] audit: type=1400 audit(28194.227:58278): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12839 comm="syz-executor" name="50" dev="tmpfs" ino=298 [ 589.473803][T12842] audit: audit_backlog=65 > audit_backlog_limit=64 [ 589.484563][ T29] audit: type=1400 audit(28194.227:58279): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12839 comm="syz-executor" name="50" dev="tmpfs" ino=298 [ 589.611478][T12848] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1784'. [ 589.621051][T12848] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1784'. [ 590.263381][T12851] bond0: (slave tunl0): Error: Device can not be enslaved while up [ 590.314332][ T9020] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 590.465055][ T9020] usb 4-1: Using ep0 maxpacket: 16 [ 590.485751][ T9020] usb 4-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 590.508816][ T9020] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.543350][ T9020] usb 4-1: Product: syz [ 590.562567][ T9020] usb 4-1: Manufacturer: syz [ 590.575723][ T9020] usb 4-1: SerialNumber: syz [ 590.583203][ T9020] usb 4-1: config 0 descriptor?? [ 590.603547][ T9020] as10x_usb: device has been detected [ 590.627033][ T9020] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 590.833294][T12842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.991047][T12842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.158703][T12842] random: crng reseeded on system resumption [ 591.205145][ T5899] usb 3-1: USB disconnect, device number 79 [ 591.284107][ T9020] usb 4-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 591.300352][ T9020] as10x_usb: error during firmware upload part1 [ 591.306795][ T9020] Registered device Sky IT Digital Key (green led) [ 592.841235][ T5899] usb 4-1: USB disconnect, device number 101 [ 592.842944][T12874] input: syz1 as /devices/virtual/input/input40 [ 592.963196][ T5899] Unregistered device Sky IT Digital Key (green led) [ 592.970103][ T5899] as10x_usb: device has been disconnected [ 593.324533][ T5899] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 593.564789][ T5899] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 593.623876][ T5899] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 593.665030][ T5899] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 593.700893][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.871191][T12881] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 593.889752][ T5899] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 593.983062][T12906] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 594.121022][ T5899] usb 4-1: USB disconnect, device number 102 [ 594.351893][ T29] kauditd_printk_skb: 3581 callbacks suppressed [ 594.366389][ T29] audit: type=1400 audit(28199.137:60288): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=5804 comm="syz-executor" saddr=10.128.0.169 src=30008 daddr=10.128.1.125 dest=48202 netif=eth0 [ 594.764582][T12916] audit: audit_backlog=65 > audit_backlog_limit=64 [ 594.771411][T12916] audit: audit_lost=6660 audit_rate_limit=0 audit_backlog_limit=64 [ 594.779608][T12916] audit: backlog limit exceeded [ 594.787221][T12916] audit: audit_backlog=65 > audit_backlog_limit=64 [ 594.794627][T12916] audit: audit_lost=6661 audit_rate_limit=0 audit_backlog_limit=64 [ 594.802741][T12916] audit: backlog limit exceeded [ 594.925371][T12916] audit: audit_backlog=65 > audit_backlog_limit=64 [ 594.932047][T12916] audit: audit_lost=6662 audit_rate_limit=0 audit_backlog_limit=64 [ 594.940207][T12916] audit: backlog limit exceeded [ 595.484311][T12915] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1801'. [ 595.493435][T12915] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1801'. [ 596.051166][T12929] netlink: 'syz.1.1805': attribute type 4 has an invalid length. [ 596.065759][T12933] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1807'. [ 596.081090][ T5867] lo speed is unknown, defaulting to 1000 [ 596.089852][T12929] netlink: 'syz.1.1805': attribute type 4 has an invalid length. [ 596.102827][ T9020] lo speed is unknown, defaulting to 1000 [ 596.958850][T12952] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 597.166891][ T5899] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 598.538548][ T5899] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 598.547692][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.556225][ T5899] usb 4-1: Product: syz [ 598.564637][ T5899] usb 4-1: Manufacturer: syz [ 598.569267][ T5899] usb 4-1: SerialNumber: syz [ 598.582443][ T5899] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 599.136105][ T5909] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 599.340169][T12979] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1816'. [ 599.359275][ T29] kauditd_printk_skb: 4254 callbacks suppressed [ 599.359290][ T29] audit: type=1400 audit(28204.317:62585): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12980 comm="syz.1.1819" name="newroot" dev="tmpfs" ino=2 [ 599.388098][T12974] audit: audit_backlog=65 > audit_backlog_limit=64 [ 599.396844][T12983] audit: audit_backlog=65 > audit_backlog_limit=64 [ 599.403430][T12983] audit: audit_lost=7316 audit_rate_limit=0 audit_backlog_limit=64 [ 599.412054][T12975] audit: audit_backlog=65 > audit_backlog_limit=64 [ 599.418746][ T29] audit: type=1400 audit(28204.317:62586): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=12980 comm="syz.1.1819" name="/" dev="proc" ino=1 [ 599.437399][T12974] audit: audit_lost=7317 audit_rate_limit=0 audit_backlog_limit=64 [ 599.445634][T12983] audit: backlog limit exceeded [ 599.451761][T12983] audit: audit_backlog=65 > audit_backlog_limit=64 [ 599.458603][T12975] audit: audit_lost=7318 audit_rate_limit=0 audit_backlog_limit=64 [ 599.469795][T12985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.483322][T12985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.748085][ T5867] usb 4-1: USB disconnect, device number 103 [ 599.884735][T12992] netlink: 'syz.0.1820': attribute type 1 has an invalid length. [ 599.911653][T12992] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1820'. [ 600.145130][ T5899] usb 3-1: new low-speed USB device number 80 using dummy_hcd [ 600.316339][ T5899] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 600.334757][ T5899] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 600.386029][ T5899] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x2 has invalid maxpacket 16, setting to 8 [ 600.412465][ T5899] usb 3-1: config 1 interface 0 has no altsetting 0 [ 600.677944][ T5909] usb 4-1: Service connection timeout for: 256 [ 600.690273][ T5909] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 600.854708][T13008] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1825'. [ 600.876908][T13008] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1825'. [ 601.100640][ T5909] ath9k_htc: Failed to initialize the device [ 601.679578][ T5867] usb 4-1: ath9k_htc: USB layer deinitialized [ 602.789351][ T5899] usb 3-1: string descriptor 0 read error: -71 [ 602.795755][ T5899] usb 3-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.40 [ 602.812388][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.885467][ T5899] usb 3-1: can't set config #1, error -71 [ 602.912418][ T5899] usb 3-1: USB disconnect, device number 80 [ 603.295928][ T5899] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 603.544410][ T5899] usb 3-1: Using ep0 maxpacket: 16 [ 603.721897][ T5899] usb 3-1: config index 0 descriptor too short (expected 42, got 18) [ 603.757581][ T5899] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 219, using maximum allowed: 30 [ 603.783343][ T5899] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 219 [ 603.825460][ T5899] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 7.06 [ 603.834563][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 603.842546][ T5899] usb 3-1: Product: syz [ 603.849947][ T5899] usb 3-1: SerialNumber: syz [ 603.924629][ T5899] r8152-cfgselector 3-1: Unknown version 0x0000 [ 603.930918][ T5899] r8152-cfgselector 3-1: config 0 descriptor?? [ 604.005024][T13033] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 604.013465][T13033] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 604.022060][T13033] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 604.454190][ C1] hrtimer: interrupt took 59150 ns [ 604.480291][ T29] kauditd_printk_skb: 3140 callbacks suppressed [ 604.480362][ T29] audit: type=1400 audit(28209.447:64739): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13016 comm="syz.2.1827" name="newroot" dev="tmpfs" ino=2 [ 604.505882][ C1] vkms_vblank_simulate: vblank timer overrun [ 604.586681][T13018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.614423][T13018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.622277][ T29] audit: type=1400 audit(28209.447:64740): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=13026 comm="syz.0.1830" saddr=10.128.0.169 src=30008 daddr=10.128.1.125 dest=48202 netif=eth0 [ 604.692869][ T29] audit: type=1400 audit(28209.507:64741): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13016 comm="syz.2.1827" name="/" dev="devtmpfs" ino=1 [ 604.712556][ T29] audit: type=1400 audit(28209.517:64742): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=rw pid=13016 comm="syz.2.1827" name="raw-gadget" dev="devtmpfs" ino=820 [ 604.743768][ T29] audit: type=1400 audit(28209.527:64743): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=13016 comm="syz.2.1827" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 604.763593][ T29] audit: type=1400 audit(28209.527:64744): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=13016 comm="syz.2.1827" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 604.788043][ T8881] audit: audit_backlog=65 > audit_backlog_limit=64 [ 604.804113][T10539] audit: audit_backlog=65 > audit_backlog_limit=64 [ 604.804501][ T8881] audit: audit_lost=7648 audit_rate_limit=0 audit_backlog_limit=64 [ 604.810737][T10539] audit: audit_lost=7649 audit_rate_limit=0 audit_backlog_limit=64 [ 604.900897][T13037] netlink: 'syz.3.1832': attribute type 1 has an invalid length. [ 604.923404][T13037] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1832'. [ 604.947723][T13044] tmpfs: Unknown parameter 'usrquota -rlimit +net ' [ 604.974328][ T974] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 605.145073][ T974] usb 2-1: Using ep0 maxpacket: 32 [ 605.184773][ T974] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 605.207218][ T974] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 605.232227][ T5899] hub 3-1:0.0: bad descriptor, ignoring hub [ 605.239403][ T5899] hub 3-1:0.0: probe with driver hub failed with error -5 [ 605.249107][ T974] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 605.295394][ T5899] r8152-cfgselector 3-1: USB disconnect, device number 81 [ 605.300025][ T974] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 605.336249][ T974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.354457][ T974] usb 2-1: Product: syz [ 605.362136][ T974] usb 2-1: Manufacturer: syz [ 605.367049][ T974] usb 2-1: SerialNumber: syz [ 606.275856][ T974] usb 2-1: 2:1 : invalid channels 0 [ 606.291142][ T974] usb 2-1: USB disconnect, device number 95 [ 607.455393][T13077] netlink: 'syz.3.1845': attribute type 1 has an invalid length. [ 607.494283][T13077] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1845'. [ 607.514458][ T5899] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 607.586642][T13081] netlink: 'syz.4.1843': attribute type 3 has an invalid length. [ 607.602072][T13081] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1843'. [ 607.835271][T13083] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 607.843984][T13083] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 607.852546][T13083] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 608.789800][ T5899] usb 3-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=c5.77 [ 608.799528][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.807836][ T5899] usb 3-1: Product: syz [ 608.812023][ T5899] usb 3-1: Manufacturer: syz [ 608.816778][ T5899] usb 3-1: SerialNumber: syz [ 608.825487][ T5899] usb 3-1: config 0 descriptor?? [ 608.840237][ T5899] usb 3-1: disable ehci-hcd to run US-144 [ 608.984452][ T5867] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 609.035665][ T5899] usb 3-1: USB disconnect, device number 82 [ 609.111403][ T7289] Bluetooth: hci5: Frame reassembly failed (-84) [ 609.119547][T13097] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 609.134957][ T5867] usb 4-1: Using ep0 maxpacket: 32 [ 609.153634][ T5867] usb 4-1: config 254 has an invalid interface number: 205 but max is 0 [ 609.164685][ T5867] usb 4-1: config 254 has no interface number 0 [ 609.174885][ T5867] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=52.c6 [ 609.184680][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.192691][ T5867] usb 4-1: Product: syz [ 609.197572][ T5867] usb 4-1: Manufacturer: syz [ 609.203820][ T5867] usb 4-1: SerialNumber: syz [ 609.223373][ T5867] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 609.233668][ T5867] usb 4-1: setting power ON [ 609.239288][ T5867] dvb-usb: bulk message failed: -22 (2/0) [ 609.258356][ T5867] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 609.274760][ T5867] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 609.283637][ T5867] usb 4-1: media controller created [ 609.301776][ T5867] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 609.321836][ T5867] usb 4-1: digital interface selection failed (-22) [ 609.328952][ T5867] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 609.338974][ T5867] usb 4-1: setting power OFF [ 609.343791][ T5867] dvb-usb: bulk message failed: -22 (2/0) [ 609.350861][ T5867] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 609.361165][ T5867] (NULL device *): no alternate interface [ 609.433675][T13088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.452207][ T5867] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 609.463237][T13088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.474953][ T5867] usb 4-1: USB disconnect, device number 104 [ 609.494871][ T29] kauditd_printk_skb: 3375 callbacks suppressed [ 609.494886][ T29] audit: type=1400 audit(28214.467:67293): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=16 comm="ksoftirqd/0" saddr=10.128.0.169 src=30008 daddr=10.128.1.125 dest=48202 netif=eth0 [ 609.621321][ T29] audit: type=1400 audit(28214.587:67294): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30008 daddr=10.128.1.125 dest=48202 netif=eth0 [ 609.629681][T10517] audit: audit_backlog=65 > audit_backlog_limit=64 [ 609.644244][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 609.656227][ C0] audit: audit_lost=7925 audit_rate_limit=0 audit_backlog_limit=64 [ 609.664103][ C0] audit: backlog limit exceeded [ 609.669170][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 609.675749][ C0] audit: audit_lost=7926 audit_rate_limit=0 audit_backlog_limit=64 [ 609.683651][ C0] audit: backlog limit exceeded [ 609.718691][T10517] audit: audit_lost=7927 audit_rate_limit=0 audit_backlog_limit=64 [ 610.140199][ T5867] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 610.537863][ T5867] usb 5-1: Using ep0 maxpacket: 32 [ 610.549698][ T5867] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=27.51 [ 610.561031][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.575529][ T5867] usb 5-1: Product: syz [ 610.579728][ T5867] usb 5-1: Manufacturer: syz [ 610.598650][ T5867] usb 5-1: SerialNumber: syz [ 610.615315][ T5867] usb 5-1: config 0 descriptor?? [ 610.657823][ T5867] usb_ehset_test 5-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 610.703992][T13110] lo speed is unknown, defaulting to 1000 [ 610.846334][ T5867] usb 5-1: USB disconnect, device number 83 [ 611.154427][ T5828] Bluetooth: hci5: command 0x1003 tx timeout [ 611.164437][ T5131] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 611.319338][T13130] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 611.319480][T13130] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 611.319543][T13130] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 612.488619][T13144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.497975][T13144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.524623][ T5867] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 612.634285][ T47] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 612.689405][ T5867] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 612.698971][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.707160][ T5867] usb 2-1: Product: syz [ 612.711459][ T5867] usb 2-1: Manufacturer: syz [ 612.716161][ T5867] usb 2-1: SerialNumber: syz [ 612.722355][ T5867] usb 2-1: config 0 descriptor?? [ 612.724415][ T5899] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 612.786020][ T47] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 612.795392][ T47] usb 3-1: config 0 has no interface number 0 [ 612.805030][ T47] usb 3-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=9e.3c [ 612.814425][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.822436][ T47] usb 3-1: Product: syz [ 612.826832][ T47] usb 3-1: Manufacturer: syz [ 612.831434][ T47] usb 3-1: SerialNumber: syz [ 612.838975][ T47] usb 3-1: config 0 descriptor?? [ 612.846568][ T47] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 612.854465][ T47] dvb-usb: bulk message failed: -22 (3/0) [ 612.864282][ T5909] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 612.878394][ T47] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 612.890625][ T47] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 612.899123][ T47] usb 3-1: media controller created [ 612.905271][ T5899] usb 5-1: config index 0 descriptor too short (expected 18, got 16) [ 612.913370][ T5899] usb 5-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 612.930942][T13136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.934496][ T47] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 612.946479][T13136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.948259][ T5899] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 612.963165][T13136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.968168][ T5899] usb 5-1: New USB device found, idVendor=1b3d, idProduct=0186, bcdDevice=cf.e1 [ 612.983287][T13136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.987840][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=13, SerialNumber=3 [ 613.000625][ T5899] usb 5-1: Product: syz [ 613.008959][T13136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.014056][ T5899] usb 5-1: Manufacturer: syz [ 613.023245][ T5899] usb 5-1: SerialNumber: syz [ 613.026738][T13136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.037255][ T5899] usb 5-1: config 0 descriptor?? [ 613.044366][ T5909] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 613.052606][T13136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.071853][T13136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.075219][T13146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.094805][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.096169][T13146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.107110][ T5909] usb 4-1: config 0 descriptor?? [ 613.110922][T13136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.128466][ T5909] cp210x 4-1:0.0: cp210x converter detected [ 613.139967][ T47] DVB: Unable to find symbol mt352_attach() [ 613.146009][ T47] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 613.150997][T13136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.155041][ T47] dvb-usb: bulk message failed: -22 (3/0) [ 613.184378][ T47] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 613.204947][ T47] usb 3-1: USB disconnect, device number 83 [ 613.242766][ T47] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 613.313029][ T5867] usb 2-1: Firmware version (0.0) predates our first public release. [ 613.321334][ T5867] usb 2-1: Please update to version 0.2 or newer [ 613.375674][ T5867] usb 2-1: USB disconnect, device number 96 [ 613.734265][ T5867] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 613.742882][ T5909] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 613.750879][ T5909] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 613.755730][T13169] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1869'. [ 613.772228][ T5909] usb 4-1: cp210x converter now attached to ttyUSB0 [ 613.788164][ T5909] usb 4-1: USB disconnect, device number 105 [ 613.815423][ T5909] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 613.823505][ T5909] cp210x 4-1:0.0: device disconnected [ 613.896019][ T5867] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 613.904512][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.917184][ T5867] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 613.926842][ T5867] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 613.934950][ T5867] usb 2-1: Manufacturer: syz [ 613.941912][ T5867] usb 2-1: config 0 descriptor?? [ 614.004722][ T5867] rc_core: IR keymap rc-hauppauge not found [ 614.010808][ T5867] Registered IR keymap rc-empty [ 614.017572][ T5867] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 614.029028][ T5867] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input41 [ 614.054333][ T9020] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 614.188415][ T9020] usb 3-1: device descriptor read/64, error -71 [ 614.456365][ T9020] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 614.462618][T13177] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 614.473473][T13177] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 614.482022][T13177] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 614.511355][ T29] kauditd_printk_skb: 5768 callbacks suppressed [ 614.511371][ T29] audit: type=1400 audit(28219.427:71622): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=13174 comm="syz.3.1871" opid=13174 ocomm="syz.3.1871" [ 614.576570][ T29] audit: type=1400 audit(28219.427:71623): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13174 comm="syz.3.1871" name="402" dev="tmpfs" ino=2180 [ 614.641348][ T47] usb 2-1: USB disconnect, device number 97 [ 614.698486][ T29] audit: type=1400 audit(28219.427:71624): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13174 comm="syz.3.1871" name="402" dev="tmpfs" ino=2180 [ 614.884279][ T27] audit: audit_backlog=65 > audit_backlog_limit=64 [ 614.898714][ T5174] audit: audit_backlog=66 > audit_backlog_limit=64 [ 614.912266][ T29] audit: type=1400 audit(28219.427:71625): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=13174 comm="syz.3.1871" name="402" dev="tmpfs" ino=2180 [ 614.963417][ T27] audit: audit_lost=8410 audit_rate_limit=0 audit_backlog_limit=64 [ 614.975091][ T5174] audit: audit_lost=8411 audit_rate_limit=0 audit_backlog_limit=64 [ 615.016141][ T27] audit: backlog limit exceeded [ 615.021544][ T5174] audit: backlog limit exceeded [ 615.224922][ T9020] usb 3-1: device descriptor read/64, error -71 [ 615.354494][ T9020] usb usb3-port1: attempt power cycle [ 615.373496][ T5898] usb 5-1: USB disconnect, device number 84 [ 615.667925][ T974] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 615.961901][T13195] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1876'. [ 616.024292][ T974] usb 4-1: Using ep0 maxpacket: 16 [ 616.035576][ T974] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 616.048677][ T974] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 616.060448][ T974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 616.072429][ T974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 616.084321][ T974] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 616.099220][ T9020] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 616.128261][ T9020] usb 3-1: device descriptor read/8, error -71 [ 616.148412][ T974] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 616.157900][ T974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.180087][ T974] usb 4-1: Product: syz [ 616.187618][ T974] usb 4-1: Manufacturer: syz [ 616.193047][ T974] usb 4-1: SerialNumber: syz [ 616.205942][ T974] usb 4-1: config 0 descriptor?? [ 616.469529][ T9020] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 617.293166][ T974] appledisplay 4-1:0.0: Error while getting initial brightness: -110 [ 617.319112][T13204] bridge0: port 3(veth0_to_bridge) entered blocking state [ 617.320386][ T974] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -110 [ 617.326546][T13204] bridge0: port 3(veth0_to_bridge) entered disabled state [ 617.342572][T13204] veth0_to_bridge: entered allmulticast mode [ 617.349257][T13204] veth0_to_bridge: entered promiscuous mode [ 617.355268][T13204] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 617.370906][T13204] bridge0: port 3(veth0_to_bridge) entered blocking state [ 617.378165][T13204] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 617.539053][T13197] Process accounting resumed [ 617.644697][ T9020] usb 3-1: device descriptor read/8, error -71 [ 617.691716][ T974] usb 4-1: USB disconnect, device number 106 [ 617.754987][ T9020] usb usb3-port1: unable to enumerate USB device [ 617.984673][ T47] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 618.044406][ T9020] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 618.144546][ T47] usb 5-1: Using ep0 maxpacket: 32 [ 618.153710][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 618.164874][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 618.174875][ T47] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 618.195228][ T47] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 618.205075][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.224616][ T47] usb 5-1: config 0 descriptor?? [ 618.236364][ T9020] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 618.248478][ T9020] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 618.259846][ T9020] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 618.270406][ T9020] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.283499][ T9020] usb 3-1: config 0 descriptor?? [ 618.681992][ T47] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.001E/input/input42 [ 618.740496][T13214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.760460][T13214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.777805][ T47] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.001E/input/input43 [ 618.813639][ T47] kye 0003:0458:5011.001E: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 618.882395][ T47] usb 5-1: USB disconnect, device number 85 [ 619.082456][ T9020] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0 [ 619.091443][ T9020] cp2112 0003:10C4:EA90.001F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 619.155673][ T974] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 619.163568][ T9020] cp2112 0003:10C4:EA90.001F: Part Number: 0x82 Device Version: 0xFE [ 619.314359][ T974] usb 4-1: Using ep0 maxpacket: 8 [ 619.337471][ T974] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 619.349923][ T974] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 619.449431][T13214] xt_cgroup: xt_cgroup: no path or classid specified [ 619.540175][ T29] kauditd_printk_skb: 3303 callbacks suppressed [ 619.540219][ T29] audit: type=1400 audit(28224.477:74069): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=13212 comm="syz.2.1881" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 619.872708][ T29] audit: type=1400 audit(28224.477:74070): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=13212 comm="syz.2.1881" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 619.929577][T10539] audit: audit_backlog=65 > audit_backlog_limit=64 [ 619.937208][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 619.943764][ C0] audit: audit_lost=8702 audit_rate_limit=0 audit_backlog_limit=64 [ 619.946557][ T29] audit: type=1400 audit(28224.697:74071): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=13212 comm="syz.2.1881" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 619.951709][ C0] audit: backlog limit exceeded [ 619.978461][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 619.981949][T10539] audit: audit_lost=8703 audit_rate_limit=0 audit_backlog_limit=64 [ 619.985019][ C0] audit: audit_lost=8704 audit_rate_limit=0 audit_backlog_limit=64 [ 620.310804][ T974] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 620.320855][ T974] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 620.337363][ T974] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 620.346449][ T974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.670595][ T9020] cp2112 0003:10C4:EA90.001F: error reading lock byte: -32 [ 620.911760][ T974] usb 4-1: GET_CAPABILITIES returned 0 [ 620.919583][ T974] usbtmc 4-1:16.0: can't read capabilities [ 620.926198][ T9020] usb 3-1: USB disconnect, device number 88 [ 621.187469][ T5867] usb 4-1: USB disconnect, device number 107 [ 621.629578][ T974] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 622.041934][ T974] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 622.074254][ T974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.092486][ T974] usb 5-1: Product: syz [ 622.100505][ T974] usb 5-1: Manufacturer: syz [ 622.114913][ T974] usb 5-1: SerialNumber: syz [ 622.124323][ T974] usb 5-1: config 0 descriptor?? [ 622.136750][T13245] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 622.823945][ T974] usb 5-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 622.834583][ T974] usb 5-1: Firmware version (0.0) predates our first public release. [ 622.864747][T13263] batadv_slave_1: entered promiscuous mode [ 622.871046][ T974] usb 5-1: Please update to version 0.2 or newer [ 622.976551][T13268] batadv_slave_1: left promiscuous mode [ 623.286601][ T974] usb 5-1: USB disconnect, device number 86 [ 623.484307][ T5867] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 623.634497][ T5867] usb 3-1: Using ep0 maxpacket: 32 [ 623.645336][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 623.664692][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 623.698480][ T5867] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 623.730594][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.785233][ T5867] usb 3-1: config 0 descriptor?? [ 623.805386][ T5867] hub 3-1:0.0: USB hub found [ 624.282899][ T5867] hub 3-1:0.0: 1 port detected [ 624.518482][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.530708][T13274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.544694][ T29] kauditd_printk_skb: 3409 callbacks suppressed [ 624.544710][ T29] audit: type=1400 audit(28229.507:76644): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11457 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 624.584901][T13274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.596094][T13300] audit: audit_backlog=65 > audit_backlog_limit=64 [ 624.602620][T13300] audit: audit_lost=8985 audit_rate_limit=0 audit_backlog_limit=64 [ 624.603411][T10539] audit: audit_backlog=66 > audit_backlog_limit=64 [ 624.611870][T13290] audit: audit_backlog=66 > audit_backlog_limit=64 [ 624.624103][T13290] audit: audit_lost=8986 audit_rate_limit=0 audit_backlog_limit=64 [ 624.625343][ C0] audit: audit_backlog=66 > audit_backlog_limit=64 [ 624.632495][T13290] audit: backlog limit exceeded [ 624.638755][ C0] audit: audit_lost=8987 audit_rate_limit=0 audit_backlog_limit=64 [ 624.638776][ C0] audit: backlog limit exceeded [ 624.660550][ T5867] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 624.669261][ T5867] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 624.693829][ T5867] usbhid 3-1:0.0: can't add hid device: -71 [ 624.700674][ T5867] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 624.725872][ T5867] usb 3-1: USB disconnect, device number 89 [ 625.404495][ T5909] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 625.606582][ T5909] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 625.624196][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.635055][ T5899] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 625.662746][ T5909] usb 5-1: config 0 descriptor?? [ 625.679956][ T5909] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 625.814417][ T5899] usb 4-1: Using ep0 maxpacket: 8 [ 625.820838][ T5899] usb 4-1: config 0 has an invalid interface number: 211 but max is 0 [ 625.829487][ T5899] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 625.850066][ T5899] usb 4-1: config 0 has no interface number 0 [ 625.861364][ T5899] usb 4-1: config 0 interface 211 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 625.884764][ T5909] gp8psk: usb in 128 operation failed. [ 625.892192][ T5899] usb 4-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 625.909616][ T5909] gp8psk: usb in 146 operation failed. [ 625.920251][ T5909] gp8psk: failed to get FW version [ 625.929007][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.943496][ T5909] gp8psk: FPGA Version = 87 [ 625.958539][ T5899] usb 4-1: config 0 descriptor?? [ 625.969667][ T5899] usb 4-1: bad CDC descriptors [ 626.144603][ T5909] gp8psk: usb in 138 operation failed. [ 626.151390][ T5909] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 626.248157][ T974] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 626.279367][ T5909] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 626.288451][ T5909] usb 5-1: media controller created [ 626.315340][ T5909] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 626.346911][ T5899] usb 4-1: USB disconnect, device number 108 [ 626.365240][ T5909] gp8psk_fe: Frontend attached [ 626.370221][ T5909] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 626.379587][ T5909] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 627.176400][ T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 627.187610][ T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 627.197459][ T974] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 627.211573][ T5909] gp8psk: usb in 138 operation failed. [ 627.220438][ T974] usb 3-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 627.224208][ T5909] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 627.230547][ T974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.261807][ T974] usb 3-1: config 0 descriptor?? [ 627.287004][ T5909] gp8psk: found Genpix USB device pID = 203 (hex) [ 627.312665][ T5909] usb 5-1: USB disconnect, device number 87 [ 627.432638][ T5909] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 627.658039][T13353] overlayfs: missing 'lowerdir' [ 627.742899][ T974] betop 0003:11C2:2208.0020: unknown main item tag 0x0 [ 627.751619][ T974] betop 0003:11C2:2208.0020: unknown main item tag 0x0 [ 627.758636][ T974] betop 0003:11C2:2208.0020: unknown main item tag 0x0 [ 627.778305][ T974] betop 0003:11C2:2208.0020: unknown main item tag 0x0 [ 627.785308][ T974] betop 0003:11C2:2208.0020: unknown main item tag 0x0 [ 628.476264][ T974] betop 0003:11C2:2208.0020: hidraw0: USB HID v0.00 Device [HID 11c2:2208] on usb-dummy_hcd.2-1/input0 [ 628.577880][ T974] betop 0003:11C2:2208.0020: no inputs found [ 628.589642][ T974] usb 3-1: USB disconnect, device number 90 [ 629.097926][ T5870] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 629.164392][ T5899] usb 4-1: new full-speed USB device number 109 using dummy_hcd [ 629.254355][ T5870] usb 2-1: Using ep0 maxpacket: 8 [ 629.261711][ T5870] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 629.271759][ T5870] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 629.284058][ T5870] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 629.303857][ T5870] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 629.332177][ T5870] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 629.360836][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.486236][ T5899] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 629.494779][ T5899] usb 4-1: config 0 has no interface number 0 [ 629.500908][ T5899] usb 4-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 629.511962][ T5899] usb 4-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 629.523117][ T5899] usb 4-1: config 0 interface 184 has no altsetting 0 [ 629.545368][ T5899] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 629.556616][ T29] kauditd_printk_skb: 5446 callbacks suppressed [ 629.556633][ T29] audit: type=1400 audit(28234.527:79972): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=13375 comm="syz.3.1920" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 629.557708][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.628163][ T5899] usb 4-1: Product: syz [ 630.239223][ T5870] usb 2-1: GET_CAPABILITIES returned 0 [ 630.244809][ T5870] usbtmc 2-1:16.0: can't read capabilities [ 630.306285][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 630.312827][ C0] audit: audit_lost=9695 audit_rate_limit=0 audit_backlog_limit=64 [ 630.320770][ C0] audit: backlog limit exceeded [ 630.324390][ T5866] usb 2-1: USB disconnect, device number 98 [ 630.327551][T10517] audit: audit_backlog=66 > audit_backlog_limit=64 [ 630.334218][ T5899] usb 4-1: Manufacturer: syz [ 630.338013][T10517] audit: audit_lost=9696 audit_rate_limit=0 audit_backlog_limit=64 [ 630.342561][ T5899] usb 4-1: SerialNumber: syz [ 630.356739][ T27] audit: audit_backlog=66 > audit_backlog_limit=64 [ 630.363688][ T27] audit: audit_lost=9697 audit_rate_limit=0 audit_backlog_limit=64 [ 630.372394][T13391] audit: audit_backlog=66 > audit_backlog_limit=64 [ 630.380521][ T8881] audit: audit_backlog=66 > audit_backlog_limit=64 [ 631.493650][ T5899] usb 4-1: config 0 descriptor?? [ 631.500800][T13376] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 631.514532][T13376] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 631.522934][ T5899] smsc75xx v1.0.0 [ 631.753231][T13376] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 631.779095][T13376] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 632.466511][ T7299] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.533798][T13376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.543433][T13376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.902238][ T7299] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.985320][T13421] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1932'. [ 633.604755][ T5899] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 633.652240][ T5899] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 633.661837][ T5899] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 633.672733][ T5899] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 633.675647][ T7299] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.689402][ T5899] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 633.732843][ T5899] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 633.759359][ T5899] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 633.790573][ T5899] usb 4-1: USB disconnect, device number 109 [ 633.818473][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 633.830991][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 633.839269][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 633.847217][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 633.860857][ T7299] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.876696][ T5828] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 633.893611][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 633.951296][T13427] lo speed is unknown, defaulting to 1000 [ 633.988272][T13432] syz.1.1935 (13432): /proc/13432/oom_adj is deprecated, please use /proc/13432/oom_score_adj instead. [ 634.244262][ T5870] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 634.264440][ T7299] bridge_slave_1: left allmulticast mode [ 634.270230][ T7299] bridge_slave_1: left promiscuous mode [ 634.288450][ T7299] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.309509][ T7299] bridge_slave_0: left allmulticast mode [ 634.315673][ T7299] bridge_slave_0: left promiscuous mode [ 634.321604][ T7299] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.416584][ T5870] usb 5-1: Using ep0 maxpacket: 16 [ 634.436429][ T5870] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 634.459019][ T5870] usb 5-1: config 0 has no interface number 0 [ 634.487956][ T5870] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 634.493453][T13436] usb usb9: usbfs: process 13436 (syz.3.1936) did not claim interface 0 before use [ 634.507427][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.522174][ T5870] usb 5-1: Product: syz [ 634.526561][ T5870] usb 5-1: Manufacturer: syz [ 634.531263][ T5870] usb 5-1: SerialNumber: syz [ 634.546431][ T5870] usb 5-1: config 0 descriptor?? [ 634.560818][ T5870] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 634.672403][ T29] kauditd_printk_skb: 2357 callbacks suppressed [ 634.672420][ T29] audit: type=1400 audit(28239.637:81499): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5819 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 634.707115][ T5819] audit: audit_backlog=65 > audit_backlog_limit=64 [ 634.712860][ T29] audit: type=1400 audit(28239.637:81500): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=7289 comm="kworker/u8:34" saddr=10.128.0.169 src=30008 daddr=10.128.1.125 dest=48202 netif=eth0 [ 634.713712][ T5819] audit: audit_lost=9975 audit_rate_limit=0 audit_backlog_limit=64 [ 634.745184][ T5819] audit: backlog limit exceeded [ 634.748843][ T29] audit: type=1400 audit(28239.637:81501): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=7289 comm="kworker/u8:34" saddr=10.128.0.169 src=30008 daddr=10.128.1.125 dest=48202 netif=eth0 [ 634.750485][ T5819] audit: audit_backlog=65 > audit_backlog_limit=64 [ 634.785768][T13420] audit: audit_backlog=65 > audit_backlog_limit=64 [ 634.794981][ T5819] audit: audit_lost=9976 audit_rate_limit=0 audit_backlog_limit=64 [ 634.801994][T13420] audit: audit_lost=9977 audit_rate_limit=0 audit_backlog_limit=64 [ 634.890782][T13439] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1937'. [ 635.057300][ T7299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 635.074688][ T7299] bond_slave_0: left promiscuous mode [ 635.091165][ T7299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 635.130225][ T7299] bond_slave_1: left promiscuous mode [ 635.138192][ T7299] bond0 (unregistering): Released all slaves [ 635.223687][ T5870] gspca_spca1528: reg_w err -71 [ 635.229868][ T7299] IPVS: stopping backup sync thread 11590 ... [ 635.242881][T13427] chnl_net:caif_netlink_parms(): no params data found [ 635.244668][ T5870] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 635.284310][ T5909] usb 4-1: new low-speed USB device number 110 using dummy_hcd [ 635.291204][ T5870] usb 5-1: USB disconnect, device number 88 [ 635.395216][T13427] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.402434][T13427] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.409853][T13427] bridge_slave_0: entered allmulticast mode [ 635.418255][T13427] bridge_slave_0: entered promiscuous mode [ 635.426125][T13427] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.433329][T13427] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.441271][T13427] bridge_slave_1: entered allmulticast mode [ 635.442369][ T5909] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 635.458176][T13427] bridge_slave_1: entered promiscuous mode [ 635.466048][ T5909] usb 4-1: config 179 has no interface number 0 [ 635.472486][ T5909] usb 4-1: config 179 interface 65 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 635.485552][ T5909] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 635.497096][ T5909] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x87 has invalid maxpacket 65535, setting to 8 [ 635.508489][ T5909] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 635.520584][ T5909] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 635.530993][ T5909] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 635.544676][ T5909] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 635.553798][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.566111][T13439] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 635.597998][T13427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 635.609610][T13427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 635.634802][ T5866] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 635.651552][T13427] team0: Port device team_slave_0 added [ 635.661516][T13427] team0: Port device team_slave_1 added [ 635.687198][T13427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 635.694403][T13427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 635.721897][T13427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 635.782726][ T7299] hsr_slave_0: left promiscuous mode [ 635.795205][ T5866] usb 2-1: Using ep0 maxpacket: 8 [ 635.800518][ T7299] hsr_slave_1: left promiscuous mode [ 635.807373][ T5866] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 635.818212][ T7299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 635.825708][ T5866] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 635.836167][ T7299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 635.843482][ T5866] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 635.874081][ T7299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 635.905516][ T7299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 636.023166][ T5828] Bluetooth: hci2: command tx timeout [ 636.037271][ T7299] veth1_macvtap: left promiscuous mode [ 636.041761][ T5866] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 636.054367][ T7299] veth0_macvtap: left promiscuous mode [ 636.056203][ T5866] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 636.070344][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.084427][ T7299] veth1_vlan: left promiscuous mode [ 636.089751][ T7299] veth0_vlan: left promiscuous mode [ 636.307770][ T5866] usb 2-1: GET_CAPABILITIES returned 0 [ 636.390516][ T5866] usbtmc 2-1:16.0: can't read capabilities [ 636.746912][ T5866] usb 2-1: USB disconnect, device number 99 [ 636.824103][ T5870] usb 4-1: USB disconnect, device number 110 [ 636.920531][T13464] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1946'. [ 637.464775][ T7299] team0 (unregistering): Port device team_slave_1 removed [ 637.519965][ T7299] team0 (unregistering): Port device team_slave_0 removed [ 638.031616][T13427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 638.038782][ T5828] Bluetooth: hci2: command tx timeout [ 638.052042][T13427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 638.078267][T13427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 638.219324][T13427] hsr_slave_0: entered promiscuous mode [ 638.907692][T13427] hsr_slave_1: entered promiscuous mode [ 638.945284][T13427] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 639.027427][T13427] Cannot create hsr debugfs directory [ 639.349285][ T7299] IPVS: stop unused estimator thread 0... [ 639.754709][ T29] kauditd_printk_skb: 3385 callbacks suppressed [ 639.754753][ T29] audit: type=1400 audit(28244.697:84441): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13501 comm="kworker/u8:21" name="/" dev="sda1" ino=2 [ 639.875767][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 639.888524][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 639.900829][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 639.913146][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 639.925437][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 639.937793][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 639.950125][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 639.962410][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 639.974700][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 639.986978][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 640.552334][ T5828] Bluetooth: hci2: command tx timeout [ 641.264800][ T29] audit: type=1400 audit(28244.697:84442): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13501 comm="kworker/u8:21" name="sbin" dev="sda1" ino=1208 [ 644.884352][ C1] net_ratelimit: 18887 callbacks suppressed [ 644.884376][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 644.902575][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 644.914846][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 644.927112][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 644.939394][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 644.951667][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 644.963948][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 644.976216][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 644.988509][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 645.000770][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 649.894384][ C1] net_ratelimit: 30787 callbacks suppressed [ 649.894409][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 649.894645][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.900569][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 649.913099][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 649.924526][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 649.936503][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.948457][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 649.960429][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.972282][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 649.984889][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 650.894140][ C1] sched: DL replenish lagged too much [ 653.588143][ T29] audit: type=1400 audit(28244.697:84443): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13501 comm="kworker/u8:21" name="modprobe" dev="sda1" ino=1251 [ 654.453480][ T29] audit: type=1400 audit(28244.697:84444): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=13501 comm="kworker/u8:21" path="/sbin/modprobe" dev="sda1" ino=1251 [ 654.904153][ C1] net_ratelimit: 29870 callbacks suppressed [ 654.904176][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 654.904451][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 654.910374][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 654.922340][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.934209][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 654.946206][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.958050][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 654.970637][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 654.982037][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 654.993999][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.381105][ T29] audit: type=1400 audit(28244.787:84445): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13494 comm="syz.4.1954" name="151" dev="tmpfs" ino=841 [ 659.914210][ C0] net_ratelimit: 32126 callbacks suppressed [ 659.914233][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 659.914426][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 659.920390][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.932276][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 659.944317][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.956156][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 659.968651][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 659.980130][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 659.992098][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.004003][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 664.924300][ C0] net_ratelimit: 32912 callbacks suppressed [ 664.924327][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 664.924324][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.924598][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.930481][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 664.942932][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 664.954349][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 664.966354][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.978301][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 664.990867][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.002165][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 668.440015][ T5131] Bluetooth: hci2: command tx timeout [ 669.934300][ C0] net_ratelimit: 32910 callbacks suppressed [ 669.934322][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.934363][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 669.940504][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.952436][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 669.965397][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 669.976369][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 669.988355][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.000244][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 670.012246][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.024132][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 670.143401][ T29] audit: type=1400 audit(28244.787:84446): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13494 comm="syz.4.1954" name="151" dev="tmpfs" ino=841 [ 670.170533][ T29] audit: type=1400 audit(28244.787:84447): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=13494 comm="syz.4.1954" name="151" dev="tmpfs" ino=841 [ 671.012209][ T29] audit: type=1400 audit(28244.787:84448): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13494 comm="syz.4.1954" name="151" dev="tmpfs" ino=841 [ 673.119585][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 673.126174][ C0] audit: audit_lost=10126 audit_rate_limit=0 audit_backlog_limit=64 [ 673.134200][ C0] audit: backlog limit exceeded [ 673.391153][ T29] audit: type=1400 audit(28244.787:84449): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13494 comm="syz.4.1954" name="151" dev="tmpfs" ino=841 [ 673.450745][ T29] audit: type=1400 audit(28245.047:84450): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=13494 comm="syz.4.1954" saddr=10.128.0.169 src=30008 daddr=10.128.1.125 dest=48202 netif=eth0 [ 673.521990][ T29] audit: type=1400 audit(28245.107:84451): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13499 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 673.581910][ T29] audit: type=1400 audit(28245.107:84452): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13499 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 674.944384][ C1] net_ratelimit: 29010 callbacks suppressed [ 674.944405][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 674.944625][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.950584][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 674.962616][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.974444][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 674.986986][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 674.998389][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 675.010367][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.022259][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 675.034290][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.954169][ C1] net_ratelimit: 29959 callbacks suppressed [ 679.954194][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 679.954241][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.960373][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 679.972388][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.984240][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 679.996735][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 680.008183][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 680.020161][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.032034][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 680.044055][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 684.964233][ C1] net_ratelimit: 30040 callbacks suppressed [ 684.964256][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 684.964314][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 684.970429][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 684.982441][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 684.994313][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 685.006806][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 685.018228][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 685.030199][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.042073][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 685.054134][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 689.974288][ C0] net_ratelimit: 31353 callbacks suppressed [ 689.974312][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 689.974344][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 689.980498][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 689.992384][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 690.004872][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 690.016352][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 690.028322][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.040203][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 690.052212][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.064062][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 694.984197][ C0] net_ratelimit: 32983 callbacks suppressed [ 694.984219][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 694.984326][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 694.990817][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 695.002362][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 695.014352][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.026283][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 695.038266][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.050089][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 695.062579][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 695.074120][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 699.994290][ C1] net_ratelimit: 30480 callbacks suppressed [ 699.994312][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 699.994781][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 700.000453][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 700.012441][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.024357][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 700.036404][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.048218][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 700.060664][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 700.072179][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 700.084155][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.004134][ C0] net_ratelimit: 32996 callbacks suppressed [ 705.004157][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.004215][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 705.010751][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 705.022324][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 705.034299][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.046153][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 705.058188][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.070008][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 705.082462][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 705.093988][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 710.014200][ C1] net_ratelimit: 32050 callbacks suppressed [ 710.014224][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 710.014226][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 710.014448][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.020375][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 710.032404][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.044295][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 710.056608][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 710.068120][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 710.080071][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.092052][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 715.024311][ C1] net_ratelimit: 31401 callbacks suppressed [ 715.024333][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 715.025119][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.030528][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 715.042937][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 715.054466][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 715.066442][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.078444][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 715.090374][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.102215][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 715.114674][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 720.034181][ C1] net_ratelimit: 31434 callbacks suppressed [ 720.034203][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 720.034710][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 720.040352][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 720.052340][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.064261][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 720.076256][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.088082][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 720.100563][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 720.112091][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 720.124286][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.044143][ C1] net_ratelimit: 33045 callbacks suppressed [ 725.044165][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 725.044394][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 725.050331][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 725.062296][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.074262][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 725.086204][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.098043][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 725.110501][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 725.122030][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 725.134016][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.054182][ C1] net_ratelimit: 32854 callbacks suppressed [ 730.054205][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 730.054706][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 730.060346][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 730.072340][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.084481][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 730.096248][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.108151][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 730.120642][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 730.132099][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 730.144114][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.064183][ C1] net_ratelimit: 32952 callbacks suppressed [ 735.064206][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 735.064328][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.070344][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 735.082369][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.094302][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 735.106700][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 735.118203][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 735.130752][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.142079][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 735.154075][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.074120][ C1] net_ratelimit: 32974 callbacks suppressed [ 740.074142][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 740.074509][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 740.080283][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 740.092315][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.104227][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 740.116194][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.128054][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 740.140518][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 740.152054][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 740.164030][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 741.514330][ C0] audit_log_start: 61 callbacks suppressed [ 741.514354][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 741.526737][ C0] audit: audit_lost=10127 audit_rate_limit=0 audit_backlog_limit=64 [ 741.534764][ C0] audit: backlog limit exceeded [ 742.517038][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 742.523593][ C0] audit: audit_lost=10128 audit_rate_limit=0 audit_backlog_limit=64 [ 742.531632][ C0] audit: backlog limit exceeded [ 743.011915][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 743.018505][ C0] audit: audit_lost=10129 audit_rate_limit=0 audit_backlog_limit=64 [ 743.026529][ C0] audit: backlog limit exceeded [ 743.518830][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 745.084201][ C1] net_ratelimit: 32802 callbacks suppressed [ 745.084224][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 745.084277][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.090377][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 745.102840][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 745.114342][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 745.126332][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.138259][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 745.150282][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.162107][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 745.174630][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 747.020478][ C0] audit_log_start: 20 callbacks suppressed [ 747.020501][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 747.032889][ C0] audit: audit_lost=10137 audit_rate_limit=0 audit_backlog_limit=64 [ 747.040917][ C0] audit: backlog limit exceeded [ 747.521700][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 747.528298][ C0] audit: audit_lost=10138 audit_rate_limit=0 audit_backlog_limit=64 [ 747.536322][ C0] audit: backlog limit exceeded [ 750.094176][ C1] net_ratelimit: 32832 callbacks suppressed [ 750.094199][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 750.094519][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 750.100366][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 750.112345][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 750.124238][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 750.136315][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 750.148173][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 750.160598][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 750.172088][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 750.184113][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 750.523244][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 750.529836][ C0] audit: audit_lost=10139 audit_rate_limit=0 audit_backlog_limit=64 [ 750.537868][ C0] audit: backlog limit exceeded [ 751.023656][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 752.524158][ C0] audit_log_start: 2 callbacks suppressed [ 752.524179][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 752.536484][ C0] audit: audit_lost=10141 audit_rate_limit=0 audit_backlog_limit=64 [ 752.544516][ C0] audit: backlog limit exceeded [ 753.032523][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 753.039112][ C0] audit: audit_lost=10142 audit_rate_limit=0 audit_backlog_limit=64 [ 753.047154][ C0] audit: backlog limit exceeded [ 754.032944][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 754.039541][ C0] audit: audit_lost=10143 audit_rate_limit=0 audit_backlog_limit=64 [ 754.047574][ C0] audit: backlog limit exceeded [ 754.535316][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 755.104232][ C0] net_ratelimit: 32420 callbacks suppressed [ 755.104255][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 755.104314][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 755.110410][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.122391][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 755.134402][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.146269][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 755.158711][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 755.170272][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 755.182179][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.194133][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 757.763154][ C0] audit_log_start: 8 callbacks suppressed [ 757.763178][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 757.775523][ C0] audit: audit_lost=10147 audit_rate_limit=0 audit_backlog_limit=64 [ 757.783519][ C0] audit: backlog limit exceeded [ 757.985034][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 757.991595][ C0] audit: audit_lost=10148 audit_rate_limit=0 audit_backlog_limit=64 [ 757.999629][ C0] audit: backlog limit exceeded [ 758.454465][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 758.461021][ C0] audit: audit_lost=10149 audit_rate_limit=0 audit_backlog_limit=64 [ 758.469060][ C0] audit: backlog limit exceeded [ 759.033336][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 760.114366][ C1] net_ratelimit: 29309 callbacks suppressed [ 760.114386][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 760.114413][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 760.120618][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 760.132554][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 760.144475][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 760.156463][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 760.168330][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 760.180793][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 760.192274][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 760.204237][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 763.039718][ C0] audit_log_start: 11 callbacks suppressed [ 763.039741][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 763.052136][ C0] audit: audit_lost=10154 audit_rate_limit=0 audit_backlog_limit=64 [ 763.060163][ C0] audit: backlog limit exceeded [ 764.043302][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 764.049891][ C0] audit: audit_lost=10155 audit_rate_limit=0 audit_backlog_limit=64 [ 764.057923][ C0] audit: backlog limit exceeded [ 765.042369][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 765.049055][ C0] audit: audit_lost=10156 audit_rate_limit=0 audit_backlog_limit=64 [ 765.057084][ C0] audit: backlog limit exceeded [ 765.124173][ C0] net_ratelimit: 31657 callbacks suppressed [ 765.124191][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 765.124237][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 765.130784][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 765.142319][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 765.154336][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 765.166185][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 765.178212][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 765.190058][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 765.202742][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 765.214010][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 766.042932][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 769.549620][ C0] audit_log_start: 5 callbacks suppressed [ 769.549643][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 769.561949][ C0] audit: audit_lost=10159 audit_rate_limit=0 audit_backlog_limit=64 [ 769.569998][ C0] audit: backlog limit exceeded [ 770.051172][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 770.057770][ C0] audit: audit_lost=10160 audit_rate_limit=0 audit_backlog_limit=64 [ 770.065794][ C0] audit: backlog limit exceeded [ 770.134117][ C1] net_ratelimit: 32484 callbacks suppressed [ 770.134137][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 770.134842][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 770.140285][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 770.152262][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 770.164197][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 770.176197][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 770.188024][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 770.200477][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 770.211993][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 770.223993][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 773.056960][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 773.063516][ C0] audit: audit_lost=10161 audit_rate_limit=0 audit_backlog_limit=64 [ 773.071548][ C0] audit: backlog limit exceeded [ 774.060197][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 774.561586][ C0] audit_log_start: 2 callbacks suppressed [ 774.561607][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 774.573898][ C0] audit: audit_lost=10163 audit_rate_limit=0 audit_backlog_limit=64 [ 774.581921][ C0] audit: backlog limit exceeded [ 775.058443][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 775.065039][ C0] audit: audit_lost=10164 audit_rate_limit=0 audit_backlog_limit=64 [ 775.073033][ C0] audit: backlog limit exceeded [ 775.144115][ C1] net_ratelimit: 31387 callbacks suppressed [ 775.144136][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 775.144499][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 775.150269][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 775.162743][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 775.174177][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 775.186195][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 775.198047][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 775.210406][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 775.221962][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 775.234458][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 775.560441][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 775.567016][ C0] audit: audit_lost=10165 audit_rate_limit=0 audit_backlog_limit=64 [ 775.575042][ C0] audit: backlog limit exceeded [ 776.059504][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 776.324092][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 776.331089][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10539/1:b..l [ 776.339845][ C1] rcu: (detected by 1, t=10503 jiffies, g=62537, q=412 ncpus=2) [ 776.347595][ C1] task:syz-executor state:R running task stack:19856 pid:10539 tgid:10539 ppid:10535 flags:0x00000000 [ 776.360825][ C1] Call Trace: [ 776.364132][ C1] [ 776.367089][ C1] __schedule+0x17fb/0x4be0 [ 776.371622][ C1] ? mark_lock+0x9a/0x360 [ 776.375997][ C1] ? __pfx___schedule+0x10/0x10 [ 776.380878][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 776.386890][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 776.392662][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 776.397800][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 776.403544][ C1] ? preempt_count_add+0x93/0x190 [ 776.408596][ C1] ? deref_stack_reg+0x17c/0x210 [ 776.413572][ C1] irqentry_exit+0x5e/0x90 [ 776.418015][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 776.424034][ C1] RIP: 0010:stack_trace_consume_entry+0xe/0x280 [ 776.430310][ C1] Code: 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 57 41 56 41 55 41 54 53 <48> 83 ec 18 48 89 fb 48 ba 00 00 00 00 00 fc ff df 4c 8d 4f 10 4d [ 776.449938][ C1] RSP: 0018:ffffc900030a6f48 EFLAGS: 00000286 [ 776.456035][ C1] RAX: ffffffff81f864b2 RBX: ffffc900030a6f80 RCX: ffffffff91774000 [ 776.464033][ C1] RDX: ffffffff91923001 RSI: ffffffff81f864b2 RDI: ffffc900030a7060 [ 776.472029][ C1] RBP: ffffc900030a7010 R08: ffffc900030a7348 R09: 0000000000000000 [ 776.480024][ C1] R10: ffffc900030a6fd0 R11: ffffffff818b39d0 R12: ffff8880301f1e00 [ 776.488025][ C1] R13: ffffffff818b39d0 R14: ffffc900030a7060 R15: 0000000000000000 [ 776.496025][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 776.502219][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 776.508401][ C1] ? __slab_free+0x2c2/0x380 [ 776.513014][ C1] ? __init_begin+0x41000/0x41000 [ 776.518068][ C1] ? no_hash_pointers_enable+0xb1/0xe0 [ 776.523544][ C1] ? __slab_free+0x2c2/0x380 [ 776.528164][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 776.534346][ C1] arch_stack_walk+0x10e/0x150 [ 776.539140][ C1] ? __slab_free+0x2c2/0x380 [ 776.543762][ C1] stack_trace_save+0x118/0x1d0 [ 776.548646][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 776.554065][ C1] save_stack+0xfb/0x1f0 [ 776.558339][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 776.563388][ C1] ? __pfx_save_stack+0x10/0x10 [ 776.568260][ C1] ? free_unref_page+0xd2c/0x1000 [ 776.573322][ C1] ? page_ext_get+0x20/0x2a0 [ 776.577941][ C1] __reset_page_owner+0x76/0x430 [ 776.582903][ C1] ? kasan_quarantine_put+0xdc/0x230 [ 776.588210][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 776.593897][ C1] free_unref_page+0xd2c/0x1000 [ 776.598782][ C1] __slab_free+0x2c2/0x380 [ 776.603222][ C1] ? __phys_addr+0xba/0x170 [ 776.607753][ C1] qlist_free_all+0x9a/0x140 [ 776.612370][ C1] kasan_quarantine_reduce+0x14f/0x170 [ 776.617857][ C1] __kasan_kmalloc+0x23/0xb0 [ 776.622480][ C1] __kmalloc_noprof+0x285/0x4c0 [ 776.627352][ C1] ? tomoyo_encode+0x26f/0x540 [ 776.632146][ C1] tomoyo_encode+0x26f/0x540 [ 776.636765][ C1] tomoyo_realpath_from_path+0x59e/0x5e0 [ 776.642434][ C1] tomoyo_check_open_permission+0x258/0x4f0 [ 776.648359][ C1] ? tomoyo_check_open_permission+0x207/0x4f0 [ 776.654449][ C1] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 776.660919][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 776.666157][ C1] security_file_open+0xac/0x250 [ 776.671122][ C1] do_dentry_open+0x328/0x1b70 [ 776.675931][ C1] vfs_open+0x3e/0x330 [ 776.680034][ C1] path_openat+0x2c84/0x3590 [ 776.684678][ C1] ? __pfx_path_openat+0x10/0x10 [ 776.689656][ C1] do_filp_open+0x27f/0x4e0 [ 776.694186][ C1] ? __pfx_do_filp_open+0x10/0x10 [ 776.699244][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 776.704352][ C1] do_sys_openat2+0x13e/0x1d0 [ 776.709056][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 776.714273][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 776.719510][ C1] ? user_path_at+0x44/0x60 [ 776.724032][ C1] ? __pfx_path_umount+0x10/0x10 [ 776.728993][ C1] ? kmem_cache_free+0x195/0x410 [ 776.733952][ C1] __x64_sys_openat+0x247/0x2a0 [ 776.738826][ C1] ? __pfx___x64_sys_openat+0x10/0x10 [ 776.744224][ C1] ? do_syscall_64+0x100/0x230 [ 776.749026][ C1] ? do_syscall_64+0xb6/0x230 [ 776.753731][ C1] do_syscall_64+0xf3/0x230 [ 776.758262][ C1] ? clear_bhb_loop+0x35/0x90 [ 776.762966][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.768885][ C1] RIP: 0033:0x7fbb4c585621 [ 776.773317][ C1] RSP: 002b:00007ffce5b95de0 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 776.781752][ C1] RAX: ffffffffffffffda RBX: 00007fbb4c601894 RCX: 00007fbb4c585621 [ 776.789741][ C1] RDX: 0000000000090800 RSI: 00007ffce5b96f80 RDI: 00000000ffffff9c [ 776.797750][ C1] RBP: 00007ffce5b96f6c R08: 0000000000000000 R09: 7fffffffffffffff [ 776.805744][ C1] R10: 0000000000000000 R11: 0000000000000287 R12: 00007ffce5b96f80 [ 776.813733][ C1] R13: 00007fbb4c601894 R14: 00007ffce5b96fc0 R15: 0000000000000098 [ 776.821739][ C1] [ 776.824774][ C1] rcu: rcu_preempt kthread starved for 1921 jiffies! g62537 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 776.835894][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 776.845877][ C1] rcu: RCU grace-period kthread stack dump: [ 776.851777][ C1] task:rcu_preempt state:R running task stack:25624 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 776.863553][ C1] Call Trace: [ 776.866850][ C1] [ 776.869800][ C1] __schedule+0x17fb/0x4be0 [ 776.874354][ C1] ? __pfx___schedule+0x10/0x10 [ 776.879235][ C1] ? __pfx_lock_release+0x10/0x10 [ 776.884301][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 776.890650][ C1] ? schedule+0x90/0x320 [ 776.894917][ C1] schedule+0x14b/0x320 [ 776.899098][ C1] schedule_timeout+0x15a/0x290 [ 776.903969][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 776.909363][ C1] ? __pfx_process_timeout+0x10/0x10 [ 776.914683][ C1] ? prepare_to_swait_event+0x330/0x350 [ 776.920261][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 776.925150][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 776.930376][ C1] ? rcu_gp_init+0x1256/0x1630 [ 776.935170][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 776.940131][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 776.946314][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 776.951631][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 776.957557][ C1] ? finish_swait+0xd4/0x1e0 [ 776.962172][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 776.966790][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 776.972016][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 776.977934][ C1] ? __kthread_parkme+0x169/0x1d0 [ 776.982979][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 776.988197][ C1] kthread+0x2f0/0x390 [ 776.992290][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 776.997509][ C1] ? __pfx_kthread+0x10/0x10 [ 777.002121][ C1] ret_from_fork+0x4b/0x80 [ 777.006553][ C1] ? __pfx_kthread+0x10/0x10 [ 777.011174][ C1] ret_from_fork_asm+0x1a/0x30 [ 777.015976][ C1] [ 777.019009][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 777.025362][ C1] Sending NMI from CPU 1 to CPUs 0: [ 777.030596][ C0] NMI backtrace for cpu 0 [ 777.030609][ C0] CPU: 0 UID: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 777.030630][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 777.030640][ C0] RIP: 0010:lock_release+0x2d9/0xa30 [ 777.030662][ C0] Code: 85 2a 05 00 00 83 3b 00 0f 85 2d 04 00 00 4d 8d 66 20 4c 89 e3 48 c1 eb 03 42 0f b6 04 3b 84 c0 48 8b 34 24 0f 85 2e 05 00 00 <45> 8b 2c 24 41 81 fd 00 00 20 00 72 25 41 81 c5 00 00 e0 ff 42 0f [ 777.030677][ C0] RSP: 0018:ffffc900001569e0 EFLAGS: 00000046 [ 777.030693][ C0] RAX: 0000000000000000 RBX: 1ffff110037ddca5 RCX: ffffc90000156a03 [ 777.030706][ C0] RDX: 0000000000000001 RSI: ffff88801beee4d8 RDI: ffff88801beee508 [ 777.030718][ C0] RBP: ffffc90000156b10 R08: ffffffff90185277 R09: 1ffffffff2030a4e [ 777.030732][ C0] R10: dffffc0000000000 R11: fffffbfff2030a4f R12: ffff88801beee528 [ 777.030745][ C0] R13: 0000000000000001 R14: ffff88801beee508 R15: dffffc0000000000 [ 777.030758][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 777.030772][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 777.030785][ C0] CR2: 00007ffdf3bb1ff8 CR3: 000000005e054000 CR4: 00000000003526f0 [ 777.030800][ C0] Call Trace: [ 777.030807][ C0] [ 777.030814][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 777.030834][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 777.030852][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 777.030878][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 777.030901][ C0] ? nmi_handle+0x14f/0x5a0 [ 777.030919][ C0] ? nmi_handle+0x2a/0x5a0 [ 777.030938][ C0] ? lock_release+0x2d9/0xa30 [ 777.030955][ C0] ? default_do_nmi+0x63/0x160 [ 777.030973][ C0] ? exc_nmi+0x123/0x1f0 [ 777.030990][ C0] ? end_repeat_nmi+0xf/0x53 [ 777.031024][ C0] ? lock_release+0x2d9/0xa30 [ 777.031042][ C0] ? lock_release+0x2d9/0xa30 [ 777.031060][ C0] ? lock_release+0x2d9/0xa30 [ 777.031077][ C0] [ 777.031083][ C0] [ 777.031091][ C0] ? __wake_up_common_lock+0x18c/0x1e0 [ 777.031109][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 777.031131][ C0] ? __pfx_lock_release+0x10/0x10 [ 777.031155][ C0] _raw_spin_unlock_irqrestore+0x79/0x140 [ 777.031176][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 777.031201][ C0] __wake_up_common_lock+0x18c/0x1e0 [ 777.031222][ C0] netlink_broadcast_filtered+0x11c9/0x12a0 [ 777.031249][ C0] ? __pfx_fdb_fill_info+0x10/0x10 [ 777.031273][ C0] nlmsg_notify+0xfb/0x1c0 [ 777.031292][ C0] br_fdb_update+0x55d/0x740 [ 777.031311][ C0] ? __pfx_br_fdb_update+0x10/0x10 [ 777.031333][ C0] br_handle_frame_finish+0x739/0x1fe0 [ 777.031356][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 777.031376][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 777.031398][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 777.031419][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 777.031442][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 777.031463][ C0] ? ip6t_do_table+0x205/0x18a0 [ 777.031479][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 777.031504][ C0] ? ip6t_do_table+0x205/0x18a0 [ 777.031521][ C0] ? nf_hook_slow+0x175/0x220 [ 777.031544][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 777.031566][ C0] br_nf_hook_thresh+0x472/0x590 [ 777.031590][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 777.031612][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 777.031636][ C0] ? skb_push+0x97/0x100 [ 777.031657][ C0] br_nf_pre_routing_finish_ipv6+0xaa0/0xdd0 [ 777.031680][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 777.031706][ C0] br_nf_pre_routing_ipv6+0x379/0x770 [ 777.031728][ C0] ? br_nf_pre_routing_ipv6+0x41e/0x770 [ 777.031751][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 777.031774][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 777.031797][ C0] ? br_nf_pre_routing+0x70e/0x1470 [ 777.031817][ C0] ? ip6_mc_input+0xa1f/0xc30 [ 777.031838][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 777.031859][ C0] br_handle_frame+0x9fd/0x1530 [ 777.031884][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 777.031906][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 777.031928][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 777.031949][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 777.031970][ C0] __netif_receive_skb_core+0x14eb/0x4690 [ 777.031993][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 777.032022][ C0] ? ip6_mc_input+0xa1f/0xc30 [ 777.032043][ C0] ? ip6_mc_input+0xa1f/0xc30 [ 777.032065][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 777.032088][ C0] ? mark_lock+0x9a/0x360 [ 777.032108][ C0] ? __lock_acquire+0x1397/0x2100 [ 777.032134][ C0] __netif_receive_skb+0x12f/0x650 [ 777.032156][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 777.032173][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 777.032194][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 777.032211][ C0] ? __pfx_lock_release+0x10/0x10 [ 777.032229][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 777.032253][ C0] process_backlog+0x662/0x15b0 [ 777.032277][ C0] ? process_backlog+0x33b/0x15b0 [ 777.032302][ C0] ? __pfx_process_backlog+0x10/0x10 [ 777.032324][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 777.032342][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 777.032361][ C0] __napi_poll+0xcb/0x490 [ 777.032384][ C0] net_rx_action+0x89b/0x1240 [ 777.032414][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 777.032437][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 777.032469][ C0] handle_softirqs+0x2d4/0x9b0 [ 777.032494][ C0] ? run_ksoftirqd+0xca/0x130 [ 777.032510][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 777.032532][ C0] ? preempt_schedule+0xe1/0xf0 [ 777.032556][ C0] run_ksoftirqd+0xca/0x130 [ 777.032571][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 777.032587][ C0] ? __pfx_ksoftirqd_should_run+0x10/0x10 [ 777.032603][ C0] ? smpboot_thread_fn+0x2d3/0xa30 [ 777.032627][ C0] ? smpboot_thread_fn+0x4fb/0xa30 [ 777.032650][ C0] ? smpboot_thread_fn+0x656/0xa30 [ 777.032674][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 777.032689][ C0] smpboot_thread_fn+0x544/0xa30 [ 777.032713][ C0] ? smpboot_thread_fn+0x4e/0xa30 [ 777.032739][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 777.032763][ C0] kthread+0x2f0/0x390 [ 777.032780][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 777.032804][ C0] ? __pfx_kthread+0x10/0x10 [ 777.032822][ C0] ret_from_fork+0x4b/0x80 [ 777.032837][ C0] ? __pfx_kthread+0x10/0x10 [ 777.032855][ C0] ret_from_fork_asm+0x1a/0x30 [ 777.032883][ C0] [ 780.154164][ C1] net_ratelimit: 24196 callbacks suppressed [ 780.154188][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 780.154348][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 780.160356][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 780.172410][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 780.184275][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 780.196672][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 780.208219][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 780.220652][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 780.232071][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 780.244116][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 785.164172][ C1] net_ratelimit: 29811 callbacks suppressed [ 785.164195][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 785.164779][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 785.170354][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 785.182820][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 785.194261][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 785.206252][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 785.218109][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 785.230555][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 785.242054][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:47:94:2a:d1:91, vlan:0) [ 785.254583][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)