last executing test programs: 46.875613458s ago: executing program 4 (id=180): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x42, 0x5) io_submit(0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="0001000016000100002000000000000000000000000000000000000000000000ff0200000000000001000000000000018000000000030000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="20010000000000000000000000000000000004d533000000ac1414bb000000000000000000000000f0ffffffffffffff0000ffffffffffff01000000000000000000000000000000ffffffffffffffffedffffffffffffff04000000000000000000000000000000ffffffffffffffff000000000000000002000000000000000700000000000000050000000000000006000000000000000000000000000000f60000000000000004000000b1a0010008001f0001000000"], 0x100}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7fffefff) mremap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000001000/0x4000)=nil) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r5, 0x540a, 0x2) ioctl$TIOCGPTPEER(r5, 0x5441, 0x6) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017000000000000", @ANYRESHEX], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 46.65501284s ago: executing program 0 (id=182): prlimit64(0x0, 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x400040) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x7f, 0x584e4f53, 0x3, 0x2, 0x7, 0x7, 0x6, 0x1, 0x2, 0x2}}) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0)={[0xd]}, 0x8, 0x800) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r4, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x1000000, 0x0, 0x0, 0x1, 0xffff, r3, 0x0}]) r5 = gettid() rt_sigqueueinfo(r5, 0x21, &(0x7f00000002c0)) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 45.603094487s ago: executing program 0 (id=184): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MTU={0x8}]}, 0x40}}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r1, 0xfff) 43.770675944s ago: executing program 0 (id=187): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) syz_emit_ethernet(0x6f, &(0x7f0000000280)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0xa2, 0x6, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xb}}, {{0x4e26, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}, {"ac949ae5499cd2ac3b7b061cadcdd2f8080fe93eaf45c9ea124c703daeed8a50a9386b6eff215325656a4b2f91c8dad8e75c3d134b7105bddf"}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x40000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1203, 0x48a4d}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0xfffffffffffffec6, 0x10, 0x4e20}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_TTL={0x5, 0x8, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x4044000) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) r6 = dup(r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) pidfd_getfd(r6, r7, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000076dd0c0b96000000ffdbdf25030000000000000008000100010000008c3cd673c1291ac307"], 0x20}, 0x1, 0x0, 0x0, 0x8084}, 0x80) 41.177479996s ago: executing program 0 (id=191): r0 = openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x102, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fanotify_init(0x10, 0x101000) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) ptrace$setregset(0x4205, r1, 0x4, 0x0) ptrace$pokeuser(0x6, 0x0, 0x118, 0x0) add_key$user(&(0x7f0000000200), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd86", 0x3d, 0xfffffffffffffffe) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) fcntl$setlease(r5, 0x400, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r6, 0x89e0, &(0x7f0000000040)={0x1}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x2c, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x94}, 0xc0) writev(r0, &(0x7f0000002180)=[{&(0x7f0000002080)="4bd7310a", 0x4}], 0x1) 38.989785006s ago: executing program 4 (id=196): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000000280)={0x3, 0x1, 0x7f, &(0x7f0000000080)=""/127}) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$nl_xfrm(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000019080)=ANY=[@ANYBLOB="20010000100021040000000000000000fe880000000000000000000000000001e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x120}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) r3 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x4, 0x4) listen(r3, 0x7f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000a80)=@tcp6=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x9, 0xfff3}, {}, {0x10, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x30, 0x2, [@TCA_FLOW_EMATCHES={0x2c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x3ff, 0x3, 0x401}, {0x7, 0x92, 0x9, 0x6}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c010) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x2, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x8500, 0x1003, 0x1000004, 0xf, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x9ea, 0x10, 0x40000, 0x8, 0x5, 0x746f, 0x8, 0x5, 0x8, 0x0, 0x4, 0x7ffd]}) fstat(r4, &(0x7f00000003c0)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) syz_open_procfs(0x0, &(0x7f0000019340)='net/dev\x00') 37.005336353s ago: executing program 1 (id=200): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x8, 0xa}]}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000240)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0xa, 0x100000dd9, 0x8, 0xff, 0x8, 0x8000040000000001, 0xb3, 0x8, 0x4b1d, 0x4000000000000008, 0x10000000000000d, 0x7, 0x7, 0x1ff, 0x8000, 0xb285], 0x40000, 0x382fc2}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = dup(r1) write$P9_RRENAME(r5, &(0x7f0000000240)={0x7, 0x15, 0x2}, 0x7) ioctl$XFS_IOC_FSINUMBERS(r5, 0xc0205867, &(0x7f0000000900)={&(0x7f0000000100)=0x42bd, 0x4a4, &(0x7f0000000940)=[{}, {}], &(0x7f00000008c0)}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000700)={0x34, &(0x7f0000000440)={0x0, 0x10, 0x4, "afc7ae01"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000140)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="201504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 36.755068903s ago: executing program 4 (id=202): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x40000) write$dsp(r0, 0x0, 0xfffffe59) syz_clone3(&(0x7f0000000340)={0x2100000, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)=0x0, {0x4}, &(0x7f0000000140)=""/203, 0xcb, &(0x7f0000000240)=""/137, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x5}, 0x58) ptrace$setregs(0xd, r1, 0x9, &(0x7f00000003c0)="fe96bfb49cd29b10dd0447903761e68f17ca4486234f0083eaa3302bfd16b92b4418") 36.40355776s ago: executing program 2 (id=204): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x5c}}, './file0\x00'}) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000080)=0x6) r1 = getpgid(0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000218230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r6, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x600, 0x25dfcbfb, {0x0, 0x0, 0x0, r9, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x0, 0xe}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) r10 = syz_pidfd_open(r1, 0x0) r11 = pidfd_getfd(r10, r10, 0x0) setns(r11, 0x4000000) 36.047116036s ago: executing program 1 (id=205): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x8003, 0x0, 0x3, 0x4000007e}, &(0x7f0000000240), &(0x7f0000000380), &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) close(0x3) fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x5, 0x0, 0x6}, 0xfffffffffffffe63) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYRES32=r1, @ANYRES16=r2], 0x20}, 0x1, 0x0, 0x0, 0x240c0811}, 0x40) r3 = socket$alg(0x26, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_sctp(0x2, 0x5, 0x84) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYRESHEX=r3, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000040000000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000006c1ab702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b9a00fe00000000b6090800400000007b9af0ff00000000bf8610000000000007080000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182800003c1f43fae1339f2434c01cf9bd118848d880e800c7d7ec7824d2873f7e426529f0ed7754f528fcd9cb5f8946777ae337a18f6b1a", @ANYRES32=r4, @ANYRESHEX], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) userfaultfd(0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r5}, 0x4) 35.975539925s ago: executing program 0 (id=206): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x42, 0x5) io_submit(0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="0001000016000100002000000000000000000000000000000000000000000000ff0200000000000001000000000000018000000000030000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="20010000000000000000000000000000000004d533000000ac1414bb000000000000000000000000f0ffffffffffffff0000ffffffffffff01000000000000000000000000000000ffffffffffffffffedffffffffffffff04000000000000000000000000000000ffffffffffffffff000000000000000002000000000000000700000000000000050000000000000006000000000000000000000000000000f60000000000000004000000b1a0010008001f0001000000"], 0x100}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7fffefff) mremap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000001000/0x4000)=nil) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r5, 0x540a, 0x2) ioctl$TIOCGPTPEER(r5, 0x5441, 0x6) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017000000000000", @ANYRESHEX], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 35.975131089s ago: executing program 4 (id=207): r0 = socket$kcm(0x21, 0x2, 0xa) mount(0x0, 0x0, 0x0, 0x22bd39c9100e8b81, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000003080300007c00000000000001000007040004801c000480080001400000000508000240000000070800014000000a24"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x34000004) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r2) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg1\x00'}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r3, @ANYBLOB], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x21}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000001740), r5) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0xffffff1f, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x403}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vti={{0x8}, {0x24, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x30000}], @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0xe0e}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x800}, @IFLA_VTI_LINK={0x8}]]}}}, @IFLA_MTU={0x8, 0x4, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r6, 0x4b40, &(0x7f00000002c0)=""/234) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = socket$inet6(0xa, 0x3, 0xff) getsockopt$inet6_int(r9, 0x29, 0x7, 0x0, &(0x7f0000000240)) socket$inet_udp(0x2, 0x2, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x4e24, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@remote, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 35.830355905s ago: executing program 3 (id=208): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000340)={{0x80, 0x8}, 0x1, 0x2, 0xfa8, {0x55, 0xf}, 0x2, 0x926}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) sendmsg$NFT_BATCH(r3, &(0x7f0000000e80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELOBJ={0x10c, 0x14, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_USERDATA={0xba, 0x8, "cb548a8f754626ed093641315b375521ffd686ab0348d6bad66a56af88aa21844c08124150c26d94f41c57248a435e4b6bb95a95c54c5a4b10fd47ea763ce649646039b4c54142da4b1e299a41ae0b2ff64e389b02b2abf6cb8e5cfb95d388b6feabf323a2b2cdc3f7b267aaf1f2f70f94e2a4e75138be711dce3fa121f0545f5d40dbcfaaf920cd18c2ec360e2d33644933e904ac34566900f03890fe149a0e290bed954268c57e0a9327b2f10d1764f0fb3c085317"}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x70, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0x4}]}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x4ac, 0xe, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x464, 0x3, 0x0, 0x1, [{0x460, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x2f4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xad, 0x1, "4f748d40345afc2d2d4912784f839430f116fa05087d6d5c007f7b5cce2e44969b89dfd512be5bd24795eba3b1b517209bf6a4a9c890719cb4f50f5caea81c0c8b7eb2068615ab293db0645f578d97c5aad28f92753a31a9cc7c2b9d4f177f1088659e055d2d77d66998c4fd16eafc2f05e445933a46703fda71723286e197d3a6d1333498cc2f6f8e9aa8a27e75b45efdcef5ab6eba0de9ab190cbe2a055341527bf72f86fdef2617"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xdd, 0x1, "8b38cda4aedf7bb156195f37c99871b94a6e90b6678c5383976edc54426f9ebb3033a4c2f1d096da68f2d408315b7a2268394e57a2cdc42506c3398cfb379359fe71d4b515c796cf12bea4496eb9ee84ecb6859f801e4901e1376be4c9a98a769b71df28f8936573c2a7e0163ac65b041452f02a1d10f0552ac777af29ee122604831d49ce36659855c391a4b2523343d6d193091e7e1ade3c0d0f29485a5529fd97ba3eb48eb7e249b1988d81d955eaf7ee089d2e894b9f167b681d6f29db289f03cf4b77b10aa26a498391aac2f4d06432e261d776984660"}, @NFTA_DATA_VALUE={0xc5, 0x1, "4a257dedb12b989060dec2b41b5ac539978491736b8adc255386154430430f36aed7b61e12298e6a4600a5d12d85cdcddf745108f7d1b7c42a38b995f0267a144e67ef5df4326da7074714d1abdb64b953300264ead1c2388e8087ac7531a82159668c5b7920c1828c0d62cf182a7b2d05da49d4a334803339f2643ed85aee4f97d36043c5d4db1b762e2b49e3344c3ebb68b26ce4317600c27341233de5690af19f9e32c63ddb6cc39dbfb31a61de0532c2fb27c6115ea8014d4ad3ed535a6f3f"}, @NFTA_DATA_VALUE={0x38, 0x1, "2a431bed726f80d5f11bd3d0264db4efbf61aec5dd35dd985866725c8c0efb5c012208af3f65335a250b2e84486385be224a7ddb"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x15c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x70, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2bdad1d3}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_BITWISE_MASK={0x24, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x5c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x10}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x44}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x86}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xa0}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x9c}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xe0}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x200}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x100, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xd4, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7fffffffffffffff}]}, {0xc0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x94, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4a, 0x1, "1fed56d1f060bd7bfcbab9f20085661696168e0ed556ee752a7ffa134d773ae4bdc0e2211efecaee31f6dab2bd3a19c8e0d34f6437c56a068856c6b440f9972a96e1dbd6c32b"}, @NFTA_DATA_VALUE={0x41, 0x1, "0bea29c4868baf4fea9d9abf4859784425b511df7642eca4c1e1fbd3c8788a9d861ca5cfb9bf579ecf8853a40be1ee332ede4fe617e73876b408d963e9"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @socket={{0xb}, @void}}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x7b4}, 0x1, 0x0, 0x0, 0x200048c4}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f921240685", 0x14}], 0x1}, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xeeef0000, 0xdddd1000, 0x0, 0x0, 0xff, 0x8, 0xa, 0x4, 0x0, 0x6, 0x88, 0x10}, {0x1000, 0x0, 0x3, 0x6, 0x7c, 0x0, 0x0, 0x0, 0x7, 0x27, 0x0, 0xff}, {0x2fff, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0xdc}, {0x4000, 0x8080000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4, 0x1}, {0xf000, 0x3000, 0x9, 0xfd, 0x0, 0x4, 0x20, 0xc3, 0x0, 0x3c}, {0x3000, 0x0, 0xd, 0x7, 0x0, 0x0, 0x2, 0xfe, 0x0, 0x0, 0x82, 0x4}, {0x10000, 0x0, 0xd, 0x6, 0x5, 0x0, 0x3, 0x0, 0x8, 0x0, 0x0, 0xfe}, {0x80a0000, 0xdddd0000, 0xd, 0x1, 0x0, 0x0, 0x0, 0xa, 0x26, 0xa, 0xf8}, {0x8080000, 0x4}, {0x6000}, 0xfdfcffdb, 0x0, 0x0, 0x68, 0xb, 0x0, 0x0, [0x0, 0xfffffffffffffffc, 0x1, 0x400000000]}) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x487, 0x0, 0x0) 35.567602648s ago: executing program 1 (id=209): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) setgid(0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSIG(r0, 0x540f, 0x40000000000031) socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$netlink(0x10, 0x3, 0xf) sendmsg$nl_route_sched(r2, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001600)=@deltfilter={0x840, 0x2d, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xf}, {0xd, 0xffe0}, {0xffe0, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x810, 0x2, [@TCA_ROUTE4_POLICE={0x80c, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x32006d63, 0xfffff00a, 0xff, 0x101, 0x8, 0x200, 0xbb, 0x2, 0x3, 0xfffffffb, 0x3f, 0x3, 0x5, 0xfffffff9, 0x0, 0x7, 0x5, 0x7, 0xfffffffa, 0x800, 0x7fff, 0x4, 0x1, 0x1, 0x519f, 0x0, 0x6, 0x0, 0x8, 0x3, 0x1, 0x4, 0x4, 0x5, 0xfffffff7, 0x7fff, 0x1, 0x8, 0x7, 0x3b1f, 0x5, 0x9, 0xb, 0x5, 0x400, 0x4, 0x3, 0xffffffff, 0x8, 0xffffffff, 0x3, 0x68, 0x4, 0x1, 0x7, 0x5, 0x853d642, 0x3, 0x7, 0x8, 0x64b1, 0xf59, 0xa, 0x2, 0x1, 0x4, 0x36, 0x6, 0xa, 0x5, 0x4, 0x7fff, 0x7, 0x10000, 0xa, 0x200, 0x8, 0x9, 0x10, 0x3ff, 0x9, 0x9, 0x70, 0x4, 0xd, 0x1, 0xffffb0d4, 0x2, 0x1ff, 0x7, 0x3, 0x7, 0x1, 0x1, 0x1, 0x3, 0x4, 0xc, 0x8, 0xfffffffa, 0x8aa0, 0xe0f, 0x9, 0x3, 0x1000, 0xffff, 0x10000, 0x8000, 0xd, 0x5, 0xff, 0xf, 0xd0a3, 0x80, 0x7, 0x5b72, 0x0, 0x5, 0xfffffff7, 0x6, 0x7, 0x1ff, 0x5, 0x4, 0x2, 0xb52b, 0x2, 0x3, 0x3ff, 0x1, 0x2dd9, 0x8001, 0x8, 0x5, 0x0, 0x7, 0x81, 0x80000000, 0x3, 0xe8d6, 0xffff, 0xc0eb, 0x6, 0x1, 0x7, 0x4b0, 0x8, 0x3cf1a96c, 0x6, 0x6, 0x80000000, 0x9, 0xfffffcea, 0x9, 0x10000, 0x6ce9, 0x9, 0x4e5, 0x7, 0x369c, 0x3f99, 0xffffffff, 0x4, 0x8, 0x3, 0xff, 0x1, 0x0, 0x5, 0x2, 0x5000000, 0x62, 0x10001, 0xcf8c, 0x3f18476d, 0x1f300220, 0x3, 0x4224, 0x1, 0x1, 0x2, 0x4, 0xfffffff7, 0x80000000, 0x5, 0xe, 0x5, 0x1, 0xdf60da4, 0x3, 0x82d0, 0x6, 0x4, 0x800, 0x100, 0x80000001, 0x6, 0x3, 0x7, 0x80000001, 0x7fffffff, 0x3, 0xffffffff, 0x7, 0x2, 0xfffffffd, 0x4, 0x9, 0x6, 0x0, 0xfffffe00, 0x39, 0x2, 0x8000, 0x80, 0x3, 0x4, 0x9, 0x8, 0x4, 0x3, 0x9, 0x100, 0x7, 0x2, 0x7, 0x2, 0x9, 0x19000000, 0x5, 0x4, 0x9, 0x3, 0x80000000, 0x2, 0x2, 0x7, 0x0, 0x7, 0xfff, 0xc83b, 0x401, 0xe4f0, 0xd09, 0x80000001, 0xfffffff7, 0x7812, 0x80, 0xfffffffc, 0x7, 0x0, 0xfffffffc, 0x81, 0xffff, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfff, 0x0, 0x0, 0xc4e6, 0xfffffc01, 0x459, 0x6, 0x4, 0xc, 0x3, 0x1, 0xde8, 0x4, 0x6, 0x7, 0x2, 0x7, 0x3, 0x2, 0x5, 0x339c04a7, 0x1, 0x9, 0x0, 0x5, 0x4, 0x1, 0x6, 0x5, 0x5, 0x9, 0x9, 0x2, 0x0, 0x80000001, 0x9, 0x84b250eb, 0x2, 0x5, 0x3, 0x4, 0x2f5, 0x10, 0x5, 0x7a4e, 0x5, 0xb9, 0xffffffff, 0x8, 0x8000, 0x8, 0x8, 0xff, 0xff, 0x4, 0x40, 0x7, 0x17, 0x80, 0x3, 0x4, 0x5, 0x7b34, 0x2ce, 0xb8, 0x3ff, 0xb46, 0x4, 0x8, 0x1, 0x2fce, 0x0, 0x5, 0x3, 0x4, 0x8, 0x5, 0x1, 0x0, 0xf, 0x2c8, 0x2, 0xffffffc0, 0x5ed96db, 0x400, 0x7, 0x6, 0x400, 0x1, 0x6, 0x0, 0x5, 0x2, 0x200, 0x1ff, 0x8163, 0x4306ded, 0x1def, 0x831, 0x5, 0xffffffff, 0x7, 0x5, 0x10000, 0xfffffffc, 0x6cf, 0xf, 0x1, 0x1, 0x401, 0x8000, 0x80, 0xe, 0x6, 0x6, 0x4, 0x7, 0x7fffffff, 0xd5f3, 0x0, 0x14, 0xc23, 0xd, 0x1, 0x3, 0x1, 0x9, 0x8, 0xf, 0x800, 0x1, 0xffff, 0x9, 0xfffffff7, 0x4, 0x6, 0xc3, 0x5, 0x3, 0x2, 0x10000, 0xfff, 0x8, 0x32f4, 0x9, 0x2, 0x4, 0x0, 0xa, 0x5, 0x0, 0x3, 0x8, 0x79a9, 0x8, 0x7, 0x6, 0x3, 0x1, 0x3e91, 0x6, 0x5, 0x6, 0xfffffff9, 0x0, 0x7, 0x5, 0x360c4ca1, 0x5, 0x40f, 0x8, 0x7ff, 0x7, 0x2, 0x1, 0xff, 0x96, 0x1, 0x2, 0xc95af3b, 0x6813, 0x4, 0x9, 0x3f, 0x5, 0x8, 0x7, 0x8, 0x1a74, 0x10000, 0x101, 0x8, 0x2, 0x13, 0x6, 0xff, 0x1, 0x0, 0x4, 0x9, 0xa, 0x7, 0x9, 0xffffff00, 0x9, 0x7, 0x1, 0x0, 0x1, 0x0, 0xfffffff8, 0x1000, 0x100000, 0x80000000, 0xffffffff, 0x80000001, 0x3ed, 0x2, 0xfffffffd, 0x6, 0x0, 0x0, 0xb, 0x5, 0x9, 0xd, 0x8, 0x4, 0x0, 0x1000, 0x4, 0x8, 0x5, 0x2, 0x4, 0x1, 0x0, 0xdcc, 0x7, 0x5, 0x5, 0x2, 0x10, 0x2, 0x217, 0x3ff, 0x200000, 0xd, 0xa990, 0x1, 0x9, 0x4, 0x2932, 0x5dd, 0x1ff, 0xe3]}]}]}}]}, 0x840}, 0x1, 0x0, 0x0, 0x20000814}, 0x8000) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000280)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@local, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xffffffffffffffff}, {@in6=@loopback, 0x14, 0x6c}, @in=@empty=0x14, {0x0, 0x7f, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x6, 0x1000, 0xfffffffffffffffd}, {}, 0x80000000, 0x0, 0x2, 0x1, 0x6, 0x2c}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0xb}, @coaddr={0x14, 0xe, @in6=@private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x154}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000004, 0x4010011, 0xffffffffffffffff, 0x8000000) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="0209000902000000"], 0x10}}, 0x0) 35.549130557s ago: executing program 3 (id=210): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (fail_nth: 4) 34.983948399s ago: executing program 2 (id=211): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$nl_xfrm(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000019080)=ANY=[@ANYBLOB="20010000100021040000000000000000fe880000000000000000000000000001e000000200"/48, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x120}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) r3 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x4, 0x4) listen(r3, 0x7f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000a80)=@tcp6=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x9, 0xfff3}, {}, {0x10, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x30, 0x2, [@TCA_FLOW_EMATCHES={0x2c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x3ff, 0x3, 0x401}, {0x7, 0x92, 0x9, 0x6}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c010) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x2, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x8500, 0x1003, 0x1000004, 0xf, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x9ea, 0x10, 0x40000, 0x8, 0x5, 0x746f, 0x8, 0x5, 0x8, 0x0, 0x4, 0x7ffd]}) fstat(r4, &(0x7f00000003c0)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r6 = syz_open_procfs(0x0, &(0x7f0000019340)='net/dev\x00') pread64(r6, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) 34.936022615s ago: executing program 3 (id=212): r0 = socket(0x1, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x40, 0xfffffffc, {0xa, 0x3f, 0x28, 0x0, r1}}, 0x18}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 34.788172232s ago: executing program 3 (id=213): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0xe) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1400000004000000040000000400010014000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000700000000000000f4ffffffffffffff46a2640000"], 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x38, 0xe, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x4}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x60}, 0x1, 0x0, 0x0, 0x8090}, 0x24008040) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) io_uring_setup(0x1d48, 0x0) socket$rxrpc(0x21, 0x2, 0x2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000007c0), 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) signalfd(r2, &(0x7f0000000040)={[0xff]}, 0x8) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1400000035000b0bc8d643234724d3f90324fc60", 0x14}], 0x1}, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r6, 0x0, 0x0) syz_usb_disconnect(r1) 34.787871107s ago: executing program 4 (id=214): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000002a40), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002e40)={0x2020}, 0x2020) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x80000000}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) write$FUSE_ENTRY(r0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x105800, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f00000007c0)={0xc0, 0x1b, &(0x7f00000003c0)}) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f00000002c0)=""/234) 33.784470446s ago: executing program 4 (id=215): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c001}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 33.639209829s ago: executing program 2 (id=216): socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000016280012800b00010067656e6576650000180002801400070000000000000000000000ffffac1414bb"], 0x48}, 0x9}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_open_procfs(0x0, &(0x7f00000004c0)='net/raw\x00') socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) setgroups(0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) sendmsg$tipc(r0, &(0x7f0000000640)={&(0x7f0000000380), 0x10, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) close(0x3) socket$kcm(0x2b, 0x1, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xff0a, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xfffffff8, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@mpls_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0xa, "a51b69ae9597407dc5518eada89d"}}]}, 0x30}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4048aecb, &(0x7f0000000080)) 33.228620044s ago: executing program 2 (id=217): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) mkdir(&(0x7f0000000100)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000021c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(&(0x7f0000000000)='./bus\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) gettid() modify_ldt$write2(0x11, &(0x7f0000000100)={0xca, 0x0, 0x2000, 0x1}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8080) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) 32.095649178s ago: executing program 1 (id=218): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000100)="1c0000007b001f3814584707f9f4ffffff0000000d000000f3f80000", 0x1c) 32.057753426s ago: executing program 2 (id=219): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)={0xffffffffffffffff}, 0x4) (async, rerun: 64) socket$netlink(0x10, 0x3, 0xe) (rerun: 64) r2 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x800000000000000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b4000000000000007910000000000000c300e4ff502100009500740000000000cdb77b9b44231342a99f41da182fa3bb62282591c0fb1b7690ee231a073cc9b7d85a695e56f25aeb0323dd3555a8188ca10208cc6570851bd61ff4df98ff5476595e3cb4c23aeebf5297db4cec27451d9b9637a95d70ecfdf041ebb643ef7300e248cbf855b5273bb68ee445c8431672a998bddb24a91882894a10a25476f063fd0853866a2aef09650de0c4752b62072d94db04a80a782e8b8ea5e47baa9cb8307775a5e2985354d08bbb189ad6f0719c186019"], &(0x7f0000003ff6)='GPL\x00', 0x40000002, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) (async) syz_emit_ethernet(0x20c, &(0x7f0000000dc0)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "108f84", 0x1d6, 0x3a, 0xff, @mcast2, @local, {[@fragment={0x29, 0x0, 0x40, 0x0, 0x0, 0x9, 0x64}, @routing={0x89}, @hopopts={0x22, 0x12, '\x00', [@padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x48, {0x1, 0x10, 0x1, 0x7, [0x47d, 0xff3, 0x2, 0x5, 0x8, 0x5, 0x8000000000000000, 0x3]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x2, 0xe, 0xe8, 0xfff, [0x4, 0x3, 0x125, 0x4, 0xa000000000000000, 0x9, 0x931]}}]}], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @local, [{0x22, 0x1a, "ed4f196426357d92c25bb1754a9d88e972200db1b23022850f7397a0f0143d28e83a94dbdb972d25e94e1f663d337154cbed49ba8cfceea22f47e95daa2ded51412efb5f282b597441c4d8b1c24e79221862fe19ced7167ce9915852b94e46e0e7dd60cbb3e5d683d749a84beaa3183762bff5d26d4ea0b0c8a68a44a5464df6415b1c3afc959788d84a5d881c60baf288e435a5ab57d1fcf70041c89cd64e6d568905f05fc43410fa5b6671e348135e867a1892ac04448c3a9d8eee53261e2a2ab8543335ad1fd7e38af96df4f0f710"}, {0x19, 0x7, "6b248467ce3ca0f0a104fab90eb41846120b3814935d26d906c192eca88d5b3009806ea6ab1023e9f206e6446cde90fadf672488571493c2d231"}]}}}}}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7, &(0x7f0000006680)) (async) r4 = mmap$binder(&(0x7f0000665000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000022c0)={0xd0, 0x0, &(0x7f0000002180)=[@register_looper, @clear_death={0x400c630f, 0x2}, @clear_death, @free_buffer={0x40086303, r4}, @register_looper, @acquire={0x40046305, 0x3}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000002000)={@fda={0x66646185, 0x2, 0x2, 0xa}, @ptr={0x70742a85, 0x0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x38}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000002080)={0x0, 0x20, 0x48}}}, @acquire, @enter_looper, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000020c0)={@fda={0x66646185, 0x7, 0x1, 0x33}, @flat=@weak_binder={0x77622a85, 0x100}, @fda={0x66646185, 0x2, 0x1, 0x37}}, &(0x7f0000002140)={0x0, 0x20, 0x38}}}], 0x22, 0x0, &(0x7f0000002280)="adb6b89dee03d8f986581f0469fd5d05a7327ed64dc2c15268f7e82cc5f3975ba32c"}) (async) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b18, &(0x7f0000000140)={'wlan1\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES8, @ANYRES8, @ANYRES8, @ANYRESDEC, @ANYRES16, @ANYRES64, @ANYRES8], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000007c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in=@loopback, 0x4e21, 0x401, 0x4e21, 0x8000, 0x6, 0x80, 0x20, 0x62}, {0x9268, 0x0, 0xc1b, 0x1, 0x400, 0x0, 0x8, 0x8}, {0x7, 0x101, 0x4, 0x2}, 0x101, 0x0, 0x1, 0x1, 0x0, 0x1}, {{@in6=@empty, 0x4d4, 0x33}, 0x2, @in6=@mcast1, 0x3502, 0x4, 0x0, 0x36, 0x246, 0x3, 0x40}}, 0xe8) (async) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x64, r6, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008000}, 0x8800) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) socketpair(0x23, 0xa, 0x0, &(0x7f0000000400)) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="080000000000fffff0000500000008000300", @ANYRES32=0x0, @ANYBLOB="98e4f584db0a5c782b1af35398e0e7091a8b134ba86087f90eae192c15b10f93dd020069cb2d12aa74b95db194e300eb3311c2b2b9d18d23080b5d419513b3bdd10a604da224318e5f91587ce72c1cc2dcca3a0a718ecc3d43243dc9ceaf7ef6542c9b10eb0caec5af58d93c85d6bba1e162b026e3f4fafb9dd93a00000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (async) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000080)={0xe, @sliced={0x0, [0x5000, 0x8, 0x3, 0x9, 0x2, 0xfff7, 0x1, 0xe, 0x2, 0xd1, 0xc5b3, 0x5, 0xe91, 0x6, 0x4, 0x7, 0x6, 0x3ff, 0x200, 0x1000, 0x1, 0x9, 0xca4a, 0x2, 0x9, 0xbf7, 0xc, 0x1, 0x2, 0x2, 0xc, 0x3ff, 0x2, 0x3, 0x6, 0x5, 0x3cc9, 0x1, 0x3, 0x24, 0x5, 0x2, 0x76, 0xffff, 0x401, 0x696, 0x3ff, 0xffff], 0xe}}) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="a438cd56acd29bb4"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x81) (async, rerun: 64) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 64) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32], 0x3c}}, 0x0) (async) sendmsg$L2TP_CMD_NOOP(r7, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, r9, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x74a}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x14000) (async) ioctl$FE_GET_FRONTEND(r2, 0x80246f4d, &(0x7f0000000440)={0x0, 0x0, @ofdm}) 31.541485127s ago: executing program 3 (id=220): r0 = gettid() read$FUSE(0xffffffffffffffff, &(0x7f0000001b40)={0x2020}, 0x205c) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) read$FUSE(r2, 0x0, 0x500) 30.763444177s ago: executing program 2 (id=221): socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0x2a401) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000000180)={0x10, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000140), 0x0, 0xc000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="98000000020103000000000000000000020000050800084000000000060012400004000006001240000400001c00198008000100400000000800010004000000"], 0x98}, 0x1, 0x0, 0x0, 0x2c040041}, 0x4040040) writev(0xffffffffffffffff, &(0x7f0000001840)=[{&(0x7f00000001c0)="bb3f6da90a5e189d24efdc662383f21039854e13e24ad977e794277eda6efe0d6cee80bbcc183a2a64dd709e76dc2f7dc0ca311c35e5bbd7737d127b4ab0c07438971c016bd36fe4038f66278ee270a9456a4a97d6140f147bc10171308c0c656ea7d973116dae9df761e1867f51dfd62b9198cf5723006a4a54ddbd30920da9c670c2401b3d110337318c9cb8d29314ccdb1e0000", 0x95}, {&(0x7f00000002c0)="df3fbf2d9d22d75feb2a9b6720a7e90acb072975e021c100468c6d16931a5ee0597ef45f75f4ded774f38eb69940b62c317bf46c27534ea56c2aa34494d778cac412db04bc4a3596fc1abe0c44c298eb0adf598b0ef8225da4840b410a45cd5a96cd6ebcf902d1dea27a7836b2d5a939705645d94d6d48803f269dd9f7200b32f50d05ae464a653166aa02bbc9fa7f9a3ef5100447b409250426a525c2025db0b2ddb3838b6c8bbf3b12e542ab", 0xad}, {&(0x7f0000000640)="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", 0x10a}, {&(0x7f00000004c0)="ef4532cd1ec9ac05d061fd4f60447d8bf4e991c692d2954d033e19eb33c0413325ac238671ddb8c52e70bfdb2028695174d1a940a6e55ad04eb7ddfc4a57322e07f0743885d11a6d581e05d4f67073bef3f396", 0x53}, {&(0x7f0000000540)="d246c5ff7c8d0eca89c19bf41c797949e491e99bc454bbde23f55c2127ac57a9ba162fadaea10ba67a4ec1cd2052ca86970e3b174d2f9d2b0df5c68433f8621df4fc8c23f9521068417ac2fea5a923502ed5806632c4c1785f4e59ed2848eb0a9c5fe8d297c2a8c22ea16c3f35c78a4829eb8326cb9ded75d8b01102139186ab67015ffa7d75d21d9438f4dfcbb4191b7231218bd03b6e2ac413615b994d298144716bc8ca63f7a66b761110586021c86aa660168b32688408f0332f045f6b40a10bf0fafd656f072d8856fc1206a7b394969390ac2f", 0xd6}, {&(0x7f0000000840)="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", 0x1000}], 0x6) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r4, 0x0, 0x0, 0x20024094, &(0x7f0000000040)={0x2, 0xfffd, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x2f) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0xc000) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0x180) unshare(0x40000000) syz_open_dev$sndctrl(&(0x7f0000000040), 0x8, 0x200) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) futex(&(0x7f0000004000)=0x2, 0x8d, 0xfffffffd, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 30.685268746s ago: executing program 3 (id=222): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) r1 = syz_open_dev$dmmidi(&(0x7f0000000040), 0x2, 0x8000) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000080)={0x1, 0xa92, 0x7, 0x0, 0x4}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000000000000000080000000800090000000000080007"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r3, 0x4b6a, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x9, 0x0, 0x0) ioctl$KDFONTOP_SET_DEF(r3, 0x4b72, &(0x7f0000001400)={0x2, 0x1, 0x9, 0x14, 0x25, 0x0}) 29.78924426s ago: executing program 1 (id=223): sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2090) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@map, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x1ff001, 0x7f, 0x72c7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value=0x5000000}, 0x50) 28.751439756s ago: executing program 1 (id=224): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1bc, 0x4480c1) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x3040c0d, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) unshare(0x6a040000) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x14) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000340), 0x70400, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) mount(&(0x7f0000000300)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='jfs\x00', 0x0, &(0x7f0000000400)) 26.153536816s ago: executing program 0 (id=225): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000300)=@ethtool_wolinfo={0x5, 0x2ae2, 0x8, "ee0000fa00"}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000e00)=[{{&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000580)=""/152, 0x98}, {&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000e40)=""/248, 0xf8}, {&(0x7f0000000900)=""/255, 0xff}, {&(0x7f0000000ac0)=""/217, 0xd9}, {&(0x7f0000000bc0)=""/134, 0x86}, {&(0x7f0000000c80)=""/34, 0x22}], 0x7, &(0x7f0000000d40)=""/158, 0x9e}, 0x5}], 0x1, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) unshare(0x6a040000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) mount(&(0x7f0000000300)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='jfs\x00', 0x0, &(0x7f0000000400)='usrquota') 0s ago: executing program 32 (id=215): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c001}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): , 0] type 2 family 0 port 6081 - 0 [ 73.427673][ T473] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.437442][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.483737][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.523122][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.544677][ T5821] veth0_vlan: entered promiscuous mode [ 73.581539][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.591589][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.619263][ T5821] veth1_vlan: entered promiscuous mode [ 73.652135][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.660674][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.696058][ T30] audit: type=1400 audit(1776810525.563:85): avc: denied { mounton } for pid=5828 comm="syz-executor" path="/root/syzkaller.WfxVUV/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 73.711672][ T5835] veth0_vlan: entered promiscuous mode [ 73.731738][ T30] audit: type=1400 audit(1776810525.563:86): avc: denied { mount } for pid=5828 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 73.754775][ T5822] veth0_vlan: entered promiscuous mode [ 73.760388][ T30] audit: type=1400 audit(1776810525.563:87): avc: denied { mounton } for pid=5828 comm="syz-executor" path="/root/syzkaller.WfxVUV/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 73.791712][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.807192][ T30] audit: type=1400 audit(1776810525.563:88): avc: denied { mount } for pid=5828 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 73.809258][ T5821] veth0_macvtap: entered promiscuous mode [ 73.837134][ T30] audit: type=1400 audit(1776810525.573:89): avc: denied { mounton } for pid=5828 comm="syz-executor" path="/root/syzkaller.WfxVUV/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 73.849977][ T5835] veth1_vlan: entered promiscuous mode [ 73.869451][ T30] audit: type=1400 audit(1776810525.573:90): avc: denied { mounton } for pid=5828 comm="syz-executor" path="/root/syzkaller.WfxVUV/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 73.876407][ T5822] veth1_vlan: entered promiscuous mode [ 73.904080][ T30] audit: type=1400 audit(1776810525.573:91): avc: denied { unmount } for pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 73.923254][ T5821] veth1_macvtap: entered promiscuous mode [ 73.924611][ T30] audit: type=1400 audit(1776810525.603:92): avc: denied { mounton } for pid=5828 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 73.948197][ T5820] veth0_vlan: entered promiscuous mode [ 73.955395][ T30] audit: type=1400 audit(1776810525.603:93): avc: denied { mount } for pid=5828 comm="syz-executor" name="/" dev="gadgetfs" ino=7093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 74.021959][ T5835] veth0_macvtap: entered promiscuous mode [ 74.044080][ T5820] veth1_vlan: entered promiscuous mode [ 74.061603][ T5835] veth1_macvtap: entered promiscuous mode [ 74.086765][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.105620][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.125654][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.145371][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.181480][ T3555] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.191158][ T3555] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.218198][ T3555] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.238280][ T3555] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.254535][ T5822] veth0_macvtap: entered promiscuous mode [ 74.273911][ T3555] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.300574][ T3555] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.325197][ T3555] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.337574][ T5822] veth1_macvtap: entered promiscuous mode [ 74.349890][ T3555] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.372064][ T5820] veth0_macvtap: entered promiscuous mode [ 74.391346][ T5820] veth1_macvtap: entered promiscuous mode [ 74.407440][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.449321][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.484201][ T3555] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.493140][ T3555] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.508717][ T3555] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.517621][ T3555] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.540694][ T3555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.543201][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.556017][ T3555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.598688][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.615301][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.620555][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.629964][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.647382][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.655510][ T5887] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 74.680002][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.689997][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.716706][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.725520][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.755360][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.766644][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.816201][ T5887] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.841471][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.867380][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.878437][ T5887] usb 4-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 74.890736][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.899372][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.916101][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.932859][ T5825] Bluetooth: hci3: command tx timeout [ 74.965430][ T5887] usb 4-1: config 0 descriptor?? [ 75.012724][ T5825] Bluetooth: hci0: command tx timeout [ 75.018385][ T5829] Bluetooth: hci1: command tx timeout [ 75.023922][ T5146] Bluetooth: hci2: command tx timeout [ 75.029501][ T5146] Bluetooth: hci4: command tx timeout [ 75.103233][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.126688][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.204743][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.237223][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.298830][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.321399][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.450476][ T5887] usbhid 4-1:0.0: can't add hid device: -71 [ 75.479216][ T5887] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 75.561386][ T5887] usb 4-1: USB disconnect, device number 2 [ 75.719713][ T5959] Zero length message leads to an empty skb [ 76.084476][ T5887] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 76.259112][ T5887] usb 3-1: Using ep0 maxpacket: 32 [ 76.428720][ T5887] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 76.457224][ T5887] usb 3-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 76.584509][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.624600][ T5880] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 76.625499][ T5887] usb 3-1: config 0 descriptor?? [ 76.666541][ T5977] syz.1.16 uses obsolete (PF_INET,SOCK_PACKET) [ 76.696498][ T5977] netlink: 104 bytes leftover after parsing attributes in process `syz.1.16'. [ 76.802607][ T5880] usb 4-1: Using ep0 maxpacket: 16 [ 76.814405][ T5880] usb 4-1: config index 0 descriptor too short (expected 526, got 367) [ 76.826999][ T5880] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.839560][ T5880] usb 4-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=a4.96 [ 76.848913][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.867659][ T5880] usb 4-1: Product: syz [ 76.876607][ T5880] usb 4-1: Manufacturer: syz [ 76.890984][ T5880] usb 4-1: SerialNumber: syz [ 76.911530][ T5961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.926351][ T5880] usb 4-1: config 0 descriptor?? [ 76.949096][ T5961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.012745][ T5825] Bluetooth: hci3: command tx timeout [ 77.028915][ T5981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18'. [ 77.038012][ T5981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18'. [ 77.054604][ T5981] wireguard0: entered promiscuous mode [ 77.060205][ T5981] wireguard0: entered allmulticast mode [ 77.092405][ T5825] Bluetooth: hci1: command tx timeout [ 77.093389][ T5829] Bluetooth: hci0: command tx timeout [ 77.098434][ T5825] Bluetooth: hci4: command tx timeout [ 77.104636][ T5146] Bluetooth: hci2: command tx timeout [ 77.188971][ T5944] usb 4-1: USB disconnect, device number 3 [ 77.199080][ T29] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.243686][ T5880] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 77.322458][ T5823] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 77.374424][ T29] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 77.383320][ T29] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.393719][ T29] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 77.402739][ T29] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.417744][ T5880] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.428259][ T5880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 77.431726][ T5887] usbhid 3-1:0.0: can't add hid device: -71 [ 77.438012][ T5880] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 77.449579][ T5887] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 77.464696][ T29] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 77.464725][ T29] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 77.464746][ T29] usb 1-1: Product: syz [ 77.464762][ T29] usb 1-1: Manufacturer: syz [ 77.486459][ T29] cdc_wdm 1-1:1.0: skipping garbage [ 77.499577][ T5887] usb 3-1: USB disconnect, device number 2 [ 77.507855][ T5823] usb 2-1: unable to get BOS descriptor or descriptor too short [ 77.513093][ T5880] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 77.518378][ T5823] usb 2-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 77.525536][ T29] cdc_wdm 1-1:1.0: skipping garbage [ 77.538001][ T5823] usb 2-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 77.540011][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 77.567022][ T29] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 77.569794][ T5823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.575120][ T5880] usb 5-1: Product: syz [ 77.590590][ T29] cdc_wdm 1-1:1.0: Unknown control protocol [ 77.596773][ T5823] usb 2-1: Product: syz [ 77.602408][ T5880] usb 5-1: Manufacturer: syz [ 77.613228][ T5823] usb 2-1: Manufacturer: syz [ 77.617870][ T5823] usb 2-1: SerialNumber: syz [ 77.620048][ T5880] usb 5-1: SerialNumber: syz [ 77.635786][ T5880] usb 5-1: config 0 descriptor?? [ 77.646529][ T5880] usb 5-1: no audio or video endpoints found [ 77.685894][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 77.685910][ T30] audit: type=1400 audit(1776810529.553:156): avc: denied { create } for pid=5978 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 77.720276][ T30] audit: type=1400 audit(1776810529.553:157): avc: denied { allowed } for pid=5978 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 77.753089][ T30] audit: type=1400 audit(1776810529.553:158): avc: denied { create } for pid=5978 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 77.775506][ T5979] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 77.783955][ T5979] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 77.793175][ T5979] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 77.821018][ T30] audit: type=1400 audit(1776810529.553:159): avc: denied { setopt } for pid=5978 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 77.840372][ T30] audit: type=1400 audit(1776810529.663:160): avc: denied { firmware_load } for pid=5978 comm="syz.0.17" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 77.872116][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 77.878950][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 77.880865][ T30] audit: type=1400 audit(1776810529.673:161): avc: denied { read write } for pid=5978 comm="syz.0.17" name="cdc-wdm0" dev="devtmpfs" ino=2795 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 77.885938][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 77.914502][ T5983] netlink: 'syz.4.19': attribute type 6 has an invalid length. [ 77.915271][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 77.929218][ T5981] ======================================================= [ 77.929218][ T5981] WARNING: The mand mount option has been deprecated and [ 77.929218][ T5981] and is ignored by this kernel. Remove the mand [ 77.929218][ T5981] option from the mount to silence this warning. [ 77.929218][ T5981] ======================================================= [ 77.930790][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 77.970632][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 77.979225][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 77.985832][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 77.992307][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 77.998888][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 78.005309][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 78.011880][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 78.018475][ T5887] usb 1-1: USB disconnect, device number 2 [ 78.024382][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 78.024403][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 78.024422][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 78.206965][ T5986] usb 5-1: USB disconnect, device number 2 [ 78.243916][ T30] audit: type=1400 audit(1776810529.673:162): avc: denied { open } for pid=5978 comm="syz.0.17" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2795 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 78.270103][ T30] audit: type=1400 audit(1776810529.753:163): avc: denied { wake_alarm } for pid=5980 comm="syz.1.18" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 78.305115][ T30] audit: type=1400 audit(1776810529.753:164): avc: denied { mounton } for pid=5980 comm="syz.1.18" path="/4/file0" dev="tmpfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 78.367334][ T30] audit: type=1400 audit(1776810529.983:165): avc: denied { mount } for pid=5980 comm="syz.1.18" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 78.462415][ T5823] ati_remote2 2-1:66.0: ati_remote2_probe(): interface 0 must have an endpoint [ 78.631338][ T5823] usb 2-1: USB disconnect, device number 2 [ 79.515371][ T5986] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 79.703258][ T5986] usb 4-1: Using ep0 maxpacket: 32 [ 79.719541][ T5986] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 79.736450][ T5986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 79.748995][ T5986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 79.770612][ T5986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 79.795048][ T5986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 79.824273][ T5986] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 79.840553][ T5986] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.877849][ T5986] usb 4-1: Product: syz [ 79.908941][ T5986] usb 4-1: Manufacturer: syz [ 79.925573][ T5986] usb 4-1: SerialNumber: syz [ 79.962604][ T5986] usb 4-1: config 0 descriptor?? [ 80.664837][ T5887] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 80.762632][ T29] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 80.902379][ T5887] usb 1-1: Using ep0 maxpacket: 8 [ 80.913549][ T5887] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 80.922156][ T5887] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 80.950231][ T5887] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 80.982603][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 80.986059][ T5887] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 81.015736][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.053084][ T29] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.054517][ T5887] usbtmc 1-1:16.0: bulk endpoints not found [ 81.129159][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 81.145971][ T29] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 81.172461][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.225331][ T29] usb 5-1: config 0 descriptor?? [ 81.475406][ T6026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.493634][ T5986] iforce 4-1:0.0: usb_submit_urb failed: -110 [ 81.506882][ T6031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.31'. [ 81.507354][ T6026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.519277][ T5986] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 81.542827][ T5986] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 81.565209][ T6031] FAULT_INJECTION: forcing a failure. [ 81.565209][ T6031] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 81.579902][ T5986] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 81.594070][ T5986] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 81.596186][ T6031] CPU: 1 UID: 0 PID: 6031 Comm: syz.1.31 Not tainted syzkaller #0 PREEMPT(full) [ 81.596213][ T6031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 81.596230][ T6031] Call Trace: [ 81.596237][ T6031] [ 81.596245][ T6031] dump_stack_lvl+0x100/0x190 [ 81.596280][ T6031] should_fail_ex.cold+0x5/0xa [ 81.596303][ T6031] ? prepare_alloc_pages+0x16d/0x5f0 [ 81.596329][ T6031] should_fail_alloc_page+0xeb/0x140 [ 81.596351][ T6031] prepare_alloc_pages+0x1f0/0x5f0 [ 81.596373][ T6031] ? arch_stack_walk+0xa6/0xf0 [ 81.596403][ T6031] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 81.596436][ T6031] ? stack_trace_save+0x8e/0xc0 [ 81.596460][ T6031] ? __lock_acquire+0x4a5/0x2630 [ 81.596485][ T6031] ? check_noncircular+0x97/0x160 [ 81.596506][ T6031] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 81.596536][ T6031] ? add_lock_to_list+0x99/0x110 [ 81.596565][ T6031] ? filemap_get_entry+0x22d/0x450 [ 81.596598][ T6031] ? filemap_get_entry+0x237/0x450 [ 81.596625][ T6031] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 81.596649][ T6031] ? policy_nodemask+0xed/0x4f0 [ 81.596677][ T6031] alloc_pages_mpol+0x1fb/0x540 [ 81.596699][ T6031] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 81.596722][ T6031] ? __filemap_get_folio_mpol+0x3ba/0xe70 [ 81.596755][ T6031] folio_alloc_noprof+0x22/0x250 [ 81.596779][ T6031] secretmem_fault+0x2d7/0x750 [ 81.596805][ T6031] __do_fault+0x10b/0x440 [ 81.596822][ T6031] ? find_held_lock+0x2b/0x80 [ 81.596842][ T6031] do_fault+0x2db/0x1750 [ 81.596868][ T6031] __handle_mm_fault+0x187d/0x2a00 [ 81.596899][ T6031] ? mt_find+0x45e/0x8e0 [ 81.596926][ T6031] ? __pfx___handle_mm_fault+0x10/0x10 [ 81.596950][ T6031] ? __pfx_mt_find+0x10/0x10 [ 81.596991][ T6031] ? find_vma+0xbf/0x140 [ 81.597009][ T6031] ? __pfx_find_vma+0x10/0x10 [ 81.597031][ T6031] handle_mm_fault+0x36d/0xa20 [ 81.597062][ T6031] do_user_addr_fault+0x74c/0x12f0 [ 81.597093][ T6031] ? trace_page_fault_kernel+0x7a/0x200 [ 81.597120][ T6031] exc_page_fault+0x6f/0xd0 [ 81.597145][ T6031] asm_exc_page_fault+0x26/0x30 [ 81.597164][ T6031] RIP: 0010:__put_user_4+0xd/0x20 [ 81.597187][ T6031] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 87 d7 03 00 0f 1f 80 00 00 00 00 90 90 90 [ 81.597210][ T6031] RSP: 0018:ffffc90004787e08 EFLAGS: 00050206 [ 81.597228][ T6031] RAX: 0000000000000006 RBX: 0000000000000000 RCX: 0000200000000000 [ 81.597240][ T6031] RDX: ffff888033bd4a00 RSI: ffffffff825a48e1 RDI: ffffffff8c1c1f80 [ 81.597253][ T6031] RBP: 1ffff920008f0fc5 R08: 0000000000000001 R09: 00000000000001c8 [ 81.597264][ T6031] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000006 [ 81.597275][ T6031] R13: 0000000000000007 R14: 0000000000000005 R15: dffffc0000000000 [ 81.597295][ T6031] ? __might_fault+0x111/0x140 [ 81.597326][ T6031] __sys_socketpair+0x120/0x5b0 [ 81.597352][ T6031] ? __pfx___sys_socketpair+0x10/0x10 [ 81.597379][ T6031] ? __pfx_ksys_write+0x10/0x10 [ 81.597404][ T6031] __x64_sys_socketpair+0x96/0x100 [ 81.597426][ T6031] ? lockdep_hardirqs_on+0x78/0x100 [ 81.597450][ T6031] do_syscall_64+0x10b/0xf80 [ 81.597472][ T6031] ? clear_bhb_loop+0x40/0x90 [ 81.597495][ T6031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.597515][ T6031] RIP: 0033:0x7f9477f9c819 [ 81.597534][ T6031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.597552][ T6031] RSP: 002b:00007f9478f32028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 81.597568][ T6031] RAX: ffffffffffffffda RBX: 00007f9478215fa0 RCX: 00007f9477f9c819 [ 81.597580][ T6031] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 81.597591][ T6031] RBP: 00007f9478f32090 R08: 0000000000000000 R09: 0000000000000000 [ 81.597602][ T6031] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.597613][ T6031] R13: 00007f9478216038 R14: 00007f9478215fa0 R15: 00007ffea82b2488 [ 81.597641][ T6031] [ 81.624980][ T6031] netlink: 52 bytes leftover after parsing attributes in process `syz.1.31'. [ 81.688914][ T5986] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 81.832452][ T5973] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 82.011429][ T29] nzxt-smart2 0003:1E71:2009.0001: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 82.054357][ T5973] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 82.073367][ T5973] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.085636][ T5973] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 82.114077][ T5973] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.137654][ T5986] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 82.145614][ T5986] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 82.148077][ T5973] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 82.162715][ T5986] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 82.163904][ T5973] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 82.177161][ T5986] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 82.177497][ T5986] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 82.226944][ T5973] usb 3-1: Product: syz [ 82.228456][ T5986] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 82.231286][ T5973] usb 3-1: Manufacturer: syz [ 82.251030][ T5973] cdc_wdm 3-1:1.0: skipping garbage [ 82.259725][ T5973] cdc_wdm 3-1:1.0: skipping garbage [ 82.260848][ T5986] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 82.268248][ T5973] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 82.279022][ T5973] cdc_wdm 3-1:1.0: Unknown control protocol [ 82.281697][ T5986] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 82.303099][ T5986] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 82.313202][ T5986] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 82.330763][ T5986] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 82.343718][ T5986] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 82.396322][ T5986] input input5: Timeout waiting for response from device. [ 82.443622][ T5986] usb 4-1: USB disconnect, device number 4 [ 82.488262][ T6034] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 82.496850][ T6034] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 82.505367][ T6034] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 82.564685][ T9] usb 5-1: USB disconnect, device number 3 [ 82.602797][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 82.609445][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 82.616652][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 82.623261][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 82.630081][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 82.636668][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 82.650601][ T5986] usb 3-1: USB disconnect, device number 3 [ 82.656507][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 82.882476][ T5973] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 83.826328][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 83.826348][ T30] audit: type=1400 audit(1776810534.993:192): avc: denied { name_bind } for pid=6048 comm="syz.3.36" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 83.995561][ T5944] usb 1-1: USB disconnect, device number 3 [ 84.005280][ T5973] usb 2-1: Using ep0 maxpacket: 32 [ 84.114884][ T5973] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 84.122859][ T30] audit: type=1400 audit(1776810535.003:193): avc: denied { name_connect } for pid=6048 comm="syz.3.36" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 84.192846][ T5973] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 84.218136][ T30] audit: type=1400 audit(1776810536.083:194): avc: denied { unmount } for pid=5835 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 84.219638][ T5973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.265750][ T5973] usb 2-1: config 0 descriptor?? [ 84.534192][ T30] audit: type=1400 audit(1776810536.333:195): avc: denied { read } for pid=6056 comm="syz.0.38" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 84.568945][ T6047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.577670][ T30] audit: type=1400 audit(1776810536.353:196): avc: denied { open } for pid=6056 comm="syz.0.38" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 84.577721][ T30] audit: type=1400 audit(1776810536.383:197): avc: denied { read write } for pid=6056 comm="syz.0.38" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 84.577761][ T30] audit: type=1400 audit(1776810536.383:198): avc: denied { open } for pid=6056 comm="syz.0.38" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 84.577800][ T30] audit: type=1400 audit(1776810536.393:199): avc: denied { map } for pid=6056 comm="syz.0.38" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 84.673900][ T6047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.999748][ T30] audit: type=1400 audit(1776810536.863:201): avc: denied { create } for pid=6065 comm="syz.4.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.052171][ T5973] usbhid 2-1:0.0: can't add hid device: -71 [ 85.058298][ T5973] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 85.065875][ T30] audit: type=1400 audit(1776810536.863:200): avc: denied { mount } for pid=6053 comm="syz.3.37" name="/" dev="rpc_pipefs" ino=9128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 85.154960][ T5973] usb 2-1: USB disconnect, device number 3 [ 85.853650][ T6084] netlink: 24 bytes leftover after parsing attributes in process `syz.3.45'. [ 85.894966][ T6089] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 85.922199][ T6084] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6084 comm=syz.3.45 [ 86.005411][ T6088] bond1: option arp_interval: invalid value (18446744073709551615) [ 86.033442][ T6088] bond1: option arp_interval: allowed values 0 - 2147483647 [ 86.138192][ T6088] bond1 (unregistering): Released all slaves [ 86.304452][ T6098] team0: entered allmulticast mode [ 86.325948][ T6098] team_slave_0: entered allmulticast mode [ 86.338308][ T6098] team_slave_1: entered allmulticast mode [ 86.355553][ T6098] netlink: 32 bytes leftover after parsing attributes in process `syz.4.49'. [ 86.380595][ T6098] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 86.543534][ T10] cfg80211: failed to load regulatory.db [ 86.626914][ T6112] dummy0: entered promiscuous mode [ 86.652719][ T6112] macvlan2: entered promiscuous mode [ 86.658527][ T6112] macvlan2: entered allmulticast mode [ 86.672414][ T5944] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 86.672455][ T6112] dummy0: entered allmulticast mode [ 86.857856][ T5944] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 86.885543][ T5944] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.919097][ T5944] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 86.942307][ T5944] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.978950][ T5944] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 87.142403][ T5146] Bluetooth: hci4: unexpected cc 0x0c13 length: 85 > 1 [ 87.634821][ T5944] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 87.648410][ T6129] netlink: 28 bytes leftover after parsing attributes in process `syz.0.60'. [ 87.661198][ T5944] usb 2-1: Product: syz [ 87.666021][ T5944] usb 2-1: Manufacturer: syz [ 87.685196][ T5944] cdc_wdm 2-1:1.0: skipping garbage [ 87.691535][ T5944] cdc_wdm 2-1:1.0: skipping garbage [ 87.700414][ T5944] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 87.707349][ T5944] cdc_wdm 2-1:1.0: Unknown control protocol [ 87.902080][ T6106] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 87.910496][ T6106] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 87.918964][ T6106] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 87.978807][ T6139] dns_resolver: Unsupported server list version (0) [ 88.410616][ C0] wdm_int_callback: 31 callbacks suppressed [ 88.410643][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 88.423157][ C0] wdm_int_callback: 31 callbacks suppressed [ 88.423177][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 88.435658][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 88.442256][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 88.448509][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 88.455121][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 88.462947][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 88.469556][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 88.476989][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 88.483573][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 88.490403][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 88.497002][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 88.503361][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 88.509961][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 88.516219][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 88.522793][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 88.529029][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 88.535615][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 88.542833][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 88.549427][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 88.572515][ T10] usb 2-1: USB disconnect, device number 4 [ 88.578374][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 88.703285][ T6150] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=148 sclass=netlink_tcpdiag_socket pid=6150 comm=syz.0.65 [ 88.717191][ T6151] netlink: 136 bytes leftover after parsing attributes in process `syz.2.64'. [ 88.854285][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 88.854302][ T30] audit: type=1400 audit(1776810540.723:236): avc: denied { create } for pid=6149 comm="syz.3.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 88.935269][ T30] audit: type=1400 audit(1776810540.753:237): avc: denied { ioctl } for pid=6149 comm="syz.3.63" path="socket:[10448]" dev="sockfs" ino=10448 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 89.177106][ T30] audit: type=1400 audit(1776810541.043:238): avc: denied { add_name } for pid=6134 comm="dhcpcd-run-hook" name="resolv.conf.lapb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.251220][ T30] audit: type=1400 audit(1776810541.043:239): avc: denied { create } for pid=6134 comm="dhcpcd-run-hook" name="resolv.conf.lapb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 89.352822][ T30] audit: type=1400 audit(1776810541.043:240): avc: denied { write } for pid=6134 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb0.link" dev="tmpfs" ino=2256 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 89.429611][ T6173] capability: warning: `syz.0.65' uses deprecated v2 capabilities in a way that may be insecure [ 89.948721][ T30] audit: type=1400 audit(1776810541.043:241): avc: denied { append } for pid=6134 comm="dhcpcd-run-hook" name="resolv.conf.lapb0.link" dev="tmpfs" ino=2256 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 90.054951][ T30] audit: type=1400 audit(1776810541.903:242): avc: denied { remove_name } for pid=6171 comm="rm" name="resolv.conf.lapb0.link" dev="tmpfs" ino=2256 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.218001][ T30] audit: type=1400 audit(1776810541.903:243): avc: denied { unlink } for pid=6171 comm="rm" name="resolv.conf.lapb0.link" dev="tmpfs" ino=2256 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 90.284639][ T30] audit: type=1400 audit(1776810542.133:244): avc: denied { mount } for pid=6179 comm="syz.4.69" name="/" dev="hugetlbfs" ino=9502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 90.412757][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 91.695028][ T30] audit: type=1400 audit(1776810543.433:245): avc: denied { unmount } for pid=5835 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 91.900849][ T6194] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 92.703032][ T6211] netlink: 'syz.1.75': attribute type 10 has an invalid length. [ 92.710739][ T6211] netlink: 40 bytes leftover after parsing attributes in process `syz.1.75'. [ 93.122219][ T6211] bridge0: port 3(dummy0) entered blocking state [ 93.128756][ T6211] bridge0: port 3(dummy0) entered disabled state [ 93.135301][ T6211] dummy0: entered allmulticast mode [ 93.142402][ T6211] dummy0: entered promiscuous mode [ 93.148254][ T6211] bridge0: port 3(dummy0) entered blocking state [ 93.155783][ T6211] bridge0: port 3(dummy0) entered forwarding state [ 93.164239][ T6212] ±ÿ: renamed from lo (while UP) [ 94.107008][ T30] audit: type=1400 audit(1776810545.953:246): avc: denied { getopt } for pid=6222 comm="syz.0.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 94.132994][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 94.334871][ T10] usb 2-1: config 8 has an invalid interface number: 7 but max is 0 [ 94.357489][ T10] usb 2-1: config 8 has no interface number 0 [ 94.376011][ T10] usb 2-1: config 8 interface 7 has no altsetting 0 [ 94.399785][ T10] usb 2-1: New USB device found, idVendor=1614, idProduct=0800, bcdDevice=9a.6e [ 94.426733][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.492340][ T10] usb 2-1: Product: syz [ 94.626547][ T10] usb 2-1: Manufacturer: syz [ 94.702968][ T10] usb 2-1: SerialNumber: syz [ 95.055866][ T30] audit: type=1400 audit(1776810546.913:247): avc: denied { create } for pid=6216 comm="syz.1.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 95.201070][ T10] hub 2-1:8.7: bad descriptor, ignoring hub [ 95.214307][ T10] hub 2-1:8.7: probe with driver hub failed with error -5 [ 95.228096][ T30] audit: type=1400 audit(1776810547.083:248): avc: denied { append } for pid=6242 comm="syz.4.80" name="dlm-monitor" dev="devtmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 95.256506][ T10] option 2-1:8.7: GSM modem (1-port) converter detected [ 95.283869][ T5146] Bluetooth: hci3: unexpected event 0x18 length: 247 > 23 [ 95.299235][ T30] audit: type=1400 audit(1776810547.083:249): avc: denied { read } for pid=6242 comm="syz.4.80" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 95.343360][ T10] usb 2-1: USB disconnect, device number 5 [ 95.364260][ T10] option 2-1:8.7: device disconnected [ 95.735691][ T6253] warning: `syz.4.82' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 95.809580][ T6253] FAT-fs (nullb0): bogus number of reserved sectors [ 95.816637][ T6253] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 95.894502][ T5146] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 95.905411][ T5146] Bluetooth: hci1: Injecting HCI hardware error event [ 95.919584][ T5146] Bluetooth: hci1: hardware error 0x00 [ 96.463911][ T30] audit: type=1400 audit(1776810547.663:250): avc: denied { mounton } for pid=6249 comm="syz.4.82" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 96.920640][ T30] audit: type=1400 audit(1776810548.783:251): avc: denied { unmount } for pid=5835 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 97.152415][ T5894] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 97.364358][ T6263] hpfs: Bad magic ... probably not HPFS [ 97.435076][ T30] audit: type=1400 audit(1776810549.193:252): avc: denied { setopt } for pid=6254 comm="syz.3.83" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 97.560070][ T5986] IPVS: starting estimator thread 0... [ 97.721256][ T5894] usb 1-1: config 8 has an invalid interface number: 154 but max is 0 [ 97.732828][ T6264] IPVS: using max 35 ests per chain, 84000 per kthread [ 97.747363][ T5894] usb 1-1: config 8 has no interface number 0 [ 97.763734][ T5894] usb 1-1: config 8 interface 154 has no altsetting 0 [ 97.782499][ T5894] usb 1-1: New USB device found, idVendor=07ca, idProduct=a867, bcdDevice=5a.70 [ 97.803905][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.820419][ T5894] usb 1-1: Product: syz [ 97.830046][ T5894] usb 1-1: Manufacturer: syz [ 97.843361][ T5894] usb 1-1: SerialNumber: syz [ 98.006599][ T6268] netlink: 'syz.4.86': attribute type 10 has an invalid length. [ 98.014427][ T6268] netlink: 40 bytes leftover after parsing attributes in process `syz.4.86'. [ 98.024337][ T6268] bridge0: port 3(dummy0) entered blocking state [ 98.031329][ T6268] bridge0: port 3(dummy0) entered disabled state [ 98.038883][ T6268] dummy0: entered allmulticast mode [ 98.066907][ T6268] dummy0: entered promiscuous mode [ 98.076176][ T6268] bridge0: port 3(dummy0) entered blocking state [ 98.082728][ T6268] bridge0: port 3(dummy0) entered forwarding state [ 98.097023][ T6269] ±ÿ: renamed from lo (while UP) [ 98.103266][ T5146] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 98.334329][ T5894] usb 1-1: USB disconnect, device number 4 [ 98.340314][ T5146] Bluetooth: hci0: unexpected cc 0x0c13 length: 85 > 1 [ 98.784984][ T30] audit: type=1400 audit(1776810550.633:253): avc: denied { getopt } for pid=6273 comm="syz.0.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 98.875397][ T30] audit: type=1400 audit(1776810550.743:254): avc: denied { ioctl } for pid=6276 comm="syz.2.90" path="socket:[10644]" dev="sockfs" ino=10644 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 99.003982][ T30] audit: type=1400 audit(1776810550.873:255): avc: denied { name_connect } for pid=6281 comm="syz.0.91" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 99.291614][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 99.291630][ T30] audit: type=1400 audit(1776810551.153:257): avc: denied { name_bind } for pid=6276 comm="syz.2.90" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 99.346848][ T30] audit: type=1400 audit(1776810551.183:258): avc: denied { node_bind } for pid=6276 comm="syz.2.90" saddr=224.0.0.2 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 99.487581][ T30] audit: type=1400 audit(1776810551.333:259): avc: denied { create } for pid=6298 comm="syz.1.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 99.510289][ T30] audit: type=1400 audit(1776810551.333:260): avc: denied { connect } for pid=6298 comm="syz.1.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 99.553044][ T6282] netlink: 152 bytes leftover after parsing attributes in process `syz.2.90'. [ 100.379863][ T6304] bond1: option arp_interval: invalid value (18446744073709551615) [ 100.387957][ T30] audit: type=1400 audit(1776810552.243:261): avc: denied { setopt } for pid=6308 comm="syz.3.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 100.428546][ T6304] bond1: option arp_interval: allowed values 0 - 2147483647 [ 100.442409][ T30] audit: type=1400 audit(1776810552.303:262): avc: denied { bind } for pid=6308 comm="syz.3.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 100.523184][ T6312] netlink: 'syz.3.98': attribute type 1 has an invalid length. [ 100.561063][ T6304] bond1 (unregistering): Released all slaves [ 101.057006][ T30] audit: type=1400 audit(1776810552.923:263): avc: denied { create } for pid=6324 comm="syz.4.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 101.147428][ T6327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.103'. [ 101.188336][ T30] audit: type=1400 audit(1776810553.053:264): avc: denied { write } for pid=6324 comm="syz.4.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 101.214180][ T6327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.103'. [ 101.215450][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.215788][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.215819][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.215838][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.239619][ T30] audit: type=1400 audit(1776810553.053:265): avc: denied { bind } for pid=6328 comm="syz.3.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 101.246854][ T6330] openvswitch: netlink: Key type 310 is out of range max 32 [ 101.415462][ T5146] Bluetooth: hci3: command 0x0406 tx timeout [ 101.524417][ T6335] netlink: 24 bytes leftover after parsing attributes in process `syz.3.106'. [ 101.538945][ T6335] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6335 comm=syz.3.106 [ 101.845270][ T6342] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.107'. [ 101.963258][ T30] audit: type=1400 audit(1776810553.833:266): avc: denied { read write } for pid=6347 comm="syz.1.111" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 102.977653][ T6355] bond1: option arp_interval: invalid value (18446744073709551615) [ 103.008242][ T6355] bond1: option arp_interval: allowed values 0 - 2147483647 [ 103.076569][ T6355] bond1 (unregistering): Released all slaves [ 103.559088][ T6375] bond1: option arp_interval: invalid value (18446744073709551615) [ 103.581012][ T6375] bond1: option arp_interval: allowed values 0 - 2147483647 [ 103.631998][ T6375] bond1 (unregistering): Released all slaves [ 103.969799][ T5829] Bluetooth: hci4: unexpected cc 0x0c13 length: 85 > 1 [ 104.327687][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 104.327699][ T30] audit: type=1400 audit(1776810556.193:330): avc: denied { read write } for pid=5822 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 104.400608][ T30] audit: type=1400 audit(1776810556.253:331): avc: denied { read write } for pid=5828 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 104.512173][ T30] audit: type=1400 audit(1776810556.293:332): avc: denied { create } for pid=6400 comm="syz.3.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 104.533413][ T6401] bond1: option arp_interval: invalid value (18446744073709551615) [ 104.574640][ T6401] bond1: option arp_interval: allowed values 0 - 2147483647 [ 104.615501][ T30] audit: type=1400 audit(1776810556.303:333): avc: denied { read write } for pid=6400 comm="syz.3.130" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 104.685447][ T6401] bond1 (unregistering): Released all slaves [ 104.709041][ T30] audit: type=1400 audit(1776810556.303:334): avc: denied { create } for pid=6400 comm="syz.3.130" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 104.758543][ T30] audit: type=1400 audit(1776810556.303:335): avc: denied { create } for pid=6400 comm="syz.3.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=0 [ 104.785213][ T6413] netlink: 40 bytes leftover after parsing attributes in process `syz.0.132'. [ 104.825612][ T30] audit: type=1400 audit(1776810556.363:336): avc: denied { read write } for pid=5821 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 104.876471][ T6411] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 104.909266][ T30] audit: type=1400 audit(1776810556.453:337): avc: denied { read write } for pid=5822 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 104.945757][ T30] audit: type=1400 audit(1776810556.453:338): avc: denied { execute } for pid=6394 comm="syz.2.128" name="file0" dev="tmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 105.030630][ T30] audit: type=1400 audit(1776810556.463:339): avc: denied { execmem } for pid=6406 comm="syz.1.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 105.143470][ T6421] x_tables: duplicate underflow at hook 1 [ 105.347254][ T6427] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 105.387265][ T6427] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 105.572523][ T5829] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 105.583136][ T5829] Bluetooth: hci2: Injecting HCI hardware error event [ 105.591951][ T5146] Bluetooth: hci2: hardware error 0x00 [ 105.757561][ T5829] Bluetooth: hci2: unexpected event for opcode 0x0c7b [ 106.364749][ T6444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.142'. [ 106.414537][ T6444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.142'. [ 106.435494][ T3555] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.449119][ T3555] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.466208][ T3555] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.511877][ T57] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.501725][ T6479] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 107.511595][ T6479] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 107.653071][ T5146] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 108.036959][ T6485] capability: warning: `syz.4.158' uses 32-bit capabilities (legacy support in use) [ 108.943764][ T6494] bond1: option arp_interval: invalid value (18446744073709551615) [ 109.008392][ T6494] bond1: option arp_interval: allowed values 0 - 2147483647 [ 109.100629][ T6494] bond1 (unregistering): Released all slaves [ 109.339147][ T30] kauditd_printk_skb: 203 callbacks suppressed [ 109.339173][ T30] audit: type=1400 audit(1776810561.203:543): avc: denied { write } for pid=6501 comm="syz.3.164" name="ip6_flowlabel" dev="proc" ino=4026532941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0 [ 109.392400][ T30] audit: type=1400 audit(1776810561.203:544): avc: denied { read append } for pid=6505 comm="syz.2.166" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 109.524343][ T30] audit: type=1400 audit(1776810561.203:545): avc: denied { create } for pid=6505 comm="syz.2.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=0 [ 109.595985][ T30] audit: type=1400 audit(1776810561.213:546): avc: denied { execmem } for pid=6505 comm="syz.2.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 109.683348][ T30] audit: type=1400 audit(1776810561.213:547): avc: denied { create } for pid=6505 comm="syz.2.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 109.749573][ T30] audit: type=1400 audit(1776810561.213:548): avc: denied { prog_load } for pid=6505 comm="syz.2.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 109.794536][ T6516] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 109.827742][ T6516] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 109.845815][ T30] audit: type=1400 audit(1776810561.213:549): avc: denied { create } for pid=6505 comm="syz.2.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 109.866735][ T30] audit: type=1400 audit(1776810561.213:550): avc: denied { read } for pid=6505 comm="syz.2.166" dev="nsfs" ino=4026532972 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 109.889474][ T30] audit: type=1400 audit(1776810561.243:551): avc: denied { execmem } for pid=6502 comm="syz.0.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 109.915762][ T30] audit: type=1400 audit(1776810561.243:552): avc: denied { read write } for pid=5821 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 110.467204][ T6525] netlink: 136 bytes leftover after parsing attributes in process `syz.2.172'. [ 110.764608][ T6532] veth1_to_bridge: entered allmulticast mode [ 110.779724][ T6532] bridge0: port 4(veth1_to_bridge) entered blocking state [ 110.798870][ T6532] bridge0: port 4(veth1_to_bridge) entered disabled state [ 110.816698][ T6532] veth1_to_bridge: entered promiscuous mode [ 110.836773][ T6532] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 110.884402][ T6537] netlink: 'syz.3.173': attribute type 16 has an invalid length. [ 110.902819][ T6532] bridge0: port 4(veth1_to_bridge) entered blocking state [ 110.910079][ T6532] bridge0: port 4(veth1_to_bridge) entered forwarding state [ 110.919201][ T6537] netlink: 'syz.3.173': attribute type 17 has an invalid length. [ 111.010701][ T6535] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.048357][ T6535] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.191594][ T6542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.176'. [ 111.203788][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 111.216151][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 111.228513][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 111.240813][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 111.253125][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 111.265407][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 111.277675][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 111.290194][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 111.302524][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 111.314831][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 113.464974][ T6542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.176'. [ 113.475254][ T6548] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 113.494333][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.691575][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.743393][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.794442][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.619305][ T30] kauditd_printk_skb: 74 callbacks suppressed [ 114.619331][ T30] audit: type=1400 audit(1776810566.483:627): avc: denied { create } for pid=6565 comm="syz.2.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 114.842718][ T6562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.900493][ T30] audit: type=1400 audit(1776810566.513:628): avc: denied { create } for pid=6565 comm="syz.2.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 115.004556][ T6562] batadv_slave_0: entered promiscuous mode [ 115.024452][ T30] audit: type=1400 audit(1776810566.513:629): avc: denied { read } for pid=6565 comm="syz.2.183" dev="nsfs" ino=4026532972 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 115.318841][ T30] audit: type=1400 audit(1776810566.553:630): avc: denied { create } for pid=6565 comm="syz.2.183" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 115.344740][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 115.669681][ T30] audit: type=1400 audit(1776810566.623:631): avc: denied { create } for pid=6565 comm="syz.2.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 115.746687][ T6570] wireguard0: entered promiscuous mode [ 115.796874][ T6570] wireguard0: entered allmulticast mode [ 115.868342][ T30] audit: type=1400 audit(1776810566.733:632): avc: denied { read write } for pid=5822 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 115.972459][ T30] audit: type=1400 audit(1776810566.883:633): avc: denied { execute } for pid=6565 comm="syz.2.183" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=0 [ 115.996588][ T30] audit: type=1400 audit(1776810567.013:634): avc: denied { read } for pid=6569 comm="syz.0.184" dev="nsfs" ino=4026532908 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 116.049125][ T6576] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 116.082199][ T6576] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 116.133312][ T30] audit: type=1400 audit(1776810567.433:635): avc: denied { read write } for pid=5821 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 116.157928][ T30] audit: type=1400 audit(1776810567.653:636): avc: denied { prog_load } for pid=6573 comm="syz.1.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 116.212281][ C1] net_ratelimit: 15976 callbacks suppressed [ 116.212301][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 116.230808][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 116.243320][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 116.255634][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 116.267906][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 116.280197][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 116.292602][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 116.304972][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 116.317356][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 116.329672][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 117.808494][ T6588] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56694 sclass=netlink_route_socket pid=6588 comm=syz.0.187 [ 119.647411][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 119.647429][ T30] audit: type=1400 audit(1776810571.513:672): avc: denied { create } for pid=6591 comm="syz.1.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 120.044165][ T30] audit: type=1400 audit(1776810571.593:673): avc: denied { read } for pid=6595 comm="syz.0.191" dev="nsfs" ino=4026532908 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 120.152360][ T30] audit: type=1400 audit(1776810571.603:674): avc: denied { execmem } for pid=6595 comm="syz.0.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 120.276739][ T30] audit: type=1400 audit(1776810571.613:675): avc: denied { name_bind } for pid=6596 comm="syz.2.192" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 120.382754][ T30] audit: type=1400 audit(1776810571.613:676): avc: denied { create } for pid=6596 comm="syz.2.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=0 [ 120.550156][ T30] audit: type=1400 audit(1776810571.613:677): avc: denied { create } for pid=6596 comm="syz.2.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 120.775969][ T30] audit: type=1400 audit(1776810571.703:678): avc: denied { read } for pid=6595 comm="syz.0.191" dev="nsfs" ino=4026532908 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 120.919739][ T30] audit: type=1400 audit(1776810571.953:679): avc: denied { create } for pid=6595 comm="syz.0.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 121.129933][ T30] audit: type=1400 audit(1776810571.973:680): avc: denied { create } for pid=6599 comm="syz.3.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 121.222558][ C1] net_ratelimit: 16491 callbacks suppressed [ 121.222579][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 121.240978][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 121.245888][ T30] audit: type=1400 audit(1776810571.983:681): avc: denied { create } for pid=6599 comm="syz.3.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 121.253422][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 121.285519][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 121.297753][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 121.310079][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 121.322530][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 121.334996][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 121.347459][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 121.359750][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 123.445343][ T6620] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6620 comm=syz.3.198 [ 124.018356][ T6633] netlink: 'syz.3.203': attribute type 11 has an invalid length. [ 124.596781][ T6636] netlink: 24 bytes leftover after parsing attributes in process `syz.2.204'. [ 124.667965][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 124.667982][ T30] audit: type=1400 audit(1776810576.533:743): avc: denied { read write } for pid=5828 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 124.810683][ T30] audit: type=1400 audit(1776810576.603:744): avc: denied { allowed } for pid=6637 comm="syz.1.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 124.837456][ T6638] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6638 comm=syz.2.204 [ 124.929044][ T30] audit: type=1400 audit(1776810576.603:745): avc: denied { prog_load } for pid=6637 comm="syz.1.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 125.020377][ T30] audit: type=1400 audit(1776810576.613:746): avc: denied { create } for pid=6637 comm="syz.1.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 125.058091][ T6649] FAULT_INJECTION: forcing a failure. [ 125.058091][ T6649] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 125.132702][ T6649] CPU: 0 UID: 0 PID: 6649 Comm: syz.3.210 Not tainted syzkaller #0 PREEMPT(full) [ 125.132738][ T6649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 125.132750][ T6649] Call Trace: [ 125.132758][ T6649] [ 125.132767][ T6649] dump_stack_lvl+0x100/0x190 [ 125.132813][ T6649] should_fail_ex.cold+0x5/0xa [ 125.132843][ T6649] _copy_from_iter+0x1f4/0x1690 [ 125.132875][ T6649] ? __asan_memset+0x23/0x50 [ 125.132904][ T6649] ? __pfx__copy_from_iter+0x10/0x10 [ 125.132930][ T6649] ? __pfx___alloc_skb+0x10/0x10 [ 125.132968][ T6649] netlink_sendmsg+0x808/0xda0 [ 125.132996][ T6649] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.133016][ T6649] ? __might_fault+0x30/0x140 [ 125.133053][ T6649] ____sys_sendmsg+0x9e1/0xb70 [ 125.133075][ T6649] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.133099][ T6649] ? __pfx_____sys_sendmsg+0x10/0x10 [ 125.133133][ T6649] ___sys_sendmsg+0x190/0x1e0 [ 125.133159][ T6649] ? __pfx____sys_sendmsg+0x10/0x10 [ 125.133214][ T6649] __sys_sendmsg+0x170/0x220 [ 125.133242][ T6649] ? __pfx___sys_sendmsg+0x10/0x10 [ 125.133289][ T6649] ? rcu_is_watching+0x12/0xc0 [ 125.133324][ T6649] do_syscall_64+0x10b/0xf80 [ 125.133351][ T6649] ? clear_bhb_loop+0x40/0x90 [ 125.133374][ T6649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.133394][ T6649] RIP: 0033:0x7f343099c819 [ 125.133417][ T6649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.133436][ T6649] RSP: 002b:00007f342ebf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.133458][ T6649] RAX: ffffffffffffffda RBX: 00007f3430c15fa0 RCX: 00007f343099c819 [ 125.133470][ T6649] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 125.133482][ T6649] RBP: 00007f342ebf6090 R08: 0000000000000000 R09: 0000000000000000 [ 125.133494][ T6649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.133506][ T6649] R13: 00007f3430c16038 R14: 00007f3430c15fa0 R15: 00007ffca40f94d8 [ 125.133535][ T6649] [ 125.135521][ T30] audit: type=1400 audit(1776810576.613:747): avc: denied { map_create } for pid=6637 comm="syz.1.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 125.605046][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 125.714374][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 125.968583][ T30] audit: type=1400 audit(1776810576.623:748): avc: denied { create } for pid=6637 comm="syz.1.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 125.993408][ T30] audit: type=1400 audit(1776810576.633:749): avc: denied { create } for pid=6637 comm="syz.1.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 126.013190][ T30] audit: type=1400 audit(1776810576.633:750): avc: denied { create } for pid=6637 comm="syz.1.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=0 [ 126.033540][ T30] audit: type=1400 audit(1776810576.633:751): avc: denied { create } for pid=6637 comm="syz.1.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 126.055259][ T30] audit: type=1400 audit(1776810576.633:752): avc: denied { create } for pid=6641 comm="syz.4.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=0 [ 126.232344][ C1] net_ratelimit: 15462 callbacks suppressed [ 126.232367][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 126.250734][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 126.263346][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 126.275734][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 126.289168][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 126.302807][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 126.315423][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 126.328473][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 126.341707][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 126.354123][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 127.152543][ T6657] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 127.217184][ T6657] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 128.088573][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 128.826261][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2ca!!! [ 128.937681][ T0] NOHZ tick-stop error: local softirq work is pending, handler #4a!!! [ 129.191990][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 129.236272][ T0] NOHZ tick-stop error: local softirq work is pending, handler #4a!!! [ 129.322848][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 129.686141][ T30] kauditd_printk_skb: 135 callbacks suppressed [ 129.686158][ T30] audit: type=1400 audit(1776810581.553:889): avc: denied { read write } for pid=6683 comm="syz.3.220" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 129.940707][ T30] audit: type=1400 audit(1776810581.553:888): avc: denied { read write } for pid=5820 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 130.314300][ T6692] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=6692 comm=syz.1.218 [ 130.334035][ T30] audit: type=1400 audit(1776810581.673:890): avc: denied { read write } for pid=5828 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 130.334086][ T30] audit: type=1400 audit(1776810581.683:891): avc: denied { read write } for pid=5821 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 130.334126][ T30] audit: type=1400 audit(1776810581.793:892): avc: denied { create } for pid=6686 comm="syz.2.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 130.334165][ T30] audit: type=1400 audit(1776810581.843:893): avc: denied { append } for pid=6686 comm="syz.2.221" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=0 [ 130.334219][ T30] audit: type=1400 audit(1776810581.853:894): avc: denied { allowed } for pid=6686 comm="syz.2.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 130.334270][ T30] audit: type=1400 audit(1776810581.893:895): avc: denied { create } for pid=6688 comm="syz.3.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 130.334309][ T30] audit: type=1400 audit(1776810581.913:896): avc: denied { create } for pid=6686 comm="syz.2.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 130.334347][ T30] audit: type=1400 audit(1776810582.173:897): avc: denied { create } for pid=6689 comm="syz.1.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 131.012024][ T6687] GUP no longer grows the stack in syz.2.221 (6687): 200000005000-200000008000 (200000004000) [ 131.012147][ T6687] CPU: 0 UID: 0 PID: 6687 Comm: syz.2.221 Not tainted syzkaller #0 PREEMPT(full) [ 131.012174][ T6687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 131.012187][ T6687] Call Trace: [ 131.012195][ T6687] [ 131.012203][ T6687] dump_stack_lvl+0x100/0x190 [ 131.012239][ T6687] gup_vma_lookup.cold+0x83/0x96 [ 131.012271][ T6687] fixup_user_fault+0x253/0x510 [ 131.012300][ T6687] fault_in_user_writeable+0x70/0xe0 [ 131.012332][ T6687] futex_lock_pi+0x67d/0x7a0 [ 131.012358][ T6687] ? __pfx_futex_lock_pi+0x10/0x10 [ 131.012382][ T6687] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 131.012437][ T6687] ? __pfx_futex_wake_mark+0x10/0x10 [ 131.012477][ T6687] do_futex+0x18a/0x350 [ 131.012507][ T6687] ? __pfx_do_futex+0x10/0x10 [ 131.012535][ T6687] ? __vm_munmap+0x1d2/0x390 [ 131.012572][ T6687] __x64_sys_futex+0x34f/0x4d0 [ 131.012608][ T6687] ? __pfx___x64_sys_futex+0x10/0x10 [ 131.012644][ T6687] ? rcu_is_watching+0x12/0xc0 [ 131.012681][ T6687] do_syscall_64+0x10b/0xf80 [ 131.012709][ T6687] ? clear_bhb_loop+0x40/0x90 [ 131.012736][ T6687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.012759][ T6687] RIP: 0033:0x7f76a7d9c819 [ 131.012777][ T6687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.012798][ T6687] RSP: 002b:00007f76a8bd2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 131.012820][ T6687] RAX: ffffffffffffffda RBX: 00007f76a8015fa0 RCX: 00007f76a7d9c819 [ 131.012834][ T6687] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 131.012848][ T6687] RBP: 00007f76a7e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 131.012861][ T6687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.012872][ T6687] R13: 00007f76a8016038 R14: 00007f76a8015fa0 R15: 00007fff8ec60558 [ 131.012902][ T6687] [ 131.243408][ C1] net_ratelimit: 8322 callbacks suppressed [ 131.243432][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 131.244773][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 131.246124][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 131.247540][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 131.248778][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 131.250070][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 131.251166][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 131.251884][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 131.252971][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 131.254024][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 132.766249][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.774050][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.890560][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 134.890578][ T30] audit: type=1400 audit(1776810586.753:911): avc: denied { create } for pid=6703 comm="syz.0.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 134.895441][ T30] audit: type=1400 audit(1776810586.763:912): avc: denied { read append } for pid=6703 comm="syz.0.225" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 134.897532][ T30] audit: type=1400 audit(1776810586.763:913): avc: denied { read } for pid=6703 comm="syz.0.225" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 134.898193][ T30] audit: type=1400 audit(1776810586.763:914): avc: denied { prog_load } for pid=6703 comm="syz.0.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 134.966441][ T30] audit: type=1400 audit(1776810586.833:915): avc: denied { execmem } for pid=6703 comm="syz.0.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 135.481412][ T30] audit: type=1400 audit(1776810587.343:916): avc: denied { name_bind } for pid=6703 comm="syz.0.225" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 136.252369][ C1] net_ratelimit: 7764 callbacks suppressed [ 136.252398][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 136.252641][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 136.252825][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 136.253128][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 136.253601][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 136.254118][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 136.254276][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 136.254561][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 136.254702][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 136.255010][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 138.852259][ C0] sched: DL replenish lagged too much [ 141.262549][ C0] net_ratelimit: 17025 callbacks suppressed [ 141.262573][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 141.262953][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 141.263168][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 141.263338][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 141.263591][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 141.263756][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 141.264131][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 141.264546][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 141.264925][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 141.264983][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 146.272575][ C1] net_ratelimit: 16913 callbacks suppressed [ 146.272595][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 146.272613][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 146.273048][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 146.273518][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 146.273951][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 146.273985][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 146.274390][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 146.274401][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 146.274817][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 146.275246][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 151.282522][ C0] net_ratelimit: 17256 callbacks suppressed [ 151.282545][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 151.282549][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 151.283024][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 151.283463][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 151.283909][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 151.283923][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 151.284349][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 151.284349][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 151.284782][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 151.285225][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 156.292485][ C0] net_ratelimit: 17143 callbacks suppressed [ 156.292506][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 156.292992][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 156.293029][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 156.293404][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 156.293476][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 156.293818][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 156.294228][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 156.294618][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 156.295002][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 156.295415][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 161.302459][ C1] net_ratelimit: 17137 callbacks suppressed [ 161.302480][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 161.302631][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 161.303097][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 161.303559][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 161.303843][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 161.304060][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 161.304257][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 161.304518][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 161.304983][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 161.305443][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 166.312527][ C0] net_ratelimit: 16837 callbacks suppressed [ 166.312549][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 166.313000][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 166.313285][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 166.313489][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 166.313690][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 166.313970][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 166.314417][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 166.314866][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 166.315058][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 166.315311][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 171.322388][ C0] net_ratelimit: 16569 callbacks suppressed [ 171.322402][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 171.322651][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 171.322867][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 171.323088][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 171.323303][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 171.323519][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 171.323733][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 171.323947][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 171.324183][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 171.324416][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 176.332379][ C0] net_ratelimit: 18143 callbacks suppressed [ 176.332400][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 176.332815][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 176.333216][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 176.333336][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 176.333654][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 176.333753][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 176.334056][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 176.334461][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 176.334871][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 176.335166][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 181.342692][ C0] net_ratelimit: 17853 callbacks suppressed [ 181.342718][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 181.342749][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 181.343166][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 181.343213][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 181.343695][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 181.344158][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 181.344562][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 181.344595][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 181.344992][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 181.345022][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 186.352311][ C0] net_ratelimit: 16925 callbacks suppressed [ 186.352333][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 186.352760][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 186.353195][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 186.353401][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 186.353624][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 186.353816][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 186.354056][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 186.354485][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 186.354948][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 186.355223][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 191.362274][ C1] net_ratelimit: 16521 callbacks suppressed [ 191.362278][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 191.362293][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 191.362733][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 191.364086][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 191.364407][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 191.364524][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 191.364817][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 191.364958][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 191.365400][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 191.365836][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.558092][ T5825] Bluetooth: hci0: command 0x0406 tx timeout [ 193.558134][ T5825] Bluetooth: hci4: command 0x0406 tx timeout [ 194.220498][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.232958][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.372340][ C0] net_ratelimit: 15908 callbacks suppressed [ 196.372361][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 196.372772][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 196.373030][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 196.373171][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 196.373443][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 196.373573][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 196.373977][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 196.374376][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 196.374784][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 196.375229][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 201.382479][ C0] net_ratelimit: 16224 callbacks suppressed [ 201.382500][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.382944][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 201.383391][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.383606][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 201.383832][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.384008][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 201.384322][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 201.384438][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 201.384763][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.385203][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 206.392403][ C0] net_ratelimit: 16798 callbacks suppressed [ 206.392425][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 206.392874][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 206.393314][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 206.393756][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 206.393887][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 206.394202][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 206.394327][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 206.394642][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 206.394740][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 206.395086][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.402223][ C1] net_ratelimit: 16814 callbacks suppressed [ 211.402245][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 211.402565][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 211.402983][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.403407][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.403811][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.404212][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 211.404426][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 211.404621][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.404836][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 211.405042][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 216.412253][ C0] net_ratelimit: 17029 callbacks suppressed [ 216.412268][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 216.412273][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 216.412683][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 216.412701][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 216.413109][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 216.413166][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 216.413594][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 216.414023][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 216.414500][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 216.414930][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.422286][ C1] net_ratelimit: 16847 callbacks suppressed [ 221.422308][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 221.422465][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.422736][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 221.422901][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 221.423329][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.423770][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 221.424200][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.424633][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.424908][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 221.425064][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 226.432427][ C0] net_ratelimit: 17057 callbacks suppressed [ 226.432448][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 226.432883][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 226.433045][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 226.433320][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 226.433447][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 226.433800][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 226.433898][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 226.434267][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 226.434702][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 226.435131][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 231.442563][ C0] net_ratelimit: 16856 callbacks suppressed [ 231.442587][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 231.442995][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 231.443401][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 231.443830][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 231.444233][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 231.444313][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 231.444640][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 231.444737][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 231.445039][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 231.445152][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 236.452423][ C0] net_ratelimit: 16537 callbacks suppressed [ 236.452448][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 236.452478][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 236.452896][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 236.453329][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 236.453771][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 236.454220][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 236.454708][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 236.455030][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 236.455148][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 236.455434][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 241.462418][ C1] net_ratelimit: 16525 callbacks suppressed [ 241.462439][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 241.462614][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 241.462867][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 241.463056][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.463503][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 241.463944][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.464416][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.464862][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.465005][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 241.465302][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 246.472436][ C0] net_ratelimit: 16463 callbacks suppressed [ 246.472458][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.472469][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 246.472879][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 246.472922][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 246.473304][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 246.473357][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.473785][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.474216][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.474654][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 246.475080][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 251.482529][ C1] net_ratelimit: 16726 callbacks suppressed [ 251.482558][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 251.482721][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 251.483175][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 251.483618][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 251.484086][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 251.484527][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 251.484701][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 251.484972][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 251.485113][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 251.485416][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.910518][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.923505][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.492411][ C0] net_ratelimit: 16560 callbacks suppressed [ 256.492432][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 256.492498][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 256.492831][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.493226][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.493630][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.494057][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 256.494487][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.494632][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 256.494883][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 256.495042][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 261.502307][ C0] net_ratelimit: 17032 callbacks suppressed [ 261.502329][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 261.502495][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 261.502792][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 261.502913][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 261.503226][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 261.503653][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 261.504088][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 261.504517][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 261.504980][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 261.505039][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 266.512208][ C0] net_ratelimit: 16589 callbacks suppressed [ 266.512230][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 266.512698][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.512916][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 266.513129][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 266.513326][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 266.513565][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.513735][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 266.513993][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.514459][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.514887][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 271.522221][ C0] net_ratelimit: 16803 callbacks suppressed [ 271.522242][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 271.522695][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 271.522775][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 271.523137][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 271.523190][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 271.523610][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 271.523634][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 271.524107][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 271.524547][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 271.524992][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.532361][ C0] net_ratelimit: 16850 callbacks suppressed [ 276.532382][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.532477][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 276.532836][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 276.533288][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.533742][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 276.534201][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.534680][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 276.534694][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.535099][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 276.535144][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 281.542563][ C0] net_ratelimit: 16687 callbacks suppressed [ 281.542585][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 281.542888][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 281.543041][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 281.543294][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 281.543488][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 281.543717][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 281.543936][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 281.544382][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 281.544826][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 281.545276][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.552448][ C1] net_ratelimit: 17069 callbacks suppressed [ 286.552469][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 286.552495][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.552909][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 286.553363][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.553786][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.554202][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.554612][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 286.554624][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 286.555014][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 286.555066][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.562276][ C0] net_ratelimit: 16424 callbacks suppressed [ 291.562297][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.562813][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.563151][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 291.563282][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.563555][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 291.563748][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 291.563998][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 291.564218][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.564681][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 291.565150][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.342187][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 296.342234][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6701/1:b..l [ 296.342727][ C1] rcu: (detected by 1, t=10502 jiffies, g=19153, q=1372 ncpus=2) [ 296.342748][ C1] task:syz.1.224 state:R running task stack:27768 pid:6701 tgid:6698 ppid:5821 task_flags:0x400140 flags:0x00080002 [ 296.342829][ C1] Call Trace: [ 296.342837][ C1] [ 296.342849][ C1] __schedule+0x10e9/0x6820 [ 296.342881][ C1] ? kasan_save_stack+0x3f/0x50 [ 296.342916][ C1] ? kasan_save_stack+0x30/0x50 [ 296.342948][ C1] ? kasan_record_aux_stack+0xa7/0xc0 [ 296.342976][ C1] ? __call_rcu_common.constprop.0+0xa5/0x9b0 [ 296.343022][ C1] ? __pfx___schedule+0x10/0x10 [ 296.343051][ C1] ? mark_held_locks+0x40/0x70 [ 296.343082][ C1] preempt_schedule_irq+0x50/0x90 [ 296.343110][ C1] irqentry_exit+0x1fe/0x790 [ 296.343142][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 296.343169][ C1] RIP: 0010:unwind_next_frame+0x182/0x2090 [ 296.343203][ C1] Code: f2 83 e2 07 38 d0 7f 08 84 c0 0f 85 24 0a 00 00 48 89 e9 41 0f b6 45 35 48 ba 00 00 00 00 00 fc ff df 48 c1 e9 03 80 3c 11 00 <0f> 85 01 18 00 00 4d 8b 7d 48 3c 01 49 83 df 00 4d 85 ff 0f 84 f0 [ 296.343226][ C1] RSP: 0018:ffffc9000606f560 EFLAGS: 00000246 [ 296.343247][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 1ffff92000c0dec3 [ 296.343262][ C1] RDX: dffffc0000000000 RSI: ffffffff8c1c1f00 RDI: ffffffff8e20f928 [ 296.343278][ C1] RBP: ffffc9000606f618 R08: 000000001260b0fa R09: 0000000000000007 [ 296.343293][ C1] R10: 0000000000000200 R11: 0000000000000000 R12: ffffc9000606f620 [ 296.343305][ C1] R13: ffffc9000606f5d0 R14: ffffc9000606f605 R15: ffff88807a25ca00 [ 296.343335][ C1] ? ksys_unshare+0x438/0xab0 [ 296.343361][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 296.343388][ C1] arch_stack_walk+0x94/0xf0 [ 296.343424][ C1] ? ksys_unshare+0x438/0xab0 [ 296.343450][ C1] stack_trace_save+0x8e/0xc0 [ 296.343473][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 296.343498][ C1] ? __lock_acquire+0x4a5/0x2630 [ 296.343525][ C1] ? __lock_acquire+0x4a5/0x2630 [ 296.343559][ C1] save_stack+0x162/0x1e0 [ 296.343581][ C1] ? __pfx_save_stack+0x10/0x10 [ 296.343601][ C1] ? __free_frozen_pages+0x747/0x1040 [ 296.343629][ C1] ? qlist_free_all+0x47/0xf0 [ 296.343659][ C1] ? kasan_quarantine_reduce+0x1a0/0x1f0 [ 296.343691][ C1] ? __kasan_kmalloc+0x8a/0xb0 [ 296.343721][ C1] ? ref_tracker_alloc+0x190/0x590 [ 296.343754][ C1] ? sk_alloc+0xcf5/0xe80 [ 296.343781][ C1] ? __netlink_create+0x5e/0x2c0 [ 296.343812][ C1] ? __netlink_kernel_create+0xed/0x750 [ 296.343834][ C1] ? xfrm_user_net_init+0xc6/0x190 [ 296.343868][ C1] ? ops_init+0x1e2/0x5f0 [ 296.343897][ C1] ? setup_net+0x118/0x3a0 [ 296.343927][ C1] ? copy_net_ns+0x46f/0x7c0 [ 296.343946][ C1] ? create_new_namespaces+0x3ea/0xac0 [ 296.343980][ C1] ? unshare_nsproxy_namespaces+0xf2/0x220 [ 296.344014][ C1] ? ksys_unshare+0x438/0xab0 [ 296.344035][ C1] ? page_ext_put+0x3e/0xd0 [ 296.344063][ C1] __reset_page_owner+0x84/0x190 [ 296.344088][ C1] __free_frozen_pages+0x747/0x1040 [ 296.344117][ C1] ? __free_slab+0xd0/0x220 [ 296.344151][ C1] qlist_free_all+0x47/0xf0 [ 296.344184][ C1] kasan_quarantine_reduce+0x1a0/0x1f0 [ 296.344220][ C1] __kasan_kmalloc+0x8a/0xb0 [ 296.344255][ C1] ref_tracker_alloc+0x190/0x590 [ 296.344287][ C1] ? trace_kmalloc+0xe3/0x110 [ 296.344309][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 296.344353][ C1] ? lockdep_init_map_type+0x5c/0x250 [ 296.344383][ C1] ? sock_lock_init+0x2cf/0x710 [ 296.344405][ C1] ? sock_lock_init+0x2d5/0x710 [ 296.344432][ C1] sk_alloc+0xcf5/0xe80 [ 296.344463][ C1] __netlink_create+0x5e/0x2c0 [ 296.344497][ C1] __netlink_kernel_create+0xed/0x750 [ 296.344522][ C1] ? _raw_write_unlock+0x28/0x50 [ 296.344553][ C1] ? __pfx___netlink_kernel_create+0x10/0x10 [ 296.344581][ C1] ? proc_create_reg+0xd7/0x170 [ 296.344615][ C1] xfrm_user_net_init+0xc6/0x190 [ 296.344650][ C1] ? __pfx_xfrm_user_net_init+0x10/0x10 [ 296.344686][ C1] ? __pfx_xfrm_netlink_rcv+0x10/0x10 [ 296.344722][ C1] ? __pfx_tls_init_net+0x10/0x10 [ 296.344751][ C1] ? tls_proc_init+0x59/0x70 [ 296.344775][ C1] ? __pfx_xfrm_user_net_init+0x10/0x10 [ 296.344808][ C1] ops_init+0x1e2/0x5f0 [ 296.344842][ C1] setup_net+0x118/0x3a0 [ 296.344875][ C1] ? __pfx_setup_net+0x10/0x10 [ 296.344908][ C1] ? mutex_init_lockdep+0xf1/0x120 [ 296.344942][ C1] copy_net_ns+0x46f/0x7c0 [ 296.344967][ C1] create_new_namespaces+0x3ea/0xac0 [ 296.345008][ C1] unshare_nsproxy_namespaces+0xf2/0x220 [ 296.345046][ C1] ksys_unshare+0x438/0xab0 [ 296.345067][ C1] ? kcov_ioctl+0x16a/0x720 [ 296.345090][ C1] ? kfree+0x1dd/0x6c0 [ 296.345118][ C1] ? __pfx_ksys_unshare+0x10/0x10 [ 296.345141][ C1] ? kcov_ioctl+0x16a/0x720 [ 296.345171][ C1] __x64_sys_unshare+0x31/0x40 [ 296.345193][ C1] do_syscall_64+0x10b/0xf80 [ 296.345221][ C1] ? clear_bhb_loop+0x40/0x90 [ 296.345248][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.345272][ C1] RIP: 0033:0x7f9477f9c819 [ 296.345289][ C1] RSP: 002b:00007f9478ef0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 296.345310][ C1] RAX: ffffffffffffffda RBX: 00007f9478216180 RCX: 00007f9477f9c819 [ 296.345326][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 296.345340][ C1] RBP: 00007f9478032c91 R08: 0000000000000000 R09: 0000000000000000 [ 296.345355][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.345368][ C1] R13: 00007f9478216218 R14: 00007f9478216180 R15: 00007ffea82b2488 [ 296.345398][ C1] [ 296.572360][ C0] net_ratelimit: 14273 callbacks suppressed [ 296.572381][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 296.572854][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.573032][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 296.573358][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 296.573442][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 296.573821][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.573874][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 296.574292][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.574800][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.575280][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 301.582212][ C1] net_ratelimit: 14126 callbacks suppressed [ 301.582233][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 301.582541][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 301.583018][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 301.583477][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 301.583942][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 301.584415][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 301.584908][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 301.584952][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 301.585395][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 301.585625][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.592221][ C0] net_ratelimit: 12573 callbacks suppressed [ 306.592242][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.592726][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.593195][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 306.593664][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.593929][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 306.594132][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 306.594601][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.594825][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 306.595068][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.595250][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 311.602432][ C0] net_ratelimit: 12599 callbacks suppressed [ 311.602453][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.602921][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.603396][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 311.603862][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.604325][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 311.604362][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 311.604779][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 311.604825][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.605208][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 311.605298][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.612305][ C0] net_ratelimit: 12604 callbacks suppressed [ 316.612327][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.612805][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.613307][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.613468][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 316.613781][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 316.613878][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 316.614245][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.614377][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 316.614719][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 316.615188][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.622259][ C1] net_ratelimit: 12603 callbacks suppressed [ 321.622279][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 321.622316][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.622703][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 321.622790][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.623312][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.623781][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 321.624253][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.624718][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 321.625190][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.625655][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.632234][ C1] net_ratelimit: 13526 callbacks suppressed [ 326.632255][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 326.632368][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.632692][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 326.632867][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 326.633115][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 326.633334][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.633802][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 326.634268][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.634733][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.634989][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 331.642292][ C0] net_ratelimit: 13593 callbacks suppressed [ 331.642313][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.642784][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.642895][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 331.643256][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.643312][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 331.643723][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.643733][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 331.644226][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 331.644694][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.645157][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:92:99:45:8f:b7:d5, vlan:0) [ 331.667070][ T31] INFO: task kworker/R-ipv6_:3196 blocked for more than 143 seconds. [ 331.667101][ T31] Not tainted syzkaller #0 [ 331.667113][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 331.667123][ T31] task:kworker/R-ipv6_ state:D stack:29552 pid:3196 tgid:3196 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 331.667188][ T31] Workqueue: ipv6_addrconf addrconf_verify_work [ 331.667224][ T31] Call Trace: [ 331.667232][ T31] [ 331.667245][ T31] __schedule+0x10e9/0x6820 [ 331.667290][ T31] ? __pfx___schedule+0x10/0x10 [ 331.667314][ T31] ? find_held_lock+0x2b/0x80 [ 331.667337][ T31] ? schedule+0x2bf/0x390 [ 331.667366][ T31] schedule+0xdd/0x390 [ 331.667390][ T31] schedule_preempt_disabled+0x13/0x30 [ 331.667416][ T31] __mutex_lock+0xced/0x1b10 [ 331.667445][ T31] ? addrconf_verify_work+0x12/0x30 [ 331.667474][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 331.667504][ T31] ? debug_object_deactivate+0x2e4/0x3b0 [ 331.667546][ T31] ? addrconf_verify_work+0x12/0x30 [ 331.667568][ T31] addrconf_verify_work+0x12/0x30 [ 331.667590][ T31] process_one_work+0xa0e/0x1980 [ 331.667631][ T31] ? __pfx_process_one_work+0x10/0x10 [ 331.667667][ T31] ? __pfx_addrconf_verify_work+0x10/0x10 [ 331.667694][ T31] rescuer_thread+0x905/0x14a0 [ 331.667731][ T31] ? rescuer_thread+0x240/0x14a0 [ 331.667758][ T31] ? rescuer_thread+0x118/0x14a0 [ 331.667786][ T31] ? __pfx_rescuer_thread+0x10/0x10 [ 331.667814][ T31] ? __kthread_parkme+0x18c/0x230 [ 331.667839][ T31] ? kthread+0x13a/0x450 [ 331.667863][ T31] ? __pfx_rescuer_thread+0x10/0x10 [ 331.667888][ T31] kthread+0x370/0x450 [ 331.667912][ T31] ? __pfx_kthread+0x10/0x10 [ 331.667939][ T31] ret_from_fork+0x72b/0xd50 [ 331.667966][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 331.667995][ T31] ? __switch_to+0x800/0x1100 [ 331.668026][ T31] ? __pfx_kthread+0x10/0x10 [ 331.668053][ T31] ret_from_fork_asm+0x1a/0x30 [ 331.668098][ T31] [ 331.668127][ T31] INFO: task kworker/0:3:5823 blocked for more than 143 seconds. [ 331.668142][ T31] Not tainted syzkaller #0 [ 331.668154][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 331.668163][ T31] task:kworker/0:3 state:D stack:24824 pid:5823 tgid:5823 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 331.668223][ T31] Workqueue: events_power_efficient reg_check_chans_work [ 331.668258][ T31] Call Trace: [ 331.668265][ T31] [ 331.668277][ T31] __schedule+0x10e9/0x6820 [ 331.668302][ T31] ? do_raw_spin_unlock+0x145/0x1e0 [ 331.668350][ T31] ? __pfx___schedule+0x10/0x10 [ 331.668373][ T31] ? find_held_lock+0x2b/0x80 [ 331.668395][ T31] ? schedule+0x2bf/0x390 [ 331.668424][ T31] schedule+0xdd/0x390 [ 331.668448][ T31] schedule_preempt_disabled+0x13/0x30 [ 331.668474][ T31] __mutex_lock+0xced/0x1b10 [ 331.668503][ T31] ? reg_check_chans_work+0x91/0x13a0 [ 331.668537][ T31] ? ret_from_fork_asm+0x1a/0x30 [ 331.668569][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 331.668597][ T31] ? stack_trace_save+0x8e/0xc0 [ 331.668620][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 331.668659][ T31] ? reg_check_chans_work+0x91/0x13a0 [ 331.668690][ T31] reg_check_chans_work+0x91/0x13a0 [ 331.668731][ T31] ? __pfx_reg_check_chans_work+0x10/0x10 [ 331.668773][ T31] ? rcu_is_watching+0x12/0xc0 [ 331.668808][ T31] process_one_work+0xa0e/0x1980 [ 331.668848][ T31] ? __pfx_process_one_work+0x10/0x10 [ 331.668884][ T31] ? __pfx_reg_check_chans_work+0x10/0x10 [ 331.668921][ T31] worker_thread+0x5ef/0xe50 [ 331.668957][ T31] ? __pfx_worker_thread+0x10/0x10 [ 331.668984][ T31] ? kthread+0x13a/0x450 [ 331.669007][ T31] ? __pfx_worker_thread+0x10/0x10 [ 331.669033][ T31] kthread+0x370/0x450 [ 331.669057][ T31] ? __pfx_kthread+0x10/0x10 [ 331.669083][ T31] ret_from_fork+0x72b/0xd50 [ 331.669112][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 331.669140][ T31] ? __switch_to+0x800/0x1100 [ 331.669171][ T31] ? __pfx_kthread+0x10/0x10 [ 331.669197][ T31] ret_from_fork_asm+0x1a/0x30 [ 331.669247][ T31] [ 331.669294][ T31] [ 331.669294][ T31] Showing all locks held in the system: [ 331.669307][ T31] 1 lock held by kthreadd/2: [ 331.669321][ T31] 2 locks held by kworker/0:1/10: [ 331.669334][ T31] 3 locks held by kworker/u8:0/12: [ 331.669347][ T31] 3 locks held by kworker/u8:1/13: [ 331.669362][ T31] 1 lock held by khungtaskd/31: [ 331.669373][ T31] #0: ffffffff8e7e5460 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 331.669439][ T31] 4 locks held by kworker/u8:2/36: [ 331.669454][ T31] 3 locks held by kworker/u8:3/48: [ 331.669467][ T31] 3 locks held by kworker/u8:4/57: [ 331.669479][ T31] 3 locks held by kworker/u8:5/79: [ 331.669492][ T31] 4 locks held by kswapd0/85: [ 331.669507][ T31] 3 locks held by kworker/u8:6/473: [ 331.669520][ T31] 3 locks held by kworker/0:2/804: [ 331.669535][ T31] 3 locks held by kworker/u8:7/1011: [ 331.669550][ T31] 3 locks held by kworker/u8:8/1344: [ 331.669573][ T31] 3 locks held by kworker/R-ipv6_/3196: [ 331.669586][ T31] #0: ffff888033875140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 331.669644][ T31] #1: ffffc9000e11fc70 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 331.669704][ T31] #2: ffffffff9062eae0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 [ 331.669758][ T31] 4 locks held by kworker/R-bat_e/3422: [ 331.669771][ T31] 3 locks held by kworker/u8:9/3555: [ 331.669785][ T31] 7 locks held by kworker/u9:1/5146: [ 331.669798][ T31] #0: ffff888075122140 ((wq_completion)hci0){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 331.669855][ T31] #1: ffffc9000f52fd08 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 331.669914][ T31] #2: ffff8880674c4ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x18a/0x470 [ 331.669976][ T31] #3: ffff8880674c40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x141/0xb20 [ 331.670029][ T31] #4: ffffffff908c6180 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x119/0x360 [ 331.670091][ T31] #5: ffff88807a758af8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x95/0x710 [ 331.670150][ T31] #6: ffffffff8e7f0fa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 331.670206][ T31] 2 locks held by klogd/5184: [ 331.670223][ T31] 2 locks held by dhcpcd/5489: [ 331.670235][ T31] 1 lock held by dhcpcd/5490: [ 331.670248][ T31] 2 locks held by crond/5564: [ 331.670260][ T31] 2 locks held by getty/5578: [ 331.670272][ T31] #0: ffff888038ef80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 331.670336][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 331.670397][ T31] 2 locks held by syz-executor/5806: [ 331.670410][ T31] 3 locks held by kworker/0:3/5823: [ 331.670423][ T31] #0: ffff88813feb1d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 331.670483][ T31] #1: ffffc900024cfd08 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 331.670541][ T31] #2: ffffffff9062eae0 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x91/0x13a0 [ 331.670604][ T31] 5 locks held by kworker/u9:4/5829: [ 331.670617][ T31] #0: ffff888075126940 ((wq_completion)hci4){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 331.670675][ T31] #1: ffffc9000208fd08 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 331.670733][ T31] #2: ffff88805a3acea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x18a/0x470 [ 331.670795][ T31] #3: ffff88805a3ac0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x141/0xb20 [ 331.670848][ T31] #4: ffffffff908c6180 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x119/0x360 [ 331.670916][ T31] 3 locks held by kworker/1:6/5944: [ 331.670930][ T31] 1 lock held by syz.4.215/6666: [ 331.670943][ T31] 3 locks held by syz.2.221/6693: [ 331.670955][ T31] 2 locks held by syz.3.222/6690: [ 331.670968][ T31] 1 lock held by syz.1.224/6700: [ 331.670980][ T31] 3 locks held by syz.1.224/6701: [ 331.670993][ T31] 2 locks held by syz.0.225/6704: [ 331.671006][ T31] 4 locks held by kworker/u8:10/6707: [ 331.671018][ T31] [ 331.671024][ T31] ============================================= [ 331.671024][ T31] [ 331.671039][ T31] NMI backtrace for cpu 0 [ 331.671055][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 331.671078][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 331.671089][ T31] Call Trace: [ 331.671096][ T31] [ 331.671103][ T31] dump_stack_lvl+0x100/0x190 [ 331.671127][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 331.671154][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 331.671180][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 331.671220][ T31] sys_info+0x141/0x190 [ 331.671247][ T31] watchdog+0xcb1/0x1030 [ 331.671277][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 331.671302][ T31] ? __pfx_watchdog+0x10/0x10 [ 331.671326][ T31] ? __kthread_parkme+0x18c/0x230 [ 331.671349][ T31] ? kthread+0x13a/0x450 [ 331.671370][ T31] ? __pfx_watchdog+0x10/0x10 [ 331.671391][ T31] kthread+0x370/0x450 [ 331.671413][ T31] ? __pfx_kthread+0x10/0x10 [ 331.671438][ T31] ret_from_fork+0x72b/0xd50 [ 331.671464][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 331.671490][ T31] ? __switch_to+0x800/0x1100 [ 331.671527][ T31] ? __pfx_kthread+0x10/0x10 [ 331.671551][ T31] ret_from_fork_asm+0x1a/0x30 [ 331.671592][ T31] [ 331.671600][ T31] Sending NMI from CPU 0 to CPUs 1: [ 331.671637][ C1] NMI backtrace for cpu 1 [ 331.671650][ C1] CPU: 1 UID: 0 PID: 3422 Comm: kworker/R-bat_e Not tainted syzkaller #0 PREEMPT(full) [ 331.671694][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 331.671718][ C1] Workqueue: bat_events batadv_bla_periodic_work [ 331.671778][ C1] RIP: 0010:__unwind_start+0x2e/0x7f0 [ 331.671832][ C1] Code: 41 57 41 56 49 89 fe 41 55 4d 8d 7e 28 41 54 49 89 d4 ba 60 00 00 00 55 48 89 f5 31 f6 53 48 89 cb 48 83 ec 18 e8 12 6b be 00 <4c> 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f [ 331.671851][ C1] RSP: 0018:ffffc90000a07598 EFLAGS: 00000246 [ 331.671866][ C1] RAX: ffffc90000a075e8 RBX: ffffc90000a07678 RCX: 0000000000000000 [ 331.671879][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90000a07648 [ 331.671891][ C1] RBP: ffff88803453ca00 R08: 0000000000000001 R09: 0000000000000000 [ 331.671903][ C1] R10: ffffc90000a075e8 R11: 0000000000000000 R12: 0000000000000000 [ 331.671915][ C1] R13: ffffc90000a076a8 R14: ffffc90000a075e8 R15: ffffc90000a07610 [ 331.671928][ C1] FS: 0000000000000000(0000) GS:ffff8881243de000(0000) knlGS:0000000000000000 [ 331.671947][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 331.671959][ C1] CR2: 00007f9575600218 CR3: 0000000027a4e000 CR4: 00000000003526f0 [ 331.671979][ C1] Call Trace: [ 331.671985][ C1] [ 331.671993][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 331.672015][ C1] arch_stack_walk+0x73/0xf0 [ 331.672046][ C1] ? kfree_skbmem+0x19a/0x210 [ 331.672068][ C1] stack_trace_save+0x8e/0xc0 [ 331.672086][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 331.672104][ C1] ? __lock_acquire+0x4a5/0x2630 [ 331.672129][ C1] ? __lock_acquire+0x4a5/0x2630 [ 331.672153][ C1] ? __lock_acquire+0x4a5/0x2630 [ 331.672171][ C1] kasan_save_stack+0x30/0x50 [ 331.672214][ C1] kasan_save_track+0x14/0x30 [ 331.672237][ C1] kasan_save_free_info+0x3b/0x70 [ 331.672260][ C1] __kasan_slab_free+0x5f/0x80 [ 331.672277][ C1] kmem_cache_free+0x127/0x6c0 [ 331.672305][ C1] ? skb_release_data+0x6ca/0x8e0 [ 331.672335][ C1] kfree_skbmem+0x19a/0x210 [ 331.672356][ C1] consume_skb+0xd1/0x110 [ 331.672385][ C1] dummy_xmit+0x154/0x1c0 [ 331.672409][ C1] dev_hard_start_xmit+0x128/0x7a0 [ 331.672436][ C1] __dev_queue_xmit+0x1baa/0x4950 [ 331.672461][ C1] ? __local_bh_enable_ip+0xf8/0x120 [ 331.672490][ C1] ? batadv_bla_purge_backbone_gw+0x276/0x520 [ 331.672521][ C1] ? batadv_bla_periodic_work+0x62/0xa00 [ 331.672550][ C1] ? process_one_work+0xa0e/0x1980 [ 331.672576][ C1] ? rescuer_thread+0x905/0x14a0 [ 331.672600][ C1] ? kthread+0x370/0x450 [ 331.672624][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 331.672652][ C1] ? __skb_ext_put+0x102/0x2f0 [ 331.672673][ C1] ? mark_held_locks+0x40/0x70 [ 331.672697][ C1] ? kasan_quarantine_put+0x104/0x240 [ 331.672728][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 331.672760][ C1] ? __skb_ext_put+0x107/0x2f0 [ 331.672784][ C1] br_dev_queue_push_xmit+0x361/0x530 [ 331.672810][ C1] br_nf_dev_queue_xmit+0x73b/0x2730 [ 331.672839][ C1] ? find_held_lock+0x2b/0x80 [ 331.672858][ C1] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 331.672884][ C1] ? br_nf_post_routing+0xafb/0x16a0 [ 331.672913][ C1] br_nf_post_routing+0xcbb/0x16a0 [ 331.672941][ C1] ? __pfx_br_nf_post_routing+0x10/0x10 [ 331.672975][ C1] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 331.673003][ C1] ? lock_acquire+0x1b1/0x370 [ 331.673030][ C1] nf_hook_slow+0xbf/0x220 [ 331.673051][ C1] br_forward_finish+0x261/0x4d0 [ 331.673075][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 331.673101][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 331.673127][ C1] ? nf_hook_slow+0x167/0x220 [ 331.673147][ C1] br_nf_hook_thresh+0x30d/0x420 [ 331.673174][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 331.673199][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 331.673224][ C1] ? lock_acquire+0x1b1/0x370 [ 331.673250][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 331.673271][ C1] ? net_generic+0xea/0x2a0 [ 331.673296][ C1] br_nf_forward_finish+0x693/0xb30 [ 331.673321][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 331.673347][ C1] br_nf_forward_ip.part.0+0x61e/0x820 [ 331.673377][ C1] br_nf_forward+0xfe5/0x19f0 [ 331.673406][ C1] nf_hook_slow+0xbf/0x220 [ 331.673427][ C1] __br_forward+0x2f7/0x970 [ 331.673449][ C1] ? __pfx___br_forward+0x10/0x10 [ 331.673471][ C1] ? __asan_memcpy+0x3c/0x60 [ 331.673500][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 331.673523][ C1] ? __skb_clone+0x570/0x760 [ 331.673551][ C1] maybe_deliver+0xf0/0x180 [ 331.673575][ C1] br_flood+0x193/0x650 [ 331.673601][ C1] br_handle_frame_finish+0xff4/0x1f60 [ 331.673630][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 331.673659][ C1] ? __local_bh_enable_ip+0x9e/0x120 [ 331.673691][ C1] ? ip6t_do_table+0xc1d/0x1c90 [ 331.673712][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 331.673732][ C1] ? nf_hook_slow+0x167/0x220 [ 331.673753][ C1] br_nf_hook_thresh+0x30d/0x420 [ 331.673779][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 331.673809][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 331.673838][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 331.673865][ C1] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 331.673894][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 331.673918][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 331.673943][ C1] br_nf_pre_routing_finish_ipv6+0x659/0xdd0 [ 331.673977][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 331.674006][ C1] br_nf_pre_routing_ipv6+0x39c/0x8b0 [ 331.674034][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 331.674062][ C1] ? lock_acquire+0x1b1/0x370 [ 331.674088][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 331.674117][ C1] ? net_generic+0xea/0x2a0 [ 331.674144][ C1] br_nf_pre_routing+0x90f/0x1560 [ 331.674174][ C1] br_handle_frame+0xcdd/0x1520 [ 331.674203][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 331.674230][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 331.674260][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 331.674286][ C1] __netif_receive_skb_core.constprop.0+0x6c5/0x3530 [ 331.674318][ C1] ? kmem_cache_free+0x127/0x6c0 [ 331.674345][ C1] ? skb_release_data+0x6ca/0x8e0 [ 331.674373][ C1] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 331.674406][ C1] ? kfree_skbmem+0x19f/0x210 [ 331.674428][ C1] ? sk_skb_reason_drop+0x114/0x1b0 [ 331.674458][ C1] ? ip6_mc_input+0x51a/0xf50 [ 331.674489][ C1] ? __lock_acquire+0x4a5/0x2630 [ 331.674517][ C1] ? process_backlog+0x32a/0x1580 [ 331.674540][ C1] __netif_receive_skb_one_core+0xb0/0x1e0 [ 331.674566][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 331.674592][ C1] ? lock_acquire+0x1b1/0x370 [ 331.674617][ C1] ? process_backlog+0x32a/0x1580 [ 331.674642][ C1] ? process_backlog+0x32a/0x1580 [ 331.674665][ C1] __netif_receive_skb+0x1f/0x120 [ 331.674690][ C1] process_backlog+0x37a/0x1580 [ 331.674718][ C1] __napi_poll.constprop.0+0xaf/0x450 [ 331.674745][ C1] net_rx_action+0xa40/0xf20 [ 331.674773][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 331.674797][ C1] ? __print_lock_name+0x60/0x80 [ 331.674816][ C1] ? try_to_wake_up+0x153/0x1900 [ 331.674835][ C1] ? try_to_wake_up+0x153/0x1900 [ 331.674854][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 331.674878][ C1] ? sched_clock+0x38/0x60 [ 331.674899][ C1] ? sched_clock_cpu+0x6c/0x570 [ 331.674930][ C1] ? mark_held_locks+0x40/0x70 [ 331.674956][ C1] handle_softirqs+0x1ea/0xa00 [ 331.674994][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 331.675022][ C1] ? __hrtimer_rearm_deferred+0x9b/0x740 [ 331.675056][ C1] ? batadv_bla_purge_backbone_gw+0x276/0x520 [ 331.675089][ C1] do_softirq+0xac/0xe0 [ 331.675116][ C1] [ 331.675123][ C1] [ 331.675130][ C1] __local_bh_enable_ip+0xf8/0x120 [ 331.675159][ C1] batadv_bla_purge_backbone_gw+0x276/0x520 [ 331.675194][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 331.675217][ C1] ? __pfx_batadv_bla_purge_backbone_gw+0x10/0x10 [ 331.675252][ C1] batadv_bla_periodic_work+0x62/0xa00 [ 331.675285][ C1] ? rcu_is_watching+0x12/0xc0 [ 331.675318][ C1] process_one_work+0xa0e/0x1980 [ 331.675350][ C1] ? __pfx_process_one_work+0x10/0x10 [ 331.675381][ C1] ? __pfx_batadv_bla_periodic_work+0x10/0x10 [ 331.675415][ C1] rescuer_thread+0x905/0x14a0 [ 331.675445][ C1] ? rescuer_thread+0x240/0x14a0 [ 331.675471][ C1] ? rescuer_thread+0x118/0x14a0 [ 331.675496][ C1] ? __pfx_rescuer_thread+0x10/0x10 [ 331.675523][ C1] ? __kthread_parkme+0x18c/0x230 [ 331.675544][ C1] ? kthread+0x13a/0x450 [ 331.675566][ C1] ? __pfx_rescuer_thread+0x10/0x10 [ 331.675591][ C1] kthread+0x370/0x450 [ 331.675613][ C1] ? __pfx_kthread+0x10/0x10 [ 331.675637][ C1] ret_from_fork+0x72b/0xd50 [ 331.675661][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 331.675688][ C1] ? __switch_to+0x800/0x1100 [ 331.675718][ C1] ? __pfx_kthread+0x10/0x10 [ 331.675742][ C1] ret_from_fork_asm+0x1a/0x30 [ 331.675778][ C1] [ 331.686052][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 331.686071][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 331.686097][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 331.686109][ T31] Call Trace: [ 331.686117][ T31] [ 331.686125][ T31] dump_stack_lvl+0x100/0x190 [ 331.686155][ T31] vpanic+0x552/0x970 [ 331.686175][ T31] ? __pfx_vpanic+0x10/0x10 [ 331.686196][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 331.686236][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 331.686272][ T31] panic+0xd1/0xe0 [ 331.686291][ T31] ? __pfx_panic+0x10/0x10 [ 331.686314][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 331.686346][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 331.686378][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 331.686409][ T31] ? watchdog.cold+0x1ec/0x234 [ 331.686432][ T31] ? watchdog+0xcc1/0x1030 [ 331.686458][ T31] watchdog.cold+0x1fd/0x234 [ 331.686486][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 331.686511][ T31] ? __pfx_watchdog+0x10/0x10 [ 331.686536][ T31] ? __kthread_parkme+0x18c/0x230 [ 331.686560][ T31] ? kthread+0x13a/0x450 [ 331.686582][ T31] ? __pfx_watchdog+0x10/0x10 [ 331.686604][ T31] kthread+0x370/0x450 [ 331.686626][ T31] ? __pfx_kthread+0x10/0x10 [ 331.686652][ T31] ret_from_fork+0x72b/0xd50 [ 331.686679][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 331.686706][ T31] ? __switch_to+0x800/0x1100 [ 331.686736][ T31] ? __pfx_kthread+0x10/0x10 [ 331.686761][ T31] ret_from_fork_asm+0x1a/0x30 [ 331.686802][ T31] [ 331.687123][ T31] Kernel Offset: disabled