last executing test programs: 1m7.553586057s ago: executing program 2 (id=723): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000240)='\x00', 0x1, 0x200000000000000, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @private2, 0x5}, 0x1c) 1m6.595885967s ago: executing program 2 (id=728): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000007c0)={0x1e0, r4, 0x0, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x1d}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6d}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8000}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1a4, 0x3, 0x0, 0x1, [{0xd4, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xcd, 0x2, "39dff6c583b97a9fca990e01a82764492b4e44c1258474bc43e36130f7de719bb51b7483dadac4186c966d30ab622af315956f733acbe35eb5e2878321f2bd56b0ec6e6ea473d269ef74192185ffdad3b991389b51678e5e8ebb1ff0ba0fde7760f75472f0209a0d6daed4fd019d3d8144b7540eafdf6fba5e2ed2a8f35ebe76f1842ce143d75a308b8bea0298309eec0611eb0c87d472b72470581dc37741ccf6ba02f2d8dba193bf63713a80d16c62ff5f957a9ecaea9da22135449d7c2c19e3f529c2143a27f6f7"}}, {0xc0, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xbc, 0x2, "65e065160dd45659b35a254400b5e6ceee9411a53833e62b4fb1781ac11e99bfc1b7bd96d64b8f510f80f498db48e58fa005ccbd7c0ceee6de7f84828f322669ee0aca2bdfc788f89234699fef98547dfe42f4283721aa3c556daade9c4b0c535e2d1cf0ac143674db6f20c938150e7b50f0f5d62330f182b2c9946b700c059c3fd6de8250cffe6f245eb641fc07dfaa968042419ecef5a17856b62f3574acd8fe0eab6d00d19bd88d4ec8f3f36dba78fc4118b1492ae5d6"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}}]}]}, 0x1e0}}, 0x8c0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000540)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r5}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r7}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}}, 0x1c}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r9 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x40, 0x21, 0x74, {0x74, 0x10, "b1734f0066dd4fe5b51ea96652cf860c3a29b8e56b779be35db610a7645b6c8f34ef24f171698eba06ed171c7c016b77ab8011f713b07fe68a5838fedd41a97eeb540ec81a8fb9945190354cdcbfec5f974970ec3184a6445bbca4afd3120652e7de21daab3a09f77f047ad9fb2ef526cdce"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x86c}}}, &(0x7f0000000300)={0x1c, &(0x7f0000000180)={0x40, 0xa, 0xfd, "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"}, &(0x7f0000000d40)={0xa1, 0x1, 0x400, "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"}, &(0x7f00000002c0)={0x21, 0x0, 0x4, "8b7bf336"}}) ioctl$SNDRV_PCM_IOCTL_RESUME(r9, 0x4147, 0x0) r10 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x10b403) ioctl$I2C_RDWR(r10, 0x707, &(0x7f0000000000)={&(0x7f0000000380)=[{0x1, 0xc401, 0x2, &(0x7f0000000780)="2fa4"}], 0x1}) 1m3.893208788s ago: executing program 2 (id=744): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2340, 0x0) close(r1) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x14d, 0x4000}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x8001, 0x0) ioctl$PTP_EXTTS_REQUEST2(r7, 0x40103d0b, &(0x7f0000000180)={0xc, 0x1}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000400)={0x40, r8, 0x1, 0x0, 0x25dfdbfd, {{0x2}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x9, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]]}, 0x40}}, 0x20000000) sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000226bd7000fedbdf253d00000008000300", @ANYRES32=r10, @ANYBLOB="0c009900040000005a364aab66a61c00000008005d0001000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x44081) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r12, 0x3f, 0x40206}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}]}}}]}, 0x3c}, 0x1, 0x4000, 0x0, 0x44000}, 0x0) 1m2.438726015s ago: executing program 2 (id=746): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000300)=@newtaction={0x94, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x80, 0x1, [@m_bpf={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x1, 0x2, 0x0, 0x2, 0x2, 0xfffe}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0xa719}) ioctl(r4, 0x8b32, &(0x7f0000000040)) sendmsg$key(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r8, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010009bd7000fbdbdfa5550000000800030044fe34b25a08f6e5f6672c809876b21ea0d250704804aaa81c5a9d661e19743949525f22e1d127812c744120b4681173a1d1905bdfe4887a52487e08f978577b6b0c3412d39614db35150e27bbebc6177784dd76aa833a5d91b24e7b9e38e8ec27290d2a06ebfa57c00bc4aa5ece550592bb86bdc4dfc870acf333c03c0562ab5b454245c358089866cc14343238ccb32046a42a23a1cd0c041e0cd82887b703bc4b36", @ANYRES32=r9, @ANYBLOB="0c0099000b00000043000400"], 0x28}, 0x1, 0x0, 0x0, 0x40080a4}, 0x810) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000fedbdf2555000000080001005c00000008000300", @ANYRES32=r9], 0x30}, 0x1, 0x0, 0x0, 0x40895}, 0x4040040) close_range(r5, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYRESOCT=r9], &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x448}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x40a}}]}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x70}}, 0x8000) sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x44040) 58.517064203s ago: executing program 2 (id=752): socket$nl_generic(0x10, 0x3, 0x10) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)={0x58, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x17}}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x58}}, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r8, 0x20000000000002a2, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0x0, r7, &(0x7f0000000100), 0x0, 0x8000}]) r9 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r9, 0x0) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r10 = socket(0x1e, 0x1, 0x0) connect$tipc(r10, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r10, &(0x7f0000000340), 0x2000011a) socket$nl_generic(0x10, 0x3, 0x10) 52.118704296s ago: executing program 2 (id=755): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$XFS_IOC_GOINGDOWN(0xffffffffffffffff, 0x8004587d, &(0x7f00000037c0)=0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmmsg(r0, &(0x7f0000003680)=[{{&(0x7f00000015c0)=@sco, 0x80, &(0x7f0000001800), 0x0, &(0x7f0000001840)=[{0x90, 0x114, 0x9, "7e529f9898b30b8cf6d5c43d0a96daa18536f79444b7a81d020b3df5c5f4628781fe6715be73dc019696f595798d5c20d4e9cd6d2ddc303d9635fb79c72eea11932ae85b9925b8b6b896b27f65a2b141c3babb9eb3fadadfbe1fb6ee792740f5f95f74960627f31391597eda7e3f25192323a1e093693c34b93bee6f5b635d45"}, {0x28, 0x113, 0x4, "679b275eefa8ef2153a3af096607d4fc6946"}, {0x30, 0x101, 0x2, "c59da62f71c43980e7c90c12de3fa0d360dc983d8296d0862d99ac979b852a"}, {0x10, 0x3a, 0x8862}], 0xf8}}, {{&(0x7f0000001a00)=@ieee802154={0x24, @none={0x0, 0xffff}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x230}}], 0x3, 0x4000) syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [], {0x95, 0x0, 0x74}}, 0x0, 0xc, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x39}, 0x94) msgrcv(0x0, 0x0, 0x0, 0x3, 0x5800) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r5 = fanotify_init(0x81, 0x40000) fanotify_mark(r5, 0x105, 0x40001032, r4, 0x0) read$FUSE(r5, &(0x7f0000002300)={0x2020}, 0x2020) shutdown(0xffffffffffffffff, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) 46.7346244s ago: executing program 0 (id=764): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000240)=ANY=[]) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fcdbdf2501000000000000000c41000000030014"], 0x30}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019c80)=""/102400, 0x19000) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, 0x0) request_key(&(0x7f00000000c0)='cifs.idmap\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0) request_key(&(0x7f0000000140)='id_legacy\x00', 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r5, 0xc00c620f, &(0x7f00000004c0)={r2}) 42.70711101s ago: executing program 0 (id=769): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)="89000000150081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800", 0x4e}, {&(0x7f0000000180)="61d039622fca5c64a169be49e15d04271baa03ca41a9f0af2b2b589b3c59e7841efa59ff5387e9a0f10d405ed691ca81b9f21f9f2230812e5946f5", 0x3b}], 0x2}, 0x0) 41.930843558s ago: executing program 0 (id=771): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x244}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, 0x0}}], 0x1, 0x20008050) (async) r1 = socket$inet6(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r2, 0xfc) (async, rerun: 64) shutdown(r2, 0x0) (async, rerun: 64) listen(r2, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fddbdf250500000008000380040001000c00018008000100", @ANYRES32=r6, @ANYBLOB="5b7198bf886060440fa55cd92b1627149053ff9bb56c4ae0699eb18603e4e691724c281a59c6c9dfa49c445d3b9883f02b8a7efc4c652bef6c9e360c5de2fe1c91629049902ab224f45a0361191d670d14aea1612f3f52cad9bde5424bfc192590bcbafd0b49d58bd57002327366daa198b26b88213f0b149fcb3b446086d5e165ed6b1120373dcfa777ee73823b848e343d05e116f3b38580d0f5f38071bc4dca2ce12d933dfb269fa66b93da388f5fe12dcea79918b6143ae0a92789b69d52de2469eb6ad9000000"], 0x28}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4044094) getsockopt$bt_hci(r1, 0x84, 0x82, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) (async) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000100)={0x2, 0x0, r7}) ioctl$VHOST_SET_MEM_TABLE(r9, 0x4008af03, &(0x7f00000015c0)={0x5, 0x0, [{0x9000, 0x9a, &(0x7f0000000240)=""/154}, {0xe000, 0xfc, &(0x7f0000001300)=""/252}, {0x30000, 0x50, &(0x7f0000000140)=""/80}, {0x41000, 0x98, &(0x7f0000001400)=""/152}, {0x6000, 0xe8, &(0x7f00000014c0)=""/232}]}) (async) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) (async, rerun: 64) r10 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x891}, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 40.397493996s ago: executing program 0 (id=774): syz_open_dev$sndctrl(0x0, 0x9, 0x400000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="e8743ccd629b74eacd5994939f10c0333142623daea9a202c7df29ea40afb30f0f5d078cfb5a1e9211424762689c86b94760a523e2b081eb0200a6b89460fcc8ebd8d77e4df19e193a874f5851615f14996783ee4e5181ce70b901095076549552dbbde5efa3a52bdbed79ac97866c239ef6f78305d8f48428ee8eeac496b73cddb833429a90ac472fedbeb92380cc9f618298e4c3114330b1641d7657fddd1e8cda2767d586a2f7ba15b8d91185db8d2ff141ef12ef24e463ec4b66960c35010ff44ee833145232769baf34fb057f107d7d0d1ef20706882f3d0e994e9bc2ceb306c16f0692ff1ed5907d9141ba096f39c923bdd830c6d1f2bac87d432e69123ecc15cb904f21"]) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) r5 = socket(0x26, 0x2, 0x10000) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000080)={0x20, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x10, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r6, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f00000014c0)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) close_range(r3, 0xffffffffffffffff, 0x0) r7 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0x1f29, 0xc000, 0x2, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') socket$nl_generic(0x10, 0x3, 0x10) 36.760398679s ago: executing program 32 (id=755): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$XFS_IOC_GOINGDOWN(0xffffffffffffffff, 0x8004587d, &(0x7f00000037c0)=0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmmsg(r0, &(0x7f0000003680)=[{{&(0x7f00000015c0)=@sco, 0x80, &(0x7f0000001800), 0x0, &(0x7f0000001840)=[{0x90, 0x114, 0x9, "7e529f9898b30b8cf6d5c43d0a96daa18536f79444b7a81d020b3df5c5f4628781fe6715be73dc019696f595798d5c20d4e9cd6d2ddc303d9635fb79c72eea11932ae85b9925b8b6b896b27f65a2b141c3babb9eb3fadadfbe1fb6ee792740f5f95f74960627f31391597eda7e3f25192323a1e093693c34b93bee6f5b635d45"}, {0x28, 0x113, 0x4, "679b275eefa8ef2153a3af096607d4fc6946"}, {0x30, 0x101, 0x2, "c59da62f71c43980e7c90c12de3fa0d360dc983d8296d0862d99ac979b852a"}, {0x10, 0x3a, 0x8862}], 0xf8}}, {{&(0x7f0000001a00)=@ieee802154={0x24, @none={0x0, 0xffff}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x230}}], 0x3, 0x4000) syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [], {0x95, 0x0, 0x74}}, 0x0, 0xc, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x39}, 0x94) msgrcv(0x0, 0x0, 0x0, 0x3, 0x5800) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r5 = fanotify_init(0x81, 0x40000) fanotify_mark(r5, 0x105, 0x40001032, r4, 0x0) read$FUSE(r5, &(0x7f0000002300)={0x2020}, 0x2020) shutdown(0xffffffffffffffff, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) 36.678344489s ago: executing program 3 (id=778): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'netdevsim0\x00'}) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) syz_io_uring_setup(0x1b2a, &(0x7f0000000000)={0x0, 0x47d3, 0x200, 0x1, 0x3d1}, &(0x7f0000000140), &(0x7f0000000180)) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x4, @local, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r1, &(0x7f0000000300), 0x48, 0x3b00, 0x0, 0xfffffffffffffe47) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpgrp(0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1a, 0x9, 0xe08, 0xbe, 0x4000, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, 0x0, 0x20008000) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, &(0x7f0000000400)) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000010}, 0x8854) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000440), &(0x7f0000000480)=0x4) 35.528231752s ago: executing program 0 (id=779): r0 = socket$netlink(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES8=r3, @ANYRES16=r1, @ANYBLOB="070e2dbd7000ffdbdf258300000008000300", @ANYRES32=r3], 0x110c}}, 0x20000004) 33.552299541s ago: executing program 3 (id=781): open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8000) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') fsmount(0xffffffffffffffff, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) io_setup(0x1, &(0x7f0000000380)=0x0) io_submit(r8, 0x0, &(0x7f0000002700)) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000ffdbdf250a0000000000000008000500", @ANYRES32=r7, @ANYBLOB="b88079f4db21d0608285953aae4d6214f1a48cac4173f228f25096c39737af06231ebbeb2dc3f3b97c2ba0bbcc1c27425cb150900da0c8c85e168916ce1a093d50f4175029e7dec0657f657cf50ef7b95e1477b7cff2e749d35b00221be634b1d5f951069376b5d318f731ae0ffa1318c5ebda88e74304faef4a21d8a80d1fb3ff91c81fe53a2077da3f6511b089207e0c570c98b4b3211ad1d77173d782fb371f536650e45e"], 0x20}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r4, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'sit0\x00'}) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) io_setup(0x73, &(0x7f0000000040)=0x0) io_submit(r10, 0x3, &(0x7f00000003c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x4, r5, &(0x7f0000000500)="750e1bacee0b2fadc5a0738f50f6aa05ce5c8c3f48f0b968f2aff3e97354043821a1f927bad9e2fe14867bc52c5c5be34667e5d645ff471c9ba5a1c12701459baf143c0a214c04f45cc6b01ed3270e7c899cd24ed82a9dd8eae65d2111643292661a770b1aafc464c9a1f0d292769e4809f4fdd9e1051c977dc54cd14bfef44cabc04ce5a202deb23817c18df3c002930130732e2ee0772c59435142604749f25af74ffae37743b9cbb8935eb78d04a48fa2dddbdc4f4d3a5f", 0xb9, 0x0, 0x0, 0x2}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x5, r6, &(0x7f00000005c0)="465eafc8174b85678523831e47921144e23d6c9081424496f67425ffa8f993c9d16b97f71b6569d6504b978e2cce0364a35bd454be40dbb2476de8cac3cb5c9a51e5815d88d12cedd9ec1dba6e5004480f71ec3af9e2cc71f4761efe0e7ff9d71cb8a212cdcb2aa7164767f8516f5f910cda2628e095c17437d8bd619094c66dbc5a1b15b94deb6afc92d86ba19eb90b638184bc8caefc8897a1871aee6eaed5d4da0886381ff85f9e69acb7e100f22444d5b46d25de40adcf873157f835f31b6e865b6352c8592d41951d719a567f939bacbcd1a27da1649e3cce875c890ec5f96593e3e477da256403d4", 0xeb, 0x101, 0x0, 0x3, r3}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x8, 0x3ff, r1, &(0x7f0000000440)="6282c9c8388a9d530291dea8a9a87cb7b25e52bea1248ebbf790d6b712efcb3414f9e4506444a8215d30334c9e0dcb37ae62a97ad358df584f7f869fdf45140bc75583a4946b91bef9888b6985de512bc0cf015aad9d542c4922e45687ef14805c598ed856dec4f36c279a98da83ed7ae945f36950", 0x75, 0x5}]) open(&(0x7f00000000c0)='./file0\x00', 0x43d040, 0x98) 31.923838907s ago: executing program 0 (id=782): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000180)="ff5fb99772024dca4128654351fb3280df659b977f16d875fcc707b3cbb7b7a9c1d65d36636748dffc9414d25c561e46fe57c40e41404929394b03cdee6a1b0981334afa94d03d91841c75a69c2069ba4bbee2bf537a1fc5b34c0c5058d862", 0x800, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r2}, 0x38) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'veth1_virt_wifi\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r1, r3, 0x25, 0x4, @val=@tcx}, 0x1c) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r4, r5, 0x4, r1}, 0x10) 28.729807309s ago: executing program 3 (id=785): syz_open_dev$sndctrl(0x0, 0x9, 0x400000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) r5 = socket(0x26, 0x2, 0x10000) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000080)={0x20, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x10, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r6, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f00000014c0)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) close_range(r3, 0xffffffffffffffff, 0x0) r7 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0x1f29, 0xc000, 0x2, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') socket$nl_generic(0x10, 0x3, 0x10) 28.613129719s ago: executing program 1 (id=786): socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f0000000000)={{0x2, 0x4e21, @loopback}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'bridge0\x00'}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) open(&(0x7f0000001100)='./file1\x00', 0x6c842, 0x157) signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f00003b6000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1e64, &(0x7f0000000040)={0x0, 0xc89a, 0xc000, 0x7fff, 0x65}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) r6 = memfd_create(&(0x7f0000000580)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xd9\xb5\x00\x00$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xab\x00\xd7pB\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\x00\x00\x00\x00+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEGG\x97&\xef\x8e!}a\xff\xff\x00\x00\x90\xd7;\x12lE\x0es\xb7\xe9$=\xe0\x98E\xdc\x01\x9f\xb7\x10\xe8\x94\xa8\x9c>\x87\xfd\x864\xfaT!\xdb\x98\xaa\xb1\x8b\x99\x8b\x1e\xd2\xcb\xfduaO\x18\xc6\xc0\xb3hv%\v\x941\xdeL\x92-\xba\x10\x96eA\x11\x1a\x11\xf7q\b]\xe7v\'\xcf\xb9b%\xff\xa8\x99L\xa23N*\x1ag\x99\x8e@\x80-E&\x99\b\xebW\x19WG\xb3\x88\x1e<\\g\x1959\xc9\xfb\x91\xa3\xe0bp', 0x4) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0xc71, 0x2}) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x5}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 27.29194177s ago: executing program 3 (id=787): r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setsig(r0, 0xa, 0x1d) r1 = fanotify_init(0x1a, 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003e40)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) fanotify_mark(r1, 0x641, 0x1028, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video(0x0, 0x5, 0x49a602) ioctl$FE_DISEQC_SEND_MASTER_CMD(0xffffffffffffffff, 0x40076f3f, &(0x7f0000000040)={'\x00', 0xfffffffffffffe09}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r6, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x1, 0x0, @msi={0x1ff, 0x0, 0x2, 0x1}}]}) ioctl$KVM_IRQ_LINE_STATUS(r6, 0xc008ae67, &(0x7f0000000140)={0x0, 0x401}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x800) recvmmsg$unix(r8, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) fanotify_mark(r1, 0x69, 0x40000038, 0xffffffffffffffff, 0x0) fcntl$setlease(r0, 0x400, 0x1) creat(0x0, 0x0) 26.633005732s ago: executing program 4 (id=788): syz_open_dev$sndctrl(0x0, 0x9, 0x400000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) r5 = socket(0x26, 0x2, 0x10000) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000080)={0x20, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x10, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f00000014c0)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) close_range(r3, 0xffffffffffffffff, 0x0) r6 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0x1f29, 0xc000, 0x2, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') socket$nl_generic(0x10, 0x3, 0x10) 22.788399637s ago: executing program 3 (id=789): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005480)=ANY=[@ANYBLOB="1c0000002c0007012bbd7000ffdbdf21027c000008000180c02c18c7"], 0x1c}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000bc0)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x20, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xe, 0xffff}, {0xe}}}, 0x24}}, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x81f}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) connect$rxrpc(r2, &(0x7f0000000340)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e20, @rand_addr=0x64010101}}, 0x24) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000100)={0x0, 'veth1_to_batadv\x00', {0x2}, 0xfff}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x7, &(0x7f0000000300)=[{0x2, 0x7, 0x95, 0x4584}, {0x3ff, 0x10, 0x6, 0xd}, {0x0, 0xb, 0x5, 0xe66}, {0x0, 0xf, 0x36, 0x7fff}, {0x0, 0x4a, 0x4, 0xd649}, {0x6, 0x78, 0x2, 0x401}, {0xf13c, 0x7, 0x2, 0x8001}]}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"/521, @ANYRES32=0x0, @ANYBLOB="010000000300000000000000000000000800030011000000"], 0x54}, 0x1, 0x0, 0x0, 0x44044}, 0x20004010) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102030109022400010000000009040000025c291d0009050900000000000009050b01"], 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) 22.626507126s ago: executing program 1 (id=790): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r0, &(0x7f0000002140)=""/17, 0x11, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000080)={0x6, 0x4, 0x2, 0x40, 0x1f, 0x2}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$xdp(0x2c, 0x3, 0x0) socket(0x5, 0x5, 0x8) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1003}, 0x4) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x7d) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @private1, 0x0, 0x0, 0x0, 0x500, 0x0, 0x80040306}) 21.363719541s ago: executing program 4 (id=791): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b19, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x80) listen(0xffffffffffffffff, 0xf65a) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x101}}, './file0\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c00188008000140a080000008000240000000020800034000000002240001801400018008000100e000000108000200e00000010c0002800500010000000000040016404400108008000140fffff800080002400000000108000140ffff1fc508000140000006870800014000000004080003"], 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x0) write$binfmt_format(r5, &(0x7f00000002c0)='-1\x00', 0x3) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r0, r8, 0x25, 0x4, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8}}, 0x40) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x4b) 21.155735192s ago: executing program 1 (id=792): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0xcc, 0xffffffff}, 0x3c) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ac2000/0x2000)=nil, 0x4000}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x6c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x8010) r4 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000340)={0xc3, 0x40, {0xffffffffffffffff}, {}, 0x10000, 0x3}) get_robust_list(r6, &(0x7f0000000540)=&(0x7f0000000500)={&(0x7f0000000200)={&(0x7f0000000380)}, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)}}, &(0x7f0000000580)=0x18) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) shmat(r4, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000001, 0x20031, 0xffffffffffffffff, 0xec785000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000140600000fff07006706000020000000350200000ee60000bf25000000000000bd350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad530100000000008404000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x94) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c) 16.467976131s ago: executing program 33 (id=782): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000180)="ff5fb99772024dca4128654351fb3280df659b977f16d875fcc707b3cbb7b7a9c1d65d36636748dffc9414d25c561e46fe57c40e41404929394b03cdee6a1b0981334afa94d03d91841c75a69c2069ba4bbee2bf537a1fc5b34c0c5058d862", 0x800, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r2}, 0x38) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'veth1_virt_wifi\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r1, r3, 0x25, 0x4, @val=@tcx}, 0x1c) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r4, r5, 0x4, r1}, 0x10) 16.448248581s ago: executing program 4 (id=794): openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40200, 0x24) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmmsg$unix(r0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)=ANY=[@ANYBLOB="28000000400007012bbd700000080000017a03000400c2800c0001800800108004000580040002"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00', @ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000000000000000000000400000000000000000000000200002000a00000000000000fc"], 0x6c}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r4, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r6, {0x5, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'tunl0\x00', r6, 0x0, 0x20, 0x2, 0x7fff, {{0x1a, 0x4, 0x3, 0x9, 0x68, 0x67, 0x0, 0x4, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x17, 0x2a, [@rand_addr=0x64010102, @remote, @local, @multicast2, @local]}, @timestamp_prespec={0x44, 0x34, 0x4, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x1e}, 0x800}, {@loopback, 0x2}, {@broadcast, 0x5}, {@broadcast, 0x6}, {@private=0xa010100, 0x6}, {@remote}]}, @noop, @end, @ssrr={0x89, 0x7, 0xdd, [@broadcast]}]}}}}}) mknodat$null(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0xc000, 0x103) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) syz_open_dev$dri(&(0x7f0000000040), 0x9, 0x0) 16.026557506s ago: executing program 3 (id=795): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x1, 0x5, 0x9c3}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0xc000000, 0x0, 0x0, 0x1e}) io_uring_enter(r3, 0x847ba, 0xfdef, 0xe, 0x0, 0x0) 11.901329751s ago: executing program 1 (id=796): syz_open_dev$sndctrl(0x0, 0x9, 0x400000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) r5 = socket(0x26, 0x2, 0x10000) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000080)={0x20, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x10, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r6, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f00000014c0)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) close_range(r3, 0xffffffffffffffff, 0x0) r7 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0x1f29, 0xc000, 0x2, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') socket$nl_generic(0x10, 0x3, 0x10) 10.550637849s ago: executing program 1 (id=797): socket$netlink(0x10, 0x3, 0x4) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x45}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="0a012a20", @ANYRES16=0x0, @ANYBLOB="e60f000901008b00005d33cdc96be58bd5", @ANYRES32, @ANYBLOB="0c001a804800030001"], 0x2c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r6, 0xc0189436, &(0x7f0000000080)={0x1000, 0x81}) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="070000000400000007fa00000100000000000000fa3977431ba574af9d5c341514af2cc6f02782e3262c01d3c1e5d4505c7b5742b09ad752b9", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r7}, &(0x7f0000000100), &(0x7f0000000140)='%pB \x00'}, 0x20) write(r2, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) r8 = socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r9, 0x10e, 0x5, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001e000100ffffffff000000000a000000", @ANYRES32=0x0], 0x38}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 10.534607131s ago: executing program 4 (id=798): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000580)=""/102385, 0x18ff1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000300), 0x2) r6 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r6, 0x1000006) fcntl$addseals(r6, 0x409, 0x7) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x0, 0x1000000}) userfaultfd(0x1) 9.165194482s ago: executing program 4 (id=799): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$kcm(0x21, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$usbfs(&(0x7f0000000200), 0x800079, 0x18ba44) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x80, 0x8, 0x7ff, 0x0, 0x0, 0xf421, 0x0}) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_CHANINFO(r1, 0x80306403, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80280, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) pselect6(0x40, &(0x7f0000000240)={0x2, 0x0, 0x0, 0x7d, 0x0, 0xa, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x9, 0xf, 0x80000006}, 0x0, 0x0) 3.126900347s ago: executing program 4 (id=800): socket(0x400000000010, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(0x0, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x26, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f00000008c0)={'team0\x00', 0xe761}) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, 0x0, 0x0) setuid(0xee01) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x12020400, 0x0, 0x0, 0x801, 0x0, 0x0, 0x0, 0x80}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000004c0)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x66a6}}, 0x30) umount2(&(0x7f0000000140)='./file0\x00', 0x3) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x40000, 0x11b) r5 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) write$binfmt_elf64(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4602010103fcffffffffffffff03003e005666d37500010000000000004000000000000000df012000040000000000000003003800010007000200010003000000000000"], 0x509) close(r6) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2000405, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 2.53007318s ago: executing program 1 (id=801): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty, 0x3aa7}, @ib={0x1b, 0xffff, 0x0, {}, 0x0, 0xfefffffffffffffc, 0x6}}}, 0x118) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xc, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x0, 0xe, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2", 0x0, 0x86, 0x0, 0x29, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1", 0x0}, 0x4c) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x400400, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x45e, 0x732, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x80, 0x5, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0xbc, {0x9, 0x21, 0x5, 0x9, 0x1, {0x22, 0x62e}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x3, 0x9, 0x2}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0xc, 0xf9, 0x20, 0x8, 0x9}, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xc0a}}, {0xda, &(0x7f0000000600)=@string={0xda, 0x3, "94ef7a0d99f09482551cc650f4efc0ef4e46499922bdd1c8e25d495aabe27708046f054106dee1692db69688492ce251e18ad39b49b75e388b1fb410e7feb9651cf9644063691b4e09460eeeda9212b540bf31cac2abdd00fa5b621c54320c0b459376db62650f5c3e539f300bc0512d66ca48aaa6e7bf8ae76171c9264fe5b4a86e0ba47bcab36eb10cc2579caa0af15bfce8004664bc0b97b9023cd2b4ae3a8be2bfa721fbdceda6e432b44b7338dad717c51abd774e1d90027938b82969b7e38af15e76b82d7019ea439bb5e6d6740dbe2f4ce020951c"}}]}) r6 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000280)={0x80000000, 0x0, 0xfffffffffffffffe}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$rtl8150(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000380)={0x9, 0x0, [{0x6, 0xffffffff, 0x1, 0x40, 0x200, 0x2, 0x10001}, {0x40000000, 0x3, 0x2, 0x2, 0x2, 0xb6, 0x12a}, {0x6, 0x0, 0x2, 0x7, 0x764, 0x1c49, 0x2}, {0xc0000001, 0x7, 0x0, 0x400000, 0x9, 0x966, 0x1}, {0x80000008, 0xff, 0x0, 0x3, 0x2, 0x9345}, {0xb, 0x4, 0x3, 0x100, 0x6, 0x4, 0xc}, {0xc0000000, 0xc, 0x4, 0x3, 0xda, 0x3ff, 0xff}, {0xb, 0x0, 0x4, 0xfffffe08, 0x2, 0xcb1, 0xb}, {0x40000003, 0xde, 0x1, 0x401, 0x5, 0x8a1, 0x1}]}) 0s ago: executing program 34 (id=795): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x1, 0x5, 0x9c3}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0xc000000, 0x0, 0x0, 0x1e}) io_uring_enter(r3, 0x847ba, 0xfdef, 0xe, 0x0, 0x0) kernel console output (not intermixed with test programs): T7653] veth1_vlan: left promiscuous mode [ 191.874429][ T5914] usb 4-1: USB disconnect, device number 15 [ 191.932915][ T7687] FAULT_INJECTION: forcing a failure. [ 191.932915][ T7687] name failslab, interval 1, probability 0, space 0, times 0 [ 191.945852][ T7687] CPU: 0 UID: 0 PID: 7687 Comm: syz.1.483 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.945878][ T7687] Tainted: [L]=SOFTLOCKUP [ 191.945884][ T7687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 191.945893][ T7687] Call Trace: [ 191.945898][ T7687] [ 191.945905][ T7687] dump_stack_lvl+0x100/0x190 [ 191.945935][ T7687] should_fail_ex.cold+0x5/0xa [ 191.945955][ T7687] should_failslab+0xc2/0x120 [ 191.945979][ T7687] __kmalloc_cache_noprof+0x7a/0x6f0 [ 191.945998][ T7687] ? sel_netnode_sid+0x364/0xbb0 [ 191.946022][ T7687] sel_netnode_sid+0x364/0xbb0 [ 191.946044][ T7687] selinux_socket_bind+0x578/0xa40 [ 191.946067][ T7687] ? __pfx_selinux_socket_bind+0x10/0x10 [ 191.946090][ T7687] ? __pfx_tomoyo_socket_bind_permission+0x10/0x10 [ 191.946111][ T7687] ? __might_fault+0xc5/0x140 [ 191.946142][ T7687] security_socket_bind+0xfb/0x230 [ 191.946161][ T7687] __sys_bind+0x140/0x260 [ 191.946186][ T7687] ? __pfx___sys_bind+0x10/0x10 [ 191.946206][ T7687] ? __fget_files+0x21f/0x3d0 [ 191.946242][ T7687] ? __pfx_ksys_write+0x10/0x10 [ 191.946271][ T7687] __x64_sys_bind+0x72/0xb0 [ 191.946298][ T7687] ? lockdep_hardirqs_on+0x78/0x100 [ 191.946318][ T7687] do_syscall_64+0x106/0xf80 [ 191.946334][ T7687] ? clear_bhb_loop+0x40/0x90 [ 191.946356][ T7687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.946374][ T7687] RIP: 0033:0x7f101b19bf79 [ 191.946390][ T7687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.946406][ T7687] RSP: 002b:00007f101bffc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 191.946425][ T7687] RAX: ffffffffffffffda RBX: 00007f101b415fa0 RCX: 00007f101b19bf79 [ 191.946437][ T7687] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 191.946448][ T7687] RBP: 00007f101bffc090 R08: 0000000000000000 R09: 0000000000000000 [ 191.946458][ T7687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.946468][ T7687] R13: 00007f101b416038 R14: 00007f101b415fa0 R15: 00007ffc2ece6168 [ 191.946492][ T7687] [ 192.015466][ T793] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 192.394757][ T793] usb 1-1: Using ep0 maxpacket: 8 [ 192.508142][ T793] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 192.573181][ T793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.640841][ T793] usb 1-1: Product: syz [ 192.649370][ T793] usb 1-1: Manufacturer: syz [ 192.691460][ T5914] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 192.752723][ T793] usb 1-1: SerialNumber: syz [ 192.833838][ T793] usb 1-1: config 0 descriptor?? [ 192.886868][ T5850] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 192.929079][ T5914] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 192.938738][ T5914] usb 2-1: config 0 has no interface number 0 [ 192.951762][ T5914] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 193.043213][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.076127][ T5850] usb 3-1: Using ep0 maxpacket: 8 [ 193.192779][ T5850] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 193.244253][ T5850] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.289850][ T5850] usb 3-1: Product: syz [ 193.327951][ T5850] usb 3-1: Manufacturer: syz [ 193.348172][ T793] dvb_usb_rtl28xxu 1-1:0.0: chip type detection failed -71 [ 193.355976][ T5914] usb 2-1: config 0 descriptor?? [ 193.383771][ T5850] usb 3-1: SerialNumber: syz [ 193.388966][ T793] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 193.403426][ T5914] usb 2-1: selecting invalid altsetting 1 [ 193.418201][ T5850] usb 3-1: config 0 descriptor?? [ 193.432341][ T5914] dvb_ttusb_budget: ttusb_init_controller: error [ 193.441886][ T793] usb 1-1: USB disconnect, device number 13 [ 193.449673][ T5850] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 193.459036][ T5914] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 193.870599][ T5850] gspca_sonixj: reg_r err -71 [ 193.882863][ T5850] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 194.080782][ T5850] usb 3-1: USB disconnect, device number 18 [ 194.098242][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.117444][ T5914] DVB: Unable to find symbol cx22700_attach() [ 194.475550][ T5914] DVB: Unable to find symbol tda10046_attach() [ 194.509654][ T5914] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 194.556497][ T5914] usb 2-1: USB disconnect, device number 15 [ 194.613390][ T30] audit: type=1400 audit(1771085793.790:463): avc: denied { append } for pid=7722 comm="syz.3.492" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 195.385528][ T30] audit: type=1400 audit(1771085794.550:464): avc: denied { write } for pid=7733 comm="syz.3.497" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 195.853842][ T30] audit: type=1326 audit(1771085794.610:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7730 comm="syz.2.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1039bf79 code=0x7ffc0000 [ 195.905245][ T30] audit: type=1326 audit(1771085794.610:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7730 comm="syz.2.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1039bf79 code=0x7ffc0000 [ 196.032899][ T30] audit: type=1326 audit(1771085794.610:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7730 comm="syz.2.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f7b1039bf79 code=0x7ffc0000 [ 196.076635][ T30] audit: type=1326 audit(1771085794.610:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7730 comm="syz.2.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1039bf79 code=0x7ffc0000 [ 196.132584][ T30] audit: type=1326 audit(1771085794.610:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7730 comm="syz.2.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1039bf79 code=0x7ffc0000 [ 196.185934][ T30] audit: type=1326 audit(1771085794.620:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7730 comm="syz.2.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f7b1039bf79 code=0x7ffc0000 [ 196.210693][ T30] audit: type=1326 audit(1771085794.620:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7730 comm="syz.2.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1039bf79 code=0x7ffc0000 [ 196.239088][ T30] audit: type=1326 audit(1771085794.630:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7730 comm="syz.2.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f7b1039bf79 code=0x7ffc0000 [ 196.316866][ T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 196.497007][ T10] usb 5-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 196.506197][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.522286][ T10] usb 5-1: config 0 descriptor?? [ 196.547355][ T10] usb 5-1: Invalid firmware size=18. [ 197.293476][ T7765] lo speed is unknown, defaulting to 1000 [ 197.299852][ T7765] lo speed is unknown, defaulting to 1000 [ 197.315344][ T7765] lo speed is unknown, defaulting to 1000 [ 197.341757][ T7765] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 197.388153][ T7765] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 197.580555][ T7765] lo speed is unknown, defaulting to 1000 [ 197.588006][ T7765] lo speed is unknown, defaulting to 1000 [ 197.594485][ T7765] lo speed is unknown, defaulting to 1000 [ 197.600886][ T7765] lo speed is unknown, defaulting to 1000 [ 197.607325][ T7765] lo speed is unknown, defaulting to 1000 [ 197.716509][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 197.875559][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 197.953078][ T10] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 197.995024][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.005566][ T5914] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 198.076663][ T10] usb 3-1: Product: syz [ 198.291273][ T10] usb 3-1: Manufacturer: syz [ 198.297362][ T5914] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 198.305506][ T5914] usb 2-1: config 0 has no interface number 0 [ 198.308444][ T10] usb 3-1: SerialNumber: syz [ 198.311714][ T5914] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 198.318574][ T10] usb 3-1: config 0 descriptor?? [ 198.338672][ T5850] usb 5-1: USB disconnect, device number 23 [ 198.341311][ T10] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 198.364906][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.375507][ T5914] usb 2-1: config 0 descriptor?? [ 198.410970][ T5914] usb 2-1: selecting invalid altsetting 1 [ 198.435667][ T5914] dvb_ttusb_budget: ttusb_init_controller: error [ 198.442008][ T5914] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 198.554959][ T5914] DVB: Unable to find symbol cx22700_attach() [ 198.605015][ T5914] DVB: Unable to find symbol tda10046_attach() [ 198.611445][ T5914] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 199.533041][ T10] gspca_sonixj: reg_r err -71 [ 199.543566][ T10] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 199.920489][ T10] usb 3-1: USB disconnect, device number 19 [ 200.307983][ T5808] usb 2-1: USB disconnect, device number 16 [ 200.589137][ T7801] netlink: 28 bytes leftover after parsing attributes in process `syz.3.516'. [ 202.527964][ T7836] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=19 sclass=netlink_audit_socket pid=7836 comm=syz.3.526 [ 202.678382][ T7837] openvswitch: netlink: IP tunnel dst address not specified [ 202.718867][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 202.718883][ T30] audit: type=1400 audit(1771085801.870:485): avc: denied { create } for pid=7820 comm="syz.2.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 202.771958][ T30] audit: type=1400 audit(1771085801.870:486): avc: denied { bind } for pid=7820 comm="syz.2.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 202.795426][ T5808] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 202.803124][ T10] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 203.417457][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 203.430779][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 203.455390][ T5808] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 203.474594][ T5808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.487167][ T5808] usb 2-1: Product: syz [ 203.491357][ T5808] usb 2-1: Manufacturer: syz [ 203.501648][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 203.515513][ T5808] usb 2-1: SerialNumber: syz [ 203.521636][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 203.535814][ T5808] usb 2-1: config 0 descriptor?? [ 203.552406][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 203.570274][ T5808] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 203.585483][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.595898][ T10] usb 5-1: config 0 descriptor?? [ 203.721951][ T7847] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=19 sclass=netlink_audit_socket pid=7847 comm=syz.0.531 [ 204.834988][ T10] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 204.857736][ T5914] usb 2-1: USB disconnect, device number 17 [ 204.916823][ T7848] comedi comedi2: reset error (fatal) [ 204.972089][ T30] audit: type=1400 audit(1771085804.150:487): avc: denied { name_bind } for pid=7855 comm="syz.0.533" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 205.346882][ T7861] openvswitch: netlink: IP tunnel dst address not specified [ 205.505377][ T5884] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 205.568754][ T5808] usb 5-1: USB disconnect, device number 24 [ 205.664826][ T30] audit: type=1400 audit(1771085804.840:488): avc: denied { open } for pid=7864 comm="syz.1.535" path="/dev/ptyq6" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 205.716330][ T5884] usb 4-1: Using ep0 maxpacket: 32 [ 205.739634][ T5884] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 205.755998][ T5884] usb 4-1: config 0 has no interface number 0 [ 205.787310][ T5884] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 205.804462][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.839717][ T5884] usb 4-1: Product: syz [ 205.926033][ T5914] page_pool_release_retry() stalled pool shutdown: id 30, 1 inflight 60 sec [ 206.127184][ T5884] usb 4-1: Manufacturer: syz [ 206.152160][ T7865] netlink: set zone limit has 4 unknown bytes [ 206.169952][ T5884] usb 4-1: SerialNumber: syz [ 206.186251][ T7870] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 206.209318][ T5884] usb 4-1: config 0 descriptor?? [ 206.241151][ T5884] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 206.435249][ T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 206.506149][ T5884] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 206.615256][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 206.866315][ T5884] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 206.878050][ T10] usb 1-1: config 3 has an invalid interface number: 116 but max is 0 [ 206.915395][ T10] usb 1-1: config 3 has no interface number 0 [ 206.921588][ T10] usb 1-1: config 3 interface 116 has no altsetting 0 [ 207.041966][ T10] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=26.6d [ 207.058792][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.149731][ T10] usb 1-1: Product: syz [ 207.184833][ T10] usb 1-1: Manufacturer: syz [ 207.200379][ T10] usb 1-1: SerialNumber: syz [ 207.256592][ T30] audit: type=1400 audit(1771085806.430:489): avc: denied { setopt } for pid=7874 comm="syz.2.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 207.277738][ T7879] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 207.585959][ T10] viperboard 1-1:3.116: version 0.00 found at bus 001 address 014 [ 207.617504][ T10] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 207.642640][ T10] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 207.673489][ T10] usb 1-1: USB disconnect, device number 14 [ 207.798660][ T7894] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=19 sclass=netlink_audit_socket pid=7894 comm=syz.1.540 [ 208.125267][ T5808] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 208.288777][ T7900] hub 9-0:1.0: USB hub found [ 208.294834][ T7900] hub 9-0:1.0: 1 port detected [ 208.500189][ T7904] tmpfs: Unknown parameter 'èt<Íb›têÍY”“ŸÀ31Bb' [ 208.960296][ T5808] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 208.989429][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 208.997509][ T793] usb 4-1: USB disconnect, device number 16 [ 209.066669][ T5808] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 209.084713][ T793] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 209.102545][ T5808] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 209.114441][ T5808] usb 3-1: config 220 has no interface number 2 [ 209.117025][ T793] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 209.121378][ T5808] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 209.227342][ T5808] usb 3-1: config 220 interface 0 has no altsetting 0 [ 209.234209][ T5808] usb 3-1: config 220 interface 76 has no altsetting 0 [ 209.268004][ T793] quatech2 4-1:0.51: device disconnected [ 209.282476][ T5808] usb 3-1: config 220 interface 1 has no altsetting 0 [ 209.337724][ T5808] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 209.359924][ T5808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.378327][ T5808] usb 3-1: Product: syz [ 209.503336][ T5808] usb 3-1: Manufacturer: syz [ 209.508105][ T5808] usb 3-1: SerialNumber: syz [ 209.605299][ T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 209.853089][ T7896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.854208][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 209.922150][ T10] usb 1-1: config 252 has an invalid interface number: 165 but max is 0 [ 209.938122][ T7896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.080492][ T10] usb 1-1: config 252 has no interface number 0 [ 210.087870][ T10] usb 1-1: New USB device found, idVendor=0b48, idProduct=300d, bcdDevice=d4.cd [ 210.096980][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.145972][ T5808] usb 3-1: selecting invalid altsetting 0 [ 210.163541][ T5808] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 210.181035][ T5808] uvcvideo 3-1:220.0: No valid video chain found. [ 210.193473][ T10] dvb-usb: found a 'Technotrend TT-connect CT-3650' in cold state, will try to load a firmware [ 210.215651][ T5808] usb 3-1: selecting invalid altsetting 0 [ 210.225569][ T10] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 210.242315][ T5808] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 210.295344][ T5912] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 210.323437][ T7934] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=19 sclass=netlink_audit_socket pid=7934 comm=syz.1.552 [ 210.358916][ T5808] usb 3-1: USB disconnect, device number 20 [ 210.407767][ T5811] Bluetooth: hci2: hardware error 0x08 [ 210.420303][ T30] audit: type=1400 audit(1771085809.600:490): avc: denied { load_policy } for pid=7908 comm="syz.0.545" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 210.446914][ T7909] SELinux: failed to load policy [ 210.474897][ T5884] usb 1-1: USB disconnect, device number 15 [ 210.495882][ T793] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 210.511457][ T30] audit: type=1400 audit(1771085809.690:491): avc: denied { bind } for pid=7928 comm="syz.2.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 210.540927][ T5912] usb 5-1: Using ep0 maxpacket: 8 [ 210.554281][ T5912] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3 [ 210.569755][ T30] audit: type=1400 audit(1771085809.700:492): avc: denied { ioctl } for pid=7928 comm="syz.2.550" path="socket:[18486]" dev="sockfs" ino=18486 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 210.595921][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 210.614890][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 210.624745][ T5912] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 210.639978][ T5912] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 210.659703][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=249 [ 210.675752][ T793] usb 4-1: Using ep0 maxpacket: 32 [ 210.678404][ T5912] usb 5-1: SerialNumber: syz [ 210.682417][ T793] usb 4-1: config 0 has no interfaces? [ 210.701313][ T5912] usb 5-1: config 0 descriptor?? [ 210.713721][ T793] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 210.733526][ T793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.746965][ T7924] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 210.876165][ T793] usb 4-1: Product: syz [ 210.881349][ T793] usb 4-1: Manufacturer: syz [ 210.886046][ T793] usb 4-1: SerialNumber: syz [ 210.892843][ T793] usb 4-1: config 0 descriptor?? [ 211.068858][ T7941] tmpfs: Unknown parameter 'èt<Íb›têÍY”“ŸÀ31Bb' [ 211.150041][ T793] usb 4-1: USB disconnect, device number 17 [ 212.223307][ T7959] tmpfs: Unknown parameter 'èt<Íb›têÍY”“ŸÀ31Bb' [ 212.547124][ T5811] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 212.577247][ T5912] usb 5-1: USB disconnect, device number 25 [ 212.608781][ T30] audit: type=1326 audit(1771085811.790:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7957 comm="syz.2.559" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7b1039bf79 code=0x0 [ 212.925277][ T5808] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 212.947746][ T793] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 213.148716][ T5808] usb 3-1: config 0 has an invalid interface number: 197 but max is 0 [ 213.157005][ T793] usb 1-1: Using ep0 maxpacket: 32 [ 213.167077][ T5808] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.170256][ T793] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.228128][ T793] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.239124][ T5808] usb 3-1: config 0 has no interface number 0 [ 213.239170][ T5808] usb 3-1: config 0 interface 197 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 213.263211][ T793] usb 1-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 213.266178][ T5808] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42 [ 213.277026][ T793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.313764][ T5808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.314267][ T793] usb 1-1: config 0 descriptor?? [ 213.339993][ T7975] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=19 sclass=netlink_audit_socket pid=7975 comm=syz.3.564 [ 213.375431][ T5808] usb 3-1: Product: syz [ 213.379630][ T5808] usb 3-1: Manufacturer: syz [ 213.384258][ T5808] usb 3-1: SerialNumber: syz [ 213.485889][ T5808] usb 3-1: config 0 descriptor?? [ 213.592637][ T7983] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 213.765436][ T5808] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 213.780349][ T793] zydacron 0003:13EC:0006.0003: item fetching failed at offset 0/2 [ 213.793289][ T793] zydacron 0003:13EC:0006.0003: parse failed [ 213.801250][ T793] zydacron 0003:13EC:0006.0003: probe with driver zydacron failed with error -22 [ 213.997396][ T5808] usb 4-1: Using ep0 maxpacket: 16 [ 214.057094][ T5808] usb 4-1: config 252 has an invalid interface number: 165 but max is 0 [ 214.068637][ T5808] usb 4-1: config 252 has no interface number 0 [ 214.085503][ T5808] usb 4-1: New USB device found, idVendor=0b48, idProduct=300d, bcdDevice=d4.cd [ 214.179632][ T7996] overlayfs: failed to resolve './file1': -2 [ 214.542800][ T5808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.558152][ T5808] dvb-usb: found a 'Technotrend TT-connect CT-3650' in cold state, will try to load a firmware [ 214.569966][ T5808] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 214.599265][ T5808] usb 1-1: USB disconnect, device number 16 [ 214.786623][ T5811] Bluetooth: hci0: hardware error 0x08 [ 214.849980][ T7978] SELinux: failed to load policy [ 214.862071][ T5808] usb 4-1: USB disconnect, device number 18 [ 214.892564][ T8002] FAULT_INJECTION: forcing a failure. [ 214.892564][ T8002] name failslab, interval 1, probability 0, space 0, times 0 [ 214.924878][ T8002] CPU: 0 UID: 0 PID: 8002 Comm: syz.1.574 Tainted: G L syzkaller #0 PREEMPT(full) [ 214.924909][ T8002] Tainted: [L]=SOFTLOCKUP [ 214.924915][ T8002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 214.924925][ T8002] Call Trace: [ 214.924930][ T8002] [ 214.924936][ T8002] dump_stack_lvl+0x100/0x190 [ 214.924970][ T8002] should_fail_ex.cold+0x5/0xa [ 214.924985][ T8002] should_failslab+0xc2/0x120 [ 214.925003][ T8002] __kmalloc_cache_noprof+0x7a/0x6f0 [ 214.925015][ T8002] ? fuse_dentry_init+0x45/0x100 [ 214.925027][ T8002] ? kmem_cache_alloc_lru_noprof+0x297/0x6e0 [ 214.925040][ T8002] ? __d_alloc+0x34/0xa80 [ 214.925051][ T8002] ? __pfx_fuse_dentry_init+0x10/0x10 [ 214.925064][ T8002] fuse_dentry_init+0x45/0x100 [ 214.925075][ T8002] ? __pfx_fuse_dentry_init+0x10/0x10 [ 214.925088][ T8002] __d_alloc+0x62b/0xa80 [ 214.925100][ T8002] d_alloc+0x4a/0x1e0 [ 214.925112][ T8002] lookup_one_qstr_excl+0x175/0x250 [ 214.925124][ T8002] ? mnt_want_write+0x161/0x450 [ 214.925141][ T8002] filename_create+0x1cf/0x400 [ 214.925157][ T8002] ? __pfx_filename_create+0x10/0x10 [ 214.925187][ T8002] filename_mknodat+0x190/0x7f0 [ 214.925216][ T8002] ? __pfx_filename_mknodat+0x10/0x10 [ 214.925240][ T8002] ? strncpy_from_user+0x19d/0x2d0 [ 214.925266][ T8002] ? do_getname+0x191/0x390 [ 214.925280][ T8002] __x64_sys_mknod+0x8f/0xc0 [ 214.925299][ T8002] do_syscall_64+0x106/0xf80 [ 214.925310][ T8002] ? clear_bhb_loop+0x40/0x90 [ 214.925324][ T8002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.925336][ T8002] RIP: 0033:0x7f101b19bf79 [ 214.925346][ T8002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.925357][ T8002] RSP: 002b:00007f101bffc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 214.925368][ T8002] RAX: ffffffffffffffda RBX: 00007f101b415fa0 RCX: 00007f101b19bf79 [ 214.925375][ T8002] RDX: 0000000000000702 RSI: 0000000000000002 RDI: 00002000000002c0 [ 214.925381][ T8002] RBP: 00007f101bffc090 R08: 0000000000000000 R09: 0000000000000000 [ 214.925388][ T8002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.925394][ T8002] R13: 00007f101b416038 R14: 00007f101b415fa0 R15: 00007ffc2ece6168 [ 214.925408][ T8002] [ 215.438956][ T5914] usb 3-1: USB disconnect, device number 21 [ 215.807905][ T8016] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=19 sclass=netlink_audit_socket pid=8016 comm=syz.4.577 [ 216.155540][ T5914] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 216.517340][ T8033] openvswitch: netlink: IP tunnel dst address not specified [ 216.559313][ T30] audit: type=1400 audit(1771085815.710:494): avc: denied { module_request } for pid=8021 comm="syz.1.581" kmod="netdev-syztnl0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 216.635260][ T5850] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 216.659729][ T10] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 216.676800][ T5914] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 216.687283][ T5914] usb 4-1: config 0 interface 0 has no altsetting 0 [ 216.701297][ T5914] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 216.714593][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 216.743875][ T5914] usb 4-1: Product: syz [ 216.748270][ T5914] usb 4-1: Manufacturer: syz [ 216.752863][ T5914] usb 4-1: SerialNumber: syz [ 216.769544][ T5914] usb 4-1: config 0 descriptor?? [ 216.797435][ T5914] usb 4-1: selecting invalid altsetting 0 [ 216.826917][ T5850] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 216.858459][ T10] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 216.868229][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.877474][ T10] usb 3-1: Product: syz [ 216.882186][ T10] usb 3-1: Manufacturer: syz [ 216.885356][ T5811] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 216.896940][ T30] audit: type=1400 audit(1771085816.080:495): avc: denied { kexec_image_load } for pid=8036 comm="syz.0.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 216.947322][ T10] usb 3-1: SerialNumber: syz [ 216.978482][ T10] usb 3-1: config 0 descriptor?? [ 217.099762][ T10] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 217.543185][ T8028] bridge0: port 3(veth0_to_bridge) entered blocking state [ 217.570342][ T8028] bridge0: port 3(veth0_to_bridge) entered disabled state [ 217.605434][ T8028] veth0_to_bridge: entered allmulticast mode [ 217.664349][ T8028] veth0_to_bridge: entered promiscuous mode [ 217.676545][ T8028] bridge0: port 3(veth0_to_bridge) entered blocking state [ 217.684027][ T8028] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 217.779544][ T10] gspca_stk1135: reg_w 0x0 err -71 [ 217.807509][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 217.837635][ T10] gspca_stk1135: Sensor write failed [ 217.861265][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 217.898399][ T10] gspca_stk1135: Sensor write failed [ 217.919544][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 217.940523][ T10] gspca_stk1135: Sensor read failed [ 217.958371][ T5850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.966013][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 217.970386][ T5850] usb 5-1: Product: syz [ 217.978301][ T30] audit: type=1400 audit(1771085816.400:496): avc: denied { create } for pid=8040 comm="syz.1.587" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 217.998981][ T5850] usb 5-1: Manufacturer: syz [ 217.999042][ T10] gspca_stk1135: Sensor read failed [ 218.004173][ T5850] usb 5-1: SerialNumber: syz [ 218.018824][ T30] audit: type=1400 audit(1771085816.410:497): avc: denied { write } for pid=8040 comm="syz.1.587" name="file0" dev="tmpfs" ino=610 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 218.019309][ T10] gspca_stk1135: Detected sensor type unknown (0x0) [ 218.041199][ T30] audit: type=1400 audit(1771085816.410:498): avc: denied { open } for pid=8040 comm="syz.1.587" path="/112/file0" dev="tmpfs" ino=610 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 218.041243][ T30] audit: type=1400 audit(1771085816.420:499): avc: denied { ioctl } for pid=8040 comm="syz.1.587" path="/112/file0" dev="tmpfs" ino=610 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 218.097233][ T30] audit: type=1400 audit(1771085816.650:500): avc: denied { unlink } for pid=5800 comm="syz-executor" name="file0" dev="tmpfs" ino=610 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 218.121454][ T5850] usb 5-1: config 0 descriptor?? [ 218.126022][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 218.139903][ T10] gspca_stk1135: Sensor read failed [ 218.150719][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 218.259792][ T10] gspca_stk1135: Sensor read failed [ 218.265583][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 218.266996][ T5850] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 218.271938][ T10] gspca_stk1135: Sensor write failed [ 218.293614][ T30] audit: type=1400 audit(1771085816.900:501): avc: denied { ioctl } for pid=8042 comm="syz.1.588" path="socket:[18344]" dev="sockfs" ino=18344 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 218.293648][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 218.321515][ T5914] usb 4-1: USB disconnect, device number 19 [ 218.748844][ T10] gspca_stk1135: Sensor write failed [ 218.754570][ T10] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 218.766800][ T30] audit: type=1400 audit(1771085816.950:502): avc: denied { setopt } for pid=8042 comm="syz.1.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 218.786361][ T30] audit: type=1400 audit(1771085816.960:503): avc: denied { write } for pid=8042 comm="syz.1.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 218.879351][ T10] usb 3-1: USB disconnect, device number 22 [ 218.922547][ T8039] kexec: Could not allocate control_code_buffer [ 218.950497][ T5794] udevd[5794]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 219.037783][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056197800: rx timeout, send abort [ 219.046308][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888056194000: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 219.469062][ T8061] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=19 sclass=netlink_audit_socket pid=8061 comm=syz.0.594 [ 219.546041][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056197800: abort rx timeout. Force session deactivation [ 219.665483][ T5850] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 219.808481][ T8069] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 219.842347][ T5850] usb 3-1: Using ep0 maxpacket: 32 [ 219.900814][ T5850] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.990904][ T5850] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.092816][ T5850] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.190913][ T5850] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 220.333234][ T5850] usb 3-1: config 0 interface 0 has no altsetting 0 [ 220.417276][ T5850] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 220.506070][ T5850] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.520900][ T5877] usb 5-1: USB disconnect, device number 26 [ 220.562773][ T5850] usb 3-1: config 0 descriptor?? [ 220.928334][ T8085] openvswitch: netlink: IP tunnel dst address not specified [ 220.997985][ T5808] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 221.052691][ T5850] hid-thrustmaster 0003:044F:B65D.0004: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0 [ 221.098668][ T5850] hid-thrustmaster 0003:044F:B65D.0004: Wrong number of endpoints? [ 221.130325][ C1] hid-thrustmaster 0003:044F:B65D.0004: URB to get model id failed with error -71 [ 221.206423][ T5808] usb 1-1: Using ep0 maxpacket: 32 [ 221.342350][ T5850] usb 3-1: USB disconnect, device number 23 [ 221.493801][ T5808] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 221.527736][ T5808] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 221.584164][ T5808] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 221.658501][ T8091] fido_id[8091]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 221.713224][ T5808] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 221.757593][ T5808] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 221.771844][ T5808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.787918][ T5808] usb 1-1: Product: syz [ 221.798099][ T5808] usb 1-1: Manufacturer: syz [ 221.803452][ T5808] usb 1-1: SerialNumber: syz [ 222.348222][ C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 222.359498][ T5808] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input10 [ 222.377285][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 222.377304][ T30] audit: type=1400 audit(1771085821.550:506): avc: denied { read } for pid=5159 comm="acpid" name="mouse1" dev="devtmpfs" ino=3134 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 222.487101][ T30] audit: type=1400 audit(1771085821.550:507): avc: denied { open } for pid=5159 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3134 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 222.545205][ T8102] netlink: 'syz.2.603': attribute type 4 has an invalid length. [ 222.658810][ T30] audit: type=1400 audit(1771085821.560:508): avc: denied { ioctl } for pid=5159 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3134 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 222.796154][ T5808] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 222.835300][ T5808] (id 0x00) [ 222.926859][ T8110] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=19 sclass=netlink_audit_socket pid=8110 comm=syz.4.605 [ 222.939735][ T5808] rc_core: IR keymap rc-imon-pad not found [ 222.947965][ T5808] Registered IR keymap rc-empty [ 222.953032][ T5808] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 223.020292][ T5808] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 223.104028][ T5808] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 223.153524][ T8118] netlink: 28 bytes leftover after parsing attributes in process `syz.4.607'. [ 223.165709][ T5808] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input11 [ 223.166421][ T8118] netlink: 28 bytes leftover after parsing attributes in process `syz.4.607'. [ 223.297392][ T5808] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:17> initialized [ 223.900133][ T30] audit: type=1400 audit(1771085823.070:509): avc: denied { create } for pid=8114 comm="syz.4.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 223.928571][ T30] audit: type=1400 audit(1771085823.070:510): avc: denied { write } for pid=8114 comm="syz.4.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 224.711105][ T30] audit: type=1400 audit(1771085823.890:511): avc: denied { bind } for pid=8128 comm="syz.2.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 225.557023][ T5808] usb 1-1: USB disconnect, device number 17 [ 225.759814][ T8143] syz_tun: entered allmulticast mode [ 225.776602][ T8141] netlink: 'syz.1.612': attribute type 21 has an invalid length. [ 225.970824][ T8139] syz_tun: left allmulticast mode [ 226.348427][ T8157] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=19 sclass=netlink_audit_socket pid=8157 comm=syz.0.617 [ 226.427385][ T8160] fuse: Unknown parameter 'user_i00000000000000000000' [ 226.504497][ T30] audit: type=1400 audit(1771085825.680:512): avc: denied { connect } for pid=8158 comm="syz.1.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 228.441810][ T30] audit: type=1400 audit(1771085827.610:513): avc: denied { map } for pid=8181 comm="syz.4.623" path="socket:[19721]" dev="sockfs" ino=19721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 228.590337][ T30] audit: type=1400 audit(1771085827.760:514): avc: denied { mount } for pid=8184 comm="syz.4.625" name="/" dev="autofs" ino=19733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 228.982515][ T8197] netlink: 'syz.2.627': attribute type 40 has an invalid length. [ 229.498292][ T8201] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=19 sclass=netlink_audit_socket pid=8201 comm=syz.3.629 [ 229.580564][ T8205] overlayfs: missing 'lowerdir' [ 229.949717][ T30] audit: type=1400 audit(1771085829.040:515): avc: denied { write } for pid=8202 comm="syz.4.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 230.018702][ T8209] tipc: Started in network mode [ 230.023726][ T8209] tipc: Node identity 0242e810daf9, cluster identity 4711 [ 230.036747][ T8209] tipc: Enabled bearer , priority 0 [ 230.054166][ T8209] syzkaller0: entered promiscuous mode [ 230.069767][ T8209] syzkaller0: entered allmulticast mode [ 230.104663][ T8209] tipc: Resetting bearer [ 230.135581][ T30] audit: type=1400 audit(1771085829.320:516): avc: denied { setattr } for pid=8214 comm="syz.2.634" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 230.165512][ T8206] tipc: Resetting bearer [ 230.201709][ T8206] tipc: Disabling bearer [ 230.240540][ T8215] kvm: pic: non byte read [ 230.249945][ T8215] kvm: pic: single mode not supported [ 230.250042][ T8215] kvm: pic: level sensitive irq not supported [ 230.261044][ T8215] kvm: pic: non byte read [ 230.294992][ T8215] kvm: pic: non byte read [ 230.310212][ T8215] kvm: pic: single mode not supported [ 230.310230][ T8215] kvm: pic: level sensitive irq not supported [ 230.332426][ T8215] kvm: pic: non byte read [ 230.356115][ T8215] kvm: pic: single mode not supported [ 230.356136][ T8215] kvm: pic: level sensitive irq not supported [ 230.364798][ T8215] kvm: pic: non byte read [ 230.384532][ T8215] kvm: pic: non byte read [ 230.390527][ T8215] kvm: pic: non byte read [ 230.395973][ T8215] kvm: pic: non byte read [ 230.400771][ T8226] xt_l2tp: wrong L2TP version: 0 [ 230.409814][ T8215] kvm: pic: single mode not supported [ 230.409874][ T8215] kvm: pic: non byte read [ 230.492217][ T8231] fuse: Unknown parameter 'user_i00000000000000000000' [ 230.658579][ T8237] netlink: 'syz.1.640': attribute type 2 has an invalid length. [ 230.672222][ T8237] !: entered promiscuous mode [ 230.996131][ T5914] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 231.083864][ T8240] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=19 sclass=netlink_audit_socket pid=8240 comm=syz.3.641 [ 231.186957][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.198186][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.239772][ T5914] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 231.240791][ T8245] overlayfs: failed to clone upperpath [ 231.249261][ T5914] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 231.265572][ T5914] usb 3-1: Manufacturer: syz [ 231.278866][ T5914] usb 3-1: config 0 descriptor?? [ 231.542496][ T8250] tmpfs: Unknown parameter 'èt<Íb›têÍY”“ŸÀ31Bb' [ 232.290973][ T8236] lo speed is unknown, defaulting to 1000 [ 232.554118][ T5850] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 232.711559][ T5805] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 232.756266][ T5850] usb 2-1: too many configurations: 70, using maximum allowed: 8 [ 232.765148][ T5850] usb 2-1: config index 0 descriptor too short (expected 65016, got 133) [ 232.774300][ T5850] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.785827][ T5850] usb 2-1: config index 1 descriptor too short (expected 65016, got 133) [ 232.795598][ T5850] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.832611][ T5850] usb 2-1: config index 2 descriptor too short (expected 65016, got 133) [ 232.841833][ T5850] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.857718][ T8273] tmpfs: Unknown parameter 'èt<Íb›têÍY”“ŸÀ31Bb' [ 233.024154][ T5850] usb 2-1: config index 3 descriptor too short (expected 65016, got 133) [ 233.080115][ T5914] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0005/input/input12 [ 233.113184][ T5850] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.139294][ T5850] usb 2-1: config index 4 descriptor too short (expected 65016, got 133) [ 233.154287][ T5850] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.296235][ T5805] usb 1-1: Using ep0 maxpacket: 16 [ 233.354868][ T5805] usb 1-1: config 252 has an invalid interface number: 165 but max is 0 [ 233.363454][ T5805] usb 1-1: config 252 has no interface number 0 [ 233.369929][ T5805] usb 1-1: New USB device found, idVendor=0b48, idProduct=300d, bcdDevice=d4.cd [ 233.379066][ T5805] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.429141][ T5805] dvb-usb: found a 'Technotrend TT-connect CT-3650' in cold state, will try to load a firmware [ 233.478685][ T5914] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0005/input/input13 [ 233.500786][ T5850] usb 2-1: config index 5 descriptor too short (expected 65016, got 133) [ 233.515272][ T5850] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.530288][ T5850] usb 2-1: config index 6 descriptor too short (expected 65016, got 133) [ 233.539238][ T5914] uclogic 0003:256C:006D.0005: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.2-1/input0 [ 233.557113][ T5850] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.567763][ T5805] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 233.575797][ T5914] usb 3-1: USB disconnect, device number 24 [ 233.602977][ T8260] SELinux: failed to load policy [ 233.625602][ T5850] usb 2-1: config index 7 descriptor too short (expected 65016, got 133) [ 233.634827][ T5850] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.634969][ T5805] usb 1-1: USB disconnect, device number 18 [ 233.708446][ T8278] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=19 sclass=netlink_audit_socket pid=8278 comm=syz.4.652 [ 233.779523][ T5850] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 233.801485][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.825153][ T5850] usb 2-1: Product: syz [ 233.830444][ T5850] usb 2-1: Manufacturer: syz [ 233.834340][ T8279] fido_id[8279]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 233.835037][ T5850] usb 2-1: SerialNumber: syz [ 233.874948][ T5850] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 233.898055][ T30] audit: type=1400 audit(1771085833.070:517): avc: denied { firmware_load } for pid=5884 comm="kworker/1:6" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 233.919247][ T5884] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 234.008531][ T8282] trusted_key: encrypted_key: master key parameter 'ḣ,\mXÐ1ÕŠh–²' is invalid [ 234.813966][ T8293] fuse: Unknown parameter 'user_i00000000000000000000' [ 234.881794][ T5914] usb 2-1: USB disconnect, device number 18 [ 234.978332][ T5884] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 235.239300][ T5884] ath9k_htc: Failed to initialize the device [ 235.314471][ T8298] overlayfs: missing 'lowerdir' [ 235.320401][ T8298] overlayfs: failed to clone lowerpath [ 235.366945][ T5914] usb 2-1: ath9k_htc: USB layer deinitialized [ 236.632994][ T8317] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=19 sclass=netlink_audit_socket pid=8317 comm=syz.1.663 [ 236.905207][ T8323] syzkaller1: entered promiscuous mode [ 236.910759][ T8323] syzkaller1: entered allmulticast mode [ 237.517103][ T8335] syz.4.668 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 237.643454][ T8337] netlink: 28 bytes leftover after parsing attributes in process `syz.1.670'. [ 238.656413][ T8354] overlayfs: failed to resolve './file1': -2 [ 239.324082][ T30] audit: type=1400 audit(1771085837.830:518): avc: denied { create } for pid=8348 comm="syz.2.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 239.545351][ T30] audit: type=1400 audit(1771085837.830:519): avc: denied { ioctl } for pid=8348 comm="syz.2.673" path="socket:[19320]" dev="sockfs" ino=19320 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 239.839371][ T30] audit: type=1400 audit(1771085839.020:520): avc: denied { recv } for pid=5788 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.106 dest=39790 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 239.995299][ T5877] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 240.155383][ T5877] usb 3-1: Using ep0 maxpacket: 8 [ 240.168341][ T5877] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 240.195561][ T5914] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 240.224091][ T5877] usb 3-1: config 0 has no interface number 0 [ 240.244103][ T5877] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 240.264656][ T5877] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 240.335095][ T5877] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 240.355258][ T5877] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 240.372254][ T5877] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 240.381541][ T5914] usb 2-1: device descriptor read/64, error -71 [ 240.392740][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.401619][ T8365] openvswitch: netlink: IP tunnel dst address not specified [ 240.497733][ T5877] usb 3-1: config 0 descriptor?? [ 240.513367][ T5877] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 240.665300][ T5914] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 240.751461][ T30] audit: type=1400 audit(1771085839.930:521): avc: denied { connect } for pid=8357 comm="syz.2.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 240.805555][ T5914] usb 2-1: device descriptor read/64, error -71 [ 240.935854][ T5914] usb usb2-port1: attempt power cycle [ 241.285319][ T5914] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 241.356536][ T5914] usb 2-1: device descriptor read/8, error -71 [ 241.685617][ T5914] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 241.705347][ T30] audit: type=1400 audit(1771085840.880:522): avc: denied { read } for pid=8382 comm="syz.4.682" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 241.706181][ T5914] usb 2-1: device descriptor read/8, error -71 [ 241.998063][ T30] audit: type=1400 audit(1771085841.150:523): avc: denied { open } for pid=8382 comm="syz.4.682" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 242.096685][ T5914] usb usb2-port1: unable to enumerate USB device [ 242.112826][ T30] audit: type=1400 audit(1771085841.180:524): avc: denied { ioctl } for pid=8382 comm="syz.4.682" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 242.360817][ T8390] netlink: 68 bytes leftover after parsing attributes in process `syz.0.683'. [ 242.370786][ T30] audit: type=1400 audit(1771085841.540:525): avc: denied { setopt } for pid=8389 comm="syz.0.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 242.796003][ T5805] usb 3-1: USB disconnect, device number 25 [ 242.812407][ T5805] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 243.110634][ T8396] overlayfs: failed to resolve './file1': -2 [ 243.462986][ T30] audit: type=1400 audit(1771085842.640:526): avc: denied { create } for pid=8387 comm="syz.3.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 243.511885][ T30] audit: type=1400 audit(1771085842.640:527): avc: denied { create } for pid=8397 comm="syz.1.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 243.787179][ T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 243.965258][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 243.991906][ T10] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 244.017922][ T8413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.688'. [ 244.029727][ T10] usb 2-1: config 0 has no interface number 0 [ 244.056882][ T10] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 244.148723][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.194709][ T10] usb 2-1: Product: syz [ 244.243268][ T10] usb 2-1: Manufacturer: syz [ 244.254021][ T8420] netlink: 68 bytes leftover after parsing attributes in process `syz.3.692'. [ 244.265513][ T8420] netlink: 16 bytes leftover after parsing attributes in process `syz.3.692'. [ 244.285517][ T10] usb 2-1: SerialNumber: syz [ 244.362402][ T10] usb 2-1: config 0 descriptor?? [ 244.404016][ T10] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 244.525498][ T8409] SELinux: failed to load policy [ 244.597388][ T10] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 244.642806][ T10] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 244.817080][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 244.826497][ T10] usb 2-1: USB disconnect, device number 23 [ 244.848425][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 244.910985][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 244.958366][ T8428] overlayfs: missing 'lowerdir' [ 245.015780][ T10] quatech2 2-1:0.51: device disconnected [ 245.025721][ T8430] overlayfs: failed to clone lowerpath [ 245.477235][ T8436] FAULT_INJECTION: forcing a failure. [ 245.477235][ T8436] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 245.511643][ T8436] CPU: 0 UID: 0 PID: 8436 Comm: syz.2.695 Tainted: G L syzkaller #0 PREEMPT(full) [ 245.511671][ T8436] Tainted: [L]=SOFTLOCKUP [ 245.511676][ T8436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 245.511686][ T8436] Call Trace: [ 245.511692][ T8436] [ 245.511697][ T8436] dump_stack_lvl+0x100/0x190 [ 245.511728][ T8436] should_fail_ex.cold+0x5/0xa [ 245.511749][ T8436] _copy_from_user+0x2e/0xd0 [ 245.511776][ T8436] kstrtouint_from_user+0xd6/0x1d0 [ 245.511794][ T8436] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 245.511811][ T8436] ? __lock_acquire+0x4a5/0x2630 [ 245.511838][ T8436] ? lock_acquire+0x1cf/0x380 [ 245.511869][ T8436] proc_fail_nth_write+0x83/0x220 [ 245.511887][ T8436] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 245.511912][ T8436] vfs_write+0x2aa/0x1070 [ 245.511935][ T8436] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 245.511954][ T8436] ? __pfx_vfs_write+0x10/0x10 [ 245.511977][ T8436] ? __fget_files+0x215/0x3d0 [ 245.512006][ T8436] ? __fget_files+0x21f/0x3d0 [ 245.512036][ T8436] ksys_write+0x12a/0x250 [ 245.512056][ T8436] ? __pfx_ksys_write+0x10/0x10 [ 245.512075][ T8436] do_syscall_64+0x106/0xf80 [ 245.512087][ T8436] ? clear_bhb_loop+0x40/0x90 [ 245.512101][ T8436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.512113][ T8436] RIP: 0033:0x7f7b1035c84e [ 245.512123][ T8436] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 245.512138][ T8436] RSP: 002b:00007f7b11188fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 245.512154][ T8436] RAX: ffffffffffffffda RBX: 00007f7b111896c0 RCX: 00007f7b1035c84e [ 245.512164][ T8436] RDX: 0000000000000001 RSI: 00007f7b111890a0 RDI: 0000000000000004 [ 245.512174][ T8436] RBP: 00007f7b11189090 R08: 0000000000000000 R09: 0000000000000000 [ 245.512183][ T8436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.512193][ T8436] R13: 00007f7b10616038 R14: 00007f7b10615fa0 R15: 00007fffc4619ec8 [ 245.512218][ T8436] [ 246.757343][ T8448] fuse: Unknown parameter 'fnýñ3lDÁðY§Qd-00000000000000000000755' [ 246.763667][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 246.763683][ T30] audit: type=1400 audit(1771085845.940:530): avc: denied { append } for pid=8427 comm="syz.4.694" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 248.019723][ T8447] netlink: 128 bytes leftover after parsing attributes in process `syz.3.700'. [ 248.046299][ T8447] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 248.062587][ T8447] netlink: 128 bytes leftover after parsing attributes in process `syz.3.700'. [ 248.071630][ T8447] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 248.087474][ T8447] netlink: 128 bytes leftover after parsing attributes in process `syz.3.700'. [ 248.096504][ T8447] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 248.112171][ T8447] netlink: 128 bytes leftover after parsing attributes in process `syz.3.700'. [ 248.121239][ T8447] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 248.152928][ T8478] sctp: [Deprecated]: syz.4.709 (pid 8478) Use of int in maxseg socket option. [ 248.152928][ T8478] Use struct sctp_assoc_value instead [ 248.175272][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 248.213822][ T30] audit: type=1400 audit(1771085847.390:531): avc: denied { getopt } for pid=8477 comm="syz.4.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 248.355300][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 248.367448][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 248.390145][ T10] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 248.625703][ T10] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 248.655928][ T10] usb 2-1: config 4 has no interface number 0 [ 248.669302][ T10] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 248.685323][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.702998][ T10] usb 2-1: Product: syz [ 248.715129][ T10] usb 2-1: Manufacturer: syz [ 248.722773][ T10] usb 2-1: SerialNumber: syz [ 248.945307][ T10] uvcvideo 2-1:4.147: Found multiple Units with ID 6 [ 248.969393][ T10] uvcvideo 2-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 248.994960][ T10] uvcvideo 2-1:4.147: No streaming interface found for terminal 32774. [ 249.006522][ T8496] dvmrp0: left allmulticast mode [ 249.036839][ T10] usb 2-1: USB disconnect, device number 24 [ 251.325413][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 251.383652][ T8511] overlayfs: failed to resolve './file1': -2 [ 251.825331][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 251.841424][ T10] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 251.862791][ T30] audit: type=1400 audit(1771085851.040:532): avc: denied { name_bind } for pid=8513 comm="syz.1.718" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 252.033219][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 252.137486][ T10] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 252.156368][ T5805] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 252.187572][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.229898][ T10] usb 3-1: config 0 descriptor?? [ 252.273102][ T10] usb 3-1: can't set config #0, error -71 [ 252.300771][ T10] usb 3-1: USB disconnect, device number 26 [ 252.367517][ T5805] usb 2-1: Using ep0 maxpacket: 32 [ 252.392029][ T5805] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 252.410601][ T5805] usb 2-1: can't read configurations, error -61 [ 252.702569][ T30] audit: type=1400 audit(1771085851.850:533): avc: denied { bind } for pid=8520 comm="syz.4.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 253.025800][ T5805] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 253.215324][ T5805] usb 2-1: Using ep0 maxpacket: 32 [ 253.295639][ T5805] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 253.303222][ T5805] usb 2-1: can't read configurations, error -61 [ 253.365911][ T5805] usb usb2-port1: attempt power cycle [ 253.451367][ T8529] block device autoloading is deprecated and will be removed. [ 253.725450][ T5805] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 253.768678][ T5805] usb 2-1: Using ep0 maxpacket: 32 [ 253.783458][ T5805] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 253.792865][ T5805] usb 2-1: can't read configurations, error -61 [ 253.922167][ T30] audit: type=1326 audit(1771085853.100:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.3.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf439bf79 code=0x7ffc0000 [ 253.963985][ T5805] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 254.004081][ T30] audit: type=1326 audit(1771085853.100:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.3.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf439bf79 code=0x7ffc0000 [ 254.038350][ T30] audit: type=1326 audit(1771085853.100:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.3.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f6bf439bf79 code=0x7ffc0000 [ 254.038826][ T5805] usb 2-1: Using ep0 maxpacket: 32 [ 254.075759][ T8544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.727'. [ 254.111368][ T8544] netlink: 24 bytes leftover after parsing attributes in process `syz.3.727'. [ 254.120414][ T30] audit: type=1326 audit(1771085853.100:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.3.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf439bf79 code=0x7ffc0000 [ 254.122591][ T5805] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 254.182302][ T30] audit: type=1326 audit(1771085853.100:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.3.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf439bf79 code=0x7ffc0000 [ 254.183800][ T5805] usb 2-1: can't read configurations, error -61 [ 254.231999][ T5805] usb usb2-port1: unable to enumerate USB device [ 254.257496][ T30] audit: type=1326 audit(1771085853.150:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.3.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f6bf439bf79 code=0x7ffc0000 [ 254.344181][ T30] audit: type=1326 audit(1771085853.150:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.3.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf439bf79 code=0x7ffc0000 [ 254.367813][ T30] audit: type=1326 audit(1771085853.150:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.3.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf439bf79 code=0x7ffc0000 [ 254.625446][ T5805] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 254.807030][ T5805] usb 3-1: Using ep0 maxpacket: 32 [ 254.821515][ T5805] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 254.830197][ T5805] usb 3-1: config 0 has no interface number 0 [ 254.842856][ T5805] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 254.871830][ T5805] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 254.881093][ T5805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.889134][ T5805] usb 3-1: Product: syz [ 254.893361][ T5805] usb 3-1: Manufacturer: syz [ 254.899505][ T5805] usb 3-1: SerialNumber: syz [ 254.900833][ T5914] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 254.913599][ T5805] usb 3-1: config 0 descriptor?? [ 254.929149][ T5805] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 254.945406][ T5805] em28xx 3-1:0.132: Video interface 132 found: [ 255.013881][ T8563] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2304 sclass=netlink_route_socket pid=8563 comm=syz.3.734 [ 255.047753][ T8563] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8563 comm=syz.3.734 [ 255.185335][ T5914] usb 1-1: Using ep0 maxpacket: 32 [ 255.192069][ T5914] usb 1-1: config 0 interface 0 has no altsetting 0 [ 255.201336][ T5914] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 255.211196][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.225678][ T5914] usb 1-1: Product: syz [ 255.233244][ T5914] usb 1-1: Manufacturer: syz [ 255.238108][ T5914] usb 1-1: SerialNumber: syz [ 255.250210][ T5914] usb 1-1: config 0 descriptor?? [ 255.296950][ T8563] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=8563 comm=syz.3.734 [ 255.388498][ T5805] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 255.588536][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.889924][ T5914] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 255.898203][ T5805] em28xx 3-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 255.931486][ T5805] em28xx 3-1:0.132: board has no eeprom [ 256.015542][ T5805] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 256.029060][ T5805] em28xx 3-1:0.132: analog set to bulk mode. [ 256.049207][ T10] em28xx 3-1:0.132: Registering V4L2 extension [ 256.082468][ T5805] usb 3-1: USB disconnect, device number 27 [ 256.091217][ T5914] gs_usb 1-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 256.121366][ T5805] em28xx 3-1:0.132: Disconnecting em28xx [ 256.132261][ T5914] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -22 [ 256.333113][ T10] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 256.397719][ T10] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 256.897588][ T10] em28xx 3-1:0.132: No AC97 audio processor [ 256.897612][ T5850] usb 1-1: USB disconnect, device number 19 [ 256.966393][ T10] usb 3-1: Decoder not found [ 257.055771][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 257.055791][ T30] audit: type=1400 audit(1771085856.220:584): avc: denied { ioctl } for pid=8590 comm="syz.2.744" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d0b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 257.098585][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 257.112812][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 257.125873][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 257.131219][ T10] em28xx 3-1:0.132: failed to create media graph [ 257.138344][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 257.156431][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 257.168645][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 257.180882][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 257.193160][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 257.205567][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 257.217781][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 258.408919][ T10] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 258.481315][ T10] em28xx 3-1:0.132: Remote control support is not available for this card. [ 258.834932][ T30] audit: type=1400 audit(1771085856.300:585): avc: denied { egress } for pid=5877 comm="kworker/1:5" saddr=fe80::a8aa:aaff:feaa:aa0c daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 258.949152][ T5805] em28xx 3-1:0.132: Closing input extension [ 259.165449][ T30] audit: type=1400 audit(1771085856.300:586): avc: denied { sendto } for pid=5877 comm="kworker/1:5" saddr=fe80::a8aa:aaff:feaa:aa0c daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 259.234058][ T5805] em28xx 3-1:0.132: Freeing device [ 260.455245][ T5805] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 260.538104][ T30] audit: type=1400 audit(1771085858.140:587): avc: denied { accept } for pid=8597 comm="syz.4.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 260.845370][ T5805] usb 3-1: device descriptor read/64, error -71 [ 261.315250][ T5805] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 261.759002][ T5805] usb 3-1: device descriptor read/64, error -71 [ 261.842424][ T10] Process accounting resumed [ 262.015938][ T5805] usb usb3-port1: attempt power cycle [ 262.105484][ C1] net_ratelimit: 17272 callbacks suppressed [ 262.105501][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 262.123674][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 262.136081][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 262.148319][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 262.160540][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 262.172703][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 262.184947][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 262.197105][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 262.209279][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 262.221407][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 267.115251][ C1] net_ratelimit: 19586 callbacks suppressed [ 267.115269][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 267.133705][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 267.146121][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 267.158544][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 267.170989][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 267.183856][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 267.191245][ T30] audit: type=1400 audit(1771085865.600:588): avc: denied { map } for pid=8626 comm="syz.2.752" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 267.196406][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 267.232432][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 267.244924][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 267.257215][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 268.083740][ T30] audit: type=1400 audit(1771085865.610:589): avc: denied { connect } for pid=8626 comm="syz.2.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 270.875272][ T30] audit: type=1400 audit(1771085870.050:590): avc: denied { append } for pid=8642 comm="syz.0.756" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 272.125572][ C1] net_ratelimit: 17287 callbacks suppressed [ 272.125593][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 272.143899][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 272.156196][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 272.168442][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 272.180654][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 272.193126][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 272.205516][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 272.217926][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 272.230169][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 272.242423][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 273.082858][ T30] audit: type=1400 audit(1771085872.260:591): avc: denied { read write } for pid=8656 comm="syz.1.761" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 273.478810][ T8669] tmpfs: Unknown parameter 'èt<Íb›têÍY”“ŸÀ31Bb' [ 274.360755][ T8668] overlay: ./file0 is not a directory [ 274.742661][ T30] audit: type=1400 audit(1771085872.260:592): avc: denied { open } for pid=8656 comm="syz.1.761" path="/152/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 274.935246][ T30] audit: type=1400 audit(1771085873.960:593): avc: denied { bind } for pid=8661 comm="syz.4.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 275.335290][ T30] audit: type=1400 audit(1771085874.140:594): avc: denied { listen } for pid=8661 comm="syz.4.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 275.542519][ T8679] ªªªªªª: renamed from vlan0 (while UP) [ 275.763467][ T8684] netlink: 68 bytes leftover after parsing attributes in process `syz.1.765'. [ 275.772434][ T8684] netlink: 16 bytes leftover after parsing attributes in process `syz.1.765'. [ 276.866669][ T8675] binder: 8671:8675 ioctl c00c620f 2000000004c0 returned -22 [ 277.135393][ C1] net_ratelimit: 16807 callbacks suppressed [ 277.135414][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 277.153583][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 277.165808][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 277.178035][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 277.190174][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 277.202369][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 277.214535][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 277.226719][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 277.238878][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 277.251090][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 279.245299][ T5805] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 279.550981][ T5805] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 279.583183][ T5805] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 280.292692][ T5805] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.431448][ T5805] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 280.536539][ T8702] SELinux: unknown common  [ 280.551588][ T8702] SELinux: failed to load policy [ 282.145267][ C1] net_ratelimit: 14350 callbacks suppressed [ 282.145286][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 282.163636][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 282.175886][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 282.188331][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 282.200669][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 282.212980][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 282.225408][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 282.237927][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 282.250489][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 282.263115][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 283.305505][ T5805] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 283.569545][ T5805] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 283.589429][ T5805] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 283.597791][ T5805] stv0680 3-1:4.0: last error: 0, command = 0x0 [ 283.613825][ T5805] usb 3-1: USB disconnect, device number 31 [ 284.618243][ T8723] tmpfs: Unknown parameter 'èt<Íb›têÍY”“ŸÀ31Bb' [ 285.795961][ T5809] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 285.807702][ T5809] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 285.816971][ T5809] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 286.031183][ T5809] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 286.038967][ T5809] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 286.167003][ T8734] sctp: [Deprecated]: syz.3.778 (pid 8734) Use of int in maxseg socket option. [ 286.167003][ T8734] Use struct sctp_assoc_value instead [ 287.092757][ T8731] lo speed is unknown, defaulting to 1000 [ 287.155246][ C1] net_ratelimit: 18964 callbacks suppressed [ 287.155266][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 287.173799][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 287.186360][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 287.198962][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 287.211556][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 287.224190][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 287.236740][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 287.249481][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 287.261777][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 287.274146][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 287.706510][ T8740] syzkaller1: entered promiscuous mode [ 287.713966][ T8740] syzkaller1: entered allmulticast mode [ 288.186268][ T5811] Bluetooth: hci5: command tx timeout [ 289.966633][ T30] audit: type=1400 audit(1771085889.150:595): avc: denied { append } for pid=8748 comm="syz.1.783" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 290.000361][ T8751] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 290.012197][ T8751] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 290.443661][ T5811] Bluetooth: hci5: command tx timeout [ 290.490573][ T30] audit: type=1400 audit(1771085889.240:596): avc: denied { setopt } for pid=8748 comm="syz.1.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 291.190594][ T8731] chnl_net:caif_netlink_parms(): no params data found [ 292.165426][ C1] net_ratelimit: 17360 callbacks suppressed [ 292.165448][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 292.183966][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 292.196514][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 292.209055][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 292.221855][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 292.234393][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 292.246940][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 292.259449][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 292.272755][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 292.285323][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 292.489621][ T5816] Bluetooth: hci5: command tx timeout [ 293.590360][ T8731] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.706917][ T8731] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.724755][ T8731] bridge_slave_0: entered allmulticast mode [ 293.943942][ T8731] bridge_slave_0: entered promiscuous mode [ 294.086247][ T8731] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.227603][ T8731] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.424810][ T8731] bridge_slave_1: entered allmulticast mode [ 294.565753][ T5816] Bluetooth: hci5: command tx timeout [ 297.175264][ C1] net_ratelimit: 20916 callbacks suppressed [ 297.175285][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 297.193377][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 297.205557][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 297.217745][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 297.229980][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 297.242286][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 297.254614][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 297.266881][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 297.279047][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 297.291238][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 297.835373][ T8731] bridge_slave_1: entered promiscuous mode [ 298.490217][ T30] audit: type=1400 audit(1771085897.670:597): avc: denied { create } for pid=8787 comm="syz.1.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 298.565773][ T8791] tmpfs: Unknown parameter 'èt<Íb›têÍY”“ŸÀ31Bb' [ 298.858719][ T30] audit: type=1400 audit(1771085898.010:598): avc: denied { getopt } for pid=8787 comm="syz.1.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 299.891094][ T8801] netlink: 68 bytes leftover after parsing attributes in process `syz.4.791'. [ 299.900748][ T8801] netlink: 16 bytes leftover after parsing attributes in process `syz.4.791'. [ 302.185360][ C1] net_ratelimit: 18338 callbacks suppressed [ 302.185377][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 302.203605][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 302.215850][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 302.228102][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 302.240301][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 302.252614][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 302.264804][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 302.277014][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 302.289164][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 302.301351][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 302.452759][ T8731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.195248][ C1] net_ratelimit: 22520 callbacks suppressed [ 307.195268][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 307.213566][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 307.225837][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 307.238241][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 307.250453][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 307.262657][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 307.274783][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 307.286957][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 307.299090][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 307.311243][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 308.024788][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.007898][ T5811] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 309.019092][ T5811] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 309.027440][ T5811] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 309.035712][ T5811] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 309.043238][ T5811] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 309.142526][ T8731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.499275][ T8827] tmpfs: Unknown parameter 'èt<Íb›têÍY”“ŸÀ31Bb' [ 311.277672][ T5811] Bluetooth: hci3: command tx timeout [ 311.310908][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.205216][ C1] net_ratelimit: 18078 callbacks suppressed [ 312.205239][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 312.223568][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 312.235798][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 312.248227][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 312.260440][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 312.272843][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 312.285087][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 312.297300][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 312.309493][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 312.321924][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 313.285514][ T5811] Bluetooth: hci3: command tx timeout [ 316.255249][ T5811] Bluetooth: hci3: command tx timeout [ 317.120006][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.215372][ C1] net_ratelimit: 19582 callbacks suppressed [ 317.215391][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 317.234007][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 317.246557][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 317.258965][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 317.271551][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 317.283953][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 317.296428][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 317.308864][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 317.321259][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 317.333690][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 317.743676][ T8819] lo speed is unknown, defaulting to 1000 [ 317.874696][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.939077][ T8731] team0: Port device team_slave_0 added [ 318.325371][ T5811] Bluetooth: hci3: command tx timeout [ 320.626862][ T8845] fuse: Unknown parameter 'user_i00000000000000000000' [ 321.297090][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.485856][ T5808] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 321.496812][ T8731] team0: Port device team_slave_1 added [ 321.675319][ T5808] usb 2-1: Using ep0 maxpacket: 8 [ 321.981477][ T8731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.995426][ T5808] usb 2-1: config 0 has an invalid interface number: 162 but max is 0 [ 322.058513][ T5808] usb 2-1: config 0 has no interface number 0 [ 322.225243][ C0] net_ratelimit: 20253 callbacks suppressed [ 322.225246][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 322.225262][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 322.225596][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 322.231546][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 322.243533][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 322.255535][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 322.267323][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 322.279314][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 322.291251][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 322.303090][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 323.203965][ T8731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.506840][ T5808] usb 2-1: too many endpoints for config 0 interface 162 altsetting 219: 229, using maximum allowed: 30 [ 324.045659][ T5808] usb 2-1: config 0 interface 162 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 229 [ 327.235237][ C1] net_ratelimit: 25295 callbacks suppressed [ 327.235261][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 327.235336][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 327.241490][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 327.253516][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 327.265473][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 327.277431][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 327.289256][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 327.301103][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 327.313012][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 327.325094][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 332.245203][ C0] net_ratelimit: 25565 callbacks suppressed [ 332.245222][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 332.245692][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 332.251649][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 332.263523][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 332.275469][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 332.287313][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 332.299116][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 332.311077][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 332.323116][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 332.334949][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 337.255227][ C1] net_ratelimit: 25707 callbacks suppressed [ 337.255247][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 337.255276][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 337.261493][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 337.273401][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 337.285398][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 337.297271][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 337.309039][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 337.321021][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 337.333061][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 337.344919][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 342.265207][ C1] net_ratelimit: 25888 callbacks suppressed [ 342.265226][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 342.265335][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 342.271499][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 342.283627][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 342.295415][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 342.307378][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 342.319320][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 342.331288][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 342.343117][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 342.354962][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 347.275238][ C1] net_ratelimit: 20856 callbacks suppressed [ 347.275258][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 347.275734][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 347.281577][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 347.293541][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 347.305488][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 347.318293][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 347.329211][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 347.341295][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 347.353360][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 347.366064][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 352.285234][ C0] net_ratelimit: 20892 callbacks suppressed [ 352.285242][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 352.285254][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 352.286476][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 352.291471][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 352.303371][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 352.315341][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 352.328181][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 352.339116][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 352.351025][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 352.363030][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 355.829803][ T30] audit: type=1400 audit(1771085955.000:599): avc: denied { recv } for pid=3402 comm="kworker/R-bat_e" saddr=10.128.0.169 src=46562 daddr=10.128.0.106 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 357.295195][ C1] net_ratelimit: 20795 callbacks suppressed [ 357.295217][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 357.296206][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 357.301433][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 357.313448][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 357.325466][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 357.338230][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 357.349138][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 357.361145][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 357.373096][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 357.385885][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 362.305474][ C0] net_ratelimit: 21723 callbacks suppressed [ 362.305474][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 362.305493][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 362.311774][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 362.323612][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 362.335538][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 362.347590][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:03:ce:27:1f:5d, vlan:1) [ 362.359456][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 362.372156][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 362.383204][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 362.395286][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 367.315247][ C0] net_ratelimit: 21970 callbacks suppressed [ 367.315268][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:03:ce:27:1f:5d, vlan:1) [ 367.315381][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 367.322389][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 367.333511][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 367.345458][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 367.357594][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 367.369474][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:03:ce:27:1f:5d, vlan:1) [ 367.381233][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 367.394096][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 367.405186][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 372.325327][ C0] net_ratelimit: 21748 callbacks suppressed [ 372.325350][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:03:ce:27:1f:5d, vlan:1) [ 372.325420][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 372.332457][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 372.343553][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 372.355451][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 372.367535][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 372.379374][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:03:ce:27:1f:5d, vlan:1) [ 372.391159][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 372.403972][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 372.415161][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 377.335329][ C0] net_ratelimit: 20977 callbacks suppressed [ 377.335349][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 377.335399][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 377.341658][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:03:ce:27:1f:5d, vlan:1) [ 377.353503][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 377.366250][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 377.377400][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 377.389387][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 377.401413][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 377.415499][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:03:ce:27:1f:5d, vlan:1) [ 377.425304][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 377.695146][ C1] sched: DL replenish lagged too much [ 378.783756][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.940088][ T8731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.345426][ C1] net_ratelimit: 20173 callbacks suppressed [ 382.345449][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 382.345570][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 382.351730][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 382.363644][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 382.375913][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 382.387821][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:03:ce:27:1f:5d, vlan:1) [ 382.400596][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 382.413284][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 382.424618][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 382.436619][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 387.355153][ C1] net_ratelimit: 21012 callbacks suppressed [ 387.355173][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 387.356097][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 387.361439][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 387.373281][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 387.385248][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 387.397869][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:03:ce:27:1f:5d, vlan:1) [ 387.409622][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 387.422310][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 387.433485][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 387.445467][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 392.365241][ C0] net_ratelimit: 21131 callbacks suppressed [ 392.365263][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 392.365518][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 392.371522][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 392.383487][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 392.395555][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:03:ce:27:1f:5d, vlan:1) [ 392.407323][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 392.420111][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 392.431247][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 392.443258][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 392.455176][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 397.375182][ C1] net_ratelimit: 21578 callbacks suppressed [ 397.375202][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 397.375594][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 397.381408][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 397.393476][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 397.405786][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 397.417425][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:03:ce:27:1f:5d, vlan:1) [ 397.429208][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 397.442075][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 397.453181][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 397.465247][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 402.385187][ C0] net_ratelimit: 21199 callbacks suppressed [ 402.385207][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 402.385206][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 402.385499][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 402.391510][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 402.403596][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 402.415789][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:03:ce:27:1f:5d, vlan:1) [ 402.427723][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 402.440505][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 402.451737][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 402.463768][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 407.395390][ C1] net_ratelimit: 21462 callbacks suppressed [ 407.395413][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 407.395514][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 407.401650][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 407.413710][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 407.425937][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 407.437787][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:03:ce:27:1f:5d, vlan:1) [ 407.449603][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 407.462337][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 407.473393][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 407.485393][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 412.405210][ C1] net_ratelimit: 21562 callbacks suppressed [ 412.405231][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 412.406084][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 412.411454][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 412.423353][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 412.435374][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 412.447255][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:03:ce:27:1f:5d, vlan:1) [ 412.459030][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 412.471902][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 412.483019][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 412.494965][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 417.415197][ C0] net_ratelimit: 21868 callbacks suppressed [ 417.415219][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 417.415299][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 417.421552][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 417.433532][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 417.445457][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:03:ce:27:1f:5d, vlan:1) [ 417.457272][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 417.470184][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 417.481308][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 417.493346][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 417.505232][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 422.425307][ C1] net_ratelimit: 21636 callbacks suppressed [ 422.425327][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 422.425441][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:03:ce:27:1f:5d, vlan:1) [ 422.431608][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 422.444458][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 422.455582][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 422.467575][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 422.479630][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 422.491707][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:03:ce:27:1f:5d, vlan:1) [ 422.503469][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 422.525209][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 427.105112][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 427.112078][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8816/1:b..l [ 427.120429][ C0] rcu: (detected by 0, t=10503 jiffies, g=26221, q=891 ncpus=2) [ 427.128141][ C0] task:syz.3.795 state:R running task stack:26456 pid:8816 tgid:8814 ppid:5801 task_flags:0x40044c flags:0x00080003 [ 427.142680][ C0] Call Trace: [ 427.145974][ C0] [ 427.148914][ C0] __schedule+0xfee/0x60e0 [ 427.153344][ C0] ? __lock_acquire+0x4a5/0x2630 [ 427.158330][ C0] ? __pfx___schedule+0x10/0x10 [ 427.163217][ C0] ? rcu_is_watching+0x12/0xc0 [ 427.168011][ C0] preempt_schedule_irq+0x50/0x90 [ 427.173047][ C0] irqentry_exit+0x17b/0x670 [ 427.177637][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 427.183641][ C0] RIP: 0010:lock_release+0x19e/0x320 [ 427.188930][ C0] Code: ff 65 0f c1 05 cb 12 28 12 83 f8 01 0f 85 3d 01 00 00 9c 58 f6 c4 02 0f 85 28 01 00 00 41 f7 c6 00 02 00 00 0f 85 de 00 00 00 <48> 8b 44 24 10 65 48 2b 05 1d cb 27 12 0f 85 63 01 00 00 48 83 c4 [ 427.208537][ C0] RSP: 0018:ffffc90002f67620 EFLAGS: 00000206 [ 427.214617][ C0] RAX: 0000000000000046 RBX: ffffffff8e7e94a0 RCX: ffffc90002f6762c [ 427.222590][ C0] RDX: 0000000000000000 RSI: ffffffff8de457a5 RDI: ffffffff8c1ad2a0 [ 427.230578][ C0] RBP: ffffffff81b7edde R08: 0000000000000001 R09: 0000000000000007 [ 427.238565][ C0] R10: 0000000000000200 R11: 0000000000010889 R12: ffff88803273a480 [ 427.246551][ C0] R13: ffffc90002f676d8 R14: 0000000000000202 R15: 0000000000000001 [ 427.254569][ C0] ? unwind_next_frame+0x3be/0x1ea0 [ 427.259806][ C0] unwind_next_frame+0x3c3/0x1ea0 [ 427.264842][ C0] ? kcov_close+0x34/0x60 [ 427.269203][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 427.275371][ C0] arch_stack_walk+0x94/0xf0 [ 427.279981][ C0] ? __fput+0x3ff/0xb40 [ 427.284138][ C0] stack_trace_save+0x8e/0xc0 [ 427.288825][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 427.294213][ C0] ? __lock_acquire+0x4a5/0x2630 [ 427.299173][ C0] save_stack+0x162/0x1e0 [ 427.303523][ C0] ? __pfx_save_stack+0x10/0x10 [ 427.308384][ C0] ? __free_frozen_pages+0x7ca/0x10a0 [ 427.313759][ C0] ? vfree.part.0+0x12b/0x9d0 [ 427.318443][ C0] ? vfree+0x55/0x80 [ 427.322423][ C0] ? kcov_close+0x34/0x60 [ 427.326756][ C0] ? page_ext_put+0x3e/0xd0 [ 427.331266][ C0] __reset_page_owner+0x84/0x190 [ 427.336209][ C0] __free_frozen_pages+0x7ca/0x10a0 [ 427.341412][ C0] vfree.part.0+0x12b/0x9d0 [ 427.345923][ C0] ? __pfx___might_resched+0x10/0x10 [ 427.351204][ C0] ? __pfx_kcov_close+0x10/0x10 [ 427.356056][ C0] ? rcu_is_watching+0x12/0xc0 [ 427.360818][ C0] ? __pfx_kcov_close+0x10/0x10 [ 427.365669][ C0] vfree+0x55/0x80 [ 427.369392][ C0] kcov_close+0x34/0x60 [ 427.373546][ C0] __fput+0x3ff/0xb40 [ 427.377528][ C0] ? cleanup_mnt+0x263/0x450 [ 427.382125][ C0] task_work_run+0x150/0x240 [ 427.386716][ C0] ? __pfx_task_work_run+0x10/0x10 [ 427.391830][ C0] do_exit+0x829/0x2a90 [ 427.395991][ C0] ? __pfx_do_exit+0x10/0x10 [ 427.400581][ C0] ? do_raw_spin_lock+0x128/0x260 [ 427.405600][ C0] ? find_held_lock+0x2b/0x80 [ 427.410272][ C0] ? get_signal+0x7e0/0x21e0 [ 427.414868][ C0] do_group_exit+0xd5/0x2a0 [ 427.419382][ C0] get_signal+0x1ec7/0x21e0 [ 427.423887][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 427.428834][ C0] ? __pfx_get_signal+0x10/0x10 [ 427.433682][ C0] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 427.435434][ C1] net_ratelimit: 20992 callbacks suppressed [ 427.435450][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 427.438715][ C0] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 427.445241][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 427.456727][ C0] arch_do_signal_or_restart+0x91/0x7a0 [ 427.456757][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 427.463964][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 427.475470][ C0] ? __x64_sys_recvmmsg+0x1d9/0x280 [ 427.475506][ C0] exit_to_user_mode_loop+0x86/0x4a0 [ 427.475536][ C0] do_syscall_64+0x67c/0xf80 [ 427.481674][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 427.487351][ C0] ? clear_bhb_loop+0x40/0x90 [ 427.487373][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.487389][ C0] RIP: 0033:0x7f6bf439bf79 [ 427.499715][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 427.504503][ C0] RSP: 002b:00007f6bf5201028 EFLAGS: 00000246 [ 427.510181][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 427.514341][ C0] ORIG_RAX: 000000000000012b [ 427.526526][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 427.530843][ C0] RAX: 0000000000010106 RBX: 00007f6bf4616090 RCX: 00007f6bf439bf79 [ 427.537285][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 427.541130][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 427.553374][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 427.559033][ C0] RBP: 00007f6bf44327e0 R08: 0000000000000000 R09: 0000000000000000 [ 427.559045][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 427.559053][ C0] R13: 00007f6bf4616128 R14: 00007f6bf4616090 R15: 00007fff1b6235a8 [ 427.559077][ C0] [ 427.571368][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 427.979923][ T5808] usb 2-1: config 0 interface 162 has no altsetting 0 [ 432.445193][ C1] net_ratelimit: 20388 callbacks suppressed [ 432.445212][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 432.445348][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:03:ce:27:1f:5d, vlan:1) [ 432.451427][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 432.464333][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 432.475631][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 432.487504][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 432.499449][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 432.511551][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:03:ce:27:1f:5d, vlan:1) [ 432.523384][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 432.536283][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 433.943509][ T5808] usb 2-1: string descriptor 0 read error: -71 [ 434.040907][ T5816] Bluetooth: hci5: command 0x0406 tx timeout [ 434.041396][ T5808] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 434.084037][ T5808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3