last executing test programs: 47.525607526s ago: executing program 3 (id=95): setxattr$incfs_size(&(0x7f0000000280)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000280)=0xfffffffd, 0x4) r1 = fcntl$dupfd(r0, 0x406, r0) write$cgroup_pid(r1, &(0x7f0000000240), 0xb375) setxattr$incfs_size(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000040), 0x0, 0x0, 0x2) 47.44010436s ago: executing program 3 (id=96): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) inotify_init1(0x80000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x104}}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="1400000021000100fcffffff00000300057c0000a954567161bc129f48852932fa7cb28222d38e0056c0bf3df8449b343393559694ee4b92c963945d2ac9e44a8408eade203815eb667ac361511d559e738d3346888f6323c70b173db49318921ff1a5422545a4734fa7f652a67fec2fa27db7239cd46d35127ba691f1aee30c8070a3e8653057091c6fa2df7fea006d056ccbd2c7782682e4ee93479c4900f80edcb97bf175767789eee7f2c39a09d512a442e975a09534069ddb6a0223d5e90f6f4c171941fa445bb2e658c884"], 0x14}, 0x1, 0x0, 0x0, 0x3b5e04dbece314b7}, 0xc000) r0 = socket(0x10, 0x80000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1000000) r1 = socket$inet6(0xa, 0x3, 0xff) r2 = dup(r1) r3 = dup(r2) ioctl$SIOCGETNODEID(r3, 0x89e1, 0x0) sendto(r0, &(0x7f00000006c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r4 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) fcntl$addseals(r4, 0x409, 0x8) fallocate(r4, 0x3, 0x29c00000000000, 0x20000) r5 = socket$packet(0x11, 0x2, 0x300) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f0000000000)='3', 0x3e) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000300)=0x204081) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x1ff) 46.626371048s ago: executing program 3 (id=104): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4b044) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) rename(&(0x7f0000000040)='./bus\x00', &(0x7f00000001c0)='./file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB='unlock me'], 0xb) r5 = openat$cgroup_ro(r1, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0) fcntl$lock(r5, 0x7, &(0x7f00000000c0)={0x0, 0x0, 0x2000000000000}) sendfile(r3, r4, 0x0, 0x20000023896) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r6, 0x5425, 0x0) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/net/lo/ifindex\x00', 0x0, 0x0) read(r7, &(0x7f0000000500)=""/100, 0x64) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000020301010000000000000000020080010800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x20000880}, 0x4000) close(0x3) 46.094966044s ago: executing program 1 (id=110): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) memfd_create(&(0x7f0000000840)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\n%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05\x9dR\xde\xf6\xc9!R#\xd7\xc0\xea\x9a\x04v\x85\xbcx\x9ai\xd2\r\x05ZY\x0e\"d\xc7\xd7\x02v32Z\xe0\n3\x8b\xa0\x83z\v\x90\x8ce\x12\xbcw\x1e\x7f \xdaPh: \x8e\x95\xb2\xee\xd9\xd9\xe47\x1c\xab\x97P\x86\x8c\xcb]Q\x83\xaaM\xc0\xd4\tQ\xee\x9c\x98\xe4\x18cb\xbd/\xd8\xe95\x7f\x00\xfd6#\x87\x8c\xf9\xa3\x041U\xb9\x14\xce\x9b', 0x2) (async) r0 = memfd_create(&(0x7f0000000840)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\n%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05\x9dR\xde\xf6\xc9!R#\xd7\xc0\xea\x9a\x04v\x85\xbcx\x9ai\xd2\r\x05ZY\x0e\"d\xc7\xd7\x02v32Z\xe0\n3\x8b\xa0\x83z\v\x90\x8ce\x12\xbcw\x1e\x7f \xdaPh: \x8e\x95\xb2\xee\xd9\xd9\xe47\x1c\xab\x97P\x86\x8c\xcb]Q\x83\xaaM\xc0\xd4\tQ\xee\x9c\x98\xe4\x18cb\xbd/\xd8\xe95\x7f\x00\xfd6#\x87\x8c\xf9\xa3\x041U\xb9\x14\xce\x9b', 0x2) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f00000000c0)) (async) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f00000000c0)) ftruncate(r0, 0xffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="281400001d0001001cf4e44f8ff02dc17fd4b53100000000ff0dc9581e73b6dbdf25070000040069b700000016b7076b0000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="281400001d0001001cf4e44f8ff02dc17fd4b53100000000ff0dc9581e73b6dbdf25070000040069b700000016b7076b0000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x545482, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) socket$nl_route(0x10, 0x3, 0x0) write(r2, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xec) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) (async) ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x26) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x8000) write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x6890) 45.997896728s ago: executing program 1 (id=111): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) (async) futex(&(0x7f00000001c0), 0xc, 0xffffffff, 0x0, &(0x7f0000048000), 0x1) (async) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180), 0x48c0, 0x0) r1 = openat(r0, 0x0, 0x82402, 0x110) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x1, 0xc95a, 0xf, 0x8, 0x80, 0x8, 0x3, 0x10007e, 0x20000006, 0x53, 0x6, 0x10000, 0x80005, 0x3, 0xffff2d34, 0xffffff01, 0x6, 0x4, 0x10003, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe661, 0x7, 0x7, 0x6, 0x0, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x10001, 0x5, 0x6, 0x6, 0x5, 0x1, 0x40], [0x10000007, 0xc, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0xe, 0xb, 0x6c7, 0x9, 0xfffffffc, 0x1000, 0x0, 0x0, 0x205, 0x442f, 0x200000e, 0x6, 0x78, 0x1, 0x0, 0x2, 0x7, 0x7fff, 0x6, 0x4402, 0x401, 0x6, 0x1, 0xfc, 0x6, 0x1000005, 0x5f31, 0xd, 0x40000101, 0x7, 0x4, 0xffff80f1, 0x8, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x9, 0xbc45, 0x48c93694, 0x43, 0xa], [0x7, 0x9, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0xb42a, 0x5, 0x7fff, 0x80000000, 0x5, 0xf, 0x4, 0x6, 0x805, 0x5, 0x8, 0x5, 0xffffffff, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x1ff, 0x2, 0x2, 0x2, 0x20000008, 0x2, 0x6d03, 0x6, 0xd, 0x800006, 0x200, 0x1006a, 0x40000001, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x20000005, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x6, 0x0, 0x3, 0x21c, 0x120000, 0x3, 0x0, 0x80aaed, 0x4, 0x24], [0x9, 0x40bb33, 0x9db, 0xb, 0x5, 0x93a, 0x9, 0x1000006, 0x100, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x7ff, 0x7fff, 0x7fff, 0x1000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0xfffffffd, 0xfffff000, 0x0, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0x9, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xfffffff7, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYRES16=r3, @ANYRESHEX=0x0, @ANYBLOB="008fec32e3a000000000007ef3ffff0b009900fdffffff6b0098b6"], 0x20}, 0x1, 0x0, 0x0, 0x2000c001}, 0x4000054) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket(0x10, 0x803, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x100000000) (async) sendto(r5, &(0x7f0000000740)="120000003000e7ef8b000000a100c7b1ee57", 0x12, 0x2404c810, 0x0, 0x0) (async) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="540500001e000701fefffffffcdbdf25017c0000040045803c0501"], 0x554}, 0x1, 0x0, 0x0, 0xc004}, 0xc044) r6 = openat$cgroup_ro(r2, &(0x7f00000014c0)='net_prio.prioidx\x00', 0x0, 0x0) readv(r6, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) (async) r7 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) dup(r7) (async) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x46900, 0x0) readv(r8, &(0x7f0000002740)=[{&(0x7f0000000380)=""/98, 0x62}, {0x0}, {&(0x7f0000000080)=""/90, 0x5a}, {&(0x7f0000000100)=""/113, 0x71}, {&(0x7f0000001740)=""/4096, 0x1000}], 0x5) (async) r9 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r9, 0x0, 0x4, &(0x7f0000000100)="8907", 0x28) (async) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r10, 0x40345410, &(0x7f0000000480)={{0x2, 0x1, 0x4, 0x2, 0xbfec}}) (async) capset(&(0x7f0000000500)={0x20071026}, &(0x7f0000000200)={0x7, 0x200007, 0x8000801, 0x4, 0x7}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) 45.908155953s ago: executing program 3 (id=112): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4003, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) get_robust_list(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r4 = syz_open_procfs(0x0, 0x0) writev(r4, &(0x7f00000001c0)=[{0x0}], 0x1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='tmpfs\x00', 0xa145cf, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) write$cgroup_devices(r4, &(0x7f0000000100)=ANY=[@ANYRES16=r3], 0xffdd) close(r1) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) waitid(0x20, 0x0, 0x0, 0x8, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = socket$inet_icmp(0x2, 0x2, 0x1) recvmmsg(r6, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40002121, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000d40)=ANY=[@ANYBLOB="54000000210001000000000004000000ff010000000000000000000000000001ac1e01010000000000000000000000004e220005000000000a000000c6b60000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004001100"], 0x54}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0xc8, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x26}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x98}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x89}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x26}}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) 45.832458436s ago: executing program 3 (id=113): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000080)="470f23fc48b8e7320000000000000f21f80f23e1f8440f014a000f2221c7c4c3fd01ce002063800000002c24f30f556797c483fd005b02ea64267b470f1fcfcf666466430f3833af00580000", 0x4c}], 0x1, 0x4b, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x4b, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) syz_io_uring_setup(0x12a2, &(0x7f0000000140)={0x0, 0x1cbe, 0x2, 0x2, 0x294, 0x0, r2}, &(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000280)) setsockopt$packet_int(r3, 0x107, 0x16, &(0x7f0000000040)=0x40, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) 45.765542029s ago: executing program 3 (id=114): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r3, &(0x7f0000002380)=[{{&(0x7f0000000480)={0xa, 0x4e22, 0x0, @empty, 0xfffffffd}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e23, 0xa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, 0x0, 0x0, &(0x7f00000007c0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x67e}}], 0x18}}], 0x2, 0x0) (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, &(0x7f0000000980)) (async) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f5889a6b237c9abea30303030303030302e3b30303030303130303030302c6575710e8655a77284d6af08ef89757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group~id=', @ANYRESDEC=0x0]) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) (async) write$FUSE_DIRENT(r1, 0x0, 0x10) 45.713202222s ago: executing program 32 (id=114): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r3, &(0x7f0000002380)=[{{&(0x7f0000000480)={0xa, 0x4e22, 0x0, @empty, 0xfffffffd}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e23, 0xa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, 0x0, 0x0, &(0x7f00000007c0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x67e}}], 0x18}}], 0x2, 0x0) (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, &(0x7f0000000980)) (async) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f5889a6b237c9abea30303030303030302e3b30303030303130303030302c6575710e8655a77284d6af08ef89757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group~id=', @ANYRESDEC=0x0]) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) (async) write$FUSE_DIRENT(r1, 0x0, 0x10) 45.138844719s ago: executing program 1 (id=115): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x72f, 0x100, 0x8, 0x3b5}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000004c0)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000000)={[{0x81fffffe, 0x4, 0xc1, 0x4f, 0x3, 0xbd, 0x80, 0x6, 0x1, 0x44, 0x8, 0x3, 0x100}, {0xb, 0xa6f2, 0x6, 0x8, 0x9, 0xfb, 0x44, 0x87, 0xa, 0x13, 0x4, 0x6, 0xffffffffffffffff}, {0x4c4d, 0x6, 0xd, 0x21, 0x25, 0x9, 0x0, 0x16, 0x95, 0x15, 0x0, 0x3, 0x4}], 0x2}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x66a, 0x6, 0x3fe, 0x0, 0xffe, 0x1, 0x4002004c4, 0x1000, 0x200000, 0x97, 0x10, 0x3, 0x7, 0x4, 0x0, 0x1aa], 0xeeee8000, 0x400}) ioctl$KVM_RUN(r7, 0xae80, 0x0) mount$cgroup2(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB='pids_localevents']) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) syz_ublk_setup_queues(r8, r4, &(0x7f0000000340)={0x0, 0x0, 0x10, 0x1, 0x257}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x0, 0x22a}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6d, 0x8c, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa90, 0x20, 0x8, 0x9d7c}}], 0x1, &(0x7f00000014c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c0002800500010000000000470002800500010001"], 0xe4}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r10, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0) removexattr(0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000800)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000900)=0xe8) quotactl_fd$Q_SETINFO(r9, 0xffffffff80000600, r11, &(0x7f0000000940)={0x5, 0xfffffffffffffffc, 0x1}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_usb_disconnect(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1df) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write(r12, &(0x7f00000004c0)="b7092fa0286b23b60b866791ddc21d1ed790946e71ab71fa12507dbdef7cde22ad98cb3322b9", 0x26) syz_clone(0x9000, 0x0, 0x43, 0x0, 0x0, 0x0) 44.032325571s ago: executing program 1 (id=136): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000080)="470f23fc48b8e7320000000000000f21f80f23e1f8440f014a000f2221c7c4c3fd01ce002063800000002c24f30f556797c483fd005b02ea64267b470f1fcfcf666466430f3833af00580000", 0x4c}], 0x1, 0x4b, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x4b, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_io_uring_setup(0x12a2, 0x0, &(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000280)) setsockopt$packet_int(r3, 0x107, 0x16, &(0x7f0000000040)=0x40, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) 43.129008604s ago: executing program 1 (id=143): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x142) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0x400c4d02, 0x0) (async) ioctl(r0, 0x400c4d02, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x10b902, 0x1c8) (async) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x10b902, 0x1c8) read$FUSE(r5, &(0x7f00000000c0)={0x2020}, 0x2020) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)={0x14, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4, 0x0, 0x0, 0x0}]}, 0x14}], 0x1, 0x0, 0x0, 0x4018}, 0x40080) (async) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)={0x14, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4, 0x0, 0x0, 0x0}]}, 0x14}], 0x1, 0x0, 0x0, 0x4018}, 0x40080) 43.060061607s ago: executing program 1 (id=144): r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0xf}}, ["", "", "", ""]}, 0x24}}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x1c}}, 0x8000800) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'dummy0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x2f, 0x1, 0x4, 0x9, 0x1, @mcast2, @ipv4={'\x00', '\xff\xff', @loopback}, 0x20, 0x8, 0xfffff801, 0x120}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'gre0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x700, 0x1, 0x1, 0xe7, {{0x1d, 0x4, 0x2, 0x31, 0x74, 0x64, 0x0, 0xaf, 0x2f, 0x0, @private=0xa010100, @loopback, {[@ssrr={0x89, 0x1b, 0x59, [@local, @private=0xa010102, @local, @rand_addr=0x64010102, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x44, 0xf5, 0x1, 0x8, [{@empty}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@remote, 0x5}, {@dev={0xac, 0x14, 0x14, 0xa}, 0xd5}, {@remote}, {@remote}, {@rand_addr=0x64010101, 0xff}, {@empty, 0xa}]}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x8, 0x7, 0x15, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x800f, 0x7827, 0x4, 0x3d17}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xac, r3, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x40800}, 0x20004800) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r8, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) fchdir(r8) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x60, r9, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffffc}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0xc042) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000b80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a40)={0xe0, r10, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ef21cb9fbf"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x84, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_SEQ={0x11, 0x4, "98039ff85c80aa6e55a76df7ab"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "970315c9248022eb08be40424a"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "7d91164f479a06fb4a23ac8c67"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "d7514f5283"}]}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "6a6cada60d5926cc1777a48fb18d50"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_MAC={0xa}]}, 0xe0}, 0x1, 0x0, 0x0, 0x8800}, 0x20000000) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000bc0), r1) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c00), 0x458b00, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r13, 0xc038586a, &(0x7f0000000d40)={r1, &(0x7f0000000c40)='\x00', 0x31b000, &(0x7f0000000c80)={@_ha_fsid={[0x5, 0x6]}, {0x1, 0x7, 0x4, 0x3}}, 0x0, &(0x7f0000000cc0), &(0x7f0000000d00)=0xf6}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r14, 0x89f2, &(0x7f0000000e80)={'erspan0\x00', &(0x7f0000000d80)={'gretap0\x00', r5, 0x8, 0x20, 0x0, 0x6, {{0x35, 0x4, 0x0, 0x14, 0xd4, 0x67, 0x0, 0x53, 0x29, 0x0, @broadcast, @local, {[@ssrr={0x89, 0x17, 0x6b, [@local, @dev={0xac, 0x14, 0x14, 0x1d}, @dev={0xac, 0x14, 0x14, 0x40}, @rand_addr=0x64010102, @multicast1]}, @noop, @cipso={0x86, 0x62, 0x2, [{0x2, 0x6, "f6b77040"}, {0x5, 0xa, "deb4643081f98f30"}, {0x0, 0x10, "df5b4c79a69539f10014274418c7"}, {0x6, 0x12, "ed0d23296cc51370149007cbdf4d66dc"}, {0x2, 0x12, "62877e9f05bfc78f612ce3b1189d10c0"}, {0x5, 0xb, "4a3a935829576af1f9"}, {0x0, 0x7, "e30ed91b33"}, {0xc, 0x6, "6d99dd3b"}]}, @noop, @timestamp_addr={0x44, 0x24, 0xa6, 0x1, 0x5, [{@local, 0x5}, {@rand_addr=0x64010100, 0x8}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0xaa7c}, {@loopback, 0x40ec6d8c}]}, @rr={0x7, 0xf, 0xc1, [@private=0xa010101, @local, @dev={0xac, 0x14, 0x14, 0x35}]}, @timestamp={0x44, 0x10, 0x4d, 0x0, 0x9, [0x4, 0x1, 0x5]}]}}}}}) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r14, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x64, r12, 0x10, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004080) sendmsg$NFT_BATCH(r14, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x4}}}, 0x28}, 0x1, 0x0, 0x0, 0x4c054}, 0x20000040) ioctl$int_out(r1, 0x2, &(0x7f0000001100)) bind$802154_dgram(r14, &(0x7f0000001140)={0x24, @none={0x0, 0x1}}, 0x14) sendmsg$AUDIT_TRIM(r14, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x10, 0x3f6, 0x6, 0x70bd2a, 0x25dfdbfb, "", ["", "", "", ""]}, 0x10}}, 0x15) recvmmsg(r8, &(0x7f0000003700)=[{{&(0x7f0000001280)=@alg, 0x80, &(0x7f00000035c0)=[{&(0x7f0000001300)=""/43, 0x2b}, {&(0x7f0000001340)=""/230, 0xe6}, {&(0x7f0000001440)=""/14, 0xe}, {&(0x7f0000001480)=""/133, 0x85}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000003540)=""/77, 0x4d}], 0x7, &(0x7f0000003640)=""/165, 0xa5}, 0x5}], 0x1, 0x61, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) 38.77244663s ago: executing program 4 (id=172): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000140)={0x3f8, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER={0xc4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1, @empty, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010102}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xbb5}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'virt_wifi0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfff}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x178, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1bb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcf7b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff51}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7, @empty, 0x2000000}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe0000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x49}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x42}]}]}, @TIPC_NLA_NODE={0x84, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "d816b73fc1f3c35c7cf90228a0902ed6dd02d95cfca378527a4f09429c5831d1b235"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x934}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x53a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8ee}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "6ba52a765da6052c7384eb0ca39e5761307fb92e658d95b151ec85ebb83f"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}]}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x4000}, 0x840) (async) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000000)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x0, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x0, 0x2, 0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) (async) mount$tmpfs(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x880021, &(0x7f0000000140)=ANY=[]) 38.717780572s ago: executing program 4 (id=173): r0 = syz_ublk_setup_io_uring(0x20d3, &(0x7f0000000040)={0x0, 0x30b5, 0x8000, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(r6, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{0x11, 0x0, 0x7}]}) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETNEXTQUOTA(r4, 0xffffffff80000902, r10, &(0x7f0000000400)) (async) quotactl_fd$Q_GETNEXTQUOTA(r4, 0xffffffff80000902, r10, &(0x7f0000000400)) listen(r9, 0x0) (async) listen(r9, 0x0) accept(r9, 0x0, 0x0) shutdown(r9, 0x0) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x7000, 0x0, 0xb, 0x0, 0x0, 0xcb, 0x2, 0x0, 0x8, 0x6}, {0xe000, 0x9000, 0xc, 0xeb, 0x2, 0x0, 0x0, 0x0, 0x7}, {0x25000, 0x9000, 0x10, 0x0, 0xe, 0xc4, 0x0, 0x7, 0x45, 0x43, 0x0, 0xfc}, {0x58000, 0x10000, 0x9, 0x4, 0x1, 0x0, 0x9, 0x0, 0xf1, 0x0, 0x4}, {0xd000, 0x41000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0xff, 0x34, 0x7}, {0xffff1000, 0x5000, 0x0, 0x78, 0x5, 0x0, 0x2, 0x1c, 0x7a, 0xff, 0x5, 0xfc}, {0xfec00000, 0x80a0000, 0xa, 0x4, 0x40, 0xfe, 0x7, 0x20}, {0x0, 0x6000, 0xb, 0x0, 0x0, 0x7, 0x8, 0x2, 0x26, 0x0, 0x1, 0x2}, {0x80a0000, 0x3}, {0x4000, 0xfffd}, 0xddf8ffd7, 0x0, 0x0, 0x120, 0xe, 0xf801, 0x0, [0x100, 0x0, 0x1, 0xfffffffffffffffe]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c5) socket$key(0xf, 0x3, 0x2) (async) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020400020c000000000000000000000005000600330000000a004e2300000001fe8800000000000000000000000001010f000000000000000200010000000000ff00000000000000030005000000000002004e230000008a0000000000000000"], 0x60}, 0x1, 0x7}, 0x804) (async) sendmsg$key(r11, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020400020c000000000000000000000005000600330000000a004e2300000001fe8800000000000000000000000001010f000000000000000200010000000000ff00000000000000030005000000000002004e230000008a0000000000000000"], 0x60}, 0x1, 0x7}, 0x804) sendmsg$DEVLINK_CMD_RATE_SET(r11, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002abd7000fbdbdf254b0000000f00a9007365636f6e646e616d6500000c00a60009000000000000000c20a60055000000000000000c00a70000a0000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chroot(&(0x7f0000000040)='./file0\x00') (async) chroot(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f00000002c0)='./file0\x00', 0x9) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x8, 0x2172, 0xffffffffffffffff, 0xffffe000) munmap(&(0x7f0000004000/0x1000)=nil, 0x1000) futex(&(0x7f0000004000)=0x2, 0x8d, 0x1, 0x0, 0x0, 0x1) ioctl$KVM_GET_SREGS2(r8, 0x8140aecc, &(0x7f0000000240)) (async) ioctl$KVM_GET_SREGS2(r8, 0x8140aecc, &(0x7f0000000240)) 38.299556212s ago: executing program 4 (id=176): r0 = socket$inet_udp(0x2, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) dup(r0) syz_usb_connect$uac2(0x2, 0x82, &(0x7f0000001a80)=ANY=[@ANYBLOB="1201500200000008e513010040000102030109027000031a32c64008627de2f90107000e080b0102010f20080904000000010120000924010500011000000724060604060009040100000102200009040101010102200009050109b703080600082501012804ff030904020000010220000904020101010220000905820908000406"], &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000011c0)='./file2\x00', 0x41, 0x49) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0406618, &(0x7f0000001080)={@desc={0x1, 0x0, @desc4}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001300)=ANY=[@ANYBLOB="90010000", @ANYRES16=0x0, @ANYBLOB="05000000000800030000004dd0cf990eddc07362000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x190}}, 0x0) ppoll(&(0x7f0000001100)=[{0xffffffffffffffff, 0x104}, {}], 0x2, 0x0, 0x0, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000001140)='./file0\x00', &(0x7f00000010c0), 0x100c, &(0x7f0000001180)={[{@redirect_dir_nofollow}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@verity_off}], [{@dont_appraise}], 0x2c}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000180)={0xd, 0x101, 0x1, 0x5, 0xf34}) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027fec2cade500000000000100"], 0x10) setsockopt$inet_int(r0, 0x0, 0xa, &(0x7f0000000040)=0x8, 0x4) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000140), 0x73, 0x3501) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x1c, 0x2}, 0x8, 0x0, 0x8, 0x0, 0xfffffffc, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) 35.224309397s ago: executing program 4 (id=185): setitimer(0x2, &(0x7f0000000b40)={{}, {0x0, 0x2710}}, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) gettid() syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0x2, 0x2, 0xfffffffe, 0x258, 0x0, r2}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4707, 0x40, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0xffffffff, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f73, 0x10000, 0x1, 0x80002, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0xfffffffe, 0xffffffff}}], 0x1, 0x0, 0x0) 35.16401542s ago: executing program 4 (id=186): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) shutdown(r0, 0x0) 35.135961091s ago: executing program 4 (id=187): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 64) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0) read(r4, &(0x7f0000000040)=""/148, 0xffffff96) (async) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x7) (async) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r2, &(0x7f0000000000), 0x4, 0x3b00, 0x0, 0x0) (async) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20840, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='./file1\x00') bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r6, 0x40035, r1}, 0x10) 33.834690413s ago: executing program 0 (id=191): syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x860b01) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x2, 0xc25, 0x0, 0x0, 0x1000, 0x6, 0x0, 0x0, 0x4}}}, &(0x7f0000000300)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r2, &(0x7f0000002240)=""/237, 0xed, 0x7fffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r1, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4701, 0x100, 0x2, 0x33b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7395, 0x800, 0x0, 0x246}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x80, 0x2, 0x135}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2000002, 0x20, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000400)={0x3, 0xe5, &(0x7f0000000780)="000000700fa6129b69a647207328b7ed564243d3ef8f46f0d9dc0a051acc27effaf069bbb1b3e97616d775f0886641ab0045b2c9cfa21c278408c29d94b154e44685beef8996db1af5aee3cad6c55f031aa6ca8f56f0d70e3ef2c9fcb1aa08dffc96bedd75ad5cd234334a1db1daf5839ee3df2e94aa1a7c408320321189a7769c586c3851414f264dc4640dd36228ff56010c67622c7103dcf6411173e1316f0d2ddde3200cc6031ae1063a61f720d8657a02eb50baf175277c667d87bff0da242b38a3a2c0896e4b1753dfd83ec56f1bda6af189f7cc73ce33c23ac030f179bf20183d46"}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0xcd) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x860b01) (async) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x2, 0xc25, 0x0, 0x0, 0x1000, 0x6, 0x0, 0x0, 0x4}}}, &(0x7f0000000300)) (async) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') (async) pread64(r2, &(0x7f0000002240)=""/237, 0xed, 0x7fffffffffffffff) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r3) (async) syz_ublk_setup_queues(r4, r1, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4701, 0x100, 0x2, 0x33b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7395, 0x800, 0x0, 0x246}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x80, 0x2, 0x135}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2000002, 0x20, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) (async) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000400)={0x3, 0xe5, &(0x7f0000000780)="000000700fa6129b69a647207328b7ed564243d3ef8f46f0d9dc0a051acc27effaf069bbb1b3e97616d775f0886641ab0045b2c9cfa21c278408c29d94b154e44685beef8996db1af5aee3cad6c55f031aa6ca8f56f0d70e3ef2c9fcb1aa08dffc96bedd75ad5cd234334a1db1daf5839ee3df2e94aa1a7c408320321189a7769c586c3851414f264dc4640dd36228ff56010c67622c7103dcf6411173e1316f0d2ddde3200cc6031ae1063a61f720d8657a02eb50baf175277c667d87bff0da242b38a3a2c0896e4b1753dfd83ec56f1bda6af189f7cc73ce33c23ac030f179bf20183d46"}) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0xcd) (async) 33.748140377s ago: executing program 0 (id=192): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="0f09b8044fdc87efed660f388059e0b88f05000000001e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x50}], 0x1, 0x11, 0x0, 0x0) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x40, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c) (async) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x7a, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000010280), 0x8a400, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) (async) ioctl$EXT4_IOC_GETSTATE(r4, 0x40047452, &(0x7f0000000040)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_hci(r5, 0x0, 0x2, 0x0, &(0x7f0000000040)) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) utimensat(0xffffffffffffffff, &(0x7f000000a300)='./file1\x00', 0x0, 0x631e84ec02c57dd7) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1458d43845000000af8d5bd93e74c4384e6c95135add57f448d4a3e5ec110ff2f4412ab2dea23b18690a82985194cc746376b2dfda2df58510baac86604155b34a5facec31421d9e4a27f2ab3429327f6ed37f8f201ee0b7862c079c445f588c27df176cea70", @ANYRES16=r7, @ANYBLOB="0003000000000000002014000000"], 0x14}, 0x1, 0x0, 0x0, 0x44080}, 0x4008010) 33.525125747s ago: executing program 0 (id=193): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="d80000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400000000000000000000000000000000000c00028005000100000000003c0000802c00018014000300fe80000000000000000000000000000914000400fe8000000000000000000000000000aa0c000280050001000000000008000740000003fc44000d0dec000500fe88000000000000000000000000010108000200e00000010800020064010100080002006401010014000400fc00"/216], 0xd8}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="c80000002100090002000000ffdbdf2501"], 0xc8}, 0x1, 0x0, 0x0, 0x24000000}, 0x40090) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000340)={'ipvs\x00'}, &(0x7f00000000c0)=0x1e) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) syz_ublk_setup_io_uring(0xd0f, &(0x7f00000000c0)={0x0, 0x8388, 0x2000, 0x3, 0x321, 0x0, r3}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(0x0, 0x5, 0x300000c, 0x10, r3, 0x8000000) r6 = mmap$IORING_OFF_SQES(0x0, 0x80, 0x2000002, 0x60110, r3, 0x10000000) r7 = getpgid(0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000280)={0x2e, 0x1, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x8000000000000001, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000240)=@any_dev={0x4, 0x144, 0x0, 0x0, 0x1000, 0x2, r7, 0x0, 0x2}}}, &(0x7f0000000380)) write$P9_RCLUNK(r3, &(0x7f0000000080)={0x7, 0x79, 0x2}, 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'veth0_to_bridge\x00'}) rt_sigqueueinfo(0x0, 0x13, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r8, 0x89a2, &(0x7f0000000200)='bridge0\x00') 33.418560052s ago: executing program 0 (id=194): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @local, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) recvfrom$inet6(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, 'w\x00', "bb6710bc8150e4a1a117d7b27caf00", "fbef00", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r3 = dup(r2) r4 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r5, 0x0, 0x14, 0x0, &(0x7f0000000e80)) prlimit64(0xffffffffffffffff, 0x6, &(0x7f0000000240)={0x2, 0x8}, &(0x7f0000000280)) sendfile(r2, r4, 0x0, 0x8000fffffffe) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "a06adadb1e8816ec", "de0000006deed7f21d74bc440900", '\x00', "fc4bd6b33a9b93ca"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r6, 0x29, 0x1a, 0x0, 0x0) mkdir(&(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./mysys/bus/pci/devices/0000:00:01.0/enable\x00', 0x1, 0xc0) write(r7, &(0x7f00000003c0)='1', 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000640)="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", 0x111}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa0024", 0x8}, {&(0x7f00000015c0)="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", 0xd9b}], 0x5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) 32.510560465s ago: executing program 0 (id=195): setitimer(0x2, &(0x7f0000000b40)={{}, {0x0, 0x2710}}, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0x2, 0x2, 0xfffffffe, 0x258, 0x0, r2}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4707, 0x40, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0xffffffff, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f73, 0x10000, 0x1, 0x80002, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0xfffffffe, 0xffffffff}}], 0x1, 0x0, 0x0) 32.509692115s ago: executing program 0 (id=196): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000080)="470f23fc48b8e7320000000000000f21f80f23e1f8440f014a000f2221c7c4c3fd01ce002063800000002c24f30f556797c483fd005b02ea64267b470f1fcfcf666466430f3833af00580000", 0x4c}], 0x1, 0x4b, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x4b, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_io_uring_setup(0x12a2, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_int(r3, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 31.310718272s ago: executing program 2 (id=202): r0 = socket$packet(0x11, 0x3, 0x300) r1 = eventfd(0x0) read$eventfd(r1, &(0x7f0000000240), 0x8) writev(r1, &(0x7f0000000080)=[{&(0x7f0000001100)="02965d1f5ec3de3d", 0x8}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r2, 0x40104d07, &(0x7f0000000200)) ioctl$XFS_IOC_BULKSTAT(r2, 0x8040587f, &(0x7f00000007c0)={{0x7c55f9f7, 0x0, 0xfffffffd, 0x567, 0x8001}, &(0x7f0000000580)=[{}, {}, {}]}) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x80c010, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x0, 0x9, 0x2, 0x7}]}) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_INIT(r4, &(0x7f0000002240)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x8, 0x11, 0x40000, 0x10, 0x8, 0x85, 0x6, 0xc00, 0x0, 0x20, 0x17989}}, 0x50) setns(0xc9, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010300000ae6f72087a003"], 0x3c}}, 0x80) recvmmsg(r5, &(0x7f0000006080)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001600)=""/4090, 0xffa}, {&(0x7f0000000340)=""/159, 0x9f}], 0x2}, 0x8}], 0x1, 0x140, 0x0) fallocate(r3, 0x0, 0x3, 0x8) socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000180)=[{r0, 0x80}], 0x1, 0x1ff) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000440)=0x2, 0x4) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) socket$inet6_udplite(0xa, 0x2, 0x88) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 30.158006416s ago: executing program 2 (id=203): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) r1 = syz_open_dev$loop(&(0x7f0000000bc0), 0x787bade5, 0x188b03) (rerun: 32) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000c00)) r2 = accept4(r0, &(0x7f0000000000)=@nfc_llcp, &(0x7f00000000c0)=0x80, 0x80000) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x4e23, @private=0xa010102}, {0x2, 0x4e24, @rand_addr=0x64010101}, {0x2, 0x4e21, @multicast1}, 0x286, 0x0, 0x0, 0x0, 0x7fff, &(0x7f0000000100)='macvlan0\x00', 0x80, 0x8000000000000001, 0x7ff}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c40)='net/xfrm_stat\x00') write$selinux_user(r3, 0x0, 0x0) (async, rerun: 64) getsockopt$inet6_int(r0, 0x29, 0x3c, 0x0, &(0x7f0000000080)) (rerun: 64) 30.106782149s ago: executing program 2 (id=204): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='net_prio.prioidx\x00', 0x0, 0x0) write$eventfd(r0, &(0x7f0000000040)=0x80000001, 0x8) ioctl$KVM_RUN(r0, 0xae80, 0x0) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100100000010392ad33f40000102030109026900030180e007080b0101010a20000904000000010120000924010200080900c9090401000001022000090401010101022000090501318cb9e903d1a675c747dbdf12cd0940000504950825018109090200090402000001022000090402010101022000090582"], 0x0) (async) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100100000010392ad33f40000102030109026900030180e007080b0101010a20000904000000010120000924010200080900c9090401000001022000090401010101022000090501318cb9e903d1a675c747dbdf12cd0940000504950825018109090200090402000001022000090402010101022000090582"], 0x0) 27.09568475s ago: executing program 33 (id=144): r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0xf}}, ["", "", "", ""]}, 0x24}}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x1c}}, 0x8000800) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'dummy0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x2f, 0x1, 0x4, 0x9, 0x1, @mcast2, @ipv4={'\x00', '\xff\xff', @loopback}, 0x20, 0x8, 0xfffff801, 0x120}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'gre0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x700, 0x1, 0x1, 0xe7, {{0x1d, 0x4, 0x2, 0x31, 0x74, 0x64, 0x0, 0xaf, 0x2f, 0x0, @private=0xa010100, @loopback, {[@ssrr={0x89, 0x1b, 0x59, [@local, @private=0xa010102, @local, @rand_addr=0x64010102, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x44, 0xf5, 0x1, 0x8, [{@empty}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@remote, 0x5}, {@dev={0xac, 0x14, 0x14, 0xa}, 0xd5}, {@remote}, {@remote}, {@rand_addr=0x64010101, 0xff}, {@empty, 0xa}]}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x8, 0x7, 0x15, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x800f, 0x7827, 0x4, 0x3d17}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xac, r3, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x40800}, 0x20004800) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r8, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) fchdir(r8) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x60, r9, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffffc}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0xc042) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000b80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a40)={0xe0, r10, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ef21cb9fbf"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x84, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_SEQ={0x11, 0x4, "98039ff85c80aa6e55a76df7ab"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "970315c9248022eb08be40424a"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "7d91164f479a06fb4a23ac8c67"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "d7514f5283"}]}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "6a6cada60d5926cc1777a48fb18d50"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_MAC={0xa}]}, 0xe0}, 0x1, 0x0, 0x0, 0x8800}, 0x20000000) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000bc0), r1) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c00), 0x458b00, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r13, 0xc038586a, &(0x7f0000000d40)={r1, &(0x7f0000000c40)='\x00', 0x31b000, &(0x7f0000000c80)={@_ha_fsid={[0x5, 0x6]}, {0x1, 0x7, 0x4, 0x3}}, 0x0, &(0x7f0000000cc0), &(0x7f0000000d00)=0xf6}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r14, 0x89f2, &(0x7f0000000e80)={'erspan0\x00', &(0x7f0000000d80)={'gretap0\x00', r5, 0x8, 0x20, 0x0, 0x6, {{0x35, 0x4, 0x0, 0x14, 0xd4, 0x67, 0x0, 0x53, 0x29, 0x0, @broadcast, @local, {[@ssrr={0x89, 0x17, 0x6b, [@local, @dev={0xac, 0x14, 0x14, 0x1d}, @dev={0xac, 0x14, 0x14, 0x40}, @rand_addr=0x64010102, @multicast1]}, @noop, @cipso={0x86, 0x62, 0x2, [{0x2, 0x6, "f6b77040"}, {0x5, 0xa, "deb4643081f98f30"}, {0x0, 0x10, "df5b4c79a69539f10014274418c7"}, {0x6, 0x12, "ed0d23296cc51370149007cbdf4d66dc"}, {0x2, 0x12, "62877e9f05bfc78f612ce3b1189d10c0"}, {0x5, 0xb, "4a3a935829576af1f9"}, {0x0, 0x7, "e30ed91b33"}, {0xc, 0x6, "6d99dd3b"}]}, @noop, @timestamp_addr={0x44, 0x24, 0xa6, 0x1, 0x5, [{@local, 0x5}, {@rand_addr=0x64010100, 0x8}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0xaa7c}, {@loopback, 0x40ec6d8c}]}, @rr={0x7, 0xf, 0xc1, [@private=0xa010101, @local, @dev={0xac, 0x14, 0x14, 0x35}]}, @timestamp={0x44, 0x10, 0x4d, 0x0, 0x9, [0x4, 0x1, 0x5]}]}}}}}) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r14, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x64, r12, 0x10, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004080) sendmsg$NFT_BATCH(r14, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x4}}}, 0x28}, 0x1, 0x0, 0x0, 0x4c054}, 0x20000040) ioctl$int_out(r1, 0x2, &(0x7f0000001100)) bind$802154_dgram(r14, &(0x7f0000001140)={0x24, @none={0x0, 0x1}}, 0x14) sendmsg$AUDIT_TRIM(r14, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x10, 0x3f6, 0x6, 0x70bd2a, 0x25dfdbfb, "", ["", "", "", ""]}, 0x10}}, 0x15) recvmmsg(r8, &(0x7f0000003700)=[{{&(0x7f0000001280)=@alg, 0x80, &(0x7f00000035c0)=[{&(0x7f0000001300)=""/43, 0x2b}, {&(0x7f0000001340)=""/230, 0xe6}, {&(0x7f0000001440)=""/14, 0xe}, {&(0x7f0000001480)=""/133, 0x85}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000003540)=""/77, 0x4d}], 0x7, &(0x7f0000003640)=""/165, 0xa5}, 0x5}], 0x1, 0x61, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) 27.051874903s ago: executing program 2 (id=206): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) shutdown(r0, 0x0) 27.040254803s ago: executing program 2 (id=207): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12011001000000406a05250300000000000109022400019a7cb6685a68e26f01030000fa08210000ec0122180009058103000002000060bc23d06b120140bb015a29e1ade33a6cc704556b7e79d2256c7e7da225f07715b61cf0aeb5ceea6b4a57f5a1daafe1ade2f9236327d19defcb7d08067b928a8b03eedab5e3720d93eba03a43502cfae2bc30465fed0b4e1b123cd12170848af311044d68120ce41d484f9dfe0a3cb43585d88f4beb3856af9517d1d548a232a8c1034866d18a7eb32478b37e887dfca0c0"], 0x0) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x4) r3 = openat$cgroup(r2, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000001200)='pids.events\x00', 0x5000000, 0x0) readv(r4, &(0x7f00000012c0)=[{&(0x7f0000000080)=""/4077, 0xfed}], 0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)=ANY=[], 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 20.921139942s ago: executing program 2 (id=208): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bind$tipc(r0, &(0x7f00000007c0)=@name={0x1e, 0x2, 0x2, {{0x40}, 0x3}}, 0x10) (async) syz_usb_connect$uac3(0x0, 0xaa, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1686, 0xdd, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x98, 0x3, 0x1, 0x7f, 0x0, 0x7, {0x8, 0xb, 0x0, 0x2, 0x1, 0x23, 0x30, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xa, 0xa, 0xb}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x5, 0x8, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x3, 0x0, {0xa, 0x25, 0x25, 0x402, 0x5, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x1, 0x0, 0x4595, 0x5, 0x4, 0x70, 0x400, 0x7}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8101, 0x8c, 0x9, 0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x74, 0x9, 0xc0, {0xa, 0x25, 0x25, 0x7fffffff, 0x1, 0x315e}}}}}}}}]}}, 0x0) 19.743332418s ago: executing program 34 (id=187): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 64) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0) read(r4, &(0x7f0000000040)=""/148, 0xffffff96) (async) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x7) (async) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r2, &(0x7f0000000000), 0x4, 0x3b00, 0x0, 0x0) (async) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20840, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='./file1\x00') bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r6, 0x40035, r1}, 0x10) 13.231361285s ago: executing program 35 (id=196): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000080)="470f23fc48b8e7320000000000000f21f80f23e1f8440f014a000f2221c7c4c3fd01ce002063800000002c24f30f556797c483fd005b02ea64267b470f1fcfcf666466430f3833af00580000", 0x4c}], 0x1, 0x4b, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x4b, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_io_uring_setup(0x12a2, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_int(r3, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 36 (id=208): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bind$tipc(r0, &(0x7f00000007c0)=@name={0x1e, 0x2, 0x2, {{0x40}, 0x3}}, 0x10) (async) syz_usb_connect$uac3(0x0, 0xaa, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1686, 0xdd, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x98, 0x3, 0x1, 0x7f, 0x0, 0x7, {0x8, 0xb, 0x0, 0x2, 0x1, 0x23, 0x30, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xa, 0xa, 0xb}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x5, 0x8, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x3, 0x0, {0xa, 0x25, 0x25, 0x402, 0x5, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x1, 0x0, 0x4595, 0x5, 0x4, 0x70, 0x400, 0x7}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8101, 0x8c, 0x9, 0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x74, 0x9, 0xc0, {0xa, 0x25, 0x25, 0x7fffffff, 0x1, 0x315e}}}}}}}}]}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.173' (ED25519) to the list of known hosts. [ 28.778993][ T36] audit: type=1400 audit(1790021408.660:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.780349][ T286] cgroup: Unknown subsys name 'net' [ 28.801869][ T36] audit: type=1400 audit(1790021408.660:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.832023][ T36] audit: type=1400 audit(1790021408.690:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.832241][ T286] cgroup: Unknown subsys name 'devices' [ 28.952138][ T286] cgroup: Unknown subsys name 'hugetlb' [ 28.957927][ T286] cgroup: Unknown subsys name 'rlimit' [ 29.051219][ T36] audit: type=1400 audit(1790021408.940:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.074796][ T36] audit: type=1400 audit(1790021408.940:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.099529][ T36] audit: type=1400 audit(1790021408.940:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 29.183404][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.192343][ T36] audit: type=1400 audit(1790021409.080:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.217997][ T36] audit: type=1400 audit(1790021409.080:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.233635][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.244320][ T36] audit: type=1400 audit(1790021409.110:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.279644][ T36] audit: type=1400 audit(1790021409.110:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.989933][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.020514][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.030737][ T293] bridge_slave_0: entered allmulticast mode [ 30.037183][ T293] bridge_slave_0: entered promiscuous mode [ 30.044020][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.051177][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.058288][ T293] bridge_slave_1: entered allmulticast mode [ 30.064587][ T293] bridge_slave_1: entered promiscuous mode [ 30.161959][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.169300][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.176901][ T297] bridge_slave_0: entered allmulticast mode [ 30.183269][ T297] bridge_slave_0: entered promiscuous mode [ 30.194284][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.201409][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.208499][ T297] bridge_slave_1: entered allmulticast mode [ 30.214857][ T297] bridge_slave_1: entered promiscuous mode [ 30.260694][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.267755][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.274875][ T298] bridge_slave_0: entered allmulticast mode [ 30.281082][ T298] bridge_slave_0: entered promiscuous mode [ 30.291935][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.299102][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.306633][ T298] bridge_slave_1: entered allmulticast mode [ 30.312915][ T298] bridge_slave_1: entered promiscuous mode [ 30.341803][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.348903][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.356830][ T299] bridge_slave_0: entered allmulticast mode [ 30.363083][ T299] bridge_slave_0: entered promiscuous mode [ 30.381581][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.388649][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.395942][ T299] bridge_slave_1: entered allmulticast mode [ 30.402161][ T299] bridge_slave_1: entered promiscuous mode [ 30.500630][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.507693][ T299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.515027][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.522073][ T299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.536632][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.543721][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.551020][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.558098][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.568747][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.575829][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.583167][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.590296][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.608703][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.616140][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.624131][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.631419][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.639661][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.647474][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.677581][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.684667][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.692623][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.699689][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.742904][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.749986][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.757881][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.764979][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.798308][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.805390][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.813687][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.821688][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.835853][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.842973][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.852442][ T299] veth0_vlan: entered promiscuous mode [ 30.866227][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.873310][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.897789][ T293] veth0_vlan: entered promiscuous mode [ 30.909507][ T299] veth1_macvtap: entered promiscuous mode [ 30.922665][ T297] veth0_vlan: entered promiscuous mode [ 30.937013][ T298] veth0_vlan: entered promiscuous mode [ 30.943853][ T293] veth1_macvtap: entered promiscuous mode [ 30.967831][ T298] veth1_macvtap: entered promiscuous mode [ 30.995559][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.024084][ T297] veth1_macvtap: entered promiscuous mode [ 31.061616][ T315] veth1: entered allmulticast mode [ 31.077017][ T315] veth1: left allmulticast mode [ 31.105596][ T326] FAULT_INJECTION: forcing a failure. [ 31.105596][ T326] name failslab, interval 1, probability 0, space 0, times 1 [ 31.124865][ T326] CPU: 0 UID: 0 PID: 326 Comm: syz.2.3 Not tainted syzkaller #0 d976026e9b24a1e356ccef01bad6f8849cdc0f37 [ 31.124903][ T326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 31.124926][ T326] Call Trace: [ 31.124933][ T326] [ 31.124942][ T326] __dump_stack+0x21/0x30 [ 31.124983][ T326] dump_stack_lvl+0x140/0x1c0 [ 31.125006][ T326] ? __cfi_dump_stack_lvl+0x10/0x10 [ 31.125030][ T326] dump_stack+0x19/0x20 [ 31.125054][ T326] should_fail_ex+0x3c2/0x510 [ 31.125077][ T326] should_failslab+0xac/0x100 [ 31.125101][ T326] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 31.125123][ T326] ? kstrdup_const+0x45/0x60 [ 31.125140][ T326] ? mutex_lock+0x97/0x1d0 [ 31.125164][ T326] kstrdup+0x4d/0x130 [ 31.125179][ T326] ? kstrdup_const+0x3a/0x60 [ 31.125196][ T326] kstrdup_const+0x45/0x60 [ 31.125217][ T326] __kmem_cache_create_args+0xba/0x310 [ 31.125238][ T326] copy_pid_ns+0x47a/0xa60 [ 31.125264][ T326] ? __cfi_copy_pid_ns+0x10/0x10 [ 31.125288][ T326] ? __kasan_check_write+0x18/0x20 [ 31.125309][ T326] create_new_namespaces+0x275/0x6f0 [ 31.125336][ T326] unshare_nsproxy_namespaces+0x124/0x180 [ 31.125363][ T326] ksys_unshare+0x4f9/0x920 [ 31.125386][ T326] ? fput+0x1a4/0x230 [ 31.125411][ T326] ? __cfi_ksys_unshare+0x10/0x10 [ 31.125439][ T326] ? __kasan_check_write+0x18/0x20 [ 31.125459][ T326] __x64_sys_unshare+0x3c/0x50 [ 31.125483][ T326] x64_sys_call+0x2998/0x2ee0 [ 31.125501][ T326] do_syscall_64+0x57/0xf0 [ 31.125518][ T326] ? clear_bhb_loop+0x50/0xa0 [ 31.125541][ T326] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.125563][ T326] RIP: 0033:0x7f620e79e159 [ 31.125584][ T326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.125600][ T326] RSP: 002b:00007f620f6e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 31.125629][ T326] RAX: ffffffffffffffda RBX: 00007f620ea25fa0 RCX: 00007f620e79e159 [ 31.125644][ T326] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 31.125657][ T326] RBP: 00007f620e83506b R08: 0000000000000000 R09: 0000000000000000 [ 31.125670][ T326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 31.125682][ T326] R13: 00007f620ea26038 R14: 00007f620ea25fa0 R15: 00007ffca2a94fa8 [ 31.125700][ T326] [ 31.125708][ T326] __kmem_cache_create_args(pid_3) failed with error -12 [ 31.154368][ T333] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 31.163296][ T326] CPU: 0 UID: 0 PID: 326 Comm: syz.2.3 Not tainted syzkaller #0 d976026e9b24a1e356ccef01bad6f8849cdc0f37 [ 31.163327][ T326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 31.163339][ T326] Call Trace: [ 31.163345][ T326] [ 31.163353][ T326] __dump_stack+0x21/0x30 [ 31.163386][ T326] dump_stack_lvl+0x140/0x1c0 [ 31.163411][ T326] ? __cfi_dump_stack_lvl+0x10/0x10 [ 31.163434][ T326] ? mutex_unlock+0x90/0x240 [ 31.163456][ T326] ? __cfi_mutex_unlock+0x10/0x10 [ 31.163476][ T326] ? kstrdup+0x115/0x130 [ 31.163493][ T326] ? kstrdup_const+0x3a/0x60 [ 31.163509][ T326] dump_stack+0x19/0x20 [ 31.163531][ T326] __kmem_cache_create_args+0x244/0x310 [ 31.163552][ T326] copy_pid_ns+0x47a/0xa60 [ 31.163576][ T326] ? __cfi_copy_pid_ns+0x10/0x10 [ 31.163606][ T326] ? __kasan_check_write+0x18/0x20 [ 31.163626][ T326] create_new_namespaces+0x275/0x6f0 [ 31.163660][ T326] unshare_nsproxy_namespaces+0x124/0x180 [ 31.163687][ T326] ksys_unshare+0x4f9/0x920 [ 31.163710][ T326] ? fput+0x1a4/0x230 [ 31.163734][ T326] ? __cfi_ksys_unshare+0x10/0x10 [ 31.163756][ T326] ? __kasan_check_write+0x18/0x20 [ 31.163776][ T326] __x64_sys_unshare+0x3c/0x50 [ 31.163799][ T326] x64_sys_call+0x2998/0x2ee0 [ 31.163816][ T326] do_syscall_64+0x57/0xf0 [ 31.163842][ T326] ? clear_bhb_loop+0x50/0xa0 [ 31.163866][ T326] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.163889][ T326] RIP: 0033:0x7f620e79e159 [ 31.163905][ T326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.163922][ T326] RSP: 002b:00007f620f6e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 31.163942][ T326] RAX: ffffffffffffffda RBX: 00007f620ea25fa0 RCX: 00007f620e79e159 [ 31.163956][ T326] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 31.163969][ T326] RBP: 00007f620e83506b R08: 0000000000000000 R09: 0000000000000000 [ 31.163980][ T326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 31.163992][ T326] R13: 00007f620ea26038 R14: 00007f620ea25fa0 R15: 00007ffca2a94fa8 [ 31.164008][ T326] [ 31.237085][ T342] < [ 31.318285][ T345] overlayfs: missing 'lowerdir' [ 31.631474][ T355] process 'syz.3.10' launched './file0' with NULL argv: empty string added [ 31.670191][ T45] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 31.684852][ T359] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=359 comm=syz.3.12 [ 31.821328][ T45] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 31.834252][ T45] usb 2-1: config 0 interface 0 has no altsetting 0 [ 31.841625][ T45] usb 2-1: New USB device found, idVendor=056a, idProduct=0039, bcdDevice= 0.00 [ 31.850777][ T45] usb 2-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 31.858750][ T45] usb 2-1: Product: syz [ 31.863996][ T45] usb 2-1: config 0 descriptor?? [ 31.900351][ T310] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 32.050277][ T310] usb 1-1: Using ep0 maxpacket: 32 [ 32.056912][ T310] usb 1-1: unable to get BOS descriptor or descriptor too short [ 32.065435][ T310] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 32.078173][ T310] usb 1-1: New USB device found, idVendor=0e41, idProduct=3020, bcdDevice= 0.40 [ 32.087295][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.095315][ T310] usb 1-1: Product: syz [ 32.099527][ T310] usb 1-1: Manufacturer: syz [ 32.104333][ T310] usb 1-1: SerialNumber: syz [ 32.198348][ T366] veth1: entered allmulticast mode [ 32.204815][ T366] veth1: left allmulticast mode [ 32.217671][ T368] FAULT_INJECTION: forcing a failure. [ 32.217671][ T368] name failslab, interval 1, probability 0, space 0, times 0 [ 32.230418][ T368] CPU: 0 UID: 0 PID: 368 Comm: syz.3.16 Not tainted syzkaller #0 d976026e9b24a1e356ccef01bad6f8849cdc0f37 [ 32.230447][ T368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.230459][ T368] Call Trace: [ 32.230466][ T368] [ 32.230474][ T368] __dump_stack+0x21/0x30 [ 32.230507][ T368] dump_stack_lvl+0x140/0x1c0 [ 32.230533][ T368] ? __cfi_dump_stack_lvl+0x10/0x10 [ 32.230559][ T368] ? __kasan_check_write+0x18/0x20 [ 32.230579][ T368] ? _raw_spin_lock_irq+0x93/0x120 [ 32.230597][ T368] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 32.230615][ T368] dump_stack+0x19/0x20 [ 32.230640][ T368] should_fail_ex+0x3c2/0x510 [ 32.230665][ T368] should_failslab+0xac/0x100 [ 32.230689][ T368] kmem_cache_alloc_noprof+0x42/0x410 [ 32.230718][ T368] ? __kasan_check_write+0x18/0x20 [ 32.230738][ T368] ? copy_pid_ns+0x25a/0xa60 [ 32.230765][ T368] copy_pid_ns+0x25a/0xa60 [ 32.230790][ T368] ? __cfi_copy_pid_ns+0x10/0x10 [ 32.230811][ T368] ? __kasan_check_write+0x18/0x20 [ 32.230830][ T368] create_new_namespaces+0x275/0x6f0 [ 32.230858][ T368] unshare_nsproxy_namespaces+0x124/0x180 [ 32.230885][ T368] ksys_unshare+0x4f9/0x920 [ 32.230909][ T368] ? fput+0x1a4/0x230 [ 32.230933][ T368] ? __cfi_ksys_unshare+0x10/0x10 [ 32.230955][ T368] ? __kasan_check_write+0x18/0x20 [ 32.230974][ T368] __x64_sys_unshare+0x3c/0x50 [ 32.230998][ T368] x64_sys_call+0x2998/0x2ee0 [ 32.231016][ T368] do_syscall_64+0x57/0xf0 [ 32.231033][ T368] ? clear_bhb_loop+0x50/0xa0 [ 32.231055][ T368] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.231077][ T368] RIP: 0033:0x7f92d099e159 [ 32.231094][ T368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.231109][ T368] RSP: 002b:00007f92d1903028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 32.231131][ T368] RAX: ffffffffffffffda RBX: 00007f92d0c25fa0 RCX: 00007f92d099e159 [ 32.231145][ T368] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 32.231158][ T368] RBP: 00007f92d0a3506b R08: 0000000000000000 R09: 0000000000000000 [ 32.231170][ T368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 32.231182][ T368] R13: 00007f92d0c26038 R14: 00007f92d0c25fa0 R15: 00007ffff2046718 [ 32.231198][ T368] [ 32.310657][ T357] x_tables: duplicate underflow at hook 4 [ 32.337686][ T374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.488295][ T374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.491538][ T310] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 32.509125][ T31] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 32.510337][ T310] usb 1-1: 2:1 : sample bitwidth 22 in over sample bytes 1 [ 32.522264][ T378] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 32.535417][ T310] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 32.541585][ T310] usb 1-1: 2:1 : invalid channels 0 [ 32.551633][ T310] usb 1-1: USB disconnect, device number 2 [ 32.578263][ T376] udevd[376]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 32.711201][ T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 32.722194][ T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 32.733851][ T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 32.744405][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 32.752766][ T45] usbhid 2-1:0.0: can't add hid device: -71 [ 32.758735][ T45] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 32.767401][ T31] usb 3-1: SerialNumber: syz [ 32.773527][ T373] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 32.782070][ T373] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 32.782540][ T45] usb 2-1: USB disconnect, device number 2 [ 32.995621][ T372] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 33.003011][ T372] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 33.813007][ T36] kauditd_printk_skb: 97 callbacks suppressed [ 33.813038][ T36] audit: type=1400 audit(1790021413.700:171): avc: denied { read } for pid=425 comm="syz.3.31" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 33.841756][ T36] audit: type=1400 audit(1790021413.700:172): avc: denied { open } for pid=425 comm="syz.3.31" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 33.873820][ T36] audit: type=1400 audit(1790021413.730:173): avc: denied { write } for pid=425 comm="syz.3.31" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 33.899287][ T36] audit: type=1400 audit(1790021413.730:174): avc: denied { ioctl } for pid=425 comm="syz.3.31" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x661a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 34.160174][ T66] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 34.325183][ T66] usb 4-1: config index 0 descriptor too short (expected 46899, got 36) [ 34.350616][ T66] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.382963][ T66] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 34.410268][ T36] audit: type=1400 audit(1790021414.290:175): avc: denied { read write } for pid=437 comm="syz.0.35" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 34.435910][ T66] usb 4-1: config 0 interface 0 has no altsetting 0 [ 34.443034][ T66] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 34.452202][ T66] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.460859][ T36] audit: type=1400 audit(1790021414.290:176): avc: denied { open } for pid=437 comm="syz.0.35" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 34.485171][ T36] audit: type=1400 audit(1790021414.310:177): avc: denied { ioctl } for pid=437 comm="syz.0.35" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 34.510812][ T66] usb 4-1: config 0 descriptor?? [ 35.010230][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 35.034482][ T36] audit: type=1400 audit(1790021414.920:178): avc: denied { mount } for pid=455 comm="syz.0.39" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 35.070540][ T457] netlink: 'syz.3.32': attribute type 1 has an invalid length. [ 35.092339][ T36] audit: type=1400 audit(1790021414.980:179): avc: denied { setopt } for pid=455 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 35.180208][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 35.191270][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 35.210550][ T9] usb 2-1: config 0 has no interfaces? [ 35.217530][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 35.226954][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.235221][ T9] usb 2-1: Product: syz [ 35.239466][ T9] usb 2-1: Manufacturer: syz [ 35.244414][ T9] usb 2-1: SerialNumber: syz [ 35.254145][ T9] usb 2-1: config 0 descriptor?? [ 35.321896][ T31] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 35.336949][ T31] usb 3-1: USB disconnect, device number 2 [ 35.390241][ T310] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 35.411445][ T464] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=52257 sclass=netlink_route_socket pid=464 comm=syz.2.42 [ 35.411451][ T465] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=52257 sclass=netlink_route_socket pid=465 comm=syz.2.42 [ 35.468473][ T454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.477947][ T454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.479202][ T470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.44'. [ 35.486607][ T431] usb 2-1: USB disconnect, device number 3 [ 35.500619][ T36] audit: type=1400 audit(1790021415.380:180): avc: denied { ioctl } for pid=469 comm="syz.2.44" path="/dev/input/event1" dev="devtmpfs" ino=193 ioctlcmd=0x4593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 35.540227][ T310] usb 1-1: Using ep0 maxpacket: 32 [ 35.546841][ T310] usb 1-1: unable to get BOS descriptor or descriptor too short [ 35.555453][ T310] usb 1-1: config 8 has an invalid interface number: 131 but max is 0 [ 35.563935][ T310] usb 1-1: config 8 has no interface number 0 [ 35.571559][ T310] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=37.6a [ 35.581026][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.589216][ T310] usb 1-1: Product: syz [ 35.593476][ T310] usb 1-1: Manufacturer: syz [ 35.598082][ T310] usb 1-1: SerialNumber: syz [ 35.913622][ T310] usb_ehset_test 1-1:8.131: probe with driver usb_ehset_test failed with error -32 [ 35.924021][ T310] usb 1-1: USB disconnect, device number 3 [ 35.940356][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 36.102574][ T9] usb 2-1: New USB device found, idVendor=17ba, idProduct=55aa, bcdDevice= 1.00 [ 36.111718][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.119735][ T9] usb 2-1: Product: syz [ 36.124339][ T9] usb 2-1: Manufacturer: syz [ 36.128957][ T9] usb 2-1: SerialNumber: syz [ 36.270202][ T362] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 36.339057][ T9] usb 2-1: USB disconnect, device number 4 [ 36.422073][ T362] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.432471][ T362] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 36.442874][ T362] usb 3-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 36.453066][ T362] usb 3-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 36.467744][ T362] usb 3-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 36.476910][ T362] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.485524][ T362] usb 3-1: Product: syz [ 36.489818][ T362] usb 3-1: Manufacturer: syz [ 36.494440][ T362] usb 3-1: SerialNumber: syz [ 36.500846][ T362] usb-storage 3-1:1.0: USB Mass Storage device detected [ 36.509633][ T362] scsi host1: usb-storage 3-1:1.0 [ 36.520665][ T489] capability: warning: `syz.0.48' uses deprecated v2 capabilities in a way that may be insecure [ 36.702510][ T431] usb 3-1: USB disconnect, device number 3 [ 36.906033][ T431] usb 4-1: USB disconnect, device number 2 [ 37.217522][ T501] FAULT_INJECTION: forcing a failure. [ 37.217522][ T501] name failslab, interval 1, probability 0, space 0, times 0 [ 37.230246][ T431] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 37.230292][ T501] CPU: 0 UID: 0 PID: 501 Comm: syz.2.53 Not tainted syzkaller #0 d976026e9b24a1e356ccef01bad6f8849cdc0f37 [ 37.230317][ T501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.230328][ T501] Call Trace: [ 37.230335][ T501] [ 37.230344][ T501] __dump_stack+0x21/0x30 [ 37.230377][ T501] dump_stack_lvl+0x140/0x1c0 [ 37.230403][ T501] ? __cfi_dump_stack_lvl+0x10/0x10 [ 37.230428][ T501] dump_stack+0x19/0x20 [ 37.230451][ T501] should_fail_ex+0x3c2/0x510 [ 37.230474][ T501] should_failslab+0xac/0x100 [ 37.230496][ T501] __kmalloc_cache_noprof+0x41/0x470 [ 37.230517][ T501] ? alloc_fs_context+0x6f/0x800 [ 37.230539][ T501] ? __kasan_slab_free+0x6a/0x80 [ 37.230562][ T501] alloc_fs_context+0x6f/0x800 [ 37.230585][ T501] fs_context_for_reconfigure+0x77/0x90 [ 37.230609][ T501] __se_sys_fspick+0x199/0x460 [ 37.230626][ T501] ? __x64_sys_futex+0x110/0x110 [ 37.230648][ T501] ? __x64_sys_fspick+0xa0/0xa0 [ 37.230665][ T501] ? __kasan_check_write+0x18/0x20 [ 37.230683][ T501] ? fpregs_restore_userregs+0x11c/0x260 [ 37.230713][ T501] __x64_sys_fspick+0x7f/0xa0 [ 37.230733][ T501] x64_sys_call+0x23c4/0x2ee0 [ 37.230757][ T501] do_syscall_64+0x57/0xf0 [ 37.230776][ T501] ? clear_bhb_loop+0x50/0xa0 [ 37.230800][ T501] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.230825][ T501] RIP: 0033:0x7f620e79e159 [ 37.230842][ T501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.230858][ T501] RSP: 002b:00007f620f6e4028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b1 [ 37.230879][ T501] RAX: ffffffffffffffda RBX: 00007f620ea25fa0 RCX: 00007f620e79e159 [ 37.230893][ T501] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 37.230906][ T501] RBP: 00007f620e83506b R08: 0000000000000000 R09: 0000000000000000 [ 37.230918][ T501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.230930][ T501] R13: 00007f620ea26038 R14: 00007f620ea25fa0 R15: 00007ffca2a94fa8 [ 37.230945][ T501] [ 37.300193][ T362] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 37.460320][ T431] usb 4-1: Using ep0 maxpacket: 32 [ 37.469432][ T431] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.479930][ T431] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 37.490848][ T431] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 37.501877][ T431] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 32 [ 37.521058][ T431] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 8 [ 37.535581][ T431] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 37.547899][ T431] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.557368][ T431] usb 4-1: Product: syz [ 37.561744][ T515] No source specified [ 37.566233][ T431] usb 4-1: Manufacturer: syz [ 37.570902][ T431] usb 4-1: SerialNumber: syz [ 37.580327][ T495] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 37.600168][ T362] usb 2-1: Using ep0 maxpacket: 16 [ 37.606546][ T362] usb 2-1: config 0 has an invalid interface number: 98 but max is 0 [ 37.614855][ T362] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 37.625406][ T362] usb 2-1: config 0 has no interface number 0 [ 37.631805][ T362] usb 2-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 37.641757][ T362] usb 2-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 37.652170][ T362] usb 2-1: config 0 interface 98 has no altsetting 0 [ 37.660366][ T362] usb 2-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 37.669527][ T362] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.677581][ T362] usb 2-1: Product: syz [ 37.681917][ T362] usb 2-1: Manufacturer: syz [ 37.686525][ T362] usb 2-1: SerialNumber: syz [ 37.700855][ T362] usb 2-1: config 0 descriptor?? [ 37.706173][ T499] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 37.713435][ T499] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 37.800175][ T31] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 37.830189][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 37.921438][ T499] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 37.928632][ T499] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 37.951536][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.961712][ T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 65535, setting to 64 [ 37.974106][ T31] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 37.980176][ T9] usb 1-1: device descriptor read/64, error -71 [ 37.983195][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.997438][ T31] usb 3-1: Product: syz [ 38.002129][ T31] usb 3-1: Manufacturer: syz [ 38.006756][ T31] usb 3-1: SerialNumber: syz [ 38.012401][ T511] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 38.207485][ T431] usb 4-1: USB disconnect, device number 3 [ 38.218284][ T519] udevd[519]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 38.238406][ T31] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 38.241189][ T9] usb 1-1: device descriptor read/64, error -71 [ 38.250256][ T31] usb 3-1: USB disconnect, device number 4 [ 38.500218][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 38.630204][ T9] usb 1-1: device descriptor read/64, error -71 [ 38.720253][ T522] netlink: 'syz.3.60': attribute type 12 has an invalid length. [ 38.869123][ T36] kauditd_printk_skb: 21 callbacks suppressed [ 38.869139][ T36] audit: type=1400 audit(1790021418.750:202): avc: denied { append } for pid=532 comm="syz.2.64" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.898662][ T9] usb 1-1: device descriptor read/64, error -71 [ 39.010313][ T9] usb usb1-port1: attempt power cycle [ 39.041283][ T36] audit: type=1400 audit(1790021418.930:203): avc: denied { ioctl } for pid=538 comm="syz.3.66" path="socket:[5009]" dev="sockfs" ino=5009 ioctlcmd=0x9422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 39.066274][ T36] audit: type=1400 audit(1790021418.950:204): avc: denied { write } for pid=538 comm="syz.3.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 39.155498][ T36] audit: type=1400 audit(1790021419.040:205): avc: denied { create } for pid=542 comm="syz.3.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 39.176485][ T36] audit: type=1400 audit(1790021419.060:206): avc: denied { associate } for pid=542 comm="syz.3.68" name="blkio.bfq.time" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 39.221847][ T362] asix 2-1:0.98 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 39.231943][ T362] asix 2-1:0.98 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 39.242447][ T362] asix 2-1:0.98: probe with driver asix failed with error -71 [ 39.253702][ T362] usb 2-1: USB disconnect, device number 5 [ 39.264599][ T36] audit: type=1400 audit(1790021419.150:207): avc: denied { read } for pid=545 comm="syz.3.69" name="usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 39.287746][ T36] audit: type=1400 audit(1790021419.150:208): avc: denied { open } for pid=545 comm="syz.3.69" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 39.370214][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 39.391331][ T9] usb 1-1: device descriptor read/8, error -71 [ 39.430004][ T36] audit: type=1400 audit(1790021419.310:209): avc: denied { write } for pid=545 comm="syz.3.69" name="usbmon9" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 39.521266][ T9] usb 1-1: device descriptor read/8, error -71 [ 39.655737][ T36] audit: type=1400 audit(1790021419.540:210): avc: denied { read } for pid=550 comm="syz.2.70" dev="nsfs" ino=4026532408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 39.661914][ T551] »»»»»»: renamed from vlan0 (while UP) [ 39.676810][ T36] audit: type=1400 audit(1790021419.540:211): avc: denied { open } for pid=550 comm="syz.2.70" path="net:[4026532408]" dev="nsfs" ino=4026532408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 39.760200][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 39.781176][ T9] usb 1-1: device descriptor read/8, error -71 [ 39.806373][ T557] Invalid ELF header type: 2 != 1 [ 39.911346][ T9] usb 1-1: device descriptor read/8, error -71 [ 40.020394][ T9] usb usb1-port1: unable to enumerate USB device [ 40.340194][ T31] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 40.496605][ T31] usb 4-1: New USB device found, idVendor=0a67, idProduct=5011, bcdDevice= 0.40 [ 40.505991][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.514248][ T31] usb 4-1: Product: syz [ 40.518726][ T31] usb 4-1: Manufacturer: syz [ 40.523567][ T31] usb 4-1: SerialNumber: syz [ 40.601500][ T565] serio: Serial port ttyS3 [ 40.732971][ T559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.745588][ T559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.778850][ T31] usb 4-1: MIDIStreaming interface descriptor not found [ 40.790628][ T31] usb 4-1: USB disconnect, device number 4 [ 40.860787][ T603] tmpfs: Unknown parameter 'no' [ 40.876516][ T604] tmpfs: Unknown parameter 'no' [ 41.310185][ T31] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 41.335665][ T362] logitech-hidpp-device 0003:046D:C082.0001: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 41.454481][ T616] fido_id[616]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 41.491167][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.515789][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.540894][ T31] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 41.556783][ T31] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 41.575252][ T31] usb 1-1: Manufacturer: syz [ 41.588874][ T31] usb 1-1: config 0 descriptor?? [ 41.699444][ T639] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.873493][ T653] input: syz1 as /devices/virtual/input/input4 [ 42.900213][ T66] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 42.959274][ T680] syz.1.108 uses obsolete (PF_INET,SOCK_PACKET) [ 43.053665][ T66] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 43.069372][ T66] usb 3-1: config 0 has no interface number 0 [ 43.075802][ T66] usb 3-1: config 0 interface 8 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 43.087434][ T66] usb 3-1: config 0 interface 8 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.097420][ T66] usb 3-1: config 0 interface 8 has no altsetting 0 [ 43.110861][ T66] usb 3-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00 [ 43.120056][ T66] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.132248][ T66] usb 3-1: config 0 descriptor?? [ 43.225273][ T692] netlink: 'syz.1.111': attribute type 1 has an invalid length. [ 43.286224][ T696] ======================================================= [ 43.286224][ T696] WARNING: The mand mount option has been deprecated and [ 43.286224][ T696] and is ignored by this kernel. Remove the mand [ 43.286224][ T696] option from the mount to silence this warning. [ 43.286224][ T696] ======================================================= [ 43.545571][ T66] uclogic 0003:5543:0045.0003: interface is invalid, ignoring [ 43.651310][ T698] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.660170][ T698] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.667453][ T698] bridge_slave_0: entered allmulticast mode [ 43.674453][ T698] bridge_slave_0: entered promiscuous mode [ 43.681644][ T442] bridge_slave_1: left allmulticast mode [ 43.687730][ T442] bridge_slave_1: left promiscuous mode [ 43.693977][ T442] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.702133][ T442] bridge_slave_0: left allmulticast mode [ 43.707909][ T442] bridge_slave_0: left promiscuous mode [ 43.714093][ T442] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.745452][ T66] usb 3-1: USB disconnect, device number 5 [ 43.830321][ T698] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.837796][ T698] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.845523][ T698] bridge_slave_1: entered allmulticast mode [ 43.854490][ T698] bridge_slave_1: entered promiscuous mode [ 43.877389][ T442] veth1_macvtap: left promiscuous mode [ 43.890225][ T442] veth0_vlan: left promiscuous mode [ 43.993172][ T31] uclogic 0003:256C:006D.0002: v1 frame probing failed: -71 [ 44.008113][ T31] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 44.019281][ T31] uclogic 0003:256C:006D.0002: probe with driver uclogic failed with error -71 [ 44.024258][ T698] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.032050][ T31] usb 1-1: USB disconnect, device number 8 [ 44.035731][ T698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.049017][ T698] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.056456][ T698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.097943][ T703] cgroup2: Unknown parameter 'pids_localeventsþ' [ 44.105323][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.114241][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.129943][ T343] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.137088][ T343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.146066][ T706] tipc: Enabling of bearer rejected, failed to enable media [ 44.156254][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.163354][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.175894][ T703] netlink: 44 bytes leftover after parsing attributes in process `syz.1.115'. [ 44.185008][ T703] netlink: 59 bytes leftover after parsing attributes in process `syz.1.115'. [ 44.194127][ T703] netlink: 59 bytes leftover after parsing attributes in process `syz.1.115'. [ 44.231184][ T698] veth0_vlan: entered promiscuous mode [ 44.249597][ T698] veth1_macvtap: entered promiscuous mode [ 44.266862][ T36] kauditd_printk_skb: 32 callbacks suppressed [ 44.266879][ T36] audit: type=1400 audit(1790021424.150:244): avc: denied { ioctl } for pid=712 comm="syz.0.118" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 44.299058][ T714] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1281 sclass=netlink_tcpdiag_socket pid=714 comm=syz.0.118 [ 44.301604][ T36] audit: type=1400 audit(1790021424.180:245): avc: denied { create } for pid=715 comm="syz.2.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 44.334706][ T36] audit: type=1400 audit(1790021424.200:246): avc: denied { setopt } for pid=715 comm="syz.2.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 44.378331][ T727] netlink: 76 bytes leftover after parsing attributes in process `syz.2.121'. [ 44.425001][ T738] mmap: syz.2.124 (738): VmData 29208576 exceed data ulimit 1587. Update limits or use boot option ignore_rlimit_data. [ 44.439263][ T36] audit: type=1400 audit(1790021424.320:247): avc: denied { read } for pid=737 comm="syz.2.124" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.465845][ T36] audit: type=1400 audit(1790021424.320:248): avc: denied { open } for pid=737 comm="syz.2.124" path="/28/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.494308][ T36] audit: type=1400 audit(1790021424.320:249): avc: denied { ioctl } for pid=737 comm="syz.2.124" path="/28/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.524475][ T36] audit: type=1400 audit(1790021424.320:250): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 44.568778][ T36] audit: type=1400 audit(1790021424.350:251): avc: denied { bind } for pid=740 comm="syz.2.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 44.586345][ T753] tipc: Started in network mode [ 44.591007][ T36] audit: type=1400 audit(1790021424.350:252): avc: denied { bind } for pid=740 comm="syz.2.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 44.593055][ T66] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 44.612256][ T36] audit: type=1400 audit(1790021424.350:253): avc: denied { map } for pid=740 comm="syz.2.125" path="socket:[7778]" dev="sockfs" ino=7778 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 44.621946][ T753] tipc: Node identity fec3, cluster identity 1 [ 44.650564][ T754] Zero length message leads to an empty skb [ 44.654878][ T753] tipc: Node number set to 65219 [ 44.712587][ T765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.133'. [ 44.736206][ T767] rust_binder: 766:767 got transaction to invalid handle 4294967293 [ 44.744344][ T767] rust_binder: 766:767 transaction call to 0:0 failed ENOENT, code 0 size 0-0 [ 44.801903][ T66] usb 1-1: unable to get BOS descriptor or descriptor too short [ 44.810866][ T66] usb 1-1: not running at top speed; connect to a high speed hub [ 44.819420][ T66] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 44.829598][ T66] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 44.839824][ T66] usb 1-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 44.848986][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.857084][ T66] usb 1-1: Product: syz [ 44.861490][ T66] usb 1-1: Manufacturer: syz [ 44.866166][ T66] usb 1-1: SerialNumber: syz [ 44.990189][ T45] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 45.078365][ T66] usb 1-1: 3:0: failed to get current value for ch 0 (-71) [ 45.088484][ T66] usb 1-1: 3:0: failed to get current value for ch 0 (-71) [ 45.098469][ T66] usb 1-1: 3:0: failed to get current value for ch 0 (-71) [ 45.108680][ T66] usb 1-1: 3:0: cannot get min/max values for control 12 (id 3) [ 45.117252][ T66] usb 1-1: 3:0: failed to get current value for ch 0 (-71) [ 45.128018][ T66] usb 1-1: USB disconnect, device number 9 [ 45.140179][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 45.143203][ T376] udevd[376]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 45.146944][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 45.180522][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 45.197826][ T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 45.208451][ T45] usb 3-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 45.217860][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.236172][ T45] usb 3-1: Product: syz [ 45.242530][ T45] usb 3-1: Manufacturer: syz [ 45.247252][ T45] usb 3-1: SerialNumber: syz [ 45.259623][ T45] usb 3-1: 0:1 : does not exist [ 45.265117][ T45] usb 3-1: 0:2 : does not exist [ 45.459731][ T66] rust_binder: 766: undelivered TRANSACTION_ERROR: 29201 [ 45.470557][ T45] usb 3-1: 3:0: failed to get current value for ch 0 (-22) [ 45.483192][ T45] usb 3-1: 3:0: cannot get min/max values for control 2 (id 3) [ 45.493572][ T45] usb 3-1: 3:0: cannot get min/max values for control 3 (id 3) [ 45.506117][ T45] usb 3-1: USB disconnect, device number 6 [ 45.610170][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 45.790235][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 45.796554][ T9] usb 5-1: config 0 has an invalid interface number: 98 but max is 0 [ 45.806123][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 45.816847][ T9] usb 5-1: config 0 has no interface number 0 [ 45.824375][ T9] usb 5-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 45.835497][ T9] usb 5-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 45.845932][ T9] usb 5-1: config 0 interface 98 has no altsetting 0 [ 45.854422][ T9] usb 5-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 45.863816][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.872212][ T9] usb 5-1: Product: syz [ 45.876531][ T9] usb 5-1: Manufacturer: syz [ 45.881464][ T9] usb 5-1: SerialNumber: syz [ 45.890397][ T9] usb 5-1: config 0 descriptor?? [ 45.895859][ T795] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 45.903154][ T362] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 45.910926][ T795] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 46.060197][ T362] usb 1-1: Using ep0 maxpacket: 8 [ 46.066927][ T362] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.077885][ T362] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 46.078322][ T804] MTRR 1 not used [ 46.090816][ T805] MTRR 1 not used [ 46.093896][ T362] usb 1-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 46.103911][ T362] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.112433][ T362] usb 1-1: Product: syz [ 46.116706][ T362] usb 1-1: Manufacturer: syz [ 46.122568][ T362] usb 1-1: SerialNumber: syz [ 46.123087][ T795] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 46.134770][ T795] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 46.339585][ T797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.348831][ T797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.360536][ T362] usb 1-1: 0:32 : does not exist [ 46.368598][ T362] usb 1-1: USB disconnect, device number 10 [ 46.406784][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 46.560341][ T808] capability: warning: `syz.2.145' uses 32-bit capabilities (legacy support in use) [ 46.644312][ T814] netlink: 'syz.2.147': attribute type 4 has an invalid length. [ 46.652161][ T814] netlink: 17 bytes leftover after parsing attributes in process `syz.2.147'. [ 46.757922][ T9] asix 5-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 46.769137][ T9] asix 5-1:0.98: probe with driver asix failed with error -71 [ 46.791149][ T9] usb 5-1: USB disconnect, device number 2 [ 47.760185][ T431] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 47.788130][ T850] overlayfs: missing 'lowerdir' [ 47.910161][ T431] usb 1-1: device descriptor read/64, error -71 [ 48.150189][ T431] usb 1-1: device descriptor read/64, error -71 [ 48.300205][ T66] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 48.400225][ T431] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 48.461358][ T66] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 48.472503][ T66] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 48.483839][ T66] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 30768, setting to 64 [ 48.495015][ T66] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 48.509213][ T66] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 48.518650][ T66] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 48.527196][ T66] usb 3-1: SerialNumber: syz [ 48.532064][ T431] usb 1-1: device descriptor read/64, error -71 [ 48.540416][ T861] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 48.751400][ T66] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 48.762758][ T66] usb 3-1: USB disconnect, device number 7 [ 48.777692][ T431] usb 1-1: device descriptor read/64, error -71 [ 48.890268][ T431] usb usb1-port1: attempt power cycle [ 49.202963][ T869] x_tables: duplicate underflow at hook 1 [ 49.230190][ T431] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 49.288301][ T431] usb 1-1: device descriptor read/8, error -71 [ 49.343730][ T36] kauditd_printk_skb: 21 callbacks suppressed [ 49.343747][ T36] audit: type=1400 audit(1790021429.230:275): avc: denied { mount } for pid=872 comm="syz.2.163" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 49.373391][ T873] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=256 sclass=netlink_tcpdiag_socket pid=873 comm=syz.2.163 [ 49.407319][ T875] Falling back ldisc for ttyS3. [ 49.413033][ T36] audit: type=1400 audit(1790021429.300:276): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 49.446241][ T431] usb 1-1: device descriptor read/8, error -71 [ 49.473178][ T36] audit: type=1400 audit(1790021429.360:277): avc: denied { write } for pid=878 comm="syz.4.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 49.530232][ T36] audit: type=1400 audit(1790021429.360:278): avc: denied { ioctl } for pid=878 comm="syz.4.166" path="socket:[8213]" dev="sockfs" ino=8213 ioctlcmd=0x5872 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 49.566054][ T36] audit: type=1400 audit(1790021429.360:279): avc: denied { ioctl } for pid=878 comm="syz.4.166" path="socket:[8212]" dev="sockfs" ino=8212 ioctlcmd=0x586a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 49.730163][ T431] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 49.761171][ T431] usb 1-1: device descriptor read/8, error -71 [ 49.891494][ T431] usb 1-1: device descriptor read/8, error -71 [ 50.000291][ T431] usb usb1-port1: unable to enumerate USB device [ 50.410211][ T36] audit: type=1400 audit(1790021430.290:280): avc: denied { mount } for pid=894 comm="syz.4.170" name="/" dev="pstore" ino=2676 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 50.444746][ T898] netlink: 'syz.4.172': attribute type 1 has an invalid length. [ 50.459611][ T36] audit: type=1400 audit(1790021430.340:281): avc: denied { remount } for pid=896 comm="syz.4.172" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 50.546296][ T36] audit: type=1400 audit(1790021430.430:282): avc: denied { watch } for pid=904 comm="syz.0.174" path="/36" dev="tmpfs" ino=206 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 50.567120][ T902] overlay: filesystem on ./file0 not supported as upperdir [ 50.576844][ T903] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 50.586275][ T906] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 50.595754][ T902] GUP no longer grows the stack in syz.4.173 (902): 200000005000-200000008000 (200000004000) [ 50.606316][ T902] CPU: 0 UID: 0 PID: 902 Comm: syz.4.173 Not tainted syzkaller #0 d976026e9b24a1e356ccef01bad6f8849cdc0f37 [ 50.606343][ T902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 50.606355][ T902] Call Trace: [ 50.606361][ T902] [ 50.606368][ T902] __dump_stack+0x21/0x30 [ 50.606397][ T902] dump_stack_lvl+0x140/0x1c0 [ 50.606420][ T902] ? __cfi_dump_stack_lvl+0x10/0x10 [ 50.606459][ T902] ? find_vma+0xd3/0x120 [ 50.606479][ T902] dump_stack+0x19/0x20 [ 50.606501][ T902] fixup_user_fault+0x616/0x6a0 [ 50.606522][ T902] fault_in_user_writeable+0x75/0xe0 [ 50.606545][ T902] futex_lock_pi+0x2ed/0xa70 [ 50.606569][ T902] ? futex_unqueue+0x136/0x160 [ 50.606592][ T902] ? __cfi_futex_lock_pi+0x10/0x10 [ 50.606617][ T902] ? __cfi_futex_wake_mark+0x10/0x10 [ 50.606636][ T902] ? __cfi_futex_wake_mark+0x10/0x10 [ 50.606655][ T902] do_futex+0x270/0x510 [ 50.606678][ T902] ? __cfi_do_futex+0x10/0x10 [ 50.606699][ T902] ? __vm_munmap+0x30d/0x3d0 [ 50.606719][ T902] __se_sys_futex+0x13c/0x320 [ 50.606743][ T902] ? __x64_sys_futex+0x110/0x110 [ 50.606766][ T902] ? __kasan_check_write+0x18/0x20 [ 50.606785][ T902] __x64_sys_futex+0xe9/0x110 [ 50.606808][ T902] x64_sys_call+0x227f/0x2ee0 [ 50.606824][ T902] do_syscall_64+0x57/0xf0 [ 50.606841][ T902] ? clear_bhb_loop+0x50/0xa0 [ 50.606863][ T902] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.606888][ T902] RIP: 0033:0x7f0dcb99e159 [ 50.606908][ T902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.606922][ T902] RSP: 002b:00007f0dcc8ef028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 50.606942][ T902] RAX: ffffffffffffffda RBX: 00007f0dcbc25fa0 RCX: 00007f0dcb99e159 [ 50.606960][ T902] RDX: 0000000000000001 RSI: 000000000000008d RDI: 0000200000004000 [ 50.606984][ T902] RBP: 00007f0dcba3506b R08: 0000000000000000 R09: 0000000000000001 [ 50.606996][ T902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.607007][ T902] R13: 00007f0dcbc26038 R14: 00007f0dcbc25fa0 R15: 00007ffd76a602b8 [ 50.607023][ T902] [ 50.690234][ T431] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 50.834480][ T905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.174'. [ 50.844935][ T36] audit: type=1400 audit(1790021430.730:283): avc: denied { append } for pid=904 comm="syz.0.174" name="event2" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 50.981209][ T431] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.000164][ T431] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 51.009098][ T431] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 51.040152][ T431] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 36, setting to 8 [ 51.060179][ T431] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 51.069273][ T431] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.091085][ T899] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 51.098999][ T431] hub 3-1:1.0: bad descriptor, ignoring hub [ 51.110156][ T431] hub 3-1:1.0: probe with driver hub failed with error -5 [ 51.117492][ T431] cdc_wdm 3-1:1.0: skipping garbage [ 51.140160][ T431] cdc_wdm 3-1:1.0: skipping garbage [ 51.145995][ T431] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 51.160174][ T431] cdc_wdm 3-1:1.0: Unknown control protocol [ 51.160168][ T9] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 51.310150][ T9] usb 5-1: device descriptor read/64, error -71 [ 51.410265][ T66] usb 3-1: USB disconnect, device number 8 [ 51.570348][ T9] usb 5-1: device descriptor read/64, error -71 [ 51.820164][ T9] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 51.960186][ T9] usb 5-1: device descriptor read/64, error -71 [ 52.070162][ T66] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 52.200169][ T9] usb 5-1: device descriptor read/64, error -71 [ 52.241226][ T66] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 52.249361][ T66] usb 3-1: config 0 has no interface number 0 [ 52.270155][ T66] usb 3-1: config 0 interface 41 has no altsetting 0 [ 52.278321][ T66] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 52.287485][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.310158][ T66] usb 3-1: Product: syz [ 52.314367][ T66] usb 3-1: Manufacturer: syz [ 52.318976][ T66] usb 3-1: SerialNumber: syz [ 52.320313][ T9] usb usb5-port1: attempt power cycle [ 52.330905][ T66] usb 3-1: config 0 descriptor?? [ 52.546326][ T922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.560448][ T922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.670213][ T9] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 52.701151][ T9] usb 5-1: device descriptor read/8, error -71 [ 52.801254][ T36] audit: type=1400 audit(1790021432.680:284): avc: denied { mounton } for pid=925 comm="syz.0.180" path="/40/file0" dev="tmpfs" ino=231 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 52.825488][ T927] fuse: Unknown parameter '000000000000000000000460x0000000000000005' [ 52.834698][ T927] fuse: Unknown parameter '000000000000000000000460x0000000000000005' [ 52.843768][ T9] usb 5-1: device descriptor read/8, error -71 [ 52.850077][ T927] fuse: Unknown parameter '000000000000000000000460x0000000000000005' [ 52.858784][ T927] fuse: Unknown parameter '000000000000000000000460x0000000000000005' [ 52.867725][ T927] fuse: Unknown parameter '000000000000000000000460x0000000000000005' [ 52.876404][ T927] fuse: Unknown parameter '000000000000000000000460x0000000000000005' [ 52.900244][ T927] fuse: Unknown parameter '000000000000000000000460x0000000000000005' [ 52.908695][ T927] fuse: Unknown parameter '000000000000000000000460x0000000000000005' [ 52.989969][ T66] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 53.001228][ T66] usb 3-1: USB disconnect, device number 9 [ 53.080201][ T9] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 53.111149][ T9] usb 5-1: device descriptor read/8, error -71 [ 53.241265][ T9] usb 5-1: device descriptor read/8, error -71 [ 53.360183][ T9] usb usb5-port1: unable to enumerate USB device [ 53.740178][ T66] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 53.891356][ T66] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.915386][ T66] usb 3-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.00 [ 53.937549][ T66] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.962828][ T66] usb 3-1: config 0 descriptor?? [ 54.194659][ T940] syzkaller1: entered promiscuous mode [ 54.210176][ T940] syzkaller1: entered allmulticast mode [ 54.223351][ T940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.240537][ T940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.260916][ T66] usbhid 3-1:0.0: can't add hid device: -71 [ 54.280204][ T66] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 54.296772][ T66] usb 3-1: USB disconnect, device number 10 [ 54.720159][ T9] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 54.881215][ T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 54.890574][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.915274][ T9] usb 3-1: config 0 descriptor?? [ 55.151286][ T971] FAULT_INJECTION: forcing a failure. [ 55.151286][ T971] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 55.165010][ T971] CPU: 0 UID: 0 PID: 971 Comm: syz.0.190 Not tainted syzkaller #0 d976026e9b24a1e356ccef01bad6f8849cdc0f37 [ 55.165045][ T971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 55.165073][ T971] Call Trace: [ 55.165079][ T971] [ 55.165087][ T971] __dump_stack+0x21/0x30 [ 55.165124][ T971] dump_stack_lvl+0x140/0x1c0 [ 55.165155][ T971] ? __cfi_dump_stack_lvl+0x10/0x10 [ 55.165180][ T971] ? futex_wake+0x666/0x950 [ 55.165202][ T971] dump_stack+0x19/0x20 [ 55.165224][ T971] should_fail_ex+0x3c2/0x510 [ 55.165254][ T971] should_fail+0xf/0x20 [ 55.165273][ T971] should_fail_usercopy+0x1e/0x30 [ 55.165294][ T971] strncpy_from_user+0x29/0x280 [ 55.165320][ T971] path_setxattr+0x142/0x5a0 [ 55.165345][ T971] ? do_futex+0x37d/0x510 [ 55.165373][ T971] ? simple_xattrs_free+0x180/0x180 [ 55.165397][ T971] ? xfd_validate_state+0x68/0x140 [ 55.165422][ T971] ? __kasan_check_write+0x18/0x20 [ 55.165440][ T971] ? fpregs_restore_userregs+0x11c/0x260 [ 55.165467][ T971] __x64_sys_lsetxattr+0xc6/0xe0 [ 55.165486][ T971] x64_sys_call+0x2db8/0x2ee0 [ 55.165502][ T971] do_syscall_64+0x57/0xf0 [ 55.165520][ T971] ? clear_bhb_loop+0x50/0xa0 [ 55.165542][ T971] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 55.165563][ T971] RIP: 0033:0x7effc779e159 [ 55.165578][ T971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.165593][ T971] RSP: 002b:00007effc8627028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 55.165611][ T971] RAX: ffffffffffffffda RBX: 00007effc7a25fa0 RCX: 00007effc779e159 [ 55.165625][ T971] RDX: 0000200000000180 RSI: 00002000000000c0 RDI: 0000200000000040 [ 55.165639][ T971] RBP: 00007effc783506b R08: 0000000000000000 R09: 0000000000000000 [ 55.165650][ T971] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000000 [ 55.165661][ T971] R13: 00007effc7a26038 R14: 00007effc7a25fa0 R15: 00007fff6a23d748 [ 55.165677][ T971] [ 55.371597][ T9] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 55.382400][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0004/input/input5 [ 55.425930][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 55.425947][ T36] audit: type=1400 audit(1790021435.310:286): avc: denied { create } for pid=978 comm="syz.0.192" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 55.461596][ T9] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 55.491863][ T36] audit: type=1400 audit(1790021435.340:287): avc: denied { append } for pid=978 comm="syz.0.192" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 55.687506][ T986] netlink: 'syz.0.193': attribute type 1 has an invalid length. [ 55.695345][ T986] netlink: 'syz.0.193': attribute type 2 has an invalid length. [ 55.703621][ T986] netlink: 48 bytes leftover after parsing attributes in process `syz.0.193'. [ 55.714116][ T986] bridge0: port 3(veth0_to_bridge) entered blocking state [ 55.721512][ T986] bridge0: port 3(veth0_to_bridge) entered disabled state [ 55.728946][ T986] veth0_to_bridge: entered allmulticast mode [ 55.735711][ T986] veth0_to_bridge: entered promiscuous mode [ 55.742081][ T986] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 55.754739][ T986] bridge0: port 3(veth0_to_bridge) entered blocking state [ 55.761905][ T986] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 56.620198][ T9] usb 3-1: reset full-speed USB device number 11 using dummy_hcd [ 57.272844][ T36] audit: type=1400 audit(1790021437.150:288): avc: denied { cmd } for pid=1008 comm="iou-wrk-1009" path="socket:[11896]" dev="sockfs" ino=11896 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 57.320444][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 57.332755][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 57.333751][ T36] audit: type=1400 audit(1790021437.200:289): avc: denied { ioctl } for pid=1008 comm="syz.2.199" path="socket:[11897]" dev="sockfs" ino=11897 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 57.344951][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 57.382231][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 57.394369][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 57.406421][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 57.418574][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 57.430809][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 57.443116][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 57.455213][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 59.118337][ T1025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.138659][ T1025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.330271][ C0] net_ratelimit: 71404 callbacks suppressed [ 62.330292][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 62.348838][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 62.360966][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 62.373165][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 62.385302][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 62.397372][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 62.409728][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 62.421836][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 62.433866][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 62.446044][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 63.252681][ T310] usb 3-1: USB disconnect, device number 11 [ 64.300125][ C0] sched: DL replenish lagged too much [ 67.253952][ T310] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 67.340178][ C1] net_ratelimit: 150221 callbacks suppressed [ 67.340199][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 67.340237][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 67.346309][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 67.358342][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 67.370339][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 67.382297][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 67.394280][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 67.406440][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 67.418331][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 67.430393][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 70.062679][ T430] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 71.363985][ T430] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 71.530885][ T430] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 72.350153][ C1] net_ratelimit: 147937 callbacks suppressed [ 72.350173][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 72.350228][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 72.356235][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 72.368215][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 72.380309][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 72.392250][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 72.404150][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 72.416466][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 72.428168][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 72.440301][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 77.360134][ C1] net_ratelimit: 153435 callbacks suppressed [ 77.360157][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 77.360192][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 77.366262][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 77.378238][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 77.390234][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 77.402198][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 77.414077][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 77.426311][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 77.438169][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 77.450106][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 82.370141][ C1] net_ratelimit: 152103 callbacks suppressed [ 82.370163][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 82.370186][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 82.376229][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 82.388361][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 82.400122][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 82.412053][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 82.424043][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 82.436026][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 82.447888][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 82.460003][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 87.380180][ C1] net_ratelimit: 159809 callbacks suppressed [ 87.380201][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 87.380226][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 87.386261][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 87.398331][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 87.410328][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 87.422316][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 87.434182][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 87.446213][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 87.458098][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 87.470071][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 87.550608][ T430] usb 3-1: New USB device found, idVendor=1686, idProduct=00dd, bcdDevice= 0.40 [ 87.559858][ T430] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.141623][ T430] usb 3-1: can't set config #1, error -71 [ 89.220361][ T430] usb 3-1: USB disconnect, device number 13 [ 92.390145][ C1] net_ratelimit: 162219 callbacks suppressed [ 92.390166][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 92.390355][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 92.396246][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 92.408256][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 92.420219][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 92.432251][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 92.444065][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 92.456081][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 92.468084][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 92.480058][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 97.400117][ C0] net_ratelimit: 160201 callbacks suppressed [ 97.400139][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 97.400145][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 97.400215][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 97.406210][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 97.418144][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 97.430157][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 97.442184][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 97.454216][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 97.466108][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 97.478085][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 102.410121][ C1] net_ratelimit: 160566 callbacks suppressed [ 102.410142][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 102.410165][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 102.416240][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 102.428248][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 102.440138][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 102.452260][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 102.463968][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 102.475992][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 102.487937][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 102.499919][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 107.420113][ C1] net_ratelimit: 159973 callbacks suppressed [ 107.420134][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 107.420163][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 107.426217][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 107.438373][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 107.450149][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 107.462201][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 107.474053][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 107.486063][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 107.497916][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 107.510052][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 112.430129][ C1] net_ratelimit: 162057 callbacks suppressed [ 112.430150][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 112.430184][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 112.436308][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 112.448348][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 112.460275][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 112.472234][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 112.484222][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 112.496176][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 112.508102][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 112.520231][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 117.440135][ C1] net_ratelimit: 159153 callbacks suppressed [ 117.440155][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 117.440232][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 117.446286][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 117.458203][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 117.470229][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 117.482189][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 117.494073][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 117.506334][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 117.518103][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 117.530141][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 122.450133][ C0] net_ratelimit: 160393 callbacks suppressed [ 122.450156][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 122.450183][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 122.456254][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 122.468164][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 122.480337][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 122.492272][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 122.504229][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 122.516223][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 122.528271][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 122.540219][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 127.460122][ C0] net_ratelimit: 158493 callbacks suppressed [ 127.460149][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 127.460174][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 127.466259][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 127.478140][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 127.490181][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 127.502086][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 127.514063][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 127.526043][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 127.538017][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 127.549914][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 132.470109][ C0] net_ratelimit: 155657 callbacks suppressed [ 132.470132][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 132.470153][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 132.476257][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 132.488207][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 132.500276][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 132.512147][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 132.524099][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 132.536104][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 132.548135][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 132.559988][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 137.480134][ C0] net_ratelimit: 156496 callbacks suppressed [ 137.480156][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 137.480186][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 137.486306][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 137.498281][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 137.510293][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 137.522172][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 137.534152][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 137.546028][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 137.558041][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 137.569904][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 142.490105][ C1] net_ratelimit: 160481 callbacks suppressed [ 142.490127][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 142.490152][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 142.496219][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 142.508468][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.520355][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 142.532413][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.544330][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 142.556464][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.568364][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 142.580287][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 147.500086][ C0] net_ratelimit: 158264 callbacks suppressed [ 147.500107][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 147.500115][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 147.500165][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 147.506183][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.518092][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 147.530112][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.542039][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 147.554116][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.565883][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 147.577889][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 152.510088][ C1] net_ratelimit: 162652 callbacks suppressed [ 152.510114][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 152.510138][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 152.516199][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 152.528198][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.540142][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 152.552146][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.564045][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 152.576011][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.587981][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 152.599948][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 157.520088][ C0] net_ratelimit: 166875 callbacks suppressed [ 157.520113][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 157.520152][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 157.526364][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.538373][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 157.550755][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.562679][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 157.574873][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.586874][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 157.598985][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 157.613032][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 162.530117][ C0] net_ratelimit: 150672 callbacks suppressed [ 162.530137][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 162.530174][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 162.536222][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.548206][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 162.560193][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.572074][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 162.584242][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.596163][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 162.608186][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 162.620118][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 167.540115][ C1] net_ratelimit: 153732 callbacks suppressed [ 167.540136][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 167.540189][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.546197][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 167.558182][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 167.570104][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 167.582080][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 167.593951][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 167.605916][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.618030][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 167.630367][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.550092][ C0] net_ratelimit: 152691 callbacks suppressed [ 172.550113][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 172.550137][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 172.556217][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 172.568195][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 172.580146][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.592120][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 172.604209][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.616021][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 172.627975][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.639971][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 177.542360][ T1049] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.549442][ T1049] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.560074][ C1] net_ratelimit: 151867 callbacks suppressed [ 177.560097][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 177.560106][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.560148][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.566140][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 177.578133][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 177.590138][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 177.602019][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.613993][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 177.625910][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.638215][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 177.688654][ T1049] bridge_slave_0: entered allmulticast mode [ 177.710753][ T1049] bridge_slave_0: entered promiscuous mode [ 177.813297][ T1049] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.822378][ T1049] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.829483][ T1049] bridge_slave_1: entered allmulticast mode [ 177.851851][ T1049] bridge_slave_1: entered promiscuous mode [ 182.570112][ C1] net_ratelimit: 159187 callbacks suppressed [ 182.570140][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 182.570269][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.576392][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 182.588451][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.600488][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 182.612432][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 182.624865][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 182.636903][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.648771][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 182.661129][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.202873][ T1052] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.209956][ T1052] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.231648][ T1052] bridge_slave_0: entered allmulticast mode [ 185.261617][ T1052] bridge_slave_0: entered promiscuous mode [ 185.670634][ T1053] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.677787][ T1053] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.701246][ T1053] bridge_slave_0: entered allmulticast mode [ 185.731015][ T1053] bridge_slave_0: entered promiscuous mode [ 185.853849][ T1053] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.881107][ T1053] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.888335][ T1053] bridge_slave_1: entered allmulticast mode [ 185.931332][ T1053] bridge_slave_1: entered promiscuous mode [ 186.032222][ T1052] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.039302][ T1052] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.062614][ T1052] bridge_slave_1: entered allmulticast mode [ 186.091923][ T1052] bridge_slave_1: entered promiscuous mode [ 187.059606][ T1051] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.091767][ T1051] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.098920][ T1051] bridge_slave_0: entered allmulticast mode [ 187.151639][ T1051] bridge_slave_0: entered promiscuous mode [ 187.580097][ C1] net_ratelimit: 141459 callbacks suppressed [ 187.580118][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 187.580268][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.586183][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 187.598269][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 187.610177][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 187.622414][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 187.634296][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 187.647241][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.660131][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 187.671333][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.741716][ T1051] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.748782][ T1051] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.761538][ T1051] bridge_slave_1: entered allmulticast mode [ 187.780407][ T1051] bridge_slave_1: entered promiscuous mode [ 192.363111][ T37] INFO: task syz.1.79:577 blocked for more than 122 seconds. [ 192.590081][ C1] net_ratelimit: 146705 callbacks suppressed [ 192.590101][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 192.590132][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.596410][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 192.609642][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.622011][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 192.634536][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 192.646732][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 192.658957][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.670956][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 192.682961][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.843656][ T36] audit: type=1400 audit(1790021572.340:290): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[1531]" dev="pipefs" ino=1531 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 192.900304][ T37] Not tainted syzkaller #0 [ 192.905294][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 193.132646][ T37] task:syz.1.79 state:D stack:0 pid:577 tgid:577 ppid:293 flags:0x00004006 [ 193.143156][ T37] Call Trace: [ 193.146556][ T37] [ 193.149504][ T37] __schedule+0x1496/0x20b0 [ 193.154158][ T37] ? __sched_text_start+0x10/0x10 [ 193.159221][ T37] ? __kasan_check_write+0x18/0x20 [ 193.164496][ T37] ? _raw_spin_lock+0x92/0x120 [ 193.169299][ T37] ? __cfi__raw_spin_lock+0x10/0x10 [ 193.174559][ T37] schedule+0xc5/0x240 [ 193.178683][ T37] schedule_preempt_disabled+0x14/0x30 [ 193.184234][ T37] __mutex_lock+0x902/0x1b90 [ 193.188839][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 193.195664][ T37] ? __kasan_check_write+0x18/0x20 [ 193.200903][ T37] ? _raw_spin_lock+0x92/0x120 [ 193.205765][ T37] ? __kasan_check_write+0x18/0x20 [ 193.210913][ T37] ? wake_up_q+0x10a/0x1c0 [ 193.215347][ T37] ? __mutex_unlock_slowpath+0x48f/0x780 [ 193.221126][ T37] ? mutex_unlock+0x240/0x240 [ 193.225845][ T37] __mutex_lock_slowpath+0xe/0x20 [ 193.230906][ T37] mutex_lock+0x113/0x1d0 [ 193.235252][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 193.243283][ T37] ? __cfi_tun_chr_close+0x10/0x10 [ 193.248418][ T37] ? __cfi_tun_chr_close+0x10/0x10 [ 193.253654][ T37] rcu_barrier+0x4d/0x580 [ 193.258116][ T37] ? __kasan_slab_free+0x6a/0x80 [ 193.263117][ T37] ? __cfi_tun_chr_close+0x10/0x10 [ 193.268244][ T37] netdev_run_todo+0x118/0xce0 [ 193.273042][ T37] ? kvfree+0x39/0x50 [ 193.277069][ T37] ? netdev_state_change+0xaa/0x240 [ 193.282443][ T37] ? __cfi_netdev_run_todo+0x10/0x10 [ 193.287759][ T37] ? __cfi_tun_chr_close+0x10/0x10 [ 193.293685][ T37] rtnl_unlock+0x12/0x20 [ 193.298114][ T37] tun_chr_close+0xc5/0x150 [ 193.303206][ T37] __fput+0x20b/0xa30 [ 193.308108][ T37] ____fput+0x20/0x30 [ 193.312272][ T37] task_work_run+0x1e5/0x260 [ 193.317345][ T37] ? __cfi_task_work_run+0x10/0x10 [ 193.322608][ T37] ? free_nsproxy+0x223/0x290 [ 193.327341][ T37] do_exit+0xa46/0x2850 [ 193.331541][ T37] ? __cfi_do_exit+0x10/0x10 [ 193.336974][ T37] ? __kasan_check_write+0x18/0x20 [ 193.342118][ T37] ? _raw_spin_lock_irq+0x93/0x120 [ 193.347316][ T37] ? __kasan_check_read+0x15/0x20 [ 193.352465][ T37] do_group_exit+0x21f/0x2f0 [ 193.357065][ T37] ? cgroup_leave_frozen+0x16a/0x2a0 [ 193.362365][ T37] get_signal+0x134c/0x1490 [ 193.366868][ T37] arch_do_signal_or_restart+0xbc/0x700 [ 193.372433][ T37] ? common_nsleep+0x93/0xb0 [ 193.377166][ T37] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 193.383335][ T37] ? __se_sys_clock_nanosleep+0x321/0x3b0 [ 193.389049][ T37] ? __kasan_check_read+0x15/0x20 [ 193.394117][ T37] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 193.400267][ T37] syscall_exit_to_user_mode+0x57/0xb0 [ 193.405729][ T37] do_syscall_64+0x63/0xf0 [ 193.410140][ T37] ? clear_bhb_loop+0x50/0xa0 [ 193.414822][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 193.420761][ T37] RIP: 0033:0x7fd5abf5e98e [ 193.425167][ T37] RSP: 002b:00007fd5acdb9f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 193.433579][ T37] RAX: fffffffffffffdfc RBX: 00007fd5acdba6c0 RCX: 00007fd5abf5e98e [ 193.441571][ T37] RDX: 00007fd5acdb9fb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 193.449617][ T37] RBP: 00007fd5ac03506b R08: 0000000000000000 R09: 0000000000000000 [ 193.457711][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.465714][ T37] R13: 00007fd5ac226038 R14: 00007fd5ac225fa0 R15: 00007fff2e5f8668 [ 193.473808][ T37] [ 193.871103][ T37] NMI backtrace for cpu 1 [ 193.871125][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 d976026e9b24a1e356ccef01bad6f8849cdc0f37 [ 193.871151][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 193.871163][ T37] Call Trace: [ 193.871170][ T37] [ 193.871179][ T37] __dump_stack+0x21/0x30 [ 193.871210][ T37] dump_stack_lvl+0x140/0x1c0 [ 193.871234][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 193.871260][ T37] dump_stack+0x19/0x20 [ 193.871282][ T37] nmi_cpu_backtrace+0x2ba/0x2d0 [ 193.871301][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 193.871317][ T37] ? rcu_read_unlock_special+0x150/0x420 [ 193.871344][ T37] ? sched_show_task+0x371/0x530 [ 193.871369][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 193.871393][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 193.871417][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 193.871435][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 193.871458][ T37] cpumask_backtrace+0x1f/0x30 [ 193.871474][ T37] watchdog+0xe45/0xf90 [ 193.871490][ T37] ? __kasan_check_write+0x18/0x20 [ 193.871507][ T37] ? __cfi_watchdog+0x10/0x10 [ 193.871525][ T37] ? __kasan_check_read+0x15/0x20 [ 193.871553][ T37] ? __kthread_parkme+0x12f/0x180 [ 193.871572][ T37] ? schedule+0xc5/0x240 [ 193.871591][ T37] kthread+0x2c4/0x360 [ 193.871611][ T37] ? __cfi_watchdog+0x10/0x10 [ 193.871630][ T37] ? __cfi_kthread+0x10/0x10 [ 193.871650][ T37] ret_from_fork+0x64/0xa0 [ 193.871675][ T37] ? __cfi_kthread+0x10/0x10 [ 193.871696][ T37] ret_from_fork_asm+0x1a/0x30 [ 193.871715][ T37] [ 193.871722][ T37] Sending NMI from CPU 1 to CPUs 0: [ 194.077529][ C0] NMI backtrace for cpu 0 [ 194.077547][ C0] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 d976026e9b24a1e356ccef01bad6f8849cdc0f37 [ 194.077567][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 194.077578][ C0] Workqueue: wg-crypt-wg2 wg_packet_decrypt_worker [ 194.077605][ C0] RIP: 0010:find_match+0x14/0x10d0 [ 194.077623][ C0] Code: 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 81 ec 98 00 00 00 <4c> 89 8d 60 ff ff ff 4d 89 c5 41 89 ce 89 55 b0 41 89 f4 48 89 fb [ 194.077636][ C0] RSP: 0018:ffffc90000007210 EFLAGS: 00000282 [ 194.077648][ C0] RAX: dffffc0000000000 RBX: 1ffff11021a6f80c RCX: 0000000000000003 [ 194.077659][ C0] RDX: 0000000000000017 RSI: 0000000000000001 RDI: ffff88810d37c0c0 [ 194.077669][ C0] RBP: ffffc900000072d0 R08: ffffc90000007540 R09: ffffc90000007550 [ 194.077680][ C0] R10: ffffc900000076b0 R11: fffff52000000eda R12: ffff88810d37c0c0 [ 194.077691][ C0] R13: ffff88810d37c0b0 R14: ffff88810d37c000 R15: 0000000000000001 [ 194.077702][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 194.077714][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 194.077725][ C0] CR2: 00007f71a59ec300 CR3: 0000000121474000 CR4: 00000000003526b0 [ 194.077739][ C0] Call Trace: [ 194.077744][ C0] [ 194.077753][ C0] __find_rr_leaf+0x249/0x840 [ 194.077768][ C0] ? rt6_check_expired+0x250/0x250 [ 194.077782][ C0] ? __flow_hash_from_keys+0x440/0x6e0 [ 194.077799][ C0] ? fib6_node_lookup+0x4ee/0x520 [ 194.077815][ C0] fib6_table_lookup+0x2d0/0x980 [ 194.077834][ C0] ? __cfi_fib6_table_lookup+0x10/0x10 [ 194.077850][ C0] ? ipv6_rcv+0xf1/0x240 [ 194.077866][ C0] ip6_pol_route+0x17a/0x1370 [ 194.077886][ C0] ? __cfi_br_dev_queue_push_xmit+0x10/0x10 [ 194.077907][ C0] ? __cfi_ip6_pol_route+0x10/0x10 [ 194.077922][ C0] ? netif_receive_skb+0x160/0x7b0 [ 194.077940][ C0] ? __cfi_netif_receive_skb+0x10/0x10 [ 194.077956][ C0] ? br_flood+0x66d/0x720 [ 194.077975][ C0] ? br_pass_frame_up+0x126/0x1b0 [ 194.077988][ C0] ip6_pol_route_input+0x5a/0x80 [ 194.078005][ C0] fib6_rule_lookup+0x4f1/0x6d0 [ 194.078019][ C0] ? __cfi_ip6_pol_route_input+0x10/0x10 [ 194.078050][ C0] ? __cfi_fib6_rule_lookup+0x10/0x10 [ 194.078064][ C0] ? ip6t_do_table+0x1d2/0x1510 [ 194.078083][ C0] ip6_route_input+0x60d/0x8d0 [ 194.078099][ C0] ? __cfi_ip6_route_input+0x10/0x10 [ 194.078117][ C0] ? __cfi_ip6t_do_table+0x10/0x10 [ 194.078134][ C0] ? __asan_memset+0x39/0x50 [ 194.078149][ C0] ? __cfi_ip6table_mangle_hook+0x10/0x10 [ 194.078173][ C0] ip6_rcv_finish+0x15a/0x3c0 [ 194.078189][ C0] ipv6_rcv+0xf1/0x240 [ 194.078204][ C0] ? __cfi_ipv6_rcv+0x10/0x10 [ 194.078220][ C0] ? __cfi_ip6_rcv_finish+0x10/0x10 [ 194.078235][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 194.078251][ C0] process_backlog+0x472/0xaf0 [ 194.078270][ C0] __napi_poll+0xcd/0x600 [ 194.078285][ C0] net_rx_action+0x5dc/0xd70 [ 194.078303][ C0] ? __cfi_net_rx_action+0x10/0x10 [ 194.078319][ C0] ? sched_clock+0x44/0x60 [ 194.078338][ C0] ? __cfi_sched_clock_cpu+0x10/0x10 [ 194.078358][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 194.078376][ C0] handle_softirqs+0x1aa/0x620 [ 194.078392][ C0] __do_softirq+0xf/0x16 [ 194.078407][ C0] do_softirq+0xb8/0x110 [ 194.078420][ C0] [ 194.078424][ C0] [ 194.078430][ C0] ? __cfi_do_softirq+0x10/0x10 [ 194.078442][ C0] ? _raw_spin_lock_bh+0x96/0x130 [ 194.078456][ C0] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 194.078470][ C0] __local_bh_enable_ip+0x74/0x80 [ 194.078483][ C0] _raw_spin_unlock_bh+0x54/0x60 [ 194.078496][ C0] wg_packet_decrypt_worker+0xcdd/0xd50 [ 194.078517][ C0] ? __cfi_wg_packet_decrypt_worker+0x10/0x10 [ 194.078550][ C0] ? pwq_dec_nr_in_flight+0x943/0xba0 [ 194.078565][ C0] ? wake_up_process+0x14/0x20 [ 194.078578][ C0] ? kick_pool+0x3b7/0x540 [ 194.078594][ C0] process_scheduled_works+0x7f4/0x1060 [ 194.078611][ C0] worker_thread+0xc99/0x13f0 [ 194.078628][ C0] kthread+0x2c4/0x360 [ 194.078643][ C0] ? __cfi_worker_thread+0x10/0x10 [ 194.078657][ C0] ? __cfi_kthread+0x10/0x10 [ 194.078672][ C0] ret_from_fork+0x64/0xa0 [ 194.078690][ C0] ? __cfi_kthread+0x10/0x10 [ 194.078705][ C0] ret_from_fork_asm+0x1a/0x30 [ 194.078720][ C0] [ 197.600075][ C1] net_ratelimit: 125256 callbacks suppressed [ 197.600096][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 197.600106][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.600173][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.606259][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 197.618612][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.630354][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 197.642278][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 197.654593][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0) [ 197.666866][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 197.682367][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:3d:3a:50:61:b9, vlan:0)