last executing test programs: 9m4.738158102s ago: executing program 2 (id=103): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x5d96}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x4}}, 0x20) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000700)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x80000000, @dev={0xfe, 0x80, '\x00', 0x1b}}, {0xa, 0x4e21, 0xc0, @loopback, 0x7f}, r4, 0x8}}, 0x48) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2404d880) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000500)={0x0, 0xfffffe01, 0x4, 0xc3, 0x7fff, 0x7, 0x101, 0x6, {0x0, @in6={{0xa, 0x4e23, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80000000}}, 0x8, 0x10, 0x9, 0x734, 0x7fffffff}}, &(0x7f0000000180)=0xb0) 9m4.273385368s ago: executing program 2 (id=104): r0 = memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x6) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000001, 0x4c092, r0, 0x0) setitimer(0x1, &(0x7f0000001300)={{0x77359400}, {0x0, 0xea60}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000003c0)={@local, @random="56c9d5282097", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x70, 0x68, 0x0, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x43}}, @parameter_prob={0xc, 0x0, 0x0, 0x6, 0xc, 0x0, {0x15, 0x4, 0x1, 0x5, 0x9, 0x64, 0x9, 0x8, 0x32, 0x5, @multicast1, @loopback, {[@generic={0x83, 0x2}, @generic={0x88, 0xa, "9b8feced469c7269"}, @cipso={0x86, 0x31, 0x1, [{0x7, 0xa, "1060fb88b5b4452c"}, {0x1, 0x5, "3bee8a"}, {0x6, 0x11, "28fa5f9711aa76a0053be6ceeeea9b"}, {0x2, 0xb, "71fd35ebaeb683f518"}]}]}}}}}}}, 0x0) 9m3.845297522s ago: executing program 2 (id=107): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000005c0)={0x1f, 0x0, @none, 0x4}, 0xe) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0xf}, {0x7, 0xd}, {0xb, 0xf}}}, 0x24}}, 0x80000) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000340)={0x7, 0x0, &(0x7f0000000100)=[0xffffffffffffffff]}, 0x1) (async, rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x50, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3a099}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x851}, 0x4040) (async) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 32) listen(r0, 0xf) (rerun: 32) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r2, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) r4 = socket$inet(0x2, 0x3, 0x9) pipe2$watch_queue(&(0x7f0000000480), 0x80) (async) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r5 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) (async) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r6, 0xc018643a, &(0x7f0000000140)={0x4000000}) ioctl$DRM_IOCTL_WAIT_VBLANK(r6, 0xc018643a, &(0x7f0000000000)={0x4000000, 0xd, 0x1}) (async, rerun: 32) pread64(r6, &(0x7f0000000180)=""/244, 0x20, 0x100000000) (rerun: 32) 9m3.777644675s ago: executing program 2 (id=108): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x8040, 0x104) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) fcntl$setstatus(r0, 0x4, 0x24400) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0x202599ca) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x20) syz_clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0], 0x1}, 0x58) 9m3.225119659s ago: executing program 2 (id=111): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) syz_open_dev$sg(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x3de6bba9edd8ca72, &(0x7f0000000300)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r4, 0x0, 0x0, 0xe0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r5, 0x18000000000002a0, 0x19, 0x0, &(0x7f0000000000)="b9ff03030018698cb89e40f086dd6000000e00003a00630677", 0x0, 0x8fd, 0x2000000, 0x62, 0x0, &(0x7f0000000440), &(0x7f0000000180)="9f1764dc5dba7349e0201bb3d2f6bfe90bc681dd1feed16da810abd8f3bf7df80f07cff2ec8a5dd34ae48d3e5047ab5305b9926ebb5778cb2d27", 0x6}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYRES8=r1, @ANYRES16=r3, @ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="120000000600000004000008120fc700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESOCT=r0, @ANYBLOB='\x00'/28], 0x48) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000580)={0x0, 0x0, 0x13}, 0x18) pread64(r6, &(0x7f0000002140)=""/17, 0x11, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9m0.44354942s ago: executing program 2 (id=120): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="18fffe00", @ANYRES16=r0, @ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x4801}, 0x20004845) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000580)=ANY=[@ANYBLOB="050000000000000069111c000000000085100000020000008500000005000000950000000000917249009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) syz_usbip_server_init(0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) pipe2$9p(&(0x7f00000001c0), 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000280)={0x401, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0}) socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f00000005c0)=ANY=[@ANYRESDEC], 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r7, @ANYRES32=r4], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) 8m59.807320332s ago: executing program 32 (id=120): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="18fffe00", @ANYRES16=r0, @ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x4801}, 0x20004845) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000580)=ANY=[@ANYBLOB="050000000000000069111c000000000085100000020000008500000005000000950000000000917249009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) syz_usbip_server_init(0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) pipe2$9p(&(0x7f00000001c0), 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000280)={0x401, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0}) socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f00000005c0)=ANY=[@ANYRESDEC], 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r7, @ANYRES32=r4], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) 8m53.854998453s ago: executing program 1 (id=144): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b14, 0x0) 8m51.890387317s ago: executing program 1 (id=151): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) openat$cgroup(r1, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) readlinkat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/129, 0x81) syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @random="6c200600cb08", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x20, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@generic={0x5, 0xa, "0c311500073bb9b0"}]}}}}}}}}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x94a81, 0x0) ioctl$PPPIOCGUNIT(r2, 0x80047456, &(0x7f00000000c0)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') r4 = semget$private(0x0, 0x7, 0x191) semtimedop(r4, &(0x7f0000000200)=[{0x0, 0xffff, 0x2000}, {0x4, 0x3, 0x1800}], 0x2, 0x0) semop(r4, &(0x7f0000000000)=[{0x0, 0xe8c7, 0x1000}], 0x1) semctl$SETVAL(r4, 0x0, 0x10, &(0x7f0000000080)=0x4) pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=bind:N,', @ANYRESDEC, @ANYRESHEX]) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000019100)={0xc, 0x0, &(0x7f0000019080)=[@enter_looper, @decrefs={0x40046307, 0x1}], 0xb, 0x0, &(0x7f00000190c0)="9cd9d073232f0d36040924"}) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0x3, 0xfffffff9, 0x9, 0x101, 0x2, 0xffff}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x4, {0x0, 0x0, 0x0, r6, {0xe, 0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x19}]}}]}, 0x3c}}, 0x4080) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000140)={0xc}) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r9, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) 8m50.632368857s ago: executing program 1 (id=156): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x1300) 8m50.625489401s ago: executing program 1 (id=159): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @dstopts_2292={{0xf0, 0x29, 0x4, {0x4, 0x1a, '\x00', [@generic={0xfe, 0x70, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b08"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x30, {0x1, 0xa, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}]}}}, @hoplimit={{0x14}}, @hopopts={{0xa8, 0x29, 0x36, {0x5e, 0x11, '\x00', [@generic={0xff, 0x41, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70"}, @pad1, @pad1, @calipso={0x7, 0x28, {0x3, 0x8, 0x0, 0xfff, [0x2, 0x4, 0x966, 0xfffffffffffffff7]}}, @calipso={0x7, 0x8, {0x0, 0x0, 0x7, 0x6}}, @generic={0x8}, @calipso={0x7, 0x8, {0x3, 0x0, 0x3}}]}}}, @rthdr={{0x18}}], 0x1e0}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r7, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 8m49.684911243s ago: executing program 1 (id=161): openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10, &(0x7f0000000480)=ANY=[@ANYRES16=r0, @ANYRESOCT, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRES32]) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 32) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) (async, rerun: 32) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) (rerun: 32) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000040)={0x100f8, 0x0, 0x601, 0xffffffff}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000000130001000000000000000000070000002e86e4a630b400bf5e869b3444cf3b26d94521b7a4995947eb680490ce6227cc35c9ec5542ebf529cf5c205b7fe401c1bacf4b15a64c6804a6cedd63ffca8ede2a6ea1d1bf0c59cdcdab726224d11135ed2b79543e64ff3370ab2a0af57000bf26a1fc5ed4fb2a9245aac8bc20f234fd5515152d6bcfe668dd8a71ff6becad995ef95da00895890cae8d688c04219fdacac9e867660d54f96988a93be72dd47a94c7d1f1d4da1d2fcfc8e8084ed26446c399b0fc6dd2784752b65d816ad1", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@getchain={0x34, 0x66, 0x2, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xfff3, 0x6}, {0xe, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x4}]}, 0x34}}, 0x44) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async, rerun: 64) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x4048000}, 0x14) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="760100001b"], 0x188}, 0x1, 0x0, 0x0, 0x40004}, 0x0) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x100, 0x6}}, 0x50) 8m49.419554344s ago: executing program 1 (id=163): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000000)={0x18, r1, 0x3, 0x8010, &(0x7f0000000100)=[{0x12df, 0x2000000000000003}, {0x7ff, 0x1080}, {0x7, 0x80}]}) 8m49.174778775s ago: executing program 33 (id=163): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000000)={0x18, r1, 0x3, 0x8010, &(0x7f0000000100)=[{0x12df, 0x2000000000000003}, {0x7ff, 0x1080}, {0x7, 0x80}]}) 1m7.231619145s ago: executing program 0 (id=1887): symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chmod(&(0x7f00000002c0)='./file0\x00', 0x271) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) writev(r0, &(0x7f0000000200), 0x0) r1 = syz_io_uring_setup(0x20e6, &(0x7f00000000c0)={0x0, 0xeb7, 0x8000, 0x1, 0x1f9}, &(0x7f0000000040)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x237, &(0x7f0000000280)={0x0, 0x273, 0x400, 0x0, 0x2cf, 0x0, r1}, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x8, 0x0, @fd, 0x6, 0x0, 0x0, 0x1}) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x36, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1}) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x36, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) r5 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20) r6 = socket$key(0xf, 0x3, 0x2) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000140)={0x0, 0xfa2, 0xc}, 0x10) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) socket$inet6(0xa, 0x1, 0x0) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000359497400a115014c6c2000000010902120001000000000904"], 0x0) syz_usb_control_io$printer(r8, 0x0, 0x0) sendmsg$key(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x3ffffffffffffe5, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r9 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000000)='source', &(0x7f00000005c0)='#.S\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd5\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ\x95|\xe5\xaa\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$bt_rfcomm(r5, &(0x7f0000000300)={0x1f, @any, 0x8}, 0xa) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r10], 0x38}, 0x1, 0x0, 0x0, 0x40400c0}, 0x0) 1m3.288309005s ago: executing program 0 (id=1893): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x8000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r4, &(0x7f0000000080)={0x11, 0x805, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) getpid() syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 1m1.539366574s ago: executing program 0 (id=1898): socket$nl_netfilter(0x10, 0x3, 0xc) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000240)='ocfs2\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2a) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001300)={0xc, {"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", 0x1000}}, 0x435) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffc25) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000100", @ANYRES32], 0x1c}}, 0x4000000) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x80082, 0x0) write$vga_arbiter(r3, &(0x7f0000000040)=@other={'lock', ' ', 'none'}, 0xa) write$vga_arbiter(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="6465636f646573206e6f6e6500a15a8cc80ce2013e1e24b7b2b0a9fe042903c574668f470b3d703ed740b0a16535df21f801502b93c746da043823e4fb556a3da89f33faa2118a2c4a063612e57b55c80fad492665f7d5d400d39cf12afa613f929c656bdb401e38f95ee247d0f0d38b1fb943d36efbabf464137b4c61e11cf768f6a7812877423af964dbd6427691051584cb776cc51f89d79056598e620d96245757e9a3ba2b318ef89f4a5d4dd5f53efcf298ed3754e74245b9509369c52b2899ab989faa"], 0xd) 1m0.429130611s ago: executing program 4 (id=1901): syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@mgmt_frame=@action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x5eb4}, @broadcast, @broadcast, @random="8331429a85a5", {0x7, 0x8}}, @sa_query_req={0x8, 0x0, 0x9}}, 0x1c) syz_80211_inject_frame(&(0x7f0000000080)=@broadcast, &(0x7f00000000c0)=@data_frame={@msdu=@type11={{0x0, 0x2, 0x7, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x5}, @device_a, @device_a, @device_b, {0x4, 0x2}, @device_a, @void, @value=@ver_80211n={0x0, 0x23b, 0x1, 0x2, 0x0, 0x3, 0x1, 0x0, 0x1}}, @a_msdu=[{@device_a, @broadcast, 0x35, "369a8de16b09c2a7089f056800ab7a9095485977932d643007478a9de5f61568b19a2d34e494b4c04a4a6663dfe1a9b0d09c239c23"}, {@broadcast, @broadcast, 0x28, "fd9a49c3584c2d1a23368df2b39c4bbded6264666724882c741b8972ccb195a34246b99381b1a721"}]}, 0x9e) 1m0.221173939s ago: executing program 3 (id=1902): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5c00000011006bcc9e3be35c6e17aa31076b876c1d00", 0x16}, {&(0x7f0000000180)="cf4f7b4cc9e2fafbf73eaee366d76b1e5edca5509ddc18bb9367cb7353d7b5c75ba5cf957ff4bb3c9c0fd6341da59fa875cf00a030c07e3483de0e3c029c85675739a04f3b", 0x45}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = dup(r0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x358, 0xffff8880b8423560) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) timerfd_create(0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x5) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1ffffffffee, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x5}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8003, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x38011, r2, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0xffffffffffff722a, 0x40000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f00000006c0)={{0x8, 0x3, 0xfffffffa, 0x5, '\x00', 0x3ff}, 0x2, 0x4, 0xe, r3, 0x3, 0x4, 'syz1\x00', &(0x7f0000000240)=['\x00', ',\x00', '/dev/snd/midiC#D#\x00'], 0x15}) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r7, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r5, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) munmap(&(0x7f0000002000/0x800000)=nil, 0x800000) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r8, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) mprotect(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) 59.973497568s ago: executing program 5 (id=1904): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) unshare(0x20060400) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4606, 0x0) sync_file_range(r2, 0x4000000000000003, 0x400000082, 0x1) pipe(&(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_create_resource$binfmt(&(0x7f0000000140)='./file0\x00') pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) pselect6(0x40, &(0x7f0000000400)={0x0, 0x83, 0x7, 0x3, 0x1000000, 0x800, 0x8, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x3, 0x8, 0x3f9a, 0xffffffffffff0000, 0x8000000010001, 0x3}, 0x0, 0x0) write(r3, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x2048ba, &(0x7f0000000000)={0x0, 0xfffffffc, 0x4, 0x0, 0x69}, &(0x7f0000000080), &(0x7f0000ff4000)) r6 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x2, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r6, 0x627, 0x4c1, 0x43, 0x0, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r11 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r10, @ANYBLOB="00000000100000001c001a80180002"], 0x44}}, 0x2000800) 59.349514442s ago: executing program 4 (id=1905): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d0009058203"], 0x0) syz_usb_connect(0x1, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x0, 0xd, &(0x7f0000000180)={0x5, 0xf, 0xd, 0x1, [@generic={0x8, 0x10, 0x4, "418e0178a1"}]}, 0x5, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x807}}, {0x80, &(0x7f0000000280)=@string={0x80, 0x3, "329491faf3ac39412157b78bcf7a763db93fb02d130addae0d549688a4ad060e740c3544e095b2095d18cfd834c2f56dc4e3c99556580d23799eed078b74785699f151a84a3ffa67a40f5dcb91e3d62856cf16c4bea3881241afb3c0a0e32671800f9fd231b366f1ea85057d714144b48ca2d72ad819ddf8d6ae6c792d25"}}, {0x2, &(0x7f0000000bc0)=@string={0x2}}, {0x2, &(0x7f0000000ec0)=@string={0x2}}, {0x8d, &(0x7f0000000d00)=@string={0x8d, 0x3, "c51e055929b779f6bbece94ec099b687b8419806d2b2e7dca7b6e12853431445a0466974381829f1762f0f9a361a082843a9125820161abda76008647328e13ede09e703158586c9328797b087d6551c876da767fea75c989fe54176ff20ed6e6b0b202f6dab1d39a6b9ef466cbeb83165428dca9c9ed5fdb64c2f66caca107b805421b817de17099546bb"}}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x1380, &(0x7f0000000100)=ANY=[]) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 58.250020687s ago: executing program 3 (id=1906): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x13) waitid(0x0, r3, 0x0, 0x2100000a, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) setresuid(r6, 0x0, r6) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r8, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x5, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r9, r10, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$vivid(&(0x7f00000002c0), 0x1, 0x2) r12 = getpid() sched_setscheduler(r12, 0x2, &(0x7f0000000200)=0x7) r13 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x82840, 0x132) fstat(r13, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r2, &(0x7f0000000f40)=[{{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000340)="e32a2835fc5eb0f4f911c47036eacc534e4e49aaa5aa2bd098d8f84ac99eb1c5d79c989050028606b7458dca9d6192ab0ce4ca49a834ffb75c368daa5e61c3afea2281de3d01b18ca41e3e1538783a975a72e5166241e0037869b150b3ded72b5ec13eaece49600dda05eb7b51cc25fa7458ab578fac3e6a9f6e1c010aa30576a6f66d889ea6edde7a3ec7b3f0bbd6d47ce3780001017a10f48d77f3de049773202167753514ab540406eb5d351ecca914b78e9d74b41821d9242f929555c0bb6c034a41b2c6e14151ce77e4ef429d3ea3de001dafa6cb4be45192539a4a17517ae42d3cdfabc779f9ab4bf7", 0xec}, {&(0x7f0000000440)="7aad1e8245be14e926e40d50d3dd5989ca2600000000000000000000d92a2eb5bc99abde0f32dd046098d5f61b461e1a0853cf8c398569141605b27ccc0d0b18b97740a00a9d8c82669cfb07481558ff4042c115c6add18e257800ca39ef9c14f91529f0d0effe", 0x67}, {&(0x7f0000000880)="4d554a4077a639213e077fe17e15aaf8efde67a9ba56ee35623e08a47ddfdce954f59fc4652a1efb3cad6631a2435915dc87fdcf609626b094a0d498a88e481eb0e93f44a2ce43f433aecb705a06243673e2c7e44c66982b54ef34b8d3e1dbc71212cfe5a42961ab447b19c89ecab0077cd5b0429e0c82cc9468498281f09fd500fa4bb6e1d451", 0x87}, {&(0x7f0000000500)="b114254bbbceb7ede604b170d017c59f984de3bd63ae9ae3be259ad04ad53f00f575ef74c659babd557a80f8bce71affbd326d9be791fef5759064dba0c7b5abdf438323f10d3f9de31b28ca9e2eb186d044755ee1cf2e0cbde83eab48ad95f100828b84b1bff084d6c574f35ea03303da2080d45d8831fe3dad963cd4c0709f35c1fd242d11c02990ed89a2cf6c151b1faf3311f350853f84b4539c60bebeb262e10c49ad59506eb7b43bfbcac411d372da00dbfff027f20796833e9441cc316e95d22095980b9313677a9e2df3e82cc090e091f0f08ac2", 0xd8}, {&(0x7f0000001000)="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", 0x16c}, {&(0x7f0000000600)="bff4019af8ece0c0a27e04000030710000000000c20d280ab215291d449e0187ee4802b502c16dada5ed66ca506308910a38499bb8fa6cb102ce5b0ba1ff24b2f032472738b75eadd95765c9d4fe8c39fafa10ca13e3d84f34539e23ee1018eba4d412719a55fc9546d3a8e3ed55d48a0eb3c06bfb", 0x75}, {&(0x7f0000000200)="a58a89e0cff16beb677d2773020490450ddf86d3822bae149193f06894182c62eaed5208cab1581911b2f7d6225889466575ff024bc42fbf9bd81408b19f57", 0x3f}], 0x7, &(0x7f0000000680)=[@cred={{0x1c, 0x1, 0x2, {r12, r6, r10}}}, @cred={{0x1c, 0x1, 0x2, {r11, r6, r10}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r7}}}, @cred={{0x1c, 0x1, 0x2, {r12, r9}}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c}}], 0xb8, 0x400c000}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000a00)="9f21e043477179cd3ddebf28636cd658b115cf3e50cb25831f3e61dc027342162d5464231d24c546a760a7fdc5fad99ff6cd8127ce392c8fa356bb001cbbc470873ba0b46b6dcb4da175e6044715ba0295f7888bbd81373183e78e9905d45eef553a411e9ab5a668880093b8225dfab0ab13a47966dd0b337638b5b27e888e0668c4953981bba555829078", 0x8b}, {&(0x7f0000000ac0)="3eb43fb4d76b7356e2d8fbaefc33ee179da1e81cd463f6b6980488a30e75e2f2724a5ef302a6944ece46fce841bfb0bda566dd0ff2ab15c0876cb4be83c9fdb14ff1e4486effd97ef4cfc6e4018461ba4e9f152b1afb4b4a20f480e45386337d72af8f0df5726678919aa6c878ee127d169cf6f624b1b4e8e8e0f3de194a0dace794ba32b31cbd6a9c5a125638ed17ffe45fddad6d689966bb6a3e38274821b5cf11d58521dfa33ec0d5ee755aa6a761b7cd82a00127525213f9684e83b75fa0998764f99b267b2015df4ef89382b8e28b282fad9be982705224f7fd756706d1813899e589e4fcce8991d87ba3a9574eff020eef3be0", 0xf6}], 0x2, &(0x7f0000000c80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30, 0x20040851}}, {{&(0x7f0000000cc0)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000000d40), 0x0, &(0x7f0000000d80)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r5, r9, r7}}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r13, r2]}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @cred={{0x1c, 0x1, 0x2, {r11, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r12}}}, @rights={{0x24, 0x1, 0x1, [r8, 0xffffffffffffffff, r0, r8, r4]}}], 0x108, 0x40008c0}}], 0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioprio_set$pid(0x2, 0x0, 0x2007) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r15, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 56.205966006s ago: executing program 4 (id=1907): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) unshare(0x22020600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x20) fcntl$setstatus(r2, 0x4, 0x40000) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 56.110525756s ago: executing program 5 (id=1908): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x8000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r4, &(0x7f0000000080)={0x11, 0x805, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) getpid() syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 55.352338811s ago: executing program 4 (id=1912): r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES64=r2, @ANYBLOB="82a64c", @ANYRESOCT, @ANYRES64=r0, @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) r4 = socket(0xa, 0x801, 0x0) getsockopt(r4, 0x8, 0x8, 0x0, &(0x7f0000001ffc)) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000100)={@host}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r5, 0x7af, &(0x7f0000000080)={@any, 0x2}) r6 = socket(0x1f, 0x5, 0xfffffffd) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@deltaction={0xe4, 0x31, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x90, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0xe4}}, 0x24000040) r7 = timerfd_create(0x7, 0x0) timerfd_settime(r7, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) readv(r7, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000300)={r9, 0x1, 0x0, @broadcast}, 0x49) r10 = syz_open_procfs(0x0, &(0x7f0000000100)='net/sockstat\x00') read$FUSE(r10, &(0x7f0000002780)={0x2020}, 0x5ecfb203) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000200)={r9, 0x11, 0x6, @random="bdf19b71a0f9"}, 0x10) setsockopt$packet_drop_memb(r8, 0x107, 0x2, &(0x7f0000000000)={r9, 0x1, 0x6, @broadcast}, 0x10) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="740000000303000000000000000000000a00000308000340000000070c000200fffffffb000000ff0c000200ffffffff0000000608000340000000e13467fb00000000000000c8070800034000000003080003400000000d0c000200fffffffe0000000f0c000200fffffffb000004010800034000000080"], 0x74}, 0x1, 0x0, 0x0, 0x20000040}, 0x8c0) timerfd_gettime(r7, &(0x7f0000001200)) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYRES64=r10], 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$COMEDI_BUFCONFIG(0xffffffffffffffff, 0x8020640d, &(0x7f0000000280)={0x0, 0x0, 0x7, 0x62}) 54.729811289s ago: executing program 3 (id=1913): syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, 0x0, 0x20}, 0x14}}, 0x40000) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000180012800b0001206772657461700000080005000400120008000a2e", @ANYRES32=r4, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) (async) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@getroute={0x14, 0x1a, 0x800, 0x70bd2f, 0x25dfdbfe, {}, ["", "", ""]}, 0x2f}, 0x1, 0x0, 0x0, 0x240400c4}, 0x80) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x10c}}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB="201480"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) (async) read$char_usb(0xffffffffffffffff, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b70300000100000085000000c0000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=0x0], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000940)="00000010000097a1c4bbe89086dd", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000d80)={0x0, 0x3c416e0b6d9cd889, &(0x7f0000000d40)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000", @ANYRES16=r10, @ANYBLOB="01002bbd7000fcdbd6aac34b0000040406809038f130"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 54.729499315s ago: executing program 6 (id=1914): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfdfff00c}, {0x6}]}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000014f000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0x1e, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) 54.719566514s ago: executing program 5 (id=1915): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8bdf, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) 54.386930483s ago: executing program 6 (id=1916): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5c00000011006bcc9e3be35c6e17aa31076b876c1d00", 0x16}, {&(0x7f0000000180)="cf4f7b4cc9e2fafbf73eaee366d76b1e5edca5509ddc18bb9367cb7353d7b5c75ba5cf957ff4bb3c9c0fd6341da59fa875cf00a030c07e3483de0e3c029c85675739a04f3b", 0x45}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = dup(r0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x358, 0xffff8880b8423560) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) timerfd_create(0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x5) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1ffffffffee, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x5}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8003, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x38011, r2, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0xffffffffffff722a, 0x40000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f00000006c0)={{0x8, 0x3, 0xfffffffa, 0x5, '\x00', 0x3ff}, 0x2, 0x4, 0xe, r3, 0x3, 0x4, 'syz1\x00', &(0x7f0000000240)=['\x00', ',\x00', '/dev/snd/midiC#D#\x00'], 0x15}) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r7, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r5, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) munmap(&(0x7f0000002000/0x800000)=nil, 0x800000) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r8, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) mprotect(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) 54.386320709s ago: executing program 5 (id=1917): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d0009058203"], 0x0) syz_usb_connect(0x1, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x0, 0xd, &(0x7f0000000180)={0x5, 0xf, 0xd, 0x1, [@generic={0x8, 0x10, 0x4, "418e0178a1"}]}, 0x5, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x807}}, {0x80, &(0x7f0000000280)=@string={0x80, 0x3, "329491faf3ac39412157b78bcf7a763db93fb02d130addae0d549688a4ad060e740c3544e095b2095d18cfd834c2f56dc4e3c99556580d23799eed078b74785699f151a84a3ffa67a40f5dcb91e3d62856cf16c4bea3881241afb3c0a0e32671800f9fd231b366f1ea85057d714144b48ca2d72ad819ddf8d6ae6c792d25"}}, {0x2, &(0x7f0000000bc0)=@string={0x2}}, {0x2, &(0x7f0000000ec0)=@string={0x2}}, {0x8d, &(0x7f0000000d00)=@string={0x8d, 0x3, "c51e055929b779f6bbece94ec099b687b8419806d2b2e7dca7b6e12853431445a0466974381829f1762f0f9a361a082843a9125820161abda76008647328e13ede09e703158586c9328797b087d6551c876da767fea75c989fe54176ff20ed6e6b0b202f6dab1d39a6b9ef466cbeb83165428dca9c9ed5fdb64c2f66caca107b805421b817de17099546bb"}}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x1380, &(0x7f0000000100)=ANY=[]) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 54.230688146s ago: executing program 3 (id=1918): recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000b001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10) 53.954005984s ago: executing program 0 (id=1919): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x1000, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='cgroup.kill\x00', 0x26e1, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x799b, 0x50b501) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="10010000", @ANYRES16, @ANYBLOB="c88845e7e05ae52d00009300000008001317"], 0x1c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="ff01ff8d00"}) r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r4, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r5 = accept$netrom(r2, &(0x7f0000000080)={{0x3, @netrom}, [@remote, @null, @netrom, @null, @bcast, @default, @remote, @null]}, &(0x7f0000000100)=0x48) socket$netlink(0x10, 0x3, 0x8) setsockopt$netrom_NETROM_T4(r5, 0x103, 0x6, &(0x7f0000000180)=0x1, 0x4) 53.953487381s ago: executing program 6 (id=1920): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) socket$unix(0x1, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r6, 0x1000000, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae79b8cd3292ea44c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ea38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)}], 0x1, 0x2000c000) sendmmsg$inet6(r8, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000800)="240000001e005f03142000000000000000000000010000", 0x17) 53.824626932s ago: executing program 3 (id=1921): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x40814) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000380)=0x4) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x20000, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') r2 = socket(0xa, 0x3, 0xff) openat$kvm(0xffffffffffffff9c, 0x0, 0x800000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) write$binfmt_aout(r3, &(0x7f0000000000)=ANY=[], 0xa052) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x109002, 0x0) openat$incfs(r5, &(0x7f0000000340)='.pending_reads\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r6 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) readv(r6, &(0x7f00000013c0)=[{&(0x7f0000001300)=""/35, 0x23}], 0x1) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x1, 0x411}}}, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 53.586158972s ago: executing program 0 (id=1922): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x40814) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000380)=0x4) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x20000, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') r2 = socket(0xa, 0x3, 0xff) openat$kvm(0xffffffffffffff9c, 0x0, 0x800000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) write$binfmt_aout(r3, &(0x7f0000000000)=ANY=[], 0xa052) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x109002, 0x0) openat$incfs(r5, &(0x7f0000000340)='.pending_reads\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r6 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) readv(r6, &(0x7f00000013c0)=[{&(0x7f0000001300)=""/35, 0x23}], 0x1) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x1, 0x411}}}, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 51.693270311s ago: executing program 6 (id=1923): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x54}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="6800000010000104fafffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32, @ANYBLOB="0800030008000000080003"], 0x68}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x8cff) 50.329558941s ago: executing program 4 (id=1924): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) (async) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = fsopen(&(0x7f00000002c0)='iso9660\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3001a10374102095, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0x8028}, [@IFLA_GSO_MAX_SEGS={0x0, 0x28, 0x3864}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3001a10374102095, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0x8028}, [@IFLA_GSO_MAX_SEGS={0x0, 0x28, 0x3864}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) 50.100676958s ago: executing program 0 (id=1925): socket$nl_netfilter(0x10, 0x3, 0xc) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000240)='ocfs2\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2a) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001300)={0xc, {"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", 0x1000}}, 0x435) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffc25) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000100", @ANYRES32], 0x1c}}, 0x4000000) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x80082, 0x0) write$vga_arbiter(r4, &(0x7f0000000040)=@other={'lock', ' ', 'none'}, 0xa) write$vga_arbiter(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="6465636f646573206e6f6e6500a15a8cc80ce2013e1e24b7b2b0a9fe042903c574668f470b3d703ed740b0a16535df21f801502b93c746da043823e4fb556a3da89f33faa2118a2c4a063612e57b55c80fad492665f7d5d400d39cf12afa613f929c656bdb401e38f95ee247d0f0d38b1fb943d36efbabf464137b4c61e11cf768f6a7812877423af964dbd6427691051584cb776cc51f89d79056598e620d96245757e9a3ba2b318ef89f4a5d4dd5f53efcf298ed3754e74245b9509369c52b2899ab989faa"], 0xd) 49.889571791s ago: executing program 3 (id=1926): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x6002, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x400d4) connect$rose(r2, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, [@default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x30) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8983, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r14, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r9, @ANYBLOB="05005b"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r6, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r15 = dup2(r1, r2) connect$ax25(r15, &(0x7f00000003c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x5}, [@default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r10, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r8, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x8, 0x57}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x40}]}, 0x58}, 0x1, 0x0, 0x0, 0x4110}, 0x810) 49.807107903s ago: executing program 5 (id=1927): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000008200)={0xffffffffffffffff}) fstat(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r4) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r5}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x53, 0x6, 0x3, 0x5, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x7, 0xe661, 0x4, 0x7, 0x7, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x5, 0x1, 0x40], [0x10000007, 0x9, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0x1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4004e0, 0x1, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0xd, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xfffffff8, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x21c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x24], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f00000002c0)=0x3) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt(r6, 0x8, 0x101, 0x0, 0x0) 49.794306688s ago: executing program 4 (id=1928): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002c40)={0x24, 0x25, 0x109, 0x870bd22, 0xfffffff9, {0x2}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}, @typed={0x8, 0x3f, 0x0, 0x0, @fd}]}, 0x24}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0x400, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x25}, &(0x7f0000000140)=""/38, 0x26, &(0x7f00000001c0)=""/120, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x3}, 0x58) sendto$inet(r1, &(0x7f0000000380)="43182723d7", 0x5, 0x40001, &(0x7f00000003c0)={0x2, 0x4e21, @broadcast}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) dup2(0xffffffffffffffff, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x48) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0), 0x0, 0x440200) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, &(0x7f0000000340)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x10007, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, 0x0, 0x0, 0xc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x15, 0x6, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r5, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000640)="01bee7d647c508a6cd5c3a204f4139f9dfaa36f199cf0ead94d47e03dbc6a8ecfe351b925bcca3fc3c2d21f3929379e33e7577474e513d3df6859a2ecb45db1351bd9cc00560124eb6e17194b15a98daa1ffc73800c5a760ce741d3040f8f50ef721bdb739b784f35116d7d2e5ae27b101da9f7cac41f7ef78871215d70e2d2e9d35f57138", 0x85, 0x0, 0x0, 0x2}]) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a31000000001400038010"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 49.691520787s ago: executing program 6 (id=1929): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x8, 0x3, 0x500, 0x0, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x430, 0xffffffff, 0xffffffff, 0x430, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xffffff00, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0x23}, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'dvmrp0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x228, 0x248, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@empty, [0xaaab4584fd44661c, 0xffffff00, 0x0, 0xffffff], @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffffff, 0xff000000, 0xffffffff], 0x4d4, 0x3506, 0xff, 0x1, 0x6, 0x9}, {@ipv4=@broadcast, [0xffffff00, 0x1fe, 0xffffff00, 0xff000000], @ipv4=@rand_addr=0x64010101, [0xff, 0x0, 0x0, 0xffffff00], 0x4d5, 0x3505, 0x32, 0x0, 0x4e8535f9bc1af85f, 0x10}, {@ipv6=@loopback, [0xff000000, 0x0, 0x0, 0xff000000], @ipv4=@private=0xa010102, [0xffffff00, 0xffffff00, 0xff, 0xff000000], 0x4d6, 0x0, 0x5c, 0x1, 0x12, 0x17}, {@ipv6=@remote, [0xff000000, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xffffffff, 0xffffffff, 0xffffffff], 0x4d6, 0x3500, 0x5e, 0x1, 0x0, 0xf}], 0x5, 0x4}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x576) r1 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 49.586632341s ago: executing program 5 (id=1930): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x9]}, 0x8, 0x80800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) lstat(0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x3c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000180)=0xb4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x8dy\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x16\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba$v\x8e\x9e\xef\xbc\x86f)\x01\xba\xdb\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4\x83Mav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/679, 0x6) fallocate(r3, 0x0, 0x0, 0x400001) 48.779401097s ago: executing program 6 (id=1931): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5c00000011006bcc9e3be35c6e17aa31076b876c1d00", 0x16}, {&(0x7f0000000180)="cf4f7b4cc9e2fafbf73eaee366d76b1e5edca5509ddc18bb9367cb7353d7b5c75ba5cf957ff4bb3c9c0fd6341da59fa875cf00a030c07e3483de0e3c029c85675739a04f3b", 0x45}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = dup(r0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x358, 0xffff8880b8423560) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) timerfd_create(0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x5) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1ffffffffee, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x5}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8003, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x38011, r2, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0xffffffffffff722a, 0x40000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f00000006c0)={{0x8, 0x3, 0xfffffffa, 0x5, '\x00', 0x3ff}, 0x2, 0x4, 0xe, r3, 0x3, 0x4, 'syz1\x00', &(0x7f0000000240)=['\x00', ',\x00', '/dev/snd/midiC#D#\x00'], 0x15}) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r7, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r5, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) munmap(&(0x7f0000002000/0x800000)=nil, 0x800000) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r8, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) mprotect(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) 0s ago: executing program 34 (id=1925): socket$nl_netfilter(0x10, 0x3, 0xc) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000240)='ocfs2\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2a) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001300)={0xc, {"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", 0x1000}}, 0x435) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffc25) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000100", @ANYRES32], 0x1c}}, 0x4000000) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x80082, 0x0) write$vga_arbiter(r4, &(0x7f0000000040)=@other={'lock', ' ', 'none'}, 0xa) write$vga_arbiter(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="6465636f646573206e6f6e6500a15a8cc80ce2013e1e24b7b2b0a9fe042903c574668f470b3d703ed740b0a16535df21f801502b93c746da043823e4fb556a3da89f33faa2118a2c4a063612e57b55c80fad492665f7d5d400d39cf12afa613f929c656bdb401e38f95ee247d0f0d38b1fb943d36efbabf464137b4c61e11cf768f6a7812877423af964dbd6427691051584cb776cc51f89d79056598e620d96245757e9a3ba2b318ef89f4a5d4dd5f53efcf298ed3754e74245b9509369c52b2899ab989faa"], 0xd) kernel console output (not intermixed with test programs): : syz [ 530.091956][ T24] usb 6-1: SerialNumber: syz [ 530.140825][ T6211] usb 7-1: config 0 descriptor?? [ 530.175561][ T30] audit: type=1400 audit(1769073644.042:618): avc: denied { append } for pid=12499 comm="syz.0.1710" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 530.730700][ T6211] usb 7-1: string descriptor 0 read error: -71 [ 530.750845][ T6211] usbhid 7-1:0.0: can't add hid device: -71 [ 530.766836][ T6211] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 530.780926][ T6211] usb 7-1: USB disconnect, device number 44 [ 531.050860][ T24] cdc_ncm 6-1:1.1: SET_NTB_FORMAT failed [ 531.100093][ T90] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 531.110290][ T24] cdc_ncm 6-1:1.1: bind() failure [ 531.154710][ T24] usb 6-1: USB disconnect, device number 51 [ 531.252462][ T90] usb 4-1: Using ep0 maxpacket: 32 [ 531.259342][ T90] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 531.277760][ T90] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 531.350838][ T90] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 531.480094][ T90] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 531.480115][ T90] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 531.480130][ T90] usb 4-1: config 0 interface 0 has no altsetting 0 [ 531.496041][ T90] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 531.496057][ T90] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 531.496069][ T90] usb 4-1: Product: syz [ 531.496078][ T90] usb 4-1: Manufacturer: syz [ 531.496086][ T90] usb 4-1: SerialNumber: syz [ 531.524383][ T90] usb 4-1: config 0 descriptor?? [ 531.568124][ T90] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 531.572289][ T90] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 531.627267][T12519] (syz.0.1714,12519,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 531.627285][T12519] (syz.0.1714,12519,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 531.627297][T12519] (syz.0.1714,12519,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 531.627309][T12519] (syz.0.1714,12519,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 531.686164][T12523] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1715'. [ 531.737179][T12510] ldusb 4-1:0.0: Couldn't submit interrupt_in_urb -90 [ 531.739559][ T10] usb 4-1: USB disconnect, device number 49 [ 531.743173][T12526] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 531.745179][ T10] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 533.465360][T12549] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1723'. [ 533.575396][T12552] binder: 12550:12552 ioctl c0306201 0 returned -14 [ 533.606606][T12552] binder: BINDER_SET_CONTEXT_MGR already set [ 533.612711][T12552] binder: 12550:12552 ioctl 4018620d 200000000040 returned -16 [ 533.624396][T12552] FAULT_INJECTION: forcing a failure. [ 533.624396][T12552] name failslab, interval 1, probability 0, space 0, times 0 [ 533.637131][T12552] CPU: 0 UID: 0 PID: 12552 Comm: syz.0.1724 Tainted: G L syzkaller #0 PREEMPT(full) [ 533.637157][T12552] Tainted: [L]=SOFTLOCKUP [ 533.637162][T12552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 533.637170][T12552] Call Trace: [ 533.637176][T12552] [ 533.637180][T12552] dump_stack_lvl+0x100/0x190 [ 533.637198][T12552] should_fail_ex.cold+0x5/0xa [ 533.637211][T12552] should_failslab+0xc2/0x120 [ 533.637225][T12552] ? tomoyo_encode2+0xfb/0x3c0 [ 533.637237][T12552] __kmalloc_noprof+0xf6/0x9c0 [ 533.637251][T12552] ? tomoyo_encode2+0xfb/0x3c0 [ 533.637262][T12552] tomoyo_encode2+0xfb/0x3c0 [ 533.637276][T12552] tomoyo_encode+0x29/0x50 [ 533.637287][T12552] tomoyo_realpath_from_path+0x18c/0x690 [ 533.637303][T12552] tomoyo_path_number_perm+0x23c/0x580 [ 533.637320][T12552] ? tomoyo_path_number_perm+0x22e/0x580 [ 533.637339][T12552] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 533.637371][T12552] ? find_held_lock+0x2b/0x80 [ 533.637386][T12552] ? hook_file_ioctl_common+0x146/0x410 [ 533.637400][T12552] ? __fget_files+0x215/0x3d0 [ 533.637416][T12552] ? __fget_files+0x21f/0x3d0 [ 533.637432][T12552] security_file_ioctl+0xd3/0x230 [ 533.637444][T12552] __x64_sys_ioctl+0xb7/0x210 [ 533.637456][T12552] do_syscall_64+0xc9/0xf80 [ 533.637469][T12552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.637481][T12552] RIP: 0033:0x7fbfbfb9acb9 [ 533.637491][T12552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.637501][T12552] RSP: 002b:00007fbfc0b13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 533.637512][T12552] RAX: ffffffffffffffda RBX: 00007fbfbfe16090 RCX: 00007fbfbfb9acb9 [ 533.637518][T12552] RDX: 00002000000016c0 RSI: 00000000c0306201 RDI: 0000000000000008 [ 533.637525][T12552] RBP: 00007fbfc0b13090 R08: 0000000000000000 R09: 0000000000000000 [ 533.637532][T12552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.637538][T12552] R13: 00007fbfbfe16128 R14: 00007fbfbfe16090 R15: 00007fffaaa5b1d8 [ 533.637553][T12552] [ 533.637579][T12552] ERROR: Out of memory at tomoyo_realpath_from_path. [ 534.332374][ T5932] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 534.396091][ T6211] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 534.805237][ T5932] usb 7-1: Using ep0 maxpacket: 16 [ 534.818819][ T5932] usb 7-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 534.828763][ T5932] usb 7-1: config 0 interface 0 has no altsetting 0 [ 534.838127][ T5932] usb 7-1: New USB device found, idVendor=056a, idProduct=00d2, bcdDevice= 0.00 [ 534.849589][ T5932] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.861182][ T5932] usb 7-1: config 0 descriptor?? [ 534.892395][ T6211] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 534.902481][T12574] FAULT_INJECTION: forcing a failure. [ 534.902481][T12574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 534.902509][T12574] CPU: 0 UID: 0 PID: 12574 Comm: syz.5.1730 Tainted: G L syzkaller #0 PREEMPT(full) [ 534.902532][T12574] Tainted: [L]=SOFTLOCKUP [ 534.902537][T12574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 534.902547][T12574] Call Trace: [ 534.902553][T12574] [ 534.902559][T12574] dump_stack_lvl+0x100/0x190 [ 534.902589][T12574] should_fail_ex.cold+0x5/0xa [ 534.902608][T12574] _copy_from_user+0x2e/0xd0 [ 534.902632][T12574] copy_msghdr_from_user+0x9f/0x4f0 [ 534.902651][T12574] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 534.902681][T12574] ___sys_sendmsg+0x106/0x1e0 [ 534.902700][T12574] ? __pfx____sys_sendmsg+0x10/0x10 [ 534.902728][T12574] ? find_held_lock+0x2b/0x80 [ 534.902766][T12574] __sys_sendmsg+0x170/0x220 [ 534.902789][T12574] ? __pfx___sys_sendmsg+0x10/0x10 [ 534.902827][T12574] do_syscall_64+0xc9/0xf80 [ 534.902856][T12574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.902874][T12574] RIP: 0033:0x7f2e40b9acb9 [ 534.902887][T12574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.902902][T12574] RSP: 002b:00007f2e41a34028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 534.902919][T12574] RAX: ffffffffffffffda RBX: 00007f2e40e15fa0 RCX: 00007f2e40b9acb9 [ 534.902930][T12574] RDX: 0000000000000000 RSI: 0000200000001540 RDI: 0000000000000003 [ 534.902939][T12574] RBP: 00007f2e41a34090 R08: 0000000000000000 R09: 0000000000000000 [ 534.902950][T12574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.902959][T12574] R13: 00007f2e40e16038 R14: 00007f2e40e15fa0 R15: 00007ffcb7f94e78 [ 534.902983][T12574] [ 535.119624][ T6211] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 535.128755][ T6211] usb 1-1: config 1 has no interface number 0 [ 535.141320][ T6211] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.383369][ T6211] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 535.409178][ T6211] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 535.926954][ T6211] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.935170][ T6211] usb 1-1: Product: syz [ 535.939401][ T6211] usb 1-1: Manufacturer: syz [ 535.944030][ T6211] usb 1-1: SerialNumber: syz [ 535.950374][T12577] loop6: detected capacity change from 0 to 524287999 [ 536.091820][ T5932] usb 7-1: string descriptor 0 read error: -71 [ 536.119048][ T5932] usbhid 7-1:0.0: can't add hid device: -71 [ 536.133883][T12588] (syz.3.1734,12588,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 536.139245][ T5932] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 536.149710][T12588] (syz.3.1734,12588,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 536.163418][ T5932] usb 7-1: USB disconnect, device number 45 [ 536.170804][T12588] (syz.3.1734,12588,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 536.221264][T12588] (syz.3.1734,12588,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 536.342775][T12588] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 536.656135][T12591] tipc: Started in network mode [ 536.661399][T12591] tipc: Node identity 9e532cb6dee2, cluster identity 4711 [ 536.671258][T12591] tipc: Enabled bearer , priority 0 [ 536.686098][T12591] syzkaller0: entered promiscuous mode [ 536.693525][T12591] syzkaller0: entered allmulticast mode [ 536.723148][T12591] tipc: Resetting bearer [ 536.735636][T12590] tipc: Resetting bearer [ 536.785715][T12590] tipc: Disabling bearer [ 536.855041][ T6211] cdc_ncm 1-1:1.1: SET_NTB_FORMAT failed [ 536.872971][ T6211] cdc_ncm 1-1:1.1: bind() failure [ 536.898420][ T6211] usb 1-1: USB disconnect, device number 50 [ 536.919463][T12596] FAULT_INJECTION: forcing a failure. [ 536.919463][T12596] name failslab, interval 1, probability 0, space 0, times 0 [ 536.958355][T12596] CPU: 1 UID: 0 PID: 12596 Comm: syz.5.1738 Tainted: G L syzkaller #0 PREEMPT(full) [ 536.958381][T12596] Tainted: [L]=SOFTLOCKUP [ 536.958387][T12596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 536.958396][T12596] Call Trace: [ 536.958401][T12596] [ 536.958407][T12596] dump_stack_lvl+0x100/0x190 [ 536.958433][T12596] should_fail_ex.cold+0x5/0xa [ 536.958451][T12596] should_failslab+0xc2/0x120 [ 536.958473][T12596] kmem_cache_alloc_node_noprof+0x8c/0x880 [ 536.958494][T12596] ? __alloc_skb+0x156/0x410 [ 536.958517][T12596] ? __alloc_skb+0x156/0x410 [ 536.958534][T12596] __alloc_skb+0x156/0x410 [ 536.958550][T12596] ? __alloc_skb+0x35d/0x410 [ 536.958567][T12596] ? __pfx___alloc_skb+0x10/0x10 [ 536.958589][T12596] ? __lock_acquire+0x4a5/0x2630 [ 536.958614][T12596] alloc_skb_with_frags+0xe0/0x810 [ 536.958644][T12596] sock_alloc_send_pskb+0x801/0x980 [ 536.958670][T12596] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 536.958686][T12596] ? selinux_socket_getpeersec_dgram+0x1a4/0x380 [ 536.958714][T12596] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 536.958742][T12596] ? __pfx_avc_has_perm+0x10/0x10 [ 536.958768][T12596] unix_dgram_sendmsg+0x3c7/0x1820 [ 536.958787][T12596] ? sock_has_perm+0x258/0x2f0 [ 536.958811][T12596] ? __pfx_sock_has_perm+0x10/0x10 [ 536.958836][T12596] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 536.958851][T12596] ? iovec_from_user+0xbb/0x140 [ 536.958876][T12596] ? PageHuge+0x180/0x180 [ 536.958892][T12596] ? __might_fault+0xc5/0x140 [ 536.958912][T12596] unix_seqpacket_sendmsg+0x12a/0x1d0 [ 536.958930][T12596] ____sys_sendmsg+0xa54/0xc30 [ 536.958957][T12596] ? __pfx_____sys_sendmsg+0x10/0x10 [ 536.958993][T12596] ___sys_sendmsg+0x190/0x1e0 [ 536.959010][T12596] ? __pfx____sys_sendmsg+0x10/0x10 [ 536.959037][T12596] ? find_held_lock+0x2b/0x80 [ 536.959074][T12596] __sys_sendmsg+0x170/0x220 [ 536.959095][T12596] ? __pfx___sys_sendmsg+0x10/0x10 [ 536.959131][T12596] do_syscall_64+0xc9/0xf80 [ 536.959149][T12596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.959166][T12596] RIP: 0033:0x7f2e40b9acb9 [ 536.959179][T12596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 536.959194][T12596] RSP: 002b:00007f2e41a34028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 536.959210][T12596] RAX: ffffffffffffffda RBX: 00007f2e40e15fa0 RCX: 00007f2e40b9acb9 [ 536.959220][T12596] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000006 [ 536.959229][T12596] RBP: 00007f2e41a34090 R08: 0000000000000000 R09: 0000000000000000 [ 536.959238][T12596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 536.959247][T12596] R13: 00007f2e40e16038 R14: 00007f2e40e15fa0 R15: 00007ffcb7f94e78 [ 536.959270][T12596] [ 537.607532][T12609] team0: No ports can be present during mode change [ 537.622795][T12609] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 537.627408][T12609] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 537.728179][ T30] audit: type=1400 audit(1769073651.969:619): avc: denied { prog_load } for pid=12610 comm="syz.6.1742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 537.728406][ T30] audit: type=1400 audit(1769073651.969:620): avc: denied { bpf } for pid=12610 comm="syz.6.1742" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 537.728670][ T30] audit: type=1400 audit(1769073651.969:621): avc: denied { perfmon } for pid=12610 comm="syz.6.1742" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 537.733042][ T30] audit: type=1400 audit(1769073651.979:622): avc: denied { read write } for pid=12610 comm="syz.6.1742" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 537.733215][ T30] audit: type=1400 audit(1769073651.979:623): avc: denied { open } for pid=12610 comm="syz.6.1742" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 537.733611][ T30] audit: type=1400 audit(1769073651.979:624): avc: denied { mounton } for pid=12610 comm="syz.6.1742" path="/303/file0" dev="tmpfs" ino=1683 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 537.737200][ T30] audit: type=1400 audit(1769073651.979:625): avc: denied { mount } for pid=12610 comm="syz.6.1742" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 537.787430][ T30] audit: type=1400 audit(1769073652.042:626): avc: denied { create } for pid=12618 comm="syz.0.1744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 537.788088][ T30] audit: type=1400 audit(1769073652.042:627): avc: denied { write } for pid=12618 comm="syz.0.1744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 537.788322][ T30] audit: type=1400 audit(1769073652.042:628): avc: denied { read } for pid=12618 comm="syz.0.1744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 537.929294][T12623] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1745'. [ 538.625970][ T90] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 538.701374][ T24] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 538.843984][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 538.850709][ T24] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 538.850906][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 538.850962][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 538.851019][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 538.851079][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 538.851224][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 538.851278][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.895731][ T90] usb 6-1: Using ep0 maxpacket: 16 [ 539.190630][ T5817] Bluetooth: hci4: unexpected event for opcode 0x0411 [ 539.191028][ T90] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 539.242287][T12636] netlink: 'syz.0.1750': attribute type 5 has an invalid length. [ 539.246799][ T24] usb 5-1: usb_control_msg returned -32 [ 539.250163][ T90] usb 6-1: config 0 interface 0 has no altsetting 0 [ 539.255836][ T24] usbtmc 5-1:16.0: can't read capabilities [ 539.271971][ T90] usb 6-1: New USB device found, idVendor=056a, idProduct=00d2, bcdDevice= 0.00 [ 539.301087][T12636] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1750'. [ 539.316177][ T90] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.330221][T12636] nbd: couldn't find a device at index 0 [ 539.386942][ T90] usb 6-1: config 0 descriptor?? [ 539.558021][ T10] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 539.824482][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 539.866273][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 539.875921][ T10] usb 7-1: config 1 has no interface number 0 [ 539.882756][ T10] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.895310][ T10] usb 7-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 539.917542][ T10] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 539.928795][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.938453][ T10] usb 7-1: Product: syz [ 539.944142][ T10] usb 7-1: Manufacturer: syz [ 539.955554][ T10] usb 7-1: SerialNumber: syz [ 540.076227][ T90] usb 6-1: string descriptor 0 read error: -71 [ 540.088900][ T90] usbhid 6-1:0.0: can't add hid device: -71 [ 540.095136][ T90] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 540.107803][ T90] usb 6-1: USB disconnect, device number 52 [ 540.253815][ T24] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 540.529424][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 540.539743][ T24] usb 1-1: config 0 has no interfaces? [ 540.547270][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 540.556514][ T24] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 540.570140][ T24] usb 1-1: Manufacturer: syz [ 540.578050][ T24] usb 1-1: config 0 descriptor?? [ 540.789199][ T90] usb 1-1: USB disconnect, device number 51 [ 540.956757][ T10] cdc_ncm 7-1:1.1: SET_NTB_FORMAT failed [ 540.982723][ T10] cdc_ncm 7-1:1.1: bind() failure [ 540.996243][ T10] usb 7-1: USB disconnect, device number 46 [ 541.483865][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 541.496958][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 541.531435][ T90] usb 5-1: USB disconnect, device number 42 [ 541.639019][T12679] (syz.4.1761,12679,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 541.667418][T12679] (syz.4.1761,12679,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 541.700920][T12679] (syz.4.1761,12679,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 541.709668][T12679] (syz.4.1761,12679,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 541.758556][ T5137] Bluetooth: hci4: command 0x0c1a tx timeout [ 541.833052][T12681] syz_tun: entered allmulticast mode [ 541.863327][T12684] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 541.880643][T12681] syz_tun: left allmulticast mode [ 542.577009][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 542.577045][ T30] audit: type=1400 audit(1769073656.945:692): avc: denied { name_bind } for pid=12691 comm="syz.5.1765" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 542.583904][T12693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.635303][T12693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.758896][ T30] audit: type=1400 audit(1769073656.945:693): avc: denied { node_bind } for pid=12691 comm="syz.5.1765" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 542.833469][ T24] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 542.866353][ T30] audit: type=1400 audit(1769073657.176:694): avc: denied { execute } for pid=12691 comm="syz.5.1765" name="file0" dev="tmpfs" ino=1744 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 542.916083][ T30] audit: type=1400 audit(1769073657.176:695): avc: denied { execute_no_trans } for pid=12691 comm="syz.5.1765" path="/306/file0" dev="tmpfs" ino=1744 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 542.943935][ T30] audit: type=1400 audit(1769073657.302:696): avc: denied { read append } for pid=12700 comm="syz.3.1767" name="sg0" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 542.975370][ T30] audit: type=1400 audit(1769073657.302:697): avc: denied { open } for pid=12700 comm="syz.3.1767" path="/dev/sg0" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 543.002187][ T30] audit: type=1400 audit(1769073657.302:698): avc: denied { create } for pid=12700 comm="syz.3.1767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 543.033826][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.050444][ T24] usb 7-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 543.062953][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.099359][ T24] usb 7-1: config 0 descriptor?? [ 543.215380][ T90] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 543.358303][ T90] usb 4-1: Using ep0 maxpacket: 16 [ 543.372322][ T90] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 543.390789][ T90] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 543.405871][ T6211] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 543.410616][ T90] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 543.446016][ T90] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 543.462146][ T90] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.479952][ T90] usb 4-1: Product: syz [ 543.484208][ T90] usb 4-1: Manufacturer: syz [ 543.488821][ T90] usb 4-1: SerialNumber: syz [ 543.504368][T12693] netlink: 'syz.6.1766': attribute type 3 has an invalid length. [ 543.568163][ T6211] usb 1-1: Using ep0 maxpacket: 16 [ 543.578855][ T6211] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.590131][ T30] audit: type=1400 audit(1769073658.100:699): avc: denied { ioctl } for pid=12692 comm="syz.6.1766" path="socket:[44163]" dev="sockfs" ino=44163 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 543.621908][ T6211] usb 1-1: config 0 interface 0 has no altsetting 0 [ 543.630630][ T6211] usb 1-1: New USB device found, idVendor=056a, idProduct=00d2, bcdDevice= 0.00 [ 543.642321][ T6211] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.650858][ T30] audit: type=1400 audit(1769073658.174:700): avc: denied { mount } for pid=12707 comm="syz.5.1770" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 543.687185][ T6211] usb 1-1: config 0 descriptor?? [ 543.738918][ T30] audit: type=1400 audit(1769073658.279:701): avc: denied { read } for pid=12707 comm="syz.5.1770" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 543.922892][ T90] usb 4-1: 0:2 : does not exist [ 545.277427][ T6211] usb 1-1: string descriptor 0 read error: -71 [ 545.384694][ T6211] usbhid 1-1:0.0: can't add hid device: -71 [ 545.394739][ T24] usbhid 7-1:0.0: can't add hid device: -71 [ 545.414893][ T24] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 545.428560][ T6211] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 545.535282][ T24] usb 7-1: USB disconnect, device number 47 [ 545.557160][ T6211] usb 1-1: USB disconnect, device number 52 [ 545.788215][T12731] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.795448][T12731] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.868511][T12731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 545.881335][T12731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.026118][ T24] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 546.088253][T12703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1768'. [ 546.111257][ T1341] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.134430][ T1341] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.185053][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 546.196160][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 546.436164][ T24] usb 7-1: config 1 has no interface number 0 [ 546.457140][ T24] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.491397][ T24] usb 7-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 546.514852][T12703] team0 (unregistering): Port device team_slave_0 removed [ 546.515015][ T24] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 546.549455][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.561953][T12703] team0 (unregistering): Port device team_slave_1 removed [ 546.609381][ T24] usb 7-1: Product: syz [ 546.614242][ T24] usb 7-1: Manufacturer: syz [ 546.666987][ T24] usb 7-1: SerialNumber: syz [ 546.754912][ T1341] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.830350][ T1341] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.863895][ T90] usb 4-1: 1:0: cannot get min/max values for control 6 (id 1) [ 546.915955][ T90] usb 4-1: USB disconnect, device number 50 [ 546.982412][T12258] udevd[12258]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 547.254679][T12755] binder: 12754:12755 ioctl c00c620f 0 returned -14 [ 547.377516][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 547.394385][ T30] audit: type=1400 audit(1769073662.101:715): avc: denied { setopt } for pid=12754 comm="syz.0.1781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 547.495530][ T30] audit: type=1400 audit(1769073662.111:716): avc: denied { shutdown } for pid=12754 comm="syz.0.1781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 547.585832][ T24] cdc_ncm 7-1:1.1: SET_NTB_FORMAT failed [ 547.622518][ T30] audit: type=1400 audit(1769073662.111:717): avc: denied { read } for pid=12754 comm="syz.0.1781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 548.093435][ T24] cdc_ncm 7-1:1.1: bind() failure [ 548.105012][ T24] usb 7-1: USB disconnect, device number 48 [ 548.200228][T12764] binder: 12761:12764 ioctl c00c620f 0 returned -14 [ 548.226285][ T30] audit: type=1400 audit(1769073663.003:718): avc: denied { name_bind } for pid=12762 comm="syz.0.1783" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 548.304868][ T30] audit: type=1400 audit(1769073663.024:719): avc: denied { create } for pid=12767 comm="syz.4.1785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 548.905802][ T30] audit: type=1400 audit(1769073663.045:720): avc: denied { load_policy } for pid=12762 comm="syz.0.1783" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 549.373763][ T5924] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 549.507495][T12776] syz_tun: entered allmulticast mode [ 549.594890][T12776] syz_tun: left allmulticast mode [ 549.710133][ T5924] usb 1-1: unable to get BOS descriptor or descriptor too short [ 549.724735][T12784] FAULT_INJECTION: forcing a failure. [ 549.724735][T12784] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 549.737869][T12784] CPU: 0 UID: 0 PID: 12784 Comm: syz.6.1787 Tainted: G L syzkaller #0 PREEMPT(full) [ 549.737895][T12784] Tainted: [L]=SOFTLOCKUP [ 549.737901][T12784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 549.737911][T12784] Call Trace: [ 549.737917][T12784] [ 549.737924][T12784] dump_stack_lvl+0x100/0x190 [ 549.737952][T12784] should_fail_ex.cold+0x5/0xa [ 549.737973][T12784] _copy_to_user+0x32/0xd0 [ 549.737999][T12784] simple_read_from_buffer+0xcb/0x170 [ 549.738022][T12784] proc_fail_nth_read+0x1af/0x230 [ 549.738048][T12784] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 549.738073][T12784] ? rw_verify_area+0xce/0x6d0 [ 549.738090][T12784] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 549.738114][T12784] vfs_read+0x1e4/0xb30 [ 549.738136][T12784] ? __pfx_vfs_read+0x10/0x10 [ 549.738152][T12784] ? find_held_lock+0x2b/0x80 [ 549.738177][T12784] ? __fget_files+0x215/0x3d0 [ 549.738206][T12784] ? __fget_files+0x21f/0x3d0 [ 549.738235][T12784] ksys_read+0x12a/0x250 [ 549.738254][T12784] ? __pfx_ksys_read+0x10/0x10 [ 549.738280][T12784] do_syscall_64+0xc9/0xf80 [ 549.738303][T12784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.738322][T12784] RIP: 0033:0x7f72efd5b58e [ 549.738336][T12784] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 549.738352][T12784] RSP: 002b:00007f72f0bbefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 549.738369][T12784] RAX: ffffffffffffffda RBX: 00007f72f0bbf6c0 RCX: 00007f72efd5b58e [ 549.738380][T12784] RDX: 000000000000000f RSI: 00007f72f0bbf0a0 RDI: 000000000000000c [ 549.738391][T12784] RBP: 00007f72f0bbf090 R08: 0000000000000000 R09: 0000000000000000 [ 549.738401][T12784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 549.738410][T12784] R13: 00007f72f0016218 R14: 00007f72f0016180 R15: 00007ffd1c5f1d68 [ 549.738436][T12784] [ 549.936150][T12763] SELinux: failed to load policy [ 549.936552][ T5924] usb 1-1: not running at top speed; connect to a high speed hub [ 549.956675][ T5924] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 549.968205][ T5924] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 549.979724][ T5924] usb 1-1: config 1 interface 0 has no altsetting 0 [ 549.987555][ T24] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 550.001350][T12783] block nbd6: shutting down sockets [ 550.048571][ T30] audit: type=1400 audit(1769073664.904:721): avc: denied { read write } for pid=12789 comm="syz.3.1792" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 550.078277][ T30] audit: type=1400 audit(1769073664.904:722): avc: denied { open } for pid=12789 comm="syz.3.1792" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 550.122784][ T30] audit: type=1400 audit(1769073664.935:723): avc: denied { ioctl } for pid=12789 comm="syz.3.1792" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d0d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 550.204037][ T5924] usb 1-1: string descriptor 0 read error: -22 [ 550.210324][ T5924] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 550.219390][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.230743][T12772] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 550.263558][ T6076] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 550.319215][T12795] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1791'. [ 550.405325][T12795] block device autoloading is deprecated and will be removed. [ 550.462347][T12795] mkiss: ax0: crc mode is auto. [ 550.508071][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 550.583352][ T6076] usb 6-1: Using ep0 maxpacket: 32 [ 550.592779][ T24] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.602467][ T30] audit: type=1400 audit(1769073665.481:724): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 550.604200][ T5924] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 53 if 0 alt 1 proto 2 vid 0x04B8 pid 0x0202 [ 550.639006][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 550.649793][ T6076] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 550.663143][ T24] usb 5-1: New USB device found, idVendor=056a, idProduct=00d2, bcdDevice= 0.00 [ 550.680370][ T6076] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.691571][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.703744][ T6076] usb 6-1: Product: syz [ 550.710536][ T6076] usb 6-1: Manufacturer: syz [ 550.715975][ T24] usb 5-1: config 0 descriptor?? [ 550.725577][ T6076] usb 6-1: SerialNumber: syz [ 550.730535][ T5924] usb 1-1: USB disconnect, device number 53 [ 550.741284][ T6076] usb 6-1: config 0 descriptor?? [ 550.752035][ T5924] usblp0: removed [ 550.758026][ T6076] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 552.568701][ T5817] Bluetooth: hci4: unexpected event for opcode 0x0411 [ 552.579865][ T24] usb 5-1: string descriptor 0 read error: -71 [ 552.627304][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 552.633470][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 552.711439][ T24] usb 5-1: USB disconnect, device number 43 [ 552.719064][ T30] audit: type=1400 audit(1769073667.707:725): avc: denied { bind } for pid=12785 comm="syz.5.1789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 552.722296][T12786] netlink: 'syz.5.1789': attribute type 14 has an invalid length. [ 552.829510][ T6076] gspca_ov534_9: reg_r err -71 [ 552.836582][ T30] audit: type=1400 audit(1769073667.707:726): avc: denied { setopt } for pid=12785 comm="syz.5.1789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 552.875310][ T30] audit: type=1400 audit(1769073667.707:727): avc: denied { accept } for pid=12785 comm="syz.5.1789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 552.911652][ T30] audit: type=1400 audit(1769073667.707:728): avc: denied { write } for pid=12785 comm="syz.5.1789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 552.939963][ T30] audit: type=1400 audit(1769073667.707:729): avc: denied { read } for pid=12785 comm="syz.5.1789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 553.121087][ T6076] gspca_ov534_9: Unknown sensor 0000 [ 553.121614][ T6076] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 553.136676][ T24] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 553.283347][ T6076] usb 6-1: USB disconnect, device number 53 [ 553.330244][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 553.406618][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 553.436075][ T24] usb 5-1: config 1 has no interface number 0 [ 553.448608][ T24] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.481483][ T24] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 553.531369][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 553.558148][T12819] (syz.5.1798,12819,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 553.595835][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.607139][ T24] usb 5-1: Product: syz [ 553.611291][ T24] usb 5-1: Manufacturer: syz [ 553.615852][ T24] usb 5-1: SerialNumber: syz [ 553.626081][T12819] (syz.5.1798,12819,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 553.633433][T12819] (syz.5.1798,12819,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 553.688997][T12819] (syz.5.1798,12819,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 553.712967][ T30] audit: type=1400 audit(1769073668.757:730): avc: denied { create } for pid=12821 comm="syz.3.1799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 553.736363][ T30] audit: type=1400 audit(1769073668.778:731): avc: denied { ioctl } for pid=12821 comm="syz.3.1799" path="socket:[44434]" dev="sockfs" ino=44434 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 553.844310][T12820] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 553.869900][ T30] audit: type=1400 audit(1769073668.862:732): avc: denied { connect } for pid=12821 comm="syz.3.1799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 553.955066][ T30] audit: type=1400 audit(1769073668.872:733): avc: denied { setopt } for pid=12821 comm="syz.3.1799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 554.587811][ T24] cdc_ncm 5-1:1.1: SET_NTB_FORMAT failed [ 554.593519][ T6076] usb 7-1: new full-speed USB device number 49 using dummy_hcd [ 554.997865][ T24] cdc_ncm 5-1:1.1: bind() failure [ 555.006867][ T24] usb 5-1: USB disconnect, device number 44 [ 555.066352][ T6076] usb 7-1: config 0 has an invalid interface number: 133 but max is 0 [ 555.083982][ T6076] usb 7-1: config 0 has no interface number 0 [ 555.096462][ T6076] usb 7-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 555.117173][T12823] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 555.132011][ T6076] usb 7-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 555.155943][ T6076] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.182005][ T6076] usb 7-1: Product: syz [ 555.195527][ T6076] usb 7-1: Manufacturer: syz [ 555.355820][ T6076] usb 7-1: SerialNumber: syz [ 555.375578][ T6076] usb 7-1: config 0 descriptor?? [ 555.711656][ T5817] Bluetooth: hci1: command 0x0c1a tx timeout [ 555.843421][ T30] audit: type=1400 audit(1769073670.993:734): avc: denied { create } for pid=12833 comm="syz.6.1802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 555.949828][ T10] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 556.669879][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 556.702433][ T5817] Bluetooth: hci1: unexpected event for opcode 0x0411 [ 556.850238][ T10] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.864571][T12866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.873180][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 556.916038][T12865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.054605][ T10] usb 4-1: New USB device found, idVendor=056a, idProduct=00d2, bcdDevice= 0.00 [ 557.073262][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.090047][T12866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.116621][T12865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.159827][ T10] usb 4-1: config 0 descriptor?? [ 557.178739][ T5932] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 557.188905][ T6076] keyspan 7-1:0.133: Keyspan 1 port adapter converter detected [ 557.197343][ T6076] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 81 [ 557.544882][ T5932] usb 5-1: config 3 has an invalid interface number: 197 but max is 1 [ 557.626544][ T5817] Bluetooth: hci0: unexpected event for opcode 0x0411 [ 557.628558][ T5932] usb 5-1: config 3 has an invalid interface number: 116 but max is 1 [ 557.811051][ T5932] usb 5-1: config 3 has no interface number 0 [ 557.867956][ T5932] usb 5-1: config 3 has no interface number 1 [ 557.947511][ T5932] usb 5-1: config 3 interface 197 altsetting 6 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 558.113560][ T5932] usb 5-1: config 3 interface 197 altsetting 6 endpoint 0x1 has invalid wMaxPacketSize 0 [ 558.252443][ T5932] usb 5-1: config 3 interface 197 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 558.333273][ T5932] usb 5-1: config 3 interface 197 altsetting 6 endpoint 0x8 has an invalid bInterval 255, changing to 7 [ 558.411996][ T5932] usb 5-1: config 3 interface 197 altsetting 6 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 558.534094][ T5932] usb 5-1: config 3 interface 197 altsetting 6 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 558.607186][ T6076] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 1 [ 558.624626][ T6076] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 2 [ 558.640338][ T6076] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 558.655759][ T5932] usb 5-1: config 3 interface 116 altsetting 4 has a duplicate endpoint with address 0x3, skipping [ 558.656358][ T6076] usb 7-1: USB disconnect, device number 49 [ 558.681067][ T6076] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 558.690598][ T10] usb 4-1: string descriptor 0 read error: -71 [ 558.691050][ T6076] keyspan 7-1:0.133: device disconnected [ 558.758316][ T5932] usb 5-1: config 3 interface 116 altsetting 4 endpoint 0xA has invalid maxpacket 1536, setting to 64 [ 558.771444][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 558.781955][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 558.795050][ T5932] usb 5-1: config 3 interface 116 altsetting 4 has a duplicate endpoint with address 0xC, skipping [ 558.814726][ T10] usb 4-1: USB disconnect, device number 51 [ 558.817705][T12886] syz_tun: entered allmulticast mode [ 558.821332][ T5932] usb 5-1: config 3 interface 116 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 558.845516][ T5932] usb 5-1: config 3 interface 116 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 558.858610][ T5932] usb 5-1: config 3 interface 197 has no altsetting 0 [ 558.865964][ T5932] usb 5-1: config 3 interface 116 has no altsetting 0 [ 558.867895][T12886] syz_tun: left allmulticast mode [ 558.874820][ T5932] usb 5-1: New USB device found, idVendor=05d9, idProduct=a758, bcdDevice=c1.93 [ 558.895482][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.917796][ T5932] usb 5-1: Product: syz [ 558.926499][ T5932] usb 5-1: Manufacturer: syz [ 558.934564][ T5932] usb 5-1: SerialNumber: syz [ 558.952138][ T5932] io_edgeport 5-1:3.197: required endpoints missing [ 559.041570][ T30] audit: type=1400 audit(1769073674.353:735): avc: denied { map } for pid=12894 comm="syz.0.1818" path="/dev/hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 559.124873][ T30] audit: type=1326 audit(1769073674.437:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12896 comm="syz.5.1819" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2e40b9acb9 code=0x0 [ 559.175470][ T5932] io_edgeport 5-1:3.116: required endpoints missing [ 559.184160][ T30] audit: type=1400 audit(1769073674.500:737): avc: denied { unlink } for pid=12896 comm="syz.5.1819" name="file0" dev="tmpfs" ino=1818 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 559.194646][ T5932] usb 5-1: USB disconnect, device number 45 [ 559.226402][ T30] audit: type=1400 audit(1769073674.531:738): avc: denied { rename } for pid=12896 comm="syz.5.1819" name="file0" dev="tmpfs" ino=1818 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 559.236346][ T10] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 559.456631][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 559.467186][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 559.476087][ T10] usb 4-1: config 1 has no interface number 0 [ 559.482271][ T10] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.494343][ T10] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 559.505443][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 559.516128][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.524203][ T10] usb 4-1: Product: syz [ 559.529081][T12900] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 559.538125][ T10] usb 4-1: Manufacturer: syz [ 559.542951][ T10] usb 4-1: SerialNumber: syz [ 559.962380][ T5817] Bluetooth: hci0: unexpected event for opcode 0x0411 [ 560.261975][ T30] audit: type=1400 audit(1769073675.623:739): avc: denied { write } for pid=12916 comm="syz.5.1824" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 560.462409][ T30] audit: type=1400 audit(1769073675.833:740): avc: denied { create } for pid=12932 comm="syz.0.1830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 560.628651][T12937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1830'. [ 560.722835][ T5915] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 560.866455][ T10] cdc_ncm 4-1:1.1: SET_NTB_FORMAT failed [ 561.016853][ T5915] usb 5-1: Using ep0 maxpacket: 16 [ 561.024184][ T5915] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.035312][ T5915] usb 5-1: config 0 interface 0 has no altsetting 0 [ 561.045408][ T5915] usb 5-1: New USB device found, idVendor=056a, idProduct=00d2, bcdDevice= 0.00 [ 561.054547][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.063275][ T10] cdc_ncm 4-1:1.1: bind() failure [ 561.078265][ T5915] usb 5-1: config 0 descriptor?? [ 561.094608][ T10] usb 4-1: USB disconnect, device number 52 [ 561.107452][ T30] audit: type=1400 audit(1769073675.896:741): avc: denied { create } for pid=12932 comm="syz.0.1830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 561.231671][ T30] audit: type=1400 audit(1769073675.959:742): avc: denied { write } for pid=12932 comm="syz.0.1830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 561.630409][ T30] audit: type=1400 audit(1769073676.831:743): avc: denied { setopt } for pid=12932 comm="syz.0.1830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 562.306451][ T30] audit: type=1400 audit(1769073676.852:744): avc: denied { write } for pid=12932 comm="syz.0.1830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 562.791252][ T5915] usb 5-1: string descriptor 0 read error: -71 [ 562.820540][ T5915] usbhid 5-1:0.0: can't add hid device: -71 [ 562.826984][ T5915] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 562.836382][ T10] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 562.854155][ T5915] usb 5-1: USB disconnect, device number 46 [ 562.867408][T12958] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1836'. [ 562.989957][ T10] usb 1-1: config 0 has an invalid interface number: 11 but max is 0 [ 563.038514][ T10] usb 1-1: config 0 has no interface number 0 [ 563.269551][ T10] usb 1-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 563.298937][ T10] usb 1-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 563.359454][ T10] usb 1-1: config 0 interface 11 has no altsetting 0 [ 563.383798][ T10] usb 1-1: New USB device found, idVendor=06cd, idProduct=012a, bcdDevice=d5.1b [ 563.421711][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.819817][ T10] usb 1-1: config 0 descriptor?? [ 563.825356][T12951] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 563.837347][ T10] keyspan 1-1:0.11: Keyspan 4 port adapter converter detected [ 563.859767][ T5817] Bluetooth: hci1: unexpected event for opcode 0x0411 [ 563.860164][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 563.860176][ T30] audit: type=1400 audit(1769073679.403:747): avc: denied { create } for pid=12976 comm="syz.3.1841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 564.228857][ T10] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 81 [ 564.255964][ T10] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 1 [ 564.332785][T12983] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 564.679968][ T10] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 564.691248][ T10] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 82 [ 564.699175][ T10] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 2 [ 564.759107][ T10] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 564.786794][T12987] bridge0: port 3(veth0_to_bridge) entered blocking state [ 564.797812][T12986] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1841'. [ 564.814466][ T10] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 83 [ 564.824777][ T10] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 3 [ 564.833599][T12987] bridge0: port 3(veth0_to_bridge) entered disabled state [ 564.842612][ T10] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 564.866811][ T10] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 84 [ 564.877886][T12987] veth0_to_bridge: entered allmulticast mode [ 564.893896][ T10] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 4 [ 564.905082][T12987] veth0_to_bridge: entered promiscuous mode [ 564.940007][ T10] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 565.404342][ T30] audit: type=1400 audit(1769073681.030:748): avc: denied { bind } for pid=12993 comm="syz.6.1844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 565.459219][ T30] audit: type=1400 audit(1769073681.051:749): avc: denied { ioctl } for pid=12993 comm="syz.6.1844" path="socket:[44764]" dev="sockfs" ino=44764 ioctlcmd=0xf517 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 565.626321][ T30] audit: type=1400 audit(1769073681.261:750): avc: denied { block_suspend } for pid=12993 comm="syz.6.1844" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 565.756415][ T6076] usb 1-1: USB disconnect, device number 54 [ 565.859199][ T6076] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 566.009236][ T6076] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 566.061084][ T6076] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 566.112620][ T5924] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 566.174976][ T6076] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 566.202984][ T6076] keyspan 1-1:0.11: device disconnected [ 566.319888][T13018] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1849'. [ 566.331682][ T5924] usb 6-1: Using ep0 maxpacket: 8 [ 566.338322][ T5924] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 566.370127][ T5924] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 566.384754][ T5924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.403872][ T30] audit: type=1400 audit(1769073682.080:751): avc: denied { write } for pid=13016 comm="syz.6.1850" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 566.439043][ T5924] usb 6-1: config 0 descriptor?? [ 566.460513][ T5924] iowarrior 6-1:0.0: no interrupt-in endpoint found [ 566.479214][ T30] audit: type=1400 audit(1769073682.133:752): avc: denied { append } for pid=13023 comm="syz.0.1852" name="comedi0" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 566.550824][ T30] audit: type=1400 audit(1769073682.154:753): avc: denied { read write } for pid=13016 comm="syz.6.1850" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 566.601381][ T30] audit: type=1400 audit(1769073682.154:754): avc: denied { open } for pid=13016 comm="syz.6.1850" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 566.794342][ T30] audit: type=1400 audit(1769073682.154:755): avc: denied { ioctl } for pid=13016 comm="syz.6.1850" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 567.183423][ T5817] Bluetooth: hci2: unexpected event for opcode 0x0411 [ 568.480946][ T30] audit: type=1400 audit(1769073684.254:756): avc: denied { create } for pid=13056 comm="syz.6.1859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 568.637629][ T10] usb 6-1: USB disconnect, device number 54 [ 568.757618][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 568.757634][ T30] audit: type=1400 audit(1769073684.548:760): avc: denied { read write } for pid=13062 comm="syz.5.1861" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 568.969879][ T90] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 569.056201][ T30] audit: type=1400 audit(1769073684.590:761): avc: denied { open } for pid=13062 comm="syz.5.1861" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 569.239449][ T30] audit: type=1400 audit(1769073685.062:762): avc: denied { map } for pid=13062 comm="syz.5.1861" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 569.241007][ T90] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 569.297499][ T30] audit: type=1400 audit(1769073685.115:763): avc: denied { ioctl } for pid=13062 comm="syz.5.1861" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=45072 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 569.368026][ T90] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 569.408559][ T90] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 569.699332][T13075] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1862'. [ 569.816915][ T90] usb 7-1: language id specifier not provided by device, defaulting to English [ 569.830992][ T90] usb 7-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 569.848284][ T90] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.877396][ T5817] Bluetooth: hci3: unexpected event for opcode 0x0411 [ 569.896723][ T90] usb 7-1: Manufacturer: ‰ [ 569.925074][ T90] usb 7-1: SerialNumber: syz [ 569.939426][ T90] usb 7-1: config 0 descriptor?? [ 569.959849][ T90] em28xx 7-1:0.0: New device ‰ @ 480 Mbps (2013:0251, interface 0, class 0) [ 569.980591][ T90] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 570.301159][T13060] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1860'. [ 570.310183][ T30] audit: type=1400 audit(1769073686.165:764): avc: denied { ioctl } for pid=13058 comm="syz.6.1860" path="socket:[44990]" dev="sockfs" ino=44990 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 570.359467][ T30] audit: type=1400 audit(1769073686.165:765): avc: denied { bind } for pid=13058 comm="syz.6.1860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 570.405971][ T30] audit: type=1400 audit(1769073686.207:766): avc: denied { connect } for pid=13058 comm="syz.6.1860" lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 570.426857][ T30] audit: type=1400 audit(1769073686.207:767): avc: denied { name_connect } for pid=13058 comm="syz.6.1860" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 570.727975][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 570.740773][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 570.753492][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 570.766206][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 570.778877][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 570.791558][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 570.804207][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 570.816944][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 570.829673][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 570.842350][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 571.492393][ T90] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 571.528124][ T90] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 571.573696][ T90] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 571.678066][ T90] em28xx 7-1:0.0: No AC97 audio processor [ 572.009041][T13098] netlink: 'syz.0.1869': attribute type 1 has an invalid length. [ 572.082667][T13101] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1869'. [ 572.377643][T13098] bond2: entered promiscuous mode [ 572.637305][ T90] usb 7-1: USB disconnect, device number 50 [ 572.644217][ T90] em28xx 7-1:0.0: Disconnecting em28xx [ 572.744988][T13098] 8021q: adding VLAN 0 to HW filter on device bond2 [ 572.813435][T13101] bond2: entered allmulticast mode [ 572.823440][ T90] em28xx 7-1:0.0: Freeing device [ 573.122664][ T10] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 573.494131][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 573.507618][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 573.597252][ T10] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 573.719588][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.943296][ T10] usb 6-1: config 0 descriptor?? [ 574.012869][ T10] iowarrior 6-1:0.0: no interrupt-in endpoint found [ 574.030367][T13108] bond2: (slave bridge1): making interface the new active one [ 574.090430][T13108] bridge1: entered promiscuous mode [ 574.115864][T13108] bridge1: entered allmulticast mode [ 574.135558][T13108] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 574.322732][ T10] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 574.503720][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 574.512624][ T10] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.527125][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 574.535610][ T10] usb 5-1: New USB device found, idVendor=056a, idProduct=00d2, bcdDevice= 0.00 [ 575.051261][ T5137] Bluetooth: hci0: unexpected event for opcode 0x0411 [ 575.495071][ C1] net_ratelimit: 3466 callbacks suppressed [ 575.495085][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 575.513732][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 575.526496][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 575.539293][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 575.552083][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 575.564865][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 575.577759][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 575.590502][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 575.603209][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 575.615956][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 575.761338][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.781428][ T10] usb 5-1: config 0 descriptor?? [ 576.142017][ T90] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 576.315463][ T90] usb 1-1: Using ep0 maxpacket: 16 [ 577.090603][ T5932] usb 6-1: USB disconnect, device number 55 [ 577.125178][ T90] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.278199][ T10] usb 5-1: string descriptor 0 read error: -71 [ 577.333129][ T90] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.344071][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 577.350081][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 577.384464][ T90] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 577.425140][ T10] usb 5-1: USB disconnect, device number 47 [ 577.459989][ T90] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 577.540054][ T90] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.584128][ T90] usb 1-1: config 0 descriptor?? [ 577.808686][ T5932] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 577.980205][ T5932] usb 6-1: Using ep0 maxpacket: 16 [ 577.996172][ T5932] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 578.031091][ T5932] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 578.051377][ T90] input: HID 05ac:8241 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:8241.0020/input/input45 [ 578.077925][ T5932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.112991][ T5932] usb 6-1: config 0 descriptor?? [ 578.178806][ T30] audit: type=1400 audit(1769074462.435:768): avc: denied { read } for pid=5170 comm="acpid" name="event4" dev="devtmpfs" ino=3673 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 578.217862][ T90] appleir 0003:05AC:8241.0020: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 578.286841][ T90] usb 1-1: USB disconnect, device number 55 [ 578.302334][T13144] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1881'. [ 578.313466][ T30] audit: type=1400 audit(1769074462.446:769): avc: denied { open } for pid=5170 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3673 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 578.418340][ T30] audit: type=1400 audit(1769074462.477:770): avc: denied { ioctl } for pid=5170 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3673 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 578.613403][T13145] fido_id[13145]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 578.723997][ T30] audit: type=1400 audit(1769074462.918:771): avc: denied { bind } for pid=13136 comm="syz.5.1879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 578.758476][ T5932] mcp2221 0003:04D8:00DD.0021: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 580.267315][ C1] net_ratelimit: 3177 callbacks suppressed [ 580.267333][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 580.286469][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 580.299915][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 580.313234][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 580.326585][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 580.339878][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 580.361069][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 580.374828][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 580.388159][ T30] audit: type=1400 audit(1769074464.766:772): avc: denied { create } for pid=13147 comm="syz.6.1883" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 580.388507][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 580.422114][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 580.550664][T13148] overlayfs: failed to clone upperpath [ 580.788069][T13155] syz_tun: entered allmulticast mode [ 580.805236][ T30] audit: type=1400 audit(1769074464.850:773): avc: denied { unmount } for pid=13147 comm="syz.6.1883" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 580.843714][T13155] syz_tun: left allmulticast mode [ 580.920117][ T30] audit: type=1400 audit(1769074464.934:774): avc: denied { ioctl } for pid=13149 comm="syz.4.1882" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 581.232536][ T30] audit: type=1400 audit(1769074464.966:775): avc: denied { ioctl } for pid=13149 comm="syz.4.1882" path="socket:[46323]" dev="sockfs" ino=46323 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 582.569159][ T5817] Bluetooth: hci4: unexpected event for opcode 0x0411 [ 582.578266][ T6211] usb 6-1: USB disconnect, device number 56 [ 582.614850][ T30] audit: type=1400 audit(1769074465.029:776): avc: denied { connect } for pid=13149 comm="syz.4.1882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 582.636080][ T30] audit: type=1400 audit(1769074465.039:777): avc: denied { write } for pid=13149 comm="syz.4.1882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 582.969001][ T10] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 582.977523][ T5817] Bluetooth: hci3: unexpected event for opcode 0x0c7d [ 583.144805][T13176] /dev/nullb0: Can't open blockdev [ 583.181882][ T10] usb 1-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=c2.c6 [ 583.577656][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.128534][T13170] ceph: No mds server is up or the cluster is laggy [ 584.330918][ T10] usb 1-1: config 0 descriptor?? [ 585.020342][ T10] usb 1-1: can't set config #0, error -71 [ 585.037368][ T10] usb 1-1: USB disconnect, device number 56 [ 585.038775][ C1] net_ratelimit: 3438 callbacks suppressed [ 585.038787][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 585.063583][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 585.077453][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 585.090361][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 585.103320][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 585.116331][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 585.130203][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 585.144056][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 585.158172][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 585.171006][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 586.143790][T13196] ceph: No mds server is up or the cluster is laggy [ 586.165871][T13207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1894'. [ 586.177456][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 586.177470][ T30] audit: type=1400 audit(1769074470.824:783): avc: denied { getopt } for pid=13195 comm="syz.4.1894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 586.280886][T13208] syz_tun: entered allmulticast mode [ 587.146725][ T30] audit: type=1400 audit(1769075239.861:784): avc: denied { mount } for pid=13199 comm="syz.6.1895" name="/" dev="ramfs" ino=46501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 587.175751][T13204] syz_tun: left allmulticast mode [ 587.419560][T13214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1896'. [ 587.450177][T13216] (syz.0.1898,13216,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 587.477638][T13214] netlink: 'syz.3.1896': attribute type 18 has an invalid length. [ 587.531660][T13216] (syz.0.1898,13216,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 587.552689][T13214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1896'. [ 587.564707][ T30] audit: type=1400 audit(1769075240.301:785): avc: denied { create } for pid=13218 comm="syz.4.1899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 587.612212][T13216] (syz.0.1898,13216,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 587.726025][T13214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1896'. [ 587.726047][T13214] netlink: 'syz.3.1896': attribute type 18 has an invalid length. [ 587.726059][T13214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1896'. [ 587.859698][T13217] geneve2: entered promiscuous mode [ 587.876175][T10825] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 53935 - 0 [ 587.876217][T10825] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 53935 - 0 [ 587.876247][T10825] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 53935 - 0 [ 587.876277][T10825] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 53935 - 0 [ 587.896568][ T30] audit: type=1400 audit(1769075240.333:786): avc: denied { setopt } for pid=13218 comm="syz.4.1899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 587.896609][ T30] audit: type=1400 audit(1769075240.375:787): avc: denied { bind } for pid=13218 comm="syz.4.1899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 587.896644][ T30] audit: type=1400 audit(1769075240.375:788): avc: denied { read } for pid=13218 comm="syz.4.1899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 587.896679][ T30] audit: type=1400 audit(1769075240.459:789): avc: denied { write } for pid=13218 comm="syz.4.1899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 587.896713][ T30] audit: type=1400 audit(1769075240.585:790): avc: denied { getopt } for pid=13218 comm="syz.4.1899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 587.955527][T13216] (syz.0.1898,13216,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 587.955660][ T5817] Bluetooth: hci1: unexpected event for opcode 0x0411 [ 588.061053][T13216] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 588.326291][T13232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 588.376986][T13232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 589.810530][ C1] net_ratelimit: 3585 callbacks suppressed [ 589.810544][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 589.829913][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 589.842697][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 589.855519][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 589.868257][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 589.880995][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 589.893719][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 589.906491][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 589.919249][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 589.932712][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 590.379190][ T10] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 591.933599][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 591.954225][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 592.085764][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 592.267293][ T10] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 592.341406][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.428635][ T10] usb 5-1: config 0 descriptor?? [ 592.505236][ T10] usb 5-1: can't set config #0, error -71 [ 592.557428][ T10] usb 5-1: USB disconnect, device number 48 [ 592.614220][ T30] audit: type=1400 audit(1769075245.604:791): avc: denied { watch } for pid=13254 comm="syz.6.1909" path="/341" dev="tmpfs" ino=1884 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 593.735162][T13273] batadv_slave_0: entered promiscuous mode [ 594.172810][ T10] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 594.409936][ T10] usb 5-1: device descriptor read/64, error -71 [ 594.533769][ T5932] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 594.573899][ T30] audit: type=1400 audit(1769075247.661:792): avc: denied { read } for pid=13294 comm="syz.0.1919" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 594.582826][ C1] net_ratelimit: 3761 callbacks suppressed [ 594.582839][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 594.620557][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 594.634714][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 594.646947][ T30] audit: type=1400 audit(1769075247.682:793): avc: denied { open } for pid=13294 comm="syz.0.1919" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 594.648566][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 594.670922][ T10] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 594.684436][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 594.704146][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 594.716913][ T30] audit: type=1400 audit(1769075247.682:794): avc: denied { map } for pid=13294 comm="syz.0.1919" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 594.718030][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 594.741840][ T5932] usb 6-1: Using ep0 maxpacket: 8 [ 594.754329][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 594.760761][ T30] audit: type=1400 audit(1769075247.682:795): avc: denied { create } for pid=13294 comm="syz.0.1919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 594.774642][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 594.798989][ T5932] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 594.804025][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 594.824565][ T5932] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 594.848173][ T10] usb 5-1: device descriptor read/64, error -71 [ 594.864364][ T5932] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 595.102005][ T10] usb usb5-port1: attempt power cycle [ 595.492561][ T5932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.511243][ T5932] usb 6-1: config 0 descriptor?? [ 596.406152][ T5932] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 596.896301][ T5817] Bluetooth: hci0: unexpected event for opcode 0x0411 [ 596.908990][T13289] iowarrior 6-1:0.0: Error -90 while submitting URB [ 596.924431][ T10] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 597.053701][ T5932] usb 6-1: USB disconnect, device number 57 [ 597.227190][ T10] usb 5-1: device descriptor read/8, error -71 [ 597.582671][T13273] batadv_slave_0: left promiscuous mode [ 598.073957][T13307] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1923'. [ 598.422539][ T5817] Bluetooth: hci3: unexpected event for opcode 0x0411 [ 598.545358][ T30] audit: type=1400 audit(1769075251.830:796): avc: denied { setopt } for pid=13309 comm="syz.4.1924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 598.613487][T13313] (syz.0.1925,13313,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 598.650780][T13313] (syz.0.1925,13313,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 598.696771][T13313] (syz.0.1925,13313,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 598.778027][T13313] (syz.0.1925,13313,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 598.841926][T13322] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 598.861884][ T30] audit: type=1400 audit(1769075252.155:797): avc: denied { connect } for pid=13314 comm="syz.3.1926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 598.931708][T13316] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 599.354176][ C1] net_ratelimit: 3367 callbacks suppressed [ 599.354190][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 599.373372][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 599.386548][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 599.401262][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 599.414298][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 599.428152][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 599.442381][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 599.444380][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 599.445473][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 599.446581][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 599.535957][T13319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1928'. [ 599.535986][T13319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1928'. [ 599.796521][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 599.807764][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 604.125234][ C0] net_ratelimit: 15132 callbacks suppressed [ 604.125254][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 604.125480][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 604.125613][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 604.125962][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 604.126311][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 604.126663][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 604.126998][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 604.127369][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 604.127702][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 604.127763][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 608.897298][ C0] net_ratelimit: 15596 callbacks suppressed [ 608.897319][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 608.897363][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 608.897707][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 608.898108][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 608.898459][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 608.898832][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 608.899104][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 608.899312][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 608.899698][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 608.900087][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 613.668858][ C0] net_ratelimit: 15861 callbacks suppressed [ 613.668894][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 613.669233][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 613.669298][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 613.669584][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 613.669933][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 613.670286][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 613.670618][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 613.670983][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 613.671020][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 613.671320][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 618.440744][ C0] net_ratelimit: 15818 callbacks suppressed [ 618.440764][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 618.441141][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 618.441190][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 618.441518][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 618.441922][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 618.442325][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 618.442712][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 618.443087][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 618.443397][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 618.443505][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 623.212469][ C0] net_ratelimit: 16111 callbacks suppressed [ 623.212488][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 623.213259][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 623.213493][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 623.213827][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 623.214173][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 623.214539][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 623.214869][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 623.214957][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 623.215203][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 623.215561][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 627.984036][ C0] net_ratelimit: 15969 callbacks suppressed [ 627.984055][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 627.984426][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 627.984538][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 627.984774][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 627.985122][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 627.985477][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 627.985815][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 627.986189][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 627.986283][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 627.986536][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 632.756115][ C0] net_ratelimit: 16028 callbacks suppressed [ 632.756134][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 632.756472][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 632.756830][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 632.757178][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 632.757401][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 632.757514][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 632.757843][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 632.758205][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 632.758541][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 632.758887][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 637.527926][ C0] net_ratelimit: 16264 callbacks suppressed [ 637.527945][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 637.528298][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 637.528355][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 637.528638][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 637.528988][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 637.529334][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 637.529686][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 637.530036][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 637.530214][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 637.530369][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 642.299528][ C0] net_ratelimit: 15988 callbacks suppressed [ 642.299547][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 642.299765][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 642.299964][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 642.300375][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 642.300810][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 642.301238][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 642.301537][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 642.301629][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 642.302041][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 642.302473][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 647.071362][ C1] net_ratelimit: 16327 callbacks suppressed [ 647.071381][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 647.071505][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 647.071831][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 647.072142][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 647.072484][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 647.072836][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 647.073168][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 647.073353][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 647.073509][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 647.073834][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 651.843167][ C0] net_ratelimit: 16999 callbacks suppressed [ 651.843186][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 651.843549][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 651.843574][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 651.844005][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 651.844398][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 651.844772][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 651.845162][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 651.845318][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 651.845568][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 651.845943][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 656.614963][ C0] net_ratelimit: 22133 callbacks suppressed [ 656.614986][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 656.615339][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 656.615392][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 656.615664][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 656.616007][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 656.616348][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 656.616686][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 656.617029][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 656.617275][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 656.617446][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 659.027612][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 659.037850][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 661.386715][ C0] net_ratelimit: 16429 callbacks suppressed [ 661.386733][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 661.387152][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 661.387497][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 661.387846][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 661.388185][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 661.388514][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 661.388613][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 661.388875][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 661.389213][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 661.389541][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 666.158431][ C0] net_ratelimit: 16093 callbacks suppressed [ 666.158450][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 666.158805][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 666.159153][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 666.159421][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 666.159548][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 666.159884][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 666.160217][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 666.160631][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 666.160976][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 666.161308][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 670.930292][ C0] net_ratelimit: 16507 callbacks suppressed [ 670.930311][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 670.930662][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 670.930997][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 670.931368][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 670.931706][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 670.931855][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 670.932275][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 670.932606][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 670.932953][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 670.933308][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 675.702063][ C0] net_ratelimit: 16401 callbacks suppressed [ 675.702082][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 675.702441][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 675.702765][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 675.702772][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 675.703121][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 675.703450][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 675.703778][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 675.704134][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 675.704462][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 675.704494][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 680.474102][ C0] net_ratelimit: 16284 callbacks suppressed [ 680.474120][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 680.474466][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 680.474821][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 680.475191][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 680.475260][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 680.475533][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 680.475888][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 680.476227][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 680.476598][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 680.476955][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 685.245925][ C0] net_ratelimit: 16037 callbacks suppressed [ 685.245945][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 685.246298][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 685.246659][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 685.246987][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 685.247182][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 685.247320][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 685.247679][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 685.248018][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 685.248380][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 685.248703][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 690.017408][ C0] net_ratelimit: 16045 callbacks suppressed [ 690.017440][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 690.017792][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 690.018147][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 690.018497][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 690.018700][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 690.018836][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 690.019196][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 690.019561][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 690.019921][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 690.020262][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 694.788959][ C0] net_ratelimit: 16088 callbacks suppressed [ 694.788976][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 694.789327][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 694.789732][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 694.790081][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 694.790257][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 694.790424][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 694.790752][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 694.791098][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 694.791455][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 694.791785][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 699.561051][ C1] net_ratelimit: 15991 callbacks suppressed [ 699.561071][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 699.561237][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 699.561574][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 699.561908][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 699.562260][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 699.562592][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 699.562943][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 699.563282][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 699.563382][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 699.563608][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 704.332968][ C0] net_ratelimit: 19699 callbacks suppressed [ 704.332986][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 704.333362][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 704.333571][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 704.333715][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 704.334101][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 704.334456][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 704.334835][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 704.335243][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 704.335440][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 704.335624][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 709.104734][ C0] net_ratelimit: 16523 callbacks suppressed [ 709.104754][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 709.105127][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 709.105510][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 709.105556][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 709.105898][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 709.106279][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 709.106692][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 709.107080][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 709.107264][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 709.107462][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 713.876583][ C0] net_ratelimit: 15929 callbacks suppressed [ 713.876603][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 713.876990][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 713.877387][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 713.877768][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 713.877929][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 713.878181][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 713.878576][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 713.878973][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 713.879366][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 713.879775][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 718.469216][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 718.480073][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 718.648475][ C0] net_ratelimit: 16098 callbacks suppressed [ 718.648494][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 718.648869][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 718.649134][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 718.649292][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 718.649677][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 718.650058][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 718.650452][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 718.650823][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 718.650925][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 718.651229][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 723.419904][ C0] net_ratelimit: 16188 callbacks suppressed [ 723.419925][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 723.420285][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 723.420622][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 723.420730][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 723.420987][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 723.421314][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 723.421654][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 723.422006][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 723.422350][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 723.422482][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 728.191982][ C0] net_ratelimit: 16263 callbacks suppressed [ 728.192001][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 728.192374][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 728.192779][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 728.192916][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 728.193155][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 728.193540][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 728.193932][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 728.194316][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 728.194705][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 728.194728][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 732.963707][ C0] net_ratelimit: 16337 callbacks suppressed [ 732.963726][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 732.964093][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 732.964470][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 732.964575][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 732.964845][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 732.965229][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 732.965624][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 732.966015][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 732.966385][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 732.966548][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 737.735613][ C0] net_ratelimit: 15963 callbacks suppressed [ 737.735634][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 737.736073][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 737.736321][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 737.736708][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 737.737083][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 737.737488][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 737.737830][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 737.737853][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 737.738287][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 737.738650][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 742.507142][ C0] net_ratelimit: 16286 callbacks suppressed [ 742.507161][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 742.507537][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 742.507909][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 742.508318][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 742.508606][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 742.508734][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 742.509127][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 742.509498][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 742.509882][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 742.510290][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 745.393947][ T31] INFO: task kworker/0:1:10 blocked for more than 145 seconds. [ 745.393976][ T31] Tainted: G L syzkaller #0 [ 745.393988][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 745.393996][ T31] task:kworker/0:1 state:D stack:21400 pid:10 tgid:10 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 745.404957][ T31] Workqueue: events cfg80211_mgmt_registrations_update_wk [ 745.404997][ T31] Call Trace: [ 745.405005][ T31] [ 745.405017][ T31] ? __schedule+0xf65/0x5e10 [ 745.405052][ T31] __schedule+0xfe4/0x5e10 [ 745.405090][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 745.405117][ T31] ? __pfx___schedule+0x10/0x10 [ 745.405144][ T31] ? find_held_lock+0x2b/0x80 [ 745.405169][ T31] ? schedule+0x2bf/0x390 [ 745.405202][ T31] schedule+0xdd/0x390 [ 745.405229][ T31] schedule_preempt_disabled+0x13/0x30 [ 745.405247][ T31] __mutex_lock+0xc9a/0x1b90 [ 745.405270][ T31] ? cfg80211_mgmt_registrations_update_wk+0x2a/0xe0 [ 745.405300][ T31] ? irqentry_exit+0x180/0x670 [ 745.405324][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 745.405355][ T31] ? lock_acquire+0x5e/0x330 [ 745.405380][ T31] ? cfg80211_mgmt_registrations_update_wk+0x2a/0xe0 [ 745.405408][ T31] cfg80211_mgmt_registrations_update_wk+0x2a/0xe0 [ 745.405441][ T31] process_one_work+0x9c2/0x1840 [ 745.441514][ T31] ? __pfx_process_one_work+0x10/0x10 [ 745.441560][ T31] ? assign_work+0x19c/0x250 [ 745.441584][ T31] worker_thread+0x5da/0xe40 [ 745.441617][ T31] ? kthread+0x17d/0x730 [ 745.441636][ T31] ? __pfx_worker_thread+0x10/0x10 [ 745.441657][ T31] kthread+0x3b3/0x730 [ 745.452987][ T31] ? __pfx_kthread+0x10/0x10 [ 745.453012][ T31] ? ret_from_fork+0x79/0xaf0 [ 745.453033][ T31] ? ret_from_fork+0x79/0xaf0 [ 745.453060][ T31] ? rcu_is_watching+0x12/0xc0 [ 745.453084][ T31] ? __pfx_kthread+0x10/0x10 [ 745.464839][ T31] ret_from_fork+0x754/0xaf0 [ 745.464868][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 745.464893][ T31] ? __switch_to+0x7b9/0x10c0 [ 745.464919][ T31] ? __pfx_kthread+0x10/0x10 [ 745.464942][ T31] ret_from_fork_asm+0x1a/0x30 [ 745.464974][ T31] [ 745.465022][ T31] INFO: task kworker/u8:8:1341 blocked for more than 145 seconds. [ 745.465039][ T31] Tainted: G L syzkaller #0 [ 745.465056][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 745.465066][ T31] task:kworker/u8:8 state:D stack:24056 pid:1341 tgid:1341 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 745.465127][ T31] Workqueue: events_unbound linkwatch_event [ 745.465147][ T31] Call Trace: [ 745.465155][ T31] [ 745.465165][ T31] ? __schedule+0xf65/0x5e10 [ 745.465194][ T31] __schedule+0xfe4/0x5e10 [ 745.465223][ T31] ? __lock_acquire+0x4a5/0x2630 [ 745.465255][ T31] ? __pfx___schedule+0x10/0x10 [ 745.465282][ T31] ? find_held_lock+0x2b/0x80 [ 745.465307][ T31] ? schedule+0x2bf/0x390 [ 745.465339][ T31] schedule+0xdd/0x390 [ 745.465367][ T31] schedule_preempt_disabled+0x13/0x30 [ 745.465385][ T31] __mutex_lock+0xc9a/0x1b90 [ 745.465405][ T31] ? look_up_lock_class+0x64/0x120 [ 745.465426][ T31] ? linkwatch_event+0x51/0xc0 [ 745.465448][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 747.278972][ C0] net_ratelimit: 16030 callbacks suppressed [ 747.278991][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 747.279180][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 747.279828][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 747.280222][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 747.280626][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 747.280885][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 747.281051][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 747.281451][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 747.281874][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 747.282244][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:ce:3d:b4:f7:24, vlan:0) [ 748.157613][ T31] ? linkwatch_event+0x51/0xc0 [ 748.157646][ T31] linkwatch_event+0x51/0xc0 [ 748.157664][ T31] ? __pfx_linkwatch_event+0x10/0x10 [ 748.157685][ T31] ? rcu_is_watching+0x12/0xc0 [ 748.157711][ T31] process_one_work+0x9c2/0x1840 [ 748.157744][ T31] ? __pfx_process_one_work+0x10/0x10 [ 748.157774][ T31] ? assign_work+0x19c/0x250 [ 748.157798][ T31] worker_thread+0x5da/0xe40 [ 748.157830][ T31] ? kthread+0x17d/0x730 [ 748.157849][ T31] ? __pfx_worker_thread+0x10/0x10 [ 748.157870][ T31] kthread+0x3b3/0x730 [ 748.157891][ T31] ? __pfx_kthread+0x10/0x10 [ 748.157910][ T31] ? ret_from_fork+0x79/0xaf0 [ 748.157931][ T31] ? ret_from_fork+0x79/0xaf0 [ 748.157953][ T31] ? rcu_is_watching+0x12/0xc0 [ 748.157977][ T31] ? __pfx_kthread+0x10/0x10 [ 748.158004][ T31] ret_from_fork+0x754/0xaf0 [ 748.158027][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 748.158051][ T31] ? __switch_to+0x7b9/0x10c0 [ 748.158076][ T31] ? __pfx_kthread+0x10/0x10 [ 748.158098][ T31] ret_from_fork_asm+0x1a/0x30 [ 748.158131][ T31] [ 748.158234][ T31] INFO: task kworker/u8:27:10833 blocked for more than 148 seconds. [ 748.158252][ T31] Tainted: G L syzkaller #0 [ 748.158263][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 748.158272][ T31] task:kworker/u8:27 state:D stack:23464 pid:10833 tgid:10833 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 748.158330][ T31] Workqueue: cfg80211 cfg80211_dfs_channels_update_work [ 748.158363][ T31] Call Trace: [ 748.158370][ T31] [ 748.158381][ T31] ? __schedule+0xf65/0x5e10 [ 748.158409][ T31] __schedule+0xfe4/0x5e10 [ 748.158437][ T31] ? __lock_acquire+0x4a5/0x2630 [ 748.158470][ T31] ? __pfx___schedule+0x10/0x10 [ 748.158497][ T31] ? find_held_lock+0x2b/0x80 [ 748.158522][ T31] ? schedule+0x2bf/0x390 [ 748.158554][ T31] schedule+0xdd/0x390 [ 748.158581][ T31] schedule_preempt_disabled+0x13/0x30 [ 748.158599][ T31] __mutex_lock+0xc9a/0x1b90 [ 748.158622][ T31] ? cfg80211_dfs_channels_update_work+0xe9/0x670 [ 748.158651][ T31] ? __mod_timer+0x409/0xca0 [ 748.158674][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 748.158697][ T31] ? __lock_acquire+0x4a5/0x2630 [ 748.158721][ T31] ? look_up_lock_class+0x64/0x120 [ 748.158752][ T31] ? register_lock_class+0x40/0x560 [ 748.158776][ T31] ? cfg80211_dfs_channels_update_work+0xe9/0x670 [ 748.158805][ T31] ? rtnl_lock+0x9/0x20 [ 748.158822][ T31] cfg80211_dfs_channels_update_work+0xe9/0x670 [ 748.158853][ T31] ? __lock_acquire+0x4a5/0x2630 [ 748.158872][ T31] ? do_raw_spin_unlock+0x145/0x1e0 [ 748.158898][ T31] ? __pfx_cfg80211_dfs_channels_update_work+0x10/0x10 [ 748.158937][ T31] ? process_one_work+0x80b/0x1840 [ 748.158960][ T31] ? rcu_is_watching+0x12/0xc0 [ 748.158992][ T31] process_one_work+0x9c2/0x1840 [ 748.159024][ T31] ? __pfx_process_one_work+0x10/0x10 [ 748.159054][ T31] ? assign_work+0x19c/0x250 [ 748.159078][ T31] worker_thread+0x5da/0xe40 [ 748.159107][ T31] ? __pfx_worker_thread+0x10/0x10 [ 748.159131][ T31] ? kthread+0x17d/0x730 [ 748.159149][ T31] ? __pfx_worker_thread+0x10/0x10 [ 748.159170][ T31] kthread+0x3b3/0x730 [ 748.159191][ T31] ? __pfx_kthread+0x10/0x10 [ 748.159210][ T31] ? ret_from_fork+0x79/0xaf0 [ 748.159230][ T31] ? ret_from_fork+0x79/0xaf0 [ 748.159252][ T31] ? rcu_is_watching+0x12/0xc0 [ 748.159276][ T31] ? __pfx_kthread+0x10/0x10 [ 748.159298][ T31] ret_from_fork+0x754/0xaf0 [ 748.159321][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 748.159345][ T31] ? __switch_to+0x7b9/0x10c0 [ 748.159371][ T31] ? __pfx_kthread+0x10/0x10 [ 748.159391][ T31] ret_from_fork_asm+0x1a/0x30 [ 748.159422][ T31] [ 748.159435][ T31] INFO: task syz.3.1926:13327 blocked for more than 148 seconds. [ 748.159449][ T31] Tainted: G L syzkaller #0 [ 748.159460][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 748.159468][ T31] task:syz.3.1926 state:D stack:29032 pid:13327 tgid:13314 ppid:5812 task_flags:0x400140 flags:0x00080002 [ 748.159527][ T31] Call Trace: [ 748.159534][ T31] [ 748.159543][ T31] ? __schedule+0xf65/0x5e10 [ 748.159571][ T31] __schedule+0xfe4/0x5e10 [ 748.159599][ T31] ? __lock_acquire+0x4a5/0x2630 [ 748.159631][ T31] ? __pfx___schedule+0x10/0x10 [ 748.159657][ T31] ? find_held_lock+0x2b/0x80 [ 748.159682][ T31] ? schedule+0x2bf/0x390 [ 748.159713][ T31] schedule+0xdd/0x390 [ 748.159741][ T31] schedule_preempt_disabled+0x13/0x30 [ 748.159759][ T31] __mutex_lock+0xc9a/0x1b90 [ 748.159782][ T31] ? wext_ioctl_dispatch.constprop.0+0xa3/0x3e0 [ 748.159812][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 748.159842][ T31] ? dev_load+0x8e/0x240 [ 748.159863][ T31] ? dev_load+0x8e/0x240 [ 748.159887][ T31] ? __pfx_ioctl_standard_call+0x10/0x10 [ 748.159912][ T31] ? wext_ioctl_dispatch.constprop.0+0xa3/0x3e0 [ 748.159935][ T31] wext_ioctl_dispatch.constprop.0+0xa3/0x3e0 [ 748.159963][ T31] wext_handle_ioctl+0x105/0x1b0 [ 748.159993][ T31] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 748.160018][ T31] ? do_vfs_ioctl+0x226/0x13e0 [ 748.160038][ T31] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 748.160054][ T31] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 748.160078][ T31] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 748.160105][ T31] sock_ioctl+0x2d4/0x6b0 [ 748.160125][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 748.160151][ T31] ? selinux_file_ioctl+0x139/0x290 [ 748.160169][ T31] ? selinux_file_ioctl+0xb4/0x290 [ 748.160189][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 748.160210][ T31] __x64_sys_ioctl+0x18e/0x210 [ 748.160231][ T31] do_syscall_64+0xc9/0xf80 [ 748.160254][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.160274][ T31] RIP: 0033:0x7f11cb39acb9 [ 748.160290][ T31] RSP: 002b:00007f11c95d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 748.160309][ T31] RAX: ffffffffffffffda RBX: 00007f11cb616090 RCX: 00007f11cb39acb9 [ 748.160322][ T31] RDX: 0000200000000000 RSI: 0000000000008b04 RDI: 0000000000000004 [ 748.160335][ T31] RBP: 00007f11cb408bf7 R08: 0000000000000000 R09: 0000000000000000 [ 748.160347][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 748.160358][ T31] R13: 00007f11cb616128 R14: 00007f11cb616090 R15: 00007ffc25fd36c8 [ 748.160385][ T31] [ 748.160394][ T31] [ 748.160394][ T31] Showing all locks held in the system: [ 748.160404][ T31] 3 locks held by kworker/0:1/10: [ 748.160416][ T31] #0: ffff88813fe51948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 748.160467][ T31] #1: ffffc900000f7c98 ((work_completion)(&rdev->mgmt_registrations_update_wk)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 748.160518][ T31] #2: ffff888031698788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_mgmt_registrations_update_wk+0x2a/0xe0 [ 748.160576][ T31] 3 locks held by kworker/u8:0/12: [ 748.160589][ T31] 1 lock held by khungtaskd/31: [ 748.160600][ T31] #0: ffffffff8e5e3360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 748.160655][ T31] 4 locks held by kworker/u8:2/36: [ 748.160666][ T31] 3 locks held by kworker/u8:3/37: [ 748.160679][ T31] 3 locks held by kworker/u8:4/60: [ 748.160690][ T31] 5 locks held by kworker/0:2/90: [ 748.160707][ T31] 2 locks held by kworker/u8:7/1114: [ 748.160719][ T31] 3 locks held by kworker/u8:8/1341: [ 748.160730][ T31] #0: ffff88813fe69948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 748.160783][ T31] #1: ffffc90004a5fc98 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 748.160831][ T31] #2: ffffffff903f1de8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 748.160881][ T31] 4 locks held by kworker/u8:9/2919: [ 748.160894][ T31] 3 locks held by kworker/u8:10/3894: [ 748.160906][ T31] 3 locks held by kworker/u8:13/4524: [ 748.160917][ T31] 2 locks held by klogd/5174: [ 748.160928][ T31] 2 locks held by dhcpcd/5479: [ 748.160938][ T31] 1 lock held by dhcpcd/5480: [ 748.160950][ T31] 1 lock held by crond/5554: [ 748.160960][ T31] 2 locks held by getty/5576: [ 748.160971][ T31] #0: ffff888031b240a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 748.161025][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 748.161071][ T31] 1 lock held by syz-executor/5798: [ 748.161082][ T31] 2 locks held by syz-executor/5813: [ 748.161094][ T31] 2 locks held by kworker/1:4/5819: [ 748.161107][ T31] 4 locks held by kworker/0:5/5915: [ 748.161117][ T31] #0: ffff88813fe51948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 748.161166][ T31] #1: ffffc900021efc98 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 748.161215][ T31] #2: ffffffff903f1de8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 748.161271][ T31] #3: ffffffff8e4a90e0 (sched_map-wait-type-override){+.+.}-{3:3}, at: schedule+0x1f1/0x390 [ 748.161327][ T31] 4 locks held by kworker/1:7/5924: [ 748.161338][ T31] #0: ffff88805755f548 ((wq_completion)wg-kex-wg2#14){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 748.161392][ T31] #1: ffffc900021afc98 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 748.161459][ T31] #2: ffff88807a341308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0xc5/0x5f0 [ 748.161511][ T31] #3: ffff888029875278 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0xd8/0x5f0 [ 748.161562][ T31] 5 locks held by kworker/0:7/5932: [ 748.161573][ T31] 7 locks held by kworker/u8:14/5945: [ 748.161584][ T31] 2 locks held by kworker/u8:18/6005: [ 748.161596][ T31] 2 locks held by syz-executor/6447: [ 748.161607][ T31] 4 locks held by syz-executor/6654: [ 748.161619][ T31] 3 locks held by kworker/u8:21/6828: [ 748.161630][ T31] #0: ffff88814d859948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 748.161679][ T31] #1: ffffc90003bbfc98 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 748.161728][ T31] #2: ffffffff903f1de8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 [ 748.161781][ T31] 3 locks held by kworker/u8:22/7301: [ 748.161794][ T31] 4 locks held by kworker/u8:24/10825: [ 748.161805][ T31] 4 locks held by kworker/u8:25/10831: [ 748.161816][ T31] 3 locks held by kworker/u8:26/10832: [ 748.161827][ T31] 3 locks held by kworker/u8:27/10833: [ 748.161838][ T31] #0: ffff88801d328148 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 748.161886][ T31] #1: ffffc90004187c98 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 748.161938][ T31] #2: ffffffff903f1de8 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_dfs_channels_update_work+0xe9/0x670 [ 748.162001][ T31] 4 locks held by kworker/u8:28/11767: [ 748.162013][ T31] 3 locks held by syz.0.1925/13310: [ 748.162024][ T31] 3 locks held by syz.3.1926/13320: [ 748.162035][ T31] 1 lock held by syz.3.1926/13327: [ 748.162045][ T31] #0: ffffffff903f1de8 (rtnl_mutex){+.+.}-{4:4}, at: wext_ioctl_dispatch.constprop.0+0xa3/0x3e0 [ 748.162096][ T31] [ 748.162101][ T31] ============================================= [ 748.162101][ T31] [ 748.162109][ T31] NMI backtrace for cpu 1 [ 748.162122][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 748.162146][ T31] Tainted: [L]=SOFTLOCKUP [ 748.162152][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 748.162162][ T31] Call Trace: [ 748.162168][ T31] [ 748.162175][ T31] dump_stack_lvl+0x100/0x190 [ 748.162199][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 748.162225][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 748.162246][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 748.162273][ T31] sys_info+0x141/0x190 [ 748.162293][ T31] watchdog+0xcc3/0xfe0 [ 748.162325][ T31] ? __pfx_watchdog+0x10/0x10 [ 748.162351][ T31] ? __kthread_parkme+0x18c/0x230 [ 748.162377][ T31] ? __pfx_watchdog+0x10/0x10 [ 748.162404][ T31] ? __pfx_watchdog+0x10/0x10 [ 748.162426][ T31] kthread+0x3b3/0x730 [ 748.162446][ T31] ? __pfx_kthread+0x10/0x10 [ 748.162462][ T31] ? ret_from_fork+0x79/0xaf0 [ 748.162481][ T31] ? ret_from_fork+0x79/0xaf0 [ 748.162501][ T31] ? rcu_is_watching+0x12/0xc0 [ 748.162523][ T31] ? __pfx_kthread+0x10/0x10 [ 748.162543][ T31] ret_from_fork+0x754/0xaf0 [ 748.162564][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 748.162586][ T31] ? __switch_to+0x7b9/0x10c0 [ 748.162609][ T31] ? __pfx_kthread+0x10/0x10 [ 748.162629][ T31] ret_from_fork_asm+0x1a/0x30 [ 748.162656][ T31] [ 748.162663][ T31] Sending NMI from CPU 1 to CPUs 0: [ 748.162686][ C0] NMI backtrace for cpu 0 [ 748.162698][ C0] CPU: 0 UID: 0 PID: 5945 Comm: kworker/u8:14 Tainted: G L syzkaller #0 PREEMPT(full) [ 748.162718][ C0] Tainted: [L]=SOFTLOCKUP [ 748.162723][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 748.162731][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 748.162752][ C0] RIP: 0010:unwind_next_frame+0x2ac/0x1ea0 [ 748.162771][ C0] Code: ac ba 00 48 8b 54 24 30 8b 4c 24 28 8b 74 24 20 44 8b 5c 24 18 89 cf 8b 14 95 d8 f7 0e 92 48 8d 04 7f 48 8d 84 00 5c 2c 4b 91 <83> c2 01 48 3d d8 f7 0e 92 0f 83 7e 09 00 00 41 89 d0 4f 8d 04 40 [ 748.162784][ C0] RSP: 0018:ffffc90000006ed8 EFLAGS: 00000246 [ 748.162794][ C0] RAX: ffffffff9159b45c RBX: 0000000000000002 RCX: 0000000000026c00 [ 748.162803][ C0] RDX: 0000000000026c0b RSI: 00000000000a7aa2 RDI: 0000000000026c00 [ 748.162812][ C0] RBP: ffffc90000006f90 R08: 0000000000000000 R09: 0000000000000007 [ 748.162824][ C0] R10: 0000000000000200 R11: 000000000000f1ac R12: ffffc90000006f98 [ 748.162833][ C0] R13: ffffc90000006f48 R14: ffffc90000006f7d R15: ffffffff81f1accd [ 748.162843][ C0] FS: 0000000000000000(0000) GS:ffff8881245dc000(0000) knlGS:0000000000000000 [ 748.162857][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 748.162867][ C0] CR2: 00007fd12b3fe788 CR3: 000000002591a000 CR4: 00000000003526f0 [ 748.162876][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 748.162884][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 748.162893][ C0] Call Trace: [ 748.162898][ C0] [ 748.162903][ C0] ? stack_trace_save+0x8e/0xc0 [ 748.162921][ C0] ? __unwind_start+0x3d1/0x7f0 [ 748.162938][ C0] ? br_handle_frame_finish+0x84f/0x1f00 [ 748.162955][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 748.162974][ C0] arch_stack_walk+0x94/0xf0 [ 748.162993][ C0] ? stack_trace_save+0x8e/0xc0 [ 748.163012][ C0] stack_trace_save+0x8e/0xc0 [ 748.163029][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 748.163050][ C0] kasan_save_stack+0x30/0x50 [ 748.163081][ C0] kasan_save_track+0x14/0x30 [ 748.163095][ C0] __kasan_slab_alloc+0x89/0x90 [ 748.163111][ C0] kmem_cache_alloc_noprof+0x2ad/0x780 [ 748.163127][ C0] ? br_multicast_count+0x8d/0xbc0 [ 748.163142][ C0] ? skb_clone+0x190/0x400 [ 748.163160][ C0] ? skb_clone+0x190/0x400 [ 748.163175][ C0] skb_clone+0x190/0x400 [ 748.163191][ C0] maybe_deliver+0xd4/0x180 [ 748.163206][ C0] br_flood+0x193/0x650 [ 748.163222][ C0] br_handle_frame_finish+0xf57/0x1f00 [ 748.163240][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 748.163257][ C0] ? __local_bh_enable_ip+0x9e/0x120 [ 748.163277][ C0] ? ip6t_do_table+0xc1d/0x1c90 [ 748.163296][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 748.163315][ C0] ? nf_hook_slow+0x167/0x220 [ 748.163333][ C0] br_nf_hook_thresh+0x30d/0x420 [ 748.163349][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 748.163367][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 748.163384][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 748.163400][ C0] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 748.163415][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 748.163432][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 748.163452][ C0] br_nf_pre_routing_finish_ipv6+0x769/0xfb0 [ 748.163468][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 748.163486][ C0] br_nf_pre_routing_ipv6+0x39c/0x8b0 [ 748.163504][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 748.163520][ C0] ? lock_acquire+0x17c/0x330 [ 748.163534][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 748.163551][ C0] ? net_generic+0xea/0x2a0 [ 748.163568][ C0] br_nf_pre_routing+0x93b/0x1510 [ 748.163585][ C0] br_handle_frame+0xa68/0x1510 [ 748.163602][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 748.163619][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 748.163637][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 748.163652][ C0] __netif_receive_skb_core.constprop.0+0x6d7/0x3460 [ 748.163671][ C0] ? kmem_cache_free+0x143/0x720 [ 748.163684][ C0] ? find_held_lock+0x2b/0x80 [ 748.163699][ C0] ? ipv6_chk_mcast_addr+0x2b0/0x9a0 [ 748.163716][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 748.163732][ C0] ? kfree_skbmem+0x19a/0x210 [ 748.163750][ C0] ? kfree_skbmem+0x19f/0x210 [ 748.163762][ C0] ? sk_skb_reason_drop+0x114/0x1b0 [ 748.163779][ C0] ? ip6_mc_input+0x51a/0xf50 [ 748.163794][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 748.163809][ C0] ? __lock_acquire+0x4a5/0x2630 [ 748.163824][ C0] ? process_backlog+0x32a/0x1580 [ 748.163837][ C0] __netif_receive_skb_one_core+0xb0/0x1e0 [ 748.163852][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 748.163867][ C0] ? lock_acquire+0x17c/0x330 [ 748.163880][ C0] ? process_backlog+0x32a/0x1580 [ 748.163895][ C0] ? process_backlog+0x32a/0x1580 [ 748.163908][ C0] __netif_receive_skb+0x1f/0x120 [ 748.163923][ C0] process_backlog+0x37a/0x1580 [ 748.163939][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 748.163955][ C0] net_rx_action+0xa40/0xf20 [ 748.163972][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 748.163985][ C0] ? find_held_lock+0x2b/0x80 [ 748.164001][ C0] ? try_to_wake_up+0x154/0x1a60 [ 748.164017][ C0] ? try_to_wake_up+0x154/0x1a60 [ 748.164035][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 748.164047][ C0] ? sched_clock+0x38/0x60 [ 748.164059][ C0] ? sched_clock_cpu+0x6c/0x570 [ 748.164076][ C0] ? mark_held_locks+0x40/0x70 [ 748.164089][ C0] handle_softirqs+0x1ea/0x910 [ 748.164108][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 748.164127][ C0] ? __alloc_skb+0x35d/0x410 [ 748.164142][ C0] do_softirq+0xac/0xe0 [ 748.164158][ C0] [ 748.164163][ C0] [ 748.164168][ C0] __local_bh_enable_ip+0xf8/0x120 [ 748.164186][ C0] __alloc_skb+0x381/0x410 [ 748.164199][ C0] ? __alloc_skb+0x35d/0x410 [ 748.164213][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 748.164229][ C0] ? kfree_skbmem+0x19a/0x210 [ 748.164241][ C0] ? kfree_skbmem+0x19f/0x210 [ 748.164254][ C0] nsim_dev_trap_report_work+0x2af/0xd10 [ 748.164273][ C0] process_one_work+0x9c2/0x1840 [ 748.164292][ C0] ? __pfx_process_one_work+0x10/0x10 [ 748.164310][ C0] ? assign_work+0x19c/0x250 [ 748.164324][ C0] worker_thread+0x5da/0xe40 [ 748.164341][ C0] ? __pfx_worker_thread+0x10/0x10 [ 748.164357][ C0] ? kthread+0x17d/0x730 [ 748.164369][ C0] ? __pfx_worker_thread+0x10/0x10 [ 748.164383][ C0] kthread+0x3b3/0x730 [ 748.164397][ C0] ? __pfx_kthread+0x10/0x10 [ 748.164409][ C0] ? ret_from_fork+0x79/0xaf0 [ 748.164423][ C0] ? ret_from_fork+0x79/0xaf0 [ 748.164437][ C0] ? rcu_is_watching+0x12/0xc0 [ 748.164454][ C0] ? __pfx_kthread+0x10/0x10 [ 748.164468][ C0] ret_from_fork+0x754/0xaf0 [ 748.164483][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 748.164498][ C0] ? __switch_to+0x7b9/0x10c0 [ 748.164515][ C0] ? __pfx_kthread+0x10/0x10 [ 748.164529][ C0] ret_from_fork_asm+0x1a/0x30 [ 748.164546][ C0] [ 751.975075][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 751.975097][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 751.975124][ T31] Tainted: [L]=SOFTLOCKUP [ 751.975131][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 751.975142][ T31] Call Trace: [ 751.975149][ T31] [ 751.975158][ T31] dump_stack_lvl+0x100/0x190 [ 751.975187][ T31] vpanic+0x20d/0x630 [ 751.975207][ T31] panic+0xd1/0xd1 [ 751.975223][ T31] ? __pfx_panic+0x10/0x10 [ 751.975243][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 751.975270][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 751.975294][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 751.975317][ T31] ? watchdog.cold+0x198/0x1ca [ 751.975336][ T31] ? watchdog+0xcd3/0xfe0 [ 751.975364][ T31] watchdog.cold+0x1a9/0x1ca [ 751.975391][ T31] ? __pfx_watchdog+0x10/0x10 [ 751.975417][ T31] ? __kthread_parkme+0x18c/0x230 [ 751.975444][ T31] ? __pfx_watchdog+0x10/0x10 [ 751.975471][ T31] ? __pfx_watchdog+0x10/0x10 [ 751.975495][ T31] kthread+0x3b3/0x730 [ 751.975519][ T31] ? __pfx_kthread+0x10/0x10 [ 751.975537][ T31] ? ret_from_fork+0x79/0xaf0 [ 751.975557][ T31] ? ret_from_fork+0x79/0xaf0 [ 751.975577][ T31] ? rcu_is_watching+0x12/0xc0 [ 751.975601][ T31] ? __pfx_kthread+0x10/0x10 [ 751.975622][ T31] ret_from_fork+0x754/0xaf0 [ 751.975644][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 751.975666][ T31] ? __switch_to+0x7b9/0x10c0 [ 751.975696][ T31] ? __pfx_kthread+0x10/0x10 [ 751.975716][ T31] ret_from_fork_asm+0x1a/0x30 [ 751.975745][ T31] [ 751.976004][ T31] Kernel Offset: disabled