last executing test programs: 19m43.841990536s ago: executing program 3 (id=571): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$kcm(0x1e, 0x4, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@wr_drn={0x68, 0x20, {0x7, 0x2000}}], 0x20}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x80000) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r4, 0x0, 0xfe08, 0x20004041, 0x0, 0x0) (async) setsockopt$inet6_tcp_int(r4, 0x6, 0x5, &(0x7f0000000080)=0xad65, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) socket(0xb, 0xb, 0xc) (async) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000140)={0x1, @default, @bpq0, 0x4, 'syz1\x00', @null, 0x1, 0x1, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @default]}) 19m43.268783954s ago: executing program 3 (id=575): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) fanotify_init(0xf00, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtaction={0xc4, 0x30, 0xffff, 0x0, 0x0, {}, [{0xb0, 0x1, [@m_ife={0xac, 0x1, 0x0, 0x0, {{0x8}, {0x84, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @link_local}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_PARMS={0x1c}, @TCA_IFE_TYPE={0x6, 0x5, 0x300}, @TCA_IFE_SMAC={0xa, 0x4, @dev}, @TCA_IFE_METALST={0x28, 0x6, [@IFE_META_SKBMARK={0x8}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc4}}, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) unlinkat(r3, 0x0, 0x200) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 19m40.658387759s ago: executing program 3 (id=585): r0 = socket(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000011c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x520, 0x298, 0x298, 0x0, 0x368, 0x368, 0x450, 0x450, 0x450, 0x450, 0x450, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0xff000000, 0x0, 0x0, 0x50040000], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00', {}, {}, 0x67}, 0x11e, 0xa8, 0xd0, 0x1f000000, {0x0, 0x7}}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0xa}, {0x0, 0x5, 0x5}}}}, {{@ipv6={@loopback, @private2={0xfc, 0x2, '\x00', 0x1}, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b, 0x0, 0x0, 0x4}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@local, @dev={0xfe, 0x80, '\x00', 0x3f}, [0xffffffff, 0xff000000, 0xffffff00, 0xff], [0xffffffff, 0xffffff00, 0xff000000], 'veth1_virt_wifi\x00', 'rose0\x00', {}, {}, 0x5c, 0xb, 0x0, 0x19}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x41}, [0xffffffff, 0xff000000, 0xff000000, 0xffffffff], [0xff000000, 0xffffffff, 0x0, 0xff000000], 'netdevsim0\x00', 'vcan0\x00', {0xff}, {0xff}, 0x2e, 0xfc, 0x1, 0x10}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) 19m40.366399461s ago: executing program 3 (id=587): socket$kcm(0x11, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) (async, rerun: 64) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) socket$nl_route(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 64) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./file0/file0\x00', 0xf0) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) r2 = getpgrp(0xffffffffffffffff) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x0, 0x0) (async) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_io_uring_setup(0x111, &(0x7f00000000c0)={0x0, 0x24ad, 0x10000, 0x1, 0x13c}, &(0x7f00000029c0)=0x0, &(0x7f0000000000)=0x0) (async) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x8000001f) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x8, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r3, 0x1733, 0x6323, 0x20, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') (rerun: 64) 19m40.32929162s ago: executing program 3 (id=588): socket$inet6(0xa, 0x1, 0x0) (async) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000001440)={'team_slave_1\x00', &(0x7f0000000180)=@ethtool_cmd={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40}}) (async) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000001440)={'team_slave_1\x00', &(0x7f0000000180)=@ethtool_cmd={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40}}) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x4d07c2) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f0000000040)) (async) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f0000000040)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x10000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001840)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc040}, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') (async) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) madvise(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x8) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xc8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000000)={0xff}, 0x1) 19m39.733990707s ago: executing program 3 (id=590): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}}, 0x1c}, 0x1, 0x9effffffffffffff, 0x0, 0x4a044}, 0x4010) 19m24.67434667s ago: executing program 32 (id=590): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}}, 0x1c}, 0x1, 0x9effffffffffffff, 0x0, 0x4a044}, 0x4010) 14m48.589371825s ago: executing program 4 (id=1678): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private1, [{0x2, 0x0, "a06a"}]}}}}}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x15, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x884) 14m47.182655328s ago: executing program 4 (id=1686): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000a40)=[{&(0x7f0000000700)=""/238, 0xee}], 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x76fd3c3d, 0x0, 0x1, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x50) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x1d, 0xf, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff0001, 0x0, 0x0, 0x0, 0xd}, [@ringbuf_query, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @generic={0x5, 0x1, 0x8, 0x5, 0x80000001}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffb}, @ldst={0x2, 0x3, 0x0, 0x4, 0x9, 0x4, 0xfffffffffffffff0}]}, &(0x7f0000000480)='GPL\x00', 0xe539, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0x0, 0x0, 0x5}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000540)=[{0x0, 0x5, 0xb, 0x9}, {0x4, 0x3, 0xb, 0x5}], 0x10, 0x4}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[], 0x48) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000640)={{0x1, 0x1, 0x18, r0}, '.\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x19, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x5, 0xd9, &(0x7f0000000280)=""/217, 0x0, 0x72, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x10, 0x7, 0x9e4}, 0x10, 0x0, r1, 0x1, 0x0, &(0x7f0000000840)=[{0x0, 0x5, 0xe, 0x3}], 0x10, 0xfb}, 0x94) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x14, 0x0, &(0x7f0000000240)) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000080)={0x0, 'team0\x00', {0x2}, 0x2}) socket$inet_sctp(0x2, 0x5, 0x84) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff27) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00'}, 0x18) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0x601}, 0x106) recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) 14m46.821905961s ago: executing program 4 (id=1687): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400ff8c60ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b800294429118927"], 0xfdef) 14m46.465933279s ago: executing program 4 (id=1688): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2c, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000440)) r4 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001040)={0xfc, {"a2e3ad09edfc09f91b44090987f70e06d038e7ff7fc6e5539b0d3d0e8b089b0732306c090890e0879b0a0ac6e70a9b3361959b4b9a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb000000002f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d6ced5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed700129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb21fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 14m45.558226508s ago: executing program 4 (id=1691): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@delneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0x2}, [@NDA_LLADDR={0xa, 0x2, @random="8f4c1e94dcc0"}, @NDA_VLAN={0x6, 0x5, 0x2}]}, 0x30}}, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./file0\x00') setpgid(r3, 0x0) (async) setpgid(r3, 0x0) setpgid(0x0, r3) (async) setpgid(0x0, r3) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 14m45.346550562s ago: executing program 4 (id=1693): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x14, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x401}}]}, &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6900}, 0x48) 14m29.476914355s ago: executing program 33 (id=1693): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x14, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x401}}]}, &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6900}, 0x48) 5m31.090289977s ago: executing program 6 (id=4031): getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000280)=0x1c, 0x40000) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001380)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5, 0x84811d8cc0e13774, 0x1, 0x1, 0x4, 0x42f5}, &(0x7f00000013c0)=0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000200)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000380)={{r2}, r3, 0x2, @unused=[0x7, 0x4, 0xb, 0x3], @name="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"}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r6, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r4}, 0x20) recvfrom$inet6(r4, &(0x7f0000000580)=""/44, 0x2c, 0x100f2, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='configfs\x00', 0x10, 0x0) r7 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x3, 0x1}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x26, 0x80}) mkdir(&(0x7f0000000040)='./file0\x00', 0x10b) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x800) 5m29.486597272s ago: executing program 6 (id=4037): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5664}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0xb}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x1800, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m28.172620616s ago: executing program 6 (id=4043): r0 = socket(0x10, 0x803, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000180)=0x819d, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x40000000015, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) 5m27.188599089s ago: executing program 6 (id=4044): socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1279c5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = syz_pidfd_open(0x0, 0x0) r1 = pidfd_getfd(r0, r0, 0x0) setns(r1, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffeffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'netdevsim0\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r4, &(0x7f0000000e00)=[{{&(0x7f0000000440)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, 0x0, 0xfffffffffffffe3a}, 0x800}, {{&(0x7f0000000900)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000980)=""/255, 0xff}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/18, 0x12}], 0x3, &(0x7f0000000ac0)=""/34, 0x22}, 0x81}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000cc0)=""/32, 0x20}, {&(0x7f00000010c0)=""/133, 0x85}], 0x2}, 0x3}], 0x3, 0x2, 0x0) 5m26.680001465s ago: executing program 6 (id=4047): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000fc", @ANYRES16=r1, @ANYBLOB="5b5e26bd7000ffdbdf2501000000050004000200000008000600ac14140e08"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90) 5m25.934220393s ago: executing program 6 (id=4051): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, 0x0, 0x1, 0x5003) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c, 0x0, 0xb0}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x20000000}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m25.173593272s ago: executing program 34 (id=4051): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, 0x0, 0x1, 0x5003) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c, 0x0, 0xb0}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x20000000}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m56.531307489s ago: executing program 2 (id=4765): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xb, &(0x7f0000002240)=@framed={{}, [@printk={@ld, {}, {0x7, 0x1, 0xb, 0x1, 0xa, 0xfffc}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x101}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m56.386665291s ago: executing program 2 (id=4766): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40182, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x1010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) r5 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xf7fa, 0x3180, 0x8000, 0x1d8, 0x0, r4}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r4, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r5, 0x627, 0x4c1, 0x43, 0x0, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000180)={0x0, 0x9, 0x2, "f66e1d7471a056871b0d69b3f9c5695b0849e7aa047f12a275b1536e87b37cf2", 0x32314742}) syz_open_procfs(0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2800003ce7006804347a93ab92d700000a0101000000005e1afff492cf8be2a744c8d5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000134000000140a03000000000000000000020000000900010073797a3000e7ff0008000340000000010900020073797a3100000000140000001100010000000000000000000000000a"], 0x98}}, 0x0) syz_usb_connect(0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 1m54.54997589s ago: executing program 7 (id=4771): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r0, 0x10, 0x30, 0x30, 0x0, @ib={0x1b, 0x4f53, 0xffff, {"15bf3c0782bafb0045c4377b8e39aed9"}, 0x7c4fd0a9, 0xa6, 0x5e}, @ib={0x1b, 0x38e, 0x0, {}, 0x9, 0x0, 0x8}}}, 0x118) epoll_create(0x76f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r1 = creat(0x0, 0xd) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000240), 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000000300000001001c000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0500000004000000040000000700000000000000", @ANYRES32, @ANYBLOB="000000000000004b12da00"/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="020000000100"/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfff, r4}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={r4, &(0x7f00000002c0)="e4bf54937c224a2549ff295419b8cde0a963b5aa4debddb9571b3be4be1526900027b7c84ddd5fab0841051093afdf701e", &(0x7f0000000000)=""/85}, 0x20) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe, 0x40010, r1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000240), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000480)={'#! ', './file0', [{0x20, '-):\'%'}, {0x20, '^--'}, {0x20, '/dev/nullb0\x00'}, {0x20, '-'}, {0x20, '/\\..{^v&'}, {0x20, 'GPL\x00'}], 0xa, "8305553b18d5ac320f70d89258bb31ac33f9ce8851e67a3cee83547268808828f588a09731af826bd6a7c78c3141156085d10418ac262a295b7b8c371cace39ed2d3a757a42bccdba6f0f67166d79de682734d4e172e8f116bc0311c660828ab7c183a86b44856e302be0c88b40405d524a994da42e9900e5cc2886423f7e84c58af0e908e6af9d1dc4860b6dc8c08d6ff"}, 0xc3) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101}}, './file0\x00'}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x18db80, 0x0) ioctl$BLKPG(r5, 0x1269, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@file={0xd3543da81561e06e, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) 1m53.002023544s ago: executing program 7 (id=4776): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41024}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x8012, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffdd7, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r5, 0xc0384707, &(0x7f0000000040)={0x1, 0x2, 0x0, 0x800000, 0x4, "3eccd8f9d20000000000001000000200000500"}) close_range(r0, 0xffffffffffffffff, 0x0) r6 = accept4$unix(r2, &(0x7f0000000300), &(0x7f0000000080)=0x6e, 0x0) recvmmsg$unix(r6, &(0x7f0000002200)=[{{&(0x7f0000000380), 0x6e, &(0x7f0000001680)=[{&(0x7f00000001c0)=""/59, 0x3b}, {&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000280)=""/47, 0x2f}, {&(0x7f0000001580)=""/240, 0xf0}], 0x6, &(0x7f0000001700)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000001800)=@abs, 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001880)=""/124, 0x7c}, {&(0x7f0000001900)=""/255, 0xff}, {&(0x7f0000001a00)=""/242, 0xf2}, {&(0x7f0000001b00)=""/88, 0x58}, {&(0x7f0000001b80)=""/230, 0xe6}, {&(0x7f0000001c80)=""/115, 0x73}, {&(0x7f0000001d00)=""/238, 0xee}, {&(0x7f0000001e00)=""/26, 0x1a}], 0x8}}, {{&(0x7f0000001ec0), 0x6e, &(0x7f0000002140)=[{&(0x7f0000001f40)=""/109, 0x6d}, {&(0x7f0000001fc0)=""/23, 0x17}, {&(0x7f0000002000)=""/196, 0xc4}, {&(0x7f0000002100)=""/39, 0x27}], 0x4, &(0x7f0000002180)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}], 0x3, 0x2141, &(0x7f00000022c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1m52.784811614s ago: executing program 2 (id=4777): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001030000000904"], 0x0) ioctl$VIDIOC_S_MODULATOR(0xffffffffffffffff, 0x40445637, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random="1c00"}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x40, 0x14, 0x1, 0x4, 0x0, {0xa}, [@typed={0x4}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x14, 0x2, 0x0, 0x1, [@generic="bf74a7dffdd8f8331b9dd3f2f9834b7f"]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000804}, 0x8018) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000200)={"0e12475ca3da7850f47dfc89599dc11c", 0x0, 0x0, {0x4, 0x1}, {0x10000, 0xffffff15}, 0x2, [0x1, 0x4, 0x8, 0x0, 0x800, 0x7, 0x3, 0x3, 0x3, 0xd, 0x7, 0x9, 0xffffffff80000000, 0xc38, 0x800, 0x30]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000300)={"51bf277717d7dcd793ec525856986a4c", r3, r4, {0xffffffff80000001, 0x2}, {0x0, 0x7d079ea2}, 0xf705, [0x8, 0x5, 0x200, 0x1, 0x61ad605a, 0x3, 0x2, 0x7, 0x200, 0x4, 0x2, 0x2, 0x0, 0xffffffffffff5ce1, 0x7, 0x3]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1m52.351286704s ago: executing program 1 (id=4778): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'gre0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="7a04", 0x0, 0x91eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="3320000000000400000000000010000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000080)={0x0, {0x1, 0xffffffff}}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m51.312423687s ago: executing program 7 (id=4781): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b705ff0f000200000000a80000000000070000000000ffe79500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES8], 0x0) (async) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES8], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) (async) r7 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r7, 0x501c4814, 0x0) (async) ioctl$HIDIOCGUSAGE(r7, 0x501c4814, 0x0) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f0000000140)=[{0x3, 0x1, {0x2, 0x0, 0x5}, {0x2, 0x16685b3dca15c672, 0x4}, 0xfe, 0x1}], 0x20) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, 0x0, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r9, {0xfffd, 0xfff1}, {0xffff, 0xffff}, {0xa, 0xfff3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x68, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xf, 0xa}, {}, {0xb, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x3c, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0x14, 0xee, 0x1, 0x3d3f, 0x0, 0xfff, 0x4003, 0x58f, [{0xebd, 0x1, 0x1, 0x7}]}}, @TCA_U32_INDEV={0x14, 0x8, 'veth0_to_bond\x00'}]}}]}, 0x68}}, 0x24040084) recvmmsg(r0, &(0x7f00000000c0), 0x1b, 0x0, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) r10 = syz_clone(0x2011, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000003c0)={{{@in, @in6=@loopback}}, {{@in6=@local}, 0x0, @in=@empty}}, &(0x7f0000000200)=0xe8) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000003c0)={{{@in, @in6=@loopback}}, {{@in6=@local}, 0x0, @in=@empty}}, &(0x7f0000000200)=0xe8) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)) (async) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000100)='\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="7472610000000000000000071f64c1756e694569", @ANYRESOCT=r3, @ANYBLOB=',noxattr,uname=+,access=any,cache=none,dfltgid=', @ANYRESHEX=r11, @ANYBLOB=',cachetag=/sys/kernel/debug/bluetooth/6lowpan_control\x00,version=9p2000,access=any,uname=,dont_measure,\x00']) (async) mount$9p_unix(&(0x7f0000000100)='\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="7472610000000000000000071f64c1756e694569", @ANYRESOCT=r3, @ANYBLOB=',noxattr,uname=+,access=any,cache=none,dfltgid=', @ANYRESHEX=r11, @ANYBLOB=',cachetag=/sys/kernel/debug/bluetooth/6lowpan_control\x00,version=9p2000,access=any,uname=,dont_measure,\x00']) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000ffffffff00000006000000850000000700000085000000a00000009500200000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000ffffffff00000006000000850000000700000085000000a00000009500200000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(r10, 0xa, &(0x7f00000006c0)={0x0, 0x6}, &(0x7f0000000700)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x54, 0x0, &(0x7f0000000240)=[@exit_looper, @request_death={0x400c630e, 0x3}, @free_buffer, @enter_looper, @increfs_done, @increfs_done={0x40106308, 0x3}, @acquire={0x40046305, 0x1}], 0x0, 0x0, 0x0}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) 1m50.94214419s ago: executing program 1 (id=4782): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x2}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40000044}, 0x4) close(0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) r6 = dup(r5) ioctl$LOOP_CLR_FD(r6, 0x4c01) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000002000)=""/102400, 0x19000) r8 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000300)={'fscrypt:', @desc3}, &(0x7f0000000340)={0x0, "c268ed04400081c10f8cb51af90b35f61290a4d92a894b76abae31280ee4818dcf71e8040fc87b34edf014293caa74008e6df82547ceca002922a560a2e7db40", 0x2b}, 0x48, 0xfffffffffffffffb) keyctl$KEYCTL_WATCH_KEY(0x20, r8, 0xffffffffffffffff, 0x10400000000035) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bind$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x8, 0x1, 0x4}, 0x10) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$VHOST_VDPA_GET_GROUP_NUM(0xffffffffffffffff, 0x8004af81, &(0x7f00000003c0)) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c00170000f000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) unshare(0x60400) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) 1m50.143825824s ago: executing program 7 (id=4783): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x800000, &(0x7f0000000040)=ANY=[@ANYBLOB='huge=advise \x00']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000b, 0x40010, 0xffffffffffffffff, 0xffff8000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) ftruncate(r0, 0x472e) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r1 = socket(0x10, 0x803, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) sendmsg$nl_netfilter(r1, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="ccbe77aa310001022abd4d029a3e3685eb693b6f7000fddbdff863ba551046c0608008002e00", @ANYRES32=r4, @ANYBLOB="07f0c19464decd551130c237d47bd57b21d2bec932bd57b867ffcb70398d5b03ab4321b44e1de946091b04471a381c5d954c8d903a9a3323e53806e5fa650abd32b4afd271f7d79018472ff0eaf60c58528638d4d080f689b9c1c3b2fa6c781871bef5a574f8326043f71089c2fe601e070a36f29719165d754193768ee41aa99ee440715bc348e8c43b6dd79fb1f63be61b366e98917a9604008a800800b4007f0000010800a700369eab68"], 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYRES32=r4, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x850}, 0x1) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) write(r8, &(0x7f0000000400)='<', 0x1) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x24}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r9, &(0x7f0000000340), &(0x7f0000000440)=@tcp=r8}, 0x20) shutdown(r8, 0x1) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000000)=0x200000000) 1m50.026672306s ago: executing program 1 (id=4785): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a090200"], 0x88}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000014000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32f50000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b657400000800024000000002"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) 1m49.881042037s ago: executing program 1 (id=4786): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getpgid(0x0) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008040}, 0x4000000) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4401000010000100feffffbf00010000fe880000000000000000000000000001ac1414aafe0000000000000000000000000107944e230005000000803a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000ff0100000000000002000000fcffffff000000002abd700004350000020001fd2000000000000000480003006465666c617465"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) 1m49.880219799s ago: executing program 7 (id=4787): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x4000, 0x0, 0x0, 0xf500}]) 1m48.862026405s ago: executing program 1 (id=4788): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40182, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x1010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) r5 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xf7fa, 0x3180, 0x8000, 0x1d8, 0x0, r4}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r4, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r5, 0x627, 0x4c1, 0x43, 0x0, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000180)={0x0, 0x9, 0x2, "f66e1d7471a056871b0d69b3f9c5695b0849e7aa047f12a275b1536e87b37cf2", 0x32314742}) syz_open_procfs(0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2800003ce7006804347a93ab92d700000a0101000000005e1afff492cf8be2a744c8d5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000134000000140a03000000000000000000020000000900010073797a3000e7ff0008000340000000010900020073797a3100000000140000001100010000000000000000000000000a"], 0x98}}, 0x0) syz_usb_connect(0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 1m48.758896563s ago: executing program 2 (id=4789): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sched_setattr(0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="3120000000000100", @ANYRES32, @ANYBLOB="080003000200000008001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r6 = io_uring_setup(0x168f, &(0x7f0000000400)={0x0, 0x631d, 0x2, 0x2, 0x2d8}) socket$l2tp(0x2, 0x2, 0x73) io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f0000002700)={0x119f, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0xf9}, {&(0x7f00000015c0)=""/4096, 0x400400}, {&(0x7f0000002a00)=""/88, 0x8}], 0x0}, 0x20) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f00000001c0)=ANY=[@ANYRESOCT, @ANYRES32=r7], 0x28) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 1m48.338647438s ago: executing program 5 (id=4790): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) r1 = socket$igmp(0x2, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000004340)=""/102376, 0x18fe8) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001040)=@filter={'filter\x00', 0x42, 0x4, 0x3b8, 0xffffffff, 0x238, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x320, 0x320, 0x320, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'wg1\x00', 'ip6tnl0\x00', {}, {}, 0x6c}, 0x287, 0x178, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x2, 0x4, 'bm\x00', "17fe85b2e7794dbf95fa4bbcb6a91c1f280c1999b9e9c91aec32acf40242838b14641ee58ffb2807b1457d49d59591426d860cbcf1d58ab1ffbb5187b72db33268933cac58623e417fbdbd0b8753f88cb456e7cd9ef85fd6861f486fb7bab7930c4e57def2f1e72aede0b46c35ed67a0549781a3d3fe2b88393de1719bea5584", 0x7e, 0x2, {0xf}}}, @common=@unspec=@limit={{0x48}, {0x7004, 0x80000, 0x0, 0xb}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x8000, 0x3ff, 0x89f0, 0xfeb9, 0x3f, 0x7f, 0x3}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "81d0042c436dbdac8bebde18b54dd11bf035c1d8b6b0e88ef5aee0eccad7"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) sendmsg$nl_route_sched(r0, 0x0, 0x44080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000080)={0x0, {{0xa, 0x4e22, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x5}}}, 0x108) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x3, 0x0, @mcast1={0xff, 0x7}, 0x8a}}, {{0xa, 0x0, 0x10001, @local}}}, 0x108) close(0x3) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) 1m46.672699576s ago: executing program 7 (id=4791): getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000280)=0x1c, 0x40000) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001380)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5, 0x84811d8cc0e13774, 0x1, 0x1, 0x4, 0x42f5}, &(0x7f00000013c0)=0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000380)={{r2}, 0x0, 0x2, @unused=[0x7, 0x4, 0xb, 0x3], @name="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"}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20) recvfrom$inet6(r3, &(0x7f0000000580)=""/44, 0x2c, 0x100f2, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='configfs\x00', 0x10, 0x0) r6 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x3, 0x1}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x26, 0x80}) mkdir(&(0x7f0000000040)='./file0\x00', 0x10b) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x800) 1m45.853092964s ago: executing program 0 (id=4792): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) fanotify_init(0xf00, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtaction={0xc4, 0x30, 0xffff, 0x0, 0x0, {}, [{0xb0, 0x1, [@m_ife={0xac, 0x1, 0x0, 0x0, {{0x8}, {0x84, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @link_local}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_PARMS={0x1c}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_SMAC={0xa, 0x4, @dev}, @TCA_IFE_METALST={0x28, 0x6, [@IFE_META_SKBMARK={0x8}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x7000000}}}}]}]}, 0xc4}}, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) unlinkat(r3, 0x0, 0x200) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 1m45.53947713s ago: executing program 5 (id=4793): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x5) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x7, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="4c000000140097f87059ae08060c040002ff0f020000000000001a350182fa73a69d35a21429b17cd02941601d60ffc0cca84708f7abca1b4e7d06a60300000072f750375ed08a5604000000", 0x4c}], 0x1}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r7) sendmsg$NL80211_CMD_JOIN_MESH(r7, 0x0, 0x40) syz_init_net_socket$rose(0xb, 0x5, 0x0) setpgid(0x0, 0x0) 1m44.120330281s ago: executing program 5 (id=4794): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="7daa000000000000711000000000130095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 1m43.922927701s ago: executing program 2 (id=4795): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd7000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x884) 1m43.180764991s ago: executing program 5 (id=4796): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f00003b7000/0x4000)=nil, 0x4000, 0x2000007, 0x8031, r1, 0x5bdf000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r4 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000100)=0x6) r7 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x32, &(0x7f0000000080)=ANY=[@ANYBLOB="0400c200000313d9887cfd2488a8bd00810005000806000108000604000eaaaa61b397aaaaaabbac141440ffffffffffffe0"], 0x0) recvmmsg(r7, 0x0, 0x0, 0x10001, 0x0) r8 = socket(0x1e, 0x4, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x2e288501978821b, 0x80) r9 = dup3(r8, r4, 0x0) recvmmsg$unix(r9, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000005140)=""/4111, 0x100f}], 0x1}}], 0x1, 0x58ca2280, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) 1m40.757462681s ago: executing program 0 (id=4797): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000240)={0x400, 0x30, 0xf0, 0x0, 0x0, 0x1f, 0x0, 0x0, {}, {0x1f}, {}, {0x2}, 0x0, 0x40, 0x0, 0x7, 0x0, 0x5, 0x3, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x20, 0x5}) 1m40.164117203s ago: executing program 5 (id=4798): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) socket(0x2a, 0x3, 0x1) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="ea", 0x1) sendmmsg$alg(r1, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="95", 0x1}], 0x1, 0x0, 0x0, 0x400401c}], 0x1, 0x8000) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000005c0)={0x0, 0x1}, 0x8) close(r1) socket$inet(0xa, 0x801, 0x84) (async) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) socket(0x2a, 0x3, 0x1) (async) listen(r0, 0x8) (async) accept4(r0, 0x0, 0x0, 0x0) (async) write(r1, &(0x7f0000000000)="ea", 0x1) (async) sendmmsg$alg(r1, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="95", 0x1}], 0x1, 0x0, 0x0, 0x400401c}], 0x1, 0x8000) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) (async) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000005c0)={0x0, 0x1}, 0x8) (async) close(r1) (async) 1m38.635110226s ago: executing program 0 (id=4799): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_mr_vif\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r3}) syz_emit_ethernet(0x7a, &(0x7f0000000640)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x40, 0x0, 0xff, @private1, @private2, [@hopopts={0x3a}], "f4c638bed6f068cc"}}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fc0200fffffff5000000000000000000fe8000000000000000000000000000aa"], 0x0) 1m38.621048014s ago: executing program 5 (id=4800): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40182, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) r2 = socket(0x1e, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x1010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) r6 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xf7fa, 0x3180, 0x8000, 0x1d8, 0x0, r5}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r5, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r6, 0x627, 0x4c1, 0x43, 0x0, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000180)={0x0, 0x9, 0x2, "f66e1d7471a056871b0d69b3f9c5695b0849e7aa047f12a275b1536e87b37cf2", 0x32314742}) syz_open_procfs(0x0, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2800003ce7006804347a93ab92d700000a0101000000005e1afff492cf8be2a744c8d5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000134000000140a03000000000000000000020000000900010073797a3000e7ff0008000340000000010900020073797a3100000000140000001100010000000000000000000000000a"], 0x98}}, 0x0) syz_usb_connect(0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 1m38.062383045s ago: executing program 2 (id=4801): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000100)={0x86, 0x8, 0x132c, 0x6, 0x10}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x890) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000080)={0x40000014}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000010c0)=0xb8, 0x4) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000040341d0a0000000000000109022400010000000009040000010300000009210000000122030009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x24, 0x6, {0x6, 0xc, "f5f32f97"}}, 0x0}, 0x0) 1m37.780985376s ago: executing program 0 (id=4802): r0 = socket$netlink(0x10, 0x3, 0x0) getpid() madvise(&(0x7f0000bdd000/0x2000)=nil, 0x2000, 0x61) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x800) mkdir(0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = fanotify_init(0x200, 0x40000) fanotify_mark(r6, 0x1, 0x8000018, r5, 0x0) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r7, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r9, 0x2) bind$alg(r9, 0x0, 0x0) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$netlink(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x8000) socket$inet6_tcp(0xa, 0x1, 0x0) 1m35.729118048s ago: executing program 0 (id=4803): getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000280)=0x1c, 0x40000) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001380)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5, 0x84811d8cc0e13774, 0x1, 0x1, 0x4, 0x42f5}, &(0x7f00000013c0)=0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000380)={{r2}, 0x0, 0x2, @unused=[0x7, 0x4, 0xb, 0x3], @name="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"}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20) recvfrom$inet6(r3, &(0x7f0000000580)=""/44, 0x2c, 0x100f2, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='configfs\x00', 0x10, 0x0) r6 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x3, 0x1}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x26, 0x80}) mkdir(&(0x7f0000000040)='./file0\x00', 0x10b) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x800) 1m34.940162787s ago: executing program 1 (id=4804): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x5) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x7, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="4c000000140097f87059ae08060c040002ff0f020000000000001a350182fa73a69d35a21429b17cd02941601d60ffc0cca84708f7abca1b4e7d06a60300000072f750375ed08a5604000000", 0x4c}], 0x1}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r7) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c050}, 0x40) syz_init_net_socket$rose(0xb, 0x5, 0x0) setpgid(0x0, 0x0) 1m29.379425032s ago: executing program 0 (id=4805): r0 = socket$netlink(0x10, 0x3, 0x0) getpid() madvise(&(0x7f0000bdd000/0x2000)=nil, 0x2000, 0x61) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x800) mkdir(0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r6 = fanotify_init(0x200, 0x40000) fanotify_mark(r6, 0x1, 0x8000018, r5, 0x0) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r7, 0x0, &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x22, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r9, 0x2) bind$alg(r9, 0x0, 0x0) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$netlink(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x8000) socket$inet6_tcp(0xa, 0x1, 0x0) 0s ago: executing program 35 (id=4791): getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000280)=0x1c, 0x40000) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001380)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5, 0x84811d8cc0e13774, 0x1, 0x1, 0x4, 0x42f5}, &(0x7f00000013c0)=0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000380)={{r2}, 0x0, 0x2, @unused=[0x7, 0x4, 0xb, 0x3], @name="63e1a882f0460b9e02a161be48ff547f1aeb9bf201d05b36e7934bc185389edce917933ba7b76a74945d34e7acfe6656653f98e337452f66eb3be6c663b23680ee2bebbc014629f3633259d4c46b2a62b3522f9ff672f771ae1c23ce32f729a01352cf296badd63694e6429e2c1af3b892067a415756b1b0cc9ba7dda3b28ea7a2eed4d96152f5a2bfda7166e41b79f790242d57b778c7b414e92506827475eff5fc4491795a5ab10a1af6cf81c85cfb0aafd33fb19351db234574c39a83ea1bb757aa01a4135bd7c51b1ed57586cf36108dfd4a629daa9e9e7f5f326b350074ffb21cd3e79d57c8f466f714827d9c6a1ee2b8368b95b073fc109feb80a8f66ccb2c633a8ee176839b3ab902f16a8f54674f884c965df4209e3f01dd1721c7c529f93d9053449f4088a56d534f71c3ab0ba1b3adac76450c7fa779f4f4c7268467cd1d827ab15b281083e059e9eb341569b743f6cf8288159f0146d0a4ee6f73a1cf57a7fa8ab741e9a3fa88ca480975610ca3510936642595a7f93e28cfa2092266329087d7196d916212e7e140f096137f36192e8887f82dfd24944632fa96b0c1919950e4d4f0211db03d354271e29c6993cfdd6ccd0b6bdccac523c5de0bc651443fa51e42454d1192ba94687918aa9c0df0c1505e5a26bf9e9b23925712043b1d842158d0bf635ed8d0f412efe0d6203c1b282ebaa61ccb69f45136e52211859a63e53d88152ce676eeba45ae892d1c40b7e7eb69c3d7faad3c96df5035ec2a8cc4cbebb15c6e9101b73a4ef5597889f7367ebdb2d40aaffd0f29ea02e01f85179ba61990795a885a10b66674ace81e67c56b5e1bd6206898af8aa4df97f61139333ddb218ab700c08fd0f96d895f3cc2597855c19fd5346480c16824f28cf4474a0873abf982ca8fa53d8f250748ba4a6ad6b63d04a97829769a18c1dec2ff3c3760587ceb2b87d1e8ff7095aee8e061880c4755830d44ece2355fe285356b93fe7db3a262f2ad7bf7e0167e711241929b9557ce0fe0f5ef356c230f1b077e766f42b7f31e35972583b79d8ae7363292d4fde80ce5a889655a456a01e5dd1bb2b67583dfc4c1139aeabdae31f0d1e4c54cf73719ac5aa1a91071a56066e1d81ee4ca42c22fdef6d023c3661660c3e974ef62758a50dccec36cec3bc3f40c945ddfd4d585a63a01c47f8dc65521c2d7bca230568d8d8af973dab9add23fd94b59f6a7e2e1b611d96a8a1a19f846e67e5ecf9032fcc0c9b8ddd7b097be97839ccd159e179649444287b3f284142f943fa1f3c04e7f2aa0fcbe846d64138dd5663dc41b32df4e8889d11362ce2d2a9505f50cbae86e1bed715776d76fe4367e40885b12c3893f2608cdb62b3fd44391d8bc9c35e2d9380aebeca3c78220a0d844d21a73afc46072f2dcd0765cba239b3d97a5f8caaf201b592b6bb5b2333ba9c7cce3b9d2d92e0359c69b9cb64c9d4f70eb8f22438e4ba18cd9beb09cbaf84115246a6b3a7c66beed5b3e79eabe0a02efc9df35299de8ee7d92f3b51a781b9ce16e96483234eeaeb49fb77fdc1b991548af850d8e7ba272a4f615b672e866a65d3ba1e0b96bb97300e72d1f6837005c1a0340e211a5b9b1be16016a6a4fe471734229bb428e6a51ca6f1825a5f136207ad34bd350eba1f94252b19ef46533b5abdb470d51c7d9b2fa0d75eae211fbac3c2ca9223709ffb720395bb74266243ccf3933e8db72251cad00276f45f84372409900b1d3635e738a888e1f4f316037d822c510e0dc5c0299912933ed89695b22afa8d0b1b46dd89b6977e9373b7d22d775f7fd74b6daa8ed412bdc4b611b1c0a4fd82a0e56e772ef3cfcfa7f3c8109e26f6843c4a581f91c83b9d52f0dcc3ad4b1bac139495c5bad22c7618906c588795e0b962847d280140049904001ae4d2fb66b7f5518dd77140fe42181c2f8b5c8fe2509ed523cb60c8fb3c3e763b94b6baa32d8f965c65a1d1159d37fce18d87affcd83a54083af81e1d96880ca13cee663a49f45926b3914375c53e99afdcb7e5aa82058f626a2bdc2df77f315280b714e0c9d9ade51d326d5c723bd22ea470533d38b04ee1ad922aa5375b0894da29b9ec965e49b3bdef984b0bf2edc7be040563718471da7a0fb3e7b12337fc6a0d8cce213900b7c59c11dff8e477a5ecf99e7cbdab0003cf7aaafcc461762d18218e32fdf6c8fa34bff63199ac081df5ca466629cb44d7cef3fa6673bcfc2cd59c57fa44a1cfcaf6ce5c04a3bf5d0e5110cee2569869abb4f387e99241baca102201e57d64549632cab80b6fcc47bab761a126f3e59831b373eafab9b6e1f1269a05720689838f4c88fcb3f4f7ee0a5cf70d6156c555f23b3b55b8a439189d107a15934f7208e2f00417497f3e09b66f43c7dacd7d434411fd8ccb7396e83b0457b0367369bfb68cb99d27852605abc8546132ec509535252ba54f42f5abd7e054a4615e431bd9fd9ef2415bdc495fac1e5c55a0cf44eed064e12aa56b065fcf6b48b298703e816eaf3acdd6f786734727b20d933db6abd77663708e19f42279bfb420a03e3afb75d3005670eac3b9fa0bc4bcb0b5291ab514c27d35e9303f41ff5a51736ff12c10778cdc6b76d2ffaa67b8b90852779fe49fe0ff337c55e2b07c0b4bfd71ef47257b8b067d16098cf7878181ccb8c1ff1516dd75c015ddf98b5c6f23d7d9440f60b733baa2ad7ef28f5d8089be40e1931104c48a06e5d4a1a79812a984eb6b1bbd1d67dbc134a56124a66adf05d3ef30e43008b05d7f58fe996aaa8fc01efb1ab562fbcee39fc67387844a00d5489d8b1755a4d9660b519a6273078eb272bcfae6f64132773fe7395f80418cabb25b46d21bbc88c9587d763e0258a64a09e5f87013eab6593f1ad307a505cab827e2a8bd3acd224d185a072a5c087bd73122d3de44c2e5ac5048a8a2dcfcfce0ef1fe89d908847b1797fade3a3f85b1b0a78e70a5d5fde7023a0fe335762dbd5f53a7b3bc46f3e0fa3633d0d2735e9f2190a3d2c067fd9e3ab2242ec5ef8c8f6fd75bec1d0685f67f34311be75ca8f8885b306bf1b486721d833c3b3c1c288ef1cb113035b2db7679eda549ee747d53b7e1be8617d19684953e425b2668a7941ee87200f34f6fa2d8c0eb593368bd8335a7a21fbac4b788c953a00503a819e756840be9ea06db575d580ed0d8d06408a58c7da14040999d14415be916fd45e441874f8364cbee57b9fdcf7a3752390fea4954b5af9552bc6c31eecca05dd16238d4e07f5fcef5e4d416a2f3ab7eb892477de7f525a62525842c4126b8b9ef4dc7c7647ff839415eb582828fd573e5b3ffcc91d778fd1d413fac92bbc3ff9991a5fe9494beb77f549767370598c09fb5c1476a91a669246358616ba54cf24c927a8b4e1b39f76fdf3d7ddac02a07f98f731f8eb81d236d93a3bad3d1d73328b34a190681b71988e50520785c31e2335e8d038d18a8037892e4a9e74bc47a05037a30e0078426c5ce49f46a4a1bdb287eb2135bc9b9a3b74103718f64d24b8488105599f38d9120b8e5a9eb56ccf6e5977b977a165d25b0062f4c8103a9e16b4916bebe8eed88e108fa5e5bd56b4195939af2422059e28802a110101ae0e542974ede5797b63a9a2ab1fb1b8576485ad252ea8037ae1cbd2ee03b4e1a374c8b0c1c1f2e5c50723d86db9ed3695631a417789675d4e30b60b45c28187a93ed3ea0d8b339b2924189b3c9171073e04e643930058696d3691d12454598b256f46b2133ecd33d3e798ef5e9f9d31166d3b0c0a4a7c93368675234e3c708078ff9d5088171a868c1a19e852b9d990e105de4d85bd88aac56b4008a1f1404add25f9f92b234b74a5e9ce472c91879babe231926931e03a06e82c500816e232f3aa76b97550dff78d03f9a3675348d77c17a440ce441c08ba814043d3c22e52872f585d6638dc7b0c8389c29f3d4956f782734232ad444d55f830c77473dba823d12d5b47c0cf3366fc98460c38d6944829e69773ef0fd125c6dc3647d52011f2d902fb1565dd46a3d8a741a87ef0c27eb9c54319999c16e9de90f51c73688ea679b15e69fc71ad99fd26319b22ca350cdccfd28e92c68e948e5fdf6e5b8e3b0d1b2b09d0d1184e665c94ef129e73844310f87b39f1ae1f8e4649f12222b1f8cca562078870927c16ca9c508b66656dd7b74acd5d412492166dee2dd32bd595d0eaaef8ad7ef6d4864d60898f2561a9c6d721460da1cc65eb382ff3dd434bec5ad0bb693b2e23a3c98de62027d5b2e4d373337deb7e4c61d9b3ed23df1480665abea2e8f26ebc278a430f9095eb47f160aa65313daf0a570b441cb80d3db205ae97e2aaf530bdcc9fc2552566bb288d65e659188c8d8d6adda260a87d253f23c9007277acdd8e48ba37c25a80d69a8ce161328ab48d174318fed90a36708f2b60856e66bef5727aef77ef209b0230bf32bfd2fb0d8e1e773bc27d5052ac34683350f634b0741c41e24e30faef2013d5af92b8402888e48330322f72f2d78027090bd1ba3d3cd77326b21ea7ab0f59475bd6f6d990efdde0acdcd5e2130cfe0eacbb91584880ec5db62f092acf442303aab72e3208f5e8640b281e94edd8a087191d994484cae5a04d84178e936a74624995ecb5b3b7c16a3a3eb1246c98662be460d3bb84f604d87be39c4fddb8a5717c28fc28967b197192da5bb181e63615176aa390648923a040c98b495984c95df7e03a4bece57ac4b4cc125d3c48ee2c27ec9fde795c750a7ec745c7fbc5fcab3b6d4140bbb8d638c9fa7ba61cbf2921bc39bea8b3810813c6a2b178378fc786bdd3d791140342c873204f539476ba5480601b1acbdcc18573d408898929307c8229e87a23c0453208ce7478d00f4206beb28dcdb605cf886bd773d7f1e399fed0de5eeb53c943c141b7a73b2b039dffb11d3550c6028d77edd31e7114dd31fadb7c8e2feb1f1f70ec05fe67864d8f301ec5c10f1311445eb090072123616ce3980188c33632ea73f6977549b145634107abad65365633d824d69f3c9ac2064dd33f2e20fcb9981b365a117f6bb34e765c1b11a9a79d5f9fcf0353dad6f3800cfc48a0a13230ef0ee870cd688ca561242ea349757a008934429aec3a32ef3dc19f6b5a7b4cc5ce5ece6bfb24ec8c2c4769de5633bf67e0607bd99b119164a099cc117aec47cde81367e36abeb5f995762e907edcd1c1cfe28ac845a61ebcf4103ae988a7984947af27d47c85bec85d097d04918547a2090f79db18f54f6a9c2367e13d425add48d87744e1ba48711f0a844f351dd0d644334930e8424d5bc2c0bf840842eee489c93a5b23611d4945755bd1a14e94076101bf1cf0ed979a232ec2d715f987f7a47480e01309f8b39865ff69cbb6001db60126053f20590a8ccf17fe853e450436d0b4fac8b24988d0a2f9748776b1e9174e4a4f84e0c38eb6e93d7a5d1a9f90016ac7dd9841a3778a991a958d357c27e13c83000f50d30107baca0b68fd2d3b6ab37303bf58d2990b22227316df71419e3a326aabd8dd81fda8705606ecbec8e9833ac78b2cf7c789c7f46fa1df657b7e38ece32cb4437f478d5658dc5bb24c8674aead1581ff0cd92bfcdab7f2041d53b6667dac785bab638866ce554d4e2ddac2f9f57135b4689c585d2689e0d362f11f8b38bd293a0007ccde6bd04911239eb75388847cb8f7a05330daaec41fa069fd9"}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20) recvfrom$inet6(r3, &(0x7f0000000580)=""/44, 0x2c, 0x100f2, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='configfs\x00', 0x10, 0x0) r6 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x3, 0x1}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x26, 0x80}) mkdir(&(0x7f0000000040)='./file0\x00', 0x10b) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x800) kernel console output (not intermixed with test programs): ]=SOFTLOCKUP [ 1178.662460][T21352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1178.662472][T21352] Call Trace: [ 1178.662479][T21352] [ 1178.662488][T21352] dump_stack_lvl+0x16c/0x1f0 [ 1178.662519][T21352] should_fail_ex+0x512/0x640 [ 1178.662547][T21352] ? fs_reclaim_acquire+0xae/0x150 [ 1178.662576][T21352] should_failslab+0xc2/0x120 [ 1178.662602][T21352] __kmalloc_noprof+0xeb/0x910 [ 1178.662631][T21352] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1178.662664][T21352] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1178.662689][T21352] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1178.662717][T21352] ? tomoyo_profile+0x47/0x60 [ 1178.662748][T21352] tomoyo_path_number_perm+0x245/0x580 [ 1178.662770][T21352] ? tomoyo_path_number_perm+0x237/0x580 [ 1178.662794][T21352] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1178.662819][T21352] ? find_held_lock+0x2b/0x80 [ 1178.662871][T21352] ? find_held_lock+0x2b/0x80 [ 1178.662897][T21352] ? hook_file_ioctl_common+0x144/0x410 [ 1178.662933][T21352] ? __fget_files+0x20e/0x3c0 [ 1178.662964][T21352] security_file_ioctl+0x9b/0x240 [ 1178.662991][T21352] __x64_sys_ioctl+0xb7/0x210 [ 1178.663016][T21352] do_syscall_64+0xcd/0xf80 [ 1178.663042][T21352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1178.663062][T21352] RIP: 0033:0x7f0b84b8f749 [ 1178.663080][T21352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1178.663098][T21352] RSP: 002b:00007f0b85985038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1178.663117][T21352] RAX: ffffffffffffffda RBX: 00007f0b84de5fa0 RCX: 00007f0b84b8f749 [ 1178.663131][T21352] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000004 [ 1178.663143][T21352] RBP: 00007f0b85985090 R08: 0000000000000000 R09: 0000000000000000 [ 1178.663154][T21352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1178.663166][T21352] R13: 00007f0b84de6038 R14: 00007f0b84de5fa0 R15: 00007ffc6e43c9c8 [ 1178.663195][T21352] [ 1178.663205][T21352] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1179.003106][T21354] binder: 21353:21354 ioctl c0306201 0 returned -14 [ 1181.059881][T21371] FAULT_INJECTION: forcing a failure. [ 1181.059881][T21371] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1181.073625][T21371] CPU: 0 UID: 0 PID: 21371 Comm: syz.0.4304 Tainted: G L syzkaller #0 PREEMPT(full) [ 1181.073663][T21371] Tainted: [L]=SOFTLOCKUP [ 1181.073671][T21371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1181.073684][T21371] Call Trace: [ 1181.073691][T21371] [ 1181.073701][T21371] dump_stack_lvl+0x16c/0x1f0 [ 1181.073732][T21371] should_fail_ex+0x512/0x640 [ 1181.073768][T21371] _copy_from_user+0x2e/0xd0 [ 1181.073800][T21371] copy_msghdr_from_user+0x98/0x160 [ 1181.073823][T21371] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1181.073861][T21371] ___sys_sendmsg+0xfe/0x1d0 [ 1181.073885][T21371] ? __pfx____sys_sendmsg+0x10/0x10 [ 1181.073943][T21371] __sys_sendmsg+0x16d/0x220 [ 1181.073966][T21371] ? __pfx___sys_sendmsg+0x10/0x10 [ 1181.074016][T21371] do_syscall_64+0xcd/0xf80 [ 1181.074046][T21371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1181.074068][T21371] RIP: 0033:0x7f5dfe98f749 [ 1181.074087][T21371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1181.074107][T21371] RSP: 002b:00007f5dff840038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1181.074125][T21371] RAX: ffffffffffffffda RBX: 00007f5dfebe5fa0 RCX: 00007f5dfe98f749 [ 1181.074137][T21371] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1181.074147][T21371] RBP: 00007f5dff840090 R08: 0000000000000000 R09: 0000000000000000 [ 1181.074158][T21371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1181.074168][T21371] R13: 00007f5dfebe6038 R14: 00007f5dfebe5fa0 R15: 00007ffcfc3594d8 [ 1181.074193][T21371] [ 1181.429187][T21375] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4306'. [ 1181.438696][T21375] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4306'. [ 1182.333034][T21389] netlink: 'syz.0.4309': attribute type 10 has an invalid length. [ 1182.341123][T21389] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4309'. [ 1182.751087][T21389] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1182.849625][T21392] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4310'. [ 1183.126755][ T5941] usb 6-1: USB disconnect, device number 47 [ 1183.861983][T21413] netlink: 'syz.5.4314': attribute type 10 has an invalid length. [ 1183.869821][T21413] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4314'. [ 1183.879072][T21413] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1185.205992][T21424] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4319'. [ 1185.250345][T21426] gfs2: error -5 reading superblock [ 1185.310372][T21431] netlink: 'syz.0.4321': attribute type 1 has an invalid length. [ 1185.434408][T21433] bond5: (slave vxcan7): The slave device specified does not support setting the MAC address [ 1185.491627][T21433] bond5: (slave vxcan7): Error -95 calling set_mac_address [ 1185.585695][T21436] macvlan2: entered promiscuous mode [ 1185.593362][T21436] macvlan2: entered allmulticast mode [ 1185.600538][T21436] bond5: entered promiscuous mode [ 1185.606832][T21436] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1185.620603][T21436] bond5: left promiscuous mode [ 1185.761095][T19885] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1186.053861][T19885] usb 2-1: Using ep0 maxpacket: 8 [ 1186.098604][T19885] usb 2-1: config 128 has an invalid interface number: 61 but max is 2 [ 1186.123987][T19885] usb 2-1: config 128 contains an unexpected descriptor of type 0x1, skipping [ 1186.155299][T19885] usb 2-1: config 128 has an invalid interface number: 144 but max is 2 [ 1186.170789][T19885] usb 2-1: config 128 has an invalid interface number: 96 but max is 2 [ 1186.292653][T21450] tipc: Enabled bearer , priority 10 [ 1186.501444][T19885] usb 2-1: config 128 contains an unexpected descriptor of type 0x2, skipping [ 1186.510996][T19885] usb 2-1: config 128 contains an unexpected descriptor of type 0x1, skipping [ 1186.519913][T19885] usb 2-1: config 128 has no interface number 0 [ 1186.538318][T19885] usb 2-1: config 128 has no interface number 1 [ 1186.550875][T19885] usb 2-1: config 128 has no interface number 2 [ 1186.567501][T19885] usb 2-1: config 128 interface 61 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1186.609263][T19885] usb 2-1: config 128 interface 61 altsetting 4 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 1186.635849][T19885] usb 2-1: config 128 interface 61 altsetting 4 has a duplicate endpoint with address 0x3, skipping [ 1186.667212][T19885] usb 2-1: config 128 interface 61 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 1186.684421][T19885] usb 2-1: config 128 interface 61 altsetting 4 has a duplicate endpoint with address 0x3, skipping [ 1186.701006][T21448] tipc: Disabling bearer [ 1187.580945][T19885] usb 2-1: config 128 interface 61 altsetting 4 has a duplicate endpoint with address 0x3, skipping [ 1187.650909][T19885] usb 2-1: config 128 interface 61 altsetting 4 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1187.685312][T19885] usb 2-1: config 128 interface 61 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1187.709069][T21461] netlink: 'syz.5.4331': attribute type 14 has an invalid length. [ 1187.733236][T19885] usb 2-1: config 128 interface 61 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1187.877135][T19885] usb 2-1: config 128 interface 61 altsetting 4 endpoint 0x4 has invalid maxpacket 495, setting to 64 [ 1188.133178][T19885] usb 2-1: config 128 interface 144 altsetting 109 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1188.195760][T19885] usb 2-1: config 128 interface 144 altsetting 109 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 1188.270752][T19885] usb 2-1: config 128 interface 144 altsetting 109 has a duplicate endpoint with address 0xD, skipping [ 1188.320931][T19885] usb 2-1: config 128 interface 144 altsetting 109 has a duplicate endpoint with address 0xE, skipping [ 1188.356851][T19885] usb 2-1: config 128 interface 96 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 1188.389708][T19885] usb 2-1: config 128 interface 96 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 1188.414346][T19885] usb 2-1: config 128 interface 96 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 1188.504032][T21469] netlink: 'syz.7.4325': attribute type 10 has an invalid length. [ 1188.522829][T21469] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4325'. [ 1188.541126][T19885] usb 2-1: config 128 interface 96 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 1188.602820][T19885] usb 2-1: config 128 interface 96 altsetting 8 has a duplicate endpoint with address 0xD, skipping [ 1188.603597][T21469] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1188.642480][T21472] binder: BINDER_SET_CONTEXT_MGR already set [ 1188.658829][T21472] binder: 21471:21472 ioctl 4018620d 200000000040 returned -16 [ 1188.668355][T19885] usb 2-1: config 128 interface 96 altsetting 8 has a duplicate endpoint with address 0xD, skipping [ 1188.699621][T19885] usb 2-1: config 128 interface 96 altsetting 8 has an endpoint descriptor with address 0xC2, changing to 0x82 [ 1188.762450][T19885] usb 2-1: config 128 interface 96 altsetting 8 has a duplicate endpoint with address 0x82, skipping [ 1188.784853][T19885] usb 2-1: config 128 interface 96 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 1188.810543][T19885] usb 2-1: config 128 interface 61 has no altsetting 0 [ 1188.824237][T19885] usb 2-1: config 128 interface 144 has no altsetting 0 [ 1188.839695][T19885] usb 2-1: config 128 interface 96 has no altsetting 0 [ 1188.857862][T19885] usb 2-1: string descriptor 0 read error: -71 [ 1188.881182][T19885] usb 2-1: New USB device found, idVendor=148f, idProduct=f101, bcdDevice=5c.95 [ 1189.062972][T21479] netlink: 'syz.1.4336': attribute type 1 has an invalid length. [ 1189.074843][T19885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.131985][T19885] usb 2-1: can't set config #128, error -71 [ 1189.181267][T19885] usb 2-1: USB disconnect, device number 100 [ 1189.186274][ T30] audit: type=1400 audit(1767547188.654:1663): avc: denied { bind } for pid=21454 comm="syz.2.4329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1189.359654][T21481] bond5: (slave vxcan9): The slave device specified does not support setting the MAC address [ 1189.475760][T21481] bond5: (slave vxcan9): Error -95 calling set_mac_address [ 1189.638372][T21482] macvlan0: entered promiscuous mode [ 1189.702242][T21482] macvlan0: entered allmulticast mode [ 1189.724353][T21482] bond5: entered promiscuous mode [ 1189.746854][T21482] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1189.809785][T21482] bond5: left promiscuous mode [ 1191.825563][T21507] x_tables: ip_tables: string.1 match: invalid size 160 (kernel) != (user) 232 [ 1193.227317][T21527] netlink: 'syz.0.4349': attribute type 1 has an invalid length. [ 1193.309051][T21528] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1193.370630][T21530] bond6: (slave vxcan7): The slave device specified does not support setting the MAC address [ 1193.446492][T21530] bond6: (slave vxcan7): Error -95 calling set_mac_address [ 1193.976586][T21531] macvlan2: entered promiscuous mode [ 1193.982101][T21531] macvlan2: entered allmulticast mode [ 1193.991740][T21531] bond6: entered promiscuous mode [ 1194.020637][T21531] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1194.479458][T21531] bond6: left promiscuous mode [ 1194.514516][ T30] audit: type=1400 audit(1767547193.984:1664): avc: denied { read } for pid=21540 comm="syz.2.4352" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1194.594971][ T30] audit: type=1400 audit(1767547194.044:1665): avc: denied { setattr } for pid=21540 comm="syz.2.4352" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1194.653710][T21544] netlink: 'syz.1.4347': attribute type 10 has an invalid length. [ 1194.666318][T21544] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4347'. [ 1194.678414][T21544] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1195.630591][T21554] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4357'. [ 1195.694123][T21558] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4359'. [ 1198.414441][T21592] bridge0: port 2(bridge_slave_1) entered blocking state [ 1198.421572][T21592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1198.428978][T21592] bridge0: port 1(bridge_slave_0) entered blocking state [ 1198.436236][T21592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1198.458031][T21593] netlink: 'syz.7.4366': attribute type 4 has an invalid length. [ 1198.465875][T21593] netlink: 17 bytes leftover after parsing attributes in process `syz.7.4366'. [ 1198.485641][T21592] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1198.869261][T21600] overlayfs: missing 'lowerdir' [ 1199.571782][T21616] syzkaller0: entered promiscuous mode [ 1199.577297][T21616] syzkaller0: entered allmulticast mode [ 1201.982311][T21654] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4383'. [ 1202.332880][ T5939] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1202.888365][ T5939] usb 6-1: device descriptor read/64, error -71 [ 1203.620983][ T5939] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1203.812410][ T5939] usb 6-1: device descriptor read/64, error -71 [ 1203.931836][ T5939] usb usb6-port1: attempt power cycle [ 1204.316328][ T5939] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1204.395093][ T5939] usb 6-1: device descriptor read/8, error -71 [ 1205.812500][T21688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4395'. [ 1205.939860][T21696] netlink: 'syz.0.4398': attribute type 1 has an invalid length. [ 1206.091427][T21701] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4398'. [ 1206.963654][T21699] bond7: (slave vxcan7): The slave device specified does not support setting the MAC address [ 1206.991664][T21699] bond7: (slave vxcan7): Error -95 calling set_mac_address [ 1207.227187][T21707] macvlan2: entered promiscuous mode [ 1207.233128][T21707] macvlan2: entered allmulticast mode [ 1207.259456][T21707] bond7: entered promiscuous mode [ 1207.279887][T21707] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1208.053990][T21707] bond7: left promiscuous mode [ 1208.290745][T21714] tipc: Enabled bearer , priority 0 [ 1208.303004][T21704] tipc: Disabling bearer [ 1209.113878][T21742] FAULT_INJECTION: forcing a failure. [ 1209.113878][T21742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1209.143228][T21742] CPU: 1 UID: 0 PID: 21742 Comm: syz.1.4407 Tainted: G L syzkaller #0 PREEMPT(full) [ 1209.143252][T21742] Tainted: [L]=SOFTLOCKUP [ 1209.143256][T21742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1209.143264][T21742] Call Trace: [ 1209.143269][T21742] [ 1209.143274][T21742] dump_stack_lvl+0x16c/0x1f0 [ 1209.143294][T21742] should_fail_ex+0x512/0x640 [ 1209.143314][T21742] _copy_from_user+0x2e/0xd0 [ 1209.143332][T21742] binder_thread_write+0xa5c/0x4e40 [ 1209.143354][T21742] ? __lock_acquire+0x436/0x2890 [ 1209.143368][T21742] ? __pfx_binder_thread_write+0x10/0x10 [ 1209.143383][T21742] ? binder_debug+0xde/0x1a0 [ 1209.143398][T21742] ? binder_debug+0xde/0x1a0 [ 1209.143409][T21742] ? __pfx_binder_debug+0x10/0x10 [ 1209.143421][T21742] ? find_held_lock+0x2b/0x80 [ 1209.143446][T21742] binder_ioctl+0x2916/0x7360 [ 1209.143467][T21742] ? tomoyo_path_number_perm+0x18d/0x580 [ 1209.143485][T21742] ? __pfx_binder_ioctl+0x10/0x10 [ 1209.143501][T21742] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1209.143516][T21742] ? do_vfs_ioctl+0x128/0x14f0 [ 1209.143530][T21742] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1209.143544][T21742] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1209.143565][T21742] ? hook_file_ioctl_common+0x144/0x410 [ 1209.143588][T21742] ? selinux_file_ioctl+0x180/0x270 [ 1209.143602][T21742] ? selinux_file_ioctl+0xb4/0x270 [ 1209.143618][T21742] ? __pfx_binder_ioctl+0x10/0x10 [ 1209.143632][T21742] __x64_sys_ioctl+0x18e/0x210 [ 1209.143646][T21742] do_syscall_64+0xcd/0xf80 [ 1209.143663][T21742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.143675][T21742] RIP: 0033:0x7fd9d418f749 [ 1209.143685][T21742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1209.143697][T21742] RSP: 002b:00007fd9d4fdb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1209.143708][T21742] RAX: ffffffffffffffda RBX: 00007fd9d43e5fa0 RCX: 00007fd9d418f749 [ 1209.143717][T21742] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000004 [ 1209.143724][T21742] RBP: 00007fd9d4fdb090 R08: 0000000000000000 R09: 0000000000000000 [ 1209.143731][T21742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1209.143738][T21742] R13: 00007fd9d43e6038 R14: 00007fd9d43e5fa0 R15: 00007fffc8cf7998 [ 1209.143754][T21742] [ 1209.143761][T21742] binder: 21739:21742 ioctl c0306201 2000000001c0 returned -14 [ 1209.156192][T21748] netlink: 'syz.2.4409': attribute type 1 has an invalid length. [ 1209.925332][T21748] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1213.156618][T21783] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4421'. [ 1213.577066][T21795] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4422'. [ 1213.597145][T21796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4420'. [ 1214.914602][T21825] syzkaller0: entered promiscuous mode [ 1214.933249][T21825] syzkaller0: entered allmulticast mode [ 1214.942359][T21825] 0: reclassify loop, rule prio 0, protocol 800 [ 1216.140986][ T5939] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1216.480998][ T5939] usb 2-1: Using ep0 maxpacket: 16 [ 1216.543243][T21840] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4434'. [ 1216.552676][T21840] bridge_slave_1: left allmulticast mode [ 1216.591272][T21840] bridge_slave_1: left promiscuous mode [ 1216.606254][ T5939] usb 2-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=3a.55 [ 1216.650419][T21840] bridge0: port 2(bridge_slave_1) entered disabled state [ 1216.663736][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.683852][ T5939] usb 2-1: Product: syz [ 1216.688091][ T5939] usb 2-1: Manufacturer: syz [ 1216.693735][ T5939] usb 2-1: SerialNumber: syz [ 1216.699718][ T5939] usb 2-1: config 0 descriptor?? [ 1216.709766][ T5939] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:704a [ 1216.771715][T21840] bridge_slave_0: left allmulticast mode [ 1216.829457][T21840] bridge_slave_0: left promiscuous mode [ 1216.900309][T21840] bridge0: port 1(bridge_slave_0) entered disabled state [ 1216.955783][ T5939] gspca_sn9c20x: Write register 1000 failed -71 [ 1217.041179][ T5939] gspca_sn9c20x: Device initialization failed [ 1217.047416][ T5939] gspca_sn9c20x 2-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 1217.057163][ T5939] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1217.101275][ T5939] usb 2-1: USB disconnect, device number 101 [ 1219.484898][T21863] syzkaller0: entered promiscuous mode [ 1219.616887][T21863] syzkaller0: entered allmulticast mode [ 1220.834170][T21869] tipc: Enabled bearer , priority 0 [ 1221.765959][T21872] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4442'. [ 1222.021139][T21861] tipc: Resetting bearer [ 1224.849305][T21861] tipc: Disabling bearer [ 1225.200565][ T5939] tipc: Node number set to 3118220828 [ 1225.888383][T21891] pimreg: entered allmulticast mode [ 1225.931029][T21896] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1225.959985][T21891] pimreg: left allmulticast mode [ 1226.354823][ T5939] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1226.416152][T21911] netlink: 'syz.5.4455': attribute type 10 has an invalid length. [ 1226.424102][T21911] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4455'. [ 1226.433147][T21911] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1226.622378][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1226.653447][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1226.654212][T21910] ubi: mtd0 is already attached to ubi31 [ 1226.688594][ T5939] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1226.730154][ T5939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.948516][ T5939] usb 3-1: config 0 descriptor?? [ 1227.095747][T21920] devpts: Bad value for 'max' [ 1227.141272][ T30] audit: type=1400 audit(1767547226.564:1666): avc: denied { mount } for pid=21919 comm="syz.1.4460" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1227.200008][ T30] audit: type=1400 audit(1767547226.564:1667): avc: denied { remount } for pid=21919 comm="syz.1.4460" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1227.543987][T21930] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4464'. [ 1228.108777][ T5939] hid-led 0003:1D34:000A.0016: probe with driver hid-led failed with error -71 [ 1228.128489][ T5939] usb 3-1: USB disconnect, device number 84 [ 1228.219996][ T30] audit: type=1400 audit(1767547227.684:1668): avc: denied { unmount } for pid=17191 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1228.614716][T21946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4469'. [ 1228.890422][T21948] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4470'. [ 1230.166946][T21960] netlink: 'syz.2.4473': attribute type 10 has an invalid length. [ 1230.174821][T21960] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4473'. [ 1230.183835][T21960] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1230.237248][T21963] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4474'. [ 1230.331172][T21963] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4474'. [ 1230.417652][T21963] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4474'. [ 1230.449353][T21963] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4474'. [ 1232.197259][T21976] pimreg: entered allmulticast mode [ 1233.325322][T21994] netlink: 'syz.2.4481': attribute type 1 has an invalid length. [ 1233.485157][T21994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4481'. [ 1233.496316][T21994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4481'. [ 1233.518195][T21998] bond12: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1233.586476][T21998] bond12: (slave vxcan3): Error -95 calling set_mac_address [ 1233.743428][T22000] macvlan2: entered promiscuous mode [ 1233.755388][T22000] macvlan2: entered allmulticast mode [ 1233.765679][T22000] bond12: entered promiscuous mode [ 1233.775729][T22000] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1233.807102][T22000] bond12: left promiscuous mode [ 1233.889087][T22002] wireguard2: entered promiscuous mode [ 1233.913478][T22002] wireguard2: entered allmulticast mode [ 1235.367555][T21974] pimreg: left allmulticast mode [ 1235.553669][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 1235.707270][T22023] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1235.716977][T22023] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1235.729119][T22023] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null. [ 1235.815300][T22019] netlink: 'syz.0.4489': attribute type 10 has an invalid length. [ 1235.823197][T22019] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4489'. [ 1235.947208][T22019] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1237.144083][T22042] netlink: 'syz.5.4496': attribute type 10 has an invalid length. [ 1237.152011][T22042] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4496'. [ 1237.161148][T22042] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1238.291887][ T5890] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1238.422789][T22048] FAULT_INJECTION: forcing a failure. [ 1238.422789][T22048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1238.472905][ T5890] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1238.586747][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.593171][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.617304][ T5890] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1238.640629][T22048] CPU: 0 UID: 0 PID: 22048 Comm: syz.2.4498 Tainted: G L syzkaller #0 PREEMPT(full) [ 1238.640667][T22048] Tainted: [L]=SOFTLOCKUP [ 1238.640674][T22048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1238.640688][T22048] Call Trace: [ 1238.640696][T22048] [ 1238.640705][T22048] dump_stack_lvl+0x16c/0x1f0 [ 1238.640737][T22048] should_fail_ex+0x512/0x640 [ 1238.640774][T22048] _copy_to_user+0x32/0xd0 [ 1238.640809][T22048] simple_read_from_buffer+0xcb/0x170 [ 1238.640842][T22048] proc_fail_nth_read+0x197/0x240 [ 1238.640864][T22048] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1238.640886][T22048] ? rw_verify_area+0xcf/0x6c0 [ 1238.640906][T22048] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1238.640925][T22048] vfs_read+0x1e4/0xcf0 [ 1238.640953][T22048] ? __pfx___mutex_lock+0x10/0x10 [ 1238.640981][T22048] ? __pfx_vfs_read+0x10/0x10 [ 1238.641012][T22048] ? __fget_files+0x20e/0x3c0 [ 1238.641046][T22048] ksys_read+0x12a/0x250 [ 1238.641072][T22048] ? __pfx_ksys_read+0x10/0x10 [ 1238.641099][T22048] ? fput+0x70/0xf0 [ 1238.641121][T22048] do_syscall_64+0xcd/0xf80 [ 1238.641150][T22048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1238.641170][T22048] RIP: 0033:0x7f876358e15c [ 1238.641192][T22048] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1238.641212][T22048] RSP: 002b:00007f8764488030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1238.641233][T22048] RAX: ffffffffffffffda RBX: 00007f87637e5fa0 RCX: 00007f876358e15c [ 1238.641247][T22048] RDX: 000000000000000f RSI: 00007f87644880a0 RDI: 0000000000000005 [ 1238.641259][T22048] RBP: 00007f8764488090 R08: 0000000000000000 R09: 0000000000000000 [ 1238.641271][T22048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1238.641283][T22048] R13: 00007f87637e6038 R14: 00007f87637e5fa0 R15: 00007fff46691dc8 [ 1238.641311][T22048] [ 1239.067036][T22053] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4500'. [ 1239.153896][ T5890] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1239.363495][ T5890] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1239.376531][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.396798][ T5890] usb 2-1: Product: syz [ 1239.410900][ T5890] usb 2-1: Manufacturer: syz [ 1239.420875][ T5890] usb 2-1: SerialNumber: syz [ 1239.478316][ T5890] cdc_mbim 2-1:1.0: skipping garbage [ 1241.186302][ T5890] cdc_mbim 2-1:1.0: bind() failure [ 1241.200993][ T5890] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 1241.324498][T22084] netlink: 'syz.1.4510': attribute type 10 has an invalid length. [ 1241.332414][T22084] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4510'. [ 1241.341441][T22084] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1241.438437][ T5890] usb 2-1: USB disconnect, device number 102 [ 1241.494166][T22088] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4512'. [ 1241.682305][T22090] netlink: 'syz.2.4511': attribute type 10 has an invalid length. [ 1241.690132][T22090] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4511'. [ 1241.700103][T22090] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1241.779659][T22095] netlink: 'syz.1.4514': attribute type 11 has an invalid length. [ 1241.800814][T22095] netlink: 199788 bytes leftover after parsing attributes in process `syz.1.4514'. [ 1242.843365][T22103] vlan2: entered promiscuous mode [ 1242.848570][T22103] ip6gretap0: entered promiscuous mode [ 1244.260042][T22122] netlink: 'syz.2.4522': attribute type 10 has an invalid length. [ 1244.268315][T22122] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4522'. [ 1244.277377][T22122] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1244.320451][T22118] syzkaller0: entered promiscuous mode [ 1244.326220][T22118] syzkaller0: entered allmulticast mode [ 1244.382948][T22116] tipc: Enabled bearer , priority 0 [ 1244.417884][T22114] tipc: Resetting bearer [ 1245.414331][T22114] tipc: Disabling bearer [ 1245.460343][T19886] tipc: Node number set to 4003867213 [ 1245.893509][ T5926] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1246.071474][ T5926] usb 3-1: Using ep0 maxpacket: 32 [ 1246.670818][ T5926] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1246.703647][T22154] binder: 22152:22154 ioctl c0306201 2000000003c0 returned -22 [ 1246.721468][ T5926] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1246.731239][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1246.742093][ T5926] usb 3-1: Product: syz [ 1246.748892][ T5926] usb 3-1: Manufacturer: syz [ 1246.757554][ T5926] usb 3-1: SerialNumber: syz [ 1246.854538][T22161] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4535'. [ 1247.074161][ T5926] usb 3-1: config 0 descriptor?? [ 1247.084053][T22139] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1247.475747][T22175] netlink: 'syz.7.4536': attribute type 10 has an invalid length. [ 1247.483783][T22175] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4536'. [ 1247.593882][T22175] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1247.951036][T14116] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1248.111025][T14116] usb 6-1: Using ep0 maxpacket: 32 [ 1248.174821][T14116] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1248.191274][T14116] usb 6-1: config 0 has no interface number 0 [ 1248.255702][T14116] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1248.286632][T14116] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.295128][T19886] usb 3-1: USB disconnect, device number 85 [ 1248.320631][T14116] usb 6-1: Product: syz [ 1248.352187][T14116] usb 6-1: Manufacturer: syz [ 1248.357019][T14116] usb 6-1: SerialNumber: syz [ 1248.410345][T14116] usb 6-1: config 0 descriptor?? [ 1248.453686][T14116] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1248.515360][T22139] team0 (unregistering): Port device team_slave_0 removed [ 1248.568619][T22139] team0 (unregistering): Port device team_slave_1 removed [ 1248.760727][T22193] syzkaller0: entered promiscuous mode [ 1248.768090][T22193] syzkaller0: entered allmulticast mode [ 1248.962430][T22207] ubi: mtd0 is already attached to ubi31 [ 1250.380348][T14116] usb 6-1: qt2_attach - failed to power on unit: -71 [ 1250.388751][T14116] quatech2 6-1:0.51: probe with driver quatech2 failed with error -71 [ 1250.421824][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1250.434762][ T5983] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1250.442744][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1250.454064][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1250.465103][T14116] usb 6-1: USB disconnect, device number 52 [ 1250.504472][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1250.514845][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1250.711109][ T5983] usb 2-1: Using ep0 maxpacket: 8 [ 1251.067392][ T5983] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1251.076837][ T5983] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1251.084939][ T5983] usb 2-1: Product: syz [ 1251.089176][ T5983] usb 2-1: Manufacturer: syz [ 1251.093947][ T5983] usb 2-1: SerialNumber: syz [ 1251.101652][ T5983] usb 2-1: config 0 descriptor?? [ 1251.109927][ T5983] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1251.315686][T22212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1251.327094][T22212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1252.367824][ T5983] gspca_sonixj: reg_r err -110 [ 1252.394900][ T5983] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 1252.432199][T19886] usb 2-1: USB disconnect, device number 103 [ 1252.761120][ T5830] Bluetooth: hci5: command tx timeout [ 1253.117102][T22226] netlink: 27 bytes leftover after parsing attributes in process `syz.1.4550'. [ 1254.009280][T22213] lo speed is unknown, defaulting to 1000 [ 1254.077628][T22230] openvswitch: netlink: IP tunnel dst address not specified [ 1254.463601][T22213] lo speed is unknown, defaulting to 1000 [ 1254.470734][T22213] lo speed is unknown, defaulting to 1000 [ 1254.594846][T22243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4557'. [ 1254.844475][ T5830] Bluetooth: hci5: command tx timeout [ 1255.342476][T19886] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1255.511414][T19886] usb 6-1: Using ep0 maxpacket: 8 [ 1255.518480][T19886] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1255.546265][T22258] pimreg: entered allmulticast mode [ 1255.571388][T19886] usb 6-1: config 4 interface 0 has no altsetting 0 [ 1255.580535][T19886] usb 6-1: string descriptor 0 read error: -22 [ 1255.591120][T19886] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1255.605333][T22213] chnl_net:caif_netlink_parms(): no params data found [ 1255.621081][T19886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.649132][T19886] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1255.670491][T19886] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1255.683078][T19886] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1255.690675][T19886] usb 6-1: media controller created [ 1255.709822][T19886] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1256.152762][T19886] zl10353_read_register: readreg error (reg=127, ret==0) [ 1256.205352][T19297] bridge_slave_1: left allmulticast mode [ 1256.211689][T19297] bridge_slave_1: left promiscuous mode [ 1256.217432][T19297] bridge0: port 2(bridge_slave_1) entered disabled state [ 1256.235632][T19297] bridge_slave_0: left allmulticast mode [ 1256.241342][T19297] bridge_slave_0: left promiscuous mode [ 1256.251361][T19297] bridge0: port 1(bridge_slave_0) entered disabled state [ 1256.297414][T19886] usb 6-1: USB disconnect, device number 53 [ 1256.577629][T22283] netlink: 'syz.1.4566': attribute type 1 has an invalid length. [ 1256.881085][ T5926] SELinux: failure in sel_netif_sid_slow(), invalid network interface (133) [ 1256.889975][ T5926] SELinux: failure in sel_netif_sid_slow(), invalid network interface (131) [ 1256.899171][ T5926] SELinux: failure in sel_netif_sid_slow(), invalid network interface (128) [ 1256.923482][ T5830] Bluetooth: hci5: command tx timeout [ 1257.261165][ T5941] SELinux: failure in sel_netif_sid_slow(), invalid network interface (128) [ 1257.281083][ T5941] SELinux: failure in sel_netif_sid_slow(), invalid network interface (133) [ 1257.321249][ T5941] SELinux: failure in sel_netif_sid_slow(), invalid network interface (131) [ 1257.688099][T19297] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 1257.777957][T19297] bond5 (unregistering): (slave bridge4): Releasing active interface [ 1257.869072][T19297] bond7 (unregistering): (slave bridge5): Releasing active interface [ 1257.915576][T19297] bond8 (unregistering): (slave bridge6): Releasing active interface [ 1257.957958][T19297] bond9 (unregistering): (slave bridge7): Releasing active interface [ 1258.132553][ T30] audit: type=1400 audit(1767547257.604:1669): avc: denied { getopt } for pid=22297 comm="syz.5.4571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1258.133016][T19297] bond10 (unregistering): (slave bridge8): Releasing active interface [ 1258.622709][T19297] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1258.632644][T19297] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1258.644259][T19297] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1258.653604][T19297] bond0 (unregistering): Released all slaves [ 1258.807876][T19297] bond1 (unregistering): Released all slaves [ 1258.886795][T19297] bond2 (unregistering): Released all slaves [ 1258.907425][T19297] bond3 (unregistering): Released all slaves [ 1258.922711][T19297] bond4 (unregistering): Released all slaves [ 1258.937801][T19297] bond5 (unregistering): Released all slaves [ 1259.009239][ T5830] Bluetooth: hci5: command tx timeout [ 1259.057306][T22305] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4573'. [ 1259.146944][T19297] bond6 (unregistering): Released all slaves [ 1259.158156][T19297] bond7 (unregistering): Released all slaves [ 1259.169225][T19297] bond8 (unregistering): Released all slaves [ 1259.182155][T19297] bond9 (unregistering): Released all slaves [ 1259.195074][T19297] bond10 (unregistering): Released all slaves [ 1259.325747][T19886] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1259.350717][T19297] bond11 (unregistering): Released all slaves [ 1259.361999][T19297] bond12 (unregistering): Released all slaves [ 1259.409189][T22286] macvlan0: entered promiscuous mode [ 1259.414684][T22286] macvlan0: entered allmulticast mode [ 1259.420755][T22286] bond6: entered promiscuous mode [ 1259.430441][T22286] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1259.455470][T22286] bond6: left promiscuous mode [ 1259.497926][T19886] usb 6-1: Using ep0 maxpacket: 8 [ 1259.514803][T19886] usb 6-1: config 159 interface 0 has no altsetting 0 [ 1259.535642][T22257] pimreg: left allmulticast mode [ 1259.577151][T19886] usb 6-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice=80.b9 [ 1259.599717][T19886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.611594][T19886] usb 6-1: Product: syz [ 1259.619037][T19886] usb 6-1: Manufacturer: syz [ 1259.626538][T19886] usb 6-1: SerialNumber: syz [ 1259.709610][T19297] tipc: Left network mode [ 1259.711396][T22213] bridge0: port 1(bridge_slave_0) entered blocking state [ 1259.752448][T22213] bridge0: port 1(bridge_slave_0) entered disabled state [ 1259.769163][T22213] bridge_slave_0: entered allmulticast mode [ 1259.806821][T22213] bridge_slave_0: entered promiscuous mode [ 1260.062388][T22213] bridge0: port 2(bridge_slave_1) entered blocking state [ 1260.092299][T22213] bridge0: port 2(bridge_slave_1) entered disabled state [ 1260.112637][T22213] bridge_slave_1: entered allmulticast mode [ 1260.127009][T19886] snd-usb-audio 6-1:159.0: probe with driver snd-usb-audio failed with error -22 [ 1260.167042][T22213] bridge_slave_1: entered promiscuous mode [ 1260.177744][T22319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1260.189449][T19886] usb 6-1: USB disconnect, device number 54 [ 1260.198722][T22319] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1260.242431][T22319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1260.266063][T22319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1260.669865][ T5890] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1260.777046][T22329] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4579'. [ 1260.841394][ T5890] usb 2-1: Using ep0 maxpacket: 16 [ 1260.851485][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1260.868844][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1260.889880][ T5890] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1260.928062][ T5890] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1260.946542][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1260.976206][T22213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1260.994770][ T5890] usb 2-1: config 0 descriptor?? [ 1261.024024][T22213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1261.170775][T22213] team0: Port device team_slave_0 added [ 1261.194326][T22213] team0: Port device team_slave_1 added [ 1261.413330][T22345] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1261.435470][ T5890] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1261.443374][ T5890] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1261.451618][ T5890] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1261.461163][ T5890] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1261.469731][ T5890] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1261.478091][ T5890] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1261.489032][ T5890] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1261.496932][ T5890] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1261.505461][ T5890] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1261.513837][T22213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1261.513881][ T5890] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1261.562389][T22213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1261.627482][T22213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1261.680052][ T5890] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0017/input/input28 [ 1261.701286][ T5941] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1261.713410][ T5890] microsoft 0003:045E:07DA.0017: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1261.742154][T22348] wireguard0: entered promiscuous mode [ 1261.747717][T22348] wireguard0: entered allmulticast mode [ 1261.780264][T22213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1261.787910][T22213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1261.824772][T22213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1261.880439][ T5941] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 1261.905082][ T5941] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1261.969123][ T5941] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1262.008908][ T5941] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1262.038743][ T5941] usb 6-1: Manufacturer: syz [ 1262.076622][ T5941] usb 6-1: config 0 descriptor?? [ 1262.135732][T22213] hsr_slave_0: entered promiscuous mode [ 1262.167304][T22213] hsr_slave_1: entered promiscuous mode [ 1262.232323][T22213] debugfs: 'hsr0' already exists in 'hsr' [ 1262.251819][ T5941] rc_core: IR keymap rc-hauppauge not found [ 1262.257757][ T5941] Registered IR keymap rc-empty [ 1262.258567][T22213] Cannot create hsr debugfs directory [ 1262.269901][ T5941] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1262.306105][T19297] hsr_slave_0: left promiscuous mode [ 1262.313201][ T5941] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input29 [ 1262.326400][T19297] hsr_slave_1: left promiscuous mode [ 1262.336409][T19297] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1262.346497][T19297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1262.359942][T19297] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1262.557778][ C1] igorplugusb 6-1:0.0: receive overflow, at least 4 lost [ 1262.654403][ T5941] usb 2-1: USB disconnect, device number 104 [ 1262.799311][T19886] usb 6-1: USB disconnect, device number 55 [ 1264.129081][T22369] syzkaller0: entered promiscuous mode [ 1264.138761][T22369] syzkaller0: entered allmulticast mode [ 1264.457563][ T30] audit: type=1400 audit(1767547263.924:1670): avc: denied { recv } for pid=23 comm="ksoftirqd/1" saddr=10.128.0.169 src=43218 daddr=10.128.0.29 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1267.862891][ T30] audit: type=1400 audit(1767547267.334:1671): avc: denied { append } for pid=22398 comm="syz.7.4599" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 1268.087143][T14116] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1268.770934][T14116] usb 6-1: Using ep0 maxpacket: 16 [ 1268.847884][T14116] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1268.927321][T14116] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.129386][T14116] usb 6-1: config 0 descriptor?? [ 1269.182661][T14116] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1269.353775][T22415] netlink: 296 bytes leftover after parsing attributes in process `syz.1.4605'. [ 1269.399434][T22415] gre1: entered promiscuous mode [ 1269.513758][T22213] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1269.554626][T22213] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1269.622827][T22213] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1269.720989][T22213] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1270.266329][T22391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1270.476567][T22391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1270.563607][T14116] gspca_sonixj: reg_w1 err -110 [ 1270.581662][T14116] sonixj 6-1:0.0: probe with driver sonixj failed with error -110 [ 1270.632760][T22213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1270.643010][T22439] netlink: 'syz.0.4610': attribute type 1 has an invalid length. [ 1270.651820][T22213] 8021q: adding VLAN 0 to HW filter on device team0 [ 1270.678892][ T3806] bridge0: port 1(bridge_slave_0) entered blocking state [ 1270.685994][ T3806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1270.710475][T22439] bond8: (slave vxcan7): The slave device specified does not support setting the MAC address [ 1270.722303][T22439] bond8: (slave vxcan7): Error -95 calling set_mac_address [ 1270.742332][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 1270.749430][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1270.792034][T22213] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1270.804622][T22213] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1270.907218][T22439] macvlan2: entered promiscuous mode [ 1270.954366][T22446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1270.963045][T22439] macvlan2: entered allmulticast mode [ 1270.978393][T22444] ubi: mtd0 is already attached to ubi31 [ 1270.984448][T22439] bond8: entered promiscuous mode [ 1270.989919][T22439] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1270.997110][T22446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1271.042331][T22439] bond8: left promiscuous mode [ 1271.164707][T22213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1271.306326][T22213] veth0_vlan: entered promiscuous mode [ 1271.327493][T22213] veth1_vlan: entered promiscuous mode [ 1271.396941][T22213] veth0_macvtap: entered promiscuous mode [ 1271.413064][T22213] veth1_macvtap: entered promiscuous mode [ 1271.465619][T22213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1271.487786][T22213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1271.511687][T19297] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.527144][T19297] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.544416][T19297] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.555409][T19297] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.686445][ T3806] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1271.695749][ T3806] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1271.739222][ T3806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1271.748734][ T3806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1272.085227][ T5890] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1272.101995][ T5941] usb 6-1: USB disconnect, device number 56 [ 1272.288421][T22468] wireguard3: entered promiscuous mode [ 1272.301285][T22468] wireguard3: entered allmulticast mode [ 1272.326307][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 224, setting to 64 [ 1272.342328][ T5890] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 1272.351624][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 1272.359620][ T5890] usb 3-1: Manufacturer: syz [ 1272.367141][ T5890] usb 3-1: config 0 descriptor?? [ 1272.397909][ T5890] uvcvideo 3-1:0.0: Found UVC 0.00 device (18ec:3288) [ 1272.409664][ T5890] uvcvideo 3-1:0.0: No valid video chain found. [ 1272.894497][ T5890] usb 3-1: USB disconnect, device number 86 [ 1273.371113][T22485] netlink: 'syz.5.4622': attribute type 10 has an invalid length. [ 1273.379316][T22485] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4622'. [ 1273.402990][T22485] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1274.337164][T22492] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1275.966691][T22509] netlink: 'syz.1.4632': attribute type 1 has an invalid length. [ 1276.145289][T22516] netlink: 236 bytes leftover after parsing attributes in process `syz.0.4634'. [ 1276.165403][T22509] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1276.846338][T22512] bond7: (slave batadv1): Opening slave failed [ 1278.743314][ T30] audit: type=1400 audit(1767547278.214:1672): avc: denied { getopt } for pid=22546 comm="syz.1.4643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1279.447835][T22559] netlink: 'syz.2.4647': attribute type 10 has an invalid length. [ 1279.467274][T22559] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1279.477580][T22559] siw: device registration error -23 [ 1279.860488][T22564] netlink: 'syz.1.4645': attribute type 10 has an invalid length. [ 1279.868371][T22564] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4645'. [ 1279.878309][T22564] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1280.612346][T22575] netlink: 'syz.5.4652': attribute type 14 has an invalid length. [ 1280.693446][T22582] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1280.711401][ T5890] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1280.876962][ T5890] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1280.963894][ T5890] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1281.098510][ T5890] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1281.218307][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.229861][T22573] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1281.257112][ T5890] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1281.655370][T22592] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1281.661792][T22592] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1283.116527][ T5890] usb 2-1: USB disconnect, device number 105 [ 1283.781711][T19604] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1283.949160][T19604] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1283.964316][T19604] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.981449][T19604] usb 3-1: Product: syz [ 1284.001339][ T5983] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1284.017423][T19604] usb 3-1: Manufacturer: syz [ 1284.024587][T19604] usb 3-1: SerialNumber: syz [ 1284.050506][T19604] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1284.109227][T20710] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1284.171081][ T5983] usb 2-1: Using ep0 maxpacket: 16 [ 1284.178577][ T5983] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1284.194579][T22630] FAULT_INJECTION: forcing a failure. [ 1284.194579][T22630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1284.213261][ T5983] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1284.217291][T22630] CPU: 0 UID: 0 PID: 22630 Comm: syz.7.4668 Tainted: G L syzkaller #0 PREEMPT(full) [ 1284.217324][T22630] Tainted: [L]=SOFTLOCKUP [ 1284.217331][T22630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1284.217345][T22630] Call Trace: [ 1284.217352][T22630] [ 1284.217361][T22630] dump_stack_lvl+0x16c/0x1f0 [ 1284.217393][T22630] should_fail_ex+0x512/0x640 [ 1284.217427][T22630] _copy_from_user+0x2e/0xd0 [ 1284.217458][T22630] binder_thread_write+0xa5c/0x4e40 [ 1284.217495][T22630] ? __lock_acquire+0x436/0x2890 [ 1284.217520][T22630] ? __pfx_binder_thread_write+0x10/0x10 [ 1284.217546][T22630] ? binder_debug+0xde/0x1a0 [ 1284.217572][T22630] ? binder_debug+0xde/0x1a0 [ 1284.217592][T22630] ? __pfx_binder_debug+0x10/0x10 [ 1284.217614][T22630] ? find_held_lock+0x2b/0x80 [ 1284.217662][T22630] binder_ioctl+0x2916/0x7360 [ 1284.217699][T22630] ? tomoyo_path_number_perm+0x18d/0x580 [ 1284.217733][T22630] ? __pfx_binder_ioctl+0x10/0x10 [ 1284.217761][T22630] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1284.217787][T22630] ? do_vfs_ioctl+0x128/0x14f0 [ 1284.217815][T22630] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1284.217839][T22630] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1284.217877][T22630] ? hook_file_ioctl_common+0x144/0x410 [ 1284.217916][T22630] ? selinux_file_ioctl+0x180/0x270 [ 1284.217942][T22630] ? selinux_file_ioctl+0xb4/0x270 [ 1284.217969][T22630] ? __pfx_binder_ioctl+0x10/0x10 [ 1284.217996][T22630] __x64_sys_ioctl+0x18e/0x210 [ 1284.218021][T22630] do_syscall_64+0xcd/0xf80 [ 1284.218050][T22630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1284.218071][T22630] RIP: 0033:0x7f0b84b8f749 [ 1284.218088][T22630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1284.218108][T22630] RSP: 002b:00007f0b85985038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1284.218128][T22630] RAX: ffffffffffffffda RBX: 00007f0b84de5fa0 RCX: 00007f0b84b8f749 [ 1284.218142][T22630] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000004 [ 1284.218156][T22630] RBP: 00007f0b85985090 R08: 0000000000000000 R09: 0000000000000000 [ 1284.218168][T22630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1284.218181][T22630] R13: 00007f0b84de6038 R14: 00007f0b84de5fa0 R15: 00007ffc6e43c9c8 [ 1284.218210][T22630] [ 1284.218286][T22630] binder: 22629:22630 ioctl c0306201 2000000001c0 returned -14 [ 1284.491622][ T5983] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1284.499719][ T5983] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1284.509758][ T5983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.566663][ T5983] usb 2-1: config 0 descriptor?? [ 1284.668705][T22634] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4669'. [ 1284.678776][T22618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1284.687910][T22618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1284.705011][T22618] random: crng reseeded on system resumption [ 1284.737048][T14116] usb 3-1: USB disconnect, device number 87 [ 1285.048269][ T5983] hid_parser_main: 5 callbacks suppressed [ 1285.048361][ T5983] nzxt-smart2 0003:1E71:2009.0018: unknown main item tag 0x0 [ 1285.081036][T22639] [U] [ 1285.085124][T22639] [U] [ 1285.087826][T22639] [U] [ 1285.090512][T22639] [U] [ 1285.096710][T22639] [U] [ 1285.099419][T22639] [U] [ 1285.102106][T22639] [U] [ 1285.104794][T22639] [U] [ 1285.108123][ T5983] nzxt-smart2 0003:1E71:2009.0018: unknown main item tag 0x0 [ 1285.110320][T22643] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4671'. [ 1285.115848][ T5983] nzxt-smart2 0003:1E71:2009.0018: unknown main item tag 0x0 [ 1285.133778][T22639] [U] [ 1285.136475][T22639] [U] [ 1285.139138][T22639] [U] [ 1285.142162][ T5983] nzxt-smart2 0003:1E71:2009.0018: unknown main item tag 0x0 [ 1285.150400][ T5983] nzxt-smart2 0003:1E71:2009.0018: unknown main item tag 0x0 [ 1285.179632][T20710] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1285.180246][T22643] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4671'. [ 1285.189363][T20710] ath9k_htc: Failed to initialize the device [ 1285.208461][ T5983] nzxt-smart2 0003:1E71:2009.0018: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 1285.222848][T22623] [U] [ 1285.233958][T14116] usb 3-1: ath9k_htc: USB layer deinitialized [ 1285.373903][T22643] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4671'. [ 1285.382317][ T5983] usb 2-1: USB disconnect, device number 106 [ 1285.406014][T22643] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4671'. [ 1285.471120][ T30] audit: type=1326 audit(1767547284.924:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22644 comm="syz.7.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b84b8f749 code=0x7ffc0000 [ 1285.686249][T22654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4675'. [ 1285.699634][ T30] audit: type=1326 audit(1767547284.924:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22644 comm="syz.7.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f0b84b46c47 code=0x7ffc0000 [ 1285.724481][ T30] audit: type=1326 audit(1767547284.924:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22644 comm="syz.7.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f0b84b46357 code=0x7ffc0000 [ 1285.769979][ T30] audit: type=1326 audit(1767547284.924:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22644 comm="syz.7.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b84b8f749 code=0x7ffc0000 [ 1285.828970][T22659] netlink: 'syz.2.4673': attribute type 10 has an invalid length. [ 1285.836886][T22659] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4673'. [ 1285.848701][T22659] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1285.855416][T22659] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1285.882548][T22659] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1285.977784][ T30] audit: type=1326 audit(1767547284.924:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22644 comm="syz.7.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f0b84b463b6 code=0x7ffc0000 [ 1286.002983][ T30] audit: type=1326 audit(1767547284.924:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22644 comm="syz.7.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b84b8f749 code=0x7ffc0000 [ 1286.198973][ T30] audit: type=1326 audit(1767547284.924:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22644 comm="syz.7.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b84b8f749 code=0x7ffc0000 [ 1286.236212][ T30] audit: type=1326 audit(1767547284.924:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22644 comm="syz.7.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0b84b8f749 code=0x7ffc0000 [ 1286.369243][ T30] audit: type=1326 audit(1767547284.924:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22644 comm="syz.7.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0b84b8f749 code=0x7ffc0000 [ 1286.482904][T22661] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4676'. [ 1286.512826][ T30] audit: type=1326 audit(1767547284.924:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22644 comm="syz.7.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b84b8f749 code=0x7ffc0000 [ 1287.563002][T22684] netlink: 'syz.5.4682': attribute type 1 has an invalid length. [ 1287.702360][T22684] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1287.772491][T22684] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 1287.860596][T22688] macvlan2: entered promiscuous mode [ 1287.874086][T22691] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1287.921078][T22688] macvlan2: entered allmulticast mode [ 1287.927092][T22688] bond5: entered promiscuous mode [ 1287.935156][T22688] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1288.284048][T22688] bond5: left promiscuous mode [ 1288.709885][T22697] binder: 22696:22697 ioctl 4805 0 returned -22 [ 1289.950985][T22704] netlink: 'syz.2.4689': attribute type 1 has an invalid length. [ 1290.197156][T22708] netlink: 'syz.0.4691': attribute type 10 has an invalid length. [ 1290.205111][T22708] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4691'. [ 1290.720298][T22708] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1290.945944][T22706] macvlan2: entered promiscuous mode [ 1291.179652][T22706] macvlan2: entered allmulticast mode [ 1292.085556][T22729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4698'. [ 1292.108514][T22729] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4698'. [ 1292.153877][T22733] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1292.233808][T22733] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1292.251181][T19886] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1292.286774][T22733] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1292.286791][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 1292.286845][ T30] audit: type=1400 audit(1767547291.754:1716): avc: denied { firmware_load } for pid=22728 comm="syz.0.4698" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1292.423019][T19886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1292.436776][T19886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1292.449894][T19886] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 1292.459900][T19886] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 1292.468388][T19886] usb 3-1: Manufacturer: syz [ 1292.489968][T19886] usb 3-1: config 0 descriptor?? [ 1292.519496][T19886] uvcvideo 3-1:0.0: Found UVC 0.00 device (18ec:3288) [ 1292.528852][T22740] netlink: 'syz.5.4690': attribute type 1 has an invalid length. [ 1292.529878][T19886] uvcvideo 3-1:0.0: No valid video chain found. [ 1292.731910][T19886] usb 3-1: USB disconnect, device number 88 [ 1292.749539][T22740] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1292.760812][T22746] bond6: (slave batadv1): Opening slave failed [ 1294.151739][T22764] netlink: 'syz.1.4706': attribute type 1 has an invalid length. [ 1294.195589][T22764] bond8: (slave vxcan9): The slave device specified does not support setting the MAC address [ 1294.211662][T22764] bond8: (slave vxcan9): Error -95 calling set_mac_address [ 1294.370173][T22773] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4709'. [ 1294.424003][T22764] macvlan0: entered promiscuous mode [ 1294.591039][T22501] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1294.611055][T22764] macvlan0: entered allmulticast mode [ 1294.619071][T22769] xt_ecn: cannot match TCP bits for non-tcp packets [ 1294.632794][T22764] bond8: entered promiscuous mode [ 1294.638550][T22764] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1294.674135][T22764] bond8: left promiscuous mode [ 1294.679019][T22769] can: request_module (can-proto-0) failed. [ 1294.688067][T22769] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4708'. [ 1294.883580][T22501] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1294.895104][T22501] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1294.997299][T22501] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1295.041360][T22501] usb 6-1: config 0 descriptor?? [ 1301.546245][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1301.565439][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.572061][T22501] usb 6-1: can't set config #0, error -110 [ 1301.579961][ T30] audit: type=1804 audit(1767547294.524:1717): pid=22785 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.7.4710" name="bus" dev="ramfs" ino=78789 res=1 errno=0 [ 1301.773949][T19604] usb 6-1: USB disconnect, device number 57 [ 1301.859460][T22793] syzkaller0: entered promiscuous mode [ 1301.877810][T22793] syzkaller0: entered allmulticast mode [ 1301.936482][T22793] tipc: Enabled bearer , priority 0 [ 1301.945326][T22792] tipc: Resetting bearer [ 1301.967549][T22792] tipc: Disabling bearer [ 1302.118990][T22802] Cannot find del_set index 0 as target [ 1302.231077][T19604] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1302.391063][T19604] usb 6-1: Using ep0 maxpacket: 16 [ 1302.403877][T19604] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1302.429977][T19604] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1302.534673][T19604] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1302.547590][T19604] usb 6-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 1302.589412][T19604] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.624048][T19604] usb 6-1: config 0 descriptor?? [ 1302.862414][T22813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4720'. [ 1303.134040][T19604] hid-multitouch 0003:0457:07DA.0019: unknown main item tag 0x0 [ 1303.164864][T19604] hid-multitouch 0003:0457:07DA.0019: unknown main item tag 0x0 [ 1303.176553][T19604] hid-multitouch 0003:0457:07DA.0019: unknown main item tag 0x0 [ 1303.212577][T19604] hid-multitouch 0003:0457:07DA.0019: unknown main item tag 0x0 [ 1303.262606][T19604] hid-multitouch 0003:0457:07DA.0019: unknown main item tag 0x0 [ 1303.299196][T19604] hid-multitouch 0003:0457:07DA.0019: unknown main item tag 0x0 [ 1303.319183][T19604] hid-multitouch 0003:0457:07DA.0019: unknown main item tag 0x0 [ 1303.334233][T19604] hid-multitouch 0003:0457:07DA.0019: unknown main item tag 0x0 [ 1303.361145][T19604] hid-multitouch 0003:0457:07DA.0019: unknown main item tag 0x0 [ 1303.378998][T19604] hid-multitouch 0003:0457:07DA.0019: unknown main item tag 0x0 [ 1303.390101][T19604] hid-multitouch 0003:0457:07DA.0019: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.5-1/input0 [ 1303.408078][T19604] usb 6-1: USB disconnect, device number 58 [ 1304.342036][T22843] pimreg: entered allmulticast mode [ 1305.229559][T22843] pimreg: left allmulticast mode [ 1306.865256][T22861] IPv6: Can't replace route, no match found [ 1307.121728][ T30] audit: type=1400 audit(1767547306.434:1718): avc: denied { map } for pid=22860 comm="syz.5.4734" path="socket:[79751]" dev="sockfs" ino=79751 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1307.749346][T22874] netlink: 'syz.7.4738': attribute type 10 has an invalid length. [ 1307.757325][T22874] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4738'. [ 1307.787476][T22874] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1309.640802][T22893] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1310.558057][T22900] m1Ie5nè‹Ò: entered promiscuous mode [ 1310.653689][T22903] netlink: 'syz.1.4746': attribute type 14 has an invalid length. [ 1310.782516][T22906] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4747'. [ 1310.884753][T22908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4748'. [ 1311.670739][T22914] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4749'. [ 1313.009968][T22928] netlink: 25 bytes leftover after parsing attributes in process `syz.2.4755'. [ 1313.035837][T22932] openvswitch: netlink: Flow actions attr not present in new flow. [ 1313.062522][T22928] lo speed is unknown, defaulting to 1000 [ 1313.482605][T22938] netlink: 'syz.7.4757': attribute type 10 has an invalid length. [ 1313.490492][T22938] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4757'. [ 1313.504731][T22938] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1313.958763][T12375] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1314.111174][T12375] usb 3-1: Using ep0 maxpacket: 16 [ 1314.144361][T22928] lo speed is unknown, defaulting to 1000 [ 1314.990330][T22951] netlink: 'syz.7.4760': attribute type 10 has an invalid length. [ 1314.998426][T22951] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4760'. [ 1315.011111][T22951] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1315.648620][T12375] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1315.663346][T12375] usb 3-1: too many configurations: 127, using maximum allowed: 8 [ 1316.426292][T12375] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1316.434031][T12375] usb 3-1: can't read configurations, error -71 [ 1320.064911][T23004] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4774'. [ 1320.775812][T23009] JFS: discard option not supported on device [ 1320.922501][T23009] Mount JFS Failure: -22 [ 1320.926862][T23009] jfs_mount failed w/return code = -22 [ 1320.952652][T22501] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1321.140959][T22501] usb 3-1: Using ep0 maxpacket: 32 [ 1321.196333][T22501] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1321.233264][T22501] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.737921][T22501] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1321.817006][T23007] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1321.830495][T23007] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1321.911347][T23022] netlink: 'syz.0.4780': attribute type 1 has an invalid length. [ 1321.920392][T23007] veth0_to_bridge: entered allmulticast mode [ 1321.997479][T23007] veth0_to_bridge: entered promiscuous mode [ 1322.003660][T23007] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1322.021331][T23007] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1322.028601][T23007] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 1322.062876][T23027] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4780'. [ 1322.228675][T23025] bond9: (slave vxcan7): The slave device specified does not support setting the MAC address [ 1322.631871][T23025] bond9: (slave vxcan7): Error -95 calling set_mac_address [ 1322.704509][T23036] tipc: Enabled bearer , priority 10 [ 1322.723860][T23022] macvlan2: entered promiscuous mode [ 1322.729229][T23022] macvlan2: entered allmulticast mode [ 1322.741138][T23022] bond9: entered promiscuous mode [ 1322.758897][T23022] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1322.815489][T23022] bond9: left promiscuous mode [ 1322.898053][T23035] tipc: Disabling bearer [ 1322.987645][T22501] gspca_nw80x: reg_r err -71 [ 1323.062283][T22501] nw80x 3-1:3.0: probe with driver nw80x failed with error -71 [ 1323.100793][T22501] usb 3-1: USB disconnect, device number 91 [ 1323.115957][T23048] tmpfs: Bad value for 'huge' [ 1323.333910][T23051] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4786'. [ 1323.651710][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1323.664003][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1323.676219][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1323.688443][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1323.700648][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1323.712892][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1323.725105][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1323.737319][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1323.749764][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1323.762234][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1328.660928][ C0] net_ratelimit: 13474 callbacks suppressed [ 1328.660943][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1328.679089][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1328.691356][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1328.703585][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1328.715832][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1328.728065][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1328.740296][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1328.752537][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1328.764899][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1328.777155][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1329.291458][T23083] netlink: 'syz.2.4795': attribute type 1 has an invalid length. [ 1329.878752][T23088] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4795'. [ 1330.510591][T23087] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1330.707187][T23087] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1333.203826][T23083] macvlan2: entered promiscuous mode [ 1333.217996][T23083] macvlan2: entered allmulticast mode [ 1333.316367][T23083] bond1: entered promiscuous mode [ 1333.451847][T23083] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1333.671166][ C0] net_ratelimit: 4641 callbacks suppressed [ 1333.671182][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1333.689732][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1333.702486][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1333.715246][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1333.728170][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1333.741028][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1333.753777][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1333.766533][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1333.779234][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1333.791990][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1334.226215][T23083] bond1: left promiscuous mode [ 1335.569922][T23109] pimreg: entered allmulticast mode [ 1336.463781][T23112] netlink: 'syz.0.4802': attribute type 10 has an invalid length. [ 1336.482827][T23112] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4802'. [ 1337.358723][T23109] pimreg: left allmulticast mode [ 1338.680926][ C0] net_ratelimit: 6157 callbacks suppressed [ 1338.680947][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1338.699377][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1338.711682][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1338.724275][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1338.736848][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1338.749146][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1338.761979][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1338.774544][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1338.786836][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1338.799437][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1342.647463][ T5926] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1343.330863][ C0] sched: DL replenish lagged too much [ 1343.690925][ C0] net_ratelimit: 12331 callbacks suppressed [ 1343.690947][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1343.690971][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1343.697723][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1343.709286][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1343.721764][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1343.733563][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1343.745192][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1343.757169][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1343.769447][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1343.781142][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1348.701083][ C1] net_ratelimit: 16109 callbacks suppressed [ 1348.701111][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1348.701252][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1348.707473][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1348.719565][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1348.731356][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1348.743836][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1348.755404][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1348.768055][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1348.779250][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1348.791362][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1353.710875][ C1] net_ratelimit: 16424 callbacks suppressed [ 1353.710898][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1353.711069][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1353.717338][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1353.729910][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1353.741331][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1353.753856][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1353.765192][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1353.777269][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1353.789090][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1353.801531][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1358.720970][ C1] net_ratelimit: 16268 callbacks suppressed [ 1358.720993][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1358.721164][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1358.727333][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1358.739868][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1358.751307][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1358.763747][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1358.775192][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1358.787192][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1358.799036][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1358.811481][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1362.631134][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.652388][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.730963][ C0] net_ratelimit: 16548 callbacks suppressed [ 1363.730986][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1363.731165][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1363.737811][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1363.749396][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1363.761426][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1363.773241][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1363.785650][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1363.797167][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1363.809597][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1363.821009][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1368.740941][ C1] net_ratelimit: 17137 callbacks suppressed [ 1368.740963][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1368.741115][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1368.747310][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1368.759414][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1368.771207][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1368.783655][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1368.795162][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1368.807679][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1368.818982][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1368.831074][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1373.750997][ C1] net_ratelimit: 16369 callbacks suppressed [ 1373.751021][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1373.751219][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1373.757398][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1373.769891][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1373.781310][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1373.793274][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1373.805130][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1373.817512][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1373.829092][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1373.841572][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1374.458530][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 1375.827307][ T5926] usb 3-1: device descriptor read/64, error -110 [ 1378.760944][ C0] net_ratelimit: 16472 callbacks suppressed [ 1378.760966][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1378.761230][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1378.767814][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1378.779310][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1378.791700][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1378.803236][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1378.815672][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1378.827091][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1378.839166][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1378.850974][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1383.771002][ C1] net_ratelimit: 16505 callbacks suppressed [ 1383.771024][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1383.771036][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1383.771546][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1383.777356][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1383.789921][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1383.801292][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1383.813845][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1383.825219][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1383.837156][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1383.849104][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1388.780999][ C0] net_ratelimit: 17051 callbacks suppressed [ 1388.781001][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1388.781020][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1388.787346][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1388.799428][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1388.811279][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1388.823715][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1388.835161][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1388.847755][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1388.859064][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1388.871065][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1393.791082][ C1] net_ratelimit: 16846 callbacks suppressed [ 1393.791105][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1393.791864][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1393.797525][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1393.809893][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1393.821455][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1393.834023][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1393.845403][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1393.857404][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1393.869254][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1393.882330][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1398.801003][ C1] net_ratelimit: 15408 callbacks suppressed [ 1398.801026][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1398.802019][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1398.807612][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1398.820129][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1398.831609][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1398.844118][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1398.855519][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1398.867453][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1398.879355][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1398.892178][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1403.810959][ C1] net_ratelimit: 15407 callbacks suppressed [ 1403.810981][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1403.811055][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1403.817327][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1403.830341][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1403.841310][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1403.853594][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1403.865203][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1403.877640][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1403.889086][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1403.901081][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1408.820919][ C1] net_ratelimit: 15744 callbacks suppressed [ 1408.820942][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1408.821357][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1408.827406][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1408.839765][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1408.851391][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1408.863305][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1408.875200][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1408.888078][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1408.899064][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1408.911347][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1413.830974][ C1] net_ratelimit: 16566 callbacks suppressed [ 1413.830996][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1413.831190][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1413.837378][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1413.849759][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1413.861339][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1413.873373][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1413.885267][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1413.898137][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1413.909116][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1413.921442][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1418.840888][ C1] net_ratelimit: 16587 callbacks suppressed [ 1418.840911][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1418.840975][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1418.847277][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1418.859357][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1418.871259][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1418.883692][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1418.895314][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1418.907309][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1418.919158][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1418.932229][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1423.006071][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.026148][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.850970][ C1] net_ratelimit: 16770 callbacks suppressed [ 1423.850992][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1423.851209][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1423.857504][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1423.869868][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1423.881405][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1423.893555][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1423.905295][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1423.917296][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1423.929156][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1423.941671][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1428.861087][ C1] net_ratelimit: 16582 callbacks suppressed [ 1428.861109][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1428.861117][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1428.862449][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1428.867448][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1428.879820][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1428.891350][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1428.903320][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1428.915280][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1428.927420][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1428.939187][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1433.871021][ C0] net_ratelimit: 16832 callbacks suppressed [ 1433.871042][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1433.871046][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1433.871460][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1433.877460][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1433.889328][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1433.901326][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1433.913247][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1433.925580][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1433.937112][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1433.949094][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1438.880904][ C0] net_ratelimit: 16779 callbacks suppressed [ 1438.880928][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1438.881252][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1438.887333][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1438.899233][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1438.911654][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1438.923216][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1438.935139][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1438.947072][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1438.959955][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1438.970949][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1443.890950][ C1] net_ratelimit: 16845 callbacks suppressed [ 1443.890973][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1443.890998][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1443.897358][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1443.909981][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1443.921354][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1443.933270][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1443.945217][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1443.957171][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1443.969083][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1443.981441][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1448.900873][ C1] net_ratelimit: 16872 callbacks suppressed [ 1448.900896][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1448.901025][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1448.907337][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1448.920321][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1448.931143][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1448.943714][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1448.955151][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1448.967152][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1448.978988][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1448.991079][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1453.911162][ C1] net_ratelimit: 17068 callbacks suppressed [ 1453.911186][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1453.911193][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1453.911752][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1453.917561][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1453.929664][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1453.941439][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1453.953880][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1453.965295][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1453.977337][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1453.989346][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1458.920887][ C1] net_ratelimit: 16612 callbacks suppressed [ 1458.920909][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1458.921199][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1458.927346][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1458.939726][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1458.951264][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1458.963239][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1458.975166][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1458.988358][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1458.998984][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1459.011294][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1463.931237][ C0] net_ratelimit: 16946 callbacks suppressed [ 1463.931245][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1463.931259][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1463.932743][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1463.937597][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1463.950085][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1463.961484][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1463.973506][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1463.985426][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1463.997423][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1464.009278][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1468.941341][ C1] net_ratelimit: 16678 callbacks suppressed [ 1468.941364][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1468.941443][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1468.947748][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1468.959758][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1468.971625][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1468.984931][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1468.995486][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1469.008011][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1469.019603][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1469.031597][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1473.950988][ C1] net_ratelimit: 16820 callbacks suppressed [ 1473.951010][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1473.951732][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1473.957409][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1473.969388][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1473.981337][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1473.994708][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1474.005178][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1474.017520][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1474.029080][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1474.041085][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1478.961156][ C0] net_ratelimit: 16685 callbacks suppressed [ 1478.961179][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1478.961299][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1478.968039][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1478.979574][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1478.991599][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1479.003453][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1479.015733][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1479.027388][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1479.039760][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1479.051271][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1483.970877][ C1] net_ratelimit: 16401 callbacks suppressed [ 1483.970900][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1483.971201][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1483.977280][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1483.989273][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1484.001183][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1484.013506][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1484.025130][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1484.037021][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1484.048963][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1484.061828][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1488.981167][ C0] net_ratelimit: 16298 callbacks suppressed [ 1488.981196][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1488.981605][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1488.987602][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1488.999568][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1489.012514][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1489.023361][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1489.035744][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1489.047325][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1489.059295][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1489.071186][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1491.048849][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1491.069056][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1493.991065][ C1] net_ratelimit: 16389 callbacks suppressed [ 1493.991088][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1493.991209][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1493.997466][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1494.009879][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1494.021415][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1494.033360][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1494.045261][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1494.058176][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1494.069135][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1494.081457][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1499.001202][ C1] net_ratelimit: 17013 callbacks suppressed [ 1499.001225][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1499.001568][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1499.007629][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1499.019956][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1499.031582][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1499.043508][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1499.055428][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1499.067370][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1499.079335][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1499.091298][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1500.670874][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1500.677854][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P22969/1:b..l [ 1500.686510][ C1] rcu: (detected by 1, t=10502 jiffies, g=115569, q=1299 ncpus=2) [ 1500.694399][ C1] task:syz.7.4763 state:R running task stack:23416 pid:22969 tgid:22969 ppid:20457 task_flags:0x40064c flags:0x00080001 [ 1500.709427][ C1] Call Trace: [ 1500.712718][ C1] [ 1500.715652][ C1] ? __schedule+0x10b9/0x6150 [ 1500.720337][ C1] __schedule+0x1139/0x6150 [ 1500.724848][ C1] ? find_held_lock+0x2b/0x80 [ 1500.729545][ C1] ? unwind_next_frame+0x3fe/0x20b0 [ 1500.734757][ C1] ? __pfx___schedule+0x10/0x10 [ 1500.739612][ C1] ? unwind_get_return_address+0x59/0xa0 [ 1500.745258][ C1] ? arch_stack_walk+0x88/0x100 [ 1500.750124][ C1] preempt_schedule_irq+0x51/0x90 [ 1500.755154][ C1] irqentry_exit+0x1d8/0x8c0 [ 1500.759756][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1500.765741][ C1] RIP: 0010:lock_acquire+0x62/0x330 [ 1500.770943][ C1] Code: b4 18 12 83 f8 07 0f 87 a2 02 00 00 89 c0 48 0f a3 05 22 be ee 0e 0f 82 74 02 00 00 8b 35 ba ee ee 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 39 b4 18 12 0f 85 ad 02 00 00 48 83 c4 [ 1500.790554][ C1] RSP: 0018:ffffc9000c387110 EFLAGS: 00000206 [ 1500.796623][ C1] RAX: 0000000000000046 RBX: ffffffff8e3c96a0 RCX: 0000000068c1bacb [ 1500.804755][ C1] RDX: 0000000000000000 RSI: ffffffff8daa845f RDI: ffffffff8bf2b480 [ 1500.812725][ C1] RBP: 0000000000000002 R08: 00000000ffffffff R09: 00000000ffffffff [ 1500.820694][ C1] R10: 0000000000000002 R11: ffff88807d4c8b30 R12: 0000000000000000 [ 1500.828668][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1500.836644][ C1] ? evict+0x3c2/0xad0 [ 1500.840695][ C1] ? iput.part.0+0x621/0x1190 [ 1500.845351][ C1] ? iput+0x35/0x40 [ 1500.849164][ C1] ? dentry_unlink_inode+0x29c/0x480 [ 1500.854464][ C1] ? __dentry_kill+0x1d0/0x600 [ 1500.859238][ C1] __update_page_owner_free_handle.constprop.0+0x4d/0x4a0 [ 1500.866362][ C1] ? __update_page_owner_free_handle.constprop.0+0x3c/0x4a0 [ 1500.873668][ C1] __reset_page_owner+0x93/0x1a0 [ 1500.878619][ C1] free_unref_folios+0xa22/0x1610 [ 1500.883655][ C1] ? rcu_is_watching+0x12/0xc0 [ 1500.888420][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1500.894239][ C1] folios_put_refs+0x4be/0x750 [ 1500.899012][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 1500.904302][ C1] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 1500.910612][ C1] shmem_undo_range+0x58f/0x1140 [ 1500.915529][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 1500.920886][ C1] ? find_held_lock+0x2b/0x80 [ 1500.925554][ C1] shmem_evict_inode+0x39e/0xbe0 [ 1500.930463][ C1] ? inode_wait_for_writeback+0x170/0x390 [ 1500.936156][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1500.941584][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 1500.947623][ C1] ? find_held_lock+0x2b/0x80 [ 1500.952275][ C1] ? evict+0x37e/0xad0 [ 1500.956316][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1500.961761][ C1] evict+0x3c2/0xad0 [ 1500.965627][ C1] ? find_held_lock+0x2b/0x80 [ 1500.970277][ C1] ? __pfx_evict+0x10/0x10 [ 1500.974664][ C1] ? iput.part.0+0x619/0x1190 [ 1500.979314][ C1] iput.part.0+0x621/0x1190 [ 1500.983789][ C1] iput+0x35/0x40 [ 1500.987393][ C1] dentry_unlink_inode+0x29c/0x480 [ 1500.992483][ C1] __dentry_kill+0x1d0/0x600 [ 1500.997044][ C1] finish_dput+0x76/0x480 [ 1501.001347][ C1] dput.part.0+0x451/0x570 [ 1501.005734][ C1] dput+0x1f/0x30 [ 1501.009339][ C1] __fput+0x51c/0xb70 [ 1501.013295][ C1] task_work_run+0x150/0x240 [ 1501.017861][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1501.022946][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 1501.028121][ C1] do_exit+0x87f/0x2bd0 [ 1501.032249][ C1] ? proc_coredump_connector+0x2d1/0x4f0 [ 1501.037871][ C1] ? __pfx_do_exit+0x10/0x10 [ 1501.042439][ C1] do_group_exit+0xd3/0x2a0 [ 1501.046915][ C1] get_signal+0x2671/0x26d0 [ 1501.051398][ C1] ? __pfx_get_signal+0x10/0x10 [ 1501.056225][ C1] arch_do_signal_or_restart+0x8f/0x7e0 [ 1501.061744][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1501.067874][ C1] ? __bad_area_nosemaphore+0x350/0x690 [ 1501.073397][ C1] irqentry_exit+0x38a/0x8c0 [ 1501.077963][ C1] asm_exc_page_fault+0x26/0x30 [ 1501.082784][ C1] RIP: 0033:0x7f0b84b8f751 [ 1501.087167][ C1] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 1501.093203][ C1] RAX: 0000000000000000 RBX: 00007f0b84de5fa0 RCX: 00007f0b84b8f749 [ 1501.101144][ C1] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 1501.109089][ C1] RBP: 00007f0b84c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1501.117028][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1501.124968][ C1] R13: 00007f0b84de6038 R14: 00007f0b84de5fa0 R15: 00007ffc6e43c9c8 [ 1501.132918][ C1] [ 1504.010959][ C0] net_ratelimit: 15162 callbacks suppressed [ 1504.010982][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1504.010982][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1504.011433][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1504.017358][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1504.029226][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1504.041314][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1504.053175][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1504.065602][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1504.077038][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1504.089065][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1509.021066][ C1] net_ratelimit: 16561 callbacks suppressed [ 1509.021088][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1509.021191][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1509.027496][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1509.039468][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1509.051362][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1509.063365][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1509.075253][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1509.087693][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1509.099220][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:33:37:b9:b4:70, vlan:0) [ 1509.111199][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)