last executing test programs: 1m56.390708174s ago: executing program 1 (id=387): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) pwritev(r0, &(0x7f0000000500)=[{0x0}], 0x1, 0x5, 0xfffffff9) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x7ffe, 0xffff7fff, 0x9, 0x1000000, 0x2, 0xfa15, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000015c0)={0x0}, 0x1, 0x0, 0x0, 0x5}, 0x24000081) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000010401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee0800fa0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf639d1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x40094) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) recvmmsg$unix(r4, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) r6 = syz_open_dev$dri(&(0x7f0000001600), 0x3, 0x420480) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001940), r4) sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f0000001b40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001b00)={&(0x7f0000001c80)=ANY=[@ANYRES8=r1, @ANYRES16=r8, @ANYBLOB="02002abd7000fedbdf2515000000e40001801500010069623a76657468305f6d6163767461700000000044000400200001000a004e22000007fffe80000000000000000000000000003b08000000200002000a004e22fffffff3fe80000000000000000000000000000d8f8a00000f00010069623a67656e6576653000000f00010069623a697036746e6c3000000d0001007564703a73797a32000000000d0001007564703a73797a32000000004400028008000300070000000800020000800000080003008000000008000400060000000800040000100000080003000700000008000200000000000800020005000000f2e6db9b9d49337646fefae95a033a293f42a1723d9f95b68bebeb5a4075fe94d1f21f5647a3db9bd7455af5aec3b205c0d8e3f70fd38a7a4c"], 0xf8}, 0x1, 0x0, 0x0, 0x24044000}, 0x4000801) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r9, 0x0}) ioctl$SNDRV_TIMER_IOCTL_CREATE(r3, 0xc02054a5, &(0x7f00000012c0)={0x5c, r4, 'id1\x00'}) sendmmsg$inet6(r11, &(0x7f0000000180)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x5, @local, 0x1}, 0x1c, &(0x7f0000001980)=[{&(0x7f0000001380)="f04067134c7d855b1aad2052fa508e9f58e950ebb6741ae85167a8e7dfc7cf028681324945e48df3ad0d5ea6be41c58e3d24ae4d65edfd654823235cc8821e56f349001e4ec900c380cad5b0551af52fdcae44300bf0fe2698c65cc75a044fa91b92ace17a1a5bf0ecbbb58b00803fb4057e2260c10e03e92dac4b301d5e1608f1d6ea1a050cef6f171e3e0555e3841248f14a3135096dae4b76236f69c29ef310db088722781c18c2515ae34746c6ea0809e834d68f07164c733596c694fcf3", 0xc0}, {&(0x7f0000001480)="df25701fabd9d3a162fa2b53d1fe23167c5cbbb1405d88aa090534533cf52d49185a0660426adfa016811c6b415b672e19d95cd982465073727eb8aa85ed9b11d05cf27a67919103315519e6d7f1aa7a02edc36edde8ce9af93b95be6f74de19905095e005a83147394e43e0db3247e2f2dfeb2c37d8f21ce370ee373184856848af23201d5f198fb56499da4585175fc4c3b17748203eb1bae042f734f9fb6821baa5e5ea52cb7e48cb4c102a404a487df377fe7f52b504ea5c3b90a43bc38bbba0c075ca7b8f2c8e51e764d87d", 0xce}, {&(0x7f0000001580)="78be9b9e17536c4c0409cba74bde2aee7c5686e10eaef28ef7773c4c30a1a9eba476996b37cd38788bb245c54667f40406266f7845822cf8154810f012", 0x3d}, {&(0x7f0000001a00)="695852660395274fdbfb4ad39cea7683c6d299e07b605fddf2e2f02ff2f04c7f2b653810e572b4948d7b9a7a2438408c85901fbd4283ef036df800869c22302ca6976c112a8e6f041d4a7717e10260c1c6a8076f6f5dc4ce5617c9c2cfb75bc930f713bff520206af7a471a34e1a940a6702e32ed1a3460adb4b09a0a5a0a735745aca86ec2aac42490c91f64190ab0b6fe24f1e4ae71f96d58d3652fbb35d0f9b4f97ac72948e61806aac8db15cc22c21c9cec8ea11f1a99e26bdee9eebf5106f3d57217d72630f79811c68ed03c166fa38a756900e35de7a7d1ea76b764c93462057dedd832306ff66", 0xea}, {&(0x7f0000001700)="5838f8ca664a4468c7b6120a109d2591b24a562c5102c6fc17847699d8b31add0bcb776e7ba143b134cb30bc8a47c0f60c533921b9e374e80383d8fa0aa44289d6389245166e42f91948449ca4c80eafbbfed48978a7598c22a85f2218d2d327ff1c5c7f77968f27a6eb2bb55da700c2ea079414039d34b988b8ca2f9882a963e538773471527aed0ff97c437aebc117c1984db5ecf07f3fa2ff398543dc9ba4d6f5c01c4b4b7500ee1870b126f560913acc41c9de572d37db37b476db3667993502a0f07681df8e6573798eb8429eaa95ccb064534e543132c014c9bb85d77e54508eebb4c36e8142351586", 0xec}, {&(0x7f0000001800)="19a7e4045e2f32a3beb2c9dbc365cfea25b34199a47061a2275a769a057fb93b2ad7b474896ea10ecf24687687d58b2d511f0331bb04ce56db4390431137f00687290fd4", 0x44}, {&(0x7f0000001dc0)="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", 0x15c}, {&(0x7f00000023c0)="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", 0x1000}], 0x8, &(0x7f00000054c0)=ANY=[@ANYBLOB="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"], 0x1100}}], 0x1, 0x4000084) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={r10, 0x2, 0x0, 0x0, 0x0, [0x0], [0x0, 0x20005, 0x0, 0x543], [0x1001, 0x6, 0x6, 0x4], [0xfffffffffffffffe, 0x0, 0x0, 0x400]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000080)={r12}) 1m54.729698507s ago: executing program 0 (id=393): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/tcp\x00') readv(r1, &(0x7f00000014c0)=[{&(0x7f0000000000)=""/22, 0x16}], 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0xe, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r5, &(0x7f0000000000)={0x1f, @none}, 0x8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r9, r8, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000000240)=ANY=[], 0x0) sendto$inet6(r6, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a9c000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2e00b9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 1m53.392399669s ago: executing program 2 (id=395): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x0, 0x0}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x200, 0x0) socket(0x10, 0x803, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', 0x0}) semget$private(0x0, 0x207, 0x0) socket(0x11, 0x0, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x40001) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x53, 0x8001, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa0f, 0xffffffff}, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f00000000c0)=0x2) close(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socket$xdp(0x2c, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) chmod(&(0x7f0000000300)='./file0\x00', 0x2d9) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x4100, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'dt2815\x00', [0x4f27, 0x5, 0x5, 0x47, 0x2, 0xcc7, 0xfff, 0x7, 0x5, 0x3fd, 0x7f, 0x15fe, 0x1, 0x0, 0x3, 0xe1cb, 0xff7fffc0, 0x0, 0x2f, 0x295, 0x80000089, 0xfffffffc, 0x7, 0x6, 0xffffeadb, 0x3, 0x1003c, 0x5, 0x2004, 0x8000000, 0x5]}) 1m53.239625162s ago: executing program 4 (id=396): r0 = socket(0x400000000010, 0x3, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000006c0)={0x84, &(0x7f00000002c0)={0x0, 0x8, 0x16, "301112ce3da56b84bedeba8ea36c331c3db57683aa09"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x40, 0x7, 0x2, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newchain={0x814, 0x64, 0x20, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xa, 0x5}, {0x2, 0x8}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x7dc, 0x2, [@TCA_CGROUP_EMATCHES={0x7d8, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x7c4, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x7ac, 0x2, 0x0, 0x0, {{0x222, 0x0, 0x7}, "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"}}, @TCF_EM_IPT={0x14, 0x3, 0x0, 0x0, {{0xc, 0x9, 0x20}, [@TCA_EM_IPT_HOOK={0x8}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x77c}]}, 0x814}, 0x1, 0x0, 0x0, 0x20041090}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x30, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32, @ANYBLOB="1e", @ANYBLOB, @ANYRES32, @ANYRES64], 0x20) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x15, 0x10, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0x1, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x47}, 0x94) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001d80), 0x426002, 0x0) getresuid(&(0x7f0000002f80), &(0x7f0000002fc0), &(0x7f0000003000)) 1m52.800672673s ago: executing program 1 (id=397): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000000)={@local, @dev}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) shmget(0x1, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000008c0)={0x84, @rand_addr=0x64010102, 0x4e22, 0x1, 'lblcr\x00', 0x0, 0x10001, 0x6f}, 0x2c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x80000000000000a, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb7}}}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000204e0000", 0x58}], 0x1) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000005db40816c4f4c13154000000010000000900010073797a300000fbd140000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000038000000160a0101000b000000000000010000000900020073797a30000000000900030073797a3000000000040003800800074004000000140000001000010000000000000000000a00000a900306627c74bcee4465f60f37d38671377ce075ef7c09f5524605cc7a76db73a51235e63f"], 0xc0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8c4) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) add_key$keyring(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xfffffffffffffffb) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000480)=ANY=[], 0x8) 1m52.649923899s ago: executing program 0 (id=398): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xff) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000200)={0x0}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r4, 0x0, 0x0, 0x182, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000400)={0x0, 0x0}) r6 = getpgrp(0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r8 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x1, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) r10 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r10, 0xc0185500, &(0x7f00000001c0)={0x82, 0x0, 0x20, 0x0, 0x0, 0xfffffe00, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x3e, 0x229, 0x0, 0xfffffffd, {0xa}}, 0x14}, 0x1, 0x6000000}, 0x0) setpriority(0x2, r5, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000740)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f00000001c0)={r3}) 1m51.587506825s ago: executing program 1 (id=399): r0 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0xa, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder0\x00', 0x6, 0x0) r3 = fsopen(&(0x7f00000001c0)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000b00)='\xbf%#\x00', 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000200000000000000000000850000002c000000180100002020692500000000002020207bb56e6d25a2e51c563a9f9ca54a67341af8ff00000000bfa100000000000007010000f8ffffffb7020000d74d47e9b70300000400000085000000060000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x200, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000002e00090027bd7000000000002abfee4f18000000"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0x3e}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r10}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r11 = dup3(r2, r1, 0x0) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r12, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r12, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000440)="42f7a8"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001dc0)={0x100001, 0x3000f2}, 0x20) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 1m51.322901718s ago: executing program 0 (id=400): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xff) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000200)={0x0}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r4, 0x0, 0x0, 0x182, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000400)={0x0, 0x0}) r6 = getpgrp(0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r8 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x1, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) r10 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r10, 0xc0185500, &(0x7f00000001c0)={0x82, 0x0, 0x20, 0x0, 0x0, 0xfffffe00, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x3e, 0x229, 0x0, 0xfffffffd, {0xa}}, 0x14}, 0x1, 0x6000000}, 0x0) setpriority(0x2, r5, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000740)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f00000001c0)={r3}) 1m51.207879175s ago: executing program 2 (id=401): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000300)={0x2, 0x2, 0x0, 0x9, 0x5, 0x0, 0x1, 0x34000, [@sadb_address={0x3, 0x17, 0x3c, 0x30, 0x0, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x28}}, 0x0) 1m51.180165295s ago: executing program 3 (id=402): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r1, 0x6, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @empty, 0x400}, 0x1c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000001b00)={0x0, 0x34325842, 0x1, @discrete={0x1, 0x100}}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) ioctl$AUTOFS_IOC_FAIL(r2, 0x9361, 0xa90b) bpf$PROG_LOAD(0x5, &(0x7f0000019240)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xe) ioctl$TIOCVHANGUP(r6, 0x5437, 0x200000000000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) 1m51.063272381s ago: executing program 2 (id=403): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x8000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r4, &(0x7f0000000080)={0x11, 0x805, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) getpid() syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 1m49.327951008s ago: executing program 2 (id=404): mkdir(&(0x7f0000000140)='./control\x00', 0x8) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xe40009e0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRESDEC=r2], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x34}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0xfe1f, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r6 = open_tree(r5, &(0x7f0000000600)='\x00', 0x1901) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x8001}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffffc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x20000852}, 0x0) close(0x3) move_mount(r6, 0x0, r7, 0x0, 0x46) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$eventfd(r9, &(0x7f0000000100), 0xfffffd79) 1m49.238260315s ago: executing program 4 (id=405): creat(&(0x7f0000000040)='./file0\x00', 0x80) eventfd(0x401) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x80000000, 0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) migrate_pages(0x0, 0x9, &(0x7f0000000340)=0x3, &(0x7f0000000380)=0x102) ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0x2) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x10, &(0x7f0000001540)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000740)=@mangle={'mangle\x00', 0x2, 0x6, 0x678, 0x0, 0x248, 0x248, 0x248, 0x168, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0xffffffff, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x120, 0x168, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@multiport={{0x50}, {0xff, 0x0, [0x4e22, 0x4e22, 0xffff, 0x0, 0x0, 0x2, 0x4e20, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@empty, 0xa, 0x30, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x1}, {0x2, 0x0, 0x5}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xffffff00], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x2f, 0x9}, 0x0, 0x168, 0x1a0, 0x48000000, {}, [@common=@ah={{0x30}, {[0x4d2, 0x4d3], 0xa000000, 0x4, 0x3}}, @common=@srh1={{0x90}, {0xc, 0x3, 0x4, 0x8, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, @private0, [0xff, 0xff000000, 0x0, 0xff000000], [0xffffffff, 0xffffff00, 0xff, 0xff], [0xff000000, 0x0, 0x0, 0x80], 0x2c24, 0x400}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0x0, 0x4, 0x2}, 0xfffffffa}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@loopback, 0x0, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d8) openat$sequencer(0xffffffffffffff9c, 0x0, 0x60001, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x8, 0x2000, @fd, 0x4, 0x6, 0xe, 0x14, 0x0, {0x1}}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') write$binfmt_format(r3, &(0x7f0000000300)='1\x00', 0x2) 1m49.220040148s ago: executing program 3 (id=406): execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x85) r0 = io_uring_setup(0x142c, &(0x7f0000000100)={0x0, 0x2fe, 0x2}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xb460}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r4, r3, 0x25, 0x0, @val=@netkit={@void, @value=r4}}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xdb0b, 0x0, 0x5}}}}}}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x5e8) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='ns\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x60, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xf77, @mcast1, 0x7}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x60}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="0100feffffff0000010017000000400006803c00040006b5608b3ecd296800000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}]}, 0x54}}, 0x20000080) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m49.179172121s ago: executing program 0 (id=407): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random="1c00"}) socket$inet6_sctp(0xa, 0x801, 0x84) syz_io_uring_setup(0x88d, &(0x7f0000000380)={0x0, 0x527, 0x1, 0x3, 0x236}, &(0x7f0000000000)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000800000000000000000091"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) gettid() 1m48.855044116s ago: executing program 3 (id=408): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000200), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3b}}, @in6={0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00', 0x10}], 0x2c) sendto$inet6(r3, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) poll(0x0, 0x0, 0x28fb436e) writev(r3, &(0x7f0000000100), 0x0) write$UHID_SET_REPORT_REPLY(r3, &(0x7f00000007c0)=ANY=[], 0xffe0) munlockall() pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$AUDIT_SET(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4004) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f0000000000)) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000001080)={0x8, 0xfffffffc}) 1m48.154834754s ago: executing program 4 (id=409): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x80, 0x1, 0x28}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x50) socket$nl_crypto(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0xc, &(0x7f0000001180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000060000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b200000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x306) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'pim6reg1\x00', @multicast}) close(0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x10, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000006909000000000000550901000000000095000000000000007617040007000000bf91000000000000b7020000000000008500000084000000b70000000000"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x41}, 0x94) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2020600}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x2, 0x3, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0xf4, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x24040080}, 0x4040805) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f00000000c0)=0x400) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000480)=0xffffffffffffffff) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, &(0x7f00000001c0)) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000640)="8285bd", 0x3}], 0x1}, 0x400c9c1) 1m47.92396951s ago: executing program 1 (id=410): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xff) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000200)={0x0}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r4, 0x0, 0x0, 0x182, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000400)={0x0, 0x0}) r6 = getpgrp(0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r8 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x1, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) r10 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r10, 0xc0185500, &(0x7f00000001c0)={0x82, 0x0, 0x20, 0x0, 0x0, 0xfffffe00, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x3e, 0x229, 0x0, 0xfffffffd, {0xa}}, 0x14}, 0x1, 0x6000000}, 0x0) setpriority(0x2, r5, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000740)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f00000001c0)={r3}) 1m47.923681317s ago: executing program 3 (id=411): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x30000000}) (fail_nth: 4) 1m47.771843884s ago: executing program 4 (id=412): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000002100), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000000000000f37538e486dd630080fc5c082c"], 0xfdef) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xffbf) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$netlink(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) shutdown(r2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000100)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3d}}], 0x10) 1m46.775375724s ago: executing program 2 (id=413): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002400)=""/102400, 0x19000) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/13, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mmap(&(0x7f00002ee000/0x1000)=nil, 0x1000, 0x200000c, 0x10, 0xffffffffffffffff, 0x3b0b9000) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ptrace$PTRACE_SETSIGMASK(0x420b, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={[0x9]}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x27, &(0x7f0000000000)=0x80000000, 0x4) listen(r3, 0x3) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)=ANY=[@ANYBLOB="3801000010000100feffffff00010000e0000002000000000000000000000000fc010000001300000000000000000001000107144e230005000000002f000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff4a000000000000001f00000000000000feffffffffffffff02000000fcffffff0000000029bd700004350000020005002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) 1m46.605620088s ago: executing program 1 (id=414): r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000006, 0x40010, r0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000000)=0x483, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r3, 0x107, 0xe, 0x0, &(0x7f0000000140)) mount(&(0x7f0000000040)=@filename='./cgroup\x00', &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='hfs\x00', 0x2000010, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r6, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0d, 0xffffffff}, 0x0) r7 = socket$inet(0x2, 0x3, 0x9) pipe2$watch_queue(&(0x7f0000000480), 0x80) shutdown(r7, 0x0) recvmmsg(r7, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r8, 0x6, 0x0, 0x0, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 1m46.511892847s ago: executing program 3 (id=415): r0 = socket(0x400000000010, 0x3, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000006c0)={0x84, &(0x7f00000002c0)={0x0, 0x8, 0x16, "301112ce3da56b84bedeba8ea36c331c3db57683aa09"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x40, 0x7, 0x2, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newchain={0x814, 0x64, 0x20, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xa, 0x5}, {0x2, 0x8}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x7dc, 0x2, [@TCA_CGROUP_EMATCHES={0x7d8, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x7c4, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x7ac, 0x2, 0x0, 0x0, {{0x222, 0x0, 0x7}, "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"}}, @TCF_EM_IPT={0x14, 0x3, 0x0, 0x0, {{0xc, 0x9, 0x20}, [@TCA_EM_IPT_HOOK={0x8}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x77c}]}, 0x814}, 0x1, 0x0, 0x0, 0x20041090}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x30, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32, @ANYBLOB="1e", @ANYBLOB, @ANYRES32, @ANYRES64], 0x20) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x15, 0x10, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0x1, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x47}, 0x94) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001d80), 0x426002, 0x0) getresuid(&(0x7f0000002f80), &(0x7f0000002fc0), &(0x7f0000003000)) 1m46.094304913s ago: executing program 0 (id=416): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x7, 0x40, 0x4, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0xf22}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{0x0}], 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x5c0a, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd27, 0xa000, {0x0, 0x0, 0x0, r7, {0x8, 0x7}, {}, {0xfff3, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x0, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x0, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x0, 0x3, 0xca}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x0, 0x3, 0x10}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 1m45.027521991s ago: executing program 2 (id=417): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r1, 0x6, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @empty, 0x400}, 0x1c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000001b00)={0x0, 0x34325842, 0x1, @discrete={0x1, 0x100}}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) ioctl$AUTOFS_IOC_FAIL(r2, 0x9361, 0xa90b) bpf$PROG_LOAD(0x5, &(0x7f0000019240)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xe) ioctl$TIOCVHANGUP(r6, 0x5437, 0x200000000000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) 1m44.931319653s ago: executing program 4 (id=418): execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x85) r0 = io_uring_setup(0x142c, &(0x7f0000000100)={0x0, 0x2fe, 0x2}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xb460}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r4, r3, 0x25, 0x0, @val=@netkit={@void, @value=r4}}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xdb0b, 0x0, 0x5}}}}}}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x5e8) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='ns\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x60, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xf77, @mcast1, 0x7}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x60}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="0100feffffff0000010017000000400006803c00040006b5608b3ecd296800000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}]}, 0x54}}, 0x20000080) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m44.926822617s ago: executing program 4 (id=419): r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x488, 0x0, 0x1a0, 0x98, 0x298, 0x1a0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1, 0xff000000, 0xff000000, 'veth0_macvtap\x00', 'veth1\x00', {0xff}, {0xff}, 0x6, 0x2, 0x3f}, 0x7a00, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x1, 0x1}}}, {{@ip={@local, @local, 0x0, 0xff, 'veth0_to_batadv\x00', 'nicvf0\x00', {}, {}, 0x8}, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@icmp={{0x28}, {0x5, "ec4a", 0x1}}, @common=@set={{0x40}, {{0x2, [0x0, 0x3, 0x2, 0x7, 0x6, 0x2], 0x5, 0x6}}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local, 0x4e22}}}, {{@uncond, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x7ff, 0x6, @ipv4=@empty, 0x4e21}}}, {{@ip={@remote, @local, 0x0, 0x0, 'syzkaller0\x00', 'wg0\x00', {}, {}, 0x89, 0x0, 0x35}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0xb3, 0x1}}}, {{@ip={@local, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x18}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0xf, "cc00", 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0xa5, 0x57}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8) (async) r2 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0xffffffffcb238b48, 0x60a002) ioctl$SNDRV_PCM_IOCTL_XRUN(r2, 0x4148, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'macsec0\x00', 0x200}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) 1m44.314570508s ago: executing program 3 (id=420): socket$xdp(0x2c, 0x3, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x120) r1 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r2 = fanotify_init(0xf00, 0x1) fanotify_mark(r2, 0x105, 0x40009975, r1, 0x0) syz_open_dev$sndctrl(0x0, 0x9, 0x400000) eventfd(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xa, &(0x7f0000000140)={0x7, 0x1}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0xfffffd6d) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000010ff38330cc58c6eb7d2c85de1008105", @ANYRES32=r3, @ANYRES16=r0, @ANYRES64=r4], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) sendto$packet(r3, &(0x7f0000000240)="3f6dc38a8d4e715114c3888479ec", 0xe, 0x8040, &(0x7f0000000180)={0x11, 0x1a, r6, 0x1, 0xa2}, 0x14) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) 1m43.813973461s ago: executing program 1 (id=421): r0 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe, 0x0, &(0x7f0000000000)="619ff1e3c70400d5721ff59fe864", 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syslog(0x4, &(0x7f0000000080)=""/55, 0x37) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000540)={0x0, [[0xc0000, 0x0, 0x4, 0x2], [0xffdfff7b, 0x0, 0xfffffffe, 0xfffffffc, 0x0, 0x0, 0x3be6], [0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{}, {0x0, 0xffffffff, 0x0, 0x1}, {}, {0x8}, {}, {0x0, 0x400000}, {0x0, 0x3}, {}, {0x0, 0x8000}], '\x00', 0x3}) 1m43.527411439s ago: executing program 0 (id=422): r0 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0xa, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder0\x00', 0x6, 0x0) r3 = fsopen(&(0x7f00000001c0)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000b00)='\xbf%#\x00', 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000200000000000000000000850000002c000000180100002020692500000000002020207bb56e6d25a2e51c563a9f9ca54a67341af8ff00000000bfa100000000000007010000f8ffffffb7020000d74d47e9b70300000400000085000000060000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x200, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000002e00090027bd7000000000002abfee4f18000000"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0x3e}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r10}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r11 = dup3(r2, r1, 0x0) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r12, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r12, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000440)="42f7a8"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 0s ago: executing program 32 (id=422): r0 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0xa, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder0\x00', 0x6, 0x0) r3 = fsopen(&(0x7f00000001c0)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000b00)='\xbf%#\x00', 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000200000000000000000000850000002c000000180100002020692500000000002020207bb56e6d25a2e51c563a9f9ca54a67341af8ff00000000bfa100000000000007010000f8ffffffb7020000d74d47e9b70300000400000085000000060000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x200, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000002e00090027bd7000000000002abfee4f18000000"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0x3e}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r10}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r11 = dup3(r2, r1, 0x0) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r12, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r12, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000440)="42f7a8"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): 291][ T5936] usb 2-1: config 1 has no interface number 1 [ 114.370095][ T5936] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 114.401470][ T5936] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 114.432891][ T5936] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 114.442281][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.766380][ T30] audit: type=1400 audit(1769071220.680:269): avc: denied { getopt } for pid=6467 comm="syz.2.146" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 114.816789][ T5936] usb 2-1: Product: syz [ 114.816847][ T5945] IPVS: starting estimator thread 0... [ 114.848910][ T6464] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 114.880474][ T5936] usb 2-1: Manufacturer: syz [ 115.018868][ T5936] usb 2-1: SerialNumber: syz [ 115.092237][ T6466] IPVS: using max 55 ests per chain, 132000 per kthread [ 115.462934][ T30] audit: type=1400 audit(1769071221.420:270): avc: denied { setopt } for pid=6473 comm="syz.0.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 115.485869][ T6474] FAULT_INJECTION: forcing a failure. [ 115.485869][ T6474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.532171][ T6474] CPU: 1 UID: 0 PID: 6474 Comm: syz.0.148 Not tainted syzkaller #0 PREEMPT(full) [ 115.532196][ T6474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 115.532206][ T6474] Call Trace: [ 115.532212][ T6474] [ 115.532219][ T6474] dump_stack_lvl+0x100/0x190 [ 115.532247][ T6474] should_fail_ex.cold+0x5/0xa [ 115.532267][ T6474] _copy_from_user+0x2e/0xd0 [ 115.532297][ T6474] do_mq_notify+0x903/0x1110 [ 115.532321][ T6474] ? find_held_lock+0x2b/0x80 [ 115.532349][ T6474] ? __might_fault+0xc5/0x140 [ 115.532369][ T6474] ? __pfx_do_mq_notify+0x10/0x10 [ 115.532399][ T6474] __x64_sys_mq_notify+0x100/0x170 [ 115.532425][ T6474] ? __pfx___x64_sys_mq_notify+0x10/0x10 [ 115.532458][ T6474] ? rcu_is_watching+0x12/0xc0 [ 115.532481][ T6474] do_syscall_64+0xc9/0xf80 [ 115.532502][ T6474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.532520][ T6474] RIP: 0033:0x7f34c719acb9 [ 115.532534][ T6474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.532548][ T6474] RSP: 002b:00007f34c7f9c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f4 [ 115.532565][ T6474] RAX: ffffffffffffffda RBX: 00007f34c7415fa0 RCX: 00007f34c719acb9 [ 115.532576][ T6474] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffffff [ 115.532585][ T6474] RBP: 00007f34c7f9c090 R08: 0000000000000000 R09: 0000000000000000 [ 115.532595][ T6474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.532604][ T6474] R13: 00007f34c7416038 R14: 00007f34c7415fa0 R15: 00007ffc36597ff8 [ 115.532626][ T6474] [ 115.772216][ T5897] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 115.875985][ T6479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.150'. [ 115.892218][ T6479] netlink: 16 bytes leftover after parsing attributes in process `syz.4.150'. [ 115.906788][ T30] audit: type=1400 audit(1769071221.860:271): avc: denied { bind } for pid=6475 comm="syz.3.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 115.907467][ T6479] netlink: 16 bytes leftover after parsing attributes in process `syz.4.150'. [ 115.939361][ T6481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.151'. [ 115.948435][ T6481] netlink: 16 bytes leftover after parsing attributes in process `syz.0.151'. [ 115.983809][ T5897] usb 3-1: config 0 has no interfaces? [ 115.989376][ T5897] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 115.998575][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.015761][ T5897] usb 3-1: config 0 descriptor?? [ 116.060158][ T6487] misc userio: Invalid payload size [ 116.067520][ T6487] misc userio: No port type given on /dev/userio [ 116.076941][ T6487] misc userio: The device must be registered before sending interrupts [ 116.255243][ T6472] FAULT_INJECTION: forcing a failure. [ 116.255243][ T6472] name failslab, interval 1, probability 0, space 0, times 0 [ 116.268136][ T6472] CPU: 1 UID: 0 PID: 6472 Comm: syz.2.147 Not tainted syzkaller #0 PREEMPT(full) [ 116.268158][ T6472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 116.268167][ T6472] Call Trace: [ 116.268174][ T6472] [ 116.268180][ T6472] dump_stack_lvl+0x100/0x190 [ 116.268206][ T6472] should_fail_ex.cold+0x5/0xa [ 116.268224][ T6472] should_failslab+0xc2/0x120 [ 116.268242][ T6472] ? lsm_blob_alloc+0x68/0x90 [ 116.268256][ T6472] __kmalloc_noprof+0xf6/0x9c0 [ 116.268266][ T6472] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 116.268287][ T6472] ? lsm_blob_alloc+0x68/0x90 [ 116.268303][ T6472] ? __asan_memset+0x23/0x50 [ 116.268323][ T6472] lsm_blob_alloc+0x68/0x90 [ 116.268343][ T6472] security_task_alloc+0x2a/0x260 [ 116.268363][ T6472] copy_process+0x25cc/0x7890 [ 116.268390][ T6472] ? __pfx_copy_process+0x10/0x10 [ 116.268409][ T6472] ? lockdep_init_map_type+0x5c/0x250 [ 116.268422][ T6472] ? lockdep_init_map_type+0x5c/0x250 [ 116.268434][ T6472] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 116.268452][ T6472] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 116.268478][ T6472] vhost_task_create+0x1db/0x370 [ 116.268498][ T6472] ? __pfx_vhost_task_create+0x10/0x10 [ 116.268515][ T6472] ? register_lock_class+0x40/0x560 [ 116.268531][ T6472] ? __pfx_vhost_task_fn+0x10/0x10 [ 116.268545][ T6472] ? __pfx___mutex_lock+0x10/0x10 [ 116.268562][ T6472] kvm_mmu_post_init_vm+0x1b3/0x370 [ 116.268580][ T6472] kvm_arch_vcpu_ioctl_run+0x66/0x1830 [ 116.268602][ T6472] ? kvm_vcpu_ioctl+0x150f/0x16d0 [ 116.268624][ T6472] kvm_vcpu_ioctl+0x730/0x16d0 [ 116.268643][ T6472] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 116.268660][ T6472] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 116.268685][ T6472] ? do_vfs_ioctl+0x226/0x13e0 [ 116.268701][ T6472] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 116.268715][ T6472] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 116.268734][ T6472] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 116.268767][ T6472] ? selinux_file_ioctl+0x139/0x290 [ 116.268781][ T6472] ? selinux_file_ioctl+0xb4/0x290 [ 116.268798][ T6472] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 116.268812][ T6472] __x64_sys_ioctl+0x18e/0x210 [ 116.268823][ T6472] do_syscall_64+0xc9/0xf80 [ 116.268837][ T6472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.268848][ T6472] RIP: 0033:0x7fcf5df9acb9 [ 116.268858][ T6472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.268871][ T6472] RSP: 002b:00007fcf5eeaf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 116.268887][ T6472] RAX: ffffffffffffffda RBX: 00007fcf5e215fa0 RCX: 00007fcf5df9acb9 [ 116.268897][ T6472] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 116.268906][ T6472] RBP: 00007fcf5eeaf090 R08: 0000000000000000 R09: 0000000000000000 [ 116.268915][ T6472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.268923][ T6472] R13: 00007fcf5e216038 R14: 00007fcf5e215fa0 R15: 00007ffe943d2ed8 [ 116.268945][ T6472] [ 116.601513][ T6263] usb 3-1: USB disconnect, device number 9 [ 118.499339][ T30] audit: type=1400 audit(1769071224.450:272): avc: denied { ioctl } for pid=6504 comm="syz.4.157" path="socket:[11740]" dev="sockfs" ino=11740 ioctlcmd=0x8953 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 118.537893][ T30] audit: type=1400 audit(1769071224.460:273): avc: denied { write } for pid=6504 comm="syz.4.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 118.802287][ T6514] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=55 sclass=netlink_tcpdiag_socket pid=6514 comm=syz.3.159 [ 118.838857][ T5936] usb 2-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 118.863728][ T5936] usb 2-1: MIDIStreaming interface descriptor not found [ 118.876979][ T6521] QAT: Invalid ioctl 62735 [ 118.890457][ T6521] QAT: Invalid ioctl 1075883590 [ 118.904740][ T6521] QAT: Invalid ioctl 1075883590 [ 118.909667][ T6521] QAT: Invalid ioctl 1075883590 [ 118.944479][ T5936] usb 2-1: USB disconnect, device number 5 [ 118.982597][ T6521] QAT: Invalid ioctl 1075883590 [ 118.988151][ T6525] __nla_validate_parse: 3 callbacks suppressed [ 118.988166][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.163'. [ 119.001360][ T6043] udevd[6043]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.015833][ T6521] QAT: Invalid ioctl 1075883590 [ 119.024695][ T6525] netlink: 16 bytes leftover after parsing attributes in process `syz.0.163'. [ 119.033774][ T6525] netlink: 16 bytes leftover after parsing attributes in process `syz.0.163'. [ 119.047180][ T6521] QAT: Invalid ioctl 1075883590 [ 119.070162][ T6521] QAT: Invalid ioctl 1075883590 [ 119.102191][ T5895] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 119.118287][ T6521] QAT: Invalid ioctl 1075883590 [ 119.139580][ T6528] ./cgroup: Can't lookup blockdev [ 119.142447][ T6521] QAT: Invalid ioctl 1075883590 [ 119.164934][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 119.232205][ T5895] usb 3-1: device descriptor read/64, error -71 [ 119.261927][ T30] audit: type=1400 audit(1769071225.210:274): avc: denied { shutdown } for pid=6527 comm="syz.1.164" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 119.291131][ T30] audit: type=1400 audit(1769071225.240:275): avc: denied { read } for pid=6527 comm="syz.1.164" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 119.346877][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 119.355422][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.366007][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 119.377227][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 119.388169][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 119.398472][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 119.415226][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 119.425112][ T24] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 119.433473][ T24] usb 5-1: Manufacturer: syz [ 119.442511][ T24] usb 5-1: config 0 descriptor?? [ 119.492307][ T5895] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 119.632251][ T5895] usb 3-1: device descriptor read/64, error -71 [ 119.712804][ T24] rc_core: IR keymap rc-hauppauge not found [ 119.719927][ T24] Registered IR keymap rc-empty [ 119.725727][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 119.835925][ T5895] usb usb3-port1: attempt power cycle [ 119.870148][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 119.905799][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 119.922333][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input11 [ 120.112207][ T30] audit: type=1400 audit(1769071226.040:276): avc: denied { write } for pid=6535 comm="syz.3.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 120.192471][ T5895] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 120.306171][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 120.332828][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 120.332998][ T5895] usb 3-1: device descriptor read/8, error -71 [ 120.372271][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 120.392767][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 120.423126][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 120.430379][ T30] audit: type=1400 audit(1769071226.380:277): avc: denied { write } for pid=6542 comm="syz.0.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 120.441741][ T6543] netlink: 192 bytes leftover after parsing attributes in process `syz.0.167'. [ 120.462964][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 120.480680][ T30] audit: type=1400 audit(1769071226.430:278): avc: denied { setopt } for pid=6545 comm="syz.1.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 120.506848][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 120.532969][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 120.640846][ T5895] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 120.675138][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 120.682653][ T30] audit: type=1400 audit(1769071226.600:279): avc: denied { read write } for pid=6545 comm="syz.1.168" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 120.716946][ T30] audit: type=1400 audit(1769071226.600:280): avc: denied { open } for pid=6545 comm="syz.1.168" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 120.740523][ T5895] usb 3-1: device descriptor read/8, error -71 [ 120.746775][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 121.022226][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 121.068900][ T24] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 121.125227][ T5895] usb usb3-port1: unable to enumerate USB device [ 121.131656][ T30] audit: type=1400 audit(1769071227.060:281): avc: denied { getopt } for pid=6545 comm="syz.1.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 121.181635][ T24] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 121.194530][ T24] usb 5-1: USB disconnect, device number 7 [ 121.602045][ T6567] netlink: 20 bytes leftover after parsing attributes in process `syz.0.175'. [ 121.859953][ T6580] FAULT_INJECTION: forcing a failure. [ 121.859953][ T6580] name failslab, interval 1, probability 0, space 0, times 0 [ 121.872752][ T6580] CPU: 0 UID: 0 PID: 6580 Comm: syz.0.180 Not tainted syzkaller #0 PREEMPT(full) [ 121.872773][ T6580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 121.872780][ T6580] Call Trace: [ 121.872785][ T6580] [ 121.872789][ T6580] dump_stack_lvl+0x100/0x190 [ 121.872809][ T6580] should_fail_ex.cold+0x5/0xa [ 121.872821][ T6580] should_failslab+0xc2/0x120 [ 121.872837][ T6580] kmem_cache_alloc_node_noprof+0x8c/0x880 [ 121.872852][ T6580] ? __alloc_skb+0x156/0x410 [ 121.872864][ T6580] ? __alloc_skb+0x35d/0x410 [ 121.872878][ T6580] ? __alloc_skb+0x156/0x410 [ 121.872890][ T6580] __alloc_skb+0x156/0x410 [ 121.872902][ T6580] ? __alloc_skb+0x35d/0x410 [ 121.872914][ T6580] ? __pfx___alloc_skb+0x10/0x10 [ 121.872929][ T6580] ? netlink_alloc_large_skb+0x33/0x150 [ 121.872947][ T6580] netlink_alloc_large_skb+0x69/0x150 [ 121.872964][ T6580] netlink_sendmsg+0x680/0xda0 [ 121.872982][ T6580] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.873003][ T6580] sock_write_iter+0x566/0x610 [ 121.873021][ T6580] ? __pfx_sock_write_iter+0x10/0x10 [ 121.873043][ T6580] ? __pfx_file_has_perm+0x10/0x10 [ 121.873061][ T6580] do_iter_readv_writev+0x6ee/0x920 [ 121.873074][ T6580] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 121.873084][ T6580] ? selinux_file_permission+0x8f/0x6d0 [ 121.873098][ T6580] ? bpf_lsm_file_permission+0x9/0x10 [ 121.873121][ T6580] ? security_file_permission+0x76/0x210 [ 121.873134][ T6580] ? rw_verify_area+0xce/0x6d0 [ 121.873145][ T6580] vfs_writev+0x360/0xe10 [ 121.873159][ T6580] ? __pfx_vfs_writev+0x10/0x10 [ 121.873178][ T6580] ? __fget_files+0x21f/0x3d0 [ 121.873195][ T6580] ? do_writev+0x28a/0x340 [ 121.873204][ T6580] do_writev+0x28a/0x340 [ 121.873215][ T6580] ? __pfx_do_writev+0x10/0x10 [ 121.873229][ T6580] do_syscall_64+0xc9/0xf80 [ 121.873243][ T6580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.873255][ T6580] RIP: 0033:0x7f34c719acb9 [ 121.873264][ T6580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.873274][ T6580] RSP: 002b:00007f34c7f7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 121.873285][ T6580] RAX: ffffffffffffffda RBX: 00007f34c7416090 RCX: 00007f34c719acb9 [ 121.873292][ T6580] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000007 [ 121.873298][ T6580] RBP: 00007f34c7f7b090 R08: 0000000000000000 R09: 0000000000000000 [ 121.873304][ T6580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.873310][ T6580] R13: 00007f34c7416128 R14: 00007f34c7416090 R15: 00007ffc36597ff8 [ 121.873323][ T6580] [ 122.374008][ T6583] ./cgroup: Can't lookup blockdev [ 123.187577][ T6600] netlink: 24 bytes leftover after parsing attributes in process `syz.0.184'. [ 123.644904][ T6605] netlink: 'syz.2.183': attribute type 4 has an invalid length. [ 123.652991][ T6604] FAULT_INJECTION: forcing a failure. [ 123.652991][ T6604] name failslab, interval 1, probability 0, space 0, times 0 [ 123.665877][ T6604] CPU: 1 UID: 0 PID: 6604 Comm: syz.3.185 Not tainted syzkaller #0 PREEMPT(full) [ 123.665898][ T6604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 123.665907][ T6604] Call Trace: [ 123.665913][ T6604] [ 123.665919][ T6604] dump_stack_lvl+0x100/0x190 [ 123.665946][ T6604] should_fail_ex.cold+0x5/0xa [ 123.665965][ T6604] should_failslab+0xc2/0x120 [ 123.665989][ T6604] kmem_cache_alloc_node_noprof+0x8c/0x880 [ 123.666011][ T6604] ? __alloc_skb+0x156/0x410 [ 123.666036][ T6604] ? __alloc_skb+0x156/0x410 [ 123.666053][ T6604] __alloc_skb+0x156/0x410 [ 123.666071][ T6604] ? __alloc_skb+0x35d/0x410 [ 123.666088][ T6604] ? __pfx___alloc_skb+0x10/0x10 [ 123.666105][ T6604] ? __mutex_lock+0x26a/0x1b90 [ 123.666123][ T6604] ? find_held_lock+0x2b/0x80 [ 123.666141][ T6604] ? genl_start+0x6a1/0x970 [ 123.666157][ T6604] ? genl_start+0x6a1/0x970 [ 123.666175][ T6604] netlink_dump+0x19b/0xd30 [ 123.666189][ T6604] ? __mutex_unlock_slowpath+0x15c/0x790 [ 123.666202][ T6604] ? __pfx_netlink_dump+0x10/0x10 [ 123.666216][ T6604] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 123.666236][ T6604] ? __pfx_smc_pnet_dump_start+0x10/0x10 [ 123.666249][ T6604] ? genl_start+0x67a/0x970 [ 123.666267][ T6604] __netlink_dump_start+0x6d6/0x990 [ 123.666284][ T6604] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 123.666295][ T6604] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 123.666317][ T6604] ? __pfx_genl_get_cmd+0x10/0x10 [ 123.666332][ T6604] ? __pfx_genl_start+0x10/0x10 [ 123.666348][ T6604] ? __pfx_genl_dumpit+0x10/0x10 [ 123.666364][ T6604] ? __pfx_genl_done+0x10/0x10 [ 123.666374][ T6604] ? __dev_queue_xmit+0x7fd/0x46f0 [ 123.666385][ T6604] ? __radix_tree_lookup+0x217/0x2b0 [ 123.666404][ T6604] genl_rcv_msg+0x471/0x800 [ 123.666415][ T6604] ? __pfx_genl_rcv_msg+0x10/0x10 [ 123.666426][ T6604] ? __pfx_smc_pnet_dump_start+0x10/0x10 [ 123.666437][ T6604] ? __pfx_smc_pnet_dump+0x10/0x10 [ 123.666453][ T6604] netlink_rcv_skb+0x159/0x420 [ 123.666469][ T6604] ? __pfx_genl_rcv_msg+0x10/0x10 [ 123.666484][ T6604] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 123.666505][ T6604] ? netlink_deliver_tap+0x1ae/0xcc0 [ 123.666522][ T6604] genl_rcv+0x28/0x40 [ 123.666537][ T6604] netlink_unicast+0x5aa/0x870 [ 123.666555][ T6604] ? __pfx_netlink_unicast+0x10/0x10 [ 123.666575][ T6604] netlink_sendmsg+0x8b0/0xda0 [ 123.666593][ T6604] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.666608][ T6604] ? PageHuge+0x180/0x180 [ 123.666624][ T6604] ____sys_sendmsg+0xa54/0xc30 [ 123.666642][ T6604] ? __pfx_____sys_sendmsg+0x10/0x10 [ 123.666666][ T6604] ___sys_sendmsg+0x190/0x1e0 [ 123.666677][ T6604] ? __pfx____sys_sendmsg+0x10/0x10 [ 123.666694][ T6604] ? find_held_lock+0x2b/0x80 [ 123.666717][ T6604] __sys_sendmsg+0x170/0x220 [ 123.666732][ T6604] ? __pfx___sys_sendmsg+0x10/0x10 [ 123.666754][ T6604] do_syscall_64+0xc9/0xf80 [ 123.666767][ T6604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.666779][ T6604] RIP: 0033:0x7f53a379acb9 [ 123.666789][ T6604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.666800][ T6604] RSP: 002b:00007f53a45fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.666811][ T6604] RAX: ffffffffffffffda RBX: 00007f53a3a15fa0 RCX: 00007f53a379acb9 [ 123.666818][ T6604] RDX: 0000000004000000 RSI: 0000200000001040 RDI: 0000000000000003 [ 123.666824][ T6604] RBP: 00007f53a45fe090 R08: 0000000000000000 R09: 0000000000000000 [ 123.666830][ T6604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.666836][ T6604] R13: 00007f53a3a16038 R14: 00007f53a3a15fa0 R15: 00007fff5a73c398 [ 123.666849][ T6604] [ 123.702192][ T6263] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 124.130808][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 124.130823][ T30] audit: type=1400 audit(1769071230.080:291): avc: denied { accept } for pid=6594 comm="syz.2.183" lport=55151 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 124.515710][ T6612] netlink: 'syz.4.187': attribute type 12 has an invalid length. [ 124.522241][ T6263] usb 1-1: device descriptor read/64, error -71 [ 124.523540][ T6612] netlink: 'syz.4.187': attribute type 29 has an invalid length. [ 124.568039][ T6612] netlink: 'syz.4.187': attribute type 2 has an invalid length. [ 124.600505][ T6615] netlink: 24 bytes leftover after parsing attributes in process `syz.4.187'. [ 124.613348][ T6612] netlink: 260 bytes leftover after parsing attributes in process `syz.4.187'. [ 124.727925][ T6619] syz_tun: entered allmulticast mode [ 124.742360][ T6614] syz_tun: left allmulticast mode [ 124.786334][ T6263] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 124.982366][ T6263] usb 1-1: device descriptor read/64, error -71 [ 125.113808][ T6263] usb usb1-port1: attempt power cycle [ 125.519758][ T6263] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 125.636513][ T6263] usb 1-1: device descriptor read/8, error -71 [ 125.729909][ T6626] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 125.759171][ T30] audit: type=1400 audit(1769071231.680:292): avc: denied { write } for pid=6625 comm="syz.1.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 125.843107][ T30] audit: type=1400 audit(1769071231.680:293): avc: denied { read } for pid=6625 comm="syz.1.190" lport=9356 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 125.943306][ T6263] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 125.965153][ T6263] usb 1-1: device descriptor read/8, error -71 [ 126.020654][ T6634] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 126.030828][ T6636] binder: 6635:6636 ioctl 4018620d 200000002540 returned -22 [ 126.064732][ T6639] FAULT_INJECTION: forcing a failure. [ 126.064732][ T6639] name failslab, interval 1, probability 0, space 0, times 0 [ 126.082767][ T6263] usb usb1-port1: unable to enumerate USB device [ 126.089190][ T6636] binder: 6635:6636 ioctl c0306201 0 returned -14 [ 126.097341][ T6639] CPU: 0 UID: 0 PID: 6639 Comm: syz.1.196 Not tainted syzkaller #0 PREEMPT(full) [ 126.097363][ T6639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 126.097373][ T6639] Call Trace: [ 126.097379][ T6639] [ 126.097386][ T6639] dump_stack_lvl+0x100/0x190 [ 126.097414][ T6639] should_fail_ex.cold+0x5/0xa [ 126.097434][ T6639] should_failslab+0xc2/0x120 [ 126.097456][ T6639] __kmalloc_cache_noprof+0x80/0x810 [ 126.097474][ T6639] ? rtnl_newlink+0x126/0x2380 [ 126.097500][ T6639] ? __pfx_rtnl_newlink+0x10/0x10 [ 126.097521][ T6639] ? rtnl_newlink+0x126/0x2380 [ 126.097541][ T6639] rtnl_newlink+0x126/0x2380 [ 126.097571][ T6639] ? __pfx_rtnl_newlink+0x10/0x10 [ 126.097592][ T6639] ? find_held_lock+0x2b/0x80 [ 126.097613][ T6639] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 126.097636][ T6639] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 126.097662][ T6639] ? avc_has_perm_noaudit+0x145/0x3b0 [ 126.097689][ T6639] ? __lock_acquire+0x4a5/0x2630 [ 126.097706][ T6639] ? consume_skb+0xd6/0x110 [ 126.097740][ T6639] ? find_held_lock+0x2b/0x80 [ 126.097761][ T6639] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 126.097782][ T6639] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 126.097805][ T6639] ? __pfx_rtnl_newlink+0x10/0x10 [ 126.097828][ T6639] rtnetlink_rcv_msg+0x95e/0xe90 [ 126.097852][ T6639] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 126.097880][ T6639] ? ref_tracker_free+0x37e/0x6c0 [ 126.097907][ T6639] netlink_rcv_skb+0x159/0x420 [ 126.097931][ T6639] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 126.097952][ T6639] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 126.097977][ T6639] ? netlink_deliver_tap+0x1ae/0xcc0 [ 126.097999][ T6639] netlink_unicast+0x5aa/0x870 [ 126.098020][ T6639] ? __pfx_netlink_unicast+0x10/0x10 [ 126.098046][ T6639] netlink_sendmsg+0x8b0/0xda0 [ 126.098068][ T6639] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.098086][ T6639] ? PageHuge+0x180/0x180 [ 126.098106][ T6639] ____sys_sendmsg+0xa54/0xc30 [ 126.098129][ T6639] ? __pfx_____sys_sendmsg+0x10/0x10 [ 126.098158][ T6639] ___sys_sendmsg+0x190/0x1e0 [ 126.098174][ T6639] ? __pfx____sys_sendmsg+0x10/0x10 [ 126.098203][ T6639] ? find_held_lock+0x2b/0x80 [ 126.098232][ T6639] __sys_sendmsg+0x170/0x220 [ 126.098250][ T6639] ? __pfx___sys_sendmsg+0x10/0x10 [ 126.098278][ T6639] do_syscall_64+0xc9/0xf80 [ 126.098295][ T6639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.098309][ T6639] RIP: 0033:0x7ff754b9acb9 [ 126.098320][ T6639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.098333][ T6639] RSP: 002b:00007ff75599d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.098347][ T6639] RAX: ffffffffffffffda RBX: 00007ff754e15fa0 RCX: 00007ff754b9acb9 [ 126.098356][ T6639] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 126.098364][ T6639] RBP: 00007ff75599d090 R08: 0000000000000000 R09: 0000000000000000 [ 126.098372][ T6639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.098379][ T6639] R13: 00007ff754e16038 R14: 00007ff754e15fa0 R15: 00007ffde297efe8 [ 126.098397][ T6639] [ 126.252232][ T48] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 126.415124][ T6640] binder: 6635:6640 ioctl c0306201 2000000001c0 returned -14 [ 126.742208][ T6263] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 126.827031][ T794] IPVS: starting estimator thread 0... [ 126.835571][ T48] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.847653][ T48] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 126.858671][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.867881][ T48] usb 5-1: Product: syz [ 126.933611][ T48] usb 5-1: Manufacturer: syz [ 126.948099][ T6263] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 126.962166][ T6263] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.972389][ T6652] IPVS: using max 76 ests per chain, 182400 per kthread [ 126.980343][ T6263] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 126.989677][ T6263] usb 3-1: config 1 has no interface number 1 [ 126.996152][ T6263] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 127.008994][ T48] usb 5-1: SerialNumber: syz [ 127.014757][ T48] usb 5-1: config 0 descriptor?? [ 127.022877][ T6649] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 127.038568][ T6263] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 127.044777][ T48] asix 5-1:0.0: probe with driver asix failed with error -22 [ 127.079528][ T6655] netlink: 'syz.3.201': attribute type 1 has an invalid length. [ 127.087336][ T6656] netlink: 'syz.3.201': attribute type 1 has an invalid length. [ 127.096896][ T6263] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 127.112334][ T6263] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.115218][ T6655] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.121758][ T6263] usb 3-1: Product: syz [ 127.131659][ T6263] usb 3-1: Manufacturer: syz [ 127.147341][ T6263] usb 3-1: SerialNumber: syz [ 127.272441][ T48] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 127.334152][ T5897] usb 5-1: USB disconnect, device number 8 [ 127.372302][ T5937] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 127.432168][ T48] usb 1-1: Using ep0 maxpacket: 16 [ 127.443316][ T48] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.462241][ T48] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 127.482258][ T48] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 127.491329][ T48] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.522593][ T48] usb 1-1: config 0 descriptor?? [ 127.532260][ T5937] usb 4-1: Invalid ep0 maxpacket: 64 [ 127.672293][ T5937] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 127.923448][ T6668] atomic_op ffff88807743a198 conn xmit_atomic 0000000000000000 [ 127.935149][ T5937] usb 4-1: Invalid ep0 maxpacket: 64 [ 127.954540][ T6263] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 127.972554][ T5937] usb usb4-port1: attempt power cycle [ 128.001337][ T6263] usb 3-1: MIDIStreaming interface descriptor not found [ 128.202387][ T6263] usb 3-1: USB disconnect, device number 14 [ 128.333537][ T5937] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 128.366460][ T5937] usb 4-1: Invalid ep0 maxpacket: 64 [ 128.603174][ T5937] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 128.652772][ T5937] usb 4-1: Invalid ep0 maxpacket: 64 [ 128.659253][ T5937] usb usb4-port1: unable to enumerate USB device [ 128.741912][ T30] audit: type=1400 audit(1769071234.690:294): avc: denied { bind } for pid=6682 comm="syz.4.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 128.764801][ T6683] xt_CT: You must specify a L4 protocol and not use inversions on it [ 128.897838][ T30] audit: type=1326 audit(1769071234.850:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6687 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5df9acb9 code=0x7ffc0000 [ 128.924403][ T30] audit: type=1326 audit(1769071234.880:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6687 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcf5df9acb9 code=0x7ffc0000 [ 128.956566][ T30] audit: type=1326 audit(1769071234.880:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6687 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5df9acb9 code=0x7ffc0000 [ 128.970546][ T6690] sp0: Synchronizing with TNC [ 129.055632][ T6692] SELinux: failed to load policy [ 129.131249][ T30] audit: type=1326 audit(1769071234.880:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6687 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5df9acb9 code=0x7ffc0000 [ 129.172559][ T30] audit: type=1326 audit(1769071234.880:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6687 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcf5df9acb9 code=0x7ffc0000 [ 129.320195][ T30] audit: type=1326 audit(1769071234.880:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6687 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5df9acb9 code=0x7ffc0000 [ 129.442932][ T30] audit: type=1326 audit(1769071234.880:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6687 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5df9acb9 code=0x7ffc0000 [ 129.499783][ T30] audit: type=1326 audit(1769071234.900:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6687 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcf5df9acb9 code=0x7ffc0000 [ 130.323755][ T30] audit: type=1326 audit(1769071234.900:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6687 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5df9acb9 code=0x7ffc0000 [ 130.348163][ T30] audit: type=1326 audit(1769071234.900:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6687 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcf5df9acb9 code=0x7ffc0000 [ 130.360468][ T48] usb 1-1: USB disconnect, device number 10 [ 130.376057][ T6690] ip6gre1: entered promiscuous mode [ 130.390875][ T30] audit: type=1326 audit(1769071234.900:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6687 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5df9acb9 code=0x7ffc0000 [ 130.540570][ T30] audit: type=1326 audit(1769071234.900:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6687 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcf5df9acb9 code=0x7ffc0000 [ 130.655083][ T6706] syz_tun: entered allmulticast mode [ 130.671635][ T6706] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 130.676872][ T30] audit: type=1326 audit(1769071234.900:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6687 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5df9acb9 code=0x7ffc0000 [ 130.680484][ T6706] mroute: pending queue full, dropping entries [ 130.704893][ T30] audit: type=1326 audit(1769071234.900:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6687 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcf5df9acb9 code=0x7ffc0000 [ 130.712133][ C1] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 130.741323][ C1] mroute: pending queue full, dropping entries [ 130.912923][ T6706] syz_tun: left allmulticast mode [ 132.389828][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.512394][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.037122][ T6735] (syz.3.221,6735,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 133.125519][ T6735] (syz.3.221,6735,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 133.173469][ T6735] (syz.3.221,6735,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 133.182065][ T6735] (syz.3.221,6735,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 133.549882][ T6735] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 134.015031][ T6748] fuse: Unknown parameter 'grQÝ_id' [ 134.047821][ T6748] Driver unsupported XDP return value 0 on prog (id 13) dev N/A, expect packet loss! [ 134.206982][ T6750] netlink: 44 bytes leftover after parsing attributes in process `syz.4.223'. [ 134.705014][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 134.705026][ T30] audit: type=1400 audit(1769071240.650:336): avc: denied { create } for pid=6753 comm="syz.4.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 134.806588][ T6760] kAFS: No cell specified [ 135.179229][ T30] audit: type=1400 audit(1769071240.780:337): avc: denied { setopt } for pid=6756 comm="syz.3.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 136.263480][ T6780] FAULT_INJECTION: forcing a failure. [ 136.263480][ T6780] name failslab, interval 1, probability 0, space 0, times 0 [ 136.282350][ T6780] CPU: 0 UID: 0 PID: 6780 Comm: syz.2.231 Not tainted syzkaller #0 PREEMPT(full) [ 136.282375][ T6780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 136.282385][ T6780] Call Trace: [ 136.282391][ T6780] [ 136.282397][ T6780] dump_stack_lvl+0x100/0x190 [ 136.282426][ T6780] should_fail_ex.cold+0x5/0xa [ 136.282446][ T6780] should_failslab+0xc2/0x120 [ 136.282469][ T6780] kmem_cache_alloc_node_noprof+0x8c/0x880 [ 136.282492][ T6780] ? __alloc_skb+0x156/0x410 [ 136.282511][ T6780] ? __alloc_skb+0x35d/0x410 [ 136.282533][ T6780] ? __alloc_skb+0x156/0x410 [ 136.282550][ T6780] __alloc_skb+0x156/0x410 [ 136.282567][ T6780] ? __alloc_skb+0x35d/0x410 [ 136.282589][ T6780] ? __pfx___alloc_skb+0x10/0x10 [ 136.282607][ T6780] ? __kernel_text_address+0xd/0x30 [ 136.282626][ T6780] ? selinux_socket_getpeersec_dgram+0x1a4/0x380 [ 136.282655][ T6780] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 136.282689][ T6780] netlink_alloc_large_skb+0x69/0x150 [ 136.282716][ T6780] netlink_sendmsg+0x680/0xda0 [ 136.282743][ T6780] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.282765][ T6780] ? PageHuge+0x180/0x180 [ 136.282791][ T6780] ____sys_sendmsg+0xa54/0xc30 [ 136.282819][ T6780] ? __pfx_____sys_sendmsg+0x10/0x10 [ 136.282856][ T6780] ___sys_sendmsg+0x190/0x1e0 [ 136.282873][ T6780] ? __pfx____sys_sendmsg+0x10/0x10 [ 136.282900][ T6780] ? find_held_lock+0x2b/0x80 [ 136.282937][ T6780] __sys_sendmsg+0x170/0x220 [ 136.282960][ T6780] ? __pfx___sys_sendmsg+0x10/0x10 [ 136.282990][ T6780] ? trace_irq_enable.constprop.0+0x2d/0x110 [ 136.283022][ T6780] do_syscall_64+0xc9/0xf80 [ 136.283048][ T6780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.283067][ T6780] RIP: 0033:0x7fcf5df9acb9 [ 136.283082][ T6780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.283098][ T6780] RSP: 002b:00007fcf5ee6d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.283115][ T6780] RAX: ffffffffffffffda RBX: 00007fcf5e216180 RCX: 00007fcf5df9acb9 [ 136.283127][ T6780] RDX: 0000000000004000 RSI: 0000200000000440 RDI: 0000000000000003 [ 136.283137][ T6780] RBP: 00007fcf5ee6d090 R08: 0000000000000000 R09: 0000000000000000 [ 136.283147][ T6780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.283157][ T6780] R13: 00007fcf5e216218 R14: 00007fcf5e216180 R15: 00007ffe943d2ed8 [ 136.283180][ T6780] [ 139.547661][ T6816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.241'. [ 139.736347][ T30] audit: type=1400 audit(1769071245.690:338): avc: denied { create } for pid=6821 comm="syz.0.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 139.850798][ T30] audit: type=1400 audit(1769071245.690:339): avc: denied { write } for pid=6821 comm="syz.0.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 140.498659][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.246'. [ 140.512617][ T6834] netlink: 16 bytes leftover after parsing attributes in process `syz.2.246'. [ 140.529114][ T6834] netlink: 16 bytes leftover after parsing attributes in process `syz.2.246'. [ 140.632330][ T5971] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 140.794924][ T5971] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 140.804012][ T5971] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.816409][ T5971] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 140.825942][ T5971] usb 4-1: config 1 has no interface number 1 [ 140.832724][ T5971] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 141.060066][ T5971] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 141.082982][ T5971] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 141.102741][ T5971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.112217][ T5971] usb 4-1: Product: syz [ 141.126536][ T5971] usb 4-1: Manufacturer: syz [ 141.136266][ T5971] usb 4-1: SerialNumber: syz [ 142.299154][ T6853] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 142.316750][ T30] audit: type=1400 audit(1769071248.270:340): avc: denied { bind } for pid=6852 comm="syz.4.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 142.348202][ T6853] input: syz0 as /devices/virtual/input/input12 [ 142.597359][ T30] audit: type=1400 audit(1769071248.290:341): avc: denied { name_bind } for pid=6852 comm="syz.4.251" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 142.618170][ T30] audit: type=1400 audit(1769071248.300:342): avc: denied { read write } for pid=6852 comm="syz.4.251" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 142.655294][ T794] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 142.702220][ T30] audit: type=1400 audit(1769071248.300:343): avc: denied { open } for pid=6852 comm="syz.4.251" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 142.799326][ T30] audit: type=1400 audit(1769071248.300:344): avc: denied { ioctl } for pid=6852 comm="syz.4.251" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 142.843975][ T794] usb 1-1: Using ep0 maxpacket: 8 [ 142.855590][ T794] usb 1-1: config 7 has an invalid interface number: 255 but max is 0 [ 142.874234][ T794] usb 1-1: config 7 has no interface number 0 [ 143.144345][ T794] usb 1-1: config 7 interface 255 has no altsetting 0 [ 143.175020][ T794] usb 1-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=c2.26 [ 143.194591][ T794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.219473][ T794] usb 1-1: Product: syz [ 143.231207][ T794] usb 1-1: Manufacturer: syz [ 143.246370][ T794] usb 1-1: SerialNumber: syz [ 143.500061][ T794] pegasus 1-1:7.255: probe with driver pegasus failed with error -71 [ 143.690152][ T794] usb 1-1: USB disconnect, device number 11 [ 144.389441][ T5824] Bluetooth: hci4: unexpected event for opcode 0x0411 [ 144.434520][ T5971] usb 4-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 144.448811][ T5971] usb 4-1: MIDIStreaming interface descriptor not found [ 144.720242][ T6880] kvm: pic: single mode not supported [ 144.720262][ T6880] kvm: pic: level sensitive irq not supported [ 145.243177][ T6885] ./cgroup: Can't lookup blockdev [ 145.492261][ T30] audit: type=1400 audit(1769071251.180:345): avc: denied { mounton } for pid=6884 comm="syz.2.260" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 146.659769][ T6893] overlayfs: failed to resolve './file2': -2 [ 146.884319][ T5971] usb 4-1: USB disconnect, device number 8 [ 147.018169][ T5833] udevd[5833]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 147.252448][ T30] audit: type=1400 audit(1769071253.200:346): avc: denied { write } for pid=6892 comm="syz.1.263" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 148.012483][ T30] audit: type=1400 audit(1769071253.970:347): avc: denied { execute } for pid=6915 comm="syz.3.268" path="/57/cpu.stat" dev="tmpfs" ino=331 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 148.095336][ T6919] overlay: filesystem on ./bus not supported as upperdir [ 148.114059][ T5971] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 148.793108][ T5971] usb 5-1: Using ep0 maxpacket: 16 [ 148.827446][ T5971] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.845651][ T5971] usb 5-1: config 0 interface 0 has no altsetting 0 [ 148.860784][ T5971] usb 5-1: New USB device found, idVendor=056a, idProduct=00d2, bcdDevice= 0.00 [ 148.887459][ T5971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.910752][ T6932] netlink: 20 bytes leftover after parsing attributes in process `syz.2.271'. [ 148.924631][ T5971] usb 5-1: config 0 descriptor?? [ 149.463896][ T6939] overlayfs: failed to resolve './file2': -2 [ 150.452270][ T5971] usb 5-1: string descriptor 0 read error: -71 [ 150.486540][ T5971] usbhid 5-1:0.0: can't add hid device: -71 [ 150.505719][ T5971] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 150.523617][ T5971] usb 5-1: USB disconnect, device number 9 [ 151.192182][ T5817] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 151.342203][ T5817] usb 2-1: Using ep0 maxpacket: 16 [ 151.348769][ T5817] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.361972][ T5817] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.381175][ T5817] usb 2-1: New USB device found, idVendor=0738, idProduct=1705, bcdDevice= 0.00 [ 151.391979][ T5817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.404800][ T5817] usb 2-1: config 0 descriptor?? [ 151.418748][ T5817] usbhid 2-1:0.0: fixing wrong optional hid class descriptors count [ 151.430063][ T5817] usbhid 2-1:0.0: can't add hid device: -22 [ 151.442995][ T5817] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 151.472600][ T5971] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 151.482332][ T5897] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 151.566830][ T6981] netlink: 28 bytes leftover after parsing attributes in process `syz.2.287'. [ 151.673918][ T5897] usb 5-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 151.685508][ T5971] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.697124][ T5897] usb 5-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 151.711662][ T5817] usb 2-1: USB disconnect, device number 6 [ 152.129129][ T5971] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 152.157049][ T5971] usb 4-1: config 1 has no interface number 0 [ 152.164300][ T5897] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 152.174118][ T5971] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.186211][ T5897] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 152.194615][ T5897] usb 5-1: Manufacturer: syz [ 152.199282][ T5971] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 152.209015][ T5897] usb 5-1: SerialNumber: syz [ 152.219156][ T5971] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 152.241681][ T5971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.273206][ T5971] usb 4-1: Product: syz [ 152.285250][ T5971] usb 4-1: Manufacturer: syz [ 152.290454][ T5971] usb 4-1: SerialNumber: syz [ 152.293047][ T30] audit: type=1400 audit(1769071258.240:348): avc: denied { write } for pid=6984 comm="syz.1.288" name="sg0" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 152.322068][ T30] audit: type=1400 audit(1769071258.270:349): avc: denied { open } for pid=6984 comm="syz.1.288" path="/dev/sg0" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 152.423337][ T6973] bridge0: entered allmulticast mode [ 152.435368][ T6973] pim6reg: entered allmulticast mode [ 152.442658][ T6973] pim6reg: left allmulticast mode [ 152.447807][ T6973] bridge0: left allmulticast mode [ 152.551329][ T5897] usbhid 5-1:36.0: couldn't find an input interrupt endpoint [ 152.573633][ T5897] usb 5-1: USB disconnect, device number 10 [ 152.712177][ T48] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 152.786574][ T6991] netlink: 20 bytes leftover after parsing attributes in process `syz.2.289'. [ 152.862762][ T48] usb 2-1: Using ep0 maxpacket: 16 [ 152.903826][ T48] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.934598][ T48] usb 2-1: config 0 interface 0 has no altsetting 0 [ 152.957634][ T48] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 152.993516][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.040527][ T48] usb 2-1: config 0 descriptor?? [ 153.180431][ T5971] cdc_ncm 4-1:1.1: SET_NTB_FORMAT failed [ 153.219483][ T5971] cdc_ncm 4-1:1.1: bind() failure [ 153.246942][ T5971] usb 4-1: USB disconnect, device number 9 [ 153.551215][ T48] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0 [ 153.552205][ T5817] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 153.567013][ T48] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0 [ 153.595384][ T48] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0 [ 153.622403][ T48] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0 [ 153.630093][ T48] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0 [ 153.675283][ T48] nzxt-smart2 0003:1E71:2009.0003: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 153.707807][ C1] usb 2-1: input irq status -75 received [ 153.752163][ T5817] usb 5-1: Using ep0 maxpacket: 16 [ 153.758737][ T5817] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.812228][ T5817] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 153.847396][ T5817] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 153.872490][ T5817] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.904531][ T5817] usb 5-1: config 0 descriptor?? [ 153.920714][ T5817] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 154.274177][ T30] audit: type=1400 audit(1769071260.210:350): avc: denied { ioctl } for pid=6984 comm="syz.1.288" path="/dev/sg0" dev="devtmpfs" ino=753 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 154.488132][ T30] audit: type=1400 audit(1769071260.210:351): avc: denied { ioctl } for pid=6984 comm="syz.1.288" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 154.637776][ T5817] usb 2-1: USB disconnect, device number 7 [ 154.823550][ T7014] fuse: Bad value for 'fd' [ 154.829983][ T30] audit: type=1400 audit(1769071260.780:352): avc: denied { ioctl } for pid=7013 comm="syz.2.296" path="socket:[15368]" dev="sockfs" ino=15368 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 155.051053][ T7019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.297'. [ 155.063284][ T7019] netlink: 16 bytes leftover after parsing attributes in process `syz.3.297'. [ 155.072497][ T7019] netlink: 16 bytes leftover after parsing attributes in process `syz.3.297'. [ 156.192316][ T5971] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 156.208652][ T30] audit: type=1400 audit(1769071262.160:353): avc: denied { create } for pid=7031 comm="syz.0.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 156.345341][ T5817] usb 5-1: USB disconnect, device number 11 [ 156.353442][ T5971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.381135][ T5971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.453641][ T7035] 9pnet_virtio: no channels available for device syz [ 156.490789][ T30] audit: type=1400 audit(1769071262.420:354): avc: denied { create } for pid=7031 comm="syz.0.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 157.348386][ T5971] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 157.377753][ T5971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.408132][ T30] audit: type=1326 audit(1769071263.350:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7028 comm="syz.2.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5df9acb9 code=0x7ffc0000 [ 157.469457][ T5971] usb 2-1: config 0 descriptor?? [ 158.587521][ T7029] use of bytesused == 0 is deprecated and will be removed in the future, [ 158.633706][ T30] audit: type=1326 audit(1769071263.350:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7028 comm="syz.2.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5df9acb9 code=0x7ffc0000 [ 158.687756][ T7029] use the actual size instead. [ 158.725950][ T30] audit: type=1326 audit(1769071263.430:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7028 comm="syz.2.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fcf5df9acb9 code=0x7ffc0000 [ 158.851849][ T30] audit: type=1326 audit(1769071263.430:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7028 comm="syz.2.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5df9acb9 code=0x7ffc0000 [ 158.930361][ T30] audit: type=1400 audit(1769071263.900:359): avc: denied { append } for pid=7036 comm="syz.4.303" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 158.959123][ T7025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.077433][ T7025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.134697][ T7053] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 159.150672][ T30] audit: type=1326 audit(1769071264.530:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7028 comm="syz.2.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcf5df9acb9 code=0x7ffc0000 [ 159.163936][ T7054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.236744][ T30] audit: type=1326 audit(1769071264.530:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7028 comm="syz.2.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5df9acb9 code=0x7ffc0000 [ 159.237064][ T7054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.586152][ T30] audit: type=1326 audit(1769071264.530:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7028 comm="syz.2.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5df9acb9 code=0x7ffc0000 [ 159.842200][ T5971] usbhid 2-1:0.0: can't add hid device: -71 [ 159.848254][ T30] audit: type=1326 audit(1769071264.530:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7028 comm="syz.2.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fcf5df9acb9 code=0x7ffc0000 [ 159.850844][ T5971] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 159.905488][ T7061] syz_tun: entered allmulticast mode [ 159.931190][ T30] audit: type=1326 audit(1769071264.530:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7028 comm="syz.2.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5df9acb9 code=0x7ffc0000 [ 160.004070][ T7061] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 160.012682][ T7061] mroute: pending queue full, dropping entries [ 160.032685][ T5971] usb 2-1: USB disconnect, device number 8 [ 160.032912][ C1] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 160.047103][ C1] mroute: pending queue full, dropping entries [ 160.087927][ T7061] syz_tun: left allmulticast mode [ 160.792803][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 161.351013][ T24] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 161.359277][ T24] usb 5-1: config 1 has no interface number 0 [ 161.365469][ T24] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 161.378296][ T24] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 161.390203][ T24] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 161.472021][ T24] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 161.489910][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.514893][ T24] usb 5-1: Product: syz [ 161.528409][ T24] usb 5-1: Manufacturer: syz [ 161.540897][ T24] usb 5-1: SerialNumber: syz [ 161.560833][ T7076] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 162.229451][ T5971] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 162.255636][ T7076] binder: BINDER_SET_CONTEXT_MGR already set [ 162.261840][ T7076] binder: 7075:7076 ioctl 4018620d 2000000002c0 returned -16 [ 162.660946][ T7093] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 162.677497][ T24] usb 5-1: No status endpoint found [ 162.722193][ T5971] usb 3-1: Using ep0 maxpacket: 16 [ 162.733978][ T5971] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.751852][ T7102] bridge0: port 3(veth0_to_bridge) entered blocking state [ 162.764491][ T7102] bridge0: port 3(veth0_to_bridge) entered disabled state [ 162.764926][ T5971] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 162.772599][ T7102] veth0_to_bridge: entered allmulticast mode [ 162.792675][ T7102] veth0_to_bridge: entered promiscuous mode [ 162.794714][ T5971] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 162.799058][ T7102] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 162.811015][ T5971] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.822655][ T7102] bridge0: port 3(veth0_to_bridge) entered blocking state [ 162.831347][ T5971] usb 3-1: config 0 descriptor?? [ 162.835204][ T7102] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 162.851008][ T5971] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 163.026501][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 163.026520][ T30] audit: type=1400 audit(1769071268.960:398): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 163.763193][ T30] audit: type=1400 audit(1769071269.720:399): avc: denied { wake_alarm } for pid=7117 comm="syz.3.321" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 163.979337][ T7122] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 164.005819][ T7122] CIFS mount error: No usable UNC path provided in device string! [ 164.005819][ T7122] [ 164.033309][ T7122] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 164.085924][ T5876] usb 5-1: USB disconnect, device number 12 [ 164.138783][ T7122] netlink: 6716 bytes leftover after parsing attributes in process `syz.3.322'. [ 164.801844][ T7122] overlayfs: failed to verify upper root origin [ 164.845274][ T5876] usb 3-1: USB disconnect, device number 15 [ 165.342197][ T5971] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 165.504148][ T5971] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 165.519288][ T5971] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 165.530408][ T5971] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 165.539819][ T5971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.561899][ T7143] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 165.581630][ T5971] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 165.962635][ T30] audit: type=1400 audit(1769071271.910:400): avc: denied { read } for pid=7149 comm="syz.3.329" name="sg0" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 166.263805][ T794] usb 5-1: USB disconnect, device number 13 [ 166.453849][ T30] audit: type=1400 audit(1769071272.410:401): avc: denied { read } for pid=7160 comm="syz.1.331" path="socket:[15690]" dev="sockfs" ino=15690 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 166.852254][ T5971] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 166.945015][ T30] audit: type=1400 audit(1769071272.900:402): avc: denied { map } for pid=7164 comm="syz.2.332" path="socket:[15703]" dev="sockfs" ino=15703 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 166.990780][ T30] audit: type=1400 audit(1769071272.900:403): avc: denied { read } for pid=7164 comm="syz.2.332" path="socket:[15703]" dev="sockfs" ino=15703 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 166.995915][ T7165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.332'. [ 167.033677][ T5971] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 167.351180][ T5971] usb 2-1: config 1 has no interface number 0 [ 167.392028][ T5971] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 167.429209][ T5971] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 167.439344][ T5971] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 167.462904][ T5971] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 167.472314][ T5971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.480532][ T5971] usb 2-1: Product: syz [ 167.485878][ T5971] usb 2-1: Manufacturer: syz [ 167.699867][ T5824] Bluetooth: hci4: unexpected event for opcode 0x0411 [ 167.757262][ T5971] usb 2-1: SerialNumber: syz [ 167.771599][ T7168] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 168.656177][ T7168] binder: BINDER_SET_CONTEXT_MGR already set [ 168.662623][ T7168] binder: 7167:7168 ioctl 4018620d 2000000002c0 returned -16 [ 169.039277][ T7200] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 169.060574][ T7200] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 169.237277][ T7200] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 169.243675][ T7200] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 169.263225][ T7200] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 169.428355][ T7200] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 169.444579][ T7200] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 169.451703][ T7200] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 169.475961][ T7200] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 169.490647][ T7200] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 169.792137][ T5945] IPVS: starting estimator thread 0... [ 169.803515][ T7213] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 169.944980][ T5971] usb 2-1: Error in usbnet_get_endpoints (-71) [ 169.962233][ T7215] IPVS: using max 57 ests per chain, 136800 per kthread [ 170.001672][ T5945] IPVS: starting estimator thread 0... [ 170.092400][ T7218] IPVS: using max 45 ests per chain, 108000 per kthread [ 170.109733][ T7217] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 170.138564][ T5971] usb 2-1: USB disconnect, device number 9 [ 170.313978][ T7225] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 170.324122][ T30] audit: type=1400 audit(1769071276.270:404): avc: denied { mounton } for pid=7223 comm="syz.3.346" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 171.477238][ T30] audit: type=1400 audit(1769071277.170:405): avc: denied { create } for pid=7234 comm="syz.3.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 173.112258][ T5895] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 173.658309][ T5895] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 173.667826][ T5895] usb 4-1: config 1 has no interface number 0 [ 173.695950][ T5895] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 173.713823][ T7276] process 'syz.0.358' launched './file2' with NULL argv: empty string added [ 173.747096][ T30] audit: type=1400 audit(1769071279.690:406): avc: denied { execute_no_trans } for pid=7275 comm="syz.0.358" path="/81/file2" dev="tmpfs" ino=492 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 173.788592][ T5895] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 173.912297][ T5895] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 173.924796][ T30] audit: type=1400 audit(1769071279.730:407): avc: denied { write } for pid=7277 comm="syz.1.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 174.099129][ T5895] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 174.154001][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.332262][ T5895] usb 4-1: Product: syz [ 174.336674][ T30] audit: type=1400 audit(1769071279.740:408): avc: denied { mount } for pid=7275 comm="syz.0.358" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 174.358963][ T5895] usb 4-1: Manufacturer: syz [ 174.368103][ T5895] usb 4-1: SerialNumber: syz [ 174.384573][ T7260] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 174.403006][ T30] audit: type=1400 audit(1769071279.790:409): avc: denied { read } for pid=7277 comm="syz.1.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 174.430438][ T30] audit: type=1400 audit(1769071279.840:410): avc: denied { write } for pid=7277 comm="syz.1.359" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 174.455591][ T30] audit: type=1400 audit(1769071280.290:411): avc: denied { ioctl } for pid=7275 comm="syz.0.358" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 174.611000][ T30] audit: type=1400 audit(1769071280.550:412): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 174.796137][ T7260] binder: BINDER_SET_CONTEXT_MGR already set [ 174.812773][ T7260] binder: 7258:7260 ioctl 4018620d 2000000002c0 returned -16 [ 175.131006][ T7300] FAULT_INJECTION: forcing a failure. [ 175.131006][ T7300] name failslab, interval 1, probability 0, space 0, times 0 [ 175.184624][ T7300] CPU: 0 UID: 0 PID: 7300 Comm: syz.1.363 Tainted: G L syzkaller #0 PREEMPT(full) [ 175.184654][ T7300] Tainted: [L]=SOFTLOCKUP [ 175.184660][ T7300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 175.184669][ T7300] Call Trace: [ 175.184675][ T7300] [ 175.184683][ T7300] dump_stack_lvl+0x100/0x190 [ 175.184711][ T7300] should_fail_ex.cold+0x5/0xa [ 175.184731][ T7300] should_failslab+0xc2/0x120 [ 175.184754][ T7300] ? tomoyo_realpath_from_path+0xb6/0x690 [ 175.184773][ T7300] __kmalloc_noprof+0xf6/0x9c0 [ 175.184797][ T7300] ? tomoyo_realpath_from_path+0xb6/0x690 [ 175.184815][ T7300] tomoyo_realpath_from_path+0xb6/0x690 [ 175.184840][ T7300] tomoyo_path_number_perm+0x23c/0x580 [ 175.184865][ T7300] ? tomoyo_path_number_perm+0x22e/0x580 [ 175.184894][ T7300] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 175.184944][ T7300] ? find_held_lock+0x2b/0x80 [ 175.184968][ T7300] ? hook_file_ioctl_common+0x146/0x410 [ 175.184989][ T7300] ? __fget_files+0x215/0x3d0 [ 175.185014][ T7300] ? __fget_files+0x21f/0x3d0 [ 175.185039][ T7300] security_file_ioctl+0xd3/0x230 [ 175.185058][ T7300] __x64_sys_ioctl+0xb7/0x210 [ 175.185076][ T7300] do_syscall_64+0xc9/0xf80 [ 175.185098][ T7300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.185115][ T7300] RIP: 0033:0x7ff754b9acb9 [ 175.185130][ T7300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.185147][ T7300] RSP: 002b:00007ff75599d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 175.185165][ T7300] RAX: ffffffffffffffda RBX: 00007ff754e15fa0 RCX: 00007ff754b9acb9 [ 175.185176][ T7300] RDX: 0000000000008000 RSI: 000000000000ab07 RDI: 0000000000000003 [ 175.185186][ T7300] RBP: 00007ff75599d090 R08: 0000000000000000 R09: 0000000000000000 [ 175.185196][ T7300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.185205][ T7300] R13: 00007ff754e16038 R14: 00007ff754e15fa0 R15: 00007ffde297efe8 [ 175.185228][ T7300] [ 175.185235][ T7300] ERROR: Out of memory at tomoyo_realpath_from_path. [ 175.647005][ T7309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.365'. [ 176.222508][ T5971] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 176.285110][ T5895] usb 4-1: Error in usbnet_get_endpoints (-71) [ 176.314367][ T5895] usb 4-1: USB disconnect, device number 10 [ 176.383534][ T5971] usb 5-1: config 243 has an invalid interface number: 126 but max is 0 [ 176.392077][ T5971] usb 5-1: config 243 has no interface number 0 [ 176.416840][ T5971] usb 5-1: too many endpoints for config 243 interface 126 altsetting 212: 140, using maximum allowed: 30 [ 176.457432][ T5971] usb 5-1: config 243 interface 126 altsetting 212 has 0 endpoint descriptors, different from the interface descriptor's value: 140 [ 176.487811][ T5971] usb 5-1: config 243 interface 126 has no altsetting 0 [ 176.526225][ T5971] usb 5-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd [ 176.535761][ T5971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.564763][ T5971] usb 5-1: Product: syz [ 176.645709][ T5971] usb 5-1: Manufacturer: syz [ 176.811501][ T5971] usb 5-1: SerialNumber: syz [ 177.120135][ T5971] usb 5-1: USB disconnect, device number 14 [ 177.690154][ T7331] FAULT_INJECTION: forcing a failure. [ 177.690154][ T7331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.724379][ T7331] CPU: 0 UID: 0 PID: 7331 Comm: syz.1.371 Tainted: G L syzkaller #0 PREEMPT(full) [ 177.724400][ T7331] Tainted: [L]=SOFTLOCKUP [ 177.724403][ T7331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 177.724410][ T7331] Call Trace: [ 177.724413][ T7331] [ 177.724417][ T7331] dump_stack_lvl+0x100/0x190 [ 177.724437][ T7331] should_fail_ex.cold+0x5/0xa [ 177.724449][ T7331] _copy_from_user+0x2e/0xd0 [ 177.724465][ T7331] copy_msghdr_from_user+0x9f/0x4f0 [ 177.724478][ T7331] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 177.724495][ T7331] ___sys_sendmsg+0x106/0x1e0 [ 177.724507][ T7331] ? __pfx____sys_sendmsg+0x10/0x10 [ 177.724524][ T7331] ? find_held_lock+0x2b/0x80 [ 177.724547][ T7331] __sys_sendmsg+0x170/0x220 [ 177.724562][ T7331] ? __pfx___sys_sendmsg+0x10/0x10 [ 177.724584][ T7331] do_syscall_64+0xc9/0xf80 [ 177.724598][ T7331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.724610][ T7331] RIP: 0033:0x7ff754b9acb9 [ 177.724620][ T7331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.724630][ T7331] RSP: 002b:00007ff75599d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.724642][ T7331] RAX: ffffffffffffffda RBX: 00007ff754e15fa0 RCX: 00007ff754b9acb9 [ 177.724649][ T7331] RDX: 0000000000008010 RSI: 00002000000001c0 RDI: 0000000000000003 [ 177.724655][ T7331] RBP: 00007ff75599d090 R08: 0000000000000000 R09: 0000000000000000 [ 177.724662][ T7331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.724668][ T7331] R13: 00007ff754e16038 R14: 00007ff754e15fa0 R15: 00007ffde297efe8 [ 177.724681][ T7331] [ 177.900911][ T7333] befs: (nullb0): invalid magic header [ 178.176522][ T30] audit: type=1400 audit(1769071284.130:413): avc: denied { read } for pid=7339 comm="syz.4.376" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 178.202854][ T30] audit: type=1400 audit(1769071284.160:414): avc: denied { open } for pid=7339 comm="syz.4.376" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 178.892188][ T24] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 179.054346][ T30] audit: type=1400 audit(1769071284.990:415): avc: denied { map } for pid=7339 comm="syz.4.376" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 179.441384][ T5971] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 179.503524][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.522712][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 179.534691][ T24] usb 1-1: config 1 has no interface number 0 [ 179.542245][ T24] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.566293][ T24] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 179.567158][ T30] audit: type=1400 audit(1769071285.520:416): avc: denied { read } for pid=7355 comm="syz.2.378" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 179.643081][ T5971] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 179.651071][ T5971] usb 2-1: config 1 has no interface number 0 [ 179.662567][ T5971] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 179.684457][ T5971] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 179.686829][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 179.702460][ T30] audit: type=1400 audit(1769071285.550:417): avc: denied { open } for pid=7355 comm="syz.2.378" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 179.705732][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.726809][ T5971] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 179.752594][ T24] usb 1-1: Product: syz [ 179.756025][ T30] audit: type=1400 audit(1769071285.550:418): avc: denied { ioctl } for pid=7355 comm="syz.2.378" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 179.756891][ T24] usb 1-1: Manufacturer: syz [ 179.788865][ T5971] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 179.808347][ T24] usb 1-1: SerialNumber: syz [ 179.816360][ T5971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.832187][ T5971] usb 2-1: Product: syz [ 179.836347][ T5971] usb 2-1: Manufacturer: syz [ 179.850438][ T30] audit: type=1400 audit(1769071285.570:419): avc: denied { write } for pid=7355 comm="syz.2.378" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 180.085115][ T5971] usb 2-1: SerialNumber: syz [ 180.115831][ T7351] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 180.253632][ T7362] netlink: 20 bytes leftover after parsing attributes in process `syz.4.379'. [ 180.372423][ T7351] binder: BINDER_SET_CONTEXT_MGR already set [ 180.393427][ T7351] binder: 7350:7351 ioctl 4018620d 2000000002c0 returned -16 [ 180.895671][ T7367] : entered promiscuous mode [ 180.916847][ T30] audit: type=1400 audit(1769071286.800:420): avc: denied { mount } for pid=7364 comm="syz.2.380" name="/" dev="rpc_pipefs" ino=15314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 181.169613][ T24] cdc_ncm 1-1:1.1: SET_NTB_FORMAT failed [ 181.201896][ T24] cdc_ncm 1-1:1.1: bind() failure [ 181.228899][ T24] usb 1-1: USB disconnect, device number 12 [ 182.344769][ T5971] usb 2-1: Error in usbnet_get_endpoints (-71) [ 182.399272][ T5971] usb 2-1: USB disconnect, device number 10 [ 182.417836][ T30] audit: type=1400 audit(1769071288.370:421): avc: denied { mounton } for pid=7374 comm="syz.4.384" path="/proc/226/cgroup" dev="proc" ino=16398 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 182.521504][ T7393] netlink: 132 bytes leftover after parsing attributes in process `syz.1.387'. [ 182.733171][ T30] audit: type=1400 audit(1769071288.400:422): avc: denied { create } for pid=7374 comm="syz.4.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 184.322893][ T7421] netlink: 20 bytes leftover after parsing attributes in process `syz.0.393'. [ 184.677153][ T7423] netlink: 28 bytes leftover after parsing attributes in process `syz.4.394'. [ 186.002310][ T5897] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 186.197244][ T5897] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.289936][ T5897] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 186.320643][ T5897] usb 5-1: config 1 has no interface number 0 [ 186.326808][ T5897] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.337752][ T5897] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 186.412309][ T5897] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 186.421409][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.111183][ T5897] usb 5-1: Product: syz [ 187.116319][ T5897] usb 5-1: Manufacturer: syz [ 187.123710][ T5897] usb 5-1: SerialNumber: syz [ 187.161383][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 187.161399][ T30] audit: type=1326 audit(1769071293.110:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7436 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c719acb9 code=0x7fc00000 [ 187.302184][ T30] audit: type=1326 audit(1769071293.230:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7436 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f34c719acb9 code=0x7fc00000 [ 187.672518][ T5930] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 187.965962][ T5930] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 187.991247][ T5930] usb 2-1: config 1 has no interface number 0 [ 188.012237][ T5930] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 188.047274][ T5930] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 188.078100][ T5930] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 188.114873][ T5930] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 188.158093][ T5897] cdc_ncm 5-1:1.1: SET_NTB_FORMAT failed [ 188.174001][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.182038][ T5930] usb 2-1: Product: syz [ 188.184558][ T5897] cdc_ncm 5-1:1.1: bind() failure [ 188.209386][ T5897] usb 5-1: USB disconnect, device number 15 [ 188.228162][ T5930] usb 2-1: Manufacturer: syz [ 188.243930][ T5930] usb 2-1: SerialNumber: syz [ 188.284451][ T7442] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 189.312865][ T7442] binder: BINDER_SET_CONTEXT_MGR already set [ 189.319046][ T7442] binder: 7441:7442 ioctl 4018620d 2000000002c0 returned -16 [ 189.361260][ T30] audit: type=1326 audit(1769071295.310:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7453 comm="syz.0.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c719acb9 code=0x7fc00000 [ 189.397104][ T7458] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 189.414038][ T5930] usb 2-1: No status endpoint found [ 189.473662][ T30] audit: type=1326 audit(1769071295.420:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7453 comm="syz.0.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f34c719acb9 code=0x7fc00000 [ 190.775699][ T5930] usb 2-1: USB disconnect, device number 11 [ 190.893378][ T7479] bridge0: port 4(veth0_to_bridge) entered blocking state [ 190.910849][ T7479] bridge0: port 4(veth0_to_bridge) entered disabled state [ 190.926397][ T7479] veth0_to_bridge: entered allmulticast mode [ 190.938723][ T7479] veth0_to_bridge: entered promiscuous mode [ 191.826488][ T30] audit: type=1326 audit(1769071297.510:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7476 comm="syz.1.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff754b9acb9 code=0x7fc00000 [ 191.864317][ T7479] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 192.004095][ T30] audit: type=1326 audit(1769071297.750:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7476 comm="syz.1.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff754b9acb9 code=0x7fc00000 [ 192.009411][ T7479] bridge0: port 4(veth0_to_bridge) entered blocking state [ 192.027814][ T30] audit: type=1400 audit(1769071297.770:431): avc: denied { block_suspend } for pid=7480 comm="syz.3.411" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 192.034491][ T7479] bridge0: port 4(veth0_to_bridge) entered forwarding state [ 192.482242][ T5817] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 192.679609][ T5817] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.705735][ T5817] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 192.732042][ T5817] usb 4-1: config 1 has no interface number 0 [ 192.756027][ T5817] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.788058][ T5817] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 192.813797][ T5817] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 192.831562][ T5817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.844591][ T5817] usb 4-1: Product: syz [ 192.848872][ T5817] usb 4-1: Manufacturer: syz [ 192.859516][ T5817] usb 4-1: SerialNumber: syz [ 193.061538][ T7505] ./cgroup: Can't lookup blockdev [ 193.700603][ T5817] cdc_ncm 4-1:1.1: SET_NTB_FORMAT failed [ 193.726986][ T5817] cdc_ncm 4-1:1.1: bind() failure [ 193.759533][ T5817] usb 4-1: USB disconnect, device number 11 [ 193.831906][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.838329][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.333240][ T7514] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 194.789254][ T7515] veth1_macvtap: left promiscuous mode [ 194.976606][ T7515] macsec0: entered allmulticast mode [ 195.752600][ T7514] veth1_macvtap: entered promiscuous mode [ 195.758407][ T7514] veth1_macvtap: entered allmulticast mode [ 198.948770][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 198.961571][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 198.974037][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 198.986425][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 198.998825][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 199.011176][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 199.023532][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 199.035928][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 199.048293][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 199.060705][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 202.472108][ C0] sched: DL replenish lagged too much [ 203.952138][ C1] net_ratelimit: 12423 callbacks suppressed [ 203.952159][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.970524][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.982933][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.995469][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 204.007882][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 204.020285][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 204.032663][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 204.045015][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 204.057374][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 204.069762][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.962170][ C1] net_ratelimit: 16844 callbacks suppressed [ 208.962190][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.962890][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.968475][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.980514][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.992335][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 209.005430][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.016314][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 209.028344][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.040153][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 209.053168][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.972278][ C0] net_ratelimit: 17718 callbacks suppressed [ 213.972298][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.972425][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 213.978651][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 213.990476][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 214.002614][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.014459][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 214.027443][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.038307][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 214.050389][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 214.062318][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 215.251896][ T7514] macsec0: left allmulticast mode [ 216.903054][ T7514] veth1_macvtap: left allmulticast mode [ 218.982208][ C0] net_ratelimit: 19317 callbacks suppressed [ 218.982229][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.982238][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.982621][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 218.988499][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.000442][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 219.012317][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b0:ac:be:eb:bf, vlan:0) [ 219.024405][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 219.036385][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 219.048224][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 219.060330][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.992631][ C1] net_ratelimit: 18776 callbacks suppressed [ 223.992634][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b0:ac:be:eb:bf, vlan:0) [ 223.992649][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 223.993044][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 223.998954][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 224.010955][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 224.023030][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.035067][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 224.047831][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.058787][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 224.070771][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.002256][ C1] net_ratelimit: 18197 callbacks suppressed [ 229.002277][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 229.002913][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b0:ac:be:eb:bf, vlan:0) [ 229.008528][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 229.020619][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 229.032638][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 229.044557][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.056334][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 229.069408][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.080389][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 229.092321][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.012092][ C1] net_ratelimit: 18165 callbacks suppressed [ 234.012112][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.012220][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b0:ac:be:eb:bf, vlan:0) [ 234.018435][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 234.030341][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.042288][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.054403][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.066248][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 234.079079][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.090092][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.102188][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.022170][ C1] net_ratelimit: 18494 callbacks suppressed [ 239.022190][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 239.022985][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.028413][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 239.040497][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.052444][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 239.064258][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.076149][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 239.088807][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b0:ac:be:eb:bf, vlan:0) [ 239.100207][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 239.112110][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.032190][ C0] net_ratelimit: 19175 callbacks suppressed [ 244.032210][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.032248][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 244.039466][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.050511][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.062566][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.074486][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 244.086305][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.098225][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.110869][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b0:ac:be:eb:bf, vlan:0) [ 244.122279][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 249.042216][ C0] net_ratelimit: 18574 callbacks suppressed [ 249.042236][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.042392][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 249.049667][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.060525][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.072668][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.084498][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 249.096359][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.108258][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.121056][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b0:ac:be:eb:bf, vlan:0) [ 249.132308][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 254.052112][ C0] net_ratelimit: 18558 callbacks suppressed [ 254.052133][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.052228][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 254.059350][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.070505][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.082520][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.094501][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 254.106225][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.118238][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.130820][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b0:ac:be:eb:bf, vlan:0) [ 254.142315][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 255.947750][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.968681][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.062090][ C1] net_ratelimit: 18467 callbacks suppressed [ 259.062112][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.062947][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b0:ac:be:eb:bf, vlan:0) [ 259.068467][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 259.080403][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.092344][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.104445][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.116298][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 259.129647][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.140270][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.152351][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.072311][ C1] net_ratelimit: 18390 callbacks suppressed [ 264.072311][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.072334][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.079714][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.090723][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 264.102635][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.114450][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.126441][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.138449][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 264.151032][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b0:ac:be:eb:bf, vlan:0) [ 264.162294][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.082245][ C0] net_ratelimit: 18417 callbacks suppressed [ 269.082270][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.082348][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 269.089494][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.100594][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.112609][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.124574][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 269.136332][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.148305][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.161079][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b0:ac:be:eb:bf, vlan:0) [ 269.172506][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 274.092127][ C0] net_ratelimit: 18432 callbacks suppressed [ 274.092147][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.092363][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 274.098439][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.110364][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.123252][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b0:ac:be:eb:bf, vlan:0) [ 274.134473][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 274.146326][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.158277][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.170375][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.182281][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 279.102435][ C1] net_ratelimit: 18073 callbacks suppressed [ 279.102455][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 279.103324][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.108743][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.120851][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.132775][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 279.144579][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.156533][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.169252][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b0:ac:be:eb:bf, vlan:0) [ 279.180595][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 279.192532][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.112171][ C1] net_ratelimit: 18023 callbacks suppressed [ 284.112190][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 284.112301][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.118463][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.130439][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.142510][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 284.154954][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b0:ac:be:eb:bf, vlan:0) [ 284.166300][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.178316][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.190365][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 284.202420][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.122117][ C1] net_ratelimit: 18175 callbacks suppressed [ 289.122136][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 289.122257][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.128370][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.140540][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.152546][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 289.164350][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.176212][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.189184][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b0:ac:be:eb:bf, vlan:0) [ 289.200386][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 289.212339][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.132087][ C1] net_ratelimit: 18439 callbacks suppressed [ 294.132107][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.132435][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.138411][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 294.150398][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.162218][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.174222][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.186239][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 294.199023][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b0:ac:be:eb:bf, vlan:0) [ 294.210049][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.222171][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.142134][ C1] net_ratelimit: 18114 callbacks suppressed [ 299.142154][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 299.143008][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b0:ac:be:eb:bf, vlan:0) [ 299.148384][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.160482][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.172611][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 299.184625][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.196329][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.209614][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.220391][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 299.232357][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.152101][ C1] net_ratelimit: 18626 callbacks suppressed [ 304.152119][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.152122][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 304.152414][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.158368][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.170475][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 304.183182][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b0:ac:be:eb:bf, vlan:0) [ 304.194301][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.206328][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.218363][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 304.230368][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.162199][ C0] net_ratelimit: 18366 callbacks suppressed [ 309.162218][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.162280][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.169448][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b0:ac:be:eb:bf, vlan:0) [ 309.180652][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 309.192555][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.204496][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.216606][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.228444][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 309.241389][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.252292][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.172292][ C1] net_ratelimit: 18069 callbacks suppressed [ 314.172313][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.172969][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b0:ac:be:eb:bf, vlan:0) [ 314.178697][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 314.190624][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.202558][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.214791][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.226648][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 314.239532][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.250409][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.262619][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.956609][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.977792][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.182056][ C1] net_ratelimit: 18223 callbacks suppressed [ 319.182076][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.182284][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.188401][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 319.200921][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b0:ac:be:eb:bf, vlan:0) [ 319.212278][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.224270][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.236328][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 319.248276][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.260082][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.272956][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.192165][ C0] net_ratelimit: 17173 callbacks suppressed [ 324.192183][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.192250][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 324.199295][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b0:ac:be:eb:bf, vlan:0) [ 324.210521][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.222555][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.234557][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 324.246500][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.258283][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.271308][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.282371][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 329.202406][ C1] net_ratelimit: 17391 callbacks suppressed [ 329.202427][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 329.202489][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.208708][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.221767][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.233058][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 329.244767][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.256618][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.269567][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.280565][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 329.293140][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b0:ac:be:eb:bf, vlan:0) [ 334.212259][ C1] net_ratelimit: 17121 callbacks suppressed [ 334.212280][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 334.212627][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b0:ac:be:eb:bf, vlan:0) [ 334.218588][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 334.230593][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 334.242448][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 334.254647][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.266419][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 334.279434][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.290343][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 334.302433][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.222357][ C1] net_ratelimit: 17806 callbacks suppressed [ 339.222377][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 339.222468][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.228692][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 339.240684][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.252458][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 339.265525][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.276390][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 339.289081][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b0:ac:be:eb:bf, vlan:0) [ 339.300315][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 339.312311][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 341.392039][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 341.399009][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5930/1:b..l [ 341.407337][ C1] rcu: (detected by 1, t=10503 jiffies, g=18341, q=1260 ncpus=2) [ 341.415139][ C1] task:kworker/1:7 state:R running task stack:24424 pid:5930 tgid:5930 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 341.429720][ C1] Workqueue: events_power_efficient gc_worker [ 341.435802][ C1] Call Trace: [ 341.439073][ C1] [ 341.441999][ C1] ? __schedule+0xf65/0x5e10 [ 341.446592][ C1] __schedule+0xfe4/0x5e10 [ 341.451030][ C1] ? __pfx___schedule+0x10/0x10 [ 341.455882][ C1] ? mark_held_locks+0x40/0x70 [ 341.460640][ C1] preempt_schedule_irq+0x50/0x90 [ 341.465657][ C1] irqentry_exit+0x17b/0x670 [ 341.470243][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 341.476218][ C1] RIP: 0010:lock_release+0x19e/0x2e0 [ 341.481495][ C1] Code: ff 65 0f c1 05 1b 5d 01 12 83 f8 01 0f 85 f7 00 00 00 9c 58 f6 c4 02 0f 85 0c 01 00 00 41 f7 c6 00 02 00 00 0f 85 99 00 00 00 <48> 8b 44 24 10 65 48 2b 05 ad 15 01 12 0f 85 0f 01 00 00 48 83 c4 [ 341.501099][ C1] RSP: 0000:ffffc9000472fa98 EFLAGS: 00000206 [ 341.507164][ C1] RAX: 0000000000000046 RBX: ffffffff8e5e3360 RCX: ffffc9000472faa4 [ 341.515127][ C1] RDX: 0000000000000002 RSI: ffffffff8dc1ea56 RDI: ffffffff8bfa35a0 [ 341.523091][ C1] RBP: ffffffff89981269 R08: 0000000000000001 R09: 0000000000000000 [ 341.531055][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802be58000 [ 341.539020][ C1] R13: 0000000000040000 R14: 0000000000000206 R15: 0000000000000003 [ 341.546986][ C1] ? gc_worker+0x949/0x1630 [ 341.551502][ C1] gc_worker+0x94e/0x1630 [ 341.555831][ C1] ? __pfx_gc_worker+0x10/0x10 [ 341.560587][ C1] ? process_one_work+0x80b/0x1840 [ 341.565696][ C1] ? rcu_is_watching+0x12/0xc0 [ 341.570461][ C1] process_one_work+0x9c2/0x1840 [ 341.575407][ C1] ? __pfx_process_one_work+0x10/0x10 [ 341.580781][ C1] ? assign_work+0x19c/0x250 [ 341.585363][ C1] worker_thread+0x5da/0xe40 [ 341.589957][ C1] ? kthread+0x17d/0x730 [ 341.594189][ C1] ? __pfx_worker_thread+0x10/0x10 [ 341.599295][ C1] kthread+0x3b3/0x730 [ 341.603365][ C1] ? __pfx_kthread+0x10/0x10 [ 341.607944][ C1] ? ret_from_fork+0x79/0xaf0 [ 341.612614][ C1] ? ret_from_fork+0x79/0xaf0 [ 341.617290][ C1] ? rcu_is_watching+0x12/0xc0 [ 341.622047][ C1] ? __pfx_kthread+0x10/0x10 [ 341.626629][ C1] ret_from_fork+0x754/0xaf0 [ 341.631217][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 341.636325][ C1] ? __switch_to+0x7b9/0x10c0 [ 341.640998][ C1] ? __pfx_kthread+0x10/0x10 [ 341.645580][ C1] ret_from_fork_asm+0x1a/0x30 [ 341.650346][ C1] [ 344.232319][ C1] net_ratelimit: 17329 callbacks suppressed [ 344.232340][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 344.232899][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b0:ac:be:eb:bf, vlan:0) [ 344.238699][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 344.250686][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 344.262550][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 344.274647][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.286469][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 344.298371][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.310435][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 344.322377][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.242241][ C0] net_ratelimit: 17468 callbacks suppressed [ 349.242260][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 349.242299][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 349.248702][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.260514][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0) [ 349.272524][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.284653][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 349.297040][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.308750][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 349.321685][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.332679][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:c1:74:84:1c:ef, vlan:0)