last executing test programs: 6m45.438570978s ago: executing program 0 (id=1155): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x40045532, &(0x7f0000003f80)=""/4083) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0xc0d80) r3 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x270, 0x6, &(0x7f0000006680)) setitimer(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x8}}, 0x20) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r4 = syz_open_dev$loop(0x0, 0xf01c, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000001a80)={'#! ', './file1/../file0', [{0x20, '\xeb)\'-!'}, {0x20, '-*.\x1f'}, {0x20, '!\\\\\'#'}, {0x20, '%^\\\x93\xca\xe9[\x04\fu\xd3\x10.\xee\\Q$e\xa9=B\x19I\xd2Le\x14P\x86\xd3\xe5b\x93y\xdf\xfb\x17B7\a\x9c\xb5?\x0f\xc8\x9b\x9aol)\x87Z\xcc\xa5\xc2\xffb\xb8\x00\xbb\n\xcb\xb1\xdaa\x18\xacG\t\x8e\x00*\xf8R\xa9\x8e\xaaUw\xc0!\x1fa\xf5\xecf\x14B\xd4\xd4\r\x143Y=\xa6!\x94P\xdb\x81vr\x8c\xfd/6\x16\xd8&\x96\xb0o\xae'}, {0x20, '/dev/loop#\x00'}, {0x20, '&/&'}]}, 0xa8) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) r5 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) r6 = shmat(r5, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r5, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r6) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) 6m43.923067814s ago: executing program 0 (id=1169): syz_usb_connect(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xc8, 0x54, 0x9b, 0x40, 0x2c7c, 0x30e, 0x8128, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0x18, 0xd4, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x64}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="b75db6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x800) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x1}) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 6m41.541306619s ago: executing program 0 (id=1183): syz_usb_connect(0x6, 0x36, 0x0, 0x0) socket(0x29, 0x5, 0x400) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) landlock_create_ruleset(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000080), 0xb, 0x80) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000340)={{0x5, 0x3, 0x0, 0xfff, 'syz0\x00', 0x798d}, 0x1, [0x401, 0x4f6, 0x2, 0x10001, 0x11, 0x9, 0x2, 0x2, 0xfffffffffffff09c, 0xc4, 0x8000, 0x4, 0x4, 0x8, 0x9, 0x4, 0x6, 0x8b3, 0x2, 0x9fbe, 0xd, 0xe8, 0x1000000000000, 0x0, 0x5, 0xffffffffffffffff, 0x5063, 0x9, 0x3, 0x5, 0xf7f, 0x7f, 0x800, 0x6, 0x1e, 0x100000001, 0x7, 0x7f, 0x4, 0x9, 0x9, 0x4, 0x4, 0xc, 0x7, 0x1, 0x0, 0x115, 0x1b, 0x8, 0x1, 0x100000000, 0x2, 0x0, 0x36, 0xa49, 0x4, 0x3, 0x2, 0x100000000, 0x2, 0x8, 0x2, 0x0, 0x6, 0x3, 0x3, 0x6, 0x1, 0x7, 0x6, 0x4, 0x2, 0xdfc, 0x8, 0x8, 0x3, 0x98c4, 0x3, 0x347, 0xe, 0x0, 0x0, 0x279e93df, 0x7fffffffffffffff, 0x4, 0x2, 0xf, 0x10001, 0x1ff, 0x6, 0xffff, 0x7, 0x5, 0x9, 0x6, 0x136, 0x171, 0x6, 0x1, 0x5f, 0x10, 0x80000000, 0xe8, 0x4, 0x9, 0x6, 0x6, 0x5, 0x7, 0x1, 0x7ff, 0x9, 0x5a, 0x1, 0xc977, 0x101, 0x7cfd, 0xffff, 0x4, 0x2, 0x8, 0x18e8, 0x80000001, 0x1, 0x9, 0x8, 0x2]}) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000000c0)=0x32) read(r0, &(0x7f00000019c0)=""/4107, 0x100b) 6m40.952134807s ago: executing program 0 (id=1184): mkdir(0x0, 0x83) socketpair(0x1d, 0x3, 0x1, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x14) 6m39.875697773s ago: executing program 0 (id=1190): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001880), 0x101000, 0x0) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f00000019c0)={0x6, 0x1, &(0x7f00000018c0)=[0x0], 0x0, 0x0, 0x0}) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000040)=0x100000001, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100000001, 0x5, &(0x7f00000003c0)) pause() 6m39.766908513s ago: executing program 0 (id=1192): socket$nl_netfilter(0x10, 0x3, 0xc) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, 0x0, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400b59527bd7000000000000a400000", @ANYRES32=r2, @ANYBLOB="1400020000000000000000000000ffff00000000080008000001"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x370}]}, 0x34}, 0x1, 0xfe80}, 0x0) 6m39.048942049s ago: executing program 32 (id=1192): socket$nl_netfilter(0x10, 0x3, 0xc) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, 0x0, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400b59527bd7000000000000a400000", @ANYRES32=r2, @ANYBLOB="1400020000000000000000000000ffff00000000080008000001"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x370}]}, 0x34}, 0x1, 0xfe80}, 0x0) 1m4.481828341s ago: executing program 2 (id=2903): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xf0b, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfffe}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r4, {0x6, 0x9}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0xfff2}}]}}]}, 0x40}}, 0x2000c800) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x41) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x89fb, &(0x7f0000000040)={'bond0\x00', 0x10000}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r7, 0xc058565d, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2122022, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group', @ANYRESDEC=0x0, @ANYBLOB="2c64030000006eb7b73582203c613c00"], 0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) 1m1.976116816s ago: executing program 2 (id=2907): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000000000000200000008000300", @ANYRES32=r1, @ANYBLOB="0c00990041000000600000000800a0007c030000080026009a03000008009f000d"], 0x40}}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r3, 0x28, 0x6, 0xfffffffffffffffc, &(0x7f0000000000)) 1m1.649259211s ago: executing program 2 (id=2908): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x9, 0x3, 0xc4f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000840), 0xffff, r0}, 0x38) (fail_nth: 44) 1m1.222361174s ago: executing program 2 (id=2909): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto(r0, &(0x7f0000001a00)="51bf7336f6cdf0ca6c13c866d6932455f2d501845841bb2c078a988b7eb38f11a326083cf884920013fbae4a3a5d9c8ea7ea86669fb6212da0b5c82136d9519daeb17c3796ad78cccef50ab4eabcafbc1a18735359cd7329816984d18ee55476f901401079349dfbe2e614f5bc56a00536c78d993c5be2057b0d1a07c00544d90a5949", 0x83, 0x20000084, &(0x7f0000000540)=@ethernet={0x306, @local}, 0x80) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x77c, &(0x7f0000000040)={0x0, 0xec5d, 0x1c881, 0xfffffffd, 0xd1}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ad"], 0x0, 0x8}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) (fail_nth: 26) 1m1.006545263s ago: executing program 2 (id=2910): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="80420000000000001000128008000100687372000400028008003a00f8ff07ac"], 0x38}}, 0x200000000000000) 1m0.918786853s ago: executing program 2 (id=2911): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) socket$tipc(0x1e, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r6, @ANYBLOB="b7351bccec3b4352fd97af8687a7dcf0e7aa01dbbbd1d1ed117e194e5fb6a7d77c0f6fd8e6fc44be774722c3f49c6dde7b90aa3f7e37cfefc9b45a88fe9cad24ad129d418696cfd00e3256204685aaf69c3be83b279df650e1421be8dd690cdf2ce9de13b8f523988347db96eb88051c0985d6a4274ec0d3c899a79dcc953e82ab698b0db5e6dbf33fcea9cfa2351b4576719baeb9bee5e17782714e86042ee69a1ae955b9316ddcf76869fd24f429db883a47592d93aa23"], 0x1c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x408001, 0x0, 0xa, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x14, 0x6000, @fd, 0x0, 0x20000003, 0x8020, 0x0, 0x1, {0x2}}) r9 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000000000/0x4000)=nil) shmctl$IPC_RMID(r9, 0x0) r10 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r10, 0x5393, &(0x7f0000000000)) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11, @ANYBLOB="0100000000fd42fc1ee9d07769b2"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r12, 0x8923, &(0x7f0000000000)={'veth0_vlan\x00', @random="0134014010ff"}) 55.242714116s ago: executing program 4 (id=2924): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d8dda66150460ec91462cf766b4324c67c243248eff915da580b9bff63b916107ab58ca79b138a297", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f00000050c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000007100)={0x78, 0x0, r1, {0xa0, 0x6, 0x0, {0x4, 0x0, 0x9, 0x8, 0x0, 0x4, 0xfffff92f, 0x0, 0x4, 0xc000, 0x3ff, 0xee00, 0x0, 0x80000003, 0x4}}}, 0x78) r2 = syz_io_uring_setup(0xe42, &(0x7f00000005c0)={0x0, 0x2119, 0x100, 0x0, 0x15b}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x5b02, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x80000, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x1d}) io_uring_enter(r2, 0x6f58, 0x0, 0x0, 0x0, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) preadv(r6, &(0x7f0000000680)=[{&(0x7f0000000040)=""/140, 0x8c}, {&(0x7f0000000100)=""/148, 0x94}, {&(0x7f00000001c0)=""/120, 0x78}, {&(0x7f0000000240)=""/143, 0x8f}, {&(0x7f0000000300)=""/155, 0x9b}, {&(0x7f00000003c0)=""/79, 0x4f}, {&(0x7f0000000440)=""/195, 0xc3}, {&(0x7f0000000540)=""/143, 0x8f}, {&(0x7f0000000740)=""/110, 0x38}], 0x9, 0xffffffa2, 0x0) syz_open_procfs(0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r7 = open_tree(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x89901) r8 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x24020400) ioctl$FICLONE(r8, 0x40049409, r7) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000600), 0x8) dup(r9) 52.60758636s ago: executing program 3 (id=2932): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x3, 0x1f}}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x44004) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x21743}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 51.907783751s ago: executing program 4 (id=2933): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0x10, 0x2, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001400b59500000000140000000a000000", @ANYRES32=r1, @ANYBLOB="1400020000000000000000000000ffff00000000080008007002"], 0x34}}, 0x0) 51.418411866s ago: executing program 4 (id=2936): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x78, 0x4) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @local, 0x4}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0x400000223) 51.310241078s ago: executing program 3 (id=2937): close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x24048814) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300001400"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa002, &(0x7f0000000140)=0x20000, 0x61, 0x5) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) 51.224262422s ago: executing program 4 (id=2938): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 51.183399523s ago: executing program 3 (id=2939): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000003140)=@newlink={0x44, 0x10, 0x403, 0x7000000, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) 51.066675205s ago: executing program 5 (id=2940): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7cff, 0xbd, 0x1, 0x6, 0x1ff}, 0x2}}]}, {0xffffffffffffff04}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600004000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 50.909760134s ago: executing program 3 (id=2941): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_DISEQC_SEND_MASTER_CMD(r1, 0x40076f3f, &(0x7f0000000040)={'\x00', 0xfffffffffffffe09}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000000c0)=0x32) r2 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSCTTY(r3, 0x540e, 0x1000) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000003c0)='name', &(0x7f0000000200)='}\xf7\x1aD,\xfcSJ\x1d\x11\x9e\xea=\x9d\xc0o\xec\xc0\x83\x91d`\xb9\xa1\xf0\v\xed\x14\xce\xc4q9\'\xba\x17\xd51\xef\x03\x1b\xa1LEr8\xbb\xc85\x017unH\xd7\x98\'V((\xed3\x15\xa9\xcf\xea2Q\xdd\xff{\xe5$j\x9b\xd5O,o0;\xd0e\x96]$\xb97%=\xc6\x18\x7f\xa8\x98\x93r\xe1\x9f3\xbdN\x96\xc5\xcb`X8\x9a`\xeby/\x00\xf8k72S\x1cB\xf7\xc7\xa8\xad\xeb\xef\xab\xe8f50\x92\xd5kK\xf2\xf8*\xb1\x14\x8f\xdd\xfe\xab\xd9?\xf9\xe2\xd0\xbfR\x8b\xfe|\x1b\x94\x9buP\xe4\x12\x01\xf65&\x80V\x81\x18\x14e\xc0b\x8fJ\xe4\xd0\x94s\x06/ \xb5\x96@\xdc\x95\x86\xef7[g\xdb\x86,xNA\xe4?\x84\xd4B\xe3\xc3\x05\xab\x00\x80\t\xa3\xff\xa0\xa2\r\x88\x92m\xa0\xdc\xec[\x84\xa8\xc8Z4n\xa3\x84\xa7_\xa4~\xa0\xd6Ya\x95&\xc30\x9e\x8f\x9dGl\xacv0|\x00\xb6b\xfa\x03\xd6MyGx\x05\xd7y}h\xf8\xcf)#\xd0z\xccp\xe8\xb5_\xef\x13ZY\x9f\xc1', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x4, 0xbfdfffbc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r6, 0x515e, 0x20, 0x46, 0x0, 0x0) 50.908207871s ago: executing program 4 (id=2942): io_uring_setup(0x6001, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="319700000000000014002b800800030004000000080002000200000008001b"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x20000050) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000013c0)=0x1, 0x4) r1 = syz_open_dev$vim2m(0x0, 0x3fe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_disconnect(r2) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=@deltaction={0x34, 0x31, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x21, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x841) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r3, &(0x7f0000006800)="10", 0x1) write$char_usb(r3, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) 50.625665906s ago: executing program 1 (id=2943): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}}], 0x2, 0x40) 50.032816545s ago: executing program 3 (id=2944): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYBLOB='#'], 0x0) dup(0xffffffffffffffff) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x80100) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000380)={0x0, 0x1, 0xbe}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f00000010c0)={0x0, 0x40, 0x4}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r1) r6 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGES(r6, 0xd01c4813, &(0x7f0000000c00)={{0x2, 0x0, 0x0, 0x3ff, 0x6, 0xe}, 0x13b, [0x3a9, 0x3, 0x3, 0x4, 0xe3, 0x4, 0x8, 0xfffffffe, 0x7e, 0x7, 0x9, 0x4, 0x6d87, 0x5, 0x4, 0x1, 0x517, 0x3, 0x5, 0x16, 0xfffffffe, 0x6, 0x80, 0x9, 0x29ae2b15, 0x5, 0x3ff, 0x3, 0x4, 0xfffeffff, 0x80000000, 0x1, 0x40, 0x6, 0x6, 0x8, 0x687, 0x1, 0x6, 0x8, 0x6, 0xdf2, 0xffffffff, 0xffffffff, 0x8, 0x800, 0x3, 0x9, 0xb0b, 0x2b, 0x6, 0x8, 0x40, 0x4, 0x200000, 0x9, 0x7, 0x4, 0x2, 0xc, 0x6, 0x7fff, 0x7, 0x3, 0x7fff, 0xb1c5, 0xffffffff, 0x8, 0x7f, 0xe1b, 0x2, 0x139b, 0x3ff, 0x13052866, 0xc, 0xd5, 0x7, 0xfffffffb, 0x5, 0x3, 0x3, 0x40, 0x9, 0x1, 0x13, 0xfffffff8, 0x6, 0x8, 0x4858, 0x4, 0x10001, 0xffffffff, 0xeb2, 0x200, 0x101, 0x4, 0x9, 0xdd49, 0x8, 0xff, 0xbed, 0x2, 0x1, 0x101, 0xf, 0x2, 0xfaf975e, 0x0, 0x0, 0xfff, 0x400, 0xaf, 0x6, 0x80, 0x7, 0x8d3, 0x8, 0xa3, 0x1, 0xfffffff7, 0x1, 0xf0, 0x1, 0x1, 0x439a, 0x5, 0xf, 0x58, 0x4, 0x0, 0x1, 0x4, 0x5, 0x8, 0x9, 0x7fffffff, 0xcf, 0xda0, 0x101, 0x3, 0x80000001, 0xb1, 0x4, 0x3ff, 0x7, 0x4, 0x3, 0x6, 0x9, 0x100, 0x1, 0xbbe4, 0x5, 0x74, 0x8, 0x803, 0xfe31, 0x0, 0x2, 0x8, 0x5, 0x3, 0x3, 0xa2, 0x5, 0x6, 0x6, 0x1, 0xc, 0x9, 0x10001, 0x9, 0x5b, 0x6, 0x2, 0x1, 0x10000, 0x1, 0x200, 0x5f, 0x9, 0x6bbc, 0x10, 0x8001, 0xffff, 0x7, 0x6, 0x2, 0x8, 0xa4d, 0x7, 0x8, 0x4, 0x264, 0x0, 0x0, 0xa, 0x1, 0x8, 0x89d, 0x3, 0x430000, 0x3, 0x8, 0x6, 0x9, 0x7, 0x6, 0x0, 0x9, 0x7, 0x3, 0xf, 0x4, 0xff, 0x5, 0x7, 0x10000, 0x0, 0x7, 0x56, 0x17, 0x9, 0x1, 0x1ff, 0x2, 0xf96c, 0x2, 0x4, 0xc53a, 0x8d, 0x6, 0xb90b, 0x7ffe, 0x356a, 0x7ff, 0x4, 0x9, 0x7, 0x1, 0x7fff, 0xfffffffd, 0xffff98d1, 0x7ff, 0x1, 0x9, 0xa742, 0x6, 0xd1, 0x1, 0x4, 0x8, 0xfffffffd, 0xd, 0xfffffffe, 0x2, 0x0, 0x13, 0x7, 0x8, 0x4b0, 0x81, 0xc, 0x8, 0xc5c, 0x10, 0x5217, 0xd7, 0x4, 0x20000001, 0x0, 0x0, 0x5, 0x6b2, 0x5, 0x3, 0x2a2568cb, 0x9, 0xffffffff, 0x7, 0xfffffffa, 0x1, 0x6, 0x43, 0x95, 0x6, 0x81, 0x0, 0x3, 0x6, 0x7fff, 0xf94a, 0xa, 0x6, 0x7, 0x7, 0x8d, 0x3, 0x1f893c26, 0x80000001, 0x9, 0x400, 0x8000, 0xfca1, 0x2, 0x0, 0x14, 0xffffffff, 0x2, 0x6, 0x0, 0xfff, 0x1, 0x0, 0x5, 0x5, 0x100, 0x8, 0x7, 0x8, 0xd, 0x3e7f4f1c, 0x3, 0x7, 0x10001, 0x3, 0x8, 0x89, 0x4, 0x1, 0xfffffff9, 0x5, 0x1, 0x3, 0xff, 0x15f, 0x81, 0x2, 0x8, 0x8, 0x2, 0x4, 0x7, 0x5, 0x2, 0x29fb, 0x4, 0x2, 0x4, 0x5, 0x101, 0xa9f3, 0x2, 0x7, 0xc, 0x9, 0xd, 0xe, 0x1, 0x5, 0x8, 0xc8a, 0xa51f, 0x6, 0xfff, 0x0, 0x0, 0x81, 0x0, 0x10000, 0x4, 0x7, 0x4, 0x7, 0x5, 0x802, 0x2, 0xbe, 0x1, 0x8000, 0x800, 0x4, 0x3, 0x3, 0x400, 0x1, 0x8, 0x81, 0xb13, 0x2, 0x81, 0x9, 0x4, 0x80, 0xd, 0x1, 0x800, 0xf58, 0x9, 0x9, 0x8, 0x3cc, 0x0, 0xb0e, 0x3, 0x7, 0x537, 0x7, 0x38b9, 0xfffffffb, 0xc, 0xcf7, 0xffff8001, 0x0, 0x0, 0x5, 0x81, 0xa, 0xdb6, 0x5, 0xbcb, 0x6, 0xd, 0x9, 0x5, 0x101, 0x5, 0x1, 0x3, 0x2, 0xd, 0x10001, 0x1, 0x8000, 0x3, 0x1, 0x10001, 0x200, 0x1000, 0x8000, 0xffffffff, 0x6, 0xff, 0x89b6845, 0xfffffffb, 0x2, 0xfffffffd, 0x5f8, 0x10000, 0x0, 0x9, 0x7, 0x0, 0x9, 0x3321627a, 0x849, 0x5, 0xffff, 0x1, 0x24000, 0x82, 0xef, 0x401, 0x2, 0x100, 0x7, 0x7ff, 0x4, 0x7f3f08a2, 0xfffffffd, 0x10, 0x8000, 0x0, 0xe, 0x6, 0xffffffff, 0x3ff, 0xfee, 0x10001, 0x7, 0x9, 0x78, 0xe7, 0xfffffff7, 0x3, 0x4ec, 0x4, 0x6, 0x5, 0x53c4, 0x7d, 0x4, 0x100, 0x81, 0x6, 0x1, 0xffffff42, 0x800, 0x0, 0xb, 0x202, 0x7, 0x80000000, 0x8001, 0xe28, 0x2, 0x7, 0x5, 0x8, 0xd, 0x2, 0x4, 0x7f, 0xb, 0x0, 0x5, 0x0, 0xa22, 0x7, 0x80, 0x2, 0x4, 0xffffff95, 0x53cd, 0x1, 0x7fffffff, 0x80000001, 0x5, 0xaee39c9, 0x4b, 0x7, 0xffffffff, 0x2, 0x7, 0x5, 0x1, 0x4, 0xc7a7, 0x9, 0x5, 0x9, 0xe6, 0x7ff, 0x7, 0x5000, 0x8001, 0x2, 0x7cb, 0x6, 0x8, 0x5, 0x8, 0x4, 0xed, 0xffffffff, 0x2, 0x4, 0x0, 0xf9, 0x3, 0x2, 0x8, 0x8, 0xfffffffa, 0x5, 0x3, 0xc2, 0xfffffff0, 0x1, 0x69, 0x3, 0x6, 0x4000, 0x7, 0x7, 0x3, 0x7, 0x4, 0x9, 0x1, 0x0, 0x81, 0x401, 0x7fffffff, 0x9, 0x6695a7d7, 0x3ff, 0x3, 0xfffffffe, 0x2, 0x772, 0x0, 0x9, 0x6, 0x80000, 0x4, 0x0, 0x30000000, 0x4, 0x15, 0x1ff, 0x18d, 0x8001, 0x1, 0x2, 0xdd90, 0x319, 0x3, 0x80, 0x40, 0x7, 0x7, 0xf, 0x5, 0x80235c, 0x9, 0x6, 0x7, 0x5, 0x200, 0x3, 0xa, 0x1, 0x8000, 0x7fffffff, 0x3, 0x4, 0xbf25, 0x4, 0xfff, 0xa2d, 0xfffffff0, 0x3, 0x6, 0x0, 0xe, 0x5, 0xe6ee5e7a, 0xffffffff, 0x3, 0xffff, 0x3, 0x0, 0x153, 0x80000000, 0xffffffff, 0x0, 0x4, 0x1, 0x1, 0x9, 0x1, 0x7, 0x9, 0x7, 0x7, 0x2, 0xffff8000, 0x6, 0x5, 0xd, 0x400, 0x2, 0x2, 0x8ed, 0x1c2, 0xbbdb, 0x8, 0x8, 0x5, 0x7, 0x80, 0x3, 0x2, 0x7, 0xd2, 0x8, 0x401, 0xfffffffe, 0x3, 0xfffffffe, 0x9da, 0x10000, 0x3ff, 0x200, 0x5, 0x5, 0x3, 0xfffffffb, 0xce, 0x0, 0x0, 0x80000001, 0x5, 0x5, 0xb, 0x5, 0xe82, 0x10000, 0x4, 0x8, 0x6, 0x200, 0x5, 0x4, 0x70, 0x4, 0x4, 0x7, 0xf81, 0xee1, 0x1000, 0x4, 0x5, 0x3, 0x3, 0xdab7, 0xffffffff, 0x1, 0x100, 0x7, 0x3, 0x5, 0x1ff, 0x9, 0x0, 0x3, 0x1ff, 0x9, 0x6, 0xfffffff9, 0x0, 0x401, 0x81, 0x40d0, 0x1ff, 0x1, 0x8, 0xe14, 0x0, 0x200, 0x0, 0x3, 0x9, 0x3, 0x2, 0x1, 0xff, 0xd6, 0x3ff, 0xfffffffc, 0x39, 0x1, 0x9, 0x1, 0x7, 0x100, 0x7, 0x9, 0x1000, 0x0, 0x80000001, 0x8, 0x8, 0x8, 0x3, 0x280, 0x5, 0x0, 0xff, 0xf, 0x5, 0x2, 0x1, 0xf5, 0x8000, 0x4, 0x8, 0x4, 0x8, 0x9ce, 0x9, 0x7, 0x1ff, 0xffffffff, 0x1, 0x8, 0x4, 0x3, 0x5, 0x1, 0xffff0001, 0x3ff, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x5, 0xc8d, 0x7, 0x2, 0x7, 0x4, 0xe, 0xf7a0, 0x3ff, 0x1, 0x9, 0x3, 0x2020000, 0x5, 0xc, 0x3, 0x4, 0xd0, 0xb5, 0x5, 0x5, 0x0, 0x21, 0x0, 0xfffffecc, 0x9a99, 0x1e65, 0x6, 0xb3, 0xd3, 0x7, 0x4, 0x0, 0xfffffffc, 0x3, 0x849e, 0x4630, 0x4, 0xfffffff7, 0x0, 0x6, 0x202, 0x18, 0x5, 0x7, 0xf, 0x40, 0x3, 0xfffffffa, 0x0, 0xe87, 0xf3, 0x8000, 0x7, 0x1, 0x7fffffff, 0x1000, 0x85, 0x6, 0x7, 0x5, 0x9, 0x2, 0x10000, 0x9, 0x10001, 0x7, 0xff, 0x9, 0x2, 0x0, 0x9, 0x41888017, 0xffff, 0x7, 0x6, 0x5, 0x7, 0x7a1, 0x10, 0x200, 0xd128ac4c, 0x4, 0x2, 0x1, 0x89, 0x9, 0x3, 0x8, 0x6, 0x81, 0x9, 0x8, 0x6, 0xfff, 0x9, 0x9, 0xb26000, 0x7, 0x2, 0xe81d, 0x3, 0x31, 0x1, 0x4394be07, 0x6, 0x200, 0x0, 0x4, 0x9, 0x5, 0x8, 0x6, 0x395, 0x80000000, 0x40, 0x8, 0x4, 0xfffffffa, 0x9, 0x0, 0x8, 0x7fffffff, 0x7f, 0x8, 0x7, 0x9, 0x0, 0x1ff, 0x2, 0x51432e6e, 0xfffffff9, 0x8, 0x1, 0x4, 0x7, 0x2, 0xfffffffc, 0x1, 0x9, 0x81a4, 0x10000007, 0x0, 0xfffff584, 0x4, 0x3, 0xeff2, 0x7fff, 0x7fffffff, 0x100, 0x1, 0xc, 0x6, 0x581ecb57, 0x8, 0x7, 0x40000000, 0x7, 0x3, 0x8, 0x1000, 0xe6ed, 0x2ef4, 0x381f, 0x7, 0x7, 0x5, 0xffffffff, 0x5, 0xa5b0, 0x1, 0x6, 0x9, 0x7f, 0x7, 0x3ff, 0x3, 0x101, 0x9, 0x0, 0x7, 0x78, 0x7ff, 0x8, 0xfff, 0xfffffff3, 0x6, 0x6, 0x0, 0x2, 0x3, 0x0, 0x1, 0x3a6, 0x1, 0x27, 0xa, 0x2, 0xd1, 0x9cd, 0x5107, 0xfc6, 0x8, 0x3, 0x8, 0x751, 0x1, 0xffff0000, 0x0, 0x2, 0x10000, 0x2, 0x0, 0x6, 0x1, 0xd53, 0x0, 0x1ff, 0x1c23, 0x80000001, 0xfffffff8, 0x5, 0xcdbc, 0x0, 0x9, 0x7fff]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random="1c0000001200"}) 49.742995729s ago: executing program 1 (id=2945): r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) getsockname$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000000c0)={0x1, 'bridge0\x00', 0x2}, 0x18) (async) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x512, 0x10}, 0xc) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0xffffffffffffffff, 0x9}, 0xc) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/resume_offset', 0x2000, 0x2) (async) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)='%pB \x00'}, 0x20) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, [@exit, @map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xb}, @exit, @map_fd={0x18, 0x2, 0x1, 0x0, r2}]}, &(0x7f0000000200)='GPL\x00', 0x8, 0x8f, &(0x7f0000000240)=""/143, 0x41000, 0x2, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000340)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0x10, 0x9, 0x65}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000500)=[r4, r5, r6, 0xffffffffffffffff], &(0x7f0000000540)=[{0xd31, 0x5, 0x5, 0xa}, {0x5, 0x1, 0x4}], 0x10, 0x8}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r4, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0], 0x0, 0x6, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0xc3, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000980)={r6, r3, 0x18, 0x0, @val=@target_btf_id=r7}, 0x14) ioctl$XFS_IOC_FSGEOMETRY_V1(r8, 0x80705864, &(0x7f00000009c0)) (async) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000a40)=0x20) (async) bind$l2tp(r6, &(0x7f0000000a80)={0x2, 0x0, @empty, 0x3}, 0x10) (async) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000ac0), 0x2, 0x0) r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000b00), 0x4024c0, 0x0) ioctl$XFS_IOC_OPEN_BY_HANDLE(r10, 0xc038586b, &(0x7f0000000c40)={r8, &(0x7f0000000b40)=',\xcd\\\x94%}\x00', 0x204000, &(0x7f0000000b80)={@_ha_fsid={[0xffffff81, 0x3800000]}, {0x7, 0x6, 0xb, 0xfffffffffffffffe}}, 0xa, &(0x7f0000000bc0), &(0x7f0000000c00)=0x86}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000cc0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000c80), 0x13f}}, 0x20) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_DELAY(r6, 0x80084121, &(0x7f0000000d00)) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000d40)={0xc}) syz_io_uring_setup(0x67f0, &(0x7f0000000d80)={0x0, 0xcbb7, 0x2000, 0x0, 0xc0, 0x0, r3}, &(0x7f0000000e00), &(0x7f0000000e40)) (async) fcntl$setflags(r0, 0x2, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000e80), r4) (async) epoll_pwait(r4, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}], 0x6, 0x3, &(0x7f0000000f40)={[0x5]}, 0x8) (async) r11 = syz_clone(0x310000, &(0x7f0000000f80)="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", 0x1000, &(0x7f0000001f80), &(0x7f0000001fc0), &(0x7f0000002000)="0fdbf1c26e48b8a4e76e2554b05a3fee0a4b24fcbc9eb5eff2f9d9550e387cf97bd1a3ab1b111a5369087be5de80f297c1f2bbab1a878dbfa39b70454221def92981eede9817b6acf93acb4dcfb0fc091bf632125ca6166f787535044b70e783609ef2c4d2aa86a963ea1ceb5b6c7bcae4182e4e1f26ab0de1c6576bc12f26a96d95ad39c8a73de90113565f0876e45ddc4c2ba6e8f231f4475ae0e2bcb524bc345f55de73afb1832f87f90645d3d8f1bb01d4bfc93ff69156ea35670f28ef68d1b2") capset(&(0x7f0000002100)={0x20071026, r11}, &(0x7f0000002140)={0x40, 0x9, 0x2, 0x0, 0x7, 0x8}) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000021c0), r4) sendmsg$NL80211_CMD_DISASSOCIATE(r4, &(0x7f0000002380)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002340)={&(0x7f0000002200)={0x13c, r12, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x126, 0x2a, [@random={0x9, 0xce, "8d604e49a6a8b2ac50ecd0fa4c131a527dbb63a395c10411ff49cb5f654407a0007c4873a560990e48e57ca306ed9990c7700e2a397327512ac0e064abfd0422603a8be7da4dbc2d77ecf85ad7134b29fc2c81490e7c03389189a182b71ee1b87f9af08aaca3b5b5ddbb33f04e612df0e87b38d252bc5e994af9fd60f26fa1d4a3acd1d0030e919f68345b2c1c0730c846688a373b1da9d8a8fb9879c34e95f67d7ca5ddc5841d812b539255751c9c495601478aa6b5d876f07e5937bbde0801cef7260d6afd138a31cee85a04f8"}, @challenge={0x10, 0x1, 0xa5}, @chsw_timing={0x68, 0x4, {0x2, 0x5}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @device_b}}, @supported_rates={0x1, 0x7, [{0x18}, {0x1b}, {0x30, 0x1}, {0x5, 0x1}, {0x30, 0x1}, {0x24, 0x1}, {0x18, 0x1}]}, @mesh_id={0x72, 0x6}, @random={0x3, 0x22, "985a8ef8caa28a2dc4fd969daf8c4c738b96b7f817c2c26f030143a52786103ed3a2"}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1000}, 0x20004800) 49.598595211s ago: executing program 1 (id=2946): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r1 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000000000/0x1000)=nil, 0x1000}, 0x1}) sendto$inet(r0, &(0x7f0000001000)="3afd", 0x2, 0x200008d0, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) 49.589416874s ago: executing program 1 (id=2947): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)={0x15c, r7, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x140, 0x8, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x1, @mcast1, 0x2}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0xe8, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0xc0, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x41, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}]}, {0x4}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r8}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) syslog(0x1, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r9) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x2c, r10, 0x1, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x53d229b7}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2404c054}, 0x404c094) 48.259952999s ago: executing program 1 (id=2948): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMGET(r2, 0x541e, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) socket$inet(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) rt_sigqueueinfo(0x0, 0xe, &(0x7f00000004c0)={0x22, 0x6, 0x7}) r3 = socket(0x10, 0x80002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xb, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 48.17328186s ago: executing program 5 (id=2949): syz_emit_ethernet(0x1be, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x188, 0x3a, 0x0, @remote, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @local, @empty, [@fragment, @hopopts={0x0, 0x28, '\x00', [@ra, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x0, 0x9d, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62089716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550a571c5b4211c6fa371"}, @ra, @generic={0x0, 0x8c, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f43a107871fdd7e"}, @pad1, @calipso={0x7, 0x8, {0x1}}]}]}}}}}}}, 0x0) (async) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000040)) 48.111534435s ago: executing program 5 (id=2950): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)="d8000000180081054e81f782db4cb904021d0800fe207c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4", 0x6c}], 0x1}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x8000, 0xffffffe4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}, @rand_addr=0x3}}}}) 47.802638024s ago: executing program 5 (id=2951): bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a000007090001007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000060a010400000000000000000a0000010900010073797a3100000000200004801c0001800b00010074617267657400000c000280080001004c4544275d000900020073797a3200000000140000001100010000008dbd000000000100000a"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timer_settime(0x0, 0x236bd4336e4642df, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0xffffff4e) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x5000000000000) 47.030000454s ago: executing program 4 (id=2952): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r3, r2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r5, 0x0, 0x40000000, 0xffffffffffffffff) 46.064347554s ago: executing program 3 (id=2953): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r1, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x40000}, 0x4) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mincore(&(0x7f00001b0000/0x3000)=nil, 0x3000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)=@deltaction={0x1b4, 0x31, 0x4, 0x70bd29, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x74, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x14, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x80, 0x1, [{0x14, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xab7}}, {0x14, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x20048040}, 0x4000840) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r6 = socket$inet(0x2, 0x5, 0x7) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) 45.143393131s ago: executing program 5 (id=2954): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x181240, 0x4e) r2 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r2}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0xac9, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x10000008, 0x11b}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xcc) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x60000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r4, 0xc10c5541, &(0x7f0000000040)={0x0, 0x7, 0x0, 0x0, 0x0, '\x00', '\x00', '\x00', 0x20000000}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.swap.current\x00', 0x275a, 0x0) ftruncate(r5, 0x2000009) sendfile(r2, r5, 0x0, 0x20000000000006) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)={0x3c, r1, 0x3, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x7}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x448c0) 33.705684468s ago: executing program 1 (id=2955): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x0, 0xfff, 0x4b, 0x8009}, 'syz0\x00', 0x11}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x100000000000000}) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) r4 = dup3(r3, r0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x0, 0x0, 0x180000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8982, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r10, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="240000000201de0300000000000000000100000a08001a40fffff5a340000003ff000000"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20000004) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000200)="66b9a00d00000f32dbd567f0879f00a00000670f4fa1ea000000660f388080062e0f01c5baf80c66b8d789868866efbafc0cec0f0666b9800000c00f320f304466b8010000000f23d80f21f86635800000300f23f866350a00000044360f01d1", 0x60}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_CPUID(r11, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0xd, 0x8, 0x8, 0x0, 0x6}]}) ioctl$KVM_SET_IRQCHIP(r9, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x24, 0x3, 0x0, 0x3, 0x0, 0x7, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000000)={[0x8000000000000035, 0x400ffc, 0x14000000215b9037, 0x40190, 0x1, 0x11, 0x8000000000f2, 0x7, 0x3, 0x20000005, 0x5, 0xc6bd, 0x568, 0x45, 0x5, 0xff], 0x6006, 0x1c0293}) ioctl$KVM_RUN(r11, 0xae80, 0x0) 31.889342602s ago: executing program 33 (id=2952): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r3, r2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r5, 0x0, 0x40000000, 0xffffffffffffffff) 31.772495212s ago: executing program 5 (id=2957): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002240)=@newtfilter={0xe9c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xe70, 0x2, [@TCA_FW_ACT={0xe6c, 0x4, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xdcdc, 0x5fa8, 0x3, 0x839, 0x7}, 0x7, 0xb}, [{0x4, 0x2, 0x5d0, 0x8, 0x100, 0x2000000}, {0x9, 0xf2, 0x688d, 0x7, 0x1, 0x2}, {0x7f, 0x8, 0x0, 0x400, 0x2557, 0x462}, {0x2, 0x0, 0x8001, 0xffc00000, 0xc9}, {0x8001, 0x6, 0x7f, 0x5, 0x7fff, 0x7fffffff}, {0x2, 0x7ff, 0xfffffffe, 0x7, 0xfffffc00, 0x3}, {0x8, 0x710, 0x80000001, 0x6, 0x4, 0x3000000}, {0xc000000, 0x400, 0x80, 0x100, 0x3, 0x12}, {0x6, 0x9, 0xa, 0xfffffffe, 0x7, 0x5}, {0x0, 0x2, 0x7, 0xff, 0x64, 0x5}, {0x0, 0x80000000, 0x0, 0xd, 0x9, 0x1}, {0x6, 0xd7, 0x2e, 0x56d, 0x4, 0x80000000}, {0x7ffd, 0x6, 0x1, 0x1, 0x4, 0x9}, {0x3, 0x3, 0x200, 0x7ff, 0x273, 0x2207}, {0x332400, 0x2, 0x5, 0x4d1, 0xfffffffe, 0x2}, {0x7, 0x6, 0x4, 0x5, 0x1, 0x2}, {0x3, 0xfffffffb, 0x7, 0x3ff, 0x4, 0x8}, {0x5, 0x7, 0x1, 0x1, 0x3ff, 0x3ff}, {0x0, 0xffff0001, 0x6, 0x102, 0xa0a, 0x5}, {0x7, 0x4, 0x13ca4b9a, 0xfffffffa, 0xffff, 0x9}, {0x1, 0x2, 0x7fffffff, 0x7, 0x7, 0x200}, {0x0, 0x0, 0x40, 0xffff352c, 0x5, 0x6}, {0x200, 0x3, 0x34e, 0xc, 0x4, 0x1}, {0x1, 0x9, 0x1, 0x8, 0xe163, 0x72e00000}, {0x9ee4, 0x52d, 0x5, 0x0, 0x7, 0x5}, {0x100009, 0xda, 0x0, 0x5, 0xf, 0x7}, {0x4, 0x6e, 0xa, 0x8, 0x826, 0x5}, {0x9, 0x2, 0x7fff, 0xfffffff7, 0x4, 0x8}, {0xff, 0x131e, 0x5, 0x9, 0x3}, {0x6, 0x8, 0xd781, 0x7, 0xdce0, 0x101}, {0x0, 0x1ff, 0x0, 0x9, 0xfff, 0x8}, {0x8, 0x2, 0x6, 0x4, 0x69, 0x5149dc08}, {0x1, 0xffffffff, 0x6, 0x101, 0x8, 0x18000}, {0x0, 0x9, 0x1, 0x5, 0xc}, {0x3, 0x9, 0x9, 0xe68, 0x6, 0xffff}, {0x9, 0x62, 0xe2f, 0xa, 0x44, 0x7}, {0xfffffff9, 0x7f, 0xffffffff, 0x3, 0x341, 0x3}, {0x6, 0x6, 0x4, 0x40000, 0x2, 0xa155}, {0x6d3, 0x3, 0x9, 0x9, 0xfffffffd, 0xfffffffa}, {0xd47, 0x3ff, 0x800, 0x40, 0x80000001, 0x4}, {0x5c2e, 0x8, 0x0, 0x76, 0x7}, {0xac77, 0x5, 0x0, 0x101, 0xb2a, 0x1ff}, {0x8, 0xfffffffa, 0x8, 0x4, 0xf771, 0x800}, {0xc, 0xfffffc01, 0x2, 0x4, 0x6, 0x1}, {0x4, 0x8, 0x149, 0xfffffff7, 0x80, 0x10fff}, {0x8000, 0xd, 0x1, 0x101, 0x6}, {0x1000, 0xfffffffb, 0x268f, 0x80000001, 0xdf, 0x4}, {0x4, 0x0, 0x101, 0x1, 0x7, 0x9}, {0x9, 0x3, 0x20004, 0x0, 0x9, 0x8}, {0x400, 0xfe8, 0x5, 0x112, 0x10001, 0x7ff}, {0x4399, 0x0, 0x8, 0x2d1, 0x3ff}, {0xd8d2053, 0x7fffffff, 0x401, 0x6, 0x4, 0x6}, {0x3, 0x5, 0x205, 0x8, 0x6, 0xe7e1}, {0x550, 0x204, 0x342, 0x9, 0x8, 0x7}, {0x2, 0x7fffffff, 0x0, 0x8, 0x800, 0x3}, {0x4, 0x6, 0x3, 0x2, 0x2}, {0x1, 0x5d9, 0x4, 0xffffffff, 0x9, 0xac}, {0x7, 0x6, 0x7, 0xff, 0x4, 0x3}, {0x0, 0x5c6c, 0x8, 0x2, 0xffffffff, 0x4}, {0x40, 0xaa, 0x4, 0x6, 0xfffffff8, 0x3}, {0x0, 0xfffffffd, 0x7e0, 0xc, 0x7, 0x401}, {0xffff, 0x3, 0x5, 0x4008, 0x47, 0xf9d}, {0xfffffbff, 0x0, 0x4, 0x0, 0x9, 0xffff}, {0xffffffff, 0x6, 0xfffffffa, 0x2, 0x8000, 0xbde}, {0x6af, 0x8001, 0x7f, 0x7, 0x7, 0x516}, {0x33, 0x8, 0x7, 0x81, 0x2, 0x80000001}, {0x9, 0x2, 0x9, 0x8000, 0x8, 0x3}, {0x6, 0x9, 0x6, 0x400, 0x1, 0xf}, {0xd424, 0x3, 0x7, 0xec, 0xb, 0x4}, {0x7, 0x7, 0xd7a, 0x80000001, 0xb137, 0x5}, {0xdcb, 0x10000, 0xe1, 0x6, 0x4, 0xfffffffb}, {0x4, 0x5, 0x3, 0x8, 0xe, 0x7}, {0x10000, 0x6, 0x80, 0x2, 0x8, 0x6}, {0x0, 0x4, 0xc779, 0x33000000, 0x100, 0x800}, {0x1000, 0x800, 0x0, 0x101, 0x4, 0x6}, {0x2, 0xffffffff, 0xb, 0x5, 0x5399, 0x4f4}, {0x5, 0x2, 0x7, 0x3, 0x1, 0x5}, {0x800, 0xde, 0x9, 0x6, 0x7, 0x4003ff}, {0x1, 0x6, 0x2, 0xfffffff7, 0x0, 0xfffff000}, {0x7, 0xdc76, 0x1, 0x2, 0x2, 0xf}, {0x9, 0x1, 0xcf69, 0x0, 0x457, 0x3}, {0x0, 0x573, 0x4, 0x8, 0x5, 0x4}, {0x3, 0x1, 0xeb1, 0x80, 0xe6, 0x5}, {0x1ff, 0xa601, 0xffff7fff, 0x5, 0x100, 0x4}, {0x5, 0x2, 0x87d, 0x2, 0x8, 0x9627}, {0x81, 0xffff, 0x4, 0xee46, 0x4, 0x40006ed}, {0xa4, 0x30000000, 0x200, 0x9, 0x2f056e5b, 0x4}, {0x3, 0x7, 0x3, 0x7fffffff, 0xd, 0xd}, {0x6, 0x6, 0x4, 0x100, 0x200, 0x8}, {0x40, 0xd00e, 0x22c, 0x2133ecfa, 0xffffff81, 0x1}, {0xfffffe00, 0x2, 0x10, 0x7f, 0x200}, {0x3, 0x10000, 0x4000, 0x3, 0xfb23, 0x8}, {0x8, 0xfff, 0x2, 0x7, 0x4, 0x3}, {0x8001, 0x6, 0x3, 0x1, 0x4, 0x17e3862}, {0x1, 0xe, 0x6, 0x5, 0x4, 0x1}, {0xcb67, 0x7, 0xc08c, 0x1, 0x3, 0x101}, {0x7, 0x401, 0x37, 0x3, 0x1, 0xe85}, {0x7fffffff, 0x0, 0x3, 0x10001, 0x3}, {0x8, 0x2, 0x59211cb1, 0x9, 0x1, 0x4}, {0x6, 0x3, 0x1, 0x7, 0x7, 0x100}, {0x7, 0x4, 0x2, 0x6, 0x400, 0x7}, {0xe, 0x6, 0x24, 0x3, 0x5, 0x1ff}, {0x1ff, 0x3fb, 0x2, 0x5, 0x7fff, 0x4}, {0x3ff, 0xa81, 0x5, 0x0, 0x5, 0x6}, {0xc, 0x76, 0x0, 0x2d0f3c09, 0x1, 0xbe9}, {0xffffbfb8, 0x7fff, 0x0, 0x1450e18f, 0x68c12bef, 0x6}, {0x4, 0x0, 0xc, 0x69, 0x6, 0x9}, {0x10, 0xf09, 0x1, 0x4, 0x1, 0x5}, {0xfffffffc, 0x9, 0x5, 0x4, 0xca, 0xffffffdf}, {0x2, 0x3, 0x8, 0xcf2f, 0x2, 0x1}, {0x7fff, 0xc9, 0x82, 0x6, 0x5}, {0x7, 0x4, 0x9, 0x5, 0x2, 0x9}, {0x4516, 0x3, 0x0, 0x8, 0x4, 0x1000}, {0xe4, 0x0, 0xffff, 0xc84, 0xc, 0x3}, {0xfffffffa, 0x0, 0x3, 0x9, 0xffff0000, 0x4}, {0x400, 0x5, 0x9, 0x2e, 0xd, 0x3}, {0x7, 0x2b, 0x5, 0xfffffff1, 0x3, 0x1}, {0x7fffffff, 0x5, 0x2, 0x80, 0x9, 0xd454}, {0x20000, 0x7ff, 0x61, 0x4, 0x8, 0x7}, {0xff, 0x1, 0x1, 0xa68b, 0x10, 0x60000}, {0x8, 0x0, 0x8, 0xf7f, 0x5, 0xfffffff8}, {0x28e, 0x1, 0xff, 0x6, 0xb3f2, 0x1}, {0x7, 0x2, 0x400040, 0x4, 0x9, 0x2}, {0x9, 0x8, 0xd, 0xe, 0x2003, 0xd842}, {0x8, 0x8, 0x7, 0x0, 0xfffffff1, 0x2}, {0xffff9c2f, 0x84d, 0x4, 0x400, 0x7, 0x58}, {0x3, 0xffffffa2, 0x6, 0x0, 0x8, 0x1ff}, {0x8, 0xc1, 0x9, 0x1, 0x7ff, 0xff}], [{0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x7, 0x1}, {0x3}, {0x2, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {0x1, 0xffffffffffffffff}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x5}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {0x1}, {0x4, 0xfffffffffffffffd}, {0x4}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x5}, {0x4}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {}, {0x2}, {0x2}, {0x5, 0x1}, {}, {0x3}, {}, {0x2}, {0x0, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x4e2ac20550e7fa09}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0xf, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {}, {0x2}, {0x1}, {0x3}, {0x5}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x0, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xe9c}, 0x1, 0x0, 0x0, 0x80}, 0x800) 0s ago: executing program 34 (id=2953): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r1, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x40000}, 0x4) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mincore(&(0x7f00001b0000/0x3000)=nil, 0x3000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)=@deltaction={0x1b4, 0x31, 0x4, 0x70bd29, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x74, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x14, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x80, 0x1, [{0x14, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xab7}}, {0x14, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x20048040}, 0x4000840) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r6 = socket$inet(0x2, 0x5, 0x7) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) kernel console output (not intermixed with test programs): 5034] fuse: Bad value for 'group_id' [ 688.384493][T11626] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 688.394407][T11626] usb 4-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 688.395079][T15034] fuse: Bad value for 'group_id' [ 688.535668][T11626] usb 4-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=c6.c3 [ 688.553474][T11626] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.575171][T11626] usb 4-1: Product: syz [ 688.588912][T11626] usb 4-1: Manufacturer: syz [ 688.601983][T11626] usb 4-1: SerialNumber: syz [ 688.618352][T11626] usb 4-1: config 0 descriptor?? [ 688.625723][T15023] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 688.646184][T11626] iuu_phoenix 4-1:0.0: iuu_phoenix converter detected [ 688.675456][T11626] usb 4-1: iuu_phoenix converter now attached to ttyUSB0 [ 688.815092][ T5907] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 688.853049][T11626] usb 4-1: USB disconnect, device number 75 [ 688.995160][T11626] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 689.012783][T11626] iuu_phoenix 4-1:0.0: device disconnected [ 689.046121][T15006] Bluetooth: hci3: command 0x0406 tx timeout [ 689.047314][ T5907] usb 2-1: Using ep0 maxpacket: 8 [ 689.057484][T15006] Bluetooth: hci2: command 0x0406 tx timeout [ 689.062028][T12137] Bluetooth: hci4: command 0x0406 tx timeout [ 689.063817][T15006] Bluetooth: hci0: command 0x0406 tx timeout [ 689.071930][ T5907] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 689.139813][ T5907] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 689.175811][ T5907] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 689.203933][ T5907] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 689.244156][ T5907] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 689.266919][T15052] FAULT_INJECTION: forcing a failure. [ 689.266919][T15052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 689.284555][ T5907] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 689.294359][T15052] CPU: 0 UID: 0 PID: 15052 Comm: syz.2.2690 Tainted: G L syzkaller #0 PREEMPT(full) [ 689.294386][T15052] Tainted: [L]=SOFTLOCKUP [ 689.294394][T15052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 689.294404][T15052] Call Trace: [ 689.294411][T15052] [ 689.294418][T15052] dump_stack_lvl+0xe8/0x150 [ 689.294448][T15052] should_fail_ex+0x412/0x560 [ 689.294474][T15052] _copy_from_user+0x2d/0xb0 [ 689.294501][T15052] input_event_from_user+0xb1/0x290 [ 689.294526][T15052] ? __pfx_input_event_from_user+0x10/0x10 [ 689.294558][T15052] evdev_write+0x2c7/0x4c0 [ 689.294584][T15052] ? __pfx_evdev_write+0x10/0x10 [ 689.294606][T15052] ? bpf_lsm_file_permission+0x9/0x20 [ 689.294625][T15052] ? security_file_permission+0x75/0x260 [ 689.294652][T15052] ? rw_verify_area+0x255/0x4d0 [ 689.294669][T15052] ? __pfx_evdev_write+0x10/0x10 [ 689.294691][T15052] vfs_write+0x29a/0xb90 [ 689.294718][T15052] ? __pfx_vfs_write+0x10/0x10 [ 689.294736][T15052] ? __fget_files+0x2a/0x420 [ 689.294763][T15052] ? __fget_files+0x2a/0x420 [ 689.294785][T15052] ? __fget_files+0x3a0/0x420 [ 689.294806][T15052] ? __fget_files+0x2a/0x420 [ 689.294834][T15052] ksys_write+0x150/0x270 [ 689.294853][T15052] ? __pfx_ksys_write+0x10/0x10 [ 689.294890][T15052] do_syscall_64+0x14d/0xf80 [ 689.294915][T15052] ? trace_irq_disable+0x3b/0x150 [ 689.294940][T15052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.294959][T15052] ? clear_bhb_loop+0x40/0x90 [ 689.294981][T15052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.294999][T15052] RIP: 0033:0x7f3fe019c629 [ 689.295018][T15052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 689.295032][T15052] RSP: 002b:00007f3fe109c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 689.295050][T15052] RAX: ffffffffffffffda RBX: 00007f3fe0415fa0 RCX: 00007f3fe019c629 [ 689.295064][T15052] RDX: 00000000000012d8 RSI: 0000200000000040 RDI: 0000000000000004 [ 689.295076][T15052] RBP: 00007f3fe109c090 R08: 0000000000000000 R09: 0000000000000000 [ 689.295087][T15052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 689.295099][T15052] R13: 00007f3fe0416038 R14: 00007f3fe0415fa0 R15: 00007f3fe053fa48 [ 689.295127][T15052] [ 689.519335][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.756644][ T5907] usb 2-1: usb_control_msg returned -32 [ 689.762252][ T5907] usbtmc 2-1:16.0: can't read capabilities [ 689.978537][T15060] IPv6: sit1: Disabled Multicast RS [ 690.989986][ T24] usb 3-1: new full-speed USB device number 106 using dummy_hcd [ 691.092330][T15088] FAULT_INJECTION: forcing a failure. [ 691.092330][T15088] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 691.107107][T15088] CPU: 1 UID: 0 PID: 15088 Comm: syz.4.2699 Tainted: G L syzkaller #0 PREEMPT(full) [ 691.107137][T15088] Tainted: [L]=SOFTLOCKUP [ 691.107144][T15088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 691.107155][T15088] Call Trace: [ 691.107163][T15088] [ 691.107171][T15088] dump_stack_lvl+0xe8/0x150 [ 691.107201][T15088] should_fail_ex+0x412/0x560 [ 691.107227][T15088] prepare_alloc_pages+0x22a/0x650 [ 691.107257][T15088] __alloc_frozen_pages_noprof+0x12f/0x380 [ 691.107284][T15088] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 691.107311][T15088] ? __pfx_policy_nodemask+0x10/0x10 [ 691.107342][T15088] alloc_pages_mpol+0x232/0x4a0 [ 691.107370][T15088] folio_alloc_mpol_noprof+0x39/0x70 [ 691.107394][T15088] shmem_alloc_and_add_folio+0x445/0xf80 [ 691.107429][T15088] ? filemap_get_entry+0xca/0x320 [ 691.107446][T15088] ? filemap_get_entry+0xca/0x320 [ 691.107466][T15088] ? filemap_get_entry+0x2ac/0x320 [ 691.107484][T15088] ? __pfx_filemap_get_entry+0x10/0x10 [ 691.107503][T15088] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 691.107544][T15088] shmem_get_folio_gfp+0x5a9/0x1670 [ 691.107588][T15088] shmem_fallocate+0x96f/0xec0 [ 691.107624][T15088] ? __pfx_shmem_fallocate+0x10/0x10 [ 691.107666][T15088] vfs_fallocate+0x669/0x7e0 [ 691.107686][T15088] ? __fget_files+0x2a/0x420 [ 691.107714][T15088] ? __pfx_vfs_fallocate+0x10/0x10 [ 691.107733][T15088] ? __fget_files+0x2a/0x420 [ 691.107766][T15088] __x64_sys_fallocate+0xc0/0x110 [ 691.107790][T15088] do_syscall_64+0x14d/0xf80 [ 691.107816][T15088] ? trace_irq_disable+0x3b/0x150 [ 691.107841][T15088] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.107860][T15088] ? clear_bhb_loop+0x40/0x90 [ 691.107883][T15088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.107902][T15088] RIP: 0033:0x7efdf879c629 [ 691.107920][T15088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 691.107937][T15088] RSP: 002b:00007efdf9654028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 691.107963][T15088] RAX: ffffffffffffffda RBX: 00007efdf8a15fa0 RCX: 00007efdf879c629 [ 691.107977][T15088] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 691.107988][T15088] RBP: 00007efdf9654090 R08: 0000000000000000 R09: 0000000000000000 [ 691.108003][T15088] R10: 0000000000400001 R11: 0000000000000246 R12: 0000000000000002 [ 691.108015][T15088] R13: 00007efdf8a16038 R14: 00007efdf8a15fa0 R15: 00007efdf8b3fa48 [ 691.108045][T15088] [ 691.647728][ T24] usb 3-1: config 0 has an invalid interface number: 30 but max is 0 [ 691.670990][T15091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2700'. [ 691.683941][ T24] usb 3-1: config 0 has no interface number 0 [ 691.802614][ T24] usb 3-1: config 0 interface 30 has no altsetting 0 [ 691.872142][ T24] usb 3-1: New USB device found, idVendor=06cd, idProduct=0109, bcdDevice=25.04 [ 691.899731][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.931414][ T24] usb 3-1: Product: syz [ 691.941601][ T24] usb 3-1: Manufacturer: syz [ 691.955009][ T24] usb 3-1: SerialNumber: syz [ 692.053061][ T24] usb 3-1: config 0 descriptor?? [ 692.103246][ T24] hub 3-1:0.30: bad descriptor, ignoring hub [ 692.150315][ T24] hub 3-1:0.30: probe with driver hub failed with error -5 [ 692.190404][ T24] keyspan 3-1:0.30: Keyspan - (without firmware) converter detected [ 692.334321][ T24] usb 3-1: USB disconnect, device number 106 [ 692.347063][ T24] keyspan 3-1:0.30: device disconnected [ 692.525138][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 692.525157][ T29] audit: type=1326 audit(1771776117.550:3044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15113 comm="syz.4.2709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf879c629 code=0x7ffc0000 [ 692.621352][ T29] audit: type=1326 audit(1771776117.550:3045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15113 comm="syz.4.2709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf879c629 code=0x7ffc0000 [ 692.645544][ T29] audit: type=1326 audit(1771776117.550:3046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15113 comm="syz.4.2709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf879c629 code=0x7ffc0000 [ 692.674880][ T29] audit: type=1326 audit(1771776117.550:3047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15113 comm="syz.4.2709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7efdf879c629 code=0x7ffc0000 [ 692.698551][ T29] audit: type=1326 audit(1771776117.550:3048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15113 comm="syz.4.2709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf879c629 code=0x7ffc0000 [ 692.862954][ T5907] usb 2-1: USB disconnect, device number 72 [ 692.955318][ T29] audit: type=1326 audit(1771776117.550:3049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15113 comm="syz.4.2709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf879c629 code=0x7ffc0000 [ 693.023523][ C1] sd 0:0:1:0: [sda] tag#2073 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 693.034061][ C1] sd 0:0:1:0: [sda] tag#2073 CDB: Write(6) 0a 00 72 47 43 76 [ 693.200636][ T29] audit: type=1326 audit(1771776117.550:3050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15113 comm="syz.4.2709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7efdf879c629 code=0x7ffc0000 [ 693.331739][ T29] audit: type=1326 audit(1771776117.550:3051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15113 comm="syz.4.2709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7efdf879c629 code=0x7ffc0000 [ 693.536498][T15131] tipc: Enabling of bearer rejected, failed to enable media [ 694.437347][T15150] netlink: 179596 bytes leftover after parsing attributes in process `syz.5.2717'. [ 695.451845][T15165] overlayfs: missing 'lowerdir' [ 696.769884][T15188] syzkaller0: entered promiscuous mode [ 696.785928][T15188] syzkaller0: entered allmulticast mode [ 697.293699][T15200] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2732'. [ 697.556607][T15211] loop2: detected capacity change from 0 to 7 [ 697.569567][T15211] Dev loop2: unable to read RDB block 7 [ 697.594961][T15211] loop2: unable to read partition table [ 697.601370][T15211] loop2: partition table beyond EOD, truncated [ 697.611566][T15211] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 697.634065][T15214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2737'. [ 697.793546][T15218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2740'. [ 699.980446][T15251] syzkaller0: entered promiscuous mode [ 699.983635][T15255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.002965][T15255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.021581][T15251] syzkaller0: entered allmulticast mode [ 700.506403][T15278] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2760'. [ 700.525625][T15278] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2760'. [ 700.862175][T15282] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2761'. [ 700.939999][ C1] sd 0:0:1:0: [sda] tag#2088 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 700.950535][ C1] sd 0:0:1:0: [sda] tag#2088 CDB: Read(6) 08 00 00 00 00 00 [ 702.331170][T15314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.475250][T15314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.519355][T15314] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2771'. [ 702.692206][T15323] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 702.701045][T15323] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 702.858937][T15329] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2774'. [ 703.084874][ T5906] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 703.310638][ T5906] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 703.355878][ T5906] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 703.383049][T15340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 703.421764][ T5906] usb 4-1: config 0 has no interface number 0 [ 703.435635][T15340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.461467][ T5906] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 703.470623][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.479307][ T5906] usb 4-1: Product: syz [ 703.523093][ T5906] usb 4-1: Manufacturer: syz [ 703.537674][ T5906] usb 4-1: SerialNumber: syz [ 703.549703][ T5906] usb 4-1: config 0 descriptor?? [ 703.591007][ T5906] uvcvideo 4-1:0.64: probe with driver uvcvideo failed with error -22 [ 703.639949][T15340] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 703.925620][T15348] netlink: 'syz.5.2783': attribute type 9 has an invalid length. [ 703.939428][T15348] netlink: 'syz.5.2783': attribute type 11 has an invalid length. [ 703.956842][T15348] netlink: 'syz.5.2783': attribute type 12 has an invalid length. [ 703.981735][T15348] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.2783'. [ 704.111283][T15350] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2784'. [ 704.625954][T11626] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 704.663816][T15356] netlink: 'syz.4.2786': attribute type 3 has an invalid length. [ 704.858831][T11626] usb 6-1: Using ep0 maxpacket: 16 [ 704.885111][T11626] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 704.901946][T11626] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 704.933099][T11626] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 704.973932][T11626] usb 6-1: config 1 interface 0 has no altsetting 0 [ 705.000031][T11626] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 705.009530][T11626] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.018010][T11626] usb 6-1: Product: syz [ 705.033510][T11626] usb 6-1: Manufacturer: syz [ 705.043981][T11626] usb 6-1: SerialNumber: syz [ 705.292315][T11626] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 48 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 705.633365][T11626] usb 4-1: USB disconnect, device number 77 [ 707.669826][T15387] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2797'. [ 708.066089][T15395] input: syz0 as /devices/virtual/input/input53 [ 709.003902][T15408] xt_l2tp: v2 sid > 0xffff: 4294967293 [ 709.034820][T11626] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 709.194918][T11626] usb 2-1: device descriptor read/64, error -71 [ 709.684840][T11626] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 709.827710][T11626] usb 2-1: device descriptor read/64, error -71 [ 709.945254][T11626] usb usb2-port1: attempt power cycle [ 710.079684][ T29] audit: type=1326 audit(1771776135.110:3052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15426 comm="syz.2.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe019c629 code=0x7ffc0000 [ 710.113812][ T29] audit: type=1326 audit(1771776135.110:3053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15426 comm="syz.2.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe019c629 code=0x7ffc0000 [ 710.139919][ T29] audit: type=1326 audit(1771776135.110:3054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15426 comm="syz.2.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe019c629 code=0x7ffc0000 [ 710.225400][ T29] audit: type=1326 audit(1771776135.110:3055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15426 comm="syz.2.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe019c629 code=0x7ffc0000 [ 710.279341][ T29] audit: type=1326 audit(1771776135.130:3056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15426 comm="syz.2.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f3fe019c629 code=0x7ffc0000 [ 710.302035][ T29] audit: type=1326 audit(1771776135.130:3057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15426 comm="syz.2.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe019c629 code=0x7ffc0000 [ 710.326886][ T29] audit: type=1326 audit(1771776135.130:3058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15426 comm="syz.2.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe019c629 code=0x7ffc0000 [ 710.350027][T11626] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 710.389434][T11626] usb 2-1: device descriptor read/8, error -71 [ 710.409258][ T29] audit: type=1326 audit(1771776135.130:3059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15426 comm="syz.2.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3fe019c629 code=0x7ffc0000 [ 710.434035][ T29] audit: type=1326 audit(1771776135.130:3060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15426 comm="syz.2.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3fe019c629 code=0x7ffc0000 [ 710.445378][T15431] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2809'. [ 710.566858][T15352] usblp0:failed reading printer status (-110) [ 710.584885][ T24] usb 6-1: USB disconnect, device number 48 [ 710.593046][ T24] usblp0: removed [ 710.646325][T11626] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 710.715273][T11626] usb 2-1: device descriptor read/8, error -71 [ 710.985450][T11626] usb usb2-port1: unable to enumerate USB device [ 711.322586][T15444] input: syz0 as /devices/virtual/input/input54 [ 712.855712][T15469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 712.865552][T11626] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 712.882219][T15469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.044833][ T5906] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 713.074188][T11626] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 713.108900][T11626] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 713.129613][T11626] usb 3-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28 [ 713.232287][T11626] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.244757][T11626] usb 3-1: Product: syz [ 713.248928][T11626] usb 3-1: Manufacturer: syz [ 713.269290][ T5906] usb 4-1: device descriptor read/64, error -71 [ 713.270108][T11626] usb 3-1: SerialNumber: syz [ 713.335610][T11626] usb 3-1: config 0 descriptor?? [ 713.355700][T15464] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 713.362973][T15464] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 713.522142][T11626] option 3-1:0.0: GSM modem (1-port) converter detected [ 713.574827][ T5906] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 713.588659][T11626] usb 3-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 713.671620][T15483] xt_connbytes: Forcing CT accounting to be enabled [ 713.678624][T15483] set match dimension is over the limit! [ 713.784913][ T5906] usb 4-1: device descriptor read/64, error -71 [ 713.831070][T11626] usb 3-1: USB disconnect, device number 107 [ 713.842166][T11626] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 713.854415][T11626] option 3-1:0.0: device disconnected [ 713.903170][ T5906] usb usb4-port1: attempt power cycle [ 714.188292][ T29] audit: type=1800 audit(1771776139.190:3061): pid=15478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2823" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=80332 res=0 errno=0 [ 714.314852][ T5906] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 714.335263][ T5906] usb 4-1: device descriptor read/8, error -71 [ 714.586776][ T5906] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 714.628377][ T5906] usb 4-1: device descriptor read/8, error -71 [ 714.724235][T15498] netlink: 'syz.1.2830': attribute type 30 has an invalid length. [ 714.733926][T15498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 714.755124][ T5906] usb usb4-port1: unable to enumerate USB device [ 714.995171][T15503] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2831'. [ 715.027407][T15503] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2831'. [ 715.106659][T15503] gretap0: entered promiscuous mode [ 715.120006][T15509] FAULT_INJECTION: forcing a failure. [ 715.120006][T15509] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 715.169023][T15509] CPU: 0 UID: 0 PID: 15509 Comm: syz.5.2832 Tainted: G L syzkaller #0 PREEMPT(full) [ 715.169053][T15509] Tainted: [L]=SOFTLOCKUP [ 715.169060][T15509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 715.169071][T15509] Call Trace: [ 715.169078][T15509] [ 715.169087][T15509] dump_stack_lvl+0xe8/0x150 [ 715.169118][T15509] should_fail_ex+0x412/0x560 [ 715.169143][T15509] _copy_from_user+0x2d/0xb0 [ 715.169167][T15509] input_event_from_user+0xb1/0x290 [ 715.169192][T15509] ? __pfx_input_event_from_user+0x10/0x10 [ 715.169224][T15509] evdev_write+0x2c7/0x4c0 [ 715.169251][T15509] ? __pfx_evdev_write+0x10/0x10 [ 715.169273][T15509] ? bpf_lsm_file_permission+0x9/0x20 [ 715.169294][T15509] ? security_file_permission+0x75/0x260 [ 715.169322][T15509] ? rw_verify_area+0x255/0x4d0 [ 715.169339][T15509] ? __pfx_evdev_write+0x10/0x10 [ 715.169360][T15509] vfs_write+0x29a/0xb90 [ 715.169387][T15509] ? __pfx_vfs_write+0x10/0x10 [ 715.169404][T15509] ? __fget_files+0x2a/0x420 [ 715.169430][T15509] ? __fget_files+0x2a/0x420 [ 715.169454][T15509] ? __fget_files+0x3a0/0x420 [ 715.169477][T15509] ? __fget_files+0x2a/0x420 [ 715.169509][T15509] ksys_write+0x150/0x270 [ 715.169528][T15509] ? __pfx_ksys_write+0x10/0x10 [ 715.169554][T15509] do_syscall_64+0x14d/0xf80 [ 715.169580][T15509] ? trace_irq_disable+0x3b/0x150 [ 715.169605][T15509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.169624][T15509] ? clear_bhb_loop+0x40/0x90 [ 715.169647][T15509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.169666][T15509] RIP: 0033:0x7f9fccd9c629 [ 715.169685][T15509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 715.169701][T15509] RSP: 002b:00007f9fcdbd9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 715.169720][T15509] RAX: ffffffffffffffda RBX: 00007f9fcd015fa0 RCX: 00007f9fccd9c629 [ 715.169750][T15509] RDX: 00000000000012d8 RSI: 0000200000000040 RDI: 0000000000000004 [ 715.169763][T15509] RBP: 00007f9fcdbd9090 R08: 0000000000000000 R09: 0000000000000000 [ 715.169776][T15509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 715.169788][T15509] R13: 00007f9fcd016038 R14: 00007f9fcd015fa0 R15: 00007f9fcd13fa48 [ 715.169818][T15509] [ 715.173230][T15503] gretap0: left promiscuous mode [ 715.569141][ T6762] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 715.578837][ T6762] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 715.587015][ T6762] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 715.608407][ T6762] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 715.616502][ T6762] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 715.974181][ T5906] usb 5-1: USB disconnect, device number 28 [ 716.015088][T11626] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 716.043160][T15534] FAULT_INJECTION: forcing a failure. [ 716.043160][T15534] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 716.057095][T15534] CPU: 0 UID: 0 PID: 15534 Comm: syz.3.2841 Tainted: G L syzkaller #0 PREEMPT(full) [ 716.057122][T15534] Tainted: [L]=SOFTLOCKUP [ 716.057128][T15534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 716.057136][T15534] Call Trace: [ 716.057142][T15534] [ 716.057148][T15534] dump_stack_lvl+0xe8/0x150 [ 716.057176][T15534] should_fail_ex+0x412/0x560 [ 716.057198][T15534] prepare_alloc_pages+0x22a/0x650 [ 716.057221][T15534] __alloc_frozen_pages_noprof+0x12f/0x380 [ 716.057242][T15534] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 716.057262][T15534] ? __pfx_policy_nodemask+0x10/0x10 [ 716.057288][T15534] alloc_pages_mpol+0x232/0x4a0 [ 716.057310][T15534] folio_alloc_mpol_noprof+0x39/0x70 [ 716.057329][T15534] shmem_alloc_and_add_folio+0x445/0xf80 [ 716.057356][T15534] ? filemap_get_entry+0xca/0x320 [ 716.057369][T15534] ? filemap_get_entry+0xca/0x320 [ 716.057385][T15534] ? filemap_get_entry+0x2ac/0x320 [ 716.057400][T15534] ? __pfx_filemap_get_entry+0x10/0x10 [ 716.057415][T15534] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 716.057448][T15534] shmem_get_folio_gfp+0x5a9/0x1670 [ 716.057484][T15534] shmem_fallocate+0x96f/0xec0 [ 716.057514][T15534] ? __pfx_shmem_fallocate+0x10/0x10 [ 716.057549][T15534] vfs_fallocate+0x669/0x7e0 [ 716.057564][T15534] ? __fget_files+0x2a/0x420 [ 716.057586][T15534] ? __pfx_vfs_fallocate+0x10/0x10 [ 716.057601][T15534] ? __fget_files+0x2a/0x420 [ 716.057627][T15534] __x64_sys_fallocate+0xc0/0x110 [ 716.057647][T15534] do_syscall_64+0x14d/0xf80 [ 716.057671][T15534] ? trace_irq_disable+0x3b/0x150 [ 716.057690][T15534] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.057705][T15534] ? clear_bhb_loop+0x40/0x90 [ 716.057725][T15534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.057741][T15534] RIP: 0033:0x7f396499c629 [ 716.057757][T15534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 716.057770][T15534] RSP: 002b:00007f3965922028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 716.057788][T15534] RAX: ffffffffffffffda RBX: 00007f3964c15fa0 RCX: 00007f396499c629 [ 716.057799][T15534] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 716.057808][T15534] RBP: 00007f3965922090 R08: 0000000000000000 R09: 0000000000000000 [ 716.057819][T15534] R10: 0000000000400001 R11: 0000000000000246 R12: 0000000000000002 [ 716.057828][T15534] R13: 00007f3964c16038 R14: 00007f3964c15fa0 R15: 00007f3964d3fa48 [ 716.057852][T15534] [ 716.384319][ T9836] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.429490][T11626] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 716.441243][T11626] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 716.468667][T11626] usb 2-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28 [ 716.474533][T15520] chnl_net:caif_netlink_parms(): no params data found [ 716.477864][T11626] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.492915][T11626] usb 2-1: Product: syz [ 716.497148][T11626] usb 2-1: Manufacturer: syz [ 716.501747][T11626] usb 2-1: SerialNumber: syz [ 716.526334][T11626] usb 2-1: config 0 descriptor?? [ 716.532080][T15523] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 716.540764][T15523] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 716.550416][T11626] option 2-1:0.0: GSM modem (1-port) converter detected [ 716.563690][T11626] usb 2-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 716.645189][ T5906] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 716.664169][ T9836] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.742562][ T9836] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.757440][T15520] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.765911][T11626] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 716.776462][T15520] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.789769][ T5911] usb 2-1: USB disconnect, device number 77 [ 716.805190][ T5911] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 716.815457][T15520] bridge_slave_0: entered allmulticast mode [ 716.820936][ T5906] usb 6-1: Using ep0 maxpacket: 32 [ 716.823105][T15520] bridge_slave_0: entered promiscuous mode [ 716.829825][ T5906] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 716.835160][T15520] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.849090][T15520] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.849244][ T5906] usb 6-1: config 0 has no interface number 0 [ 716.857732][T15520] bridge_slave_1: entered allmulticast mode [ 716.870805][T15520] bridge_slave_1: entered promiscuous mode [ 716.920460][ T9836] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.920899][ T5911] option 2-1:0.0: device disconnected [ 716.944144][ T5906] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 716.949538][T11626] usb 4-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 716.959331][ T5906] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 716.978162][T11626] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.978186][ T5906] usb 6-1: config 0 interface 255 has no altsetting 0 [ 716.990772][T11626] usb 4-1: Product: syz [ 716.996016][ T5906] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 717.006414][T11626] usb 4-1: Manufacturer: syz [ 717.006437][T11626] usb 4-1: SerialNumber: syz [ 717.029209][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.063048][ T5906] usb 6-1: config 0 descriptor?? [ 717.084308][T15520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 717.084635][ T5906] as10x_usb: device has been detected [ 717.115536][ T5906] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 717.118098][T15520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 717.147568][ T5906] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 717.177122][ T5906] as10x_usb: error during firmware upload part1 [ 717.183978][ T5906] Registered device nBox DVB-T Dongle [ 717.193650][T15520] team0: Port device team_slave_0 added [ 717.218390][T15554] xt_CT: You must specify a L4 protocol and not use inversions on it [ 717.232038][T15520] team0: Port device team_slave_1 added [ 717.273210][T11626] gspca_main: pac207-2.14.0 probing 093a:2476 [ 717.280076][T11626] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 717.292085][T11626] uvcvideo 4-1:13.0: Found UVC 0.00 device syz (093a:2476) [ 717.313692][T11626] uvcvideo 4-1:13.0: No valid video chain found. [ 717.339888][T11626] usb 4-1: USB disconnect, device number 82 [ 717.398987][T15520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 717.406559][T15520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 717.435765][T15520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 717.593298][T15520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 717.609711][T15520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 717.677362][T15520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 717.692668][ T6762] Bluetooth: hci5: command tx timeout [ 717.710259][ T9836] bridge_slave_1: left allmulticast mode [ 717.716103][ T9836] bridge_slave_1: left promiscuous mode [ 717.741168][ T9836] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.794976][ T5906] usb 3-1: new full-speed USB device number 108 using dummy_hcd [ 717.847968][ T9836] bridge_slave_0: left allmulticast mode [ 717.869455][ T9836] bridge_slave_0: left promiscuous mode [ 718.105768][ T5906] usb 3-1: config 0 has an invalid interface number: 30 but max is 0 [ 718.114191][ T9836] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.129333][ T5906] usb 3-1: config 0 has no interface number 0 [ 718.141763][ T5906] usb 3-1: config 0 interface 30 has no altsetting 0 [ 718.211371][ T5906] usb 3-1: New USB device found, idVendor=06cd, idProduct=0109, bcdDevice=25.04 [ 718.221431][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.230086][ T5906] usb 3-1: Product: syz [ 718.234350][ T5906] usb 3-1: Manufacturer: syz [ 718.239318][ T5906] usb 3-1: SerialNumber: syz [ 718.396504][ T24] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 718.573787][ T5906] usb 3-1: config 0 descriptor?? [ 718.599242][ T5906] hub 3-1:0.30: bad descriptor, ignoring hub [ 718.615295][ T5906] hub 3-1:0.30: probe with driver hub failed with error -5 [ 718.623467][ T5906] keyspan 3-1:0.30: Keyspan - (without firmware) converter detected [ 718.719583][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 718.730102][ T24] usb 2-1: config 0 has no interfaces? [ 718.739068][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 718.749493][ T24] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 718.765729][ T24] usb 2-1: Manufacturer: syz [ 718.807516][ T24] usb 2-1: config 0 descriptor?? [ 718.995252][ T5911] usb 3-1: USB disconnect, device number 108 [ 719.004086][ T5911] keyspan 3-1:0.30: device disconnected [ 719.185113][ T5906] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 719.582988][ T9836] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 719.611721][ T9836] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 719.633245][ T5911] usb 6-1: USB disconnect, device number 49 [ 719.656061][ T9836] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 719.657055][ T5911] Unregistered device nBox DVB-T Dongle [ 719.680347][ T9836] bond0 (unregistering): Released all slaves [ 719.714481][ T5911] as10x_usb: device has been disconnected [ 719.752938][ T9836] bond1 (unregistering): Released all slaves [ 719.765443][ T6762] Bluetooth: hci5: command tx timeout [ 719.813951][ T9836] bond2 (unregistering): Released all slaves [ 719.878185][ T9836] bond3 (unregistering): Released all slaves [ 719.980459][T15599] fuse: Unknown parameter 'ædŸç&}·‘JgéÏ—éų˜¿5ùSQçcf£20xffffffffffffffff' [ 720.468936][ T9836] tipc: Left network mode [ 720.700709][T15520] hsr_slave_0: entered promiscuous mode [ 720.707349][T15520] hsr_slave_1: entered promiscuous mode [ 720.714437][T15520] debugfs: 'hsr0' already exists in 'hsr' [ 720.720702][T15520] Cannot create hsr debugfs directory [ 721.016630][ T5907] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 721.204811][ T5907] usb 3-1: Using ep0 maxpacket: 8 [ 721.213759][ T5907] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 721.222602][ T5907] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 721.320417][ T5907] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 721.357566][ T5907] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 721.384767][ T5907] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 721.419673][ T5907] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 721.428832][ T5907] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 721.462554][ T5907] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 721.492218][ T5907] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 721.512417][ T5907] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 721.559964][ T5907] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 721.583081][ T5907] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 721.630455][ T5907] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 721.672310][ T5907] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 721.712660][ T5907] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 721.747129][ T9836] hsr_slave_0: left promiscuous mode [ 721.747991][ T5907] usb 3-1: string descriptor 0 read error: -22 [ 721.765730][ T5907] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 721.781875][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.794851][ T9836] hsr_slave_1: left promiscuous mode [ 721.802427][ T5907] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 721.816948][ T9836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 721.828341][ T9836] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 721.842645][ T9836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 721.854892][ T6762] Bluetooth: hci5: command tx timeout [ 721.862808][ T9836] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 721.877490][ T9836] batadv_slave_1: left promiscuous mode [ 722.014978][ T5907] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 722.029261][T15606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 722.058058][T15606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 722.155887][ T5907] usb 4-1: device descriptor read/64, error -71 [ 722.190652][ T9836] team0 (unregistering): Port device team_slave_1 removed [ 722.240316][ T9836] team0 (unregistering): Port device team_slave_0 removed [ 722.408371][ T5907] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 722.538822][ T5906] usb 2-1: USB disconnect, device number 78 [ 722.554843][ T5907] usb 4-1: device descriptor read/64, error -71 [ 722.573377][T15630] syzkaller0: entered promiscuous mode [ 722.578910][T15630] syzkaller0: entered allmulticast mode [ 722.665186][ T5907] usb usb4-port1: attempt power cycle [ 722.879058][T15634] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2861'. [ 722.898533][T15634] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2861'. [ 723.016914][ T5907] usb 4-1: new full-speed USB device number 86 using dummy_hcd [ 723.053542][ T5907] usb 4-1: device descriptor read/8, error -71 [ 723.190060][T15639] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2863'. [ 723.299359][ T5907] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 723.330795][ T5907] usb 4-1: device descriptor read/8, error -71 [ 723.445525][ T5907] usb usb4-port1: unable to enumerate USB device [ 723.929792][ T6762] Bluetooth: hci5: command tx timeout [ 724.169486][ T5906] usb 3-1: USB disconnect, device number 109 [ 724.642189][T15520] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 724.711757][T15520] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 724.859692][T15520] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 724.869515][ T9836] IPVS: stop unused estimator thread 0... [ 724.874842][ T5906] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 724.956629][T15520] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 725.053262][T15668] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2871'. [ 725.088967][T15668] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2871'. [ 725.125523][T15676] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2871'. [ 725.136900][ T5906] usb 2-1: config 0 has an invalid interface number: 30 but max is 0 [ 725.148520][ T5906] usb 2-1: config 0 has no interface number 0 [ 725.169373][T15677] netlink: 5128 bytes leftover after parsing attributes in process `syz.2.2872'. [ 725.178659][T15677] netlink: 5128 bytes leftover after parsing attributes in process `syz.2.2872'. [ 725.221962][ T5906] usb 2-1: config 0 interface 30 has no altsetting 0 [ 725.241667][T15677] netlink: 332 bytes leftover after parsing attributes in process `syz.2.2872'. [ 725.259889][ T5906] usb 2-1: New USB device found, idVendor=06cd, idProduct=0109, bcdDevice=25.04 [ 725.273977][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.313599][ T5906] usb 2-1: Product: syz [ 725.339468][T15681] syzkaller0: entered promiscuous mode [ 725.345223][T15681] syzkaller0: entered allmulticast mode [ 725.548855][ T5906] usb 2-1: Manufacturer: syz [ 725.553492][ T5906] usb 2-1: SerialNumber: syz [ 725.580729][T15520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 725.585918][ T5906] usb 2-1: config 0 descriptor?? [ 725.622377][ T5906] hub 2-1:0.30: bad descriptor, ignoring hub [ 725.633529][ T5906] hub 2-1:0.30: probe with driver hub failed with error -5 [ 725.664338][ T5906] keyspan 2-1:0.30: Keyspan - (without firmware) converter detected [ 725.737950][T15520] 8021q: adding VLAN 0 to HW filter on device team0 [ 725.803761][ T9664] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.810935][ T9664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 726.055301][ T5906] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 726.144045][ T9664] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.151257][ T9664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 726.321940][ T5906] usb 6-1: config 0 has an invalid interface number: 30 but max is 0 [ 726.337204][T15520] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 726.385134][ T5906] usb 6-1: config 0 has no interface number 0 [ 726.416296][ T5906] usb 6-1: config 0 interface 30 has no altsetting 0 [ 726.475654][T15520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 726.538941][ T5906] usb 6-1: New USB device found, idVendor=06cd, idProduct=0109, bcdDevice=25.04 [ 726.578605][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.624369][T15520] veth0_vlan: entered promiscuous mode [ 726.641312][ T5906] usb 6-1: Product: syz [ 726.681654][ T5906] usb 6-1: Manufacturer: syz [ 726.694757][ T5906] usb 6-1: SerialNumber: syz [ 726.711178][T15520] veth1_vlan: entered promiscuous mode [ 726.738465][ T5906] usb 6-1: config 0 descriptor?? [ 726.763285][ T5906] hub 6-1:0.30: bad descriptor, ignoring hub [ 726.788886][ T5906] hub 6-1:0.30: probe with driver hub failed with error -5 [ 726.820575][ T5906] keyspan 6-1:0.30: Keyspan - (without firmware) converter detected [ 727.033970][T15520] veth0_macvtap: entered promiscuous mode [ 727.101659][T15520] veth1_macvtap: entered promiscuous mode [ 727.108328][T11628] usb 6-1: USB disconnect, device number 50 [ 727.126042][T11628] keyspan 6-1:0.30: device disconnected [ 727.313966][T15520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 727.399610][T15520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 727.596479][ T9834] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.613931][ T9834] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.638523][ T9834] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.671101][ T9834] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.768092][ T5906] usb 2-1: USB disconnect, device number 79 [ 727.789145][ T5906] keyspan 2-1:0.30: device disconnected [ 727.908843][T15711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2876'. [ 727.981050][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.993357][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 728.143031][ T9664] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.175776][ T9664] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 728.629902][T15725] xt_CT: You must specify a L4 protocol and not use inversions on it [ 728.834836][T11628] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 729.004886][T11628] usb 5-1: Using ep0 maxpacket: 16 [ 729.031537][T11628] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 729.061676][T11628] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 729.104836][T11628] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 729.156272][T11628] usb 5-1: config 1 interface 0 has no altsetting 0 [ 729.189046][T11628] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 729.208689][T11628] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.233046][T11628] usb 5-1: Product: syz [ 729.244852][T11628] usb 5-1: Manufacturer: syz [ 729.254775][T11628] usb 5-1: SerialNumber: syz [ 729.304831][ T5906] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 729.354424][T15740] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2882'. [ 729.372820][T15740] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2882'. [ 729.407111][T15740] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2882'. [ 729.425668][T15746] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2881'. [ 729.472790][ T5906] usb 2-1: Using ep0 maxpacket: 32 [ 729.476981][T11628] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 29 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 729.487076][ T5906] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 729.517649][ T5906] usb 2-1: config 0 has no interface number 0 [ 729.543361][ T5906] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 729.583967][ T5906] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 729.615478][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.623978][ T5906] usb 2-1: Product: syz [ 729.644759][ T5906] usb 2-1: Manufacturer: syz [ 729.649378][ T5906] usb 2-1: SerialNumber: syz [ 729.672440][ T5906] usb 2-1: config 0 descriptor?? [ 729.700458][ T5906] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 729.723446][ T5906] em28xx 2-1:0.132: Video interface 132 found: [ 730.066935][T15006] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 730.077624][T15006] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 730.089623][T15006] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 730.098884][T15006] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 730.112279][T15006] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 730.121522][ T5906] em28xx 2-1:0.132: unknown em28xx chip ID (39) [ 730.254856][T11626] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 730.414955][T11626] usb 6-1: Using ep0 maxpacket: 16 [ 730.415950][ T5906] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 730.457055][T11626] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 730.488800][T11626] usb 6-1: config 1 has no interface number 1 [ 730.505052][T11626] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 730.524831][T11626] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 730.652227][ T5906] em28xx 2-1:0.132: board has no eeprom [ 730.652232][T11626] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 730.699345][T11626] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 730.734838][T11626] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.757173][ T5906] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 730.765508][T11626] usb 6-1: Product: syz [ 730.779113][T11626] usb 6-1: Manufacturer: syz [ 730.793762][ T5906] em28xx 2-1:0.132: analog set to bulk mode. [ 730.808086][ T5911] em28xx 2-1:0.132: Registering V4L2 extension [ 730.825383][T11626] usb 6-1: SerialNumber: syz [ 730.840815][ T5906] usb 2-1: USB disconnect, device number 80 [ 730.859027][ T5906] em28xx 2-1:0.132: Disconnecting em28xx [ 730.887415][T15758] chnl_net:caif_netlink_parms(): no params data found [ 731.296605][T11626] usb 6-1: 2:1 : format type 0 is detected, processed as PCM [ 731.433473][T15758] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.440775][T15758] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.448119][T15758] bridge_slave_0: entered allmulticast mode [ 731.456027][T15758] bridge_slave_0: entered promiscuous mode [ 731.497776][T15758] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.514567][T15758] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.538601][T15758] bridge_slave_1: entered allmulticast mode [ 731.567614][T15758] bridge_slave_1: entered promiscuous mode [ 731.684173][ T5911] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 731.721145][T15774] fuse: Bad value for 'group_id' [ 731.740383][T15774] fuse: Bad value for 'group_id' [ 731.748035][ T5911] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 731.763892][T15758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 731.774241][ T5911] em28xx 2-1:0.132: No AC97 audio processor [ 731.806267][ T5911] usb 2-1: Decoder not found [ 731.814913][ T5911] em28xx 2-1:0.132: failed to create media graph [ 731.833631][ T2974] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 731.846095][ T5911] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 731.854793][ T2974] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.869237][ T5911] em28xx 2-1:0.132: Remote control support is not available for this card. [ 731.881124][ T5906] em28xx 2-1:0.132: Closing input extension [ 731.931946][T15758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 731.944489][ T5906] em28xx 2-1:0.132: Freeing device [ 731.993371][ T2974] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 732.014938][ T2974] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.105790][T15758] team0: Port device team_slave_0 added [ 732.108523][T11626] usb 6-1: 2:1: cannot get freq at ep 0x82 [ 732.136552][ T2974] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 732.160188][ T2974] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.175602][T15006] Bluetooth: hci3: command tx timeout [ 732.217780][T15758] team0: Port device team_slave_1 added [ 732.251991][T11626] usb 6-1: USB disconnect, device number 51 [ 732.305016][ T5906] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 732.399956][ T2974] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 732.414424][ T2974] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.438235][T15758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 732.455026][T15758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.491291][T15758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 732.504973][ T5906] usb 2-1: Using ep0 maxpacket: 8 [ 732.508551][T15758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 732.530459][ T5906] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 732.539493][ T5906] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 732.549327][ T5906] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 732.555161][T15758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.587046][T15758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 732.590113][ T5906] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 732.645051][ T5906] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 732.673533][ T5906] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 732.792405][T15758] hsr_slave_0: entered promiscuous mode [ 732.798147][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.831001][T15758] hsr_slave_1: entered promiscuous mode [ 732.840469][T15758] debugfs: 'hsr0' already exists in 'hsr' [ 732.847132][T15758] Cannot create hsr debugfs directory [ 733.033174][ T5906] usb 2-1: usb_control_msg returned -32 [ 733.042230][ T5906] usbtmc 2-1:16.0: can't read capabilities [ 733.586692][ T2974] bridge_slave_1: left allmulticast mode [ 733.601879][ T2974] bridge_slave_1: left promiscuous mode [ 733.960776][ T2974] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.016121][ T2974] bridge_slave_0: left allmulticast mode [ 734.031981][ T2974] bridge_slave_0: left promiscuous mode [ 734.068604][ T2974] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.256895][T15006] Bluetooth: hci3: command tx timeout [ 734.414503][ T2974] bond1 (unregistering): (slave gretap1): Releasing active interface [ 734.776232][T15804] FAULT_INJECTION: forcing a failure. [ 734.776232][T15804] name failslab, interval 1, probability 0, space 0, times 0 [ 734.807687][T15722] usblp0:failed reading printer status (-110) [ 734.828812][T15804] CPU: 0 UID: 0 PID: 15804 Comm: syz.5.2891 Tainted: G L syzkaller #0 PREEMPT(full) [ 734.828832][T15804] Tainted: [L]=SOFTLOCKUP [ 734.828836][T15804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 734.828842][T15804] Call Trace: [ 734.828847][T15804] [ 734.828852][T15804] dump_stack_lvl+0xe8/0x150 [ 734.828870][T15804] should_fail_ex+0x412/0x560 [ 734.828885][T15804] should_failslab+0xa8/0x100 [ 734.828899][T15804] __kmalloc_noprof+0xe8/0x760 [ 734.828910][T15804] ? tomoyo_encode+0x28b/0x550 [ 734.828927][T15804] tomoyo_encode+0x28b/0x550 [ 734.828942][T15804] tomoyo_realpath_from_path+0x58d/0x5d0 [ 734.828960][T15804] ? tomoyo_path_number_perm+0x219/0x630 [ 734.828971][T15804] tomoyo_path_number_perm+0x246/0x630 [ 734.828989][T15804] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 734.829002][T15804] ? __seccomp_filter+0x3e9/0x1ef0 [ 734.829036][T15804] security_file_ioctl+0xc3/0x2a0 [ 734.829054][T15804] __se_sys_ioctl+0x47/0x170 [ 734.829067][T15804] do_syscall_64+0x14d/0xf80 [ 734.829083][T15804] ? trace_irq_disable+0x3b/0x150 [ 734.829097][T15804] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.829108][T15804] ? clear_bhb_loop+0x40/0x90 [ 734.829121][T15804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.829131][T15804] RIP: 0033:0x7f9fccd9c629 [ 734.829141][T15804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 734.829150][T15804] RSP: 002b:00007f9fcdbd9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 734.829162][T15804] RAX: ffffffffffffffda RBX: 00007f9fcd015fa0 RCX: 00007f9fccd9c629 [ 734.829170][T15804] RDX: 0000200000000140 RSI: 00000000c05c6104 RDI: 0000000000000004 [ 734.829177][T15804] RBP: 00007f9fcdbd9090 R08: 0000000000000000 R09: 0000000000000000 [ 734.829183][T15804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 734.829190][T15804] R13: 00007f9fcd016038 R14: 00007f9fcd015fa0 R15: 00007f9fcd13fa48 [ 734.829205][T15804] [ 734.829217][T15804] ERROR: Out of memory at tomoyo_realpath_from_path. [ 735.091263][ T5906] usb 5-1: USB disconnect, device number 29 [ 735.099569][ T2974] bond2 (unregistering): (slave bridge3): Removing an active aggregator [ 735.111309][ T5906] usblp0: removed [ 735.134856][ T2974] bond2 (unregistering): (slave bridge3): Releasing backup interface [ 735.201270][ T2974] bridge3 (unregistering): left promiscuous mode [ 735.224764][ T2974] bridge3 (unregistering): left allmulticast mode [ 735.232754][T15812] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2893'. [ 735.250967][T15812] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2893'. [ 735.273481][T15812] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2893'. [ 735.284517][T11626] usb 2-1: USB disconnect, device number 81 [ 735.304932][ T5911] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 735.385693][ T2974] bond3 (unregistering): (slave bridge4): Removing an active aggregator [ 735.386198][ T2974] bond3 (unregistering): (slave bridge4): Releasing backup interface [ 735.416694][ T2974] bridge4 (unregistering): left promiscuous mode [ 735.416720][ T2974] bridge4 (unregistering): left allmulticast mode [ 735.479926][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.479961][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 735.479999][ T5911] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 735.480022][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.482794][ T5911] usb 3-1: config 0 descriptor?? [ 735.567190][ T2974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 735.573457][ T2974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 735.577601][ T2974] bond0 (unregistering): Released all slaves [ 735.611985][ T2974] bond1 (unregistering): Released all slaves [ 735.654301][ T2974] bond2 (unregistering): Released all slaves [ 735.714584][T15808] netlink: 'syz.2.2892': attribute type 5 has an invalid length. [ 735.751392][ T2974] bond3 (unregistering): Released all slaves [ 735.888226][T15831] netlink: 'syz.5.2898': attribute type 6 has an invalid length. [ 735.916383][T11626] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 735.916812][T15831] netlink: 'syz.5.2898': attribute type 7 has an invalid length. [ 735.988589][ T5911] hid-steam 0003:28DE:1142.0011: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 736.004377][ T2974] tipc: Disabling bearer [ 736.024998][ T2974] tipc: Left network mode [ 736.036864][T15831] netlink: 'syz.5.2898': attribute type 8 has an invalid length. [ 736.150650][ T5911] hid-steam 0003:28DE:1142.0011: Steam wireless receiver connected [ 736.171585][T11626] usb 2-1: Using ep0 maxpacket: 16 [ 736.184631][T11626] usb 2-1: unable to get BOS descriptor or descriptor too short [ 736.228431][T11626] usb 2-1: config 1 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 736.242352][ T5911] hid-steam 0003:28DE:1142.0012: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 736.244831][T11626] usb 2-1: config 1 interface 0 has no altsetting 0 [ 736.341805][T15006] Bluetooth: hci3: command tx timeout [ 736.428759][T11626] usb 2-1: New USB device found, idVendor=05ac, idProduct=0217, bcdDevice= 0.40 [ 736.438785][T11626] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.446996][T11626] usb 2-1: Product: syz [ 736.451176][T11626] usb 2-1: Manufacturer: syz [ 736.455141][ T5911] usb 3-1: USB disconnect, device number 110 [ 736.462695][T11626] usb 2-1: SerialNumber: syz [ 736.524119][ T5911] hid-steam 0003:28DE:1142.0011: Steam wireless receiver disconnected [ 736.628513][ T5886] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 736.740385][T15841] fido_id[15841]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 736.778207][T11626] appletouch 2-1:1.0: Failed to read mode from device. [ 736.793354][ T2974] IPVS: stopping master sync thread 6285 ... [ 736.831598][T11626] appletouch 2-1:1.0: probe with driver appletouch failed with error -5 [ 736.860316][T11626] usb 2-1: USB disconnect, device number 82 [ 736.927882][ T5886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 736.971863][ T5886] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 737.001944][ T5886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 737.054287][ T5886] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 737.191593][ T5886] usb 6-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 737.200725][ T5886] usb 6-1: New USB device strings: Mfr=28, Product=2, SerialNumber=3 [ 737.224890][ T5886] usb 6-1: Product: syz [ 737.237071][ T5886] usb 6-1: Manufacturer: syz [ 737.265092][ T5886] usb 6-1: SerialNumber: syz [ 737.290590][ T5886] usb 6-1: config 0 descriptor?? [ 737.318059][ T5886] kvaser_usb 6-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 737.377348][ T5886] kvaser_usb 6-1:0.0: error -EMSGSIZE: Failed to initialize card [ 737.401577][ T5886] kvaser_usb 6-1:0.0: probe with driver kvaser_usb failed with error -90 [ 737.471512][T15857] Invalid logical block size (-1048577) [ 737.917373][T15758] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 737.953989][T15758] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 737.995956][T15758] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 738.035839][ T5911] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 738.130917][ T2974] hsr_slave_0: left promiscuous mode [ 738.147799][ T2974] hsr_slave_1: left promiscuous mode [ 738.160782][ T2974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 738.186504][ T2974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 738.200101][ T5911] usb 2-1: Using ep0 maxpacket: 16 [ 738.223228][ T5911] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 738.243170][ T5911] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 738.281216][ T5911] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 738.354931][ T5911] usb 2-1: config 1 interface 0 has no altsetting 0 [ 738.384403][ T5911] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 738.406048][T15006] Bluetooth: hci3: command tx timeout [ 738.412694][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.442362][ T5911] usb 2-1: Product: syz [ 738.487965][ T5911] usb 2-1: Manufacturer: syz [ 738.511454][ T5911] usb 2-1: SerialNumber: syz [ 738.817035][ T5911] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 83 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 738.867008][ T2974] team0 (unregistering): Port device team_slave_1 removed [ 738.914015][ T2974] team0 (unregistering): Port device team_slave_0 removed [ 739.083152][ T5911] usb 6-1: USB disconnect, device number 52 [ 739.238451][T15873] fuse: Bad value for 'group_id' [ 739.243482][T15873] fuse: Bad value for 'group_id' [ 739.557359][T11626] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 740.085230][T11626] usb 5-1: Using ep0 maxpacket: 8 [ 740.092234][T11626] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 740.106574][T11626] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 740.157949][T11626] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 740.194994][ T5907] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 740.202773][T11626] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 740.226236][T15758] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 740.233409][T11626] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 740.290063][T11626] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 740.327796][T11626] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.395278][ T5907] usb 6-1: Using ep0 maxpacket: 32 [ 740.411959][ T5907] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 740.430790][ T5907] usb 6-1: can't read configurations, error -22 [ 740.585363][ T5907] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 740.609852][T11626] usb 5-1: usb_control_msg returned -32 [ 740.622300][T11626] usbtmc 5-1:16.0: can't read capabilities [ 740.712241][T15758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 740.761197][ T5907] usb 6-1: Using ep0 maxpacket: 32 [ 740.783522][ T5907] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 740.794257][T15758] 8021q: adding VLAN 0 to HW filter on device team0 [ 740.806926][ T5907] usb 6-1: can't read configurations, error -22 [ 740.813628][ T5907] usb usb6-port1: attempt power cycle [ 740.838774][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.845972][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 740.878531][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.885713][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 741.056448][T15758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 741.174888][ T5907] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 741.178095][T15758] veth0_vlan: entered promiscuous mode [ 741.215060][T15758] veth1_vlan: entered promiscuous mode [ 741.215777][ T5907] usb 6-1: Using ep0 maxpacket: 32 [ 741.248384][ T5907] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 741.258390][ T5907] usb 6-1: can't read configurations, error -22 [ 741.265299][T15758] veth0_macvtap: entered promiscuous mode [ 741.278883][T15758] veth1_macvtap: entered promiscuous mode [ 741.313581][T15758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 741.335277][T15758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 741.377701][ T9834] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.397447][ T5907] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 741.407437][ T9834] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.437572][ T9834] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.449374][ T5907] usb 6-1: Using ep0 maxpacket: 32 [ 741.479731][ T5907] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 741.493831][ T9834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.505879][ T5907] usb 6-1: can't read configurations, error -22 [ 741.524284][ T5907] usb usb6-port1: unable to enumerate USB device [ 741.554277][T15906] FAULT_INJECTION: forcing a failure. [ 741.554277][T15906] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 741.595057][T15906] CPU: 0 UID: 0 PID: 15906 Comm: syz.2.2908 Tainted: G L syzkaller #0 PREEMPT(full) [ 741.595087][T15906] Tainted: [L]=SOFTLOCKUP [ 741.595094][T15906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 741.595105][T15906] Call Trace: [ 741.595112][T15906] [ 741.595120][T15906] dump_stack_lvl+0xe8/0x150 [ 741.595150][T15906] should_fail_ex+0x412/0x560 [ 741.595175][T15906] _copy_from_user+0x2d/0xb0 [ 741.595202][T15906] generic_map_update_batch+0x648/0x990 [ 741.595234][T15906] ? __pfx_generic_map_update_batch+0x10/0x10 [ 741.595257][T15906] ? __fget_files+0x2a/0x420 [ 741.595287][T15906] ? __pfx_generic_map_update_batch+0x10/0x10 [ 741.595309][T15906] bpf_map_do_batch+0x39b/0x630 [ 741.595332][T15906] __sys_bpf+0x7c1/0x950 [ 741.595359][T15906] ? __pfx___sys_bpf+0x10/0x10 [ 741.595397][T15906] ? ksys_write+0x242/0x270 [ 741.595418][T15906] ? __pfx_ksys_write+0x10/0x10 [ 741.595443][T15906] __x64_sys_bpf+0x7c/0x90 [ 741.595468][T15906] do_syscall_64+0x14d/0xf80 [ 741.595495][T15906] ? trace_irq_disable+0x3b/0x150 [ 741.595519][T15906] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.595537][T15906] ? clear_bhb_loop+0x40/0x90 [ 741.595560][T15906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.595578][T15906] RIP: 0033:0x7f3fe019c629 [ 741.595595][T15906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 741.595611][T15906] RSP: 002b:00007f3fe109c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 741.595631][T15906] RAX: ffffffffffffffda RBX: 00007f3fe0415fa0 RCX: 00007f3fe019c629 [ 741.595644][T15906] RDX: 0000000000000038 RSI: 0000200000000180 RDI: 000000000000001a [ 741.595656][T15906] RBP: 00007f3fe109c090 R08: 0000000000000000 R09: 0000000000000000 [ 741.595668][T15906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 741.595679][T15906] R13: 00007f3fe0416038 R14: 00007f3fe0415fa0 R15: 00007f3fe053fa48 [ 741.595707][T15906] [ 741.981014][ T2974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 742.020437][ T2974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 742.118817][ T9835] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 742.128019][ T9835] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 742.638785][T15929] syzkaller1: entered promiscuous mode [ 742.652995][T15929] syzkaller1: entered allmulticast mode [ 743.015328][T11626] usb 5-1: USB disconnect, device number 30 [ 743.287518][T15934] tipc: Started in network mode [ 743.305815][T15934] tipc: Node identity ae823f022a28, cluster identity 4711 [ 743.614073][T15934] tipc: Enabled bearer , priority 0 [ 743.808399][T15934] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 743.844182][T15934] tipc: Resetting bearer [ 744.079971][T15931] tipc: Disabling bearer [ 744.095208][T15860] usblp0:failed reading printer status (-110) [ 744.195679][T15951] @ÿ: renamed from veth0_vlan (while UP) [ 744.274291][ T24] usb 2-1: USB disconnect, device number 83 [ 744.330628][ T24] usblp0: removed [ 744.945540][ T29] audit: type=1326 audit(1771776169.960:3063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15961 comm="syz.1.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776739c629 code=0x7ffc0000 [ 744.987279][ T29] audit: type=1326 audit(1771776169.960:3064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15961 comm="syz.1.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776739c629 code=0x7ffc0000 [ 745.063092][ T29] audit: type=1326 audit(1771776169.960:3065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15961 comm="syz.1.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776739c629 code=0x7ffc0000 [ 745.174846][ T29] audit: type=1326 audit(1771776169.960:3062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15961 comm="syz.1.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776739c629 code=0x7ffc0000 [ 745.239350][ T29] audit: type=1326 audit(1771776169.960:3066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15961 comm="syz.1.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f776739c629 code=0x7ffc0000 [ 745.419472][T15967] input: syz0 as /devices/virtual/input/input56 [ 745.487650][ T29] audit: type=1326 audit(1771776169.960:3067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15961 comm="syz.1.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776739c629 code=0x7ffc0000 [ 745.598871][ T29] audit: type=1326 audit(1771776169.960:3068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15961 comm="syz.1.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776739c629 code=0x7ffc0000 [ 745.732879][ T29] audit: type=1326 audit(1771776169.960:3069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15961 comm="syz.1.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f776739c629 code=0x7ffc0000 [ 745.816108][ T29] audit: type=1326 audit(1771776169.960:3070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15961 comm="syz.1.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f776739c629 code=0x7ffc0000 [ 746.829956][ T6762] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 746.873712][ T6762] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 746.897687][ T6762] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 746.951627][ T6762] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 746.989730][ T6762] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 747.228312][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.234651][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.286519][T15990] input: syz0 as /devices/virtual/input/input57 [ 748.047061][T16002] fuse: Bad value for 'group_id' [ 748.072289][T16002] fuse: Bad value for 'group_id' [ 748.277368][ T9836] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 748.309326][ T9836] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.365006][ T5893] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 748.507204][ T9836] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 748.514880][T11626] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 748.526337][ T9836] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.545231][ T5893] usb 5-1: Using ep0 maxpacket: 8 [ 748.569179][ T5893] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 748.690099][ T29] audit: type=1326 audit(1771776173.660:3071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16008 comm="syz.5.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fccd9c629 code=0x7ffc0000 [ 748.715304][ T5893] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 748.726073][ T5893] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 748.754189][ T5893] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 748.764832][T11626] usb 2-1: device descriptor read/64, error -71 [ 748.771956][ T5893] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 748.785707][ T5893] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 748.794853][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.805801][ T9836] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 748.831916][ T9836] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.879615][T16015] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 748.925052][ T24] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 748.956732][T15997] chnl_net:caif_netlink_parms(): no params data found [ 749.005802][T11626] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 749.032254][ T5893] usb 5-1: usb_control_msg returned -32 [ 749.041786][ T5893] usbtmc 5-1:16.0: can't read capabilities [ 749.058699][ T6762] Bluetooth: hci1: command tx timeout [ 749.080987][T16019] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2929'. [ 749.106110][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 749.129332][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 749.141767][ T24] usb 6-1: New USB device found, idVendor=0dfc, idProduct=0101, bcdDevice= 0.00 [ 749.145084][T11626] usb 2-1: device descriptor read/64, error -71 [ 749.183806][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.228078][ T24] usb 6-1: config 0 descriptor?? [ 749.265576][T11626] usb usb2-port1: attempt power cycle [ 749.303288][T15997] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.358472][T15997] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.387936][T15997] bridge_slave_0: entered allmulticast mode [ 749.414533][T15997] bridge_slave_0: entered promiscuous mode [ 749.464608][ T9836] bond0: left allmulticast mode [ 749.478828][ T9836] bond_slave_0: left allmulticast mode [ 749.491096][ T9836] bond_slave_1: left allmulticast mode [ 749.502713][ T9836] batadv0: left allmulticast mode [ 749.529277][ T9836] bridge0: port 3(bond0) entered disabled state [ 749.582093][ T9836] bridge_slave_1: left allmulticast mode [ 749.596073][ T9836] bridge_slave_1: left promiscuous mode [ 749.605323][T11626] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 749.615771][ T9836] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.625766][T11626] usb 2-1: device descriptor read/8, error -71 [ 749.639645][ T9836] bridge_slave_0: left allmulticast mode [ 749.652154][ T9836] bridge_slave_0: left promiscuous mode [ 749.668550][ T9836] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.939010][T11626] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 749.988849][T11626] usb 2-1: device descriptor read/8, error -71 [ 750.106990][T11626] usb usb2-port1: unable to enumerate USB device [ 751.132677][ T6762] Bluetooth: hci1: command tx timeout [ 751.184324][ T5906] usb 5-1: USB disconnect, device number 31 [ 751.322228][ T9836] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 751.360451][ T9836] bond_slave_0: left promiscuous mode [ 751.387411][ T9836] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 751.409259][ T9836] bond_slave_1: left promiscuous mode [ 751.423595][ T9836] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 751.439488][ T9836] batadv0: left promiscuous mode [ 751.458091][ T9836] bond0 (unregistering): Released all slaves [ 751.489651][ T9836] bond1 (unregistering): Released all slaves [ 751.544115][T15997] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.572270][T15997] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.599704][T15997] bridge_slave_1: entered allmulticast mode [ 751.632476][T15997] bridge_slave_1: entered promiscuous mode [ 751.663692][ T9836] tipc: Left network mode [ 751.762060][T15997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 751.787495][T15997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 751.961484][T15997] team0: Port device team_slave_0 added [ 751.983068][T15997] team0: Port device team_slave_1 added [ 752.072331][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 752.078572][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 752.092745][T16071] macsec1: entered promiscuous mode [ 752.108570][ T24] usb 6-1: USB disconnect, device number 57 [ 752.116711][T16071] macsec1: entered allmulticast mode [ 752.190215][T15997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 752.203066][T15997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 752.230464][T15997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 752.267294][T16073] syzkaller0: entered promiscuous mode [ 752.272795][T16073] syzkaller0: entered allmulticast mode [ 752.280825][T15997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 752.289861][T15997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 752.318265][T15997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 752.368111][T16079] lo: entered promiscuous mode [ 752.384552][T16079] lo: entered allmulticast mode [ 752.431186][T16079] netlink: 'syz.4.2942': attribute type 2 has an invalid length. [ 752.457802][T16079] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 752.656015][ T5886] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 752.819721][ T5886] usb 5-1: Using ep0 maxpacket: 32 [ 752.826684][ T5886] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 752.851298][ T5886] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 752.870012][ T5886] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 752.888085][ T5886] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 752.926184][ T5886] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 752.943303][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.951895][ T5886] usb 5-1: Product: syz [ 752.963098][ T5886] usb 5-1: Manufacturer: syz [ 752.976286][ T5886] usb 5-1: SerialNumber: syz [ 753.010295][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 753.027750][ T5886] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input59 [ 753.205107][ T6762] Bluetooth: hci1: command tx timeout [ 753.236430][ T5886] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 753.245733][ T5886] (id 0x00) [ 753.349583][ T5886] rc_core: IR keymap rc-imon-pad not found [ 753.366916][ T5886] Registered IR keymap rc-empty [ 753.376637][T11626] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 753.382934][ T5886] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 753.396781][ T5886] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 753.469455][ T5886] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 753.492440][T16108] raw_sendmsg: syz.1.2946 forgot to set AF_INET. Fix it! [ 753.492842][ T5886] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input60 [ 753.536702][T11626] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 753.553754][T11626] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 753.570877][ T5886] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:32> initialized [ 753.572518][T11626] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 753.594065][T11626] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 753.603821][T11626] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.623890][T11626] usb 4-1: config 0 descriptor?? [ 754.045820][T11626] plantronics 0003:047F:FFFF.0013: reserved main item tag 0xd [ 754.068632][T11626] plantronics 0003:047F:FFFF.0013: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 754.210751][ T5906] usb 5-1: USB disconnect, device number 32 [ 754.217919][T16081] imon:send_packet: packet tx failed (-71) [ 754.253993][T16081] imon:vfd_write: send packet #0 failed [ 754.595624][ T5906] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 754.754793][ T5906] usb 5-1: Using ep0 maxpacket: 32 [ 754.762243][ T5906] usb 5-1: config 0 interface 0 has no altsetting 0 [ 754.773572][T16111] kthread_run failed with err -4 [ 754.779672][ T5906] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 754.791372][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.800789][T16115] bridge0: port 3(veth0_to_bridge) entered blocking state [ 754.811002][ T5906] usb 5-1: Product: syz [ 754.816802][ T5906] usb 5-1: Manufacturer: syz [ 754.821580][ T5906] usb 5-1: SerialNumber: syz [ 754.834939][T16115] bridge0: port 3(veth0_to_bridge) entered disabled state [ 754.842566][T16115] veth0_to_bridge: entered allmulticast mode [ 754.853071][ T5906] usb 5-1: config 0 descriptor?? [ 754.853298][T16115] veth0_to_bridge: entered promiscuous mode [ 754.875246][T16115] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 754.890310][T16115] bridge0: port 3(veth0_to_bridge) entered blocking state [ 754.897782][T16115] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 755.011033][T15997] hsr_slave_0: entered promiscuous mode [ 755.021278][T15997] hsr_slave_1: entered promiscuous mode [ 755.027901][T15997] debugfs: 'hsr0' already exists in 'hsr' [ 755.033811][T15997] Cannot create hsr debugfs directory [ 755.128973][ T5906] gs_usb 5-1:0.0: Couldn't send data format (err=-71) [ 755.138927][ T5906] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 755.246007][ T5906] usb 5-1: USB disconnect, device number 33 [ 755.307659][ T6762] Bluetooth: hci1: command tx timeout [ 757.047295][ T5907] usb 4-1: USB disconnect, device number 88 [ 768.968067][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 768.981385][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 768.994824][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 769.008123][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 769.021515][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 769.034935][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 769.048244][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 769.061525][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 769.074883][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 769.088247][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 769.908589][T16156] input: syz0 as /devices/virtual/input/input62 [ 773.974790][ C1] net_ratelimit: 8928 callbacks suppressed [ 773.974811][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 773.975312][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 773.980975][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 773.993026][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 774.004906][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 774.018645][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 774.028784][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 774.043553][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 774.052664][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 774.064663][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 778.984975][ C1] net_ratelimit: 18088 callbacks suppressed [ 778.984997][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 778.985798][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 778.991265][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 779.003319][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 779.015197][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 779.035318][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 779.039123][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 779.053844][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 779.062928][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 779.074978][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 780.234740][ C1] sched: DL replenish lagged too much [ 783.994795][ C1] net_ratelimit: 18142 callbacks suppressed [ 783.994824][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 783.997381][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 784.001067][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 784.014822][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 784.024993][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 784.038810][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 784.048950][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 784.063654][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 784.072735][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 784.084826][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 789.004829][ C1] net_ratelimit: 20448 callbacks suppressed [ 789.004850][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 789.007628][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 789.011322][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 789.024814][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 789.035081][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 789.049033][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 789.059049][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 789.074019][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 789.082970][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 789.095062][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 794.014958][ C1] net_ratelimit: 20660 callbacks suppressed [ 794.014980][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 794.015704][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 794.021248][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 794.045637][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 794.057474][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 794.069467][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 794.081309][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 794.095292][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 794.105252][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 794.120048][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 799.024906][ C1] net_ratelimit: 20826 callbacks suppressed [ 799.024928][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 799.025277][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 799.031182][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 799.043317][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 799.055183][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 799.075849][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 799.079040][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 799.095401][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 799.102920][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 799.115065][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 804.035041][ C1] net_ratelimit: 17395 callbacks suppressed [ 804.035063][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 804.045100][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 804.053328][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 804.065231][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 804.077110][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 804.091882][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 804.101052][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 804.112970][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 804.124940][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 804.141702][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 809.044816][ C1] net_ratelimit: 21062 callbacks suppressed [ 809.044837][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 809.044871][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 809.051110][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 809.063273][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 809.075078][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 809.087475][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 809.099029][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 809.111043][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 809.122939][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 809.139866][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 814.054990][ C0] net_ratelimit: 21147 callbacks suppressed [ 814.055007][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 814.055011][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 814.055425][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 814.061254][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 814.073721][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 814.085137][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 814.097120][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 814.109058][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 814.129252][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 814.132921][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 819.064865][ C1] net_ratelimit: 21311 callbacks suppressed [ 819.064888][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 819.065722][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 819.071145][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 819.083225][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 819.095075][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 819.115832][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 819.119072][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 819.131104][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 819.142887][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 819.155339][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 824.074789][ C1] net_ratelimit: 21449 callbacks suppressed [ 824.074811][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 824.075372][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 824.081034][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 824.093125][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 824.105281][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 824.117691][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 824.129231][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 824.141215][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 824.153154][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 824.179402][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 829.084898][ C1] net_ratelimit: 21126 callbacks suppressed [ 829.084920][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 829.097367][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 829.103162][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 829.115089][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 829.126952][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 829.141293][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 829.150903][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 829.162906][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 829.174784][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 829.187166][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 834.094870][ C1] net_ratelimit: 21037 callbacks suppressed [ 834.094892][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 834.097648][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 834.101196][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 834.114921][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 834.125129][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 834.139478][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 834.149045][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 834.161077][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 834.172877][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 834.185320][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 839.104919][ C1] net_ratelimit: 21265 callbacks suppressed [ 839.104939][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 839.104968][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.111155][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 839.125564][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.135130][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 839.155249][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.158989][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 839.171397][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 839.182910][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 839.195021][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 844.114895][ C1] net_ratelimit: 21317 callbacks suppressed [ 844.114915][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 844.115390][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.121155][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 844.133229][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.145094][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 844.157442][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 844.168996][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 844.181023][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 844.192903][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 844.219350][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.125045][ C1] net_ratelimit: 21166 callbacks suppressed [ 849.125066][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 849.127774][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.131318][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 849.143453][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.155265][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 849.169592][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.179369][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 849.191286][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.203057][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 849.215503][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 854.134845][ C1] net_ratelimit: 21042 callbacks suppressed [ 854.134866][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 854.146341][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.153102][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 854.165046][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.176954][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 854.191243][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.200902][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 854.212845][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.224772][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 854.237160][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 859.144925][ C1] net_ratelimit: 21138 callbacks suppressed [ 859.144946][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 859.145579][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 859.151202][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 859.163278][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 859.175143][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 859.189435][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 859.199072][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 859.211165][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 859.222958][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 859.235371][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 864.154868][ C1] net_ratelimit: 21268 callbacks suppressed [ 864.154889][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 864.155039][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 864.161220][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 864.173265][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 864.185090][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 864.205339][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 864.209067][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 864.221117][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 864.232925][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 864.245387][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 869.164741][ C1] net_ratelimit: 20981 callbacks suppressed [ 869.164763][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 869.164800][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 869.171009][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 869.183071][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 869.194897][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 869.210073][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 869.218810][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 869.230879][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 869.242694][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 869.255081][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 874.175011][ C1] net_ratelimit: 20977 callbacks suppressed [ 874.175032][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 874.175430][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 874.181268][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 874.193309][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 874.205165][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 874.217212][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 874.229008][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 874.249363][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 874.252980][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 874.265001][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.184777][ C1] net_ratelimit: 21127 callbacks suppressed [ 879.184798][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 879.186872][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.191022][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 879.204785][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.214971][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 879.227348][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 879.238879][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 879.250857][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 879.262709][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 879.276255][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 884.194956][ C1] net_ratelimit: 21473 callbacks suppressed [ 884.194977][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 884.205103][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.213236][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 884.225133][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.237044][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 884.252234][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.260973][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 884.272925][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.284855][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 884.297279][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 889.204892][ C1] net_ratelimit: 21520 callbacks suppressed [ 889.204914][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 889.205719][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 889.211163][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 889.223171][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.235036][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 889.247107][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.258893][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 889.279733][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.282902][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 889.294977][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 894.214905][ C1] net_ratelimit: 21172 callbacks suppressed [ 894.214925][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 894.216565][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 894.221164][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 894.233264][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 894.245081][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 894.265151][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 894.269036][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 894.281034][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 894.292872][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 894.306374][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 899.224807][ C1] net_ratelimit: 21070 callbacks suppressed [ 899.224828][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 899.227696][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 899.231068][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 899.243168][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 899.254984][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 899.267389][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 899.278917][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 899.290906][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 899.302773][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 899.316332][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 904.234898][ C1] net_ratelimit: 21437 callbacks suppressed [ 904.234919][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 904.234984][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 904.241163][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 904.268372][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 904.277194][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 904.289151][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 904.301058][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 904.316463][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 904.325143][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 904.337165][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 905.011512][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 905.029346][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 907.984725][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 907.991693][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P16162/1:b..l P6791/1:b..l P5157/1:b..l [ 908.002512][ C0] rcu: (detected by 0, t=10503 jiffies, g=99281, q=1725 ncpus=2) [ 908.010331][ C0] task:jbd2/sda1-8 state:R running task stack:26080 pid:5157 tgid:5157 ppid:2 task_flags:0x240040 flags:0x00080000 [ 908.025062][ C0] Call Trace: [ 908.028354][ C0] [ 908.031293][ C0] __schedule+0x1585/0x5340 [ 908.035833][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 908.040966][ C0] ? __pfx___schedule+0x10/0x10 [ 908.045834][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 908.050789][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 908.056959][ C0] preempt_schedule_irq+0x4d/0xa0 [ 908.062008][ C0] irqentry_exit+0x599/0x620 [ 908.066611][ C0] ? trace_irq_disable+0x3b/0x150 [ 908.071658][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 908.077643][ C0] RIP: 0010:lock_release+0x94/0x3d0 [ 908.082854][ C0] Code: 85 0d 02 00 00 65 4c 8b 3d 11 f4 79 11 41 83 bf 14 0b 00 00 00 0f 85 f7 01 00 00 49 81 3e 20 74 df 93 0f 84 ea 01 00 00 9c 5b 48 c7 c7 5a b3 f0 8d e8 9f 91 0b 0a 65 ff 05 88 39 7a 11 c7 44 [ 908.102469][ C0] RSP: 0018:ffffc9000eadf300 EFLAGS: 00000202 [ 908.108543][ C0] RAX: 0000000000000000 RBX: 0000000000000202 RCX: 0000000080000001 [ 908.116533][ C0] RDX: 0000000000000000 RSI: ffffffff8c27a860 RDI: ffffffff8c27a820 [ 908.124515][ C0] RBP: ffff88801bc36f04 R08: ffff88801bc36ec7 R09: 1ffff11003786dd8 [ 908.132500][ C0] R10: dffffc0000000000 R11: ffffed1003786dd9 R12: 0000000000028afd [ 908.140482][ C0] R13: ffffffff823a023e R14: ffffffff8e7602e0 R15: ffff888037461e40 [ 908.148465][ C0] ? __update_page_owner_free_handle+0x2e/0x470 [ 908.154747][ C0] ? __update_page_owner_free_handle+0x2e/0x470 [ 908.161004][ C0] __update_page_owner_free_handle+0x451/0x470 [ 908.167169][ C0] ? __update_page_owner_free_handle+0x2e/0x470 [ 908.173428][ C0] __reset_page_owner+0x85/0x1f0 [ 908.178379][ C0] __free_frozen_pages+0xc2b/0xdb0 [ 908.183510][ C0] __slab_free+0x263/0x2b0 [ 908.187939][ C0] ? qlist_free_all+0x8c/0x100 [ 908.192713][ C0] qlist_free_all+0x97/0x100 [ 908.197313][ C0] ? alloc_buffer_head+0x2a/0x270 [ 908.202349][ C0] kasan_quarantine_reduce+0x148/0x160 [ 908.207825][ C0] __kasan_slab_alloc+0x22/0x80 [ 908.212693][ C0] kmem_cache_alloc_noprof+0x2bc/0x650 [ 908.218169][ C0] ? alloc_buffer_head+0x2a/0x270 [ 908.223201][ C0] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 908.228853][ C0] alloc_buffer_head+0x2a/0x270 [ 908.233708][ C0] ? folio_alloc_buffers+0x30e/0x640 [ 908.239013][ C0] folio_alloc_buffers+0x32c/0x640 [ 908.244150][ C0] bdev_getblk+0x2cb/0x6e0 [ 908.248587][ C0] jbd2_journal_get_descriptor_buffer+0x147/0x420 [ 908.255031][ C0] journal_submit_commit_record+0xf5/0x8b0 [ 908.260858][ C0] ? do_raw_write_lock+0x11d/0x260 [ 908.265981][ C0] ? __pfx_journal_submit_commit_record+0x10/0x10 [ 908.272416][ C0] jbd2_journal_commit_transaction+0x34d1/0x5bf0 [ 908.278790][ C0] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 908.285472][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 908.290432][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 908.295479][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 908.300527][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 908.306355][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 908.311571][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 908.317392][ C0] ? __timer_delete_sync+0x4a4/0x520 [ 908.322693][ C0] kjournald2+0x3e0/0x760 [ 908.327060][ C0] ? __pfx_kjournald2+0x10/0x10 [ 908.331931][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 908.338008][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 908.342970][ C0] kthread+0x388/0x470 [ 908.347045][ C0] ? __pfx_kjournald2+0x10/0x10 [ 908.351914][ C0] ? __pfx_kthread+0x10/0x10 [ 908.356528][ C0] ret_from_fork+0x51e/0xb90 [ 908.361140][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 908.366272][ C0] ? __switch_to+0xc7d/0x1450 [ 908.370980][ C0] ? __pfx_kthread+0x10/0x10 [ 908.375586][ C0] ret_from_fork_asm+0x1a/0x30 [ 908.380381][ C0] [ 908.383402][ C0] task:udevd state:R running task stack:24448 pid:6791 tgid:6791 ppid:5195 task_flags:0x40014c flags:0x00080000 [ 908.396899][ C0] Call Trace: [ 908.400184][ C0] [ 908.403124][ C0] __schedule+0x1585/0x5340 [ 908.407656][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 908.412878][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 908.417912][ C0] ? __pfx___schedule+0x10/0x10 [ 908.422786][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 908.428168][ C0] preempt_schedule_common+0x82/0xd0 [ 908.433468][ C0] preempt_schedule_thunk+0x16/0x30 [ 908.438678][ C0] _raw_spin_unlock+0x3f/0x50 [ 908.443365][ C0] unmap_page_range+0x3b71/0x48f0 [ 908.448443][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 908.453840][ C0] ? mas_find+0xb0e/0xd30 [ 908.458184][ C0] ? unmap_vmas+0x1c4/0x6a0 [ 908.462697][ C0] unmap_vmas+0x48f/0x6a0 [ 908.467054][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 908.471939][ C0] exit_mmap+0x280/0xa10 [ 908.476202][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 908.481012][ C0] ? __pfx_exit_aio+0x10/0x10 [ 908.485723][ C0] ? uprobe_clear_state+0x27c/0x290 [ 908.490946][ C0] __mmput+0x118/0x430 [ 908.495038][ C0] exit_mm+0x168/0x220 [ 908.499125][ C0] do_exit+0x62e/0x2320 [ 908.503294][ C0] ? __pfx_do_exit+0x10/0x10 [ 908.507896][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 908.512939][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 908.518155][ C0] do_group_exit+0x21b/0x2d0 [ 908.522758][ C0] __x64_sys_exit_group+0x3f/0x40 [ 908.527792][ C0] x64_sys_call+0x221a/0x2240 [ 908.532488][ C0] do_syscall_64+0x14d/0xf80 [ 908.537096][ C0] ? trace_irq_disable+0x3b/0x150 [ 908.542266][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.548354][ C0] ? clear_bhb_loop+0x40/0x90 [ 908.553044][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.558945][ C0] RIP: 0033:0x7f16ae2f16c5 [ 908.563366][ C0] RSP: 002b:00007ffd84c866f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 908.571792][ C0] RAX: ffffffffffffffda RBX: 000056004966d2b0 RCX: 00007f16ae2f16c5 [ 908.579779][ C0] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 908.587763][ C0] RBP: 0000560049643910 R08: 0000000000000000 R09: 0000000000000000 [ 908.595756][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 908.603731][ C0] R13: 00007ffd84c86740 R14: 0000000000000000 R15: 0000000000000000 [ 908.611732][ C0] [ 908.614760][ C0] task:syz.1.2955 state:R running task stack:28160 pid:16162 tgid:16155 ppid:5837 task_flags:0x400040 flags:0x00080006 [ 908.628261][ C0] Call Trace: [ 908.631540][ C0] [ 908.634475][ C0] __schedule+0x1585/0x5340 [ 908.639005][ C0] ? __kernel_text_address+0xd/0x30 [ 908.644226][ C0] ? __pfx___schedule+0x10/0x10 [ 908.649106][ C0] preempt_schedule_irq+0x4d/0xa0 [ 908.654147][ C0] irqentry_exit+0x599/0x620 [ 908.658752][ C0] ? trace_irq_disable+0x3b/0x150 [ 908.663797][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 908.669782][ C0] RIP: 0010:lock_acquire+0x20b/0x2e0 [ 908.675080][ C0] Code: e9 30 ff ff ff e8 95 a5 0b 0a f7 c3 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 11 23 7a 11 48 3b 44 24 30 75 33 fb 48 83 c4 38 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d ce 53 73 [ 908.694692][ C0] RSP: 0018:ffffc90004187860 EFLAGS: 00000296 [ 908.700767][ C0] RAX: 0b7c02eecdbe6200 RBX: 0000000000000246 RCX: 0000000000000046 [ 908.708746][ C0] RDX: 00000000aef644dc RSI: ffffffff8e1627f4 RDI: ffffffff8c27a880 [ 908.716727][ C0] RBP: 0000000000000000 R08: ffffffff84a4e853 R09: ffffffff8e7602e0 [ 908.724702][ C0] R10: dffffc0000000000 R11: ffffed100eba6ae1 R12: 0000000000000002 [ 908.732674][ C0] R13: ffffffff8e7602e0 R14: 0000000000000000 R15: 0000000000000000 [ 908.740658][ C0] ? io_poll_remove_entries+0x63/0x610 [ 908.746145][ C0] ? io_poll_remove_entries+0x63/0x610 [ 908.751618][ C0] io_poll_remove_entries+0x80/0x610 [ 908.756916][ C0] ? io_poll_remove_entries+0x63/0x610 [ 908.762387][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 908.767601][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 908.773417][ C0] ? evdev_poll+0x155/0x1d0 [ 908.777931][ C0] __io_arm_poll_handler+0x730/0xc10 [ 908.783238][ C0] io_arm_apoll+0x5a5/0x950 [ 908.787762][ C0] ? __pfx_io_arm_apoll+0x10/0x10 [ 908.792798][ C0] ? __pfx_io_async_queue_proc+0x10/0x10 [ 908.798449][ C0] ? __pfx_io_req_normal_work_add+0x10/0x10 [ 908.804434][ C0] ? io_arm_poll_handler+0x1d3/0x290 [ 908.809737][ C0] io_queue_async+0x175/0x2d0 [ 908.814430][ C0] ? __pfx_io_req_task_submit+0x10/0x10 [ 908.820336][ C0] io_handle_tw_list+0x3db/0x540 [ 908.825299][ C0] tctx_task_work_run+0x55/0x330 [ 908.830250][ C0] tctx_task_work+0x3f/0x90 [ 908.834755][ C0] task_work_run+0x1d9/0x270 [ 908.839354][ C0] ? __pfx_task_work_run+0x10/0x10 [ 908.844470][ C0] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 908.850122][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 908.856120][ C0] get_signal+0x11eb/0x1330 [ 908.860642][ C0] ? __se_sys_io_uring_enter+0x1437/0x18c0 [ 908.866463][ C0] arch_do_signal_or_restart+0xbc/0x830 [ 908.872021][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 908.878200][ C0] exit_to_user_mode_loop+0x86/0x480 [ 908.883491][ C0] ? rcu_is_watching+0x15/0xb0 [ 908.888270][ C0] do_syscall_64+0x32d/0xf80 [ 908.892880][ C0] ? trace_irq_disable+0x3b/0x150 [ 908.897916][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.903991][ C0] ? clear_bhb_loop+0x40/0x90 [ 908.908681][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.914581][ C0] RIP: 0033:0x7f776739c629 [ 908.919003][ C0] RSP: 002b:00007f77682f1028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 908.927422][ C0] RAX: 0000000000000200 RBX: 00007f7767616090 RCX: 00007f776739c629 [ 908.935395][ C0] RDX: 0000000000000000 RSI: 0000000000003516 RDI: 0000000000000007 [ 908.943369][ C0] RBP: 00007f7767432b39 R08: 0000000000000000 R09: 0000000000000000 [ 908.951347][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 908.959328][ C0] R13: 00007f7767616128 R14: 00007f7767616090 R15: 00007f776773fa48 [ 908.967330][ C0] [ 908.970363][ C0] rcu: rcu_preempt kthread starved for 338 jiffies! g99281 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 908.981390][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 908.991367][ C0] rcu: RCU grace-period kthread stack dump: [ 908.997263][ C0] task:rcu_preempt state:R running task stack:28128 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 909.010763][ C0] Call Trace: [ 909.014045][ C0] [ 909.016988][ C0] __schedule+0x1585/0x5340 [ 909.021539][ C0] ? __pfx___schedule+0x10/0x10 [ 909.026410][ C0] ? schedule+0x90/0x360 [ 909.030669][ C0] schedule+0x164/0x360 [ 909.034837][ C0] schedule_timeout+0x158/0x2c0 [ 909.039717][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 909.045104][ C0] ? __pfx_process_timeout+0x10/0x10 [ 909.050411][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 909.056234][ C0] ? prepare_to_swait_event+0x340/0x370 [ 909.061799][ C0] rcu_gp_fqs_loop+0x312/0x11d0 [ 909.066673][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 909.072837][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 909.078129][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 909.083347][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 909.089170][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 909.093773][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 909.098984][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 909.104804][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 909.109754][ C0] ? __kthread_parkme+0x19c/0x1f0 [ 909.114797][ C0] kthread+0x388/0x470 [ 909.118876][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 909.124081][ C0] ? __pfx_kthread+0x10/0x10 [ 909.128675][ C0] ret_from_fork+0x51e/0xb90 [ 909.133279][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 909.138400][ C0] ? __switch_to+0xc7d/0x1450 [ 909.143087][ C0] ? __pfx_kthread+0x10/0x10 [ 909.147680][ C0] ret_from_fork_asm+0x1a/0x30 [ 909.152473][ C0] [ 909.155498][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 909.161825][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 909.172333][ C0] Tainted: [L]=SOFTLOCKUP [ 909.176654][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 909.186709][ C0] RIP: 0010:lock_acquire+0x20b/0x2e0 [ 909.192004][ C0] Code: e9 30 ff ff ff e8 95 a5 0b 0a f7 c3 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 11 23 7a 11 48 3b 44 24 30 75 33 fb 48 83 c4 38 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d ce 53 73 [ 909.211617][ C0] RSP: 0018:ffffc90000006718 EFLAGS: 00000286 [ 909.217698][ C0] RAX: 69fea97719666500 RBX: 0000000000000246 RCX: 0000000080000101 [ 909.225675][ C0] RDX: 00000000a42637f2 RSI: ffffffff8e1627f4 RDI: ffffffff8c27a880 [ 909.233655][ C0] RBP: 0000000000000000 R08: ffffffff81767a45 R09: ffffffff8e7602e0 [ 909.241629][ C0] R10: ffffc90000006878 R11: ffffffff81b0b0d0 R12: 0000000000000002 [ 909.244950][ C1] net_ratelimit: 19134 callbacks suppressed [ 909.244966][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 909.249601][ C0] R13: ffffffff8e7602e0 R14: 0000000000000000 R15: 0000000000000000 [ 909.255846][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 909.267428][ C0] FS: 0000000000000000(0000) GS:ffff888125466000(0000) knlGS:0000000000000000 [ 909.267446][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 909.267460][ C0] CR2: 00002000002e8030 CR3: 000000007cdd0000 CR4: 00000000003526f0 [ 909.275795][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 909.287365][ C0] Call Trace: [ 909.287375][ C0] [ 909.287383][ C0] ? get_page_from_freelist+0x24dc/0x2580 [ 909.296682][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 909.302873][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 909.311520][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 909.323050][ C0] unwind_next_frame+0xc2/0x23c0 [ 909.323081][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 909.326776][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 909.329200][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 909.335304][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 909.346844][ C0] ? post_alloc_hook+0x231/0x280 [ 909.346866][ C0] ? get_page_from_freelist+0x24dc/0x2580 [ 909.346890][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 909.352322][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 909.363913][ C0] arch_stack_walk+0x11b/0x150 [ 909.363947][ C0] ? get_page_from_freelist+0x24dc/0x2580 [ 909.369264][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 909.373956][ C0] stack_trace_save+0xa9/0x100 [ 909.386434][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 909.391083][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 909.476182][ C0] save_stack+0x122/0x230 [ 909.480534][ C0] ? __pfx_save_stack+0x10/0x10 [ 909.485388][ C0] ? post_alloc_hook+0x231/0x280 [ 909.490333][ C0] ? get_page_from_freelist+0x24dc/0x2580 [ 909.496079][ C0] ? __rmqueue_pcplist+0x18fa/0x1c40 [ 909.501393][ C0] __set_page_owner+0x8d/0x4c0 [ 909.506281][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 909.511660][ C0] ? seqcount_lockdep_reader_access+0x89/0xc0 [ 909.517739][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 909.522956][ C0] ? bad_range+0x8b/0x2c0 [ 909.527298][ C0] post_alloc_hook+0x231/0x280 [ 909.532070][ C0] get_page_from_freelist+0x24dc/0x2580 [ 909.537648][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 909.542780][ C0] ? prepare_alloc_pages+0x22a/0x650 [ 909.548081][ C0] __alloc_frozen_pages_noprof+0x18d/0x380 [ 909.553897][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 909.560237][ C0] ? __pfx_policy_nodemask+0x10/0x10 [ 909.565536][ C0] alloc_pages_mpol+0x232/0x4a0 [ 909.570400][ C0] allocate_slab+0x83/0x660 [ 909.574910][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 909.580123][ C0] ? skb_ext_add+0x1b6/0x8f0 [ 909.584718][ C0] ___slab_alloc+0x150/0x6b0 [ 909.589316][ C0] ? __pcs_replace_empty_main+0x239/0x620 [ 909.595048][ C0] ? skb_ext_add+0x1b6/0x8f0 [ 909.599650][ C0] ? skb_ext_add+0x1b6/0x8f0 [ 909.604248][ C0] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 909.609891][ C0] kmem_cache_alloc_noprof+0x12d/0x650 [ 909.615358][ C0] ? skb_ext_add+0x1b6/0x8f0 [ 909.619977][ C0] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 909.625628][ C0] skb_ext_add+0x1b6/0x8f0 [ 909.630061][ C0] ? net_generic+0x1f4/0x240 [ 909.634659][ C0] br_nf_forward_ip+0xc3/0xa30 [ 909.639430][ C0] ? __pfx_br_nf_forward+0x10/0x10 [ 909.644548][ C0] nf_hook_slow+0xc5/0x220 [ 909.648972][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 909.654431][ C0] NF_HOOK+0x23e/0x3f0 [ 909.658505][ C0] ? NF_HOOK+0xa2/0x3f0 [ 909.662660][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 909.667259][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 909.672719][ C0] ? __skb_clone+0x483/0x7a0 [ 909.677314][ C0] ? br_handle_vlan+0x61/0x530 [ 909.682089][ C0] __br_forward+0x397/0x540 [ 909.686588][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 909.692052][ C0] br_flood+0x6ee/0xb80 [ 909.696228][ C0] br_handle_frame_finish+0x1492/0x1b40 [ 909.701775][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 909.707080][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 909.712991][ C0] ? ip6t_do_table+0x1b3/0x1560 [ 909.717850][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 909.722966][ C0] ? nf_hook_slow+0x176/0x220 [ 909.727650][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 909.733547][ C0] br_nf_hook_thresh+0x3dd/0x4c0 [ 909.738498][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 909.743967][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 909.749866][ C0] ? nf_nat_ipv6_in+0x203/0x2c0 [ 909.754728][ C0] br_nf_pre_routing_finish_ipv6+0xa3a/0xd70 [ 909.760725][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 909.766633][ C0] br_nf_pre_routing_ipv6+0x374/0x6f0 [ 909.772012][ C0] ? br_nf_pre_routing_ipv6+0x421/0x6f0 [ 909.777561][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 909.783470][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 909.789989][ C0] ? br_nf_pre_routing+0x720/0x1470 [ 909.795203][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 909.800663][ C0] br_handle_frame+0x1277/0x1510 [ 909.805614][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 909.810902][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 909.816804][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 909.822092][ C0] __netif_receive_skb_core+0x98f/0x31a0 [ 909.827733][ C0] ? ip6_mc_input+0x8de/0xbd0 [ 909.832435][ C0] ? ip6_mc_input+0x8de/0xbd0 [ 909.837131][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 909.842084][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 909.848154][ C0] ? ip6_rcv_finish+0x29e/0x2e0 [ 909.853023][ C0] ? NF_HOOK+0x336/0x3c0 [ 909.857271][ C0] ? skb_orphan+0xaf/0xd0 [ 909.861611][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 909.866819][ C0] ? NF_HOOK+0x9e/0x3c0 [ 909.870989][ C0] ? lock_acquire+0xf0/0x2e0 [ 909.875592][ C0] ? process_backlog+0x3eb/0x1950 [ 909.880625][ C0] ? process_backlog+0x3eb/0x1950 [ 909.885657][ C0] ? process_backlog+0x3eb/0x1950 [ 909.890684][ C0] process_backlog+0x76d/0x1950 [ 909.895557][ C0] __napi_poll+0xae/0x340 [ 909.899895][ C0] ? skb_defer_free_flush+0x233/0x260 [ 909.905273][ C0] net_rx_action+0x627/0xf70 [ 909.909884][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 909.915549][ C0] handle_softirqs+0x22a/0x870 [ 909.920328][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 909.925106][ C0] __irq_exit_rcu+0x5f/0x150 [ 909.929703][ C0] irq_exit_rcu+0x9/0x30 [ 909.933952][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 909.939598][ C0] [ 909.942526][ C0] [ 909.945455][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 909.951439][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 909.957083][ C0] Code: 8e 6d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 3d 1c 00 fb f4 7c ea 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 909.976698][ C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000246 [ 909.982772][ C0] RAX: 0000000001f00db7 RBX: ffffffff819a80ad RCX: 0000000080000001 [ 909.990746][ C0] RDX: 0000000000000001 RSI: ffffffff8def1e84 RDI: ffffffff8c27a880 [ 909.998722][ C0] RBP: ffffffff8e407eb0 R08: ffff8880b863395b R09: 1ffff110170c672b [ 910.006695][ C0] R10: dffffc0000000000 R11: ffffed10170c672c R12: ffffffff90117db0 [ 910.014669][ C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 0000000000000000 [ 910.023079][ C0] ? do_idle+0x1bd/0x500 [ 910.027343][ C0] default_idle+0x9/0x20 [ 910.031596][ C0] default_idle_call+0x72/0xb0 [ 910.036363][ C0] do_idle+0x1bd/0x500 [ 910.040442][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 910.045654][ C0] ? __pfx_do_idle+0x10/0x10 [ 910.050261][ C0] cpu_startup_entry+0x43/0x60 [ 910.055037][ C0] rest_init+0x2de/0x300 [ 910.059289][ C0] start_kernel+0x385/0x3d0 [ 910.063815][ C0] x86_64_start_reservations+0x24/0x30 [ 910.069283][ C0] x86_64_start_kernel+0x143/0x1c0 [ 910.074398][ C0] common_startup_64+0x13e/0x147 [ 910.079351][ C0] [ 914.254770][ C1] net_ratelimit: 18162 callbacks suppressed [ 914.254791][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 914.254984][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 914.261046][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 914.273095][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 914.285523][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 914.302308][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 914.309545][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 914.321589][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 914.333404][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:91:3a:33:04:d5, vlan:0) [ 914.348119][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 917.083332][ T1299] ieee802154 phy0 wpan0: encryption failed: -22