last executing test programs: 18m7.947965938s ago: executing program 0 (id=462): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) 18m7.824114654s ago: executing program 0 (id=464): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) r0 = syz_open_dev$mouse(0x0, 0x0, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89900) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x9, 0x5, 0x6, @mcast2, @remote, 0x8000, 0x40, 0x2feb}}) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40186f40, &(0x7f0000000440)=0x1f) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0) clock_gettime(0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x1d, 0x0, 0x0, 0xfffff03c}]}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8b, 0xfffa}, 0x32, [0x7ffe, 0xc959, 0xfffffff6, 0x0, 0x80, 0x2, 0x3, 0x7f, 0x4, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x2, 0x8, 0x4, 0x3c5b, 0x10000001, 0x3, 0x9, 0x1, 0x0, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x72, 0xcd37, 0x7, 0x0, 0x0, 0x10, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2c2, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x0, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f32, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0xb, 0x801, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x3, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x5, 0x9, 0x5, 0x2, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x1, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x3ff, 0x5, 0x4, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x802, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4004, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x9, 0xce7, 0x9ff, 0x1, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x8, 0x200a620, 0x2, 0x5, 0x1, 0xfffffffe, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d694, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x3, 0xca, 0x5, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x23a, &(0x7f00000004c0)={0x0, 0x1c2a, 0x10100, 0x2, 0x0, 0x0, r5}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {}, 0x1}) 18m5.839496507s ago: executing program 0 (id=471): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x54, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="80e2ffc14ef30f6c710fbd9cec61a638"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "4554e3a036d726e6"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="e340d5a9bb76f47aa596df965d4704d5"}]}]}, 0x54}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r3, &(0x7f00000001c0), &(0x7f0000000340)=@udp6=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r4, r2, 0x25, 0x2, @val=@tcx}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r3, &(0x7f0000000040)="ec", &(0x7f00000001c0)=@udp=r0}, 0x20) syz_emit_ethernet(0x37, &(0x7f00000007c0)=ANY=[], 0x0) 18m5.736099375s ago: executing program 0 (id=473): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@multicast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001580)={0x530, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@nested={0x461, 0xc2, 0x0, 0x1, [@typed={0xc, 0x111, 0x0, 0x0, @u64=0x200}, @nested={0x24, 0xe3, 0x0, 0x1, [@typed={0x8, 0x94, 0x0, 0x0, @u32=0xfdab}, @typed={0x8, 0x110, 0x0, 0x0, @uid=r1}, @typed={0xc, 0x41, 0x0, 0x0, @u64}, @nested={0x4, 0x56}]}, @nested={0x100, 0xdc, 0x0, 0x1, [@typed={0x8, 0x65, 0x0, 0x0, @fd=r0}, @nested={0x4, 0xfc}, @generic, @generic="8ea8b2a6be83a5d9b70126f962a37053c376361c01fe4e65298daa9338fc7c39c2aa270e1edf7c90c4a45be1f4259d7c15df1ef61e8acc89a87ed5a8c5797e9d4c7f0c63ad5874b02c8bf86c12b48b740da517c1c4f250f357bd1c48b90f97690c3af0597a01fb94e2aa2583fbcbeebd3298913f87198e7e6ee0d0b56c0e7a909dbc5ca6b19362d0ba493a609c9c6b47768033833cd1522a56d15e3ec0f0d6631058c01440459accedf0030f", @nested={0x1c, 0x96, 0x0, 0x1, [@typed={0x8, 0x7, 0x0, 0x0, @u32=0x6}, @typed={0x8, 0x141, 0x0, 0x0, @u32=0x4e57}, @nested={0x8, 0x35, 0x0, 0x1, [@nested={0x4, 0x2a}]}]}, @typed={0x8, 0x117, 0x0, 0x0, @u32=0x8fd8}, @typed={0x14, 0x146, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x26}}, @nested={0xc, 0x71, 0x0, 0x1, [@typed={0x8, 0x8, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x21}}]}]}, @typed={0x8, 0xc, 0x0, 0x0, @u32=0x7}, @generic="9721acfc8d07a3c612a064cbce4bd39553c535bbffb135979efe26079ae9c12f4bb3eb0c071ff56e5f698654", @nested={0xcc, 0xce, 0x0, 0x1, [@generic="99fd523c47734302c0b62a1f92786a672cf488a2f3935fd22cd027817122c66fa972ec6c75098ee0eef92532b13e7244df6a8b493f0c6097b754299bcb814d634f6ce4ae5b230cbb6244b210ceca0babe29d1b4814f5c8543135982af15624037d0412c1cc72980f59d895c6bf23f4a115ca6e21530e73fc7feb16b0260f6565c254a0bb4872be6f03667df35307842482d893d9ef05040946cae4eaeb7529d31628e8b1a6bc7951af2d056ef07555d3cc87693a03201e1d62db6d02", @nested={0x4, 0x101}, @nested={0x4, 0xb7}, @nested={0x4, 0x14b}]}, @generic="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", @generic="130971b10b8b104f9cf6d93aecad2752c392500a1798ead050c59db91d37cd17bef037f8acf973513210bc", @nested={0x104, 0xab, 0x0, 0x1, [@generic="d3955600930af5ec0fd69e89bcd4d7c93135049f386e13d2db916aeba805f8f49ec69fb257c1e65045e744efee0a73f3b104fb4ef0e2018b65c049f69840ca641f88ea4e7a6af09c85bc29dc585a0146a49e15f9fdc8b4f3bf81d9cdd524d8c0a1dc0fa8dca6b0af7a2b7bf5194036b526507a35802590510ca69447a063ee89f23e1d0878f88b307d16ff43051a72f560a910c0c0da34cb242664c185ff0d7dbde10e1bc3da1a9963", @generic, @generic="57bffe628665b976924845f5d080a921a4a6876462a05803cbf3f06791e43bbbb96d2ecfdfcba80fb509287ce998e7b54609525910878b976f31c60412dc963d252672756e47ded673d102db77f371f70ac84f2caa0856"]}]}, @generic="ea05b4e82fa974ce1656f1adb5bca417f73a5308a553b0e968d93695afe03c386485105ca0772e5bf5c3403ae317a37e651d48bd04a98807531041c57c770cd3356fcd79f4feefd817af91ed424a383905ca7b983b3c06eac408aba6a0257c11f4594b70cbd87b437cbd9ac60bb137303d61aed46860697ed53a7d1812bbd5681f9fe1f622aa5777a6368c0959f3b2f1c54724e1a0861ebff8ef75d6eb1df620fa3ff8aa4c8ff334e2c37ece6e5227cbcdf09fba6a"]}, 0x530}, 0x1, 0x0, 0x0, 0x8008054}, 0x20040014) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000900)=@caif=@rfm={0x25, 0x2, "f9ff81c77405a50470e18401f3066eeb"}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000980)}, {&(0x7f00000009c0)="8396b5b7d81314fdfc2c779612ae3e70692df8c6e2508f12816d582f52855e2e0d70d135587bdd6cdc948458f3ef566765e89b432cb74fc293e7e442f62bd012c4d1c46857865fa2a5690737357ec5a213b075c94147e84068d806143248ee92a0cea028aa5aea918f1aef11d2ea33085893427313016a172db83b3b3ac38189e7c40d3138de62ed4a71c07ba3d4a3dd5973b26cb4dfa166a57c115ee81461273a4d4d38ecbfeda00aa8eda695d2ce83407e2ed9688a35d314b13ed5174e4fa4386051e53feb680b7ce9ed98edbece8ec69f80c5b5026c", 0xd7}], 0x2}, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, 0x0) setpgid(0x0, r5) syz_open_procfs(r5, &(0x7f00000008c0)='attr/sockcreate\x00') mount$9p_fd(0x0, 0x0, 0x0, 0x10000, 0x0) unlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 18m5.243626291s ago: executing program 0 (id=475): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$FIOCLEX(r1, 0x5451) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000004800010000000000000000000a00806e0800000000000000140001800d2a79075827af5aa534d6815c2e93f10c000280"], 0x3c}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000"]) socket(0x80000000000000a, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}]}}}]}, 0x3c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x48) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f0000000040)) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) getsockopt$IP_VS_SO_GET_SERVICE(r8, 0x0, 0x483, &(0x7f0000000380), &(0x7f0000000400)=0x68) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 18m4.953948174s ago: executing program 0 (id=478): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xa, 0x4}, {0x0, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x90) 18m4.824271521s ago: executing program 32 (id=478): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xa, 0x4}, {0x0, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x90) 6m53.734939244s ago: executing program 3 (id=2812): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000280)={@remote, r2}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@gettaction={0x150, 0x32, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3}, @action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xec}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x54, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff6}}]}, @action_gd=@TCA_ACT_TAB={0x74, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf0f}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x14, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x150}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f0000000180)={0x200, 0x10bc, 0x8, 0x3}, 0x10) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) dup3(r8, r7, 0x0) r9 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r9, 0x10240d00) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc1}, &(0x7f0000000240)={0x0, "00833518ba52c8f492a52add2e7129c392ff3ee6d7f1e326384046f6818c44fbc819d786cec73aff01000000000000c0b1fe68252cb90e0000e98a00", 0x1e}, 0x48, r9) 6m52.552899515s ago: executing program 3 (id=2815): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x146) 6m52.438118962s ago: executing program 3 (id=2816): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}], 0x10) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) r5 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) sendto$inet6(r2, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0x9, @loopback, 0xc5f}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 6m51.289838792s ago: executing program 3 (id=2817): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00') r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) 6m51.172430756s ago: executing program 3 (id=2818): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) chdir(&(0x7f0000000080)='./file1\x00') symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00') r1 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) setpgid(0x0, r1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) 6m50.371747889s ago: executing program 3 (id=2821): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000000000 0040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@cgroup, r3, 0x2f, 0x10, 0x4}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000007e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x48) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = userfaultfd(0x80801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)={0x40000008}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000c0c000/0x1000)=nil, 0x1000, 0x4) readv(r7, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/163, 0xa3}], 0x1) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="6d932bbd7000000000000100"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m49.82509801s ago: executing program 33 (id=2821): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000000000 0040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@cgroup, r3, 0x2f, 0x10, 0x4}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000007e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x48) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = userfaultfd(0x80801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)={0x40000008}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000c0c000/0x1000)=nil, 0x1000, 0x4) readv(r7, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/163, 0xa3}], 0x1) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="6d932bbd7000000000000100"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 34.451285757s ago: executing program 6 (id=3871): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x8) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0xa, 0x401, 0x7ffffffd, 0x2, 0xa, "0441920887e87fcb367800000000080100", 0x1, 0x800}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x8) 34.31496532s ago: executing program 6 (id=3875): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000000)='map_files\x00') fchdir(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008031, 0xffffffffffffffff, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 33.124290117s ago: executing program 6 (id=3885): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, 0x0, 0x50b, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2405c000}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text32={0x20, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000008b04"]) 32.920798173s ago: executing program 6 (id=3888): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x60) mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x5) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x51a3cc0b}}, 0x50) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x280, 0x2) write$FUSE_INIT(r0, &(0x7f0000000140)={0x50, 0x0, r2, {0x7, 0x2b, 0x3, 0x22005008, 0x5, 0xf, 0xea99, 0x3, 0x0, 0x0, 0x4, 0x1c0000}}, 0x50) fchownat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xee01, 0x0, 0x1000) 32.820019093s ago: executing program 4 (id=3890): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000a80)=[{&(0x7f0000000580)=""/200, 0xc8}], 0x1, 0x111, 0x0) 32.746370303s ago: executing program 4 (id=3891): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x59, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x3, 0x0, 0x80, {0x3000}}, "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", "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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 32.525013938s ago: executing program 5 (id=3895): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001400)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0xfff1, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xb, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bc21, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xc, 0x1}, {}, {0x5, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004000) 32.42778269s ago: executing program 1 (id=3896): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x2}, {0xffe5}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0xa, 0x1, 0x5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 32.351074857s ago: executing program 4 (id=3898): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 32.283889333s ago: executing program 2 (id=3899): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000000)={0xa, 0x4e25, 0x80000, @mcast2, 0x7}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400000000000000290000000b0000004e"], 0x18}, 0x0) 32.28364631s ago: executing program 5 (id=3900): socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7fff0001}]}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pipe2$9p(&(0x7f0000000380), 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x5, 0xb4c}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 32.279236128s ago: executing program 1 (id=3901): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000080000000b00000006"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000001800), 0x1000, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000040), &(0x7f00000000c0)=""/11}, 0x20) 32.240207101s ago: executing program 2 (id=3902): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x4, &(0x7f00000009c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x15cd, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0xaf}]}, &(0x7f0000000a80)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 32.138186426s ago: executing program 5 (id=3903): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@gettclass={0x24, 0x2a, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x9}, {0xffff}, {0x7, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x2001c061}, 0x8000) 32.087830021s ago: executing program 2 (id=3904): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r1) sendmmsg$unix(r0, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x4e30}, 0x4, 0x0}}], 0x2, 0x40008004) 32.076810727s ago: executing program 1 (id=3905): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180400000000000000009500000000000000000008"], 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unshare(0x28000600) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000003180), 0x101200, 0x0) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000000140)={'\x00', 0x80000000, 0x2, 0xffff0a13}) 32.009062879s ago: executing program 6 (id=3906): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_FLOW={0x8, 0xb, 0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x20040046) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 32.001693382s ago: executing program 2 (id=3907): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f00000000c0)=0x94a, 0x4) syz_emit_ethernet(0x76, &(0x7f0000000100)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x40, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @dest_unreach={0x1, 0xc519ea7f13a9b11e, 0x0, 0x0, '\x00', {0xd, 0x6, "2318d3", 0xf4e, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, [@fragment={0x3a, 0x0, 0xc, 0x0, 0x0, 0x1, 0x65}], "d2588e45cd1357bc"}}}}}}}, 0x0) 32.000887553s ago: executing program 1 (id=3908): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 31.979407943s ago: executing program 4 (id=3909): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000ffff2abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="150300f3b324000008000a07", @ANYRES32, @ANYBLOB="240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2], 0x54}, 0x1, 0x0, 0x0, 0x24004844}, 0x8000002) 31.8979952s ago: executing program 5 (id=3910): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x20, 0x1, &(0x7f00000000c0)='L'}) 31.867674157s ago: executing program 2 (id=3911): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xe, @local, 0x4}, r2}}, 0x30) 31.740001493s ago: executing program 5 (id=3912): futex(&(0x7f0000000800)=0x1, 0x8, 0x0, 0x0, 0x0, 0x1) 31.739855735s ago: executing program 2 (id=3913): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x8c0) recvmmsg(r3, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x28) 31.695872786s ago: executing program 1 (id=3914): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendto$inet(r0, &(0x7f00000003c0)="9d", 0x1, 0x4000800, 0x0, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="de05b6d5d684a2eaf8625875221db8510bc33904c399e8c5", 0x18}], 0x1) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 31.695779717s ago: executing program 4 (id=3915): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000"], 0x48) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={0x0, 0x6}, 0x8) 30.672470427s ago: executing program 6 (id=3916): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x60) mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x5) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x51a3cc0b}}, 0x50) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x280, 0x2) write$FUSE_INIT(r0, &(0x7f0000000140)={0x50, 0x0, r2, {0x7, 0x2b, 0x3, 0x22005008, 0x5, 0xf, 0xea99, 0x3, 0x0, 0x0, 0x4, 0x1c0000}}, 0x50) fchownat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xee01, 0x0, 0x1000) 27.776942927s ago: executing program 1 (id=3917): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x21dd, &(0x7f00000001c0)={0x0, 0x1fffff, 0x0, 0x2, 0xd5}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xd, &(0x7f0000000140)={0x100000, 0x0, 0x0, 0x0, 0x4a}, 0x20) 24.032385462s ago: executing program 5 (id=3918): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000022c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x10, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0x18, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xd0}, @TCA_ROUTE4_TO={0x8, 0x2, 0xa}, @TCA_ROUTE4_ACT={0x4}]}}]}, 0x48}}, 0x40040) 23.968889431s ago: executing program 4 (id=3919): r0 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) accept$inet(r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000000, 0xdc0, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 34 (id=3913): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x8c0) recvmmsg(r3, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x28) kernel console output (not intermixed with test programs): : 0000000000000000 [ 1123.546971][T19697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1123.546981][T19697] R13: 00007fbdc13e6038 R14: 00007fbdc13e5fa0 R15: 00007ffc662f26e8 [ 1123.547003][T19697] [ 1123.760588][ C1] vkms_vblank_simulate: vblank timer overrun [ 1123.990064][T10855] usb 3-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 1124.003215][T10855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.011564][T10855] usb 3-1: Product: syz [ 1124.018320][T10855] usb 3-1: Manufacturer: syz [ 1124.486121][T10855] usb 3-1: SerialNumber: syz [ 1124.506599][T10855] usb 3-1: config 0 descriptor?? [ 1124.516678][T19686] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1124.531242][T10855] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1124.548196][T10855] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1124.636831][T10855] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1124.743938][T19705] FAULT_INJECTION: forcing a failure. [ 1124.743938][T19705] name failslab, interval 1, probability 0, space 0, times 0 [ 1124.756928][T19705] CPU: 0 UID: 0 PID: 19705 Comm: syz.4.3567 Not tainted syzkaller #0 PREEMPT(full) [ 1124.756953][T19705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1124.756964][T19705] Call Trace: [ 1124.756971][T19705] [ 1124.756978][T19705] dump_stack_lvl+0x16c/0x1f0 [ 1124.757006][T19705] should_fail_ex+0x512/0x640 [ 1124.757027][T19705] ? fs_reclaim_acquire+0xae/0x150 [ 1124.757053][T19705] ? tomoyo_encode2+0x100/0x3e0 [ 1124.757079][T19705] should_failslab+0xc2/0x120 [ 1124.757100][T19705] __kmalloc_noprof+0xd2/0x510 [ 1124.757125][T19705] tomoyo_encode2+0x100/0x3e0 [ 1124.757155][T19705] tomoyo_encode+0x29/0x50 [ 1124.757184][T19705] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1124.757218][T19705] tomoyo_path_number_perm+0x245/0x580 [ 1124.757239][T19705] ? tomoyo_path_number_perm+0x237/0x580 [ 1124.757264][T19705] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1124.757286][T19705] ? __schedule+0x11a3/0x5de0 [ 1124.757306][T19705] ? preempt_schedule_common+0x44/0xc0 [ 1124.757351][T19705] ? find_held_lock+0x2b/0x80 [ 1124.757374][T19705] ? hook_file_ioctl_common+0x145/0x410 [ 1124.757399][T19705] ? __fget_files+0x20e/0x3c0 [ 1124.757423][T19705] security_file_ioctl+0x9b/0x240 [ 1124.757450][T19705] __x64_sys_ioctl+0xb7/0x210 [ 1124.757478][T19705] do_syscall_64+0xcd/0x4e0 [ 1124.757503][T19705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.757521][T19705] RIP: 0033:0x7fbdc118eec9 [ 1124.757537][T19705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1124.757554][T19705] RSP: 002b:00007fbdc20ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1124.757573][T19705] RAX: ffffffffffffffda RBX: 00007fbdc13e6180 RCX: 00007fbdc118eec9 [ 1124.757585][T19705] RDX: 0000200000000180 RSI: 0000000040087543 RDI: 0000000000000008 [ 1124.757596][T19705] RBP: 00007fbdc20ce090 R08: 0000000000000000 R09: 0000000000000000 [ 1124.757606][T19705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1124.757617][T19705] R13: 00007fbdc13e6218 R14: 00007fbdc13e6180 R15: 00007ffc662f26e8 [ 1124.757643][T19705] [ 1124.964642][ C0] vkms_vblank_simulate: vblank timer overrun [ 1124.972785][T19705] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1125.002174][T19707] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3569'. [ 1125.118008][T10855] usb 3-1: USB disconnect, device number 69 [ 1125.553070][ T30] audit: type=1400 audit(1758685263.373:1082): avc: denied { connect } for pid=19710 comm="syz.1.3571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1125.733892][ T5939] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1125.749544][ T30] audit: type=1400 audit(1758685263.433:1083): avc: denied { accept } for pid=19710 comm="syz.1.3571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1125.770420][ T30] audit: type=1400 audit(1758685263.463:1084): avc: denied { read } for pid=19710 comm="syz.1.3571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1125.811720][ T30] audit: type=1400 audit(1758685263.763:1085): avc: denied { read write } for pid=19718 comm="syz.2.3573" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1125.859074][ T30] audit: type=1400 audit(1758685263.763:1086): avc: denied { open } for pid=19718 comm="syz.2.3573" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1125.893028][ T5939] usb 7-1: device descriptor read/64, error -71 [ 1125.906734][T19728] 9pnet_fd: Insufficient options for proto=fd [ 1125.912852][ T30] audit: type=1400 audit(1758685263.853:1087): avc: denied { read write } for pid=19726 comm="syz.4.3574" name="usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1125.940846][ T30] audit: type=1400 audit(1758685263.863:1088): avc: denied { open } for pid=19726 comm="syz.4.3574" path="/dev/usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1126.183295][ T5939] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1126.401120][ T5939] usb 7-1: device descriptor read/64, error -71 [ 1126.684555][ T5939] usb usb7-port1: attempt power cycle [ 1127.213170][ T5939] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1127.423551][ T5939] usb 7-1: device descriptor read/8, error -71 [ 1127.803008][ T5939] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1127.835451][ T5939] usb 7-1: device descriptor read/8, error -71 [ 1128.004819][ T5939] usb usb7-port1: unable to enumerate USB device [ 1128.923805][ T9] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1129.019828][T19773] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3586'. [ 1129.029576][T19773] fuse: Bad value for 'fd' [ 1129.094823][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 1129.101333][ T9] usb 7-1: config 0 has an invalid interface number: 151 but max is 1 [ 1129.110356][ T9] usb 7-1: config 0 has no interface number 1 [ 1129.116784][ T9] usb 7-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1129.133003][ T9] usb 7-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 1129.147612][ T9] usb 7-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 1129.159294][ T9] usb 7-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1129.171390][ T9] usb 7-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1129.192255][ T9] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1129.206858][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1129.218048][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1129.285332][ T9] usb 7-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 1129.295494][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.309603][ T9] usb 7-1: Product: syz [ 1129.381403][T19778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3587'. [ 1129.421067][T19778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3587'. [ 1129.432359][T19778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3587'. [ 1129.448418][T19778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3587'. [ 1129.513453][T19778] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3587'. [ 1129.716341][ T9] usb 7-1: Manufacturer: syz [ 1129.720952][ T9] usb 7-1: SerialNumber: syz [ 1129.762681][ T9] usb 7-1: config 0 descriptor?? [ 1129.769532][T19762] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1129.831696][ T9] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1129.882873][ T9] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1131.595839][T19795] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3589'. [ 1132.185669][T19800] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 1132.193354][T19800] audit: out of memory in audit_log_start [ 1132.200208][ T30] audit: type=1400 audit(1758685270.143:1089): avc: denied { create } for pid=19799 comm="syz.4.3592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1132.224636][ T30] audit: type=1400 audit(1758685270.153:1090): avc: denied { write } for pid=19799 comm="syz.4.3592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1132.555263][T19810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3595'. [ 1132.565234][T19810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3595'. [ 1132.574312][T19810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3595'. [ 1132.583448][T19810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3595'. [ 1132.601211][T19810] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3595'. [ 1133.613735][T19817] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.945513][ T1900] usb 7-1: USB disconnect, device number 39 [ 1134.654331][T19817] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.801691][T19817] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1135.562619][T19817] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1135.822986][ T1900] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1136.449168][ T1900] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1136.462975][ T1900] usb 7-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1136.637723][ T1900] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1136.646834][ T1900] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1136.679338][ T1900] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1136.688678][ T1900] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1136.715103][ T1900] usb 7-1: Product: syz [ 1136.731040][ T1900] usb 7-1: Manufacturer: syz [ 1136.748706][ T6820] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.774430][ T1900] cdc_wdm 7-1:1.0: skipping garbage [ 1136.781319][ T1900] cdc_wdm 7-1:1.0: skipping garbage [ 1136.786925][ T1900] cdc_wdm 7-1:1.0: skipping garbage [ 1136.797638][ T1900] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1136.829665][ T6820] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.860827][ T6820] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.930592][T17955] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.064910][ T6820] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1137.721658][T12262] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1137.737427][T12262] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1137.747873][T12262] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1137.757282][T12262] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1137.774387][T12262] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1137.798909][ T6820] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1137.883397][ T6820] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.006401][T19857] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3605'. [ 1138.460535][ T6820] team0: Port device netdevsim0 removed [ 1138.495694][ T6820] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.612469][ T1900] usb 7-1: USB disconnect, device number 40 [ 1139.096755][T19850] chnl_net:caif_netlink_parms(): no params data found [ 1139.154475][ T1900] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1139.397451][ T1900] usb 7-1: Using ep0 maxpacket: 8 [ 1139.408933][ T1900] usb 7-1: config 0 has an invalid interface number: 151 but max is 1 [ 1139.901075][T12262] Bluetooth: hci0: command tx timeout [ 1139.974259][ T1900] usb 7-1: config 0 has no interface number 1 [ 1140.249450][ T1900] usb 7-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1140.249481][ T1900] usb 7-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 1140.249507][ T1900] usb 7-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 1140.249532][ T1900] usb 7-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1140.249557][ T1900] usb 7-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1140.249591][ T1900] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1140.249615][ T1900] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1140.249639][ T1900] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1140.346233][ T1900] usb 7-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 1140.355611][ T1900] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.364116][ T1900] usb 7-1: Product: syz [ 1140.368264][ T1900] usb 7-1: Manufacturer: syz [ 1140.372834][ T1900] usb 7-1: SerialNumber: syz [ 1140.415911][ T1900] usb 7-1: config 0 descriptor?? [ 1140.466066][T19865] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1140.514648][ T1900] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1140.611590][ T6820] bridge_slave_1: left allmulticast mode [ 1140.626345][ T1900] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1140.635387][ T6820] bridge_slave_1: left promiscuous mode [ 1140.641106][ T6820] bridge0: port 2(bridge_slave_1) entered disabled state [ 1140.680764][ T6820] bridge_slave_0: left allmulticast mode [ 1140.700273][ T6820] bridge_slave_0: left promiscuous mode [ 1140.716575][ T6820] bridge0: port 1(bridge_slave_0) entered disabled state [ 1140.908992][ T30] audit: type=1400 audit(1758685278.863:1091): avc: denied { connect } for pid=19872 comm="syz.2.3610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1140.985876][T19887] FAULT_INJECTION: forcing a failure. [ 1140.985876][T19887] name failslab, interval 1, probability 0, space 0, times 0 [ 1141.138011][T19887] CPU: 0 UID: 0 PID: 19887 Comm: syz.4.3613 Not tainted syzkaller #0 PREEMPT(full) [ 1141.138028][T19887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1141.138035][T19887] Call Trace: [ 1141.138040][T19887] [ 1141.138044][T19887] dump_stack_lvl+0x16c/0x1f0 [ 1141.138063][T19887] should_fail_ex+0x512/0x640 [ 1141.138078][T19887] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1141.138092][T19887] should_failslab+0xc2/0x120 [ 1141.138106][T19887] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1141.138118][T19887] ? __alloc_skb+0x2b2/0x380 [ 1141.138133][T19887] __alloc_skb+0x2b2/0x380 [ 1141.138146][T19887] ? __pfx___alloc_skb+0x10/0x10 [ 1141.138159][T19887] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1141.138177][T19887] netlink_alloc_large_skb+0x69/0x130 [ 1141.138193][T19887] netlink_sendmsg+0x6a1/0xdd0 [ 1141.138210][T19887] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1141.138231][T19887] ? security_socket_sendmsg+0xb8/0x240 [ 1141.138246][T19887] ? __sanitizer_cov_trace_pc+0x3b/0x70 [ 1141.138262][T19887] ____sys_sendmsg+0xa95/0xc70 [ 1141.138280][T19887] ? copy_msghdr_from_user+0x10a/0x160 [ 1141.138294][T19887] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1141.138318][T19887] ___sys_sendmsg+0x134/0x1d0 [ 1141.138332][T19887] ? __pfx____sys_sendmsg+0x10/0x10 [ 1141.138362][T19887] __sys_sendmsg+0x16d/0x220 [ 1141.138376][T19887] ? __pfx___sys_sendmsg+0x10/0x10 [ 1141.138396][T19887] ? rcu_is_watching+0x12/0xc0 [ 1141.138412][T19887] do_syscall_64+0xcd/0x4e0 [ 1141.138429][T19887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1141.138440][T19887] RIP: 0033:0x7fbdc118eec9 [ 1141.138449][T19887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1141.138460][T19887] RSP: 002b:00007fbdc2110038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1141.138472][T19887] RAX: ffffffffffffffda RBX: 00007fbdc13e5fa0 RCX: 00007fbdc118eec9 [ 1141.138479][T19887] RDX: 0000000000040000 RSI: 0000200000000e80 RDI: 0000000000000003 [ 1141.138486][T19887] RBP: 00007fbdc2110090 R08: 0000000000000000 R09: 0000000000000000 [ 1141.138493][T19887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1141.138503][T19887] R13: 00007fbdc13e6038 R14: 00007fbdc13e5fa0 R15: 00007ffc662f26e8 [ 1141.138516][T19887] [ 1141.361294][ C0] vkms_vblank_simulate: vblank timer overrun [ 1141.917288][T17801] Process accounting resumed [ 1141.924672][T12262] Bluetooth: hci0: command tx timeout [ 1142.085480][ T30] audit: type=1400 audit(1758685279.923:1092): avc: denied { ioctl } for pid=19890 comm="syz.4.3614" path="socket:[75900]" dev="sockfs" ino=75900 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1142.404471][ T6820] dvmrp8 (unregistering): left allmulticast mode [ 1142.502422][T19895] netlink: 4856 bytes leftover after parsing attributes in process `syz.2.3615'. [ 1142.513467][T19895] openvswitch: netlink: Message has 5620 unknown bytes. [ 1142.520421][T19895] openvswitch: netlink: Actions may not be safe on all matching packets [ 1143.056575][ T6820] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1143.067445][ T6820] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1143.077378][ T6820] bond0 (unregistering): Released all slaves [ 1143.236923][ T6820] tipc: Left network mode [ 1143.242806][T19850] bridge0: port 1(bridge_slave_0) entered blocking state [ 1143.255088][T19850] bridge0: port 1(bridge_slave_0) entered disabled state [ 1143.262427][T19850] bridge_slave_0: entered allmulticast mode [ 1143.277292][T19850] bridge_slave_0: entered promiscuous mode [ 1143.300464][T19850] bridge0: port 2(bridge_slave_1) entered blocking state [ 1143.327687][T19850] bridge0: port 2(bridge_slave_1) entered disabled state [ 1143.347407][T19850] bridge_slave_1: entered allmulticast mode [ 1143.367566][T19850] bridge_slave_1: entered promiscuous mode [ 1143.616039][T19850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1143.681201][T19850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1143.751663][ T5939] usb 7-1: USB disconnect, device number 41 [ 1143.801971][T19924] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3620'. [ 1143.917093][ T30] audit: type=1400 audit(1758685281.833:1093): avc: denied { listen } for pid=19925 comm="syz.6.3621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1143.965875][T19927] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3621'. [ 1144.010332][T12262] Bluetooth: hci0: command tx timeout [ 1144.082073][ T30] audit: type=1400 audit(1758685281.853:1094): avc: denied { accept } for pid=19925 comm="syz.6.3621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1144.106201][ T30] audit: type=1400 audit(1758685281.903:1095): avc: denied { ioctl } for pid=19925 comm="syz.6.3621" path="socket:[75970]" dev="sockfs" ino=75970 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1144.573057][ T30] audit: type=1400 audit(1758685282.523:1096): avc: denied { getopt } for pid=19933 comm="syz.4.3622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1144.676561][T19927] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1144.845136][T19927] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1145.001039][T19850] team0: Port device team_slave_0 added [ 1145.068222][T19850] team0: Port device team_slave_1 added [ 1145.290458][T19949] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3623'. [ 1145.680096][T19850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1145.764588][T19850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1145.851931][T19850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1145.884733][ T6820] hsr_slave_0: left promiscuous mode [ 1146.129035][T12262] Bluetooth: hci0: command tx timeout [ 1146.269310][ T6820] hsr_slave_1: left promiscuous mode [ 1146.309079][ T6820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1146.329494][ T6820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1146.593124][ T48] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 1146.749018][ T6820] team_slave_0: left promiscuous mode [ 1146.754824][ T6820] team_slave_1: left promiscuous mode [ 1146.767192][ T6820] veth1_macvtap: left promiscuous mode [ 1146.772852][ T6820] veth0_macvtap: left promiscuous mode [ 1146.787060][ T6820] veth1_vlan: left promiscuous mode [ 1146.792510][ T6820] veth0_vlan: left promiscuous mode [ 1146.936819][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1146.968132][ T48] usb 2-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 1147.007642][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.073427][ T48] usb 2-1: config 0 descriptor?? [ 1147.078963][T19960] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1147.809039][ T48] belkin 0003:050D:3201.0028: unknown main item tag 0x0 [ 1147.821398][ T48] belkin 0003:050D:3201.0028: unknown main item tag 0x0 [ 1147.828922][ T48] belkin 0003:050D:3201.0028: unknown main item tag 0x0 [ 1147.876786][ T48] belkin 0003:050D:3201.0028: hiddev0,hidraw0: USB HID v1.01 Device [HID 050d:3201] on usb-dummy_hcd.1-1/input0 [ 1147.951315][ T6820] team0 (unregistering): Port device team_slave_1 removed [ 1148.054593][ T6820] team0 (unregistering): Port device team_slave_0 removed [ 1148.747570][T19850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1148.755721][T19850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1148.784800][T19850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1148.837720][T19984] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1149.130429][T19850] hsr_slave_0: entered promiscuous mode [ 1149.626559][T19850] hsr_slave_1: entered promiscuous mode [ 1149.661066][T19850] debugfs: 'hsr0' already exists in 'hsr' [ 1149.720021][ T9] usb 2-1: USB disconnect, device number 85 [ 1149.759959][T19850] Cannot create hsr debugfs directory [ 1149.784914][T19998] FAULT_INJECTION: forcing a failure. [ 1149.784914][T19998] name failslab, interval 1, probability 0, space 0, times 0 [ 1150.492365][T19998] CPU: 1 UID: 0 PID: 19998 Comm: syz.4.3633 Not tainted syzkaller #0 PREEMPT(full) [ 1150.492393][T19998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1150.492404][T19998] Call Trace: [ 1150.492410][T19998] [ 1150.492418][T19998] dump_stack_lvl+0x16c/0x1f0 [ 1150.492445][T19998] should_fail_ex+0x512/0x640 [ 1150.492467][T19998] ? __kmalloc_noprof+0xbf/0x510 [ 1150.492487][T19998] ? alloc_pipe_info+0x1ec/0x590 [ 1150.492508][T19998] should_failslab+0xc2/0x120 [ 1150.492528][T19998] __kmalloc_noprof+0xd2/0x510 [ 1150.492551][T19998] alloc_pipe_info+0x1ec/0x590 [ 1150.492575][T19998] splice_direct_to_actor+0x77d/0xa30 [ 1150.492596][T19998] ? __pfx_direct_splice_actor+0x10/0x10 [ 1150.492615][T19998] ? inode_has_perm+0x16f/0x1d0 [ 1150.492637][T19998] ? file_has_perm+0x27d/0x350 [ 1150.492656][T19998] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1150.492675][T19998] ? __pfx_file_has_perm+0x10/0x10 [ 1150.492700][T19998] do_splice_direct+0x174/0x240 [ 1150.492719][T19998] ? __pfx_do_splice_direct+0x10/0x10 [ 1150.492739][T19998] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1150.492759][T19998] ? bpf_lsm_file_permission+0x9/0x10 [ 1150.492782][T19998] ? security_file_permission+0x71/0x210 [ 1150.492808][T19998] ? rw_verify_area+0xcf/0x6c0 [ 1150.492838][T19998] do_sendfile+0xb06/0xe50 [ 1150.492860][T19998] ? __pfx_do_sendfile+0x10/0x10 [ 1150.492887][T19998] ? __fget_files+0x20e/0x3c0 [ 1150.492913][T19998] __x64_sys_sendfile64+0x1d8/0x220 [ 1150.492933][T19998] ? ksys_write+0x1ac/0x250 [ 1150.492951][T19998] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1150.492980][T19998] do_syscall_64+0xcd/0x4e0 [ 1150.493005][T19998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.493023][T19998] RIP: 0033:0x7fbdc118eec9 [ 1150.493038][T19998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1150.493056][T19998] RSP: 002b:00007fbdc20ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1150.493075][T19998] RAX: ffffffffffffffda RBX: 00007fbdc13e6180 RCX: 00007fbdc118eec9 [ 1150.493087][T19998] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000009 [ 1150.493098][T19998] RBP: 00007fbdc20ce090 R08: 0000000000000000 R09: 0000000000000000 [ 1150.493109][T19998] R10: 000000007fffefff R11: 0000000000000246 R12: 0000000000000001 [ 1150.493120][T19998] R13: 00007fbdc13e6218 R14: 00007fbdc13e6180 R15: 00007ffc662f26e8 [ 1150.493146][T19998] [ 1151.321496][ T6820] IPVS: stop unused estimator thread 0... [ 1151.902993][ T1900] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1152.133046][ T1900] usb 2-1: Using ep0 maxpacket: 32 [ 1152.146469][ T1900] usb 2-1: config 0 has an invalid interface number: 230 but max is 0 [ 1152.171254][ T1900] usb 2-1: config 0 has no interface number 0 [ 1152.207930][ T1900] usb 2-1: config 0 interface 230 has no altsetting 0 [ 1152.244652][ T1900] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 1152.255434][ T1900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.428916][ T30] audit: type=1400 audit(1758685290.293:1097): avc: denied { set_context_mgr } for pid=20024 comm="syz.4.3638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1152.449361][T20025] binder: 20024:20025 ioctl ab00 3 returned -22 [ 1152.467094][ T1900] usb 2-1: Product: syz [ 1152.471290][ T1900] usb 2-1: Manufacturer: syz [ 1152.478148][ T1900] usb 2-1: SerialNumber: syz [ 1152.918055][ T30] audit: type=1400 audit(1758685290.513:1098): avc: denied { map } for pid=20024 comm="syz.4.3638" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1152.944410][ T1900] usb 2-1: config 0 descriptor?? [ 1152.950354][ T30] audit: type=1400 audit(1758685290.523:1099): avc: denied { call } for pid=20024 comm="syz.4.3638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1152.989161][ T1900] ums-usbat 2-1:0.230: USB Mass Storage device detected [ 1153.001181][ T30] audit: type=1400 audit(1758685290.533:1100): avc: denied { transfer } for pid=20024 comm="syz.4.3638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1153.039750][ T1900] ums-usbat 2-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 1153.312954][ T30] audit: type=1400 audit(1758685291.233:1101): avc: denied { read } for pid=20014 comm="syz.1.3636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1155.162256][T19850] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1155.197702][T19850] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1155.247129][T19850] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1155.278615][ T1900] ums-usbat 2-1:0.230: probe with driver ums-usbat failed with error -5 [ 1155.290403][T19850] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1155.363076][ T1900] usb 2-1: USB disconnect, device number 86 [ 1155.550025][ T30] audit: type=1400 audit(1758685293.463:1102): avc: denied { setopt } for pid=20059 comm="syz.1.3642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1155.622218][ T30] audit: type=1400 audit(1758685293.463:1103): avc: denied { ioctl } for pid=20059 comm="syz.1.3642" path="socket:[76156]" dev="sockfs" ino=76156 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1155.656795][T19850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1155.804648][ T30] audit: type=1400 audit(1758685293.673:1104): avc: denied { shutdown } for pid=20059 comm="syz.1.3642" laddr=fe80::b lport=47202 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1155.854927][T20074] 9pnet: p9_errstr2errno: server reported unknown error [ 1155.934400][T19850] 8021q: adding VLAN 0 to HW filter on device team0 [ 1156.026992][T11408] bridge0: port 1(bridge_slave_0) entered blocking state [ 1156.034183][T11408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1156.057252][ T9944] bridge0: port 2(bridge_slave_1) entered blocking state [ 1156.064377][ T9944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1156.160365][ T1900] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1156.653142][ T1900] usb 2-1: Using ep0 maxpacket: 16 [ 1156.709053][T20068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3642'. [ 1156.743484][T20068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1156.754192][T20068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1156.783985][T19850] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1156.794554][T19850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1160.663103][T10855] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1160.699270][T19850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1161.473336][T10855] usb 7-1: Using ep0 maxpacket: 32 [ 1161.501124][T10855] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1161.520326][T10855] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1161.553450][T10855] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1161.590026][ T1900] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1161.614639][T10855] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1161.632977][ T1900] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1161.640568][ T1900] usb 2-1: can't read configurations, error -71 [ 1161.657175][T10855] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1161.809326][T10855] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.817580][T10855] usb 7-1: Product: syz [ 1161.821820][T10855] usb 7-1: Manufacturer: syz [ 1161.827248][T10855] usb 7-1: SerialNumber: syz [ 1162.881967][T10855] usb 7-1: 0:2 : does not exist [ 1162.914959][T10855] usb 7-1: USB disconnect, device number 42 [ 1163.029050][T19850] veth0_vlan: entered promiscuous mode [ 1163.064125][T19850] veth1_vlan: entered promiscuous mode [ 1163.152528][T19850] veth0_macvtap: entered promiscuous mode [ 1163.184906][T19850] veth1_macvtap: entered promiscuous mode [ 1163.332398][T19850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1163.378011][T19850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1163.442723][ T6820] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1163.483102][ T6820] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1163.524129][ T6820] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1163.569740][ T6820] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.227440][T17955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1164.244649][T17955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1164.366471][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1164.477635][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1164.929325][T20184] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1165.953538][ T30] audit: type=1400 audit(1758685303.913:1105): avc: denied { relabelfrom } for pid=20197 comm="syz.5.3664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1165.999860][T20201] block nbd1: Attempted send on invalid socket [ 1166.006647][T20201] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1166.018287][T20201] SQUASHFS error: Failed to read block 0x0: -5 [ 1166.048560][ T30] audit: type=1400 audit(1758685303.943:1106): avc: denied { relabelto } for pid=20197 comm="syz.5.3664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1166.313200][T20201] unable to read squashfs_super_block [ 1166.331064][ T30] audit: type=1400 audit(1758685304.033:1107): avc: denied { ioctl } for pid=20197 comm="syz.5.3664" path="socket:[76375]" dev="sockfs" ino=76375 ioctlcmd=0x89e6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1171.402854][T12262] Bluetooth: hci2: unexpected event 0x14 length: 20 > 6 [ 1172.293812][T14800] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1172.633135][T14800] usb 6-1: Using ep0 maxpacket: 16 [ 1172.644505][T14800] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1172.655604][T17801] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1172.682326][T14800] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1172.736540][T14800] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1172.816253][T14800] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1173.449228][T14800] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1173.503296][T17801] usb 3-1: Using ep0 maxpacket: 8 [ 1173.518138][T17801] usb 3-1: config 0 has no interfaces? [ 1173.534235][T17801] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1173.548919][T17801] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.557259][T14800] usb 6-1: config 0 descriptor?? [ 1173.661105][T20261] FAULT_INJECTION: forcing a failure. [ 1173.661105][T20261] name failslab, interval 1, probability 0, space 0, times 0 [ 1173.702376][T20261] CPU: 0 UID: 0 PID: 20261 Comm: syz.6.3680 Not tainted syzkaller #0 PREEMPT(full) [ 1173.702402][T20261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1173.702413][T20261] Call Trace: [ 1173.702420][T20261] [ 1173.702427][T20261] dump_stack_lvl+0x16c/0x1f0 [ 1173.702455][T20261] should_fail_ex+0x512/0x640 [ 1173.702477][T20261] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1173.702506][T20261] should_failslab+0xc2/0x120 [ 1173.702526][T20261] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1173.702552][T20261] ? tcp_sendmsg_fastopen+0x24d/0x750 [ 1173.702585][T20261] tcp_sendmsg_fastopen+0x24d/0x750 [ 1173.702623][T20261] tcp_sendmsg_locked+0x23ff/0x42a0 [ 1173.702642][T20261] ? avc_has_perm+0x144/0x1f0 [ 1173.702664][T20261] ? __lock_acquire+0xb97/0x1ce0 [ 1173.702700][T20261] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 1173.702731][T20261] ? do_raw_spin_lock+0x12c/0x2b0 [ 1173.702750][T20261] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1173.702777][T20261] ? __local_bh_enable_ip+0xa4/0x120 [ 1173.702803][T20261] tcp_sendmsg+0x2e/0x50 [ 1173.702818][T20261] ? __pfx_tcp_sendmsg+0x10/0x10 [ 1173.702835][T20261] inet_sendmsg+0xb9/0x140 [ 1173.702855][T20261] __sys_sendto+0x43c/0x520 [ 1173.702878][T20261] ? __pfx___sys_sendto+0x10/0x10 [ 1173.702919][T20261] ? ksys_write+0x1ac/0x250 [ 1173.702938][T20261] ? __pfx_ksys_write+0x10/0x10 [ 1173.702960][T20261] __x64_sys_sendto+0xe0/0x1c0 [ 1173.702978][T20261] ? do_syscall_64+0x91/0x4e0 [ 1173.703001][T20261] ? lockdep_hardirqs_on+0x7c/0x110 [ 1173.703023][T20261] do_syscall_64+0xcd/0x4e0 [ 1173.703048][T20261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.703066][T20261] RIP: 0033:0x7f6041d8eec9 [ 1173.703081][T20261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1173.703099][T20261] RSP: 002b:00007f6042c0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1173.703117][T20261] RAX: ffffffffffffffda RBX: 00007f6041fe5fa0 RCX: 00007f6041d8eec9 [ 1173.703129][T20261] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1173.703139][T20261] RBP: 00007f6042c0f090 R08: 0000200000000080 R09: 0000000000000010 [ 1173.703149][T20261] R10: 0000000020000800 R11: 0000000000000246 R12: 0000000000000001 [ 1173.703160][T20261] R13: 00007f6041fe6038 R14: 00007f6041fe5fa0 R15: 00007ffd8ab447a8 [ 1173.703186][T20261] [ 1173.983451][T20242] random: crng reseeded on system resumption [ 1174.005886][T17801] usb 3-1: Product: syz [ 1174.010106][T17801] usb 3-1: Manufacturer: syz [ 1174.352429][T17801] usb 3-1: SerialNumber: syz [ 1174.518757][T20270] FAULT_INJECTION: forcing a failure. [ 1174.518757][T20270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1174.536484][T20270] CPU: 1 UID: 0 PID: 20270 Comm: syz.6.3683 Not tainted syzkaller #0 PREEMPT(full) [ 1174.536509][T20270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1174.536520][T20270] Call Trace: [ 1174.536528][T20270] [ 1174.536535][T20270] dump_stack_lvl+0x16c/0x1f0 [ 1174.536564][T20270] should_fail_ex+0x512/0x640 [ 1174.536590][T20270] _copy_from_user+0x2e/0xd0 [ 1174.536616][T20270] copy_from_sockptr_offset.constprop.0+0x153/0x1a0 [ 1174.536637][T20270] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 1174.536655][T20270] ? rcu_is_watching+0x12/0xc0 [ 1174.536679][T20270] ? lockdep_hardirqs_on+0x7c/0x110 [ 1174.536706][T20270] packet_setsockopt+0xbbd/0x33c0 [ 1174.536729][T20270] ? selinux_netlbl_socket_setsockopt+0x7a/0x470 [ 1174.536758][T20270] ? __pfx_packet_setsockopt+0x10/0x10 [ 1174.536784][T20270] ? selinux_netlbl_socket_setsockopt+0x183/0x470 [ 1174.536811][T20270] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 1174.536843][T20270] ? find_held_lock+0x2b/0x80 [ 1174.536870][T20270] ? selinux_socket_setsockopt+0x6a/0x80 [ 1174.536894][T20270] ? __pfx_packet_setsockopt+0x10/0x10 [ 1174.536916][T20270] do_sock_setsockopt+0xf0/0x1d0 [ 1174.536946][T20270] __sys_setsockopt+0x1a0/0x230 [ 1174.536971][T20270] __x64_sys_setsockopt+0xbd/0x160 [ 1174.536991][T20270] ? do_syscall_64+0x91/0x4e0 [ 1174.537013][T20270] ? lockdep_hardirqs_on+0x7c/0x110 [ 1174.537035][T20270] do_syscall_64+0xcd/0x4e0 [ 1174.537059][T20270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.537077][T20270] RIP: 0033:0x7f6041d8eec9 [ 1174.537093][T20270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1174.537110][T20270] RSP: 002b:00007f6042bcd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1174.537129][T20270] RAX: ffffffffffffffda RBX: 00007f6041fe6180 RCX: 00007f6041d8eec9 [ 1174.537141][T20270] RDX: 0000000000000012 RSI: 0000000000000107 RDI: 0000000000000006 [ 1174.537152][T20270] RBP: 00007f6042bcd090 R08: 0000000000000004 R09: 0000000000000000 [ 1174.537163][T20270] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 1174.537173][T20270] R13: 00007f6041fe6218 R14: 00007f6041fe6180 R15: 00007ffd8ab447a8 [ 1174.537198][T20270] [ 1174.781747][T14800] input: HID 0955:7214 Haptics as /devices/virtual/input/input54 [ 1174.914861][T17801] usb 3-1: config 0 descriptor?? [ 1174.927002][T17801] usb 3-1: can't set config #0, error -71 [ 1174.934034][T17801] usb 3-1: USB disconnect, device number 70 [ 1174.942455][T14800] shield 0003:0955:7214.0029: Registered Thunderstrike controller [ 1174.950636][T14800] shield 0003:0955:7214.0029: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 1175.031697][ T48] shield 0003:0955:7214.0029: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1175.044438][T14800] usb 6-1: USB disconnect, device number 68 [ 1175.058348][ T48] shield 0003:0955:7214.0029: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1175.208389][ T48] shield 0003:0955:7214.0029: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1175.285125][ T48] shield 0003:0955:7214.0029: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1176.275151][ T30] audit: type=1400 audit(1758685314.203:1108): avc: denied { compute_member } for pid=20283 comm="syz.1.3685" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1176.304923][ T30] audit: type=1400 audit(1758685314.263:1109): avc: denied { ioctl } for pid=20283 comm="syz.1.3685" path="socket:[76486]" dev="sockfs" ino=76486 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1176.699424][ T30] audit: type=1400 audit(1758685314.653:1110): avc: denied { getopt } for pid=20291 comm="syz.6.3689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1176.782259][ T30] audit: type=1400 audit(1758685314.713:1111): avc: denied { getopt } for pid=20291 comm="syz.6.3689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1176.883454][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.149877][T20304] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1177.227203][ T30] audit: type=1400 audit(1758685315.123:1112): avc: denied { create } for pid=20298 comm="syz.5.3691" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 1177.228199][ T30] audit: type=1400 audit(1758685315.133:1113): avc: denied { associate } for pid=20298 comm="syz.5.3691" name="bus" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 1177.730701][ T30] audit: type=1400 audit(1758685315.683:1114): avc: denied { rmdir } for pid=19850 comm="syz-executor" name="bus" dev="tmpfs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 1178.190689][T20319] program syz.2.3695 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1178.319271][T20305] tty tty1: ldisc open failed (-12), clearing slot 0 [ 1178.453190][T20319] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1178.514917][ T30] audit: type=1400 audit(1758685316.143:1115): avc: denied { write } for pid=20316 comm="syz.2.3695" name="sg0" dev="devtmpfs" ino=770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1178.552772][ T30] audit: type=1400 audit(1758685316.143:1116): avc: denied { ioctl } for pid=20316 comm="syz.2.3695" path="/dev/sg0" dev="devtmpfs" ino=770 ioctlcmd=0x6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1180.763933][ T48] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1180.905088][T20341] FAULT_INJECTION: forcing a failure. [ 1180.905088][T20341] name failslab, interval 1, probability 0, space 0, times 0 [ 1180.930225][T20341] CPU: 1 UID: 0 PID: 20341 Comm: syz.5.3702 Not tainted syzkaller #0 PREEMPT(full) [ 1180.930253][T20341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1180.930263][T20341] Call Trace: [ 1180.930269][T20341] [ 1180.930276][T20341] dump_stack_lvl+0x16c/0x1f0 [ 1180.930303][T20341] should_fail_ex+0x512/0x640 [ 1180.930327][T20341] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1180.930350][T20341] should_failslab+0xc2/0x120 [ 1180.930371][T20341] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1180.930391][T20341] ? __alloc_skb+0x2b2/0x380 [ 1180.930412][T20341] ? avc_has_perm+0x144/0x1f0 [ 1180.930432][T20341] __alloc_skb+0x2b2/0x380 [ 1180.930462][T20341] ? __pfx___alloc_skb+0x10/0x10 [ 1180.930480][T20341] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 1180.930504][T20341] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 1180.930535][T20341] netlink_alloc_large_skb+0x69/0x130 [ 1180.930561][T20341] netlink_sendmsg+0x6a1/0xdd0 [ 1180.930589][T20341] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1180.930621][T20341] ____sys_sendmsg+0xa95/0xc70 [ 1180.930648][T20341] ? copy_msghdr_from_user+0x10a/0x160 [ 1180.930669][T20341] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1180.930712][T20341] ___sys_sendmsg+0x134/0x1d0 [ 1180.930736][T20341] ? __pfx____sys_sendmsg+0x10/0x10 [ 1180.930783][T20341] __sys_sendmsg+0x16d/0x220 [ 1180.930802][T20341] ? __pfx___sys_sendmsg+0x10/0x10 [ 1180.930836][T20341] do_syscall_64+0xcd/0x4e0 [ 1180.930860][T20341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1180.930881][T20341] RIP: 0033:0x7f615d98eec9 [ 1180.930895][T20341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1180.930911][T20341] RSP: 002b:00007f615e8e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1180.930928][T20341] RAX: ffffffffffffffda RBX: 00007f615dbe5fa0 RCX: 00007f615d98eec9 [ 1180.930939][T20341] RDX: 0000000000040010 RSI: 0000200000006040 RDI: 0000000000000004 [ 1180.930950][T20341] RBP: 00007f615e8e3090 R08: 0000000000000000 R09: 0000000000000000 [ 1180.930960][T20341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1180.930969][T20341] R13: 00007f615dbe6038 R14: 00007f615dbe5fa0 R15: 00007ffc6b875268 [ 1180.930992][T20341] [ 1181.162725][ T48] usb 7-1: Using ep0 maxpacket: 8 [ 1181.443497][ T48] usb 7-1: config index 0 descriptor too short (expected 30, got 18) [ 1181.455724][ T48] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1181.841618][ T48] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.861110][ T48] usb 7-1: Product: syz [ 1181.868129][ T48] usb 7-1: Manufacturer: syz [ 1181.872755][ T48] usb 7-1: SerialNumber: syz [ 1181.887166][ T48] usb 7-1: config 0 descriptor?? [ 1181.908704][ T48] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1181.937534][ T48] usb 7-1: setting power ON [ 1181.942073][ T48] dvb-usb: bulk message failed: -22 (2/0) [ 1181.980977][ T48] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1182.023578][ T48] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1182.048408][ T48] usb 7-1: media controller created [ 1182.065487][T20352] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1182.092056][ T48] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1182.117193][T20330] dvb-usb: bulk message failed: -22 (3/0) [ 1182.133004][T20330] dvb-usb: bulk message failed: -22 (4/0) [ 1182.138752][T20330] cxusb: i2c read failed [ 1182.223218][ T48] usb 7-1: selecting invalid altsetting 6 [ 1182.274103][ T48] usb 7-1: digital interface selection failed (-22) [ 1182.309830][T20330] netlink: 256 bytes leftover after parsing attributes in process `syz.6.3698'. [ 1182.423455][ T48] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1182.424217][T20356] dummy0: entered promiscuous mode [ 1182.441033][T20358] FAULT_INJECTION: forcing a failure. [ 1182.441033][T20358] name failslab, interval 1, probability 0, space 0, times 0 [ 1182.457185][T20358] CPU: 0 UID: 0 PID: 20358 Comm: syz.2.3706 Not tainted syzkaller #0 PREEMPT(full) [ 1182.457211][T20358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1182.457222][T20358] Call Trace: [ 1182.457228][T20358] [ 1182.457239][T20358] dump_stack_lvl+0x16c/0x1f0 [ 1182.457267][T20358] should_fail_ex+0x512/0x640 [ 1182.457288][T20358] ? fs_reclaim_acquire+0xae/0x150 [ 1182.457313][T20358] ? tomoyo_encode2+0x100/0x3e0 [ 1182.457337][T20358] should_failslab+0xc2/0x120 [ 1182.457358][T20358] __kmalloc_noprof+0xd2/0x510 [ 1182.457377][T20358] ? d_absolute_path+0x136/0x1a0 [ 1182.457407][T20358] tomoyo_encode2+0x100/0x3e0 [ 1182.457435][T20358] tomoyo_encode+0x29/0x50 [ 1182.457460][T20358] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1182.457492][T20358] tomoyo_path_number_perm+0x245/0x580 [ 1182.457514][T20358] ? tomoyo_path_number_perm+0x237/0x580 [ 1182.457539][T20358] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1182.457563][T20358] ? find_held_lock+0x2b/0x80 [ 1182.457609][T20358] ? find_held_lock+0x2b/0x80 [ 1182.457644][T20358] ? hook_file_ioctl_common+0x145/0x410 [ 1182.457669][T20358] ? __fget_files+0x20e/0x3c0 [ 1182.457694][T20358] security_file_ioctl+0x9b/0x240 [ 1182.457720][T20358] __x64_sys_ioctl+0xb7/0x210 [ 1182.457755][T20358] do_syscall_64+0xcd/0x4e0 [ 1182.457780][T20358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1182.457797][T20358] RIP: 0033:0x7f10e7d8eec9 [ 1182.457812][T20358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1182.457829][T20358] RSP: 002b:00007f10e8ba4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1182.457846][T20358] RAX: ffffffffffffffda RBX: 00007f10e7fe5fa0 RCX: 00007f10e7d8eec9 [ 1182.457857][T20358] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000004 [ 1182.457868][T20358] RBP: 00007f10e8ba4090 R08: 0000000000000000 R09: 0000000000000000 [ 1182.457879][T20358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1182.457890][T20358] R13: 00007f10e7fe6038 R14: 00007f10e7fe5fa0 R15: 00007fff5dc76f18 [ 1182.457915][T20358] [ 1182.473280][ T48] usb 7-1: setting power OFF [ 1182.689939][T20358] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1182.718328][T20330] netlink: 'syz.6.3698': attribute type 1 has an invalid length. [ 1182.860360][ T48] dvb-usb: bulk message failed: -22 (2/0) [ 1182.867991][ T48] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1182.880909][ T48] (NULL device *): no alternate interface [ 1182.901540][ T30] audit: type=1400 audit(1758685320.853:1117): avc: denied { setopt } for pid=20366 comm="syz.2.3708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1183.880303][ T48] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1184.166537][ T48] usb 7-1: USB disconnect, device number 43 [ 1184.646049][T20385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3713'. [ 1184.754135][T20386] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3712'. [ 1185.120210][T20394] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3712'. [ 1185.185922][T20394] netlink: 'syz.6.3712': attribute type 5 has an invalid length. [ 1185.393358][T20394] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3712'. [ 1185.917782][T20394] geneve2: entered promiscuous mode [ 1185.990186][T20394] geneve2: entered allmulticast mode [ 1186.019714][ T1163] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1186.057961][ T1163] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1187.016445][T20399] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1187.035904][T20399] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1187.211315][T20407] random: crng reseeded on system resumption [ 1188.494951][T12262] Bluetooth: hci0: unexpected event 0x14 length: 20 > 6 [ 1188.525184][ T30] audit: type=1400 audit(1758685326.483:1118): avc: denied { unmount } for pid=17859 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1189.233397][ T1900] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1189.443057][ T1900] usb 6-1: Using ep0 maxpacket: 8 [ 1189.465675][ T1900] usb 6-1: config 0 has no interfaces? [ 1189.474054][ T1900] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1189.483438][ T1900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.491467][ T1900] usb 6-1: Product: syz [ 1189.497792][ T1900] usb 6-1: Manufacturer: syz [ 1189.506603][ T1900] usb 6-1: SerialNumber: syz [ 1189.556083][ T1900] usb 6-1: config 0 descriptor?? [ 1191.346158][T20457] FAULT_INJECTION: forcing a failure. [ 1191.346158][T20457] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1191.362858][T20457] CPU: 0 UID: 0 PID: 20457 Comm: syz.1.3731 Not tainted syzkaller #0 PREEMPT(full) [ 1191.362887][T20457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1191.362898][T20457] Call Trace: [ 1191.362904][T20457] [ 1191.362911][T20457] dump_stack_lvl+0x16c/0x1f0 [ 1191.362939][T20457] should_fail_ex+0x512/0x640 [ 1191.362966][T20457] _copy_from_iter+0x29f/0x1720 [ 1191.362997][T20457] ? __pfx__copy_from_iter+0x10/0x10 [ 1191.363021][T20457] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1191.363054][T20457] copy_page_from_iter+0xde/0x180 [ 1191.363081][T20457] tun_build_skb.constprop.0+0x2e8/0x1500 [ 1191.363117][T20457] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 1191.363151][T20457] ? rcu_is_watching+0x12/0xc0 [ 1191.363184][T20457] ? tun_get_user+0x2e7/0x3ce0 [ 1191.363213][T20457] tun_get_user+0x14ae/0x3ce0 [ 1191.363250][T20457] ? __pfx_tun_get_user+0x10/0x10 [ 1191.363278][T20457] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1191.363309][T20457] ? find_held_lock+0x2b/0x80 [ 1191.363331][T20457] ? tun_get+0x191/0x370 [ 1191.363361][T20457] tun_chr_write_iter+0xdc/0x210 [ 1191.363390][T20457] vfs_write+0x7d3/0x11d0 [ 1191.363415][T20457] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1191.363444][T20457] ? __pfx_vfs_write+0x10/0x10 [ 1191.363466][T20457] ? __rcu_read_unlock+0x2bc/0x550 [ 1191.363495][T20457] ksys_write+0x12a/0x250 [ 1191.363513][T20457] ? __pfx_ksys_write+0x10/0x10 [ 1191.363538][T20457] do_syscall_64+0xcd/0x4e0 [ 1191.363563][T20457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1191.363581][T20457] RIP: 0033:0x7f19db98d97f [ 1191.363597][T20457] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1191.363614][T20457] RSP: 002b:00007f19dc76d000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1191.363631][T20457] RAX: ffffffffffffffda RBX: 00007f19dbbe5fa0 RCX: 00007f19db98d97f [ 1191.363643][T20457] RDX: 000000000000004a RSI: 00002000000003c0 RDI: 00000000000000c8 [ 1191.363653][T20457] RBP: 00007f19dc76d090 R08: 0000000000000000 R09: 0000000000000000 [ 1191.363663][T20457] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001 [ 1191.363674][T20457] R13: 00007f19dbbe6038 R14: 00007f19dbbe5fa0 R15: 00007ffce46bb4e8 [ 1191.363698][T20457] [ 1191.762744][T20455] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1191.770030][T20455] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1191.777302][T20455] veth0_to_bridge: entered allmulticast mode [ 1191.784111][T20455] veth0_to_bridge: entered promiscuous mode [ 1191.790076][T20455] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1191.802805][T20455] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1191.809961][T20455] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 1192.208286][T10855] usb 6-1: USB disconnect, device number 69 [ 1192.364304][ T30] audit: type=1400 audit(1758685330.323:1119): avc: denied { read write } for pid=20463 comm="syz.1.3733" dev="9p" ino=65538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1192.532341][ T30] audit: type=1400 audit(1758685330.343:1120): avc: denied { open } for pid=20463 comm="syz.1.3733" path="/153/file0" dev="9p" ino=65538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1192.569500][ T30] audit: type=1800 audit(1758685330.443:1121): pid=20464 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.3733" name="/" dev="9p" ino=65538 res=0 errno=0 [ 1192.647750][ T30] audit: type=1400 audit(1758685330.483:1122): avc: denied { unmount } for pid=16983 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1192.828877][T20475] random: crng reseeded on system resumption [ 1193.046239][ T30] audit: type=1326 audit(1758685331.003:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20479 comm="syz.1.3737" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f19db98eec9 code=0x0 [ 1193.062310][T10855] usb 3-1: new low-speed USB device number 71 using dummy_hcd [ 1193.407032][T10855] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 1193.443736][T10855] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 1193.462376][T10855] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1193.823293][T10855] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1194.032954][T10855] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1194.116668][T10855] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1194.136706][T10855] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1194.488034][T10855] usb 3-1: string descriptor 0 read error: -22 [ 1194.525014][T10855] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1194.552200][T10855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.572983][T20491] tipc: Enabled bearer , priority 0 [ 1194.661368][T20491] syzkaller0: entered promiscuous mode [ 1194.666990][T20491] syzkaller0: entered allmulticast mode [ 1194.677201][T20491] tipc: Resetting bearer [ 1194.803082][T10855] usb 3-1: config 0 descriptor?? [ 1194.832401][T10855] hub 3-1:0.0: bad descriptor, ignoring hub [ 1194.875726][T10855] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1195.703556][T10855] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input55 [ 1195.781017][T10855] usb 3-1: USB disconnect, device number 71 [ 1195.886853][T20479] tipc: Resetting bearer [ 1198.236549][T20479] tipc: Disabling bearer [ 1198.807794][ T1900] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1198.984006][T20536] FAULT_INJECTION: forcing a failure. [ 1198.984006][T20536] name failslab, interval 1, probability 0, space 0, times 0 [ 1199.000484][T20536] CPU: 0 UID: 0 PID: 20536 Comm: syz.1.3751 Not tainted syzkaller #0 PREEMPT(full) [ 1199.000518][T20536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1199.000529][T20536] Call Trace: [ 1199.000536][T20536] [ 1199.000544][T20536] dump_stack_lvl+0x16c/0x1f0 [ 1199.000573][T20536] should_fail_ex+0x512/0x640 [ 1199.000596][T20536] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1199.000619][T20536] should_failslab+0xc2/0x120 [ 1199.000641][T20536] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1199.000660][T20536] ? __alloc_skb+0x2b2/0x380 [ 1199.000685][T20536] __alloc_skb+0x2b2/0x380 [ 1199.000706][T20536] ? __pfx___alloc_skb+0x10/0x10 [ 1199.000730][T20536] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1199.000759][T20536] netlink_alloc_large_skb+0x69/0x130 [ 1199.000785][T20536] netlink_sendmsg+0x6a1/0xdd0 [ 1199.000814][T20536] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1199.000847][T20536] ____sys_sendmsg+0xa95/0xc70 [ 1199.000876][T20536] ? copy_msghdr_from_user+0x10a/0x160 [ 1199.000898][T20536] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1199.000936][T20536] ___sys_sendmsg+0x134/0x1d0 [ 1199.000960][T20536] ? __pfx____sys_sendmsg+0x10/0x10 [ 1199.001013][T20536] __sys_sendmsg+0x16d/0x220 [ 1199.001036][T20536] ? __pfx___sys_sendmsg+0x10/0x10 [ 1199.001075][T20536] do_syscall_64+0xcd/0x4e0 [ 1199.001101][T20536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1199.001120][T20536] RIP: 0033:0x7f19db98eec9 [ 1199.001135][T20536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1199.001152][T20536] RSP: 002b:00007f19dc76d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1199.001170][T20536] RAX: ffffffffffffffda RBX: 00007f19dbbe5fa0 RCX: 00007f19db98eec9 [ 1199.001182][T20536] RDX: 0000000002000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 1199.001193][T20536] RBP: 00007f19dc76d090 R08: 0000000000000000 R09: 0000000000000000 [ 1199.001204][T20536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1199.001215][T20536] R13: 00007f19dbbe6038 R14: 00007f19dbbe5fa0 R15: 00007ffce46bb4e8 [ 1199.001239][T20536] [ 1199.243348][ T1900] usb 3-1: Using ep0 maxpacket: 32 [ 1199.249912][ T1900] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1199.258100][ T1900] usb 3-1: config 0 has no interface number 0 [ 1199.470929][ T1900] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1199.483254][ T1900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.604215][T20542] FAULT_INJECTION: forcing a failure. [ 1199.604215][T20542] name failslab, interval 1, probability 0, space 0, times 0 [ 1199.617165][T20542] CPU: 1 UID: 0 PID: 20542 Comm: syz.1.3752 Not tainted syzkaller #0 PREEMPT(full) [ 1199.617183][T20542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1199.617190][T20542] Call Trace: [ 1199.617195][T20542] [ 1199.617200][T20542] dump_stack_lvl+0x16c/0x1f0 [ 1199.617219][T20542] should_fail_ex+0x512/0x640 [ 1199.617247][T20542] should_failslab+0xc2/0x120 [ 1199.617262][T20542] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1199.617274][T20542] ? sctp_get_port_local+0x54d/0x1670 [ 1199.617290][T20542] sctp_get_port_local+0x54d/0x1670 [ 1199.617307][T20542] ? __pfx_sctp_get_port_local+0x10/0x10 [ 1199.617319][T20542] ? sctp_bind_addr_match+0x193/0x300 [ 1199.617333][T20542] ? sctp_bind_addr_match+0x19d/0x300 [ 1199.617346][T20542] sctp_do_bind+0x223/0x700 [ 1199.617364][T20542] sctp_connect_new_asoc+0x5e7/0x770 [ 1199.617381][T20542] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1199.617402][T20542] sctp_sendmsg+0x1560/0x1e10 [ 1199.617422][T20542] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1199.617441][T20542] ? __pfx_sock_has_perm+0x10/0x10 [ 1199.617462][T20542] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1199.617478][T20542] inet_sendmsg+0x119/0x140 [ 1199.617491][T20542] __sys_sendto+0x43c/0x520 [ 1199.617505][T20542] ? __pfx___sys_sendto+0x10/0x10 [ 1199.617527][T20542] ? ksys_write+0x1ac/0x250 [ 1199.617539][T20542] ? __pfx_ksys_write+0x10/0x10 [ 1199.617552][T20542] __x64_sys_sendto+0xe0/0x1c0 [ 1199.617564][T20542] ? do_syscall_64+0x91/0x4e0 [ 1199.617578][T20542] ? lockdep_hardirqs_on+0x7c/0x110 [ 1199.617592][T20542] do_syscall_64+0xcd/0x4e0 [ 1199.617608][T20542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1199.617619][T20542] RIP: 0033:0x7f19db98eec9 [ 1199.617629][T20542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1199.617640][T20542] RSP: 002b:00007f19dc76d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1199.617651][T20542] RAX: ffffffffffffffda RBX: 00007f19dbbe5fa0 RCX: 00007f19db98eec9 [ 1199.617658][T20542] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000004 [ 1199.617665][T20542] RBP: 00007f19dc76d090 R08: 000020000005ffe4 R09: 000000000000001c [ 1199.617672][T20542] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000001 [ 1199.617679][T20542] R13: 00007f19dbbe6038 R14: 00007f19dbbe5fa0 R15: 00007ffce46bb4e8 [ 1199.617692][T20542] [ 1199.856945][ T1900] usb 3-1: Product: syz [ 1199.861187][ T1900] usb 3-1: Manufacturer: syz [ 1200.159928][ T1900] usb 3-1: SerialNumber: syz [ 1200.173228][T10855] usb 7-1: new full-speed USB device number 44 using dummy_hcd [ 1200.185664][ T1900] usb 3-1: config 0 descriptor?? [ 1200.198197][ T1900] smsc95xx v2.0.0 [ 1200.366970][T10855] usb 7-1: config 0 has an invalid interface number: 11 but max is 0 [ 1200.375452][T10855] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1200.385806][T10855] usb 7-1: config 0 has no interface number 0 [ 1201.409322][T10855] usb 7-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1201.420959][T10855] usb 7-1: config 0 interface 11 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1201.434246][T10855] usb 7-1: config 0 interface 11 has no altsetting 0 [ 1201.440973][T10855] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1201.450025][T10855] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.461541][ T30] audit: type=1400 audit(1758685338.703:1124): avc: denied { create } for pid=20520 comm="syz.2.3747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1201.482953][ T30] audit: type=1400 audit(1758685338.753:1125): avc: denied { sys_admin } for pid=20520 comm="syz.2.3747" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1201.555566][T10855] usb 7-1: config 0 descriptor?? [ 1201.575602][T10855] keyspan 7-1:0.11: Keyspan 2 port adapter converter detected [ 1201.586220][T10855] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 7 [ 1201.596813][T10855] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 81 [ 1201.636450][T10855] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 82 [ 1201.645789][T10855] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 1 [ 1201.659397][T10855] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 2 [ 1201.669304][T10855] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 85 [ 1201.678904][T10855] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 5 [ 1201.689913][T10855] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1201.841696][T12262] Bluetooth: hci4: unexpected event for opcode 0x1405 [ 1201.895948][T10855] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 83 [ 1201.914878][T10855] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 84 [ 1201.934791][T10855] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 3 [ 1201.964648][T10855] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 4 [ 1202.020897][T10855] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 86 [ 1202.056452][T10855] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 6 [ 1202.095050][ T30] audit: type=1400 audit(1758685340.013:1126): avc: denied { setopt } for pid=20556 comm="syz.1.3755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1202.247054][T10855] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1202.367759][T20562] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3756'. [ 1202.550737][ T1900] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 1202.579667][ T1900] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 1202.628065][ T1900] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1202.663372][ T1900] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 1202.818997][T20562] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3756'. [ 1202.844321][ T1900] usb 3-1: USB disconnect, device number 72 [ 1203.430765][T10855] usb 7-1: USB disconnect, device number 44 [ 1203.476548][T10855] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1203.493166][ T1900] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1203.617335][T10855] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1203.686622][T20571] FAULT_INJECTION: forcing a failure. [ 1203.686622][T20571] name failslab, interval 1, probability 0, space 0, times 0 [ 1203.699355][T20571] CPU: 1 UID: 0 PID: 20571 Comm: syz.4.3759 Not tainted syzkaller #0 PREEMPT(full) [ 1203.699379][T20571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1203.699390][T20571] Call Trace: [ 1203.699396][T20571] [ 1203.699404][T20571] dump_stack_lvl+0x16c/0x1f0 [ 1203.699431][T20571] should_fail_ex+0x512/0x640 [ 1203.699453][T20571] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1203.699474][T20571] should_failslab+0xc2/0x120 [ 1203.699494][T20571] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1203.699513][T20571] ? __alloc_skb+0x2b2/0x380 [ 1203.699537][T20571] __alloc_skb+0x2b2/0x380 [ 1203.699557][T20571] ? __pfx___alloc_skb+0x10/0x10 [ 1203.699586][T20571] pfkey_sendmsg+0x16e/0x850 [ 1203.699614][T20571] ____sys_sendmsg+0xa95/0xc70 [ 1203.699641][T20571] ? copy_msghdr_from_user+0x10a/0x160 [ 1203.699663][T20571] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1203.699693][T20571] ? __schedule+0x11a3/0x5de0 [ 1203.699711][T20571] ? __pfx__kstrtoull+0x10/0x10 [ 1203.699736][T20571] ___sys_sendmsg+0x134/0x1d0 [ 1203.699759][T20571] ? __pfx____sys_sendmsg+0x10/0x10 [ 1203.699792][T20571] ? find_held_lock+0x2b/0x80 [ 1203.699830][T20571] __sys_sendmmsg+0x200/0x420 [ 1203.699855][T20571] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1203.699885][T20571] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1203.699918][T20571] ? fput+0x9b/0xd0 [ 1203.699941][T20571] ? ksys_write+0x1ac/0x250 [ 1203.699961][T20571] ? __pfx_ksys_write+0x10/0x10 [ 1203.699984][T20571] __x64_sys_sendmmsg+0x9c/0x100 [ 1203.700005][T20571] ? lockdep_hardirqs_on+0x7c/0x110 [ 1203.700026][T20571] do_syscall_64+0xcd/0x4e0 [ 1203.700051][T20571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.700068][T20571] RIP: 0033:0x7fbdc118eec9 [ 1203.700083][T20571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1203.700100][T20571] RSP: 002b:00007fbdc20ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1203.700117][T20571] RAX: ffffffffffffffda RBX: 00007fbdc13e6180 RCX: 00007fbdc118eec9 [ 1203.700130][T20571] RDX: 00000000000002c8 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1203.700140][T20571] RBP: 00007fbdc20ce090 R08: 0000000000000000 R09: 0000000000000000 [ 1203.700150][T20571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1203.700161][T20571] R13: 00007fbdc13e6218 R14: 00007fbdc13e6180 R15: 00007ffc662f26e8 [ 1203.700185][T20571] [ 1203.944172][ T1900] usb 3-1: device descriptor read/64, error -71 [ 1204.039360][T10855] keyspan 7-1:0.11: device disconnected [ 1204.682683][ T1900] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1204.853028][ T1900] usb 3-1: device descriptor read/64, error -71 [ 1204.963214][ T1900] usb usb3-port1: attempt power cycle [ 1205.845977][ T30] audit: type=1400 audit(1758685343.803:1127): avc: denied { execute } for pid=20586 comm="syz.6.3764" name="file1" dev="tmpfs" ino=1014 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1205.940216][ T30] audit: type=1400 audit(1758685343.833:1128): avc: denied { execute_no_trans } for pid=20586 comm="syz.6.3764" path="/193/file1" dev="tmpfs" ino=1014 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1209.406215][T20620] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1209.480693][T20642] sch_tbf: burst 4 is lower than device lo mtu (65550) ! [ 1209.556627][T20620] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1209.696053][ T30] audit: type=1400 audit(1758685347.643:1129): avc: denied { mount } for pid=20644 comm="syz.2.3783" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1209.807882][ T30] audit: type=1400 audit(1758685347.733:1130): avc: denied { mounton } for pid=20644 comm="syz.2.3783" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1209.865938][ T30] audit: type=1400 audit(1758685347.743:1131): avc: denied { nlmsg_read } for pid=20647 comm="syz.6.3784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1209.915074][ T30] audit: type=1400 audit(1758685347.863:1132): avc: denied { unmount } for pid=17859 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1209.961490][T20654] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3786'. [ 1209.996256][T20654] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3786'. [ 1210.027194][T20620] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1210.047977][T20657] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3786'. [ 1210.083325][T20657] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3786'. [ 1210.134511][T20620] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1210.249867][ T1097] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.357143][ T1097] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.390309][ T1097] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.419486][ T1163] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.932997][ T30] audit: type=1400 audit(1758685348.883:1133): avc: denied { sqpoll } for pid=20697 comm="syz.1.3803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1210.980269][ T30] audit: type=1400 audit(1758685348.933:1134): avc: denied { mounton } for pid=20700 comm="syz.2.3804" path="/proc/515/task" dev="proc" ino=79028 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1211.099957][T20705] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1212.516880][ T30] audit: type=1400 audit(1758685350.473:1135): avc: denied { map } for pid=20759 comm="syz.5.3826" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 1212.572235][ T30] audit: type=1400 audit(1758685350.473:1136): avc: denied { execute } for pid=20759 comm="syz.5.3826" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 1213.094265][ T30] audit: type=1400 audit(1758685351.043:1137): avc: denied { write } for pid=20769 comm="syz.5.3829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1213.547153][ T30] audit: type=1400 audit(1758685351.503:1138): avc: denied { accept } for pid=20785 comm="syz.5.3835" lport=38540 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1213.770673][T20790] netlink: 'syz.4.3838': attribute type 4 has an invalid length. [ 1214.460941][T20817] kvm: pic: non byte write [ 1217.107711][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1217.107730][ T30] audit: type=1400 audit(1758685355.063:1140): avc: denied { kexec_image_load } for pid=20898 comm="syz.2.3880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1217.111548][T20908] kvm: pic: non byte write [ 1217.636298][ T30] audit: type=1400 audit(1758685355.593:1141): avc: denied { map } for pid=20932 comm="syz.2.3892" path="socket:[80867]" dev="sockfs" ino=80867 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1217.675219][ T30] audit: type=1400 audit(1758685355.593:1142): avc: denied { accept } for pid=20932 comm="syz.2.3892" path="socket:[80867]" dev="sockfs" ino=80867 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1217.760145][ T30] audit: type=1400 audit(1758685355.713:1143): avc: denied { map } for pid=20935 comm="syz.1.3893" path="socket:[81159]" dev="sockfs" ino=81159 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1217.818915][T20938] vlan3: entered promiscuous mode [ 1217.841022][T20938] macvtap0: entered promiscuous mode [ 1218.126932][T20950] kvm: pic: non byte write [ 1218.230662][ T30] audit: type=1400 audit(1758685356.183:1144): avc: denied { ioctl } for pid=20962 comm="syz.1.3905" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1218.339622][ T30] audit: type=1400 audit(1758685356.293:1145): avc: denied { read } for pid=20964 comm="syz.1.3908" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1218.380857][ T30] audit: type=1400 audit(1758685356.293:1146): avc: denied { open } for pid=20964 comm="syz.1.3908" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1218.423570][ T30] audit: type=1400 audit(1758685356.293:1147): avc: denied { ioctl } for pid=20964 comm="syz.1.3908" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1218.515653][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1218.528175][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1218.540605][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1218.552972][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1218.565302][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1218.577573][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1218.589910][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1218.602279][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1218.614648][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1218.626978][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1223.522892][ C0] net_ratelimit: 33394 callbacks suppressed [ 1223.522912][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1223.523095][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1223.529092][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1223.540980][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1223.552882][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1223.564715][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1223.576852][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1223.588698][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1223.600602][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1223.612435][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1225.531641][ C1] sched: DL replenish lagged too much [ 1228.532986][ C0] net_ratelimit: 32634 callbacks suppressed [ 1228.533005][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1228.533137][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1228.539747][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1228.551073][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1228.562953][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1228.574785][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1228.586666][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1228.598568][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1228.610417][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1228.622269][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1233.542982][ C1] net_ratelimit: 33072 callbacks suppressed [ 1233.543002][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1233.543018][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1233.543273][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1233.549145][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1233.561030][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1233.572939][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1233.584797][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1233.596662][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1233.608522][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1233.620426][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1238.552919][ C0] net_ratelimit: 35336 callbacks suppressed [ 1238.552939][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1238.553060][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1238.559096][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1238.571005][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1238.582863][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1238.594758][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1238.606579][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1238.618472][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1238.630426][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1238.642824][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1238.775260][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1243.562942][ C1] net_ratelimit: 33831 callbacks suppressed [ 1243.562947][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1243.562961][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1243.563208][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1243.569113][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1243.581013][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1243.592884][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1243.604733][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1243.616632][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1243.628584][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1243.640458][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1248.572918][ C1] net_ratelimit: 34099 callbacks suppressed [ 1248.572938][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1248.572950][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1248.573179][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1248.579146][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1248.591138][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1248.603145][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1248.615010][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1248.626939][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1248.638736][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1248.650661][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1253.583033][ C1] net_ratelimit: 33753 callbacks suppressed [ 1253.583052][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1253.583071][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1253.589191][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1253.601121][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1253.613006][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1253.624847][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1253.636846][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1253.648753][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1253.660683][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1253.672687][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1258.593004][ C0] net_ratelimit: 33942 callbacks suppressed [ 1258.593024][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1258.593093][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1258.599177][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1258.611078][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1258.622952][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1258.634814][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1258.646659][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1258.658631][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1258.670469][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1258.682380][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1262.541636][T16452] Bluetooth: hci0: command 0x0406 tx timeout [ 1263.602941][ C1] net_ratelimit: 34033 callbacks suppressed [ 1263.602961][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1263.603006][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1263.609249][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1263.621102][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1263.633029][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1263.644860][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1263.656749][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1263.668599][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1263.680499][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1263.692504][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1268.613088][ C0] net_ratelimit: 33191 callbacks suppressed [ 1268.613108][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1268.613171][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1268.619260][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1268.631336][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1268.643045][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1268.654907][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1268.666745][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1268.678636][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1268.690470][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1268.702366][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1273.622906][ C1] net_ratelimit: 33838 callbacks suppressed [ 1273.622926][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1273.623131][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1273.629182][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1273.641107][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1273.652963][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1273.664892][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1273.676720][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1273.688560][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1273.700428][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1273.712375][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1278.632939][ C1] net_ratelimit: 34223 callbacks suppressed [ 1278.632958][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1278.633037][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1278.639133][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1278.650999][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1278.663027][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1278.674857][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1278.686715][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1278.698573][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1278.710493][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1278.722344][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1283.642886][ C0] net_ratelimit: 33693 callbacks suppressed [ 1283.642907][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1283.643047][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1283.649064][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1283.660972][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1283.672806][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1283.684675][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1283.696540][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1283.708427][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1283.720279][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1283.732141][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1288.653099][ C0] net_ratelimit: 33787 callbacks suppressed [ 1288.653099][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1288.653118][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1288.659329][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1288.671228][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1288.683088][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1288.694959][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1288.706825][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1288.718695][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1288.730670][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1288.742638][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1293.663045][ C1] net_ratelimit: 34088 callbacks suppressed [ 1293.663065][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1293.663164][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1293.669263][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1293.681119][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1293.692987][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1293.704876][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1293.716715][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1293.728588][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1293.740444][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1293.752331][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1298.672864][ C1] net_ratelimit: 34012 callbacks suppressed [ 1298.672885][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1298.672887][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1298.673138][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1298.679076][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1298.690934][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1298.702784][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1298.714688][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1298.726525][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1298.738416][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1298.750285][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1300.388794][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1303.683185][ C1] net_ratelimit: 33911 callbacks suppressed [ 1303.683204][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1303.683499][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1303.689464][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1303.701539][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1303.713390][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1303.725268][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1303.737115][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1303.749380][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1303.761285][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1303.773136][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1308.692900][ C1] net_ratelimit: 33575 callbacks suppressed [ 1308.692920][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1308.693099][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1308.699069][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1308.711199][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1308.723090][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1308.734938][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1308.746818][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1308.758689][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1308.770532][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1308.782419][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1313.702885][ C0] net_ratelimit: 34021 callbacks suppressed [ 1313.702904][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1313.702903][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1313.703174][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1313.709108][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1313.720958][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1313.732854][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1313.744679][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1313.756563][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1313.768417][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1313.780323][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1318.712974][ C0] net_ratelimit: 33683 callbacks suppressed [ 1318.712993][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1318.713065][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1318.719159][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1318.731070][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1318.742972][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1318.754793][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1318.766679][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1318.778537][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1318.790615][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1318.802277][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1323.723028][ C1] net_ratelimit: 33394 callbacks suppressed [ 1323.723047][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1323.723072][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1323.729224][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1323.741071][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1323.752980][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1323.764854][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1323.776787][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1323.788907][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1323.800823][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1323.812631][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1328.732916][ C0] net_ratelimit: 33691 callbacks suppressed [ 1328.732936][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1328.733006][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1328.739084][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1328.750971][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1328.762889][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1328.774705][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1328.786596][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1328.798431][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1328.810314][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1328.822190][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1333.742931][ C0] net_ratelimit: 33822 callbacks suppressed [ 1333.742951][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1333.743066][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1333.749083][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1333.761034][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1333.772885][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1333.784737][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1333.796581][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1333.808479][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1333.820337][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1333.832216][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1338.752860][ C1] net_ratelimit: 34185 callbacks suppressed [ 1338.752879][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1338.752899][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1338.759042][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1338.770914][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1338.782797][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1338.794652][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1338.806570][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1338.818381][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1338.830284][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1338.842150][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1343.762936][ C0] net_ratelimit: 33308 callbacks suppressed [ 1343.762956][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1343.763000][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1343.769140][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1343.781021][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1343.792926][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1343.804753][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1343.816648][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1343.828503][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1343.840363][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1343.852219][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1348.773017][ C0] net_ratelimit: 32219 callbacks suppressed [ 1348.773036][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1348.773116][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1348.779180][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1348.791671][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1348.803489][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1348.815345][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1348.827205][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1348.839090][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1348.850971][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1348.862896][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1353.782936][ C0] net_ratelimit: 32905 callbacks suppressed [ 1353.782957][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1353.783052][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1353.789101][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1353.801023][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1353.812884][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1353.824760][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1353.836598][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1353.848541][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1353.860356][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1353.872262][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1358.793069][ C0] net_ratelimit: 32939 callbacks suppressed [ 1358.793088][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1358.793096][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1358.793383][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1358.799220][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1358.811168][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1358.823019][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1358.834886][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1358.846751][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1358.858717][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1358.870563][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1363.802923][ C0] net_ratelimit: 33219 callbacks suppressed [ 1363.802945][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1363.803111][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1363.809113][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1363.821031][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1363.832950][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1363.844818][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1363.856660][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1363.868528][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1363.880533][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1363.892379][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1366.016192][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1368.813078][ C0] net_ratelimit: 32465 callbacks suppressed [ 1368.813094][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1368.813098][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1368.813347][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1368.819281][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1368.831153][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1368.843028][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1368.855051][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1368.866949][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1368.878791][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1368.890703][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1373.822952][ C0] net_ratelimit: 32119 callbacks suppressed [ 1373.822973][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1373.822977][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1373.823205][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1373.829103][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1373.841235][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1373.852924][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1373.864745][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1373.876606][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1373.888480][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1373.900363][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1376.902988][ T31] INFO: task kworker/1:1:48 blocked for more than 144 seconds. [ 1376.910564][ T31] Not tainted syzkaller #0 [ 1378.832865][ C0] net_ratelimit: 32073 callbacks suppressed [ 1378.832886][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1378.833068][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1378.839025][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1378.851011][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1378.862896][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1378.875281][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1378.887155][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1378.899101][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1378.911023][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1378.923072][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1380.223509][ C0] kworker/R-bat_e: page allocation failure: order:0, mode:0x40820(GFP_ATOMIC|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1380.224366][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1380.237385][ C0] CPU: 0 UID: 0 PID: 3423 Comm: kworker/R-bat_e Not tainted syzkaller #0 PREEMPT(full) [ 1380.237405][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1380.237416][ C0] Workqueue: bat_events batadv_tt_purge [ 1380.237437][ C0] Call Trace: [ 1380.237444][ C0] [ 1380.237452][ C0] dump_stack_lvl+0x16c/0x1f0 [ 1380.237474][ C0] warn_alloc+0x248/0x3a0 [ 1380.237493][ C0] ? __pfx_warn_alloc+0x10/0x10 [ 1380.237509][ C0] ? get_page_from_freelist+0x1efd/0x38e0 [ 1380.237534][ C0] ? wake_all_kswapds+0x19e/0x300 [ 1380.237559][ C0] __alloc_frozen_pages_noprof+0xea2/0x23f0 [ 1380.237582][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1380.237606][ C0] ? __skb_ext_del+0xf3/0x340 [ 1380.237623][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1380.237645][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 1380.237674][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 1380.237699][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1380.237720][ C0] ? policy_nodemask+0xea/0x4e0 [ 1380.237742][ C0] alloc_pages_mpol+0x1fb/0x550 [ 1380.237762][ C0] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1380.237781][ C0] ? get_freelist+0x1a8/0x1e0 [ 1380.237801][ C0] ? find_held_lock+0x2b/0x80 [ 1380.237823][ C0] new_slab+0x265/0x330 [ 1380.237847][ C0] ___slab_alloc+0xcf2/0x1750 [ 1380.237870][ C0] ? arch_stack_walk+0x94/0x100 [ 1380.237888][ C0] ? skb_ext_add+0xf8/0x7a0 [ 1380.237913][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1380.237940][ C0] ? skb_ext_add+0xf8/0x7a0 [ 1380.237962][ C0] ? __slab_alloc.constprop.0+0x56/0xb0 [ 1380.237985][ C0] __slab_alloc.constprop.0+0x56/0xb0 [ 1380.238010][ C0] kmem_cache_alloc_noprof+0xef/0x3b0 [ 1380.238027][ C0] ? kasan_save_stack+0x42/0x60 [ 1380.238042][ C0] ? kasan_save_stack+0x33/0x60 [ 1380.238056][ C0] ? kasan_save_track+0x14/0x30 [ 1380.238071][ C0] ? skb_ext_add+0xf8/0x7a0 [ 1380.238097][ C0] skb_ext_add+0xf8/0x7a0 [ 1380.238121][ C0] ? find_held_lock+0x2b/0x80 [ 1380.238144][ C0] br_nf_forward_ip.part.0+0x28/0x810 [ 1380.238172][ C0] br_nf_forward+0xf0f/0x1be0 [ 1380.238196][ C0] ? __pfx_br_nf_forward+0x10/0x10 [ 1380.238218][ C0] nf_hook_slow+0xbe/0x200 [ 1380.238245][ C0] nf_hook+0x45e/0x780 [ 1380.238263][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1380.238282][ C0] ? __pfx_nf_hook+0x10/0x10 [ 1380.238303][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1380.238327][ C0] __br_forward+0x1be/0x5b0 [ 1380.238345][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1380.238365][ C0] br_flood+0x39c/0x650 [ 1380.238390][ C0] br_handle_frame_finish+0xf2d/0x1ca0 [ 1380.238413][ C0] ? net_rx_action+0xa9f/0xfe0 [ 1380.238430][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1380.238451][ C0] ? batadv_tt_purge+0x25f/0xb80 [ 1380.238465][ C0] ? process_one_work+0x8d3/0x1b70 [ 1380.238481][ C0] ? rescuer_thread+0x620/0xea0 [ 1380.238497][ C0] ? __kthread_cancel_work_sync+0xc0/0x3f0 [ 1380.238519][ C0] ? ret_from_fork+0x56a/0x730 [ 1380.238545][ C0] ? nf_hook_slow+0x132/0x200 [ 1380.238565][ C0] br_nf_hook_thresh+0x307/0x410 [ 1380.238586][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1380.238610][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 1380.238635][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1380.238657][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1380.238673][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1380.238694][ C0] br_nf_pre_routing_finish_ipv6+0x76a/0xfb0 [ 1380.238715][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1380.238741][ C0] br_nf_pre_routing_ipv6+0x3cd/0x8c0 [ 1380.238765][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 1380.238786][ C0] ? lock_acquire+0x179/0x350 [ 1380.238803][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 1380.238826][ C0] ? net_generic+0xea/0x2a0 [ 1380.238850][ C0] br_nf_pre_routing+0x860/0x15b0 [ 1380.238876][ C0] br_handle_frame+0xad5/0x14b0 [ 1380.238900][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1380.238919][ C0] ? migrate_enable+0x1ed/0x260 [ 1380.238939][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1380.238965][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1380.238985][ C0] __netif_receive_skb_core.constprop.0+0xa22/0x48c0 [ 1380.239009][ C0] ? kmem_cache_free+0x2d1/0x4d0 [ 1380.239025][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 1380.239049][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 1380.239070][ C0] ? sk_skb_reason_drop+0x136/0x1a0 [ 1380.239092][ C0] ? ip6_mc_input+0x4f2/0xeb0 [ 1380.239120][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 1380.239147][ C0] ? process_backlog+0x3f0/0x15e0 [ 1380.239163][ C0] __netif_receive_skb_one_core+0xb0/0x1e0 [ 1380.239180][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1380.239198][ C0] ? lock_acquire+0x179/0x350 [ 1380.239217][ C0] ? process_backlog+0x3f0/0x15e0 [ 1380.239233][ C0] __netif_receive_skb+0x1d/0x160 [ 1380.239262][ C0] process_backlog+0x442/0x15e0 [ 1380.239284][ C0] __napi_poll.constprop.0+0xb7/0x550 [ 1380.239304][ C0] net_rx_action+0xa9f/0xfe0 [ 1380.239329][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1380.239347][ C0] ? mark_held_locks+0x49/0x80 [ 1380.239370][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1380.239391][ C0] ? tmigr_handle_remote+0x132/0x380 [ 1380.239417][ C0] ? run_timer_base+0x121/0x190 [ 1380.239432][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 1380.239458][ C0] handle_softirqs+0x219/0x8e0 [ 1380.239483][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1380.239503][ C0] ? batadv_tt_purge+0x25f/0xb80 [ 1380.239520][ C0] do_softirq+0xb2/0xf0 [ 1380.239537][ C0] [ 1380.239542][ C0] [ 1380.239548][ C0] __local_bh_enable_ip+0x100/0x120 [ 1380.239568][ C0] batadv_tt_purge+0x25f/0xb80 [ 1380.239589][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 1380.239610][ C0] ? rcu_is_watching+0x12/0xc0 [ 1380.239634][ C0] process_one_work+0x9cc/0x1b70 [ 1380.239660][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1380.239683][ C0] ? assign_work+0x1a0/0x250 [ 1380.239702][ C0] rescuer_thread+0x620/0xea0 [ 1380.239727][ C0] ? rcu_is_watching+0x12/0xc0 [ 1380.239745][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 1380.239760][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1380.239780][ C0] ? __kthread_parkme+0x19e/0x250 [ 1380.239802][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 1380.239819][ C0] kthread+0x3c2/0x780 [ 1380.239835][ C0] ? __pfx_kthread+0x10/0x10 [ 1380.239852][ C0] ? rcu_is_watching+0x12/0xc0 [ 1380.239871][ C0] ? __pfx_kthread+0x10/0x10 [ 1380.239887][ C0] ret_from_fork+0x56a/0x730 [ 1380.239901][ C0] ? __pfx_kthread+0x10/0x10 [ 1380.239917][ C0] ret_from_fork_asm+0x1a/0x30 [ 1380.239945][ C0] [ 1380.239952][ C0] Mem-Info: [ 1380.247362][ C1] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 1380.257065][ C0] active_anon:11133 inactive_anon:0 isolated_anon:0 [ 1380.257065][ C0] active_file:18264 inactive_file:41398 isolated_file:0 [ 1380.257065][ C0] unevictable:768 dirty:0 writeback:0 [ 1380.257065][ C0] slab_reclaimable:11556 slab_unreclaimable:1401649 [ 1380.257065][ C0] mapped:27268 shmem:1356 pagetables:1353 [ 1380.257065][ C0] sec_pagetables:0 bounce:0 [ 1380.257065][ C0] kernel_misc_reclaimable:0 [ 1380.257065][ C0] free:10757 free_pcp:5679 free_cma:0 [ 1380.267098][ C1] node 0: slabs: 44330, objs: 531960, free: 0 [ 1380.272612][ C0] Node 0 active_anon:44532kB inactive_anon:0kB active_file:72888kB inactive_file:165540kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:109068kB dirty:0kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13136kB pagetables:5200kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1380.275882][ C1] node 1: slabs: 100913, objs: 1210956, free: 48 [ 1380.278710][ C0] Node 1 active_anon:0kB inactive_anon:0kB active_file:168kB inactive_file:52kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:212kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1380.283568][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1380.287670][ C0] Node 0 [ 1380.292487][ C1] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 1380.298202][ C0] DMA free:9956kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:40kB local_pcp:28kB free_cma:0kB [ 1380.303203][ C1] node 0: slabs: 44330, objs: 531960, free: 0 [ 1380.309061][ C0] lowmem_reserve[]: 0 [ 1380.314934][ C1] node 1: slabs: 100913, objs: 1210956, free: 48 [ 1380.319584][ C0] 2479 2481 [ 1380.326066][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1380.330797][ C0] 2481 [ 1380.335717][ C1] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 1380.341586][ C0] 2481 [ 1380.346427][ C1] node 0: slabs: 44330, objs: 531960, free: 0 [ 1380.351250][ C0] [ 1380.351258][ C0] Node 0 [ 1380.356598][ C1] node 1: slabs: 100913, objs: 1210956, free: 48 [ 1380.361256][ C0] DMA32 free:12144kB boost:76660kB min:110736kB low:119252kB high:127768kB reserved_highatomic:26624KB free_highatomic:7208KB active_anon:44512kB inactive_anon:0kB active_file:72888kB inactive_file:164204kB unevictable:1536kB writepending:0kB present:3129332kB managed:2539312kB mlocked:0kB bounce:0kB free_pcp:5988kB local_pcp:1432kB free_cma:0kB [ 1380.366089][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1380.370042][ C0] lowmem_reserve[]: 0 [ 1380.374697][ C1] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 1380.379605][ C0] 0 1 [ 1380.384090][ C1] node 0: slabs: 44330, objs: 531960, free: 0 [ 1380.388995][ C0] 1 1 [ 1380.393495][ C1] node 1: slabs: 100913, objs: 1210956, free: 48 [ 1380.399009][ C0] [ 1380.399017][ C0] Node 0 [ 1380.404513][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1380.409705][ C0] Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20kB inactive_anon:0kB active_file:0kB inactive_file:1336kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB [ 1380.414542][ C1] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 1380.419364][ C0] lowmem_reserve[]: 0 [ 1380.424279][ C1] node 0: slabs: 44330, objs: 531960, free: 0 [ 1380.428757][ C0] 0 0 [ 1380.433067][ C1] node 1: slabs: 100913, objs: 1210956, free: 48 [ 1380.437711][ C0] 0 0 [ 1380.444444][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1380.448331][ C0] [ 1380.448340][ C0] Node 1 Normal free:20924kB boost:28672kB min:84476kB low:98424kB high:112372kB reserved_highatomic:34816KB free_highatomic:20956KB active_anon:0kB inactive_anon:0kB active_file:168kB inactive_file:52kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16668kB local_pcp:4496kB free_cma:0kB [ 1380.453688][ C1] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1380.458076][ C0] lowmem_reserve[]: 0 [ 1380.462115][ C1] node 0: slabs: 17086, objs: 135994, free: 0 [ 1380.467556][ C0] 0 0 [ 1380.472121][ C1] node 1: slabs: 19858, objs: 317490, free: 25 [ 1380.477554][ C0] 0 [ 1380.482112][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1380.487457][ C0] 0 [ 1380.491576][ C1] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1380.497019][ C0] [ 1380.501746][ C1] node 0: slabs: 17086, objs: 135994, free: 0 [ 1380.507620][ C0] Node 0 [ 1380.512519][ C1] node 1: slabs: 19858, objs: 317490, free: 25 [ 1380.517608][ C0] DMA: [ 1380.522487][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1380.528207][ C0] 0*4kB [ 1380.532945][ C1] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1380.537589][ C0] 0*8kB [ 1380.542492][ C1] node 0: slabs: 17086, objs: 135994, free: 0 [ 1380.548364][ C0] 0*16kB [ 1380.553798][ C1] node 1: slabs: 19858, objs: 317490, free: 25 [ 1380.559655][ C0] 1*32kB [ 1380.565980][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1380.571397][ C0] (U) [ 1380.577446][ C1] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1380.583406][ C0] 1*64kB [ 1380.588757][ C1] node 0: slabs: 17086, objs: 135994, free: 0 [ 1380.594631][ C0] (U) [ 1380.599270][ C1] node 1: slabs: 19858, objs: 317490, free: 25 [ 1380.605761][ C0] 1*128kB [ 1380.610315][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1380.615256][ C0] (U) [ 1380.620070][ C1] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1380.625340][ C0] 0*256kB [ 1380.630154][ C1] node 0: slabs: 17086, objs: 135994, free: 0 [ 1380.636139][ C0] 1*512kB [ 1380.641388][ C1] node 1: slabs: 19858, objs: 317490, free: 25 [ 1380.648042][ C0] (U) [ 1380.672854][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1380.674647][ C0] 1*1024kB [ 1380.679990][ T31] task:kworker/1:1 state:D [ 1380.684546][ C0] (U) 2*2048kB (UM) 1*4096kB (M) = 9952kB [ 1380.684584][ C0] Node 0 DMA32: 133*4kB [ 1380.767219][ T31] stack:22096 pid:48 tgid:48 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1380.771564][ C0] (UH) [ 1380.822894][ T31] Workqueue: events_power_efficient reg_check_chans_work [ 1380.826070][ C0] 96*8kB [ 1380.831224][ T31] [ 1380.831233][ T31] Call Trace: [ 1380.836524][ C0] (UH) 71*16kB (UMH) 12*32kB (UMH) 21*64kB (MH) 11*128kB (MH) 3*256kB (MH) 7*512kB (MH) 2*1024kB (UH) 0*2048kB 0*4096kB = 11972kB [ 1380.836628][ C0] Node 0 Normal: 0*4kB 0*8kB [ 1380.940384][ T31] [ 1380.946606][ C0] 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1380.946679][ C0] Node 1 Normal: 1*4kB (H) 1*8kB (H) 1*16kB (H) 0*32kB 1*64kB (H) 1*128kB (H) 11*256kB [ 1381.242861][ T31] __schedule+0x1190/0x5de0 [ 1381.248601][ C0] (H) [ 1381.340367][ T31] ? find_held_lock+0x2b/0x80 [ 1381.347088][ C0] 11*512kB (H) 12*1024kB (H) 0*2048kB 0*4096kB = 20956kB [ 1381.347141][ C0] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1381.371991][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1381.382072][ C0] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1381.382088][ C0] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1381.382101][ C0] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1381.382115][ C0] 61014 total pagecache pages [ 1381.382122][ C0] 0 pages in swap cache [ 1381.382129][ C0] Free swap = 124996kB [ 1381.382136][ C0] Total swap = 124996kB [ 1381.382143][ C0] 2097051 pages RAM [ 1381.382151][ C0] 0 pages HighMem/MovableOnly [ 1381.382158][ C0] 430261 pages reserved [ 1381.382164][ C0] 0 pages cma reserved [ 1382.592931][ T31] ? __pfx___schedule+0x10/0x10 [ 1382.597906][ T31] ? find_held_lock+0x2b/0x80 [ 1382.610270][ T31] ? schedule+0x2d7/0x3a0 [ 1382.642934][ T31] ? reg_check_chans_work+0x10d/0x1180 [ 1382.662925][ T31] schedule+0xe7/0x3a0 [ 1382.673294][ T31] schedule_preempt_disabled+0x13/0x30 [ 1382.687537][ T31] __mutex_lock+0x81b/0x1060 [ 1382.712979][ T31] ? reg_check_chans_work+0x10d/0x1180 [ 1382.718482][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1382.754893][ T31] ? __mod_timer+0x8ed/0xd30 [ 1382.759516][ T31] ? rcu_is_watching+0x12/0xc0 [ 1382.796873][ T31] ? reg_check_chans_work+0x10d/0x1180 [ 1382.802375][ T31] reg_check_chans_work+0x10d/0x1180 [ 1382.836384][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1382.842236][ T31] ? debug_object_deactivate+0x1ec/0x3a0 [ 1382.872999][ T31] ? __pfx_reg_check_chans_work+0x10/0x10 [ 1382.878776][ T31] ? rcu_is_watching+0x12/0xc0 [ 1382.902879][ T31] process_one_work+0x9cc/0x1b70 [ 1382.907861][ T31] ? __pfx_defense_work_handler+0x10/0x10 [ 1382.932965][ T31] ? __pfx_process_one_work+0x10/0x10 [ 1382.938386][ T31] ? assign_work+0x1a0/0x250 [ 1382.973001][ T31] worker_thread+0x6c8/0xf10 [ 1382.977646][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1382.982761][ T31] kthread+0x3c2/0x780 [ 1383.012963][ T31] ? __pfx_kthread+0x10/0x10 [ 1383.017589][ T31] ? rcu_is_watching+0x12/0xc0 [ 1383.022355][ T31] ? __pfx_kthread+0x10/0x10 [ 1383.049383][ T31] ret_from_fork+0x56a/0x730 [ 1383.070385][ T31] ? __pfx_kthread+0x10/0x10 [ 1383.082878][ T31] ret_from_fork_asm+0x1a/0x30 [ 1383.087692][ T31] [ 1383.090837][ T31] [ 1383.090837][ T31] Showing all locks held in the system: [ 1383.143009][ T31] 1 lock held by kthreadd/2: [ 1383.147625][ T31] 2 locks held by kworker/0:0/9: [ 1383.152551][ T31] 3 locks held by kworker/u8:1/13: [ 1383.182898][ T31] 1 lock held by khungtaskd/31: [ 1383.187775][ T31] #0: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1383.223252][ T31] 4 locks held by kworker/1:1/48: [ 1383.228321][ T31] #0: ffff88801b87a148 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1383.276435][ T31] #1: ffffc90000b87d10 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1383.312958][ T31] #2: ffffffff90385608 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x83/0x1180 [ 1383.322667][ T31] #3: ffff88805cf18768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_check_chans_work+0x10d/0x1180 [ 1383.386413][ T31] 4 locks held by kworker/u8:3/49: [ 1383.391551][ T31] 3 locks held by kswapd0/86: [ 1383.412978][ T31] 2 locks held by kswapd1/87: [ 1383.417686][ T31] 3 locks held by kworker/u8:5/1097: [ 1383.437132][ T31] 3 locks held by kworker/u8:6/1163: [ 1383.458065][ T31] 3 locks held by kworker/R-ipv6_/3199: [ 1383.482918][ T31] #0: ffff88814c99a148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1383.513065][ T31] #1: ffffc9000c537ca8 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1383.552981][ T31] #2: ffffffff90385608 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x120/0x14e0 [ 1383.562513][ T31] 4 locks held by kworker/R-bat_e/3423: [ 1383.606478][ T31] 1 lock held by klogd/5209: [ 1383.611094][ T31] 2 locks held by udevd/5220: [ 1383.622876][ T31] 2 locks held by dhcpcd/5514: [ 1383.627657][ T31] 5 locks held by dhcpcd/5515: [ 1383.632415][ T31] 2 locks held by getty/5606: [ 1383.669979][ T31] #0: ffff8880361dc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1383.702866][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1383.732959][ T31] 2 locks held by syz-executor/5833: [ 1383.738268][ T31] 3 locks held by kworker/0:6/5981: [ 1383.768532][ T31] 3 locks held by kworker/u8:9/6010: [ 1383.792962][ T31] 2 locks held by kworker/u8:10/6820: [ 1383.798364][ T31] 3 locks held by kworker/u8:12/9944: [ 1383.826375][ T31] 3 locks held by kworker/u8:13/11408: [ 1383.831858][ T31] 4 locks held by kworker/u8:14/11514: [ 1383.842959][ C0] net_ratelimit: 19061 callbacks suppressed [ 1383.842976][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1383.861157][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1383.862974][ T31] 3 locks held by kworker/0:3/12989: [ 1383.873437][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1383.890652][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1383.902930][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1383.914836][ T31] 3 locks held by syz-executor/16518: [ 1383.915146][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1383.920222][ T31] 4 locks held by kworker/1:3/17728: [ 1383.932481][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1383.949870][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1383.962243][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1383.974491][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1384.012956][ T31] #0: ffff888073e00548 ((wq_completion)wg-kex-wg2#22){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1384.046427][ T31] #1: ffffc9000517fd10 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1384.177238][ T31] #2: ffff888047f91308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x880 [ 1384.212984][ T31] #3: ffff888061e0a0f0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x5ac/0x880 [ 1384.262844][ T31] 3 locks held by kworker/u8:0/17955: [ 1384.268256][ T31] 2 locks held by kworker/u8:4/20985: [ 1384.292978][ T31] 4 locks held by kworker/u8:11/20987: [ 1384.298462][ T31] 3 locks held by kworker/u8:15/20988: [ 1384.313146][ T31] 3 locks held by syz-executor/20990: [ 1384.318538][ T31] 3 locks held by kworker/0:5/20991: [ 1384.332980][ T31] 1 lock held by kworker/u8:17/20994: [ 1384.338466][ T31] 5 locks held by syz-executor/20995: [ 1384.352984][ T31] 1 lock held by syz-executor/20996: [ 1384.358329][ T31] [ 1384.360645][ T31] ============================================= [ 1384.360645][ T31] [ 1384.393073][ T31] NMI backtrace for cpu 1 [ 1384.393093][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1384.393115][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1384.393126][ T31] Call Trace: [ 1384.393133][ T31] [ 1384.393140][ T31] dump_stack_lvl+0x116/0x1f0 [ 1384.393169][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1384.393188][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1384.393216][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1384.393237][ T31] watchdog+0xf0e/0x1260 [ 1384.393268][ T31] ? __pfx_watchdog+0x10/0x10 [ 1384.393287][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1384.393311][ T31] ? __kthread_parkme+0x19e/0x250 [ 1384.393338][ T31] ? __pfx_watchdog+0x10/0x10 [ 1384.393357][ T31] kthread+0x3c2/0x780 [ 1384.393376][ T31] ? __pfx_kthread+0x10/0x10 [ 1384.393396][ T31] ? rcu_is_watching+0x12/0xc0 [ 1384.393419][ T31] ? __pfx_kthread+0x10/0x10 [ 1384.393438][ T31] ret_from_fork+0x56a/0x730 [ 1384.393454][ T31] ? __pfx_kthread+0x10/0x10 [ 1384.393472][ T31] ret_from_fork_asm+0x1a/0x30 [ 1384.393506][ T31] [ 1384.393514][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1384.509792][ C0] NMI backtrace for cpu 0 [ 1384.509806][ C0] CPU: 0 UID: 0 PID: 3423 Comm: kworker/R-bat_e Not tainted syzkaller #0 PREEMPT(full) [ 1384.509824][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1384.509833][ C0] Workqueue: bat_events batadv_tt_purge [ 1384.509852][ C0] RIP: 0010:arch_stack_walk+0x7f/0x100 [ 1384.509870][ C0] Code: ff d4 0f 1f 00 84 c0 74 50 49 8b 8e 98 00 00 00 4c 89 f2 4c 89 fe 48 89 df e8 dd 26 09 00 8b 95 70 ff ff ff 85 d2 75 21 eb 2f <4c> 89 ef 2e e8 60 23 9e 1e 84 c0 74 22 48 89 df e8 0c 06 09 00 8b [ 1384.509883][ C0] RSP: 0018:ffffc900000068f8 EFLAGS: 00000286 [ 1384.509894][ C0] RAX: ffffffff89b74f1e RBX: ffffc900000068f8 RCX: ffffc9000000684c [ 1384.509904][ C0] RDX: 1ffff92000000d28 RSI: ffffffff89b74f1e RDI: ffffffff89b74f1e [ 1384.509914][ C0] RBP: ffffc90000006988 R08: 0000000000000001 R09: 0000000000000000 [ 1384.509923][ C0] R10: 0000000000000005 R11: 0000000000097115 R12: ffffffff81a6edc0 [ 1384.509932][ C0] R13: ffffc900000069b8 R14: 0000000000000000 R15: ffff8880326c8000 [ 1384.509941][ C0] FS: 0000000000000000(0000) GS:ffff8881246b2000(0000) knlGS:0000000000000000 [ 1384.509955][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1384.509964][ C0] CR2: 00007f0ea6774ff8 CR3: 000000000e380000 CR4: 00000000003526f0 [ 1384.509973][ C0] Call Trace: [ 1384.509978][ C0] [ 1384.509986][ C0] ? nf_hook_slow+0xbe/0x200 [ 1384.510011][ C0] stack_trace_save+0x8e/0xc0 [ 1384.510029][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1384.510046][ C0] ? __lock_acquire+0xb97/0x1ce0 [ 1384.510066][ C0] kasan_save_stack+0x33/0x60 [ 1384.510080][ C0] ? kasan_save_stack+0x33/0x60 [ 1384.510092][ C0] ? kasan_save_track+0x14/0x30 [ 1384.510104][ C0] ? kasan_save_free_info+0x3b/0x60 [ 1384.510121][ C0] ? __kasan_slab_free+0x60/0x70 [ 1384.510133][ C0] ? kmem_cache_free+0x2d1/0x4d0 [ 1384.510145][ C0] ? __skb_ext_put+0x102/0x2c0 [ 1384.510164][ C0] ? __skb_ext_del+0xf3/0x340 [ 1384.510175][ C0] ? br_nf_dev_queue_xmit+0x7b7/0x2a80 [ 1384.510193][ C0] ? br_nf_post_routing+0x8e7/0x1190 [ 1384.510210][ C0] ? nf_hook_slow+0xbe/0x200 [ 1384.510223][ C0] ? nf_hook+0x45e/0x780 [ 1384.510237][ C0] ? br_forward_finish+0xcd/0x130 [ 1384.510252][ C0] ? br_nf_hook_thresh+0x307/0x410 [ 1384.510269][ C0] ? br_nf_forward_finish+0x66a/0xba0 [ 1384.510286][ C0] ? br_nf_forward_ip.part.0+0x609/0x810 [ 1384.510303][ C0] ? br_nf_forward+0xf0f/0x1be0 [ 1384.510332][ C0] kasan_save_track+0x14/0x30 [ 1384.510344][ C0] kasan_save_free_info+0x3b/0x60 [ 1384.510362][ C0] __kasan_slab_free+0x60/0x70 [ 1384.510375][ C0] kmem_cache_free+0x2d1/0x4d0 [ 1384.510387][ C0] ? __skb_ext_put+0x102/0x2c0 [ 1384.510407][ C0] __skb_ext_put+0x102/0x2c0 [ 1384.510427][ C0] __skb_ext_del+0xf3/0x340 [ 1384.510439][ C0] br_nf_dev_queue_xmit+0x7b7/0x2a80 [ 1384.510459][ C0] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 1384.510479][ C0] br_nf_post_routing+0x8e7/0x1190 [ 1384.510497][ C0] ? __pfx_br_nf_post_routing+0x10/0x10 [ 1384.510515][ C0] nf_hook_slow+0xbe/0x200 [ 1384.510530][ C0] nf_hook+0x45e/0x780 [ 1384.510545][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1384.510561][ C0] ? __pfx_nf_hook+0x10/0x10 [ 1384.510576][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 1384.510594][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1384.510612][ C0] br_forward_finish+0xcd/0x130 [ 1384.510626][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1384.510642][ C0] br_nf_hook_thresh+0x307/0x410 [ 1384.510659][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1384.510675][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 1384.510692][ C0] ? lock_acquire+0x179/0x350 [ 1384.510705][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1384.510720][ C0] ? net_generic+0xea/0x2a0 [ 1384.510737][ C0] br_nf_forward_finish+0x66a/0xba0 [ 1384.510754][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1384.510771][ C0] br_nf_forward_ip.part.0+0x609/0x810 [ 1384.510790][ C0] br_nf_forward+0xf0f/0x1be0 [ 1384.510808][ C0] ? __pfx_br_nf_forward+0x10/0x10 [ 1384.510825][ C0] nf_hook_slow+0xbe/0x200 [ 1384.510841][ C0] nf_hook+0x45e/0x780 [ 1384.510854][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1384.510870][ C0] ? __pfx_nf_hook+0x10/0x10 [ 1384.510885][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1384.510903][ C0] __br_forward+0x1be/0x5b0 [ 1384.510917][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1384.510933][ C0] br_flood+0x39c/0x650 [ 1384.510949][ C0] br_handle_frame_finish+0xf2d/0x1ca0 [ 1384.510967][ C0] ? net_rx_action+0xa9f/0xfe0 [ 1384.510981][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1384.511001][ C0] ? batadv_tt_purge+0x25f/0xb80 [ 1384.511013][ C0] ? process_one_work+0x8d3/0x1b70 [ 1384.511027][ C0] ? rescuer_thread+0x620/0xea0 [ 1384.511040][ C0] ? __kthread_cancel_work_sync+0xc0/0x3f0 [ 1384.511059][ C0] ? ret_from_fork+0x56a/0x730 [ 1384.511077][ C0] ? nf_hook_slow+0x132/0x200 [ 1384.511092][ C0] br_nf_hook_thresh+0x307/0x410 [ 1384.511109][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1384.511127][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 1384.511146][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1384.511165][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1384.511179][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1384.511195][ C0] br_nf_pre_routing_finish_ipv6+0x76a/0xfb0 [ 1384.511214][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1384.511234][ C0] br_nf_pre_routing_ipv6+0x3cd/0x8c0 [ 1384.511252][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 1384.511270][ C0] ? lock_acquire+0x179/0x350 [ 1384.511282][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 1384.511301][ C0] ? net_generic+0xea/0x2a0 [ 1384.511319][ C0] br_nf_pre_routing+0x860/0x15b0 [ 1384.511338][ C0] br_handle_frame+0xad5/0x14b0 [ 1384.511356][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1384.511372][ C0] ? migrate_enable+0x1ed/0x260 [ 1384.511387][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1384.511407][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1384.511423][ C0] __netif_receive_skb_core.constprop.0+0xa22/0x48c0 [ 1384.511440][ C0] ? kmem_cache_free+0x2d1/0x4d0 [ 1384.511453][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 1384.511472][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 1384.511488][ C0] ? sk_skb_reason_drop+0x136/0x1a0 [ 1384.511506][ C0] ? ip6_mc_input+0x4f2/0xeb0 [ 1384.511526][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 1384.511545][ C0] ? process_backlog+0x3f0/0x15e0 [ 1384.511558][ C0] __netif_receive_skb_one_core+0xb0/0x1e0 [ 1384.511572][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1384.511587][ C0] ? lock_acquire+0x179/0x350 [ 1384.511600][ C0] ? process_backlog+0x3f0/0x15e0 [ 1384.511613][ C0] __netif_receive_skb+0x1d/0x160 [ 1384.511627][ C0] process_backlog+0x442/0x15e0 [ 1384.511643][ C0] __napi_poll.constprop.0+0xb7/0x550 [ 1384.511658][ C0] net_rx_action+0xa9f/0xfe0 [ 1384.511675][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1384.511689][ C0] ? mark_held_locks+0x49/0x80 [ 1384.511707][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1384.511723][ C0] ? tmigr_handle_remote+0x132/0x380 [ 1384.511742][ C0] ? run_timer_base+0x121/0x190 [ 1384.511754][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 1384.511774][ C0] handle_softirqs+0x219/0x8e0 [ 1384.511792][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1384.511809][ C0] ? batadv_tt_purge+0x25f/0xb80 [ 1384.511822][ C0] do_softirq+0xb2/0xf0 [ 1384.511837][ C0] [ 1384.511841][ C0] [ 1384.511846][ C0] __local_bh_enable_ip+0x100/0x120 [ 1384.511862][ C0] batadv_tt_purge+0x25f/0xb80 [ 1384.511876][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 1384.511891][ C0] ? rcu_is_watching+0x12/0xc0 [ 1384.511909][ C0] process_one_work+0x9cc/0x1b70 [ 1384.511926][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1384.511943][ C0] ? assign_work+0x1a0/0x250 [ 1384.511957][ C0] rescuer_thread+0x620/0xea0 [ 1384.511974][ C0] ? rcu_is_watching+0x12/0xc0 [ 1384.511990][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 1384.512009][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1384.512026][ C0] ? __kthread_parkme+0x19e/0x250 [ 1384.512043][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 1384.512057][ C0] kthread+0x3c2/0x780 [ 1384.512070][ C0] ? __pfx_kthread+0x10/0x10 [ 1384.512083][ C0] ? rcu_is_watching+0x12/0xc0 [ 1384.512099][ C0] ? __pfx_kthread+0x10/0x10 [ 1384.512112][ C0] ret_from_fork+0x56a/0x730 [ 1384.512123][ C0] ? __pfx_kthread+0x10/0x10 [ 1384.512136][ C0] ret_from_fork_asm+0x1a/0x30 [ 1384.512157][ C0] [ 1385.433075][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1385.439972][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1385.449080][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1385.459134][ T31] Call Trace: [ 1385.462408][ T31] [ 1385.465345][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1385.469945][ T31] vpanic+0x6e8/0x7a0 [ 1385.473943][ T31] ? __pfx_vpanic+0x10/0x10 [ 1385.478454][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 1385.484346][ T31] panic+0xca/0xd0 [ 1385.488058][ T31] ? __pfx_panic+0x10/0x10 [ 1385.492476][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1385.497849][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 1385.504002][ T31] ? watchdog+0xd78/0x1260 [ 1385.508418][ T31] ? watchdog+0xd6b/0x1260 [ 1385.512834][ T31] watchdog+0xd89/0x1260 [ 1385.517079][ T31] ? __pfx_watchdog+0x10/0x10 [ 1385.521753][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1385.526953][ T31] ? __kthread_parkme+0x19e/0x250 [ 1385.531988][ T31] ? __pfx_watchdog+0x10/0x10 [ 1385.536673][ T31] kthread+0x3c2/0x780 [ 1385.540738][ T31] ? __pfx_kthread+0x10/0x10 [ 1385.545323][ T31] ? rcu_is_watching+0x12/0xc0 [ 1385.550083][ T31] ? __pfx_kthread+0x10/0x10 [ 1385.554672][ T31] ret_from_fork+0x56a/0x730 [ 1385.559259][ T31] ? __pfx_kthread+0x10/0x10 [ 1385.563843][ T31] ret_from_fork_asm+0x1a/0x30 [ 1385.568617][ T31] [ 1385.571858][ T31] Kernel Offset: disabled [ 1385.576171][ T31] Rebooting in 86400 seconds..