last executing test programs:

4m52.691790383s ago: executing program 0 (id=1842):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040855}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050840)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_io_uring_setup(0x494, &(0x7f0000000400)={0x0, 0x2003f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000600))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x480, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f00000003c0), &(0x7f0000000040)=0x8)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1c, 0x9, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$netlink(0x10, 0x3, 0x0)
r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x1000000, &(0x7f0000000340)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}})
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000001440)=""/4106, 0x100a}], 0x1, 0x300, 0x0)

4m51.513264659s ago: executing program 0 (id=1846):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000000)=0x6, 0x8, 0x0)
get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000041000/0x4000)=nil, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003)
ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0)
r3 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xa0)
r4 = socket(0x2000000000000021, 0x2, 0x10000000000002)
r5 = syz_io_uring_setup(0x9ee, &(0x7f00000003c0)={0x0, 0xc958, 0x100, 0x4, 0xfffffffe}, &(0x7f0000000000)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r8}})
io_uring_enter(r5, 0x5745, 0x0, 0x0, 0x0, 0x0)
setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000040), 0x4)
fallocate(r3, 0x0, 0x0, 0x1001f0)
copy_file_range(r3, 0x0, r3, &(0x7f00000000c0)=0xc615, 0x101, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4c)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)

4m47.864117071s ago: executing program 0 (id=1857):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x3ef8, 0x9, r0})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
get_mempolicy(0x0, 0x0, 0xfffffffffffffffa, &(0x7f00007cd000/0x4000)=nil, 0x2)

4m46.882731042s ago: executing program 0 (id=1860):
close(0x3)
socket(0x2, 0x80805, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
connect(r1, &(0x7f0000001140)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2c}, 0x80)
socket$rxrpc(0x21, 0x2, 0x2)
r2 = syz_open_dev$admmidi(0x0, 0x20, 0x0)
read$midi(r2, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x11)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x10a, &(0x7f0000000200)={0x0, 0x5803, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=<r5=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0xb, 0x8, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10)
sendmmsg$inet(r6, 0x0, 0x0, 0x20040c91)
shutdown(r6, 0x1)
munmap(&(0x7f0000009000/0x2000)=nil, 0x2000)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r7, 0x0, 0x0, 0x4000800)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0xfffc, @empty}}}, 0x108)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, &(0x7f00000000c0)=0x80000001, 0x6, 0x2)

4m42.688146385s ago: executing program 0 (id=1873):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r1, @ANYRES8], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
r6 = socket(0xa, 0x5, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, 0x0, 0xf0)
bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @empty}, 0xe)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCDELRT(r8, 0x890c, &(0x7f0000000300)={0x1, @null, @bpq0, 0xe, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffeff, 0x0, [@bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]})
sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x1a000}}, 0x0)
sendmsg$rds(r5, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]})
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0)

4m41.405337331s ago: executing program 0 (id=1878):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0xa, 0x3, 0x87)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'caif0\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x40000)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
syz_open_dev$dri(0x0, 0x1, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000240)=0x3)
ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f)
ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000000))
read$dsp(r3, &(0x7f0000000300)=""/79, 0x4f)
socket$vsock_stream(0x28, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0xf)
r6 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r6)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4000800)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xfff2, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
pselect6(0x40, &(0x7f00000000c0)={0xf, 0xfffffffffffffffd, 0xb, 0x40, 0x7, 0x3}, 0x0, &(0x7f0000000680)={0x7ff, 0x2, 0x5, 0x7, 0xffffffffffffff22, 0x2, 0x5, 0xb}, 0x0, 0x0)

4m24.378580883s ago: executing program 32 (id=1878):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0xa, 0x3, 0x87)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'caif0\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x40000)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
syz_open_dev$dri(0x0, 0x1, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000240)=0x3)
ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f)
ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000000))
read$dsp(r3, &(0x7f0000000300)=""/79, 0x4f)
socket$vsock_stream(0x28, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0xf)
r6 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r6)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4000800)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xfff2, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
pselect6(0x40, &(0x7f00000000c0)={0xf, 0xfffffffffffffffd, 0xb, 0x40, 0x7, 0x3}, 0x0, &(0x7f0000000680)={0x7ff, 0x2, 0x5, 0x7, 0xffffffffffffff22, 0x2, 0x5, 0xb}, 0x0, 0x0)

16.793922156s ago: executing program 5 (id=2769):
r0 = socket$alg(0x26, 0x5, 0x0)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
shutdown(r2, 0x1)
connect$bt_rfcomm(r2, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa)
bind$alg(r0, &(0x7f0000000480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58)
r3 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000000)=0x1, 0x4)
bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e20, 0x5, @private1, 0xe}, 0x1c)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r4 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44}], 0x1, 0x0)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1, 0x0, 0x0, 0xf5000000}, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
openat$mice(0xffffffffffffff9c, &(0x7f0000000880), 0x41)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0xfffffffffffffff7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000001140)={0x80, 0xfffffffd, 0x80000000, 0x0, 0x2, 0x89b})

15.699349312s ago: executing program 5 (id=2771):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
socket$unix(0x1, 0x2, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000040)=0x6, &(0x7f0000000100)=0x2)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = gettid()
ptrace$getregset(0x4204, r2, 0x201, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(r4, 0x800448d3, &(0x7f0000000480)={@none, 0x2, 0xa2ad, 0xffff, 0x7, 0x5, "73ec8f7f4f994242a51098ceaf1e64bc8bbe1d85db5442305fc1d2f24c2148137bef5226bd87d017bb706c11d81e2d42de8dc71a75039525f881f38d159d9637d4ad699d40686e10853ab4df2690870c77642d665b27274ba7666b41ce809b0bd692748f3449c8bbf1a8359e7cb5d1aa6f9fca89e86def465e67fbd5633ac48b"})
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000a80)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
mknodat$loop(0xffffffffffffffff, &(0x7f0000001600)='./file1\x00', 0x200, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
linkat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000180)='./bus\x00', 0x0)
fstat(0xffffffffffffffff, 0x0)

12.7787787s ago: executing program 5 (id=2779):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a000000020000", 0x7)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080), 0x1)
sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto(r0, &(0x7f0000000300)='H', 0x19fff, 0x4000000, 0x0, 0x0)

12.615114967s ago: executing program 5 (id=2780):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x53b, 0x70bd2b, 0x25dfdbfd, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x300, 0xfffffffd, 0x20000000}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x70}}, 0x8030)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e00"})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000021002101000000000000dc000a000000000000000000000008001a"], 0x24}}, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
ioctl$TCSETS(r4, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"})
write$binfmt_aout(r4, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff2e)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000580)={0x0, 0x0, 0x3, 0x0, 0x1b, "00000000000000000000ffff00"})
ioctl$TCSETS(r4, 0x5402, &(0x7f0000000080)={0x21, 0xfffffffd, 0x0, 0x2006, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"})
r5 = syz_open_pts(r4, 0x0)
r6 = dup3(r5, r4, 0x0)
read$FUSE(r6, &(0x7f000000a380)={0x2020}, 0x2020)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]})
close_range(r7, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x22f, &(0x7f0000000200)={0x0, 0xe652, 0x2, 0x3, 0x80000}, 0x0, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
getsockopt$netlink(r8, 0x10e, 0x9, &(0x7f0000000300)=""/209, &(0x7f0000000140)=0xd1)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)

12.614706238s ago: executing program 3 (id=2781):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10)
r2 = socket$inet(0x2, 0x801, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r2, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
shutdown(r2, 0x1)
sendto$inet(r0, 0x0, 0x0, 0x200007bd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)

11.417104394s ago: executing program 5 (id=2786):
syz_usb_connect(0x2, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9})
mmap(&(0x7f0000001000/0x4000)=nil, 0x403f, 0x4, 0x11, r3, 0x100000000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0xa0402, 0x0)
io_setup(0x1, &(0x7f0000002500))
eventfd2(0x6a, 0x80800)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="80000000100003", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r5, @ANYBLOB='\b\x00'], 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f00000001c0)=0xffffffff00000041, 0x8)
connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
syz_usb_connect(0x2, 0x55, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x19, 0x77, 0x8d, 0x40, 0x5ac, 0x1204, 0x76c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x43, 0x1, 0x4, 0xfc, 0x0, 0x0, [{{0x9, 0x4, 0x3, 0x2, 0x0, 0xe0, 0xec, 0xc, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x4, 0x2}, [@mixer_unit={0x5, 0x24, 0x4, 0x3, 0x3}, @selector_unit={0x6, 0x24, 0x5, 0x1, 0x5, "91"}]}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x89, 0x7, 0x1}, {0x6, 0x24, 0x1a, 0x0, 0xe}}]}}]}}]}}, 0x0)

11.377677533s ago: executing program 3 (id=2787):
syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x1000)=nil)
fcntl$lock(r2, 0x24, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x8})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
process_vm_readv(r3, 0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000001e80)=""/247, 0xf7}], 0x1, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000100)=@e={0xff, 0x9, 0x0, 0x0, @generic})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r5, &(0x7f0000000400)=""/4096, 0xc00)

9.095458752s ago: executing program 2 (id=2792):
socket$nl_generic(0x10, 0x3, 0x10)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x88842, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = mq_open(0x0, 0x40, 0x80, &(0x7f0000000300)={0xfffffffffffffffb, 0x4, 0x3ff, 0x2})
sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = syz_io_uring_setup(0x12c, &(0x7f0000000340)={0x0, 0x5cb1, 0x8, 0x1, 0xfffffffd, 0x0, r2}, &(0x7f0000000140), &(0x7f0000000280))
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000b80)={0x7, 0x0, 0x2008, 0x7, 'syz1\x00', 0x900005})
io_uring_enter(r3, 0x1e76, 0xf728, 0x5, 0x0, 0x0)
mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffa000/0x1000)=nil)
io_uring_register$IORING_REGISTER_IOWQ_AFF(r3, 0x11, &(0x7f0000000040)="732fbfdb019d7da37edad2e06a44164ecdaa2c0071e55d0f2412f7561e683df8bf", 0x21)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3020, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='ns\x00')
getdents64(r5, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/cgroup.procs\x00', 0x2, 0x128)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, 0x0, 0x0)

8.899521537s ago: executing program 3 (id=2793):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc1b}, 0x28)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0xe, 0x4, 0x4, 0x2, 0x1000, 0xf1, 0x0, 0x7fffffffffffb, 0x5, 0x0, 0x1, 0x0, 0x8, 0x0, 0xbde], 0x1000, 0x3c4210})
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r2], 0x20}, 0x1, 0x0, 0x0, 0x10000047}, 0x24000010)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
dup3(r5, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x3, 0x300)

8.42697606s ago: executing program 1 (id=2794):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc1b}, 0x28)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0xe, 0x4, 0x4, 0x2, 0x1000, 0xf1, 0x0, 0x7fffffffffffb, 0x5, 0x0, 0x1, 0x0, 0x8, 0x0, 0xbde], 0x1000, 0x3c4210})
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r2], 0x20}, 0x1, 0x0, 0x0, 0x10000047}, 0x24000010)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
dup3(r5, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x3, 0x300)

7.736589004s ago: executing program 4 (id=2795):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd)
ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000002140)={{<r2=>0x0, 0x8, 0x100000001, 0x35, 0xfffffffffffffffa, 0x2, 0x10000000000, 0x84, 0x3, 0x22, 0x7, 0x9, 0x7, 0x1, 0x4}})
read(r0, &(0x7f0000000040)=""/67, 0x43)
ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000001140)={{r2, 0x2, 0x1, 0x8, 0x6, 0x5, 0x3, 0x6, 0x8001, 0x80, 0x5, 0x945, 0x4c79, 0xa, 0x7ff}})

7.619465535s ago: executing program 5 (id=2796):
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x9, 0x0, 0x1, 0x4}, 0x50)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4)
bind$inet(r4, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f0000000340)=@tcp=r4}, 0x20)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r5, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x3, 0x0, 0x2}}, 0x2e)

7.552248512s ago: executing program 2 (id=2797):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10)
r2 = socket$inet(0x2, 0x801, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r2, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
shutdown(r2, 0x1)
sendto$inet(r0, 0x0, 0x0, 0x200007bd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)

7.418616149s ago: executing program 4 (id=2798):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
socket$kcm(0x29, 0x2, 0x0)
r3 = syz_io_uring_setup(0x90c, &(0x7f0000000480)={0x0, 0x3f1f, 0x4000, 0xfffffffc, 0x1a, 0x0, r2}, &(0x7f0000000740)=<r4=>0x0, &(0x7f00000001c0))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0)
r5 = syz_io_uring_setup(0x49b, &(0x7f0000000500)={0x0, 0x237c, 0x20000, 0x7, 0x28a, 0x0, r3}, &(0x7f00000000c0)=<r6=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x4, 0xb2, 0x0, 0x0, 0x5})
io_uring_enter(r5, 0x40f2, 0x4f7d, 0x8, 0x0, 0x0)
syz_io_uring_setup(0x73fa, 0x0, 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001000010800000000000000a600000000", @ANYRES32=0x0, @ANYBLOB="200100000084000004002b8008001b00000000"], 0x2c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_io_uring_setup(0x3a, &(0x7f0000000640)={0x0, 0xaddc, 0x10100, 0x0, 0x207}, &(0x7f0000000380)=<r9=>0x0, &(0x7f0000000000)=<r10=>0x0)
syz_io_uring_submit(r9, r10, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101})
io_uring_enter(r8, 0xd81, 0x3, 0x20, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f000000bf00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)="1b", 0x1}], 0x1}}], 0x1, 0x10081)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c0000002e00ddffffff05000bfa00"/28], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84)
r11 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_JOIN_FILTERS(r11, 0x65, 0x6, &(0x7f00000000c0), 0x4)

6.705171845s ago: executing program 3 (id=2799):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}}, 0x0)

6.589369694s ago: executing program 3 (id=2800):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (fail_nth: 6)
r4 = open(0x0, 0x400, 0x43)
rmdir(&(0x7f0000000140)='./file1\x00')
mkdirat(r4, &(0x7f0000000340)='./file0\x00', 0xf3)
chdir(&(0x7f0000000200)='./file0\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f00000008c0)={0xc0})

6.51105979s ago: executing program 2 (id=2801):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
syz_emit_ethernet(0x82, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xff55a000)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@newsa={0x118, 0x12, 0x713, 0x400, 0x0, {{@in=@multicast2, @in6=@private1, 0x0, 0x0, 0x0, 0xffff, 0x2, 0x0, 0x0, 0x2f}, {@in6=@remote, 0x800000}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffc}, {}, {}, 0x0, 0x0, 0x0, 0x3}, [@address_filter={0x28, 0x1a, {@in6=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa, 0x8, 0x84}}]}, 0x118}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000280))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000600), &(0x7f00000002c0)=0x60, 0x181800)
listen(r3, 0x10001)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="408a299b50d4409a7e472400", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
r7 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x2, 0x3e5, 0x0, r6}, &(0x7f0000000180)=<r8=>0x0, &(0x7f00000001c0)=<r9=>0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r5, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r7, 0x2ded, 0xef92, 0x0, 0x0, 0x0)
r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r11 = dup2(0xffffffffffffffff, r10)
readv(r11, &(0x7f0000001400)=[{&(0x7f0000000040)=""/81, 0x51}], 0x1)

6.490918528s ago: executing program 4 (id=2802):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080), 0x1)
sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto(r0, &(0x7f0000000300)='H', 0x19fff, 0x4000000, 0x0, 0x0)

6.478231688s ago: executing program 1 (id=2803):
r0 = socket(0x21, 0x2, 0x10000000000002)
connect$rxrpc(r0, 0x0, 0x0) (async)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='esdfs\x00', 0x0, &(0x7f0000000200)='usrquota') (async)
chdir(&(0x7f0000000080)='./file1\x00') (async)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0)
syz_emit_vhci(0x0, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0)
ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f0000000240)={0x7, 0x1, &(0x7f0000000100)=[0x1ff], &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000040), 0x2, 0x0)
write$cgroup_netprio_ifpriomap(r3, &(0x7f0000000200)=ANY=[@ANYBLOB='gretap0 8'], 0xa)
r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800)
recvmmsg(0xffffffffffffffff, &(0x7f0000007700), 0x318, 0xfc0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d00)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000ac0)={'filter\x00', 0x102, 0x4, 0x404, 0x0, 0x10c, 0x10c, 0x324, 0x324, 0x324, 0x4, 0x0, {[{{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @remote, @multicast1}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @multicast2, @empty, 0x9, 0xffffffff}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'batadv_slave_1\x00', 'ipvlan1\x00'}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e9fb760d26c0", @multicast1, @broadcast}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x450)
fanotify_init(0x0, 0x400)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async)
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000580)={0x8, 0x8, 0x6, 0x80, 0x9, "efa25ba54a99c5ea267ff8beae91ff741dab5d"}) (async)
r6 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000100100000a000200a5a6000000000000"], 0x18}, 0x0) (async)
socket(0x40000000015, 0x5, 0x0)

6.195499614s ago: executing program 1 (id=2804):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
getresuid(&(0x7f0000000340), &(0x7f0000000380)=<r1=>0x0, &(0x7f00000003c0)=<r2=>0x0)
mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=virtio,cache=readahead,uname=syz2\x00,cache=readahead,loose,mmap,access=any,cachetag=sched_switch\x00,fowner<', @ANYRESDEC=r1, @ANYBLOB="2c6f626a5f747970653d2827297b2c6673757569643d30393531336465392d356454332d323939662d386638662d37653733313665302c6f626a5f757365723d2c262715ea95b099934fc5560578cd0d2c666f776e65723d", @ANYRESDEC=r1, @ANYBLOB=',seclabel,uid=', @ANYRESDEC=r2, @ANYBLOB="2c7365636c6162656c2c7365636c6162656c0b00e011acaf745e1c198a280c147a4eafc044899e681e9b17170c98b41431d06d738a4411605710243ee0371a75e489405fc34c953cdf708647f07b6e3f488fd0277a78a87cf8f5f62a6f5cae4d41cc64defec2"])
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
socket$nl_route(0x10, 0x3, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0x6, 0x0, 0x0)
setresuid(0x0, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x2915024094f4014f, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xb8}}, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110c230000)

5.537264632s ago: executing program 2 (id=2805):
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000080)={'sit0\x00', 0x0})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRES32=r3, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r5], 0x24}}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33)
r6 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100))
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r9 = dup3(r8, r0, 0x80000)
r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r11 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r10, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000004a40)={0xc, 0x0, &(0x7f00000049c0)=[@free_buffer={0x40086303, r11}], 0x0, 0x0, 0x0})
r12 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r6, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0)
pwritev(r7, &(0x7f00000006c0)=[{&(0x7f0000001040)="758dd565e9fef1de38792c412039ad2fe6f275e7d67083c100a0c78b2d33d08c8327e51ce2580275d3257812d855666cae3fb6835245aaadda02d0aca338573b391379f8bc711fbe1193b1ee9a5ec17c34a650e8ce2e96e8c19a5e9fd2cad662b30def5128d735624e7d5d9dc17b92ff51a9988471bd6b60c374072266c15ba426e6e1834fb342515e5a441d02e1fac322efafb69a432de6d4c95925a4f3d5fe2267895c465041690194e3599c691edc68962fb2bf0f75ee01ca89b23a88273a00ddd5ea7f6515c1ecb012f5175fb66079cf0ed9d867e9a2681ed45fb44cf52559bed4d8fbfb01e0f08a7777cf1aaa67fa5e35b44ff7dc6159ddb3a2b7b22ac0cadba92e1e79ed50f534006c25b52834ac72eef52369268030bf524af8c455a124c38cd26d2a909028423837d8d777ca4254492dd63dd333948f10c29d9baa9a467d9c1b83d8b6d8e65e59f50d2867c37f5ca67978a58b81d086c7ddd7758f771e9874f92ab70caba0017b6634942121d3e142f0782eb640cfa3f0f7fe137566a77d11c4e660a9d46cfc5eb17d1ccd99e1c92a7c0c56efc1a8f0d94bbdffccbf38824824dc39761e6ff51da8a8a2f2ab39e7911665fa744037f4c06400c2f6a2738731fde1e871eedef70a3b3299c8d849684a6d58577dccd8543eb537019b5d0948163e07cc4778066562390f083e731ef012fcc7569206d7eb0e7c8775bf023c6e6fbfcec443a7bfc395dec9eab6adf226f10a5038bfbc070d59bc535df3aff54dd68eca3d08f3e9a2b63df94ac9a914e415e3c46ead08f37f75135e677e3e9fc740c480dc1cd08b88bbffc5148ff111a32f4bac77907372999b307c5a82dd5055c190786983c3fafcc7e81785a5756a937f4a6aae780d4b688ca8990521a448b8fe24487ba48a6548b5c94d647f23a55d016409910d84d63ca801e9d55706ac5bc2e6ee2b15015559df73a97f7b0066886a1752722138b9ce95f0727f04a6b92938b9ed9b5cc2bd949281e092c2484c0b0ba2bb4d493562e61971fc8d3eeebf2beb99209ba8dc271d71419731c5be4cb8ffb18135b21c425f8b072ce40661daa84d584c08c0939bba44abe5a55127996c202ecf43b244714976cf67f024b68bc711706f65f9ab6c1a03701b0abd6c7e0427aff5b3df7111bd026a89ef702268e8bd10dec64f9d936af6442e09ce789dd47b8fbb5c3e75ad3f2b72b1efd459ccbbd24dc49ac886a77305c1e6a48e2f503e4ae5fa9feab4824d47c0ad6c26ca39f666ec74fa3fa15083a0658010cf63f992e6d4621bae3919760a5364f7fec6a04279853dc069f4e32f32b62a5198d66253d53a8c79ade5871d37b7e839f69a99da8295ce5e1dc23a3434c98493a1d787fc19b1e8a4db2c65ae8c909455f969c55ecff2026421b531c097978dca2720b7eaa8f7f0105c51cd00682f4163f1fd4094dcdbeaf8542211600734a91f9040486cbeb252c049f7885b1f446ddb48c4afcb6901174031913b7c84a9692fc96e1ed53569c7ed32d200abd03a72b767c7b594422f7b3d2ce6d674f71172c7628e137ae5846771cd2688a1e67eb9ee0c0be70c934a53fe03fd39431ef45c679dc780bec522858457cf94002f591ed954847d27cd15220292d357388a400a76163aae4eda2b5b21033320c697feccfe4f6f2a395666b17eec3ac1d475cf67f3e90f6ad08e26fdce33dc8d7e60ae10ad2fe92c24e44da3103ca8e24f054e3c8eaf602d1825ec44476c692ac7ddcdcea638e9908521622c8d2e41741b77d9f414799fc7c6c2d9830fe9f7f2d9c2816ce4d1d47b79d196230511b1aaac7412afbd645786abac2e4d0b310df0a6507ab3aec54a698126ac4eaf83078c1bddffd7302395cfbb6d254f6075947855ed8136a71e889a096e560470ca59ef71ed676c3775b37fb446c4652e596f45617b24f679293d3760d3318c270568e1cd4ccc230b16a578073b638e06437546af1385e4811e288f912e34887f30c3ea97714b63dc45d289a4d7c2c80273a39159a314307b997f236c5eb8f2aabf969e170ac5079b77ec43a6c912c2eff49979ec4627bf3c4db6ca3c1d53c0c554da4f924046529fdc8028760adeec8dc4bff5290fb2bb6258e857940599e784e8bcedca2c5dde9e0a327c765a837edbc647b77e6edcd1f2da1ae1404cff99ed03cc272490ecd305bb332750b35d0fd0eb98cfe1635c4ba557fd3208417a8d6ace6b422470d50e54864c4683320f5129dce9b518ab7255d09ae9f39fae6f897015a65510ed7a4b5ec7d57242015e6661c1975a58a12ecb5d35b5485c8f30bdb9506acf4d95254386b972a9f61326f2d61f8dc40111baa86ccfc570e20952a3bf977ff1cb587cb4adf03dfdc4fbf622ba52306fbad2e302caa3fb67cbd453fff5e84a17896b16dc920aacfa08f0c62abfd147378595c4b314a65ef9d7f11c11c6ec2ddc97e0a38f5c03cd74905fa3d71795e8db7feb5e1fa62359a8f58b2ce17f611bf8806a1a29d29d073631bf61bbeab7098284c9f85c2e0d356bd3dc0b026a15871c2d4ed6d0ba0244ea706649cdcdc9904b87d2a09902eee7580c9e576d4c78cde7d4309febfb06851657f585c1f9d3f8331ff23f7c473e16d267e55f9c7f6b50042df1a086cf6f61b0b678317f726707801891595f1c32434f44d9246477136c43ce6a50eb2fb5bb61f48adc3ceec740111fc749d409d122f3d0a262d675ddaba9a100e9eacb019f81de0758b2195410d5df4c8f24d2368a476b1a0066ec1441a25c223e1b777d22afad8f398159642eac93ad618f05cf410dcd3a7dee2f28b3158451b9cfc9ba1f66343a7f22553b33ddef1cc525ad84925fa2c5e72308db7f7f4dca4e3a6579acfe7fb7542f5522f3749b949a95c251c17395eab20b7b8055208d4ad194d31a51dc34e69ffaf7038f7462550d121d71cd8108c3270e22a819238bcd253f7683165e62ea8ae5320b6ef7f787eb0244e35e191cf1dc09aab5c0c35f7cd1de8679bb8c2ceb633a62c723cf7309c39361ea51a1fcb6121f833f8f2b1004655e1a505a9403a1e9f54f10e24da72bb6f6432ce7c4a26f18470a5a096582f5d69e5a5517a526dff48cb25f92c3541356ba84b5f53e2f4e91c9c8c0aa20c25a97eeeca8a9cc48ca806128836e99438aed9b512dc67f3fde4df3d2c3337b42b8f1e84877793721f42c530dbdedb4263ff9259f8f2b017087de3fbad42dfe366cd17215eb81565a98e7a175384a3a5131cd19dd60e078d2d2b74a179f3a7ce0b2702d9f6e4bc9635c1572ddc3b8dbb652fde53b321428cd51f765e725e0275506e56a15ebe55de1ac9b3fa30a84990fe9eccb63cf2b0bea8ecc09474d03ef6211b0bea04b1a90d97dacc6c1b338458c58d9ffebbbe48e6938edcd50eae3511d49d97e95a6d5c2084584dfe9148a16feb19e674d02a866325b0f356d1df7b77e4717b1fdc8423eb92830111b038d2957c1711ddd71287e8b857b73f70263c0b5f49a262ae665abb761cd0331cf40c2b21cb9b4202ff7eda56c2ef87594c73d0494761c510d8ebb091c1a3bba13d553438c8dfaba6b6b49da83caa230b8668eb51029c5273f100908c93af793caa90c4bc590a4a99f32ed715affd4b5b7daa75d904c459600108e080c5410ae454cce29424176fce17c1904e14a449b90d83d2d6f22c79f5a9848634c744ca01b02d0431a2b93eea84b8822c8d0a31a238ad1645e24524510cdaac33fbe212c3ac29f83fda7730f61beb07b8b89274617d4c58f5decac193d9719740833e4d1e05f46a62b5cf7ef6328de862f54a687023715e323f114eb63610b51bd404141db15ef3f6a4a5b945be15e2f9531dac7dcc6eda6289ff79698fd5469eec0de3b1bd1d6ca7988fc107b886261c9805143c0fb51c6177ad4057bc3fb8e8f627e0857e26e69ba8bba4938d1312a21642496c4785849192ae750d1119129ce0f7c01c37cbaa20ccaae7a1c7d3f57999202b73dea6c66e3b37c4c526b7ab7f1bb275724511e324a2c9d725d7f506c55ff26d4e2c18e871b2b8aed76199d0e303458018844fe7c2694c157ca5b09d0418b2e21cd1a393d158d417e70ffa5210a6a46dc655edb02317702b22688a07d7a89d5c167b6a251f42a47e15b2b220c90fd66eafff28a188d4327de2e65656b6c6d1a0ab207b44d8c9572e3d5c1098a216ef8b00b9b46ffd0ef54e4166f4b9a1dc7878e45cb7701f028eaa6afecbbdcdc5bf38e002152457f288bb37b26678d57bc11c81f6cef20a4f71da2e53e90a8e5a86965cdd6f902657fc8d6ade2f6569dc4cf9cff0f60b5806b88828c778b595b337f2824edd01aba36075978509d17a542077f658332af3c32f495e0c735a0259dc3d2f8ff9d881f97d4ac443f11e7e6e931bc1f6155b3a8677dab0118896c8791ba3aaa36041b1415e5f658c0f321d8d365116716fa0ea6ecbb0067d364d20a391ff9cbda65ffcdb936e0b05d70ff21de1ffdb70cbb6c4f760d03c3b491acd18b381b0d35e0e5936a26285e752f0357d499f7c23c1ff93a55e2817777c9b1dfb80e360c824bcf791f831a2f5ee4d15bc5891c3adcffa423233465b1c1338a583ff4c251e44e74a863374c656067466504a20a62c5b1b0322b42c84b949b6fc03c8ef12865131a7c9ce781cac3c4c0fc8b306c9ce3ba1df47a6a2c38b834b396de05abb1ef4eca00db00e464eaa6208b35fa5bee1194f9b9b1cca057cdba8bd8837e22513c4eab373842701d4229fe2176e183cd49c6b403f49d506f3fcea14965f1889e8dcb0f3e62b1b67c3242abd0ac277fb2027f1d45fc65b607eae9c23055d5288d22b906d95467d87ea72bfe640df15de4374048b34a05884c2b1562bb4836444fd53e0698ede96b831321e6acf85f1bdd9cbcfc101e589d41fb836038afd6213cc1b9468efbacaddd80470b3d0edadc5046c0605cba9df319d480ee3ba1a1ef7a16df311c25d55aee513eae142e005b79f336439ef0459378876cf744cbefa2fdecde3ef35a0a702eb0ff07dddb4640f9dcb39fafee7fbc42d34ee62ff53c3b08e3e28b0c485e809b8353527a1e6d4b7629f03ff2ea82b0d01fc6837c7ec4fa7d41571321456547c6be5a1148e94c9d8e405cf2a355db28aeadea0fa78adbae5ac74c2c33cbca4a3366956b651901f198ff434b7bc6e53d2d078c9dde50d44b6d831c3a544d55dd07a4018e0538d43bacc0d2f538cde9479fb348519c28dfe95c81bf60e087f64ac75e12fb4bed0555a6a488e76e1598ea830c7fa87867320a52e1b7d011f614b15d351c5b349ec03d3836d05f3349fc1480425352445c07a5b6b6458d1a929a4e518ad4a1cc5b9f58fc35822fa72928980e7ffe10394d4a0e905ad9caaec518a308a78bc4ccddc3b2df1ce51894d6dc82e7f862dfc0eb1153c344ab2cbe3308ae1b26a5a9abb8117718088805ae40ae1041cf0eab916ee1be30c59e99a22a37e81037662c871f8826c02ef2893e630eb0dc612e1a4ed6db7403a15bd98e8ad6a6ec726ee79bd7f7789214e440a69df7020367192c4a6bc4b3e1e6c943277caa4928d42817d3d9abc25d017dd6eb20eeacabc130da12835a2677fa6c0a2e7b3d078ac9b269c77dabad332335c2547dd8668996ff5c603d75a3e371b4c64a1fcb151dc6b750549fe6e50cd2fffdcc77ac1c9b46f84db10ac64e60f13ca9b39a217bbbac40b75f36baecddf7fef8d8201ae77966ec90ea039fee2e3b3b1a1c9195abab3066ab09996827ab4d56e9e907625a9f8b08c474a2ffff74986373144083b9022e", 0x1000}, {&(0x7f0000000200)="9ac8629983a507e65b2722839b14e14b4da88b8df839a42b849a9c62807d23d991ca5ab267093d89e8bdaf707d2fabf876c186129e6de5e449d33c60dc690bf59517d551b6410bc70e47187a3a589ddcd713ff5c749ff089051e938656b9944ab7b63bdcd126bc2eaa2c7a69ef57a49697d32904b4149e1b5168b46a05d379c45e20e967d4ec0f5f0aa3ebb575d859f4a32c05748050688e1fc80ccd1e026475622f0da227bc308d2f5cf91ca96496a029eb5469290c534b2154b4c19dd5fd858645730f32e675779de2c12f04fddce03e20176d9d57df80cf6ae2458b61387def584593b722a930b57b18b82b", 0xed}, {&(0x7f0000000180)="3ca3bb08631d68e0fdb8bf90bce73c6235df", 0x12}, {&(0x7f0000000300)="f796bd105504fb558048fcf5407e18de11bf9a81aa78ac583ce13ceaa6a4c11027e1ce541ca91c6091b77023a05bb48b31b803a28bc657fb41fb88bb28a0a3f8b601bcc0", 0x44}, {&(0x7f0000000380)="c2bb29f707e8da19fde2ff3fd0bc633f1fe40455ee4e2b07e47a4e3138155f6295024b032c76e6017b6ac9e665923cb2cf1bdec31f", 0x35}, {&(0x7f00000003c0)}, {&(0x7f0000000440)="0229014516982021509fd3238bc2ad7a9a36b08f5e235c7330eb1cbe1a59c0f6068522cc74e64b4cd03a1510f46c6ae4ac387985cd44c0376f4ceb4855e6fff87339cdff75f277e781e0acbc6d7b3c15f0b4a4", 0x53}, {&(0x7f0000000500)="6ec55a8beb533aa35fab5c5836f37944e8c276f3923cb7487e6dc9fcca98de707c2d7ef921b08d0761eadf8c1a53068809994629833f2872eeab31df8c11b13c0ddf7eb6e11d7517d6e9dfb56823de98e827e4dcd9d4dffc2b447263ffc8d9830b9b51d94a4ba80b751abf66fc2b525fc0b59d88ba9d38066cca424079cee93862a9c3bf69825dbf05c95b66f340fe53012f51fd79dc244089a6d2cbd478e0e0b8dbdccd86284d0ab8f3b1a41502b9e17a135585a5d133c4dc229dd66662217fa316b6677524daccce7588e14f2acab7c0394b44ea7833ba4a4afc2419a8232e7b", 0xe1}, {&(0x7f0000000600)="76f2e21a28998ed8b3e37424e956cf4376effc6a851b49dcee3805486c3b46a2c913905a8b9c1f94a059e2633a6269869160d48b0ceecb256403127ba95d24a501356374780b9d26f5e64242061d56694d8ada995aad0b3441dcf1db868f1f8c9c93720fe8664813a1bb15af19ed1e9ecd4fbacdf656b94a98adaf40d066163d226c8c02a65bf9", 0x87}], 0x9, 0x745, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0)
ioctl$KVM_RUN(r12, 0xae80, 0x0)

4.471531143s ago: executing program 4 (id=2806):
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000580)={0x0, 0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000080)={0x0, r1, 0x0, 0x0, 0x4})
close(r0)

4.427546713s ago: executing program 3 (id=2807):
mount$nfs4(0x0, &(0x7f00000019c0)='.\x00', &(0x7f0000000000), 0x836494, &(0x7f0000001a80)=ANY=[@ANYBLOB='noac'])
r0 = fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000080)='-@\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0xb, 0x1})
r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$IOC_PR_REGISTER(r3, 0x401870c8, 0x0)
r4 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r4, &(0x7f000000a040)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000380)="ef", 0x1}], 0x1}}, {{&(0x7f0000000980)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000002140)="df", 0x1}], 0x1}}], 0x2, 0x40080)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r6=>0x0}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000140)={0x1ff, 0x200, 0x8, 0x4e, r6}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={r6, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e21, 0x6c3, @remote, 0x8}]}, &(0x7f00000002c0)=0x10)
pipe(&(0x7f0000000080)={<r7=>0xffffffffffffffff})
r8 = socket$inet_udp(0x2, 0x2, 0x0)
close(r8)
splice(r7, 0x0, r8, 0x0, 0x4ffe6, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e22, @broadcast}}, 0x0, 0x0, 0x17, 0x0, "acb79df9cccc937923b751dfd38959ffffffffffffffff068e196a49e2b750d45303000000528559e93c4d18b6cdf0e43d8102f2821a25d5ad7dd84511ad3e690163c800"}, 0xd8)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c)

4.393196835s ago: executing program 1 (id=2808):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4)
setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0)
syz_emit_vhci(0x0, 0x2a)
syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYBLOB="044815020003c80004000500c90007004000c80000040700d7170883a759ecc24cf2bbf024c8412a6bf10e2053319ea4e8660015a6679da2404d727e09dfedaf3144eeddae458057546cef0aa3ea561c82b63e74a2062a9861c26acd56a3d9b21af4fdef4b2978bd4124c1bf09b15e0625e57d4e9d7bbe3f89822df9698b61f1847b1d6d2ae2678463b9afff969ea59d684e94deeaaa0d19ac37bcd695c787f8"], 0x18)
syz_emit_ethernet(0x17c, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x2, 0x3}, 0x6)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
connect$llc(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
unshare(0x22020600)
r4 = syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace(0x8, r4)
wait4(0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

4.297828491s ago: executing program 4 (id=2809):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x80b42, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = fanotify_init(0x200, 0x80000)
r2 = dup(r0)
fanotify_mark(r1, 0x1, 0x48001059, r2, 0x0)
r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0xe5da, 0x100, 0x40000008, 0x193, 0x0, r2}, &(0x7f0000000140)=<r4=>0x0, &(0x7f0000000180)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
getpeername$qrtr(0xffffffffffffffff, 0x0, 0x0)
get_mempolicy(0x0, &(0x7f0000000100), 0x3, &(0x7f0000ffb000/0x4000)=nil, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
setrlimit(0x6, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x32)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000740)=""/4096, 0x1000}], 0x1}, 0x20002100)
r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8)
r9 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0)
getrlimit(0x7, &(0x7f0000000000))
ioctl$SOUND_MIXER_WRITE_VOLUME(r9, 0xc0040d07, &(0x7f0000000040)=0x121)

3.332380495s ago: executing program 1 (id=2810):
socket$kcm(0x15, 0x5, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc1b}, 0x28)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0xe, 0x4, 0x4, 0x2, 0x1000, 0xf1, 0x0, 0x7fffffffffffb, 0x5, 0x0, 0x1, 0x0, 0x5, 0x0, 0xbde], 0x1000, 0x3c4210})
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000090601000000090002007379"], 0x20}, 0x1, 0x0, 0x0, 0x10000047}, 0x24000010)

3.148996001s ago: executing program 2 (id=2811):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10)
r2 = socket$inet(0x2, 0x801, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r2, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
shutdown(r2, 0x1)
sendto$inet(r0, 0x0, 0x0, 0x200007bd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)

1.426378927s ago: executing program 1 (id=2812):
syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, r0, 0x5, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x401, 0x0, 0x1, 0xffffffffffffffff}}, 0x40)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x17}, 0x48)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r3=>0x0}, 0x8)
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r3, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r4, r2, 0x4, r2}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
r5 = getpgrp(0x0)
sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0)
r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8)
process_vm_readv(r7, &(0x7f0000001740)=[{&(0x7f0000000280)=""/71, 0x47}, {&(0x7f0000001540)=""/251, 0xfb}, {&(0x7f0000001640)=""/211, 0xd3}], 0x3, &(0x7f0000001840)=[{&(0x7f0000001e80)=""/247, 0xf7}, {&(0x7f0000001780)=""/154, 0x9a}], 0x2, 0x0)

183.660301ms ago: executing program 2 (id=2813):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)
mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10a00, &(0x7f0000000440)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@sq={'sq', 0x3d, 0xb}}]}})
madvise(&(0x7f0000c2a000/0x2000)=nil, 0x2000, 0x17)
r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800)
ioctl$SG_GET_VERSION_NUM(r4, 0x2284, &(0x7f0000000080))
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_GET_XSAVE(r5, 0x9000aea4, &(0x7f0000000480))
r6 = syz_open_dev$loop(&(0x7f0000000040), 0xff, 0x1)
ioctl$LOOP_SET_FD(r6, 0x4c00, r2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
accept4(r2, 0x0, &(0x7f0000000000), 0x80000)
r7 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f054071040403851099c300010902b901010000003f0904"], 0x0)
syz_usb_control_io(r7, 0x0, 0x0)
syz_usb_control_io$uac1(r7, 0x0, 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0)
syz_usb_control_io(r7, 0x0, 0x0)

0s ago: executing program 4 (id=2814):
socket$packet(0x11, 0x2, 0x300)
socket$inet(0x2, 0x2, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x1800, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x46)
socket$inet(0x2, 0x5, 0x7)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_IO_FLUSHER(0x39, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000500), &(0x7f0000000080)=0x8)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x4, 0xffffbe0000000001, 0x8, 0xffffffff}, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000180)=@fragment={0x2c, 0x0, 0x6, 0x1, 0x0, 0x16, 0x66}, 0x8)
sysinfo(&(0x7f00000015c0)=""/4096)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
socket(0x11, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x3f, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0)
socket$kcm(0x10, 0x100000000002, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x503, 0x2000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20a42}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_PRIMARY_RESELECT={0x5, 0xc, 0x2}, @IFLA_BOND_PRIMARY={0x8}]}}}]}, 0x4c}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x11, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010100, @local}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0)

kernel console output (not intermixed with test programs):

iptor too short (expected 28277, got 36)
[  797.067185][ T5925] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  797.142930][ T5925] usb 6-1: config 0 has no interfaces?
[  797.148619][ T5925] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  797.158440][ T5925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  797.190243][ T5925] usb 6-1: config 0 descriptor??
[  797.467717][T15582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2536'.
[  797.604314][T15584] FAULT_INJECTION: forcing a failure.
[  797.604314][T15584] name failslab, interval 1, probability 0, space 0, times 0
[  797.623923][T15584] CPU: 0 UID: 0 PID: 15584 Comm: syz.2.2537 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  797.623955][T15584] Tainted: [L]=SOFTLOCKUP
[  797.623961][T15584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  797.623971][T15584] Call Trace:
[  797.623978][T15584]  <TASK>
[  797.623985][T15584]  dump_stack_lvl+0x100/0x190
[  797.624016][T15584]  should_fail_ex.cold+0x5/0xa
[  797.624032][T15584]  should_failslab+0xc2/0x120
[  797.624051][T15584]  ? tomoyo_encode2+0xfb/0x3c0
[  797.624066][T15584]  __kmalloc_noprof+0xf6/0x9c0
[  797.624080][T15584]  ? tomoyo_realpath_from_path+0x19c/0x690
[  797.624100][T15584]  ? tomoyo_encode2+0xfb/0x3c0
[  797.624113][T15584]  tomoyo_encode2+0xfb/0x3c0
[  797.624131][T15584]  tomoyo_encode+0x29/0x50
[  797.624145][T15584]  tomoyo_mount_acl+0x388/0x8b0
[  797.624159][T15584]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  797.624185][T15584]  ? __pfx_tomoyo_mount_acl+0x10/0x10
[  797.624197][T15584]  ? unwind_get_return_address+0x59/0xa0
[  797.624238][T15584]  ? tomoyo_domain+0xb2/0x150
[  797.624254][T15584]  ? tomoyo_profile+0x47/0x60
[  797.624274][T15584]  tomoyo_mount_permission+0x214/0x460
[  797.624287][T15584]  ? tomoyo_mount_permission+0x1f6/0x460
[  797.624303][T15584]  ? __pfx_tomoyo_mount_permission+0x10/0x10
[  797.624329][T15584]  security_sb_mount+0xdd/0x270
[  797.624353][T15584]  path_mount+0x158/0x23c0
[  797.624373][T15584]  ? rcu_is_watching+0x12/0xc0
[  797.624393][T15584]  ? __pfx_path_mount+0x10/0x10
[  797.624412][T15584]  ? kmem_cache_free+0x143/0x720
[  797.624426][T15584]  ? strncpy_from_user+0x19d/0x2d0
[  797.624442][T15584]  ? putname+0xf5/0x1a0
[  797.624463][T15584]  ? putname+0xf5/0x1a0
[  797.624479][T15584]  ? putname+0xfa/0x1a0
[  797.624498][T15584]  ? __x64_sys_mount+0x293/0x310
[  797.624516][T15584]  __x64_sys_mount+0x293/0x310
[  797.624536][T15584]  ? __pfx___x64_sys_mount+0x10/0x10
[  797.624561][T15584]  do_syscall_64+0xc9/0xf80
[  797.624580][T15584]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  797.624595][T15584] RIP: 0033:0x7fe70199aeb9
[  797.624607][T15584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  797.624621][T15584] RSP: 002b:00007fe7028b1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  797.624636][T15584] RAX: ffffffffffffffda RBX: 00007fe701c15fa0 RCX: 00007fe70199aeb9
[  797.624646][T15584] RDX: 0000000000000000 RSI: 0000200000000ac0 RDI: 0000000000000000
[  797.624654][T15584] RBP: 00007fe7028b1090 R08: 0000000000000000 R09: 0000000000000000
[  797.624663][T15584] R10: 0000000000044000 R11: 0000000000000246 R12: 0000000000000001
[  797.624671][T15584] R13: 00007fe701c16038 R14: 00007fe701c15fa0 R15: 00007ffcb1b83318
[  797.624690][T15584]  </TASK>
[  798.061920][T15582] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  798.366047][T15587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2539'.
[  798.375051][T15587] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  798.419311][T15582] batman_adv: batadv0: Removing interface: batadv_slave_1
[  798.494686][T15589] 9p: Bad value for 'wfdno'
[  799.845999][   T24] usb 6-1: USB disconnect, device number 15
[  800.349684][T15611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2545'.
[  800.683203][   T24] usb 2-1: new full-speed USB device number 53 using dummy_hcd
[  800.969643][T15628] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2552'.
[  800.987342][T15631] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2550'.
[  800.998665][T15631] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  801.010193][T15632] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=15632 comm=syz.5.2551
[  801.028550][   T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  801.082069][T15628] netlink: 'syz.4.2552': attribute type 11 has an invalid length.
[  801.090423][T15628] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.2552'.
[  801.141176][   T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  801.165853][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  801.196587][   T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  801.231047][   T24] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  801.275960][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  801.381658][T15638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2553'.
[  801.410566][   T24] usb 2-1: Product: syz
[  801.516333][T15638] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2553'.
[  801.847062][   T24] usb 2-1: Manufacturer: syz
[  801.852514][   T30] audit: type=1400 audit(1769908054.802:857): avc:  denied  { connect } for  pid=15633 comm="syz.5.2554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  801.853107][   T24] usb 2-1: SerialNumber: syz
[  801.891055][T15638] netlink: 'syz.4.2553': attribute type 18 has an invalid length.
[  802.114969][   T24] usb 2-1: config 0 descriptor??
[  802.354062][   T24] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  802.362104][   T24] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  802.529989][   T30] audit: type=1400 audit(1769908055.765:858): avc:  denied  { ioctl } for  pid=15651 comm="syz.5.2556" path="socket:[66965]" dev="sockfs" ino=66965 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  803.004508][   T24] radio-si470x 2-1:0.0: software version 0, hardware version 0
[  803.012214][   T24] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0.
[  803.024545][   T24] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[  803.038737][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.045377][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.051976][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.058739][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.065344][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.072017][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.078631][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.085199][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.091787][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.098393][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.104973][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.111597][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.118206][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.124846][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.131500][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.138065][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.144767][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.151331][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.157963][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.164586][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.171180][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.177762][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.184335][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.190895][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.197472][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.204037][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.210666][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.217243][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.223810][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.230463][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.237044][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.243832][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.250405][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.256985][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.263568][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.270146][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.276728][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.283335][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.289939][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.296530][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.303094][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.309723][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.316346][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.322962][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.329566][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.336201][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.342811][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.349421][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.356056][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.362668][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.369283][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.375898][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.382476][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.389052][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.395605][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.402285][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.408846][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.415409][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.422002][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.428558][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.435109][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.441664][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.448209][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.454768][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.461323][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.467883][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.474526][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.481070][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.487682][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.494238][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.500800][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.507354][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.514087][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.520645][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.527209][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.533754][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.540299][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.546866][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.553411][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.559962][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.566505][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.573072][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.579631][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.586173][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.592719][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.599261][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.605809][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.612375][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.618921][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.625483][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.632028][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.638571][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.645121][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.651664][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.658343][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.664899][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.671445][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.677999][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.684541][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.691090][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.697647][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.704188][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.710735][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.717284][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.723839][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.730395][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.736942][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.743682][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.750269][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.756826][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.763379][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.769933][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.776492][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.783040][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.789580][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.796126][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.802667][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.809216][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.815783][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.822329][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.828875][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.835467][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.842023][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.848567][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.855109][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.861657][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.868207][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.874755][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.881308][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.887849][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.894405][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.900956][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.907503][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.914088][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.920661][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.927300][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.933876][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.940434][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.946997][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.953552][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.960119][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.966686][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.973241][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.979803][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.986383][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  803.993191][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  804.000204][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  804.006818][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  804.013381][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  804.020080][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  804.026594][   T24] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -110
[  804.035098][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  804.042532][    C1] radio-si470x 2-1:0.0: non-zero urb status (-71)
[  804.050552][   T24] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22
[  804.085245][T15620] syz.2.2548 (15620): drop_caches: 2
[  804.379607][   T24] usb 2-1: USB disconnect, device number 53
[  804.496107][   T30] audit: type=1400 audit(1769908057.599:859): avc:  denied  { create } for  pid=15666 comm="syz.4.2562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  804.534259][   T30] audit: type=1400 audit(1769908057.636:860): avc:  denied  { write } for  pid=15666 comm="syz.4.2562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  804.659694][T15680] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2564'.
[  804.744475][T15682] netlink: 'syz.4.2564': attribute type 11 has an invalid length.
[  804.752410][T15682] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.2564'.
[  806.185440][   T30] audit: type=1400 audit(1769908059.180:861): avc:  denied  { connect } for  pid=15696 comm="syz.1.2568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  806.239145][T15698] FAULT_INJECTION: forcing a failure.
[  806.239145][T15698] name failslab, interval 1, probability 0, space 0, times 0
[  806.252073][T15698] CPU: 0 UID: 0 PID: 15698 Comm: syz.1.2568 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  806.252091][T15698] Tainted: [L]=SOFTLOCKUP
[  806.252095][T15698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  806.252102][T15698] Call Trace:
[  806.252106][T15698]  <TASK>
[  806.252111][T15698]  dump_stack_lvl+0x100/0x190
[  806.252129][T15698]  should_fail_ex.cold+0x5/0xa
[  806.252142][T15698]  should_failslab+0xc2/0x120
[  806.252157][T15698]  __kmalloc_node_track_caller_noprof+0xf9/0x9d0
[  806.252171][T15698]  ? sidtab_sid2str_get+0x17a/0x670
[  806.252187][T15698]  ? kmemdup_noprof+0x29/0x60
[  806.252200][T15698]  kmemdup_noprof+0x29/0x60
[  806.252213][T15698]  sidtab_sid2str_get+0x17a/0x670
[  806.252227][T15698]  security_sid_to_context_core+0x35a/0x6d0
[  806.252239][T15698]  ? avc_audit_post_callback+0x115/0x8b0
[  806.252260][T15698]  avc_audit_post_callback+0x1aa/0x8b0
[  806.252275][T15698]  ? __pfx_avc_audit_post_callback+0x10/0x10
[  806.252288][T15698]  ? skb_put+0x138/0x180
[  806.252299][T15698]  ? audit_log_n_string+0x256/0x550
[  806.252317][T15698]  ? __pfx_avc_audit_post_callback+0x10/0x10
[  806.252330][T15698]  common_lsm_audit+0x23f/0x2b0
[  806.252342][T15698]  ? __pfx_common_lsm_audit+0x10/0x10
[  806.252354][T15698]  ? lockdep_hardirqs_on+0x78/0x100
[  806.252366][T15698]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  806.252379][T15698]  slow_avc_audit+0x186/0x210
[  806.252394][T15698]  ? __pfx_slow_avc_audit+0x10/0x10
[  806.252409][T15698]  ? avc_denied+0x14a/0x190
[  806.252439][T15698]  ? avc_has_perm_noaudit+0x2fc/0x3b0
[  806.252456][T15698]  avc_has_perm+0x1a6/0x1e0
[  806.252472][T15698]  ? __pfx_avc_has_perm+0x10/0x10
[  806.252491][T15698]  sock_has_perm+0x251/0x2f0
[  806.252507][T15698]  ? __pfx_sock_has_perm+0x10/0x10
[  806.252525][T15698]  ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10
[  806.252541][T15698]  ? __fget_files+0x21f/0x3d0
[  806.252556][T15698]  security_socket_sendmsg+0xd3/0x230
[  806.252574][T15698]  __sys_sendto+0x28c/0x520
[  806.252588][T15698]  ? __pfx___sys_sendto+0x10/0x10
[  806.252612][T15698]  ? ksys_write+0x1ac/0x250
[  806.252624][T15698]  ? __pfx_ksys_write+0x10/0x10
[  806.252637][T15698]  __x64_sys_sendto+0xe0/0x1c0
[  806.252650][T15698]  ? do_syscall_64+0x94/0xf80
[  806.252661][T15698]  ? lockdep_hardirqs_on+0x78/0x100
[  806.252673][T15698]  do_syscall_64+0xc9/0xf80
[  806.252687][T15698]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  806.252699][T15698] RIP: 0033:0x7f428979aeb9
[  806.252709][T15698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  806.252720][T15698] RSP: 002b:00007f428a5c9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  806.252730][T15698] RAX: ffffffffffffffda RBX: 00007f4289a16090 RCX: 00007f428979aeb9
[  806.252737][T15698] RDX: 00000000ffffffe4 RSI: 0000200000000040 RDI: 0000000000000006
[  806.252744][T15698] RBP: 00007f428a5c9090 R08: 0000000000000000 R09: 0000000000000000
[  806.252750][T15698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  806.252756][T15698] R13: 00007f4289a16128 R14: 00007f4289a16090 R15: 00007fffa77d8508
[  806.252769][T15698]  </TASK>
[  806.253191][   T30] audit: type=1400 audit(1769908059.236:862): avc:  denied  { write } for  pid=15696 comm="syz.1.2568" scontext=root:sysadm_r:sysadm_t tsid=148 tclass=smc_socket permissive=1
[  806.577942][    T9] usb 5-1: new full-speed USB device number 75 using dummy_hcd
[  806.687669][T15700] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=15700 comm=syz.5.2569
[  806.822710][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  806.848553][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  807.321098][    T9] usb 5-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00
[  807.331322][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  807.429892][    T9] usb 5-1: config 0 descriptor??
[  808.075969][T15711] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15711 comm=syz.2.2572
[  808.197326][    T9] dragonrise 0003:0079:0011.000A: unknown main item tag 0x0
[  808.205070][    T9] dragonrise 0003:0079:0011.000A: unknown main item tag 0x0
[  808.278408][    T9] dragonrise 0003:0079:0011.000A: unknown main item tag 0x0
[  808.305692][    T9] dragonrise 0003:0079:0011.000A: unknown main item tag 0x0
[  808.336036][    T9] dragonrise 0003:0079:0011.000A: unknown main item tag 0x0
[  808.343373][    T9] dragonrise 0003:0079:0011.000A: unknown main item tag 0x0
[  808.370136][    T9] dragonrise 0003:0079:0011.000A: unknown main item tag 0x0
[  808.391716][    T9] dragonrise 0003:0079:0011.000A: hidraw0: USB HID v1.ff Device [HID 0079:0011] on usb-dummy_hcd.4-1/input0
[  808.432247][    T9] usb 5-1: USB disconnect, device number 75
[  808.708831][T15721] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2575'.
[  808.778715][   T30] audit: type=1400 audit(1769908061.350:863): avc:  denied  { read } for  pid=15715 comm="syz.1.2574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  808.937971][   T30] audit: type=1400 audit(1769908061.368:864): avc:  denied  { read write } for  pid=15715 comm="syz.1.2574" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  808.962166][   T30] audit: type=1400 audit(1769908061.368:865): avc:  denied  { open } for  pid=15715 comm="syz.1.2574" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  808.994011][T15722] netlink: 'syz.3.2575': attribute type 11 has an invalid length.
[  809.002093][T15722] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.2575'.
[  809.159302][ T5925] usb 3-1: new full-speed USB device number 62 using dummy_hcd
[  809.307841][T15717] fido_id[15717]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  809.363700][ T5925] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  809.401592][ T5925] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  809.433393][T15728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  809.436112][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  809.462471][T15728] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  809.464500][ T5925] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  809.486437][T15725] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2577'.
[  809.491558][ T5925] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  809.501092][   T30] audit: type=1400 audit(1769908062.285:866): avc:  denied  { mount } for  pid=15724 comm="syz.4.2577" name="/" dev="hugetlbfs" ino=67230 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  809.518136][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  809.529906][T15725] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  809.587344][ T5925] usb 3-1: Product: syz
[  809.591949][ T5925] usb 3-1: Manufacturer: syz
[  809.921780][ T5916] usb 5-1: new low-speed USB device number 76 using dummy_hcd
[  809.933219][ T5925] usb 3-1: SerialNumber: syz
[  809.954528][ T5925] usb 3-1: config 0 descriptor??
[  810.201451][ T5925] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  810.208302][ T5925] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  810.555083][ T5925] radio-si470x 3-1:0.0: software version 0, hardware version 0
[  810.628159][ T5925] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0.
[  810.673282][ T5925] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[  810.689318][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  810.695942][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  810.702545][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  810.709170][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  810.715798][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  810.722475][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  810.729085][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  810.735701][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  810.742302][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  810.748887][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  810.755761][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  810.762740][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  810.769333][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  810.776085][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  810.782685][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  810.789691][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  810.796696][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  810.803495][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  810.810446][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  810.817501][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  810.824186][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  810.830906][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  810.837693][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  810.844419][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  810.851017][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  810.857584][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  810.864198][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  810.870783][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  810.877437][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  810.884025][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  810.890675][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  810.897258][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  810.903860][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  810.910431][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  810.917237][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  810.924078][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  810.930782][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  810.937547][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  810.944248][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  810.951188][ T5925] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71
[  810.951272][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  810.951865][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  810.952185][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  810.952505][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  810.952792][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  810.953067][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  810.953360][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  810.961739][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  810.968252][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  810.974738][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  810.981320][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  810.987860][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  810.994362][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.000905][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.014372][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.021361][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.028332][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.035355][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.042112][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.055188][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.061855][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.075117][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.088233][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.095222][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.108647][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.115325][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.128564][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.141611][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.148297][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.155037][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.161648][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.168230][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.174844][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.181437][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.188009][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.194642][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.201259][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.207820][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.214368][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.220913][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.227456][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.233999][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.240543][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.247103][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.253650][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.260402][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.266980][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.273537][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.280090][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.286665][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.293259][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.299815][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.306365][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.312915][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.319463][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.326014][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.332563][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.339113][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.345663][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.352217][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.358764][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.365311][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.371857][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.378411][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.384967][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.391515][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.398088][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.404646][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.411192][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.417754][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.424297][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.430855][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.437435][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.444002][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.450551][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.457095][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.463637][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.470181][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.476722][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.483266][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.489826][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.496374][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.502918][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.509464][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.516012][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.522559][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.529114][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.535658][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.542204][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.548753][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.555297][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.561851][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.568393][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.574938][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.581501][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.588045][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.594602][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.601161][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.607708][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.614253][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.620795][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.627347][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.633934][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.640526][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.647073][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.653640][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.660184][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.666748][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.673298][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.679853][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.686396][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.693097][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.699645][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.706196][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.712744][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.719295][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.725840][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.732400][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.739225][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.745807][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.752376][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.759074][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.765650][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.772206][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.778754][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.785298][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.791845][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.798387][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.804946][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.811502][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.818098][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.824642][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.831196][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.837748][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.844368][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.850916][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.857472][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.864041][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.870589][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.877148][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.883689][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.890232][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.896773][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.903316][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.909864][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.916414][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.922985][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.929566][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.936195][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.942775][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.949365][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.955951][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.962548][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  811.969409][ T5925] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22
[  812.072564][T15752] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2583'.
[  812.081511][T15752] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  812.170453][ T5925] usb 3-1: USB disconnect, device number 62
[  812.514392][T15756] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2584'.
[  813.462812][   T30] audit: type=1400 audit(1769908065.989:867): avc:  denied  { bind } for  pid=15765 comm="syz.1.2587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  813.499939][    T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  813.809604][    T9] usb 6-1: config 0 interface 0 has no altsetting 0
[  813.816934][    T9] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  813.827926][T15772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2589'.
[  813.909931][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  814.088012][    T9] usb 6-1: config 0 descriptor??
[  814.179081][   T30] audit: type=1400 audit(1769908066.663:868): avc:  denied  { create } for  pid=15765 comm="syz.1.2587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1
[  814.870333][   T30] audit: type=1400 audit(1769908067.317:869): avc:  denied  { listen } for  pid=15780 comm="syz.3.2591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  815.119749][T15761] fuse: Bad value for 'fd'
[  815.373280][    T9] radio-keene 6-1:0.0: V4L2 device registered as radio48
[  815.402432][ T5916] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  815.584646][ T5916] usb 2-1: device descriptor read/64, error -71
[  815.724533][    T9] usb 6-1: USB disconnect, device number 16
[  816.335349][ T5916] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  816.549127][ T5916] usb 2-1: device descriptor read/64, error -71
[  816.631383][T15806] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2598'.
[  816.664995][ T5916] usb usb2-port1: attempt power cycle
[  817.048832][ T5916] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  817.593245][ T5916] usb 2-1: device descriptor read/8, error -71
[  817.719157][   T30] audit: type=1400 audit(1769908069.974:870): avc:  denied  { setopt } for  pid=15809 comm="syz.5.2601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  817.882804][ T5916] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  817.965024][ T5916] usb 2-1: device descriptor read/8, error -71
[  818.107356][ T5916] usb usb2-port1: unable to enumerate USB device
[  818.215429][ T5925] usb 6-1: new full-speed USB device number 17 using dummy_hcd
[  818.564223][   T30] audit: type=1400 audit(1769908070.760:871): avc:  denied  { read write } for  pid=15828 comm="syz.1.2607" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  818.595787][T15829] binder: Bad value for 'max'
[  818.616462][   T30] audit: type=1400 audit(1769908070.797:872): avc:  denied  { open } for  pid=15828 comm="syz.1.2607" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  818.746455][ T5925] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  818.844480][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  818.854172][ T5925] usb 6-1: Product: syz
[  818.858722][ T5925] usb 6-1: Manufacturer: syz
[  818.863320][ T5925] usb 6-1: SerialNumber: syz
[  819.359349][ T5925] usb 6-1: config 0 descriptor??
[  819.380172][   T30] audit: type=1400 audit(1769908070.797:873): avc:  denied  { mounton } for  pid=15828 comm="syz.1.2607" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  819.599977][ T5925] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  819.824364][T15823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  819.848875][T15823] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  820.497921][T15848] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2612'.
[  820.822801][ T5854] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[  820.836023][T15852] bridge0: port 3(veth0_to_bridge) entered blocking state
[  820.866220][T15852] bridge0: port 3(veth0_to_bridge) entered disabled state
[  820.884975][T15852] veth0_to_bridge: entered allmulticast mode
[  821.015082][ T5854] usb 3-1: Using ep0 maxpacket: 32
[  821.059056][T15852] veth0_to_bridge: entered promiscuous mode
[  821.065102][T15852] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  821.091933][ T5854] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[  821.111341][ T5854] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  821.112564][T15852] bridge0: port 3(veth0_to_bridge) entered blocking state
[  821.129834][T15852] bridge0: port 3(veth0_to_bridge) entered forwarding state
[  821.133915][ T5854] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  821.185874][ T5854] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0
[  821.226239][ T5854] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  821.270527][ T5854] usb 3-1: config 0 interface 0 has no altsetting 0
[  821.289983][ T5854] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  821.299777][ T5854] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  821.311442][ T5854] usb 3-1: Product: syz
[  821.317539][ T5854] usb 3-1: Manufacturer: syz
[  821.322233][ T5854] usb 3-1: SerialNumber: syz
[  821.337344][ T5854] usb 3-1: config 0 descriptor??
[  821.350994][ T5854] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  821.362346][ T5854] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  821.517520][ T5854] usb 4-1: new high-speed USB device number 80 using dummy_hcd
[  821.563481][T15854] FAULT_INJECTION: forcing a failure.
[  821.563481][T15854] name failslab, interval 1, probability 0, space 0, times 0
[  821.576438][T15854] CPU: 1 UID: 0 PID: 15854 Comm: syz.2.2613 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  821.576468][T15854] Tainted: [L]=SOFTLOCKUP
[  821.576474][T15854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  821.576487][T15854] Call Trace:
[  821.576493][T15854]  <TASK>
[  821.576499][T15854]  dump_stack_lvl+0x100/0x190
[  821.576527][T15854]  should_fail_ex.cold+0x5/0xa
[  821.576547][T15854]  should_failslab+0xc2/0x120
[  821.576569][T15854]  ? tomoyo_encode2+0xfb/0x3c0
[  821.576587][T15854]  __kmalloc_noprof+0xf6/0x9c0
[  821.576612][T15854]  ? tomoyo_encode2+0xfb/0x3c0
[  821.576629][T15854]  tomoyo_encode2+0xfb/0x3c0
[  821.576653][T15854]  tomoyo_encode+0x29/0x50
[  821.576672][T15854]  tomoyo_realpath_from_path+0x18c/0x690
[  821.576699][T15854]  tomoyo_check_open_permission+0x2af/0x3c0
[  821.576728][T15854]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  821.576782][T15854]  ? do_raw_spin_lock+0x128/0x260
[  821.576805][T15854]  ? path_get+0x61/0x80
[  821.576833][T15854]  tomoyo_file_open+0x6b/0x90
[  821.576858][T15854]  security_file_open+0xb5/0x1e0
[  821.576879][T15854]  do_dentry_open+0x58c/0x1570
[  821.576902][T15854]  ? security_inode_permission+0xbf/0x250
[  821.576926][T15854]  vfs_open+0x82/0x3f0
[  821.576954][T15854]  path_openat+0x21dc/0x3120
[  821.576985][T15854]  ? __pfx_path_openat+0x10/0x10
[  821.577017][T15854]  do_filp_open+0x1f7/0x420
[  821.577041][T15854]  ? __pfx_do_filp_open+0x10/0x10
[  821.577081][T15854]  ? _raw_spin_unlock+0x28/0x50
[  821.577097][T15854]  ? alloc_fd+0x476/0x790
[  821.577125][T15854]  do_sys_openat2+0x12e/0x220
[  821.577150][T15854]  ? __pfx_do_sys_openat2+0x10/0x10
[  821.577174][T15854]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  821.577196][T15854]  ? __fget_files+0x21f/0x3d0
[  821.577222][T15854]  __x64_sys_openat+0x12d/0x210
[  821.577248][T15854]  ? __pfx___x64_sys_openat+0x10/0x10
[  821.577272][T15854]  ? ksys_write+0x1ac/0x250
[  821.577301][T15854]  do_syscall_64+0xc9/0xf80
[  821.577322][T15854]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  821.577341][T15854] RIP: 0033:0x7fe70195b78e
[  821.577357][T15854] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  821.577373][T15854] RSP: 002b:00007fe7028b0b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  821.577390][T15854] RAX: ffffffffffffffda RBX: 00007fe7028b16c0 RCX: 00007fe70195b78e
[  821.577400][T15854] RDX: 0000000000000002 RSI: 00007fe7028b0c00 RDI: ffffffffffffff9c
[  821.577411][T15854] RBP: 00007fe7028b1090 R08: 0000000000000000 R09: 0000000000000000
[  821.577420][T15854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  821.577434][T15854] R13: 00007fe701c16038 R14: 00007fe701c15fa0 R15: 00007ffcb1b83318
[  821.577459][T15854]  </TASK>
[  821.577557][T15854] ERROR: Out of memory at tomoyo_realpath_from_path.
[  821.905196][T15854] ldusb 3-1:0.0: Couldn't submit interrupt_in_urb -90
[  821.917026][   T43] usb 3-1: USB disconnect, device number 63
[  821.925539][   T43] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[  821.937159][ T5854] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  821.953299][ T5854] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  821.995926][ T5854] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  822.006178][ T5854] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  822.018695][ T5854] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  822.035121][ T5854] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  822.044253][ T5854] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  822.052538][ T5854] usb 4-1: Product: syz
[  822.056786][ T5854] usb 4-1: Manufacturer: syz
[  822.207739][ T5854] cdc_wdm 4-1:1.0: skipping garbage
[  822.242917][ T5854] cdc_wdm 4-1:1.0: skipping garbage
[  822.330406][ T5854] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  822.414932][T15870] FAULT_INJECTION: forcing a failure.
[  822.414932][T15870] name failslab, interval 1, probability 0, space 0, times 0
[  822.429728][T15870] CPU: 0 UID: 0 PID: 15870 Comm: syz.4.2618 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  822.429758][T15870] Tainted: [L]=SOFTLOCKUP
[  822.429764][T15870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  822.429774][T15870] Call Trace:
[  822.429780][T15870]  <TASK>
[  822.429787][T15870]  dump_stack_lvl+0x100/0x190
[  822.429813][T15870]  should_fail_ex.cold+0x5/0xa
[  822.429831][T15870]  should_failslab+0xc2/0x120
[  822.429853][T15870]  kmem_cache_alloc_noprof+0x83/0x780
[  822.429874][T15870]  ? ovs_flow_alloc+0x1e/0x210
[  822.429902][T15870]  ? ovs_flow_alloc+0x1e/0x210
[  822.429925][T15870]  ovs_flow_alloc+0x1e/0x210
[  822.429950][T15870]  ovs_flow_cmd_new+0x231/0xd50
[  822.429971][T15870]  ? __kasan_kmalloc+0xaa/0xb0
[  822.429988][T15870]  ? __kmalloc_noprof+0x347/0x9c0
[  822.430004][T15870]  ? __pfx_ovs_flow_cmd_new+0x10/0x10
[  822.430019][T15870]  ? netlink_rcv_skb+0x159/0x420
[  822.430045][T15870]  ? netlink_unicast+0x5aa/0x870
[  822.430068][T15870]  ? netlink_sendmsg+0x8b0/0xda0
[  822.430090][T15870]  ? ____sys_sendmsg+0xa54/0xc30
[  822.430108][T15870]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  822.430168][T15870]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x290
[  822.430187][T15870]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1b4/0x290
[  822.430210][T15870]  genl_family_rcv_msg_doit+0x214/0x300
[  822.430230][T15870]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  822.430254][T15870]  ? bpf_lsm_capable+0x9/0x10
[  822.430277][T15870]  ? security_capable+0x80/0x260
[  822.430302][T15870]  ? ns_capable+0xd2/0xf0
[  822.430327][T15870]  genl_rcv_msg+0x560/0x800
[  822.430348][T15870]  ? __pfx_genl_rcv_msg+0x10/0x10
[  822.430365][T15870]  ? __pfx_ovs_flow_cmd_new+0x10/0x10
[  822.430385][T15870]  ? __lock_acquire+0x4a5/0x2630
[  822.430407][T15870]  netlink_rcv_skb+0x159/0x420
[  822.430432][T15870]  ? __pfx_genl_rcv_msg+0x10/0x10
[  822.430448][T15870]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  822.430487][T15870]  ? netlink_deliver_tap+0x1ae/0xcc0
[  822.430514][T15870]  genl_rcv+0x28/0x40
[  822.430539][T15870]  netlink_unicast+0x5aa/0x870
[  822.430566][T15870]  ? __pfx_netlink_unicast+0x10/0x10
[  822.430598][T15870]  netlink_sendmsg+0x8b0/0xda0
[  822.430624][T15870]  ? __pfx_netlink_sendmsg+0x10/0x10
[  822.430646][T15870]  ? PageHuge+0x180/0x180
[  822.430672][T15870]  ____sys_sendmsg+0xa54/0xc30
[  822.430690][T15870]  ? __pfx_____sys_sendmsg+0x10/0x10
[  822.430718][T15870]  ___sys_sendmsg+0x190/0x1e0
[  822.430736][T15870]  ? __pfx____sys_sendmsg+0x10/0x10
[  822.430766][T15870]  ? find_held_lock+0x2b/0x80
[  822.430807][T15870]  __sys_sendmsg+0x170/0x220
[  822.430831][T15870]  ? __pfx___sys_sendmsg+0x10/0x10
[  822.430868][T15870]  do_syscall_64+0xc9/0xf80
[  822.430890][T15870]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  822.430906][T15870] RIP: 0033:0x7f1f1a79aeb9
[  822.430921][T15870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  822.430938][T15870] RSP: 002b:00007f1f1b6e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  822.430955][T15870] RAX: ffffffffffffffda RBX: 00007f1f1aa15fa0 RCX: 00007f1f1a79aeb9
[  822.430967][T15870] RDX: 0000000004008094 RSI: 0000200000000100 RDI: 0000000000000003
[  822.430978][T15870] RBP: 00007f1f1b6e3090 R08: 0000000000000000 R09: 0000000000000000
[  822.430988][T15870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  822.430998][T15870] R13: 00007f1f1aa16038 R14: 00007f1f1aa15fa0 R15: 00007ffcc280c018
[  822.431022][T15870]  </TASK>
[  822.432058][ T5854] cdc_wdm 4-1:1.0: Unknown control protocol
[  822.979369][T15872] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2619'.
[  823.140434][ T5925] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  823.397813][ T5925] usb 6-1: USB disconnect, device number 17
[  823.491130][T15881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2622'.
[  823.611571][T15885] FAULT_INJECTION: forcing a failure.
[  823.611571][T15885] name failslab, interval 1, probability 0, space 0, times 0
[  823.624559][T15885] CPU: 1 UID: 0 PID: 15885 Comm: syz.5.2624 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  823.624589][T15885] Tainted: [L]=SOFTLOCKUP
[  823.624596][T15885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  823.624607][T15885] Call Trace:
[  823.624614][T15885]  <TASK>
[  823.624621][T15885]  dump_stack_lvl+0x100/0x190
[  823.624651][T15885]  should_fail_ex.cold+0x5/0xa
[  823.624672][T15885]  should_failslab+0xc2/0x120
[  823.624697][T15885]  kmem_cache_alloc_noprof+0x83/0x780
[  823.624719][T15885]  ? lock_acquire+0x17c/0x330
[  823.624736][T15885]  ? skb_clone+0x190/0x400
[  823.624765][T15885]  ? skb_clone+0x190/0x400
[  823.624786][T15885]  skb_clone+0x190/0x400
[  823.624812][T15885]  dev_queue_xmit_nit+0x255/0xa60
[  823.624844][T15885]  dev_hard_start_xmit+0x2fb/0x6c0
[  823.624869][T15885]  __dev_queue_xmit+0x6dd/0x46f0
[  823.624897][T15885]  ? __pfx___dev_queue_xmit+0x10/0x10
[  823.624940][T15885]  ? __skb_clone+0x570/0x760
[  823.624968][T15885]  netlink_deliver_tap+0xa4d/0xcc0
[  823.624999][T15885]  netlink_unicast+0x650/0x870
[  823.625028][T15885]  ? __pfx_netlink_unicast+0x10/0x10
[  823.625062][T15885]  netlink_sendmsg+0x8b0/0xda0
[  823.625093][T15885]  ? __pfx_netlink_sendmsg+0x10/0x10
[  823.625117][T15885]  ? PageHuge+0x180/0x180
[  823.625145][T15885]  ____sys_sendmsg+0xa54/0xc30
[  823.625165][T15885]  ? __pfx_____sys_sendmsg+0x10/0x10
[  823.625195][T15885]  ___sys_sendmsg+0x190/0x1e0
[  823.625216][T15885]  ? __pfx____sys_sendmsg+0x10/0x10
[  823.625247][T15885]  ? find_held_lock+0x2b/0x80
[  823.625288][T15885]  __sys_sendmsg+0x170/0x220
[  823.625312][T15885]  ? __pfx___sys_sendmsg+0x10/0x10
[  823.625353][T15885]  do_syscall_64+0xc9/0xf80
[  823.625376][T15885]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  823.625412][T15885] RIP: 0033:0x7f3b32d9aeb9
[  823.625428][T15885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  823.625446][T15885] RSP: 002b:00007f3b33c27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  823.625463][T15885] RAX: ffffffffffffffda RBX: 00007f3b33015fa0 RCX: 00007f3b32d9aeb9
[  823.625476][T15885] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 000000000000001b
[  823.625486][T15885] RBP: 00007f3b33c27090 R08: 0000000000000000 R09: 0000000000000000
[  823.625497][T15885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  823.625508][T15885] R13: 00007f3b33016038 R14: 00007f3b33015fa0 R15: 00007ffef90a3c68
[  823.625534][T15885]  </TASK>
[  823.629750][ T5854] usb 4-1: USB disconnect, device number 80
[  823.884020][T15891] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=15891 comm=syz.1.2625
[  824.132385][T15895] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2627'.
[  825.547468][T15908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2629'.
[  825.722016][T15911] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  826.210647][ T5854] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[  826.448584][ T5854] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  826.457458][ T5854] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  826.474421][ T5854] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  826.538356][ T5854] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  826.603824][ T5854] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  826.644581][ T5854] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  826.666073][ T5854] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  826.726606][ T5854] usb 4-1: Product: syz
[  826.759551][ T5854] usb 4-1: Manufacturer: syz
[  826.821022][ T5854] cdc_wdm 4-1:1.0: skipping garbage
[  826.830644][ T5854] cdc_wdm 4-1:1.0: skipping garbage
[  826.862000][ T5854] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  826.883849][ T5854] cdc_wdm 4-1:1.0: Unknown control protocol
[  827.105773][ T5916] usb 4-1: USB disconnect, device number 81
[  827.248094][    T9] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  827.874688][T15006] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  827.899837][    T9] usb 2-1: Using ep0 maxpacket: 32
[  827.907119][    T9] usb 2-1: config 0 has an invalid interface number: 54 but max is 0
[  827.923206][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  827.952529][    T9] usb 2-1: config 0 has no interface number 0
[  827.962456][    T9] usb 2-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=46.42
[  827.972816][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  827.981012][    T9] usb 2-1: Product: syz
[  827.986533][    T9] usb 2-1: Manufacturer: syz
[  827.991203][    T9] usb 2-1: SerialNumber: syz
[  828.010943][    T9] usb 2-1: config 0 descriptor??
[  828.051365][T15006] usb 6-1: Using ep0 maxpacket: 32
[  828.058476][T15006] usb 6-1: config 2 has an invalid interface number: 230 but max is 0
[  828.067251][T15006] usb 6-1: config 2 has no interface number 0
[  828.191757][T15006] usb 6-1: config 2 interface 230 altsetting 0 endpoint 0xA has invalid maxpacket 1584, setting to 1024
[  828.210102][T15006] usb 6-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=a4.72
[  828.219724][T15006] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  828.647726][T15940] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  828.708607][T15963] netlink: 892 bytes leftover after parsing attributes in process `syz.2.2642'.
[  828.755117][   T30] audit: type=1400 audit(1769908080.273:874): avc:  denied  { mount } for  pid=15931 comm="syz.1.2636" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1
[  828.775805][T15964] netlink: 892 bytes leftover after parsing attributes in process `syz.2.2642'.
[  828.809587][   T30] audit: type=1400 audit(1769908080.282:875): avc:  denied  { search } for  pid=15931 comm="syz.1.2636" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1
[  828.863807][   T30] audit: type=1400 audit(1769908080.282:876): avc:  denied  { search } for  pid=15931 comm="syz.1.2636" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1
[  828.917345][   T30] audit: type=1400 audit(1769908080.282:877): avc:  denied  { read open } for  pid=15931 comm="syz.1.2636" path="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1
[  828.998958][T15006] usb 6-1: string descriptor 0 read error: -71
[  829.034121][T15006] cypress_m8 6-1:2.230: HID->COM RS232 Adapter converter detected
[  829.096043][T15006] usb 6-1: HID->COM RS232 Adapter converter now attached to ttyUSB0
[  829.740144][T15006] usb 6-1: USB disconnect, device number 18
[  829.780569][T15006] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0
[  829.838371][T15006] cypress_m8 6-1:2.230: device disconnected
[  829.855481][T15971] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=15971 comm=syz.2.2644
[  830.852230][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  830.875787][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  832.008242][T15992] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2650'.
[  832.037180][    T9] ums_eneub6250 2-1:0.54: USB Mass Storage device detected
[  832.122075][T15992] netlink: 'syz.5.2650': attribute type 11 has an invalid length.
[  832.130206][T15992] netlink: 199828 bytes leftover after parsing attributes in process `syz.5.2650'.
[  832.192809][    T9] usb 2-1: USB disconnect, device number 58
[  832.818712][T15997] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  832.967997][T16002] x_tables: duplicate underflow at hook 2
[  833.511081][   T30] audit: type=1400 audit(1769908084.744:878): avc:  denied  { read } for  pid=15999 comm="syz.3.2652" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  833.524265][T16006] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2651'.
[  833.579379][T16008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2652'.
[  833.880368][T16017] comedi comedi3: pcl812: I/O port conflict (0x8001,16)
[  833.905089][T16017] cgroup: Invalid name
[  834.521622][   T30] audit: type=1400 audit(1769908084.744:879): avc:  denied  { open } for  pid=15999 comm="syz.3.2652" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  834.925335][   T30] audit: type=1400 audit(1769908084.800:880): avc:  denied  { ioctl } for  pid=15999 comm="syz.3.2652" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  835.355578][   T30] audit: type=1400 audit(1769908085.043:881): avc:  denied  { create } for  pid=16012 comm="syz.1.2654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  835.575662][   T30] audit: type=1400 audit(1769908085.053:882): avc:  denied  { setopt } for  pid=16012 comm="syz.1.2654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  835.595150][   T30] audit: type=1400 audit(1769908085.053:883): avc:  denied  { connect } for  pid=16012 comm="syz.1.2654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  835.776375][T16029] loop2: detected capacity change from 0 to 7
[  835.858202][T16032] 9pnet_virtio: no channels available for device éq‰Y’3aK
[  835.872817][   T30] audit: type=1400 audit(1769908086.942:884): avc:  denied  { mounton } for  pid=16026 comm="syz.5.2657" path=2F3133332FE91F7189591E9233614B dev="tmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1
[  836.158447][T16029] Dev loop2: unable to read RDB block 7
[  836.164695][T16033] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2658'.
[  836.184999][T16029]  loop2: AHDI p1 p2 p3
[  836.189188][T16029] loop2: partition table partially beyond EOD, truncated
[  836.266427][T16029] loop2: p1 start 1818582900 is beyond EOD, truncated
[  836.298158][T16033] netlink: 'syz.4.2658': attribute type 11 has an invalid length.
[  836.306031][T16033] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.2658'.
[  836.318814][T16029] loop2: p3 start 335544320 is beyond EOD, truncated
[  836.420212][    T9] usb 4-1: new high-speed USB device number 82 using dummy_hcd
[  836.439309][ T5180] Dev loop2: unable to read RDB block 7
[  836.452242][ T5180]  loop2: AHDI p1 p2 p3
[  836.461310][ T5180] loop2: partition table partially beyond EOD, truncated
[  836.473612][ T5180] loop2: p1 start 1818582900 is beyond EOD, truncated
[  836.480831][ T5180] loop2: p3 start 335544320 is beyond EOD, truncated
[  836.613394][    T9] usb 4-1: Using ep0 maxpacket: 8
[  836.711995][ T5925] usb 5-1: new high-speed USB device number 77 using dummy_hcd
[  836.740854][    T9] usb 4-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=81.d5
[  836.805858][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  836.902558][ T5925] usb 5-1: config 0 interface 0 has no altsetting 0
[  836.904310][    T9] usb 4-1: Product: syz
[  836.998879][    T9] usb 4-1: Manufacturer: syz
[  836.998919][ T5925] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  837.007098][    T9] usb 4-1: SerialNumber: syz
[  837.038850][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  837.510795][ T5925] usb 5-1: config 0 descriptor??
[  837.538706][    T9] usb 4-1: config 0 descriptor??
[  837.562514][    T9] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected.
[  837.585660][ T5180] Dev loop2: unable to read RDB block 7
[  837.591324][ T5180]  loop2: AHDI p1 p2 p3
[  837.595669][ T5180] loop2: partition table partially beyond EOD, truncated
[  837.605274][ T5180] loop2: p1 start 1818582900 is beyond EOD, truncated
[  837.615143][ T5180] loop2: p3 start 335544320 is beyond EOD, truncated
[  838.258966][    T9] pwc: send_video_command error -71
[  838.264209][    T9] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  838.275366][    T9] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71
[  838.497665][    T9] usb 4-1: USB disconnect, device number 82
[  838.857663][   T24] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  838.916801][ T5925] radio-keene 5-1:0.0: V4L2 device registered as radio48
[  839.353662][ T5925] usb 5-1: USB disconnect, device number 77
[  839.373749][   T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  839.383521][   T24] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  839.395638][   T24] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  839.410870][   T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  839.421893][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  839.436294][   T24] usb 6-1: Product: syz
[  839.441992][   T24] usb 6-1: Manufacturer: syz
[  839.449435][   T24] usb 6-1: SerialNumber: syz
[  839.689905][   T24] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  840.117260][   T24] usb 6-1: USB disconnect, device number 19
[  840.158923][   T24] usblp0: removed
[  841.565568][T16092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2676'.
[  841.851911][   T30] audit: type=1400 audit(1769908092.545:885): avc:  denied  { nlmsg_read } for  pid=16097 comm="syz.1.2678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  844.942344][   T30] audit: type=1400 audit(1769908095.445:886): avc:  denied  { ioctl } for  pid=16133 comm="syz.4.2688" path="socket:[69054]" dev="sockfs" ino=69054 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  845.041133][   T30] audit: type=1400 audit(1769908095.445:887): avc:  denied  { map } for  pid=16133 comm="syz.4.2688" path="socket:[69054]" dev="sockfs" ino=69054 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  845.106826][T16125] comedi comedi2: pcmmio: I/O port conflict (0xfffffffffffffffb,32)
[  845.131488][   T30] audit: type=1400 audit(1769908095.445:888): avc:  denied  { accept } for  pid=16133 comm="syz.4.2688" path="socket:[69054]" dev="sockfs" ino=69054 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  845.176012][T16132] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2687'.
[  845.464398][   T30] audit: type=1400 audit(1769908095.913:889): avc:  denied  { bind } for  pid=16141 comm="syz.4.2691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  845.547262][   T30] audit: type=1400 audit(1769908096.006:890): avc:  denied  { write } for  pid=16143 comm="syz.5.2692" name="usbmon6" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  845.571802][T16145] 9p: Bad value for 'rfdno'
[  845.577854][T16144] 9p: Bad value for 'rfdno'
[  845.620199][   T30] audit: type=1400 audit(1769908096.044:891): avc:  denied  { mount } for  pid=16143 comm="syz.5.2692" name="/" dev="configfs" ino=1208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  845.959184][T16157] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2695'.
[  846.028774][ T5916] usb 5-1: new high-speed USB device number 78 using dummy_hcd
[  846.059821][   T30] audit: type=1400 audit(1769908096.390:892): avc:  denied  { setopt } for  pid=16149 comm="syz.2.2695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  846.351700][ T5916] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  846.363172][ T5916] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  846.372661][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  846.398939][ T5916] usb 5-1: config 0 descriptor??
[  846.491097][    T9] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  847.038140][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  847.058458][    T9] usb 2-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00
[  847.071289][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  847.099166][    T9] usb 2-1: config 0 descriptor??
[  847.512323][T16178] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2693'.
[  847.521680][T16178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2693'.
[  847.589301][    T9] kye 0003:0458:0153.000B: unknown main item tag 0x0
[  847.597981][    T9] kye 0003:0458:0153.000B: unknown main item tag 0x0
[  847.605752][    T9] kye 0003:0458:0153.000B: unknown main item tag 0x0
[  847.615993][    T9] kye 0003:0458:0153.000B: unknown main item tag 0x0
[  847.632191][    T9] kye 0003:0458:0153.000B: unknown main item tag 0x0
[  847.665279][    T9] kye 0003:0458:0153.000B: hidraw0: USB HID v1.01 Device [HID 0458:0153] on usb-dummy_hcd.1-1/input0
[  847.807031][    T9] usb 2-1: USB disconnect, device number 59
[  849.010200][   T30] audit: type=1400 audit(1769908098.981:893): avc:  denied  { setopt } for  pid=16201 comm="syz.5.2708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  849.095838][   T24] usb 5-1: USB disconnect, device number 78
[  849.841950][T16211] input: syz1 as /devices/virtual/input/input64
[  851.984711][T16227] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2715'.
[  852.042861][T16236] usb usb7: usbfs: process 16236 (syz.5.2715) did not claim interface 0 before use
[  855.973644][ T5925] usb 3-1: new low-speed USB device number 64 using dummy_hcd
[  856.273546][T16277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2727'.
[  856.486451][ T5925] usb 3-1: device descriptor read/64, error -71
[  856.613767][T16288] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2731'.
[  856.631872][T16288] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  856.700363][T16285] FAULT_INJECTION: forcing a failure.
[  856.700363][T16285] name failslab, interval 1, probability 0, space 0, times 0
[  856.740340][T16285] CPU: 0 UID: 0 PID: 16285 Comm: syz.5.2732 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  856.740368][T16285] Tainted: [L]=SOFTLOCKUP
[  856.740373][T16285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  856.740382][T16285] Call Trace:
[  856.740388][T16285]  <TASK>
[  856.740395][T16285]  dump_stack_lvl+0x100/0x190
[  856.740422][T16285]  should_fail_ex.cold+0x5/0xa
[  856.740442][T16285]  should_failslab+0xc2/0x120
[  856.740463][T16285]  kmem_cache_alloc_noprof+0x83/0x780
[  856.740483][T16285]  ? __lock_acquire+0x4a5/0x2630
[  856.740499][T16285]  ? sk_prot_alloc+0x60/0x2a0
[  856.740530][T16285]  ? sk_prot_alloc+0x60/0x2a0
[  856.740554][T16285]  sk_prot_alloc+0x60/0x2a0
[  856.740578][T16285]  sk_clone+0x7d/0x1670
[  856.740597][T16285]  ? do_raw_spin_lock+0x128/0x260
[  856.740619][T16285]  sctp_clone_sock+0x34/0x1900
[  856.740645][T16285]  ? __local_bh_enable_ip+0x9e/0x120
[  856.740672][T16285]  sctp_accept+0x5e1/0x770
[  856.740693][T16285]  ? percpu_counter_add_batch+0xb9/0x230
[  856.740720][T16285]  ? __pfx_sctp_accept+0x10/0x10
[  856.740741][T16285]  ? do_raw_spin_lock+0x128/0x260
[  856.740760][T16285]  ? find_held_lock+0x2b/0x80
[  856.740781][T16285]  ? __pfx_autoremove_wake_function+0x10/0x10
[  856.740810][T16285]  ? do_raw_spin_unlock+0x145/0x1e0
[  856.740835][T16285]  inet_accept+0xc7/0x180
[  856.740853][T16285]  do_accept+0x340/0x530
[  856.740874][T16285]  ? __pfx_do_accept+0x10/0x10
[  856.740906][T16285]  __sys_accept4+0x108/0x200
[  856.740926][T16285]  ? __pfx___sys_accept4+0x10/0x10
[  856.740950][T16285]  ? ksys_write+0x1ac/0x250
[  856.740969][T16285]  ? __pfx_ksys_write+0x10/0x10
[  856.740994][T16285]  __x64_sys_accept+0x74/0xb0
[  856.741012][T16285]  ? lockdep_hardirqs_on+0x78/0x100
[  856.741031][T16285]  do_syscall_64+0xc9/0xf80
[  856.741052][T16285]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  856.741071][T16285] RIP: 0033:0x7f3b32d9aeb9
[  856.741085][T16285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  856.741102][T16285] RSP: 002b:00007f3b33c27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b
[  856.741121][T16285] RAX: ffffffffffffffda RBX: 00007f3b33015fa0 RCX: 00007f3b32d9aeb9
[  856.741132][T16285] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  856.741142][T16285] RBP: 00007f3b33c27090 R08: 0000000000000000 R09: 0000000000000000
[  856.741153][T16285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  856.741163][T16285] R13: 00007f3b33016038 R14: 00007f3b33015fa0 R15: 00007ffef90a3c68
[  856.741188][T16285]  </TASK>
[  856.995016][ T5925] usb 3-1: new low-speed USB device number 65 using dummy_hcd
[  857.015034][T16291] FAULT_INJECTION: forcing a failure.
[  857.015034][T16291] name failslab, interval 1, probability 0, space 0, times 0
[  857.028293][T16291] CPU: 0 UID: 0 PID: 16291 Comm: syz.1.2733 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  857.028321][T16291] Tainted: [L]=SOFTLOCKUP
[  857.028328][T16291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  857.028338][T16291] Call Trace:
[  857.028345][T16291]  <TASK>
[  857.028352][T16291]  dump_stack_lvl+0x100/0x190
[  857.028379][T16291]  should_fail_ex.cold+0x5/0xa
[  857.028400][T16291]  should_failslab+0xc2/0x120
[  857.028423][T16291]  ? iter_file_splice_write+0x1d3/0x10a0
[  857.028446][T16291]  __kmalloc_noprof+0xf6/0x9c0
[  857.028463][T16291]  ? ovl_xattr_get+0xfc/0x190
[  857.028486][T16291]  ? iter_file_splice_write+0x1d3/0x10a0
[  857.028508][T16291]  iter_file_splice_write+0x1d3/0x10a0
[  857.028533][T16291]  ? __pfx_ovl_other_xattr_get+0x10/0x10
[  857.028554][T16291]  ? __pfx___vfs_getxattr+0x10/0x10
[  857.028575][T16291]  ? bpf_lsm_capable+0x9/0x10
[  857.028604][T16291]  ? __pfx_iter_file_splice_write+0x10/0x10
[  857.028627][T16291]  ? __lock_acquire+0x4a5/0x2630
[  857.028645][T16291]  ? security_inode_need_killpriv+0x71/0x1e0
[  857.028666][T16291]  ? file_remove_privs_flags+0x251/0x590
[  857.028710][T16291]  backing_file_splice_write+0x27b/0x860
[  857.028745][T16291]  ovl_splice_write+0x328/0x600
[  857.028769][T16291]  ? __pfx_ovl_splice_write+0x10/0x10
[  857.028792][T16291]  ? __pfx_ovl_file_end_write+0x10/0x10
[  857.028820][T16291]  ? __pfx_ovl_splice_write+0x10/0x10
[  857.028842][T16291]  direct_splice_actor+0x192/0x6c0
[  857.028867][T16291]  splice_direct_to_actor+0x345/0xa30
[  857.028890][T16291]  ? __pfx_direct_splice_actor+0x10/0x10
[  857.028917][T16291]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  857.028951][T16291]  do_splice_direct+0x174/0x240
[  857.028974][T16291]  ? __pfx_do_splice_direct+0x10/0x10
[  857.028993][T16291]  ? avc_policy_seqno+0x9/0x20
[  857.029017][T16291]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  857.029043][T16291]  ? rw_verify_area+0xce/0x6d0
[  857.029063][T16291]  do_sendfile+0xadc/0xe20
[  857.029087][T16291]  ? __pfx_do_sendfile+0x10/0x10
[  857.029116][T16291]  __x64_sys_sendfile64+0x154/0x220
[  857.029141][T16291]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[  857.029172][T16291]  do_syscall_64+0xc9/0xf80
[  857.029195][T16291]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  857.029213][T16291] RIP: 0033:0x7f428979aeb9
[  857.029229][T16291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  857.029247][T16291] RSP: 002b:00007f428a5c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  857.029265][T16291] RAX: ffffffffffffffda RBX: 00007f4289a16090 RCX: 00007f428979aeb9
[  857.029276][T16291] RDX: 0000200000000080 RSI: 0000000000000004 RDI: 0000000000000004
[  857.029287][T16291] RBP: 00007f428a5c9090 R08: 0000000000000000 R09: 0000000000000000
[  857.029297][T16291] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000001
[  857.029308][T16291] R13: 00007f4289a16128 R14: 00007f4289a16090 R15: 00007fffa77d8508
[  857.029333][T16291]  </TASK>
[  857.064814][T16293] syzkaller0: entered promiscuous mode
[  857.342053][T16293] syzkaller0: entered allmulticast mode
[  857.405967][ T5925] usb 3-1: device descriptor read/64, error -71
[  857.530837][T16300] netlink: 388 bytes leftover after parsing attributes in process `syz.4.2736'.
[  857.540535][ T5925] usb usb3-port1: attempt power cycle
[  858.107993][   T30] audit: type=1400 audit(1769908107.745:894): avc:  denied  { setattr } for  pid=16307 comm="syz.2.2738" name="tty1" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1
[  858.220834][T16312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2740'.
[  858.337224][ T5925] usb usb3-port1: Cannot enable. Maybe the USB cable is bad?
[  858.905971][ T5925] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[  858.945918][ T5925] usb 3-1: Using ep0 maxpacket: 8
[  858.961161][ T5925] usb 3-1: config index 0 descriptor too short (expected 21, got 18)
[  858.991015][ T5925] usb 3-1: config 8 has an invalid interface number: 249 but max is 0
[  859.012764][ T5925] usb 3-1: config 8 has no interface number 0
[  859.019264][ T5925] usb 3-1: config 8 interface 249 has no altsetting 0
[  859.276196][ T5925] usb 3-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=f1.1b
[  859.292326][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1
[  859.369318][ T5925] usb 3-1: Product: syz
[  859.379883][ T5925] usb 3-1: Manufacturer: syz
[  859.400890][ T5925] usb 3-1: SerialNumber: syz
[  859.536502][T16340] overlayfs: failed to resolve './file1': -2
[  859.584222][   T52] Bluetooth: hci2: unexpected event for opcode 0x2012
[  859.801835][   T30] audit: type=1400 audit(1769908109.326:895): avc:  denied  { ioctl } for  pid=16307 comm="syz.2.2738" path="socket:[70668]" dev="sockfs" ino=70668 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  859.831101][ T5925] ttusb_dec_send_command: command bulk message failed: error -22
[  860.863641][ T5925] ttusb-dec 3-1:8.249: probe with driver ttusb-dec failed with error -22
[  860.988753][ T5925] usb 3-1: USB disconnect, device number 67
[  861.013948][   T30] audit: type=1400 audit(1769908109.326:896): avc:  denied  { write } for  pid=16307 comm="syz.2.2738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  861.040747][   T30] audit: type=1400 audit(1769908109.439:897): avc:  denied  { audit_write } for  pid=16341 comm="syz.5.2750" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  861.221012][   T30] audit: type=1400 audit(1769908109.439:898): avc:  denied  { watch watch_reads } for  pid=16341 comm="syz.5.2750" path="/158" dev="tmpfs" ino=889 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  861.550678][   T30] audit: type=1400 audit(1769908110.832:899): avc:  denied  { create } for  pid=16355 comm="syz.2.2753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  861.575265][   T30] audit: type=1400 audit(1769908110.842:900): avc:  denied  { connect } for  pid=16355 comm="syz.2.2753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  861.600024][   T30] audit: type=1400 audit(1769908110.842:901): avc:  denied  { write } for  pid=16355 comm="syz.2.2753" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  861.689265][ T5916] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[  861.888023][   T30] audit: type=1400 audit(1769908111.104:902): avc:  denied  { connect } for  pid=16358 comm="syz.5.2755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  861.915875][   T30] audit: type=1400 audit(1769908111.104:903): avc:  denied  { write } for  pid=16358 comm="syz.5.2755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  862.081645][ T5916] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  862.091195][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  862.100810][ T5916] usb 3-1: Product: syz
[  862.105369][ T5916] usb 3-1: Manufacturer: syz
[  862.111434][ T5916] usb 3-1: SerialNumber: syz
[  862.168071][ T5916] usb 3-1: config 0 descriptor??
[  862.416266][ T5916] usb 3-1: USB disconnect, device number 68
[  862.774951][T16356] netlink: 'syz.2.2753': attribute type 1 has an invalid length.
[  862.845619][T16356] 8021q: adding VLAN 0 to HW filter on device bond1
[  862.910941][T16374] netlink: 'syz.5.2758': attribute type 1 has an invalid length.
[  862.949303][T16356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2753'.
[  863.023090][T16381] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2753'.
[  863.088912][T16382] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2758'.
[  863.149542][T16369] bond1: (slave veth3): Enslaving as an active interface with a down link
[  863.306824][T16374] 8021q: adding VLAN 0 to HW filter on device bond1
[  863.876844][   T52] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  863.890858][   T52] Bluetooth: hci2: Injecting HCI hardware error event
[  863.913720][   T52] Bluetooth: hci2: hardware error 0x00
[  864.344638][T16398] overlayfs: failed to resolve '/': -2
[  864.350232][   T30] audit: type=1400 audit(1769908113.582:904): avc:  denied  { mount } for  pid=16397 comm="syz.2.2764" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  864.827059][T16400] ptrace attach of "./syz-executor exec"[16401] was attempted by "./syz-executor exec"[16400]
[  865.242118][   T30] audit: type=1400 audit(1769908113.592:905): avc:  denied  { mounton } for  pid=16397 comm="syz.2.2764" path="/579/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  865.264962][   T30] audit: type=1400 audit(1769908114.050:906): avc:  denied  { read } for  pid=16397 comm="syz.2.2764" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  865.329889][   T30] audit: type=1400 audit(1769908114.050:907): avc:  denied  { open } for  pid=16397 comm="syz.2.2764" path="/579/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  865.764889][ T5925] usb 4-1: new high-speed USB device number 83 using dummy_hcd
[  866.184733][ T5925] usb 4-1: unable to get BOS descriptor or descriptor too short
[  866.204653][ T5925] usb 4-1: config 0 has an invalid interface number: 144 but max is 1
[  866.206731][T16411] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2768'.
[  866.212828][ T5925] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  866.225594][T16411] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  866.232008][ T5925] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  866.249054][ T5925] usb 4-1: config 0 has no interface number 0
[  866.256867][ T5925] usb 4-1: config 0 interface 144 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 13
[  866.270405][ T5925] usb 4-1: config 0 interface 144 has no altsetting 0
[  866.279156][ T5916] usb 5-1: new high-speed USB device number 79 using dummy_hcd
[  866.279664][ T5925] usb 4-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=d0.ae
[  866.287232][   T52] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  866.302125][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  866.310326][ T5925] usb 4-1: Product: syz
[  866.332883][ T5925] usb 4-1: Manufacturer: syz
[  866.338281][ T5925] usb 4-1: SerialNumber: syz
[  866.354787][ T5925] usb 4-1: config 0 descriptor??
[  866.484777][ T5916] usb 5-1: Using ep0 maxpacket: 32
[  866.502533][ T5916] usb 5-1: too many configurations: 123, using maximum allowed: 8
[  866.518811][ T5916] usb 5-1: unable to read config index 0 descriptor/start: -61
[  866.529675][   T30] audit: type=1400 audit(1769908115.622:908): avc:  denied  { shutdown } for  pid=16412 comm="syz.5.2769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  866.557208][ T5916] usb 5-1: can't read configurations, error -61
[  866.571596][   T30] audit: type=1400 audit(1769908115.622:909): avc:  denied  { setopt } for  pid=16412 comm="syz.5.2769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  866.617439][ T5925] ims_pcu 4-1:0.144: Missing CDC union descriptor
[  866.617970][   T30] audit: type=1400 audit(1769908115.622:910): avc:  denied  { bind } for  pid=16412 comm="syz.5.2769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  866.656837][ T5925] ims_pcu 4-1:0.144: probe with driver ims_pcu failed with error -22
[  866.706679][ T5916] usb 5-1: new high-speed USB device number 80 using dummy_hcd
[  867.170888][ T5925] usb 4-1: USB disconnect, device number 83
[  867.255422][   T30] audit: type=1400 audit(1769908115.622:911): avc:  denied  { name_bind } for  pid=16412 comm="syz.5.2769" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[  867.482567][   T30] audit: type=1400 audit(1769908115.622:912): avc:  denied  { node_bind } for  pid=16412 comm="syz.5.2769" saddr=fc01:: src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[  867.670227][   T30] audit: type=1400 audit(1769908115.631:913): avc:  denied  { unmount } for  pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  868.122696][T16430] overlayfs: failed to resolve './file1': -2
[  868.160739][ T5916] usb 5-1: Using ep0 maxpacket: 32
[  868.168698][ T5916] usb 5-1: too many configurations: 123, using maximum allowed: 8
[  868.178147][ T5916] usb 5-1: unable to read config index 0 descriptor/start: -61
[  868.206690][ T5916] usb 5-1: can't read configurations, error -61
[  868.213310][ T5916] usb usb5-port1: attempt power cycle
[  868.663305][T16394] Bluetooth: hci5: command 0x0406 tx timeout
[  868.951727][ T5916] usb 5-1: new high-speed USB device number 81 using dummy_hcd
[  869.193255][ T5916] usb 5-1: device not accepting address 81, error -71
[  870.245549][T15006] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[  870.429088][T15006] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  870.444961][T15006] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  870.544661][T15006] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  870.566840][T15006] usb 3-1: config 0 descriptor??
[  870.816934][   T30] audit: type=1400 audit(1769908119.644:914): avc:  denied  { getopt } for  pid=16456 comm="syz.5.2780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  871.326708][T15006] usbhid 3-1:0.0: can't add hid device: -71
[  871.355460][T15006] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  871.404590][T15006] usb 3-1: USB disconnect, device number 69
[  872.227070][T16482] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  872.404169][T16483] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2786'.
[  872.875185][ T5916] usb 6-1: new full-speed USB device number 20 using dummy_hcd
[  873.149143][ T5916] usb 6-1: config 4 has an invalid interface number: 3 but max is 0
[  873.300108][ T5916] usb 6-1: config 4 has an invalid interface number: 3 but max is 0
[  873.434476][ T5916] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  873.877405][ T5916] usb 6-1: config 4 has no interface number 0
[  873.922577][ T5916] usb 6-1: config 4 interface 3 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 6
[  874.013501][ T5916] usb 6-1: config 4 interface 3 has no altsetting 0
[  874.076701][ T5916] usb 6-1: config 4 interface 3 has no altsetting 1
[  874.083431][   T30] audit: type=1400 audit(1769908122.684:915): avc:  denied  { getattr } for  pid=16481 comm="syz.3.2787" name="saved_tgids" dev="tracefs" ino=1196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  874.106797][ T5916] usb 6-1: New USB device found, idVendor=05ac, idProduct=1204, bcdDevice= 7.6c
[  874.131679][ T5916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  874.413513][   T30] audit: type=1400 audit(1769908123.002:916): avc:  denied  { execute } for  pid=16499 comm="syz.2.2792" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=71082 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  875.486820][ T5916] apple-mfi-fastcharge 6-1: string descriptor 0 read error: -71
[  875.499886][ T5916] usb-storage 6-1:4.3: USB Mass Storage device detected
[  875.549996][ T5916] usb-storage 6-1:4.3: Quirks match for vid 05ac pid 1204: 90
[  875.713941][ T5916] apple-mfi-fastcharge 6-1: USB disconnect, device number 20
[  876.851406][   T30] audit: type=1400 audit(1769908125.284:917): avc:  denied  { connect } for  pid=16535 comm="syz.1.2803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  878.113169][T16551] FAULT_INJECTION: forcing a failure.
[  878.113169][T16551] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  878.126394][T16551] CPU: 0 UID: 0 PID: 16551 Comm: syz.3.2800 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  878.126420][T16551] Tainted: [L]=SOFTLOCKUP
[  878.126432][T16551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  878.126438][T16551] Call Trace:
[  878.126444][T16551]  <TASK>
[  878.126449][T16551]  dump_stack_lvl+0x100/0x190
[  878.126468][T16551]  should_fail_ex.cold+0x5/0xa
[  878.126480][T16551]  strncpy_from_user+0x3b/0x2d0
[  878.126496][T16551]  getname_flags.part.0+0x8f/0x540
[  878.126515][T16551]  user_path_at+0x9b/0x100
[  878.126528][T16551]  __x64_sys_mount+0x1fb/0x310
[  878.126544][T16551]  ? __pfx___x64_sys_mount+0x10/0x10
[  878.126564][T16551]  do_syscall_64+0xc9/0xf80
[  878.126577][T16551]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  878.126588][T16551] RIP: 0033:0x7fb51019aeb9
[  878.126598][T16551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  878.126608][T16551] RSP: 002b:00007fb511087028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  878.126620][T16551] RAX: ffffffffffffffda RBX: 00007fb510416090 RCX: 00007fb51019aeb9
[  878.126627][T16551] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000
[  878.126633][T16551] RBP: 00007fb511087090 R08: 0000200000000400 R09: 0000000000000000
[  878.126639][T16551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  878.126645][T16551] R13: 00007fb510416128 R14: 00007fb510416090 R15: 00007ffe9a7bb288
[  878.126659][T16551]  </TASK>
[  878.810514][T16555] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2805'.
[  878.830737][T16555] binder: BINDER_SET_CONTEXT_MGR already set
[  878.837040][T16555] binder: 16554:16555 ioctl 4018620d 200000004a80 returned -16
[  878.839617][   T30] audit: type=1400 audit(1769908127.146:918): avc:  denied  { map } for  pid=16554 comm="syz.2.2805" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  880.113014][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  880.125438][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  880.137624][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  880.149834][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  880.162000][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  880.174162][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  880.186435][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  880.198672][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  880.210881][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  880.223086][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  883.313201][T16578] overlayfs: failed to resolve '/': -2
[  885.468884][    C1] net_ratelimit: 28401 callbacks suppressed
[  885.468906][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  885.487191][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  885.499555][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  885.511931][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  885.524292][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  885.536651][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  885.549042][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  885.561395][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  885.573782][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  885.586125][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  890.824721][    C0] net_ratelimit: 35227 callbacks suppressed
[  890.824743][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  890.824793][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  890.831004][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  890.842881][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  890.854829][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  890.866714][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  890.878677][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  890.890586][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  890.902530][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  890.914403][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  896.180604][    C0] net_ratelimit: 38565 callbacks suppressed
[  896.180624][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  896.180804][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  896.186801][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  896.198654][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  896.210613][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  896.222478][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  896.234444][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  896.246305][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  896.258270][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  896.270148][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  896.910508][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  896.925369][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  900.542379][    C0] sched: DL replenish lagged too much
[  901.536649][    C0] net_ratelimit: 36135 callbacks suppressed
[  901.536669][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  901.536827][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  901.542809][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  901.554714][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  901.566670][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  901.578531][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  901.590474][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  901.602357][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  901.614296][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  901.626193][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  906.892660][    C1] net_ratelimit: 36834 callbacks suppressed
[  906.892669][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  906.892680][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  906.892946][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  906.898852][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  906.910719][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  906.922686][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  906.934637][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  906.946547][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  906.958452][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  906.970340][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  912.248646][    C1] net_ratelimit: 25705 callbacks suppressed
[  912.248666][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  912.248743][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  912.254806][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  912.267484][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  912.278640][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  912.291317][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  912.302473][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  912.315121][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  912.326291][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  912.338942][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  917.604732][    C1] net_ratelimit: 27526 callbacks suppressed
[  917.604751][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  917.615006][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  917.622853][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  917.635438][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  917.646678][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  917.659263][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  917.670509][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  917.683094][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  917.694372][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  917.706904][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  922.960765][    C1] net_ratelimit: 31044 callbacks suppressed
[  922.960787][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  922.961307][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  922.966939][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  922.979605][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  922.990859][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  923.003524][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  923.014682][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  923.027357][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  923.038522][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  923.051176][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  928.316576][    C1] net_ratelimit: 30941 callbacks suppressed
[  928.316598][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  928.316774][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  928.322763][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  928.335413][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  928.346668][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  928.359267][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  928.370433][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  928.383064][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  928.394266][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  928.406917][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  933.672714][    C1] net_ratelimit: 30660 callbacks suppressed
[  933.672735][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  933.682972][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  933.690918][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  933.703494][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  933.714762][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  933.727318][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  933.738575][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  933.751137][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  933.762418][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  933.774978][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  939.028657][    C1] net_ratelimit: 30650 callbacks suppressed
[  939.028675][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  939.028735][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  939.034829][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  939.047492][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  939.058658][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  939.071334][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  939.082484][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  939.095135][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  939.106301][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  939.118968][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  944.384727][    C1] net_ratelimit: 31014 callbacks suppressed
[  944.384749][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  944.385160][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  944.390894][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  944.403657][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  944.414849][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  944.427509][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  944.438725][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  944.459237][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  944.462513][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  944.475144][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  949.740567][    C1] net_ratelimit: 30993 callbacks suppressed
[  949.740586][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  949.741131][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  949.746711][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  949.759391][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  949.770576][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  949.783198][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  949.794383][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  949.807044][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  949.818459][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  949.830891][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  955.096676][    C1] net_ratelimit: 29455 callbacks suppressed
[  955.096701][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  955.096829][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  955.102828][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  955.115416][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  955.126747][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  955.139177][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  955.150466][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  955.163104][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  955.174391][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  955.186906][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  960.452585][    C0] net_ratelimit: 22906 callbacks suppressed
[  960.452615][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  960.452686][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  960.459328][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  960.470746][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  960.483417][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  960.494708][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  960.507059][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  960.518412][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  960.530891][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  960.542268][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  962.374663][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  962.390792][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  965.808564][    C1] net_ratelimit: 23919 callbacks suppressed
[  965.808583][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  965.809137][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  965.814781][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  965.827169][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  965.838499][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  965.851151][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  965.862407][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  965.875029][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  965.886294][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  965.898663][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  971.164758][    C1] net_ratelimit: 25341 callbacks suppressed
[  971.164778][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  971.165408][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  971.170952][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  971.183527][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  971.194689][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  971.207363][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  971.218502][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  971.231198][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  971.242394][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  971.254927][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  976.520788][    C0] net_ratelimit: 24307 callbacks suppressed
[  976.520807][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  976.520847][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  976.527557][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  976.538870][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  976.551350][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  976.562643][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  976.575194][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  976.586553][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  976.598915][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  976.610246][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  981.876779][    C1] net_ratelimit: 22886 callbacks suppressed
[  981.876801][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  981.877213][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  981.882937][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  981.895504][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  981.906872][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  981.919349][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  981.930589][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  981.943283][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  981.954494][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  981.967102][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  987.232744][    C1] net_ratelimit: 23309 callbacks suppressed
[  987.232763][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  987.232803][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  987.238922][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  987.251494][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  987.262765][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  987.275341][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  987.286712][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  987.299134][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  987.310593][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  987.323124][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  992.588791][    C1] net_ratelimit: 22238 callbacks suppressed
[  992.588810][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  992.589185][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  992.594961][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  992.607505][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  992.618782][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  992.631354][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  992.642682][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  992.655075][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  992.666387][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  992.678891][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  996.020194][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  996.027167][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P16487/1:b..l
[  996.035631][    C1] rcu: 	(detected by 1, t=10503 jiffies, g=82941, q=2964 ncpus=2)
[  996.043430][    C1] task:syz.3.2787      state:R  running task     stack:23864 pid:16487 tgid:16487 ppid:5806   task_flags:0x40064c flags:0x00080001
[  996.058026][    C1] Call Trace:
[  996.061311][    C1]  <TASK>
[  996.064241][    C1]  ? __schedule+0xf65/0x5e10
[  996.068829][    C1]  __schedule+0xfe4/0x5e10
[  996.073253][    C1]  ? __pfx___schedule+0x10/0x10
[  996.078106][    C1]  preempt_schedule_irq+0x50/0x90
[  996.083130][    C1]  irqentry_exit+0x17b/0x670
[  996.087715][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  996.093694][    C1] RIP: 0010:unwind_next_frame+0x4d6/0x1ea0
[  996.099502][    C1] Code: e8 6f f3 ff ff 48 89 c1 48 85 c0 0f 84 2d 0b 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8d 79 05 4c 89 fa 48 c1 ea 03 0f b6 04 02 <4c> 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 bd 13 00 00 0f b6 41 05
[  996.119221][    C1] RSP: 0018:ffffc900057cef48 EFLAGS: 00000a06
[  996.125294][    C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff91658fac
[  996.133263][    C1] RDX: 1ffffffff22cb1f6 RSI: 0000000000000000 RDI: ffffffff90da419c
[  996.141231][    C1] RBP: ffffc900057cf000 R08: ffffffff91658fd6 R09: 0000000000000007
[  996.149197][    C1] R10: 0000000000000200 R11: 0000000000018bd3 R12: ffffc900057cf008
[  996.157161][    C1] R13: ffffc900057cefb8 R14: ffffc900057cefed R15: ffffffff91658fb1
[  996.165147][    C1]  ? unwind_next_frame+0x2ec/0x1ea0
[  996.170351][    C1]  ? dentry_unlink_inode+0x2a1/0x490
[  996.175637][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  996.181800][    C1]  arch_stack_walk+0x94/0xf0
[  996.186408][    C1]  ? dentry_unlink_inode+0x2a1/0x490
[  996.191708][    C1]  stack_trace_save+0x8e/0xc0
[  996.196400][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  996.201777][    C1]  ? __lock_acquire+0x4a5/0x2630
[  996.206706][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  996.212504][    C1]  ? lockdep_hardirqs_on+0x78/0x100
[  996.217698][    C1]  save_stack+0x162/0x1e0
[  996.222021][    C1]  ? __pfx_save_stack+0x10/0x10
[  996.226862][    C1]  ? free_unref_folios+0xb2a/0x1760
[  996.232048][    C1]  ? folios_put_refs+0x53c/0x840
[  996.236979][    C1]  ? shmem_undo_range+0x5e0/0x15f0
[  996.242086][    C1]  ? shmem_evict_inode+0x39e/0xbd0
[  996.247192][    C1]  ? evict+0x3c2/0xad0
[  996.251260][    C1]  ? iput.part.0+0x624/0x1150
[  996.255938][    C1]  ? iput+0x35/0x40
[  996.259749][    C1]  ? dentry_unlink_inode+0x2a1/0x490
[  996.265034][    C1]  ? page_ext_put+0x3e/0xd0
[  996.269534][    C1]  __reset_page_owner+0x84/0x190
[  996.274467][    C1]  free_unref_folios+0xb2a/0x1760
[  996.279490][    C1]  ? folios_put_refs+0x440/0x840
[  996.284422][    C1]  ? rcu_is_watching+0x12/0xc0
[  996.289180][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  996.294978][    C1]  folios_put_refs+0x53c/0x840
[  996.299740][    C1]  ? __pfx_folios_put_refs+0x10/0x10
[  996.305023][    C1]  ? folio_batch_remove_exceptionals+0x115/0x1a0
[  996.311354][    C1]  shmem_undo_range+0x5e0/0x15f0
[  996.316293][    C1]  ? __pfx_shmem_undo_range+0x10/0x10
[  996.321658][    C1]  ? __lock_acquire+0x4a5/0x2630
[  996.326607][    C1]  ? find_held_lock+0x2b/0x80
[  996.331301][    C1]  ? percpu_counter_add_batch+0xb9/0x230
[  996.336932][    C1]  shmem_evict_inode+0x39e/0xbd0
[  996.341866][    C1]  ? inode_wait_for_writeback+0x171/0x390
[  996.347578][    C1]  ? __pfx_shmem_evict_inode+0x10/0x10
[  996.353029][    C1]  ? __pfx_inode_wait_for_writeback+0x10/0x10
[  996.359093][    C1]  ? find_held_lock+0x2b/0x80
[  996.363772][    C1]  ? evict+0x37e/0xad0
[  996.367841][    C1]  ? evict+0x37e/0xad0
[  996.371913][    C1]  ? __pfx_shmem_evict_inode+0x10/0x10
[  996.377367][    C1]  evict+0x3c2/0xad0
[  996.381257][    C1]  ? find_held_lock+0x2b/0x80
[  996.385933][    C1]  ? __pfx_evict+0x10/0x10
[  996.390873][    C1]  ? iput.part.0+0x61c/0x1150
[  996.395556][    C1]  iput.part.0+0x624/0x1150
[  996.400060][    C1]  iput+0x35/0x40
[  996.403690][    C1]  dentry_unlink_inode+0x2a1/0x490
[  996.408796][    C1]  __dentry_kill+0x1d0/0x600
[  996.413388][    C1]  finish_dput+0x76/0x480
[  996.417708][    C1]  dput.part.0+0x456/0x570
[  996.422116][    C1]  dput+0x1f/0x30
[  996.425743][    C1]  __fput+0x519/0xb40
[  996.429722][    C1]  task_work_run+0x150/0x240
[  996.434301][    C1]  ? __pfx_task_work_run+0x10/0x10
[  996.439409][    C1]  ? do_raw_spin_unlock+0x145/0x1e0
[  996.444607][    C1]  do_exit+0x829/0x2a30
[  996.448760][    C1]  ? __pfx_do_exit+0x10/0x10
[  996.453339][    C1]  ? __pfx_proc_coredump_connector+0x10/0x10
[  996.459323][    C1]  do_group_exit+0xd5/0x2a0
[  996.463818][    C1]  get_signal+0x1ec7/0x21e0
[  996.468328][    C1]  ? __pfx_get_signal+0x10/0x10
[  996.473176][    C1]  ? force_sig_fault+0xc3/0x100
[  996.478025][    C1]  arch_do_signal_or_restart+0x91/0x7a0
[  996.483569][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  996.489727][    C1]  ? __bad_area_nosemaphore+0x320/0x3f0
[  996.495277][    C1]  irqentry_exit+0x1f8/0x670
[  996.500470][    C1]  asm_exc_page_fault+0x26/0x30
[  996.505919][    C1] RIP: 0033:0x7fb51019aec1
[  996.510323][    C1] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217
[  996.516379][    C1] RAX: 0000000000000000 RBX: 00007fb510416090 RCX: 00007fb51019aeb9
[  996.524343][    C1] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000
[  996.532306][    C1] RBP: 00007fb510208c1f R08: 0000000000000000 R09: 0000000000000000
[  996.540266][    C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  996.548227][    C1] R13: 00007fb510416128 R14: 00007fb510416090 R15: 00007ffe9a7bb288
[  996.556203][    C1]  </TASK>
[  996.559215][    C1] rcu: rcu_preempt kthread starved for 2098 jiffies! g82941 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[  996.570312][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  996.580269][    C1] rcu: RCU grace-period kthread stack dump:
[  996.586142][    C1] task:rcu_preempt     state:R  running task     stack:28408 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
[  996.599628][    C1] Call Trace:
[  996.602899][    C1]  <TASK>
[  996.605838][    C1]  ? __schedule+0xf65/0x5e10
[  996.610423][    C1]  __schedule+0xfe4/0x5e10
[  996.614831][    C1]  ? __lock_acquire+0x4a5/0x2630
[  996.619772][    C1]  ? __pfx___schedule+0x10/0x10
[  996.624615][    C1]  ? find_held_lock+0x2b/0x80
[  996.629291][    C1]  ? schedule+0x2bf/0x390
[  996.633619][    C1]  schedule+0xdd/0x390
[  996.637681][    C1]  schedule_timeout+0x127/0x280
[  996.642534][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[  996.647903][    C1]  ? __pfx_process_timeout+0x10/0x10
[  996.653190][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  996.659007][    C1]  ? prepare_to_swait_event+0xdf/0x4a0
[  996.664461][    C1]  rcu_gp_fqs_loop+0x1a9/0xb00
[  996.669216][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  996.674495][    C1]  ? prepare_to_swait_event+0xdf/0x4a0
[  996.679949][    C1]  ? __pfx_rcu_gp_init+0x10/0x10
[  996.684877][    C1]  ? __pfx_rcu_gp_cleanup+0x10/0x10
[  996.690067][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  996.695868][    C1]  rcu_gp_kthread+0x21e/0x320
[  996.700536][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  996.705722][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  996.711519][    C1]  ? __kthread_parkme+0x18c/0x230
[  996.716545][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  996.721754][    C1]  kthread+0x3b3/0x730
[  996.725813][    C1]  ? __pfx_kthread+0x10/0x10
[  996.730392][    C1]  ? ret_from_fork+0x79/0xaf0
[  996.735060][    C1]  ? ret_from_fork+0x79/0xaf0
[  996.739729][    C1]  ? rcu_is_watching+0x12/0xc0
[  996.744488][    C1]  ? __pfx_kthread+0x10/0x10
[  996.749075][    C1]  ret_from_fork+0x754/0xaf0
[  996.753675][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  996.758789][    C1]  ? __switch_to+0x7b9/0x10c0
[  996.763474][    C1]  ? __pfx_kthread+0x10/0x10
[  996.768055][    C1]  ret_from_fork_asm+0x1a/0x30
[  996.772824][    C1]  </TASK>
[  996.775838][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  996.782151][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  996.792642][    C1] Tainted: [L]=SOFTLOCKUP
[  996.796957][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  996.807000][    C1] RIP: 0010:rcu_lockdep_current_cpu_online+0xc8/0x150
[  996.813768][    C1] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 75 76 48 b8 00 00 00 00 00 fc ff df 48 8b 5b 20 48 8d 7b 70 48 89 fa 48 c1 ea 03 80 3c 02 00 <75> 5e 48 8b 53 70 b8 01 00 00 00 48 85 d5 74 10 65 ff 0d e1 8a f8
[  996.833368][    C1] RSP: 0018:ffffc90000a07dd0 EFLAGS: 00000246
[  996.839428][    C1] RAX: dffffc0000000000 RBX: ffffffff8e5ef340 RCX: ffffffff8a5364fa
[  996.847390][    C1] RDX: 1ffffffff1cbde76 RSI: ffffffff8bfa35a0 RDI: ffffffff8e5ef3b0
[  996.855353][    C1] RBP: 0000000000000002 R08: 0000000000000005 R09: 0000000000000000
[  996.863312][    C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc90000a07f78
[  996.871271][    C1] R13: 0000000000000001 R14: 1ffff92000140fc3 R15: ffff888024b36000
[  996.879235][    C1] FS:  0000000000000000(0000) GS:ffff8881246d9000(0000) knlGS:0000000000000000
[  996.888157][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  996.894735][    C1] CR2: 00007ffcb1b82cc0 CR3: 000000002b31c000 CR4: 00000000003526f0
[  996.902699][    C1] Call Trace:
[  996.905967][    C1]  <IRQ>
[  996.908801][    C1]  rcu_read_lock_held+0x27/0x50
[  996.913650][    C1]  br_nf_post_routing+0x658/0x16a0
[  996.918775][    C1]  ? __pfx_br_nf_post_routing+0x10/0x10
[  996.924318][    C1]  ? __pfx_ebt_do_table+0x10/0x10
[  996.929346][    C1]  ? lock_acquire+0x17c/0x330
[  996.934017][    C1]  nf_hook_slow+0xbf/0x220
[  996.938432][    C1]  br_forward_finish+0x261/0x4d0
[  996.943363][    C1]  ? __pfx_br_forward_finish+0x10/0x10
[  996.948910][    C1]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[  996.954798][    C1]  ? nf_hook_slow+0x167/0x220
[  996.959471][    C1]  br_nf_hook_thresh+0x30d/0x420
[  996.964402][    C1]  ? __pfx_br_forward_finish+0x10/0x10
[  996.969857][    C1]  ? __pfx_br_nf_hook_thresh+0x10/0x10
[  996.975309][    C1]  ? lock_acquire+0x17c/0x330
[  996.979977][    C1]  ? __pfx_br_forward_finish+0x10/0x10
[  996.985438][    C1]  ? net_generic+0xea/0x2a0
[  996.989941][    C1]  br_nf_forward_finish+0x693/0xb30
[  996.995136][    C1]  ? __pfx_br_forward_finish+0x10/0x10
[  997.000589][    C1]  br_nf_forward_ip.part.0+0x61e/0x820
[  997.006049][    C1]  br_nf_forward+0xfe5/0x19f0
[  997.010723][    C1]  nf_hook_slow+0xbf/0x220
[  997.015144][    C1]  __br_forward+0x2f6/0x970
[  997.019648][    C1]  ? __pfx___br_forward+0x10/0x10
[  997.024663][    C1]  ? __asan_memcpy+0x3c/0x60
[  997.029247][    C1]  ? __pfx_br_forward_finish+0x10/0x10
[  997.034696][    C1]  ? __skb_clone+0x570/0x760
[  997.039289][    C1]  maybe_deliver+0xf0/0x180
[  997.043790][    C1]  br_flood+0x193/0x650
[  997.047945][    C1]  br_handle_frame_finish+0xf57/0x1f00
[  997.053401][    C1]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  997.059373][    C1]  ? ip6t_do_table+0xbed/0x1c90
[  997.064213][    C1]  ? __local_bh_enable_ip+0x9e/0x120
[  997.069497][    C1]  ? ip6t_do_table+0xc1d/0x1c90
[  997.074341][    C1]  ? __pfx_ip6t_do_table+0x10/0x10
[  997.079441][    C1]  ? nf_hook_slow+0x167/0x220
[  997.084116][    C1]  br_nf_hook_thresh+0x30d/0x420
[  997.089052][    C1]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  997.094943][    C1]  ? __pfx_br_nf_hook_thresh+0x10/0x10
[  997.100402][    C1]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  997.106288][    C1]  ? __pfx_nf_nat_ipv6_in+0x10/0x10
[  997.111481][    C1]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  997.117371][    C1]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  997.123261][    C1]  br_nf_pre_routing_finish_ipv6+0x769/0xfb0
[  997.129246][    C1]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  997.135145][    C1]  br_nf_pre_routing_ipv6+0x39c/0x8b0
[  997.140531][    C1]  ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10
[  997.146439][    C1]  ? lock_acquire+0x17c/0x330
[  997.151129][    C1]  ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10
[  997.157629][    C1]  ? net_generic+0xea/0x2a0
[  997.162139][    C1]  br_nf_pre_routing+0x93b/0x1510
[  997.167169][    C1]  br_handle_frame+0xcdd/0x1520
[  997.172023][    C1]  ? __pfx_br_handle_frame+0x10/0x10
[  997.177306][    C1]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  997.183198][    C1]  ? __pfx_br_handle_frame+0x10/0x10
[  997.188476][    C1]  __netif_receive_skb_core.constprop.0+0x6d7/0x3460
[  997.195145][    C1]  ? kasan_quarantine_put+0x104/0x240
[  997.200515][    C1]  ? kmem_cache_free+0x143/0x720
[  997.205444][    C1]  ? ipv6_chk_mcast_addr+0x2b0/0x9a0
[  997.210725][    C1]  ? kfree_skbmem+0x19a/0x210
[  997.215407][    C1]  ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10
[  997.222512][    C1]  ? kfree_skbmem+0x19f/0x210
[  997.227180][    C1]  ? sk_skb_reason_drop+0x114/0x1b0
[  997.232378][    C1]  ? ip6_mc_input+0x51a/0xf50
[  997.237059][    C1]  ? __lock_acquire+0x4a5/0x2630
[  997.241994][    C1]  ? process_backlog+0x32a/0x1580
[  997.247012][    C1]  __netif_receive_skb_one_core+0xb0/0x1e0
[  997.252811][    C1]  ? __pfx___netif_receive_skb_one_core+0x10/0x10
[  997.259219][    C1]  ? lock_acquire+0x17c/0x330
[  997.263888][    C1]  ? process_backlog+0x32a/0x1580
[  997.268908][    C1]  ? process_backlog+0x32a/0x1580
[  997.273923][    C1]  __netif_receive_skb+0x1f/0x120
[  997.278947][    C1]  process_backlog+0x37a/0x1580
[  997.283817][    C1]  __napi_poll.constprop.0+0xaf/0x450
[  997.289184][    C1]  net_rx_action+0xa40/0xf20
[  997.293779][    C1]  ? __pfx_net_rx_action+0x10/0x10
[  997.298888][    C1]  ? tmigr_handle_remote+0x132/0x380
[  997.304358][    C1]  ? run_timer_base+0x121/0x190
[  997.309203][    C1]  ? __pfx_run_timer_base+0x10/0x10
[  997.314397][    C1]  handle_softirqs+0x1ea/0x910
[  997.319165][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  997.324449][    C1]  __irq_exit_rcu+0xef/0x150
[  997.329032][    C1]  irq_exit_rcu+0x9/0x30
[  997.333272][    C1]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  997.338896][    C1]  </IRQ>
[  997.341814][    C1]  <TASK>
[  997.344736][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  997.350716][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  997.356353][    C1] Code: 56 78 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 ac 14 00 fb f4 <e9> fc 31 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[  997.375955][    C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000246
[  997.382019][    C1] RAX: 0000000005400471 RBX: ffff88801e2ba4c0 RCX: ffffffff8b76d4b5
[  997.389993][    C1] RDX: 0000000000000000 RSI: ffffffff8dc45690 RDI: ffffffff8bfa3620
[  997.397957][    C1] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffed10170a673d
[  997.405920][    C1] R10: ffff8880b85339eb R11: 0000000000000000 R12: ffffed1003c57498
[  997.413884][    C1] R13: 0000000000000001 R14: ffffffff90b749d0 R15: 0000000000000000
[  997.421855][    C1]  ? ct_kernel_exit+0x125/0x180
[  997.426714][    C1]  default_idle+0x9/0x10
[  997.430958][    C1]  default_idle_call+0x6c/0xb0
[  997.435713][    C1]  do_idle+0x35b/0x4b0
[  997.439787][    C1]  ? __pfx_do_idle+0x10/0x10
[  997.444378][    C1]  cpu_startup_entry+0x4f/0x60
[  997.449139][    C1]  start_secondary+0x21d/0x2d0
[  997.453897][    C1]  ? __pfx_start_secondary+0x10/0x10
[  997.459177][    C1]  common_startup_64+0x13e/0x148
[  997.464121][    C1]  </TASK>
[  997.944566][    C1] net_ratelimit: 17938 callbacks suppressed
[  997.944588][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  997.944985][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  997.954430][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  997.963254][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  997.974569][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[  997.987048][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  997.998351][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  998.010883][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  998.022252][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  998.034615][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1003.300781][    C0] net_ratelimit: 19758 callbacks suppressed
[ 1003.300807][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1003.300824][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[ 1003.307524][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1003.318861][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1003.331388][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1003.342782][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1003.355118][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1003.366461][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:71:bd:2c:36:27, vlan:0)
[ 1003.378936][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1003.390251][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)