last executing test programs:

8m46.675207823s ago: executing program 4 (id=1568):
socket(0x2, 0x80805, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044050}, 0x40)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffdc4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x2000005}, 0x1c)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast})
write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c2f0081e949b93897bc3b0000000000007d01ff020000000000000000"], 0xfdef)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8011}, 0x0)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', <r7=>0x0})
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x4400046, r7})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r9=>0x0})
r10 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r9})
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r11, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0)

8m46.673286508s ago: executing program 4 (id=1571):
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000840)="25a4be9c", 0x4}], 0x1}}], 0x1, 0x4000800)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x1, 0x0}, &(0x7f0000000240)=0x40)

8m46.673068928s ago: executing program 4 (id=1572):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="63429860415b7ac7", 0x8)
r1 = accept(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmsg(r1, &(0x7f000000b680)={0x0, 0xffffffffffffffc3, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2, 0x0, 0x0, 0x1000000}, 0x0) (fail_nth: 1)

8m46.642883617s ago: executing program 4 (id=1573):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
r2 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0)
ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(0xffffffffffffffff, 0xc0106441, &(0x7f0000000740)={0x0, <r3=>0x0, 0x6})
ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(r2, 0xc028644b, &(0x7f0000000780)={r3, 0x101, 0x1e0000, 0x8, 0x80000000, 0x0, 0x6, 0x6})
ioctl$DRM_IOCTL_PANTHOR_VM_GET_STATE(r1, 0xc0086444, &(0x7f0000000080)={r3})
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000001c0)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd28, 0x25dfdbfc, {0xa, 0x80, 0x80}, [@RTA_SPORT={0x6, 0x1c, 0x4e24}, @RTA_IP_PROTO={0x5, 0x1b, 0x6}, @RTA_UID={0x8}]}, 0x34}}, 0x20000050)
r4 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
r5 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x8, @mcast1, 0x7}, 0x54)
sendmsg(r5, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000001200)={0x0, &(0x7f0000001100)=[@wr_crn={0x67, 0x20, {0x2, 0x479f}}, @set_irq_handler={0xc8, 0x20, {0xe3}}, @nested_load_code={0x12e, 0x72, {0x1, "660fee783b0f20c035000000400f22c0f3440f09650f01cbc7442400b64aa74dc7442402f0ff0000c7442406000000000f011c248f497c8083009800000f01cb0f20d835200000000f22d866b8df008ee8c401a9d2a90a000000"}}, @out_dx={0x6a, 0x28, {0x8c20, 0x4, 0x3}}], 0xda})
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r7, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='\x00', 0x89901)
move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x8)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000001240)={[0x10, 0x324, 0x9, 0x8000000000000001, 0x1, 0x3, 0x2, 0x6, 0xff, 0x0, 0x2, 0xf, 0xffffffff, 0x7f, 0x4b0, 0x7fff], 0x2000, 0x100000})
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="62190a02ba6009e7c0bc18116bb50ddd812782dcca2eb93aebb22225a13ee5380f60054fc3693b70fc4c3fbf971530b32d414148de455879043d449528c1d63b2a266c0c45ce173ad3fd50ad6f3a7d2d53eebadca8ad2697f3ecc7d62a184363b47c1bf902c44f4e8e5924b37c8b5c6e3ea0ac6eefa331c41d0216e161054b420664b42ec957df5f415f4240910b51411cad0e6fd20524275b7ed0f08243ead04180f66bd066e46a517e6f821409c4bfe27e762806aea850cf5c099446abb43bad31c6ab03794e408185852a71365d3a7c70341fe745f679143f213e6677b6ef80e309d38c5a3030a00ba0b75c8b6ee3bba99e762bb2167d0b32d360006d6d005df680aa6e09dc572ba793567a86db45c6a6b4425a9b8379b49ad85f5da09241b940ace2620cb39ecd760d9a18fcb02e942b52bf047238784644f271f5ba19ddf68511e18a22f3a44a585b707f3960891af0af9c0f97ab3f6af0b3395e0b643f9c7008145d745e751cbe53aa05efc38fd34a6f7bc376393f2d263acfb058cbe9229bc00207ef85144087d65715a5c3ba92b1760d8d627c603748fbf8e4c1fa0e1c7159be191cb194f5012de1bed70a0757789ed4deff3dc37631096fb9a64a4c45b041fea4507438cb9966f2ad1b4c7dcbb3c3a3c21aea1c6cc48225c3430b056a06d32a5e8b7db5f2b2d67d9b67645d9572f17f03a0c968a5a0db88efc2cf27a827b7ec57dd1d2869ad6218e25d48e9d54f85b85b9aba7064ae561e8647cbe35fdbf06e6fbfe5c33d1d11668223fc80814160c555e14edd1426af2174d60d5b326f96713f575f6916fcbf2fb6bd4e68dd79cb344ef4a34dc3a224f269fc187e6bfc82021eee6be9e6661f4cd24216ae49283ee4f4e9ea27d2f0d99933e5ffe7368c6ce5d1e4e10bf92b64e39f475f688952851cfe19ebe1ede0ffbebbdca59c505e87f66a3261ef4dfcd64e026b3fb3a580bcd858f9013abe837372a0992d4dcc1c9be585fb161488ecf11f30a1d514913be27ac7f7f95e52e280e28cfba2792c7baf041431148428b37876a63083b2d934c3a258c08537a5de8bddc2e6e80a1be61522ef91b482b1a61e50bd9aff2dec847342a9c49699f61b9bfb8932a9da3cf6e9d8d41a0de509763b7506cc3d45f89efd2fd5e776d4442127e5f3dd532c208ce21721e04f3198bdc4264c26ed8b676543f671acc460c70c7d699dbf9aa593840d21aed5d0e8136957674c0580923305d4e25fbf80aca2261201afdef5b57cc035d8fcf19918bcfd42989ea51d772d7a7ededb8bfebe027f3c466dc13a04b3e2aef59c387975fbde909bcd5287e4064111c1547697a08cbd04eaab76cab5cf64d367dd47bd910d09f3ee3617d36d7af2576a95dec6003723acf3261f26ea5519113a906dbbb3f104588e6fee7702b17476a7e9d62c22a1990d368fc2e217a7da61a4602fcb8d8f1e7c60bcc223ab814cef85dc95dc01c762e71df40d0f38f986ea65f0c5111465a9de3fbda31dc54700790f9b1825134f104a65d39149f337aa747aca3c4bd469b613a6e994a6bbd2c1676a07e4b076dac074b17d2a4315f515c75cd9cff5ae35179236c4387a0a0a42e8f1d25962d6ef6a88deae18e9df6e247444a24583bec9b48c9524ab5e76f6dc858bba4acfad3f6b1fb66fac0150e7c4ecbd353af514bbc2aef204bb2a187e7f16fde93f853d1720d1fa98e6d1f3e189432fafbf5f7d07ab0ad72dc22514de0e48c850c76f8f81e7a326d335fe09f9e7d8284f76eac02c9b074b3b8688b03dda3510547c4ea994f0c2136a158bc761396ae1da4ac67a1f77e80fa2cf76879763b3ba9e62698a1002901df9e910f0c81c317580f3aa64edb98217beca22a173dc00b25de92364f6e58c6b3a601d4941f6058e41b09d4dc6c886f09557432227fb4ccd3a4f74f1b2f594d58cd19fc2a1e7e457fcbb66621cf910314c7d58309a685770206f68ecc9d1121b696e12b601f31bbc0be03e6c4c2bdf8eaaec5ee17e6b53492c1819c7dff099807278d87f03d8f3a76c097c676a04926cdd5c3768b62bba5d6afa9bbd20392b4cb29e61be9d8ba0c5d2ba2899a76f871e00187804f9b66ca2ef306b02a31aadbab52277a1d414e745baeae02b8dc47f41ccf1ad2c8478c6b3b44d35ec3f68e2750d768b3c92eccfd148cdf14987248c9066f2f9920872fabf5871eb5237246293866c8546ec6bca90025bf3779304f1c634cd578be21f87c75447f3e18899ada937e5b577ba8516901f199d14684e74fc59b163cfbeb79eee646dd33ee7d3ff16b3776feafd899fadfc06dc03102f555098b07c200e916dc0edd8bc2ec50416053f5bb551b684ce47363283ce96a710d0be873359b77a03b7d431f38e7c9790b320f4e0958cf3e51d8677ec837ef29782141933aa406b43fa8b1c805628dfb5109620722d7d7e87942d60a8d0d4b370f0842ca96b00857d731e349017032f4d3636e9f8e6286dfb0ee772ef35b630afd16514996e7d5a9fa19089972097ac7aefedcd4294f07136fceeaa62f1aeed5be631378e09bba9e9b911ce0b096a581e247637e5db1c4ba2aa7eb7eef2fe42fb8f56ab80635435341b5871eb755f362ac5fc33d75073bb47d73e3e071f7d90e5e92fc096f352ef966a0c6dc231042b61de11e579c408299979392ae7f2b6cfe3a1e62aff064eb0433e0f6690ed06a14d4f3aa9a0443d4007edb3973daae8471cd4cf61fc292eb6372b3159967ab322124a30dcd17450bc084467727fba570388260b64170791d8c0206dfa699f7813c82454b3dbd59224c23fb6f27f9d4f3810018def510c95d5efa803964c71a2e6ced95e96e3aa5f1b4289535da1dd42e3bef82394cb77517cb72726013ace2650b022493e949d4771020cab0cf102242a19574c2536f9c0abcea0f68a67832ada390e8492f62c955c6ebc743968b278f2771f3def3cde9188ee91dbeaba910cacfcb1b2ce4c55773c7bee05399d7839df78f7b6a95f5bc9396ffc25742b46885f05f35fbbfc28df22d1df38feb7495690bbc7d00b77823603e8f1ea247d1f171963690e6c70ec721940459a02de23f2f768821d91348364c5085b35a778c64496f053ba85d9b6af45475744ce6dffc8271e6cfc93ab8f2cefaa6db23ab0678d561a3b9e7a4e14903185bd264afe79cfce6361d5d1d4ea66ffe5af17732144a1663d505c42400791631c25da8764e319b2b78d6092f09a2462d217ba46ec1d74d396dfec032a586a37993d9e1385b8c1bed3c53c7de8d4088a6b8d282b6319e1d93aaf78be52b477473ffc019e5b3c369bcbbe3b2efef6b212cf8df004516ce1c628ad0835d5644c8c96d603ca1f71c2bc7d62c54c3ccab017dd0b789d593525b4ce66c4f93e50ccff365da78765da34e346372aeec4b8d2c9dcd3ad440821a274b531ffb5e693ced8ae66a9d9167c6212a8b9158fcfc522a63499b785773e5a1cbc64b5f4e2a83fab9c47993cc7f656297f201450782ba645b054c506ff722a2a062f517657b3b8c668e398992d663771f801669d819dc5d46f9524b638041a1c1e9e0a7615112a6ded9947541e098cbd3a0db1596c6fbec88f4e7e710117052bfde769310641562da739893a014321fcfaa143030bbb312b57073807b2fecc89e2277817527bf9cbca2280a8c8b352f2dbc79ecacae88966ef43924d10fd22057429551ed85e11f49b22ea92e1944fa0be4c42d4ac27e003b3bcd83d9946c173dfc7a059e9843bb2238917699f7d5f3e0c1a8bfbf2fefc9ba02ce80f0a90b46ef2cbca211a5a144085500c15f681131993f2213b94771bbd698950646b23285fc35b8762e447019d953ad254fdb11dd213730d1550ace2aea8c1bbc48350555c1ddedb1179574e6824e9537c505503e5f2d63ac8f88eb7a0b7530815b9447f9adb066dd68af3b60619099703da2afb829e3b303ff97ad633c92241bf1a629f7c11f4928b101bb40620d41cec70ca3f2498f97b14c13331019a59743aa18e993b38981c92179becb6e97e52368181cc2febb8f84c01b97bdf7be196a1ed6a1990423809dfd15c4ca68ccacbf63029b0d992d5bb46b9fdc0e40c5669d6af5667e67fab4f6d2c175f7a4152cf5df65a0494381b45892ef20fa7404cb47b83815799ee85d9deaf69453c97a1cb434b412c7f2c2df9c817cc6de3cd76555d82d8473cc79c28f69fe004b1936d5470d52de0a6c289a8c42d955edfa80dd72b8a2266eb38d86c4b661dab180c5049219fb7349c9348cda0c94b212a3bd22d5b9ef3cab817f18c215cc7666507612c1f921b562854f1963c9cac9aeb9fd08e0f413547b8e6542f13e73825737a625f09b6718c1f9d25450ab6b760645be5db1c5e9bf44554e970d3c879f999e532f3a1a0d800923c9e369d2fdd705c4c0d358a3a9b9eebcef52e0e5e2c276878c236b4ab7927549df491764e9025dbf40a3bcd0d3655adc1fb07c287102a681e95906a1ad1526288c2ae5b295d42b782795a825bc2e4e7bcb132980528bdd9c9c0f47d2ed57332608c4fa4c639d0358029efdb406e46a0a9824bd12729c10806b80836f2d17806880a71d51e80e4b86e6baaedb796a0c06e63e3914868478168c07776a9e9607206c4d35f4a62b84b45f45f53b2532626675d69e7fadd8ba67a48e723dcb10d5eab382c21997784d0ef57c59743bb7b1a84db537a839e4a2f2572258cc15e075b2bf4697fbfcae6ce343627e2590ccda9fd7836be62051f854dae622c726180e61c8fb26861801ab0eded48ace62073db98a975c091e6e38965e3110fb5361e3c26fe3427883560f08bb98251164af538482f7fa291039745b011f6ac974d5aeda73c10c9f5b811c5c192cf32f9b40d8afaa454c6f716142b35d4afdb0428f2cf9fb5fe3452800739bb6061e1e74865b66b6a6c210012df5cff4b202005f048d87665c804cee70dcd5f6f8fb88d5ab8f8b1d8779eec7efb250a3ec8a148bb2bd9dbb3ec1284570f87cd1d3cfaf701824ef8dfa283c9909f50ec1037ab95ded35353602680b467c1591dcfa66afb24eed5fbd32fcc029d29173d44c89ac523613da42ca0800fe27df33cfc9dafae274a40339840d09c6ae2f31f7d57c69a8da861f1cb18ff09832f5b577a09001f3d1a97d8a9b00e2fc8e62112190cdac83c49c7cc2ee6116d2bd1825af4f35244fcee049155111c60aea8da53eac238c2a369925e8e3a3659f167f22b8b2d55478c93afd7170fd942ee52f7f7b434700af9464929304284a3677260396a5fe977a213c0c4cec35c6179e980fbf1140c5a0f9c03abfce0bbb225eed4673b192d565a9e09d47e285014f94f2b63f0d9a989dfbc40bb6033a1fb2f357d9e65c024642ca3e78a0e4cf13a4231d947c29b6ad06b34e3db478369bc99c51f7adcec7719db7f7dd59f314da97570c7112606983b742a76df6ca84e4de6569883e8317f3165e3cfa087bee8e95764e6b3b37347980f9a510407f78a3255b528e77ed10a1ac1b30fbf5ab212dd942aaaa33f9ee6b22d9cc5d005cb4986b398d679d8b14f954357cda320a96aafb75af7f48080b4b14c571af8fad5d0e7477ddd107bcd1c44904d670b944c9c3b7877b5a18db7a0b7c772b03e8980715a5d9f40e440601a917dd4dff39ef0d36a86f0d8444a7a142095df39bff9f64c92c16a75397e422b575047e4322b9f72be496a9fe55ee7b07bb1484546e5471d0926be11bd3322d25e966ab6e50f262ab7105b6b514e40c54c56fb429c88439e72427bec38a9a482b2362200000000000000"], 0x0)

8m43.486532146s ago: executing program 4 (id=1597):
unshare(0x8040480)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r2, &(0x7f0000000080), &(0x7f00000002c0)=""/218}, 0x20)

8m43.323199166s ago: executing program 4 (id=1599):
syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x303882, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e4010223010902"], 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
syz_open_dev$video4linux(&(0x7f0000000740), 0x5, 0x0)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0x1000, 0x4)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)}], 0x1}}], 0x1, 0x0)

8m42.973180082s ago: executing program 32 (id=1599):
syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x303882, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e4010223010902"], 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
syz_open_dev$video4linux(&(0x7f0000000740), 0x5, 0x0)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0x1000, 0x4)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)}], 0x1}}], 0x1, 0x0)

1m38.865424834s ago: executing program 2 (id=3266):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r1=>0x0})
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)=@bridge_newvlan={0x3c, 0x70, 0x10, 0x70bd26, 0x25dfdbfc, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xe}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x14, 0x2}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000)
r3 = dup(r2)
write$UHID_INPUT(r3, &(0x7f0000002080)={0x200f, {"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", 0x1000}}, 0x1006)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_getaddrlabel={0xa0, 0x4a, 0x800, 0x70bd2b, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, r1, 0x2}, [@IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFAL_LABEL={0x8, 0x2, 0x1b}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFAL_LABEL={0x8}]}, 0xa0}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

1m38.37020365s ago: executing program 2 (id=3269):
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=<r0=>0xffffffffffffffff)
ioctl$MEDIA_REQUEST_IOC_QUEUE(r0, 0x7c80, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={<r3=>0xffffffffffffffff}, 0x13f, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f00000002c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r3}}, 0x18)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r4 = io_uring_setup(0xb, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50)
io_uring_enter(r4, 0x2219, 0x7721, 0x33, 0x0, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=@newsa={0x270, 0x10, 0x800, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {@in=@dev={0xac, 0x14, 0x14, 0x35}, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {0x9, 0x0, 0x6}, {}, 0x0, 0x3502, 0xa}, [@migrate={0x134, 0x11, [{@in6=@mcast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@private=0xa010101, @in6=@private0, 0x3c, 0x1, 0x0, 0x3507, 0x2, 0x2}, {@in6=@loopback, @in=@multicast1, @in=@loopback, @in6=@rand_addr=' \x01\x00', 0xff, 0x3, 0x0, 0x0, 0x2, 0x2}, {@in6=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x6c, 0x0, 0x0, 0x3504, 0x8, 0xa}, {@in6=@private2, @in=@dev={0xac, 0x14, 0x14, 0x12}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@local, 0x3c, 0x2, 0x0, 0x3504, 0x2, 0xa}]}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x270}}, 0x0)
io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r4, 0x1e, &(0x7f0000000100)={r1}, 0x1)

1m38.226586134s ago: executing program 2 (id=3270):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x0, 0x2, 0x400, 0x9, 0x4, 0x6, 0xfa11, 0xffffffff}, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, 0x0)
unshare(0x8000000)
shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ff9000/0x4000)=nil)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00')
lseek(r4, 0x400, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x50, 0x0, &(0x7f0000000480)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f00000003c0)={@fd={0x66642a85, 0x0, r2}, @flat=@weak_handle={0x77682a85, 0x100b}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000440)={0x9, 0x18, 0x30}}}, @free_buffer], 0x0, 0x0, 0x0})
r6 = getpgrp(0x0)
ptrace$ARCH_GET_GS(0x1e, r6, &(0x7f00000001c0), 0x1004)
r7 = dup3(r5, r1, 0x0)
r8 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0xffffffffffffffff})
r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r9, 0xc0045005, &(0x7f0000000080)=0x100)
write$dsp(r9, &(0x7f0000000240)=' ', 0x1)
close(r9)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0xfffffffffffffecc, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYRESHEX=r7, @ANYRES64, @ANYRESOCT=r8, @ANYRESDEC=r6], 0x108}, 0x1, 0x0, 0x0, 0x80}, 0x4)

1m35.352896495s ago: executing program 2 (id=3284):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r3 = open_tree(r1, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
r5 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@deltaction={0x1e4, 0x31, 0x4, 0x70bd27, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe0e5}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfb}}, {0x14, 0x4f, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x101, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x78, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x4f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe4}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080)
r10 = socket(0x10, 0x803, 0x0)
sendto(r10, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r10, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r9, r11, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x56, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000c}], 0x1)
ioctl$KVM_RUN(r11, 0xae80, 0x0)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000900)=r12, 0x4)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r13=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x64, 0x24, 0xd0f, 0x70bd2f, 0x0, {0x60, 0x0, 0x0, r13, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x9, 0x10000000}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x91ff3bcf0f647d12}]}}]}, 0x64}}, 0x44080)
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a40)=@delqdisc={0x160, 0x25, 0x200, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0xffff, 0xffee}, {0xfff3, 0x2}, {0x2, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x3}}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @TCA_STAB={0x114, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x3, 0xe651, 0x9, 0x0, 0x2, 0xfffffffe, 0x5}}, {0xe, 0x2, [0x4, 0x8, 0x7, 0x80, 0x9]}}, {{0x1c, 0x1, {0x80, 0xfd, 0x215b, 0x45b5, 0x2, 0x4, 0x2, 0x7}}, {0x12, 0x2, [0x8, 0x9, 0x7, 0x287, 0x1000, 0x1000, 0x2]}}, {{0x1c, 0x1, {0x5, 0x7, 0x5, 0x4, 0x2, 0x5, 0x200, 0x6}}, {0x10, 0x2, [0xb9e, 0xff, 0x3, 0x84, 0x1, 0x7]}}, {{0x1c, 0x1, {0x4, 0x8, 0xf, 0x3, 0x1, 0xb7, 0x10001, 0x5}}, {0xe, 0x2, [0x0, 0x3, 0x84, 0x3, 0x6]}}, {{0x1c, 0x1, {0xf9, 0x71, 0x2, 0x9, 0x2, 0x7fff, 0x0, 0x6}}, {0x10, 0x2, [0x9, 0x460, 0x9, 0x401, 0x5, 0x6]}}, {{0x1c, 0x1, {0x40, 0x0, 0x2fd, 0x2, 0x2, 0xe9e, 0x80000000, 0x7}}, {0x12, 0x2, [0x6f, 0x3, 0x7, 0x3, 0x9, 0x40, 0x2]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3c0}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x160}, 0x1, 0x0, 0x0, 0xc5}, 0xc010)
bind$netlink(r4, &(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc)

1m34.706511249s ago: executing program 2 (id=3287):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r3)
r4 = socket$unix(0x1, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0x3, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x4008804)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x7c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}, @qdisc_kind_options=@q_cake={{0x9}, {0x44, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x7f}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x4}, @TCA_CAKE_RTT={0x8, 0x7, 0x1ff}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_TARGET={0x8, 0x8, 0xa}, @TCA_CAKE_TARGET={0x8, 0x8, 0x4}, @TCA_CAKE_MPU={0x8, 0xe, 0x70}, @TCA_CAKE_MEMORY={0x8, 0xa, 0xffff269a}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x40)
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1m34.382492806s ago: executing program 2 (id=3291):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
getdents64(r0, &(0x7f0000000400)=""/4096, 0xc00)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x92}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000)
ioctl$VT_RELDISP(r0, 0x5605)

1m33.708127121s ago: executing program 33 (id=3291):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
getdents64(r0, &(0x7f0000000400)=""/4096, 0xc00)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x92}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000)
ioctl$VT_RELDISP(r0, 0x5605)

57.84332362s ago: executing program 3 (id=3462):
r0 = socket$kcm(0xa, 0x2, 0x0)
socket(0x2, 0x80002, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r4 = socket$kcm(0xa, 0x1, 0x0)
r5 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000000000000100000000000000", @ANYRES16=r3], 0x48)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, &(0x7f0000000000)={r5})
r6 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, &(0x7f0000000000)={r6})
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8936, &(0x7f0000000000)={r5})
bind$alg(r2, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58)
r7 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}, {&(0x7f00000000c0)="ebe3a0e9", 0x4}], 0x2}], 0x1, 0x40800)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'sed\x00', 0x1, 0x80005, 0x6f}, 0x2c)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

57.639215s ago: executing program 3 (id=3465):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000a00)=ANY=[@ANYBLOB="a00000000514040029bd7000fddbdf25080001000000000008000300000000000800010002000000080003000200000008000100000000000800030001000000080001000000000008000300020000000800010000000000080003000300000008000100010000000800030004000000080001000200000008000300030000000800010001000002080003000300000008000100000000000800030002000000"], 0xa0}, 0x1, 0x0, 0x0, 0x8010}, 0x10)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000001180)=0x2000000)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r1, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r1, 0x5008, 0x0)
r2 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xa})
ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000200))
getpeername(r0, &(0x7f0000000000)=@isdn, &(0x7f0000000080)=0x80)

51.135114872s ago: executing program 0 (id=3507):
r0 = socket$inet6(0xa, 0x3, 0x3c)
getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c)
sendmmsg$inet(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001ec0)="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", 0x2dd}, {&(0x7f0000000380)="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", 0x1e9}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df4050d43d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0xa0}, {&(0x7f00000006c0)="f610e61fc81cc3edc86f2800194d27a5a42cf17903c1c1c2f175", 0x1a}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x44040)

50.970420418s ago: executing program 0 (id=3510):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001b80)={0x18, 0x42, 0x1, 0xffffffff, 0x25dfdbfd, {0x2}, [@nested={0x4, 0x38}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c000}, 0x4040) (fail_nth: 5)

50.937618465s ago: executing program 0 (id=3511):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x7, 0x5, 0x4, 0x20, 0x80, 0x6, 0xd, 0x7, 0x2, 0x31, 0xa2, 0xb, 0x81, 0x84}, 0xe)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_MCAST_RATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r7, 0x439, 0xfffffffe, 0x20000, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040090}, 0x4004000)
listen(r5, 0x3)
r9 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r9, 0x40085112, &(0x7f0000000000)=@t={0x4, 0x8, 0x1, 0x2})
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20001002, 0x0, 0x111, 0xa}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x40, 0x0}, 0xb}, {0xa, 0x0, 0x9, @mcast1}, 0xffffffffffffffff, 0x9}}, 0x48)
pread64(0xffffffffffffffff, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040)
r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r10, r10, 0x0, 0x7fffffff)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8)
close(r1)
r12 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x40c00)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="300020000000000082", @ANYRES16=0x0, @ANYRESHEX=r11, @ANYRES32=0x0, @ANYRESOCT=r3], 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x4000104)
readv(r12, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x4, 0x3c0, 0xffffffff, 0x0, 0x118, 0x0, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, &(0x7f00000002c0), {[{{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@ah={{0x30}, {[0xfffffc00, 0x401]}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x1, 0x0, 0x9}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x0, 0x3, 0x5, 0x4, 0x1, 0x6], 0x1}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x7, 0xe, [0x2d, 0x3, 0x3, 0x11, 0x1e, 0x1c, 0x38, 0x21, 0x1, 0x40, 0x3, 0x2f, 0x28, 0x7, 0x13, 0x16], 0x2, 0x8, 0x2}}}, {{@ip={@multicast1, @local, 0xff000000, 0x0, 'veth1_macvtap\x00', 'ipvlan1\x00', {0xff}, {0xff}, 0x1d, 0x2, 0x3a}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0xfffffbff, 0x225], 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x3, 0x4, 0x6, 0x5, 0x2, 0xb], 0x3, 0x3}, {0x3, [0x4, 0x1, 0x4, 0x0, 0x5, 0x6], 0x2, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420)

49.328561856s ago: executing program 3 (id=3517):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x8401)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000400012800c0001006d6163766c616e0030000280080003000300000008000100100000001c0005800a000400aaaaaaaaaa2d00000c00"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x0)
fcntl$setstatus(r1, 0x4, 0x2400)
write$uinput_user_dev(r1, &(0x7f0000000580)={'syz1\x00', {0x3, 0xd, 0x4, 0x58e}, 0x17, [0x0, 0x2, 0xfffffff8, 0x7, 0x2, 0x2, 0xe737, 0x6, 0xfff, 0x5, 0x9, 0xfffffffc, 0x51f, 0x68000000, 0x10001, 0x9, 0x580e, 0x4, 0x7, 0x80, 0x0, 0xb, 0x5, 0x85, 0x1, 0x3, 0x4c3a, 0x1, 0x4, 0x1, 0x10001, 0x9, 0x6, 0x1, 0x0, 0xfff, 0x9, 0x9, 0x7b0, 0x1, 0x3, 0x3, 0x8, 0x1, 0xfffff8ba, 0x6, 0x9, 0x1, 0xfffffffb, 0x7ff, 0xfffff001, 0x400, 0x305, 0xd, 0x0, 0x6, 0x6000000, 0x10, 0x0, 0x7, 0x6, 0x2, 0xee1, 0x4], [0x2, 0x3, 0x7, 0xfffffe96, 0x9, 0x0, 0x80, 0xa, 0x80, 0x3c, 0x0, 0x1, 0x1ff, 0xa, 0x8, 0x4, 0xfffffffc, 0x365e, 0x3ff, 0x10, 0x4, 0x5, 0x8, 0x2, 0x7fff, 0x3, 0x3, 0xffff, 0xfffffa65, 0x2, 0x7fffffff, 0x9, 0x9, 0x5, 0x8, 0x6, 0xb, 0xf7, 0xcc7, 0x7fffffff, 0x10, 0x2, 0xfffffffb, 0x40, 0x0, 0x2, 0x2, 0x80000001, 0x9, 0x100000, 0x8, 0x4, 0x4, 0x1, 0x7, 0x100, 0x0, 0x0, 0x1d4, 0x1, 0x1, 0xfffffff9, 0xf7, 0x8], [0x8, 0x4cd, 0x3, 0x1, 0x3, 0x0, 0x1, 0x6, 0xffff, 0x4, 0x800, 0x101, 0xdce6, 0xa, 0xf, 0x8, 0x6, 0x1, 0x0, 0x101, 0x200, 0x22, 0xb, 0x0, 0x40, 0x0, 0xc, 0x9, 0xff, 0x37509810, 0x2, 0x0, 0xf2, 0x7ff, 0x7, 0xfffffffa, 0x24, 0x1, 0x3, 0x6, 0x8, 0x0, 0xe5, 0xfffffffa, 0x9, 0x7, 0x0, 0x9, 0x1, 0x4, 0xb, 0x4, 0x40, 0x6, 0x0, 0x7, 0x2d6c57e4, 0x8000, 0x7, 0x5, 0x6, 0x10, 0x7], [0x8000, 0x9, 0x32, 0x0, 0x7, 0x3, 0x6, 0x7f, 0x5, 0x7f, 0x4d1c, 0xffff, 0xfffff968, 0xee, 0x7, 0x1ff, 0x0, 0xfffffbff, 0x7, 0x101, 0xc80, 0x9, 0x9, 0x3, 0x7e, 0x71, 0x5, 0x1ff, 0x7, 0xfffffff8, 0x5, 0x8, 0x8d, 0x34, 0x9377, 0x4, 0x1, 0x6, 0x1ff, 0x1ff, 0x7ff, 0x40, 0xd, 0x4, 0x7, 0xffffffc0, 0x8, 0x4, 0x0, 0x65, 0x7e, 0x0, 0x1ea, 0x0, 0x800, 0x4, 0xc, 0x2, 0x10001, 0x7fffffff, 0x8, 0x1000, 0x0, 0xffffff7f]}, 0x45c)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x11)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000d80)={0x28, 0x2, r4, r5, 0x0, 0x0, 0x0, 0xd8, &(0x7f0000000880)="1ecc91cf1d3e71504f104c22c94c8ada3bcb3141f0aa90194a441dc59c86af0b81b421f03cff5441758d1b161ca6c2293ee8017cf730afedbedeb5d52166d84c2feff3820df731fae5f53a14d884311221be11b268d7cab69cb15e363cab3c234bbaf7f211615a255f665e4a815157d25f477df3590761312418a83cbb5fff4ae4b1188bac46eaaefe491ebe2ae51dcd47ce8755741b54cf7756df1093a38c5be435bcd5d618f3e6e8d3adf59379ad213949260cc33b08c33a7f99d18cd21114b9348176d5934864d16d04e05c49b2b7288a7f134a156e14"})
sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000d40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x238, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0xed, 0x5b, "33e597dfde9d98be9bc62b112337a8e02986561eb936cf562ab48b8a486db89ff49edbb6615a496b01cf9eb0a251385d5150ce0f79df96a2d0b3b3ff9b337de3d26d966b09aaeb178b74dd4501d05c80d2c0cf58ea8439568b54ef38a3034cc673f4ad21a99ca5911b7d2807347f458c127f10d251f006b01b550e0f81c5ddb748abd0e3269e9cec8313ba0b3116618faeaff64798df91acea65a78777d01828178e86bc415f194134adf5852579c8526c2f3cceddae29648e21904404e7dda9c19b103ffdcc85e56e43c45f6255b14b5a277f134587f245a638ede99df36fc04abd87c9c80d325c18"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x80}, @NL80211_ATTR_FRAME_MATCH={0x66, 0x5b, "35a86c852beea76c1b82fc68bb5ef40febd60676f3e25d8754098db8ad61056cabf51efbccbe78681f88a578c75464c633884c583cdeb934e76629d249dd2630d73085a61be6baff90280acea7ca1a4f71f22dfb86393a2ae0c6cc28417d73d29823"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_MATCH={0xb1, 0x5b, "fc3dbe27738686fdb8385abc1cbcc3a3046ce304af0981ee859d9c6bdf0d8c4eaa7b1de2d48169db71195db7c08b8cdd17c3af624b231a619613619a450784754dfadf79ab381f40f4554a46982534f2236e9074cea0a10a986fa0935531aaef0ac21896af5eafcc25a0e69c22943cb68f6e849a21c05d84e81dfd492f95da5f2a2fb0c31f11ce2fbd2b0107af850a32f0516d516bd92e8c180f3f73914316acfbd202163bc65a2cef0c23a1a2"}]}, 0x238}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c000)
r6 = socket(0x10, 0x803, 0x0)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r8})
ioctl$IOMMU_IOAS_IOVA_RANGES(r7, 0x3b84, &(0x7f0000000300)={0x20, r8, 0x1, 0x0, &(0x7f00000001c0)=[{}]})
r9 = syz_open_dev$video4linux(&(0x7f0000000200), 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r9, 0xc0205649, &(0x7f0000000000))
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000a00)={0xa0, 0x1405, 0x4, 0x70bd29, 0x25dfdbfd, "", [{{0x8}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8}, {0x8, 0x3, 0x2}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8010}, 0x10)
sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x4, {{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x4)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r12, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})

46.226886506s ago: executing program 5 (id=3522):
r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, "", {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0)
syz_emit_ethernet(0x89, &(0x7f0000000340)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "bc4a06", 0x30, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100, [0xdb15]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "3286f63bfefd2c2a256a68fe9e"}, {0xa888, 0x88be, 0x3, {{0xc, 0x1, 0x7, 0x1, 0x1, 0x0, 0x4, 0x14}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x3, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}}, 0x0) (async)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0) (async)
syz_usb_control_io$rtl8150(r0, &(0x7f0000002980)={0x14, 0x0, &(0x7f00000028c0)=ANY=[@ANYBLOB="000303000000000375"]}, 0x0) (async)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r2 = socket$can_raw(0x1d, 0x3, 0x1) (async)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt(r3, 0x65, 0x1, &(0x7f0000000080), 0x1d0) (async)
dup3(r2, r3, 0x0) (async)
r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
r5 = add_key(&(0x7f0000000100)='cifs.idmap\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, r1)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', r5}) (async)
r6 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc4}, &(0x7f00000000c0)={0x0, "fdc4655be49494ddbb04004321cec8a95ff6cf5dceb136f384e2d7af9009399ae322215ee4bf0d5dd6bb449626daca37837d952fb2a60444d44d9bce449680eb", 0x30}, 0x48, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r5, r6}, &(0x7f0000000180)=""/216, 0xd8, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0) (async)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$TCSETS(r7, 0x5402, &(0x7f0000000000)={0x8, 0x1000, 0x3, 0xffff, 0x16, "42cdb1f3f99d4a7d21271b62fbac6960c1467b"})
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r7, 0x8010671f, &(0x7f00000015c0)={&(0x7f00000005c0)=""/4096, 0x1000}) (async)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000004280)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0899e8720000009f209379ef09145e43f283aa7dbb6965a79741614e5128bfd434048a2d4209baecca5519336a3cf24aac902e72dda87ec229dea2de45fbd874b3073090af97a3e673fafde18b7b207b4c47864bc63601447c567e602521adc671bc2a36eca8cb1d88efa040f48c4e40bc246be9178fefbf6a60abc3d787d99a6fe5abdcf76506000000e881bb99255c8df6d043161117f5dbcdab098cc5d16d8786c67f2839ee53f9514dd3a3d7c98190ce7424dd622fd0deb893bec65def101666fc43c0d1ef8cef79e90c5979ea114e5ec97ed2f3b3bc041f3c489f81"]})

45.893952866s ago: executing program 1 (id=3523):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x5, r1, 0x0, &(0x7f000000d000/0x1000)=nil, 0x1000, 0x57})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r1, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r1, 0x0, &(0x7f0000000440)="d9", 0x1, 0xe})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r1, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x70e})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x2, r1, 0x0, &(0x7f000000b000/0x4000)=nil, 0x4000, 0x3}) (fail_nth: 1)

45.602755207s ago: executing program 3 (id=3524):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0)="d03211eef0da556d2333aa367dedf223a4a92e1fe2a2031bf2bd097ccf414dffa1a49bce9cce71f39f0e92d6e337c79efd07d9468e85909ad23f2e79c425f3c6994c590a3477a873b23d9ff6e945631fc77aa6926633b2df9fc203105d2eca3f9c75f7945615b7782c2bdc30d77f9e46ffa12d2c43a88d48dcec1b698ad01e306fca6fc6691dc117ceeb825d01a8002ef768c22e720e5b755800a363bf645e9e398ec1cd320cc1e26ea42b378c0d5df7c969dd", 0xb3}, 0x68)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e000000000000000000140000001100"], 0x80}}, 0x0)
syz_emit_ethernet(0x26, &(0x7f0000001040)=ANY=[@ANYBLOB="c92752ede134aaaaaaaaaaaa81004704080045a7001400689078d80000"], 0x0)

44.196012655s ago: executing program 3 (id=3525):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r1=>0x0})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000003c0), 0x2)
ioctl$UDMABUF_CREATE_LIST(r3, 0x40087543, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r4 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, 0x3f7, 0x800, 0x70bd2c, 0x25dfdc00, {0x7, 0x7, './file2', './file2'}}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008000)
poll(&(0x7f0000000380)=[{r4, 0x10}], 0x1, 0x2d)
socket(0xf, 0xa, 0x10)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)

43.832981576s ago: executing program 0 (id=3526):
r0 = syz_open_dev$video(0x0, 0x7, 0x80c00)
ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000680))

43.83265915s ago: executing program 1 (id=3527):
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = socket(0x2, 0x80002, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
r3 = socket$alg(0x26, 0x5, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r5 = socket$kcm(0xa, 0x1, 0x0)
r6 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000000000000100000000000000", @ANYRES16=r4], 0x48)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8916, &(0x7f0000000000)={r6})
r7 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8916, &(0x7f0000000000)={r7})
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8936, &(0x7f0000000000)={r6})
bind$alg(r3, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58)
accept4(r3, 0x0, 0x0, 0x800)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'sed\x00', 0x1, 0x80005, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

43.601408594s ago: executing program 0 (id=3529):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@remote, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0x800b2, 0xfffffff7, 0x4, 0x40000006}, 0x3c)
r4 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00')
getsockopt$inet_udp_int(r4, 0x11, 0xa, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
pread64(r4, &(0x7f0000000100)=""/253, 0xfd, 0x1)
syz_usb_connect(0x0, 0x62, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d24060101030200010006000609240305050306058109240306010304050507240405"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe8, 0x80, 0xf5, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0x1, 0x2, 0x4a, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x7, 0x5, 0x1}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x0, 0x5, 0x1, 0xef, 0x2}, 0xd9, &(0x7f0000000300)={0x5, 0xf, 0xd9, 0x6, [@ssp_cap={0x24, 0x10, 0xa, 0x8, 0x6, 0x8000, 0x0, 0x6, [0xff0018, 0xc180, 0xff0030, 0xff0000, 0xc030, 0xf]}, @generic={0x83, 0x10, 0x4, "72d27335cf0fcbc8586a190c4248ad087abefaf696c96b2d4488540af6b04210473b2b3283bab50f89bc60fd70f260ad962de44acf5db762063e575378d756e0961dfb0b3a6f3272fa3da6e178491c9ee79b194680eccc3033d22afd63ada4d0bf9e39337b2207f0233b4bf0cf206786a12df6d61670b5579fbcc0104ea5ca74"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0xfa, 0x6, 0xd13, 0xf, 0x3, [0xf, 0xffffc0, 0x0, 0x3fff, 0x0, 0xf0]}]}})
syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@local=@item_012={0x0, 0x2, 0x4}, @global=@item_4={0x3, 0x1, 0x2}, @main=@item_4, @local=@item_4={0x3, 0x2, 0x1, "e7e292ea"}, @global=@item_012={0x1, 0x1, 0x8, '8'}, @local=@item_4={0x3, 0x2, 0x8, "3e33fcc9"}, @local=@item_4={0x3, 0x2, 0x2, "dde84050"}, @local=@item_012={0x2, 0x2, 0x3, '\fx'}, @main=@item_012={0x2, 0x0, 0x9, "e96d"}]}}, 0x0}, 0x0)

43.278991041s ago: executing program 5 (id=3530):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x3c, r1, 0x101, 0x20000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (fail_nth: 5)

43.258489416s ago: executing program 3 (id=3531):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000180)={<r1=>0x0, 0x2, 0x1}, &(0x7f0000000200)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000004c0)={r1, @in={{0x2, 0x4e23, @multicast2}}, 0x7543, 0xfffd}, 0x90)
socket$kcm(0x10, 0x2, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x81, 0x80000)
r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x2})
ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0xfffffffffffffd6b, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x9, 0x0, 0xfffffffd], [], [0x0, 0x0, 0x2800000000]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x0, 0xc8b, 0x5})
ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f00000002c0)={r4, 0x5, 0x6, 0x1, 0x0, [], [0x8b, 0x5, 0x1, 0x5], [0x2, 0x20002b, 0x5, 0xff0], [0x200005, 0x1, 0x7, 0x4]})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x28040, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x10, 0x803, 0x0)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r7 = dup(r6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r7, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
r8 = fsopen(0x0, 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)
fsmount(r8, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$fuseblk(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x0, 0x1080, 0x0)
write$binfmt_aout(r7, 0x0, 0xffffffdb)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
r9 = syz_open_dev$video4linux(&(0x7f0000000340), 0x7ff, 0x4)
ioctl$VIDIOC_QUERY_DV_TIMINGS(r9, 0x80845663, 0x0)

43.177416877s ago: executing program 1 (id=3532):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newpolicy={0xb8, 0x13, 0x1, 0x70bd2b, 0x25dfdbfb, {{@in6=@loopback, @in=@broadcast, 0x0, 0xd, 0x400, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x1, 0xffffffffffffffff, 0xfffffffffffffffe, 0x101, 0x0, 0x2}, {0x0, 0x1765, 0x4000000000}, 0x2, 0x1000000, 0x0, 0x0, 0x0, 0x2}}, 0xb8}}, 0x10)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) (fail_nth: 5)

43.108535432s ago: executing program 6 (id=3533):
r0 = socket$inet6(0xa, 0x3, 0x3c)
getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c)
sendmmsg$inet(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001ec0)="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", 0x2e0}, {&(0x7f0000000380)="ab29d92826349952eb8f7a2a74f535bc973957144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0769421fb965c7396854e2a3ac866dd70d88449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae3c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a074863edba4a0e58b61faec4a42c29d7f9e48a43b8cb7d3c5a1e5aa67f87538140f8d633a54bceb8b1dda2397ea147d3b26e903f608b6ab1844ea7cf630d828118bba0f0f85e2e6316ae1ed9a2a7d08a05c170cb76bf111930df0cf760f7768571afdefe82a95296cee7c010f748a97046efcc774e7d85edbd5058104fef4942fb4430da89f67d1fea33bf2acfb793a610b3738b393eed8633fc8e8f630932206960e9076c7d7fc99fce018701c50d39b811a7427a7a9fcb340c2755541f228462010ec40ba945a0febd460dad5d548f1be090f5dbaa8ae8835dc47ed2537681827f6129759272574cf58f2f33e47a0e416573cfdcfb44ed9dd4ce41af4de9c471c49f12f090934c3b32f2f4777c65b1574826727f5f620000", 0x1e9}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df4050d43d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0xa0}, {&(0x7f00000006c0)="f610e61fc81cc3edc86f2800194d27a5a42cf17903c1c1c2f175", 0x1a}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x44040)

42.629202558s ago: executing program 6 (id=3534):
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r0, 0x6)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0xa)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20040000)
r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0)
ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000180)=0x7)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000140)={0x100, r2}, 0x0)
r3 = socket(0x2, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0x42f, 0x870bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x8, 0x7}, {}, {0xfff2, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xa75}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2044028}, 0x0)
landlock_restrict_self(r1, 0x4)
r8 = landlock_create_ruleset(&(0x7f0000000000)={0x420}, 0x18, 0x0)
landlock_restrict_self(r8, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0)

42.387901349s ago: executing program 5 (id=3535):
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = socket(0x2, 0x80002, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
r3 = socket$alg(0x26, 0x5, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r5 = socket$kcm(0xa, 0x1, 0x0)
r6 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000000000000100000000000000", @ANYRES16=r4], 0x48)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8916, &(0x7f0000000000)={r6})
r7 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8916, &(0x7f0000000000)={r7})
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8936, &(0x7f0000000000)={r6})
bind$alg(r3, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58)
accept4(r3, 0x0, 0x0, 0x800)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'sed\x00', 0x1, 0x80005, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

42.290090412s ago: executing program 1 (id=3536):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000480)={0x6, 0x0, [{0x7, 0xffffffff, 0x1, 0x3, 0x7, 0x6, 0x2}, {0x1, 0x4, 0x6, 0x7fff, 0x27, 0x7, 0x85}, {0x0, 0x8, 0x0, 0x3ff, 0x7ffffdff, 0x8005, 0xffff}, {0x80000000, 0xe5f, 0x1, 0x6, 0xdf1, 0x6, 0x80000001}, {0x80000000, 0x2bb, 0x1, 0xa, 0x3, 0x7ff, 0x25}, {0x80000000, 0x100, 0x4, 0x6, 0x3, 0x2, 0x3}]})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000300)={<r1=>r0, &(0x7f00000001c0)='d\x00', 0x200000, &(0x7f0000000240)={@_ha_fsid={[0x84, 0x3]}, {0x7f, 0x9, 0x5, 0x1}}, 0xe, &(0x7f0000000280), &(0x7f00000002c0)=0x7})
fanotify_mark(0xffffffffffffffff, 0x200, 0x0, r1, &(0x7f0000000340)='./file0\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000100)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0xf)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x2dc}}, 0x0)

42.071391123s ago: executing program 5 (id=3537):
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000002c0)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x8, 0x298087f6, 0x8, 0x8, &(0x7f0000000480)}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', r3, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004200)={0x20, 0x12, 0xa01, 0xffffffff, 0x25df5bfe, {0x14}, [@nested={0x9, 0xec, 0x0, 0x1, [@generic="608da74874"]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048090)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x110, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0xe70}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x88e}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x81}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x8}, {0x5}}]}, 0x110}, 0x1, 0x0, 0x0, 0x8890}, 0x80)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

42.057323827s ago: executing program 6 (id=3538):
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f)
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0)
read$dsp(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f00000005c0), 0x10)
recvmmsg(r2, &(0x7f0000003440)=[{{&(0x7f00000000c0)=@xdp, 0x80, 0x0}, 0xfffffff6}], 0x1, 0x10022, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00)

41.616888923s ago: executing program 5 (id=3539):
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0xfffffff9, 0x3, 0x4, 0x0, 0x3})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1})

40.907228894s ago: executing program 5 (id=3540):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @empty}], 0x10)
dup(r0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf09010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
recvmsg(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001700)=""/4108, 0x100c}], 0x1}, 0x2000)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5})
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000100)=0x9, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r6)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x20, 0x4, [0x2, 0x0, 0x0, 0x100, 0x5, 0x0, 0x0, 0x2]}})
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r5, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000})
r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
listen(0xffffffffffffffff, 0xda90)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000080)={0x3, 0x6576, 0x2})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r7, 0x100000000)
ioctl$IOMMU_IOAS_UNMAP$ALL(r4, 0x3b86, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, 0x0)
openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0)

40.885811554s ago: executing program 1 (id=3541):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c000000200001"], 0x4c}, 0x1, 0x0, 0x0, 0x4040016}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0), 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
pipe(&(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000140))
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e22, 0x3, @empty}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e23, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x869d}], 0x48)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff})
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(r6, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xffffffffffffffd1, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r5, @ANYRES64=r7, @ANYRES64=r5], 0x40}, 0x1, 0x0, 0x0, 0x80080}, 0x14004005)
socket$alg(0x26, 0x5, 0x0)
socket$packet(0x11, 0xa, 0x300)
socket(0x1, 0x800, 0x7)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
r8 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r8, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
accept(r8, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="04050400c900", @ANYRES64, @ANYBLOB], 0x7)
sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x701400)

40.824182832s ago: executing program 0 (id=3542):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0x3, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x4008804)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x7c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}, @qdisc_kind_options=@q_cake={{0x9}, {0x44, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x7f}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x4}, @TCA_CAKE_RTT={0x8, 0x7, 0x1ff}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_TARGET={0x8, 0x8, 0xa}, @TCA_CAKE_TARGET={0x8, 0x8, 0x4}, @TCA_CAKE_MPU={0x8, 0xe, 0x70}, @TCA_CAKE_MEMORY={0x8, 0xa, 0xffff269a}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x40)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

40.612103674s ago: executing program 6 (id=3543):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0x20}, 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, 0x8}, 0x1c)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0xbc}, &(0x7f0000000180)=0x8)

40.141139869s ago: executing program 6 (id=3544):
r0 = socket$inet6(0xa, 0x3, 0x3c)
getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c)
sendmmsg$inet(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001ec0)="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", 0x2e0}, {&(0x7f0000000380)="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", 0x1e9}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df4050d43d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0xa0}, {&(0x7f00000006c0)="f610e61fc81cc3edc86f2800194d27a5a42cf17903c1c1c2f175", 0x1a}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x44040)

39.949763257s ago: executing program 6 (id=3545):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={<r3=>0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10)
shutdown(r2, 0x2)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000800)={r3, @in={{0x2, 0x4e22, @empty}}, 0x9, 0x10}, 0x90)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050)

39.458317894s ago: executing program 1 (id=3546):
syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12121cd2abf63f3fff3d0100000000002043553130000000000001090224000100003000090400100903000000092183000001222700"], 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x6000400)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
recvfrom$inet(r1, 0x0, 0x0, 0x720, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001e000103020000200000000008000000080003800400c180"], 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x4004000)
msgget$private(0x0, 0x407)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0}, 0x68)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0)
r3 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000280)={0x2, 0x4001, @remote}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
accept4$inet(r2, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800)
clock_gettime(0x0, &(0x7f00000001c0)={<r4=>0x0, <r5=>0x0})
ppoll(&(0x7f0000000100), 0x0, &(0x7f00000002c0)={r4, r5+10000000}, &(0x7f0000000200)={[0x6]}, 0x5c)
r6 = syz_open_dev$dri(&(0x7f0000000180), 0xffffffffffffffff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xf})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r7 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_CONTINUE(r7, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
setsockopt$sock_attach_bpf(r3, 0x1, 0xd, 0x0, 0x0)
ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000002500)={{{0x6, 0x1}}, 0xd3, 0xfff, &(0x7f00000003c0)="67848dce89a9f507868a380f1376c2120ab3f54530754adac51a67b3aade6136bbb9b10d8ebe5c6e9fcf8c3bf3902cbac0d67e5af92d486ed55bb9ba09a73d33c6e5819de0a00815a742eb8e3289d21cb28e06571f3fc7296e24a8edc1cae250ece50f7a8786819ba7a699f03893d590bec0b03106c45cc9db749bb9245d8c99e5d2b8bb67da810e16ae7b30fc91bf07a6ab65c814df2735f5374abe0906b945ce54c2d698ade9e2ce348586845146a7297e4373c7923d8f420087c5eed2474289fa03add699cd1df0e3fce454a70d596bc08e"})
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2})
ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0)
r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
read$FUSE(r8, &(0x7f00000004c0)={0x2020}, 0xc9)
close(r3)

0s ago: executing program 34 (id=3542):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0x3, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x4008804)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x7c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}, @qdisc_kind_options=@q_cake={{0x9}, {0x44, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x7f}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x4}, @TCA_CAKE_RTT={0x8, 0x7, 0x1ff}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_TARGET={0x8, 0x8, 0xa}, @TCA_CAKE_TARGET={0x8, 0x8, 0x4}, @TCA_CAKE_MPU={0x8, 0xe, 0x70}, @TCA_CAKE_MEMORY={0x8, 0xa, 0xffff269a}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x40)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

kernel console output (not intermixed with test programs):

][T16786] syzkaller0: entered allmulticast mode
[  798.092954][ T7418] usb 6-1: Using ep0 maxpacket: 16
[  798.102088][ T7418] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  798.113073][ T7418] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  798.123653][ T7418] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  798.136526][ T7418] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  798.145601][ T7418] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  798.156854][ T7418] usb 6-1: config 0 descriptor??
[  798.188674][T16789] syzkaller0: entered promiscuous mode
[  798.379768][   T29] audit: type=1400 audit(1778142564.599:1178): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=16793 comm="syz.0.3350"
[  798.404290][T16771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  798.421307][T16771] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  798.636662][T16771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  798.645568][T16771] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  798.659114][ T7418] hid_parser_main: 4008 callbacks suppressed
[  798.659127][ T7418] microsoft 0003:045E:07DA.0059: unknown main item tag 0x0
[  798.673883][T16781] usb 1-1: new high-speed USB device number 114 using dummy_hcd
[  798.681564][T15265] usb 2-1: new high-speed USB device number 106 using dummy_hcd
[  798.689698][ T7418] microsoft 0003:045E:07DA.0059: ignoring exceeding usage max
[  798.701958][ T7418] microsoft 0003:045E:07DA.0059: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0
[  798.713789][ T7418] microsoft 0003:045E:07DA.0059: no inputs found
[  798.720201][ T7418] microsoft 0003:045E:07DA.0059: could not initialize ff, continuing anyway
[  798.862718][T16781] usb 1-1: Using ep0 maxpacket: 32
[  798.867915][T15265] usb 2-1: Using ep0 maxpacket: 32
[  798.882411][T16781] usb 1-1: config 0 has an invalid descriptor of length 134, skipping remainder of the config
[  798.906478][ T7418] usb 6-1: USB disconnect, device number 61
[  798.916677][T15265] usb 2-1: unable to read config index 0 descriptor/start: -61
[  798.931724][T16781] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  798.949734][T15265] usb 2-1: can't read configurations, error -61
[  798.990896][T16781] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00
[  799.025368][T16781] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  799.048746][T16781] usb 1-1: config 0 descriptor??
[  799.065542][T16801] syzkaller0: entered promiscuous mode
[  799.085899][T16801] syzkaller0: entered allmulticast mode
[  799.104070][T15265] usb 2-1: new high-speed USB device number 107 using dummy_hcd
[  799.125477][T16801] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3353'.
[  799.148130][T16801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3353'.
[  799.167980][T16801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3353'.
[  799.271929][T16811] FAULT_INJECTION: forcing a failure.
[  799.271929][T16811] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  799.285658][T16811] CPU: 0 UID: 0 PID: 16811 Comm: syz.6.3355 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  799.285686][T16811] Tainted: [L]=SOFTLOCKUP
[  799.285693][T16811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  799.285705][T16811] Call Trace:
[  799.285713][T16811]  <TASK>
[  799.285722][T16811]  dump_stack_lvl+0xe8/0x150
[  799.285748][T16811]  should_fail_ex+0x412/0x560
[  799.285778][T16811]  prepare_alloc_pages+0x22a/0x650
[  799.285812][T16811]  __alloc_frozen_pages_noprof+0x12f/0x380
[  799.285843][T16811]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  799.285874][T16811]  ? __pfx_policy_nodemask+0x10/0x10
[  799.285900][T16811]  ? __lock_acquire+0x6b5/0x2cf0
[  799.285908][T15265] usb 2-1: Using ep0 maxpacket: 32
[  799.285927][T16811]  alloc_pages_mpol+0x235/0x490
[  799.285955][T16811]  alloc_pages_noprof+0xac/0x2a0
[  799.285973][T16811]  pte_alloc_one+0x22/0x370
[  799.285998][T16811]  __pte_alloc+0x25/0x1a0
[  799.286026][T16811]  do_pte_missing+0x2cd2/0x33f0
[  799.286060][T16811]  ? __pmd_alloc+0x40a/0x5c0
[  799.286083][T16811]  handle_mm_fault+0x1bd7/0x3170
[  799.286117][T16811]  ? handle_mm_fault+0xee/0x3170
[  799.286144][T16811]  ? __pfx_handle_mm_fault+0x10/0x10
[  799.286177][T16811]  ? __lock_acquire+0x6b5/0x2cf0
[  799.286199][T16811]  ? lock_mm_and_find_vma+0xa7/0x340
[  799.286226][T16811]  do_user_addr_fault+0x75b/0x1340
[  799.286258][T16811]  exc_page_fault+0x6a/0xc0
[  799.286281][T16811]  asm_exc_page_fault+0x26/0x30
[  799.286298][T16811] RIP: 0010:rep_movs_alternative+0x30/0x90
[  799.286324][T16811] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08
[  799.286339][T16811] RSP: 0018:ffffc900040e7d58 EFLAGS: 00050202
[  799.286355][T16811] RAX: 00007ffffffff001 RBX: 000000000000000c RCX: 000000000000000c
[  799.286368][T16811] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffc900040e7dc0
[  799.286379][T16811] RBP: ffffc900040e7eb8 R08: ffffc900040e7dcb R09: 1ffff9200081cfb9
[  799.286392][T16811] R10: dffffc0000000000 R11: fffff5200081cfba R12: 000000000000000c
[  799.286404][T16811] R13: 000000000000000c R14: ffffc900040e7dc0 R15: 0000200000000040
[  799.286431][T16811]  _copy_from_user+0x7a/0xb0
[  799.286456][T16811]  __sys_connect+0x156/0x450
[  799.286480][T16811]  ? __pfx___sys_connect+0x10/0x10
[  799.286511][T16811]  ? __pfx_ksys_write+0x10/0x10
[  799.286540][T16811]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  799.286559][T16811]  __x64_sys_connect+0x7a/0x90
[  799.286588][T16811]  do_syscall_64+0x15f/0xf80
[  799.286608][T16811]  ? trace_irq_disable+0x3b/0x140
[  799.286634][T16811]  ? clear_bhb_loop+0x40/0x90
[  799.286655][T16811]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  799.286672][T16811] RIP: 0033:0x7fc399f9cdd9
[  799.286688][T16811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  799.286702][T16811] RSP: 002b:00007fc39aefd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  799.286719][T16811] RAX: ffffffffffffffda RBX: 00007fc39a215fa0 RCX: 00007fc399f9cdd9
[  799.286732][T16811] RDX: 000000000000000c RSI: 0000200000000040 RDI: 0000000000000003
[  799.286743][T16811] RBP: 00007fc39aefd090 R08: 0000000000000000 R09: 0000000000000000
[  799.286754][T16811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  799.286765][T16811] R13: 00007fc39a216038 R14: 00007fc39a215fa0 R15: 00007fc39a33fa48
[  799.286793][T16811]  </TASK>
[  799.634442][T15265] usb 2-1: unable to read config index 0 descriptor/start: -61
[  799.642154][T15265] usb 2-1: can't read configurations, error -61
[  799.650174][T15265] usb usb2-port1: attempt power cycle
[  799.992420][T15265] usb 2-1: new high-speed USB device number 108 using dummy_hcd
[  800.035784][T15265] usb 2-1: Using ep0 maxpacket: 32
[  800.053403][T15265] usb 2-1: unable to read config index 0 descriptor/start: -61
[  800.070194][T15265] usb 2-1: can't read configurations, error -61
[  800.212783][T15265] usb 2-1: new high-speed USB device number 109 using dummy_hcd
[  800.243357][T15265] usb 2-1: Using ep0 maxpacket: 32
[  800.254287][T15265] usb 2-1: unable to read config index 0 descriptor/start: -61
[  800.265628][T15265] usb 2-1: can't read configurations, error -61
[  800.276274][T15265] usb usb2-port1: unable to enumerate USB device
[  801.029863][T16854] syzkaller1: entered promiscuous mode
[  801.038141][T16854] syzkaller1: entered allmulticast mode
[  801.047709][T16854] FAULT_INJECTION: forcing a failure.
[  801.047709][T16854] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  801.061598][T16854] CPU: 0 UID: 0 PID: 16854 Comm: syz.6.3366 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  801.061624][T16854] Tainted: [L]=SOFTLOCKUP
[  801.061632][T16854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  801.061643][T16854] Call Trace:
[  801.061651][T16854]  <TASK>
[  801.061659][T16854]  dump_stack_lvl+0xe8/0x150
[  801.061685][T16854]  should_fail_ex+0x412/0x560
[  801.061714][T16854]  _copy_from_iter+0x1d3/0x1670
[  801.061741][T16854]  ? sock_alloc_send_pskb+0x896/0x990
[  801.061774][T16854]  ? __pfx__copy_from_iter+0x10/0x10
[  801.061806][T16854]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  801.061834][T16854]  skb_copy_datagram_from_iter+0xf5/0x710
[  801.061866][T16854]  ? skb_put+0x11b/0x210
[  801.061892][T16854]  tun_get_user+0xc5e/0x43e0
[  801.061929][T16854]  ? aa_file_perm+0x192/0x15e0
[  801.061958][T16854]  ? aa_file_perm+0x50e/0x15e0
[  801.061981][T16854]  ? __pfx_tun_get_user+0x10/0x10
[  801.062006][T16854]  ? __lock_acquire+0x6b5/0x2cf0
[  801.062029][T16854]  ? kstrtoull+0x12f/0x1d0
[  801.062057][T16854]  ? ref_tracker_alloc+0x35c/0x4c0
[  801.062083][T16854]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  801.062108][T16854]  ? tun_get+0x1c/0x2f0
[  801.062130][T16854]  ? tun_get+0x1c/0x2f0
[  801.062157][T16854]  ? tun_get+0x1c/0x2f0
[  801.062178][T16854]  ? tun_get+0x1c/0x2f0
[  801.062203][T16854]  tun_chr_write_iter+0x113/0x200
[  801.062231][T16854]  vfs_write+0x61d/0xb90
[  801.062261][T16854]  ? __pfx_vfs_write+0x10/0x10
[  801.062293][T16854]  ? __fget_files+0x2a/0x420
[  801.062321][T16854]  ksys_write+0x150/0x270
[  801.062345][T16854]  ? __pfx_ksys_write+0x10/0x10
[  801.062374][T16854]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  801.062393][T16854]  do_syscall_64+0x15f/0xf80
[  801.062413][T16854]  ? trace_irq_disable+0x3b/0x140
[  801.062437][T16854]  ? clear_bhb_loop+0x40/0x90
[  801.062466][T16854]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  801.062483][T16854] RIP: 0033:0x7fc399f9cdd9
[  801.062500][T16854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  801.062514][T16854] RSP: 002b:00007fc39aefd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  801.062534][T16854] RAX: ffffffffffffffda RBX: 00007fc39a215fa0 RCX: 00007fc399f9cdd9
[  801.062547][T16854] RDX: 0000000000000036 RSI: 0000200000000840 RDI: 0000000000000003
[  801.062559][T16854] RBP: 00007fc39aefd090 R08: 0000000000000000 R09: 0000000000000000
[  801.062570][T16854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  801.062581][T16854] R13: 00007fc39a216038 R14: 00007fc39a215fa0 R15: 00007fc39a33fa48
[  801.062608][T16854]  </TASK>
[  801.272774][ T7418] usb 4-1: new high-speed USB device number 101 using dummy_hcd
[  801.517034][ T7418] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  801.528437][ T7418] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  801.545657][ T7418] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  801.567204][ T7418] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  801.567943][T16862] netlink: 192 bytes leftover after parsing attributes in process `syz.6.3368'.
[  801.587879][T16852] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  801.604154][ T7418] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  801.612482][T15265] usb 6-1: new high-speed USB device number 62 using dummy_hcd
[  801.685340][T16862] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3368'.
[  801.713437][T16862] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3368'.
[  801.792356][T15265] usb 6-1: Using ep0 maxpacket: 16
[  801.798927][T15265] usb 6-1: config 251 has an invalid interface number: 16 but max is 0
[  801.808428][T15265] usb 6-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config
[  801.821950][T15265] usb 6-1: config 251 has no interface number 0
[  801.828432][T15265] usb 6-1: config 251 interface 16 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  801.839054][T15265] usb 6-1: config 251 interface 16 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  801.855086][T15265] usb 6-1: config 251 interface 16 has no altsetting 0
[  801.864495][T15265] usb 6-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=9a.63
[  801.873858][T15265] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  801.888680][T15265] usb 6-1: Product: syz
[  801.894461][T15265] usb 6-1: Manufacturer: syz
[  801.900943][T15265] usb 6-1: SerialNumber: syz
[  801.922315][  T807] usb 2-1: new high-speed USB device number 110 using dummy_hcd
[  802.095497][  T807] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  802.107608][  T807] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 35, changing to 7
[  802.125250][  T807] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 41963, setting to 1024
[  802.138564][T16856] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3367'.
[  802.153772][  T807] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  802.163249][  T807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  802.171649][  T807] usb 2-1: Product: syz
[  802.193951][T15265] usb 6-1: USB disconnect, device number 62
[  802.203848][  T807] usb 2-1: Manufacturer: syz
[  802.219575][  T807] usb 2-1: SerialNumber: syz
[  802.241713][  T807] usb 2-1: config 0 descriptor??
[  802.263184][  T807] usb 2-1: 0:0 : invalid sync pipe. bmAttributes 01, bLength 9, bSynchAddress 7f
[  802.379768][T15586] usb 1-1: USB disconnect, device number 114
[  802.498930][T16866] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3370'.
[  803.427866][  T144] bridge_slave_1: left allmulticast mode
[  803.434327][  T144] bridge0: port 2(bridge_slave_1) entered disabled state
[  803.447828][  T144] bridge_slave_0: left allmulticast mode
[  803.458849][  T144] bridge_slave_0: left promiscuous mode
[  803.474418][  T144] bridge0: port 1(bridge_slave_0) entered disabled state
[  804.171920][T14894] usb 4-1: USB disconnect, device number 101
[  804.267794][ T7418] IPVS: starting estimator thread 0...
[  804.362362][T16892] IPVS: using max 28 ests per chain, 67200 per kthread
[  804.612449][ T7418] usb 6-1: new high-speed USB device number 63 using dummy_hcd
[  804.783550][ T7418] usb 6-1: config 0 has an invalid interface number: 64 but max is 0
[  804.802078][ T7418] usb 6-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[  804.829631][ T7418] usb 6-1: config 0 has no interface number 0
[  804.840804][ T7418] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  804.853197][ T7418] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  804.861426][ T7418] usb 6-1: Product: syz
[  804.870760][  T144] ip6gretap0 (unregistering): left allmulticast mode
[  804.881030][ T7418] usb 6-1: Manufacturer: syz
[  804.887859][ T7418] usb 6-1: SerialNumber: syz
[  804.938951][ T7418] usb 6-1: config 0 descriptor??
[  804.964053][ T7418] uvcvideo 6-1:0.64: probe with driver uvcvideo failed with error -22
[  805.112358][ T5690] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  805.150648][  T144] bond3 (unregistering): (slave geneve2): Releasing active interface
[  805.262361][ T5690] usb 7-1: Using ep0 maxpacket: 16
[  805.277294][ T5690] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  805.302809][ T5690] usb 7-1: config 0 has no interface number 0
[  805.338567][ T5690] usb 7-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88
[  805.357036][ T5690] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  805.374947][ T5690] usb 7-1: Product: syz
[  805.379359][ T5690] usb 7-1: Manufacturer: syz
[  805.385027][ T5690] usb 7-1: SerialNumber: syz
[  805.398930][ T5690] usb 7-1: config 0 descriptor??
[  805.509309][  T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  805.539459][  T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  805.565158][  T144] bond0 (unregistering): Released all slaves
[  805.594037][  T144] bond1 (unregistering): Released all slaves
[  805.600792][T16917] FAULT_INJECTION: forcing a failure.
[  805.600792][T16917] name failslab, interval 1, probability 0, space 0, times 0
[  805.603615][  T807] usb 2-1: USB disconnect, device number 110
[  805.633496][T16917] CPU: 1 UID: 0 PID: 16917 Comm: syz.1.3382 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  805.633524][T16917] Tainted: [L]=SOFTLOCKUP
[  805.633531][T16917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  805.633542][T16917] Call Trace:
[  805.633550][T16917]  <TASK>
[  805.633557][T16917]  dump_stack_lvl+0xe8/0x150
[  805.633584][T16917]  should_fail_ex+0x412/0x560
[  805.633611][T16917]  should_failslab+0xa8/0x100
[  805.633637][T16917]  ? skb_clone+0x212/0x3a0
[  805.633660][T16917]  kmem_cache_alloc_noprof+0x87/0x650
[  805.633685][T16917]  ? __netlink_lookup+0xc6/0x8b0
[  805.633714][T16917]  skb_clone+0x212/0x3a0
[  805.633740][T16917]  __netlink_deliver_tap+0x404/0x850
[  805.633775][T16917]  ? netlink_deliver_tap+0x2e/0x1b0
[  805.633800][T16917]  netlink_deliver_tap+0x19c/0x1b0
[  805.633823][T16917]  netlink_unicast+0x730/0x8e0
[  805.633852][T16917]  netlink_sendmsg+0x813/0xb40
[  805.633883][T16917]  ? __pfx_netlink_sendmsg+0x10/0x10
[  805.633908][T16917]  ? aa_sock_msg_perm+0xf1/0x1b0
[  805.633932][T16917]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  805.633959][T16917]  ____sys_sendmsg+0x972/0x9f0
[  805.633983][T16917]  ? __might_fault+0xaf/0x130
[  805.634011][T16917]  ? __pfx_____sys_sendmsg+0x10/0x10
[  805.634043][T16917]  ? import_iovec+0x73/0xa0
[  805.634071][T16917]  ___sys_sendmsg+0x2a5/0x360
[  805.634102][T16917]  ? __lock_acquire+0x6b5/0x2cf0
[  805.634124][T16917]  ? __pfx____sys_sendmsg+0x10/0x10
[  805.634179][T16917]  ? __fget_files+0x2a/0x420
[  805.634200][T16917]  ? __fget_files+0x3a0/0x420
[  805.634228][T16917]  __x64_sys_sendmsg+0x1bd/0x2a0
[  805.634255][T16917]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  805.634285][T16917]  ? __pfx_ksys_write+0x10/0x10
[  805.634312][T16917]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  805.634327][T16917]  do_syscall_64+0x15f/0xf80
[  805.634345][T16917]  ? trace_irq_disable+0x3b/0x140
[  805.634367][T16917]  ? clear_bhb_loop+0x40/0x90
[  805.634384][T16917]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  805.634398][T16917] RIP: 0033:0x7f7b7319cdd9
[  805.634412][T16917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  805.634426][T16917] RSP: 002b:00007f7b74061028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  805.634443][T16917] RAX: ffffffffffffffda RBX: 00007f7b73415fa0 RCX: 00007f7b7319cdd9
[  805.634455][T16917] RDX: 0000000002000800 RSI: 0000200000000000 RDI: 0000000000000004
[  805.634465][T16917] RBP: 00007f7b74061090 R08: 0000000000000000 R09: 0000000000000000
[  805.634475][T16917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  805.634485][T16917] R13: 00007f7b73416038 R14: 00007f7b73415fa0 R15: 00007f7b7353fa48
[  805.634510][T16917]  </TASK>
[  805.701654][  T144] bond2 (unregistering): Released all slaves
[  805.813879][T12800] udevd[12800]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  805.841295][  T144] bond3 (unregistering): Released all slaves
[  805.960388][  T144] bond4 (unregistering): Released all slaves
[  806.009425][ T5690] usb 7-1: selecting invalid altsetting 1
[  806.037308][ T5690] speedtch 7-1:0.1: speedtch_bind: setting interface to  1 failed (-22)!
[  806.056855][ T5690] speedtch 7-1:0.1: usbatm_usb_probe: bind failed: -22!
[  806.081106][ T5690] speedtch 7-1:0.1: probe with driver speedtch failed with error -22
[  806.144238][ T5690] usb 7-1: USB disconnect, device number 2
[  806.150043][  T144] : left promiscuous mode
[  806.161305][T15586] usb 6-1: USB disconnect, device number 63
[  806.505527][T11738] IPVS: ip_vs_send_async error -101
[  806.703783][  T144] tipc: Disabling bearer <udp:syz2>
[  806.729330][  T144] tipc: Left network mode
[  806.807296][T16958] FAULT_INJECTION: forcing a failure.
[  806.807296][T16958] name failslab, interval 1, probability 0, space 0, times 0
[  806.900674][T16951] 8021q: adding VLAN 0 to HW filter on device bond1
[  806.926953][T16958] CPU: 1 UID: 0 PID: 16958 Comm: syz.6.3388 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  806.926978][T16958] Tainted: [L]=SOFTLOCKUP
[  806.926982][T16958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  806.926989][T16958] Call Trace:
[  806.926994][T16958]  <TASK>
[  806.926998][T16958]  dump_stack_lvl+0xe8/0x150
[  806.927015][T16958]  should_fail_ex+0x412/0x560
[  806.927032][T16958]  should_failslab+0xa8/0x100
[  806.927048][T16958]  ? skb_clone+0x212/0x3a0
[  806.927062][T16958]  kmem_cache_alloc_noprof+0x87/0x650
[  806.927076][T16958]  ? __netlink_lookup+0xc6/0x8b0
[  806.927093][T16958]  skb_clone+0x212/0x3a0
[  806.927108][T16958]  __netlink_deliver_tap+0x404/0x850
[  806.927127][T16958]  ? netlink_deliver_tap+0x2e/0x1b0
[  806.927140][T16958]  netlink_deliver_tap+0x19c/0x1b0
[  806.927154][T16958]  netlink_unicast+0x730/0x8e0
[  806.927171][T16958]  netlink_sendmsg+0x813/0xb40
[  806.927188][T16958]  ? __pfx_netlink_sendmsg+0x10/0x10
[  806.927203][T16958]  ? aa_sock_msg_perm+0xf1/0x1b0
[  806.927218][T16958]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  806.927233][T16958]  ____sys_sendmsg+0x972/0x9f0
[  806.927247][T16958]  ? __might_fault+0xaf/0x130
[  806.927263][T16958]  ? __pfx_____sys_sendmsg+0x10/0x10
[  806.927280][T16958]  ? import_iovec+0x73/0xa0
[  806.927297][T16958]  ___sys_sendmsg+0x2a5/0x360
[  806.927309][T16958]  ? __lock_acquire+0x6b5/0x2cf0
[  806.927323][T16958]  ? __pfx____sys_sendmsg+0x10/0x10
[  806.927353][T16958]  ? __fget_files+0x2a/0x420
[  806.927364][T16958]  ? __fget_files+0x3a0/0x420
[  806.927381][T16958]  __x64_sys_sendmsg+0x1bd/0x2a0
[  806.927396][T16958]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  806.927414][T16958]  ? __pfx_ksys_write+0x10/0x10
[  806.927435][T16958]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  806.927447][T16958]  do_syscall_64+0x15f/0xf80
[  806.927460][T16958]  ? trace_irq_disable+0x3b/0x140
[  806.927475][T16958]  ? clear_bhb_loop+0x40/0x90
[  806.927487][T16958]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  806.927497][T16958] RIP: 0033:0x7fc399f9cdd9
[  806.927508][T16958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  806.927517][T16958] RSP: 002b:00007fc39aedc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  806.927529][T16958] RAX: ffffffffffffffda RBX: 00007fc39a216090 RCX: 00007fc399f9cdd9
[  806.927536][T16958] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006
[  806.927543][T16958] RBP: 00007fc39aedc090 R08: 0000000000000000 R09: 0000000000000000
[  806.927549][T16958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  806.927555][T16958] R13: 00007fc39a216128 R14: 00007fc39a216090 R15: 00007fc39a33fa48
[  806.927570][T16958]  </TASK>
[  807.393118][T16947] syzkaller0: entered promiscuous mode
[  807.398673][T16947] syzkaller0: entered allmulticast mode
[  807.470224][  T144] IPVS: stopping master sync thread 11776 ...
[  807.535205][T16958] bond1: (slave ip6erspan0): making interface the new active one
[  807.541778][T16958] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link
[  807.937343][T16984] FAULT_INJECTION: forcing a failure.
[  807.937343][T16984] name failslab, interval 1, probability 0, space 0, times 0
[  807.972349][T16984] CPU: 0 UID: 0 PID: 16984 Comm: syz.5.3396 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  807.972378][T16984] Tainted: [L]=SOFTLOCKUP
[  807.972385][T16984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  807.972397][T16984] Call Trace:
[  807.972404][T16984]  <TASK>
[  807.972412][T16984]  dump_stack_lvl+0xe8/0x150
[  807.972439][T16984]  should_fail_ex+0x412/0x560
[  807.972467][T16984]  should_failslab+0xa8/0x100
[  807.972493][T16984]  ? skb_clone+0x212/0x3a0
[  807.972532][T16984]  kmem_cache_alloc_noprof+0x87/0x650
[  807.972556][T16984]  ? __netlink_lookup+0xc6/0x8b0
[  807.972583][T16984]  skb_clone+0x212/0x3a0
[  807.972606][T16984]  __netlink_deliver_tap+0x404/0x850
[  807.972640][T16984]  ? netlink_deliver_tap+0x2e/0x1b0
[  807.972662][T16984]  netlink_deliver_tap+0x19c/0x1b0
[  807.972685][T16984]  netlink_unicast+0x730/0x8e0
[  807.972716][T16984]  netlink_sendmsg+0x813/0xb40
[  807.972747][T16984]  ? __pfx_netlink_sendmsg+0x10/0x10
[  807.972773][T16984]  ? aa_sock_msg_perm+0xf1/0x1b0
[  807.972796][T16984]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  807.972823][T16984]  ____sys_sendmsg+0x972/0x9f0
[  807.972846][T16984]  ? __might_fault+0xaf/0x130
[  807.972874][T16984]  ? __pfx_____sys_sendmsg+0x10/0x10
[  807.972916][T16984]  ? import_iovec+0x73/0xa0
[  807.972944][T16984]  ___sys_sendmsg+0x2a5/0x360
[  807.972967][T16984]  ? __lock_acquire+0x6b5/0x2cf0
[  807.972993][T16984]  ? __pfx____sys_sendmsg+0x10/0x10
[  807.973049][T16984]  ? __fget_files+0x2a/0x420
[  807.973068][T16984]  ? __fget_files+0x3a0/0x420
[  807.973098][T16984]  __x64_sys_sendmsg+0x1bd/0x2a0
[  807.973123][T16984]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  807.973156][T16984]  ? __pfx_ksys_write+0x10/0x10
[  807.973187][T16984]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  807.973206][T16984]  do_syscall_64+0x15f/0xf80
[  807.973228][T16984]  ? trace_irq_disable+0x3b/0x140
[  807.973252][T16984]  ? clear_bhb_loop+0x40/0x90
[  807.973274][T16984]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  807.973291][T16984] RIP: 0033:0x7f156fb9cdd9
[  807.973308][T16984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  807.973323][T16984] RSP: 002b:00007f156ddf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  807.973343][T16984] RAX: ffffffffffffffda RBX: 00007f156fe15fa0 RCX: 00007f156fb9cdd9
[  807.973356][T16984] RDX: 0000000000000810 RSI: 0000200000000900 RDI: 0000000000000003
[  807.973368][T16984] RBP: 00007f156ddf6090 R08: 0000000000000000 R09: 0000000000000000
[  807.973379][T16984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  807.973390][T16984] R13: 00007f156fe16038 R14: 00007f156fe15fa0 R15: 00007f156ff3fa48
[  807.973418][T16984]  </TASK>
[  808.388078][T16998] FAULT_INJECTION: forcing a failure.
[  808.388078][T16998] name failslab, interval 1, probability 0, space 0, times 0
[  808.388112][T16998] CPU: 1 UID: 0 PID: 16998 Comm: syz.5.3398 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  808.388136][T16998] Tainted: [L]=SOFTLOCKUP
[  808.388143][T16998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  808.388154][T16998] Call Trace:
[  808.388162][T16998]  <TASK>
[  808.388169][T16998]  dump_stack_lvl+0xe8/0x150
[  808.388194][T16998]  should_fail_ex+0x412/0x560
[  808.388222][T16998]  should_failslab+0xa8/0x100
[  808.388247][T16998]  ? skb_clone+0x212/0x3a0
[  808.388268][T16998]  kmem_cache_alloc_noprof+0x87/0x650
[  808.388291][T16998]  ? __netlink_lookup+0xc6/0x8b0
[  808.388320][T16998]  skb_clone+0x212/0x3a0
[  808.388347][T16998]  __netlink_deliver_tap+0x404/0x850
[  808.388379][T16998]  ? netlink_deliver_tap+0x2e/0x1b0
[  808.388404][T16998]  netlink_deliver_tap+0x19c/0x1b0
[  808.388427][T16998]  netlink_unicast+0x730/0x8e0
[  808.388458][T16998]  netlink_sendmsg+0x813/0xb40
[  808.388491][T16998]  ? __pfx_netlink_sendmsg+0x10/0x10
[  808.388517][T16998]  ? aa_sock_msg_perm+0xf1/0x1b0
[  808.388542][T16998]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  808.388569][T16998]  ____sys_sendmsg+0x972/0x9f0
[  808.388593][T16998]  ? __might_fault+0xaf/0x130
[  808.388618][T16998]  ? __pfx_____sys_sendmsg+0x10/0x10
[  808.388651][T16998]  ? import_iovec+0x73/0xa0
[  808.388680][T16998]  ___sys_sendmsg+0x2a5/0x360
[  808.388703][T16998]  ? __lock_acquire+0x6b5/0x2cf0
[  808.388727][T16998]  ? __pfx____sys_sendmsg+0x10/0x10
[  808.388785][T16998]  ? __fget_files+0x2a/0x420
[  808.388805][T16998]  ? __fget_files+0x3a0/0x420
[  808.388837][T16998]  __x64_sys_sendmsg+0x1bd/0x2a0
[  808.388875][T16998]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  808.388908][T16998]  ? __pfx_ksys_write+0x10/0x10
[  808.388942][T16998]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  808.388962][T16998]  do_syscall_64+0x15f/0xf80
[  808.388984][T16998]  ? trace_irq_disable+0x3b/0x140
[  808.389010][T16998]  ? clear_bhb_loop+0x40/0x90
[  808.389033][T16998]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  808.389051][T16998] RIP: 0033:0x7f156fb9cdd9
[  808.389068][T16998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  808.389084][T16998] RSP: 002b:00007f156ddd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  808.389104][T16998] RAX: ffffffffffffffda RBX: 00007f156fe16090 RCX: 00007f156fb9cdd9
[  808.389117][T16998] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000004
[  808.389129][T16998] RBP: 00007f156ddd5090 R08: 0000000000000000 R09: 0000000000000000
[  808.389141][T16998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  808.389151][T16998] R13: 00007f156fe16128 R14: 00007f156fe16090 R15: 00007f156ff3fa48
[  808.389181][T16998]  </TASK>
[  808.515629][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  808.515685][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  809.221545][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  809.221569][  T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[  809.235936][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  809.235959][  T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[  809.285963][  T144] veth0_virt_wifi: left allmulticast mode
[  809.312659][T17027] FAULT_INJECTION: forcing a failure.
[  809.312659][T17027] name failslab, interval 1, probability 0, space 0, times 0
[  809.458081][  T144] veth0_virt_wifi: left promiscuous mode
[  809.661423][T17027] CPU: 0 UID: 0 PID: 17027 Comm: syz.5.3404 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  809.661451][T17027] Tainted: [L]=SOFTLOCKUP
[  809.661459][T17027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  809.661470][T17027] Call Trace:
[  809.661477][T17027]  <TASK>
[  809.661486][T17027]  dump_stack_lvl+0xe8/0x150
[  809.661511][T17027]  should_fail_ex+0x412/0x560
[  809.661539][T17027]  should_failslab+0xa8/0x100
[  809.661566][T17027]  ? skb_clone+0x212/0x3a0
[  809.661591][T17027]  kmem_cache_alloc_noprof+0x87/0x650
[  809.661615][T17027]  ? __netlink_lookup+0xc6/0x8b0
[  809.661646][T17027]  skb_clone+0x212/0x3a0
[  809.661674][T17027]  __netlink_deliver_tap+0x404/0x850
[  809.661710][T17027]  ? netlink_deliver_tap+0x2e/0x1b0
[  809.661735][T17027]  netlink_deliver_tap+0x19c/0x1b0
[  809.661766][T17027]  netlink_unicast+0x730/0x8e0
[  809.661798][T17027]  netlink_sendmsg+0x813/0xb40
[  809.661830][T17027]  ? __pfx_netlink_sendmsg+0x10/0x10
[  809.661858][T17027]  ? aa_sock_msg_perm+0xf1/0x1b0
[  809.661883][T17027]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  809.661910][T17027]  ____sys_sendmsg+0x972/0x9f0
[  809.661934][T17027]  ? __might_fault+0xaf/0x130
[  809.661963][T17027]  ? __pfx_____sys_sendmsg+0x10/0x10
[  809.661996][T17027]  ? import_iovec+0x73/0xa0
[  809.662024][T17027]  ___sys_sendmsg+0x2a5/0x360
[  809.662047][T17027]  ? __lock_acquire+0x6b5/0x2cf0
[  809.662070][T17027]  ? __pfx____sys_sendmsg+0x10/0x10
[  809.662129][T17027]  ? __fget_files+0x2a/0x420
[  809.662150][T17027]  ? __fget_files+0x3a0/0x420
[  809.662181][T17027]  __x64_sys_sendmsg+0x1bd/0x2a0
[  809.662208][T17027]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  809.662243][T17027]  ? __pfx_ksys_write+0x10/0x10
[  809.662275][T17027]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  809.662295][T17027]  do_syscall_64+0x15f/0xf80
[  809.662316][T17027]  ? trace_irq_disable+0x3b/0x140
[  809.662332][T17027]  ? clear_bhb_loop+0x40/0x90
[  809.662344][T17027]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  809.662355][T17027] RIP: 0033:0x7f156fb9cdd9
[  809.662366][T17027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  809.662375][T17027] RSP: 002b:00007f156ddb4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  809.662386][T17027] RAX: ffffffffffffffda RBX: 00007f156fe16180 RCX: 00007f156fb9cdd9
[  809.662394][T17027] RDX: 0000000000000000 RSI: 0000200000000840 RDI: 0000000000000004
[  809.662400][T17027] RBP: 00007f156ddb4090 R08: 0000000000000000 R09: 0000000000000000
[  809.662406][T17027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  809.662412][T17027] R13: 00007f156fe16218 R14: 00007f156fe16180 R15: 00007f156ff3fa48
[  809.662428][T17027]  </TASK>
[  809.966426][T17027] netlink: 548 bytes leftover after parsing attributes in process `syz.5.3404'.
[  809.989321][  T144] veth1_macvtap: left promiscuous mode
[  809.996081][  T144] veth0_macvtap: left promiscuous mode
[  810.001669][  T144] veth1_vlan: left promiscuous mode
[  810.006938][  T144] veth0_vlan: left promiscuous mode
[  810.611439][  T144] team0 (unregistering): Port device team_slave_1 removed
[  810.628969][  T144] team0 (unregistering): Port device team_slave_0 removed
[  810.823267][T17024] netlink: 'syz.5.3404': attribute type 29 has an invalid length.
[  811.076023][T17056] 8021q: adding VLAN 0 to HW filter on device bond1
[  811.154100][T17058] bond1: (slave ip6erspan0): making interface the new active one
[  811.197161][T17058] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link
[  811.652332][ T7417] usb 1-1: new high-speed USB device number 116 using dummy_hcd
[  811.679005][T17079] openvswitch: netlink: Flow key attr not present in new flow.
[  811.761253][  T144] IPVS: stop unused estimator thread 0...
[  811.824122][ T7417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  811.867888][ T7417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  811.917331][ T7417] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  811.972293][ T7417] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  812.008792][ T7417] usb 1-1: config 0 descriptor??
[  812.048239][T17091] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3418'.
[  812.443423][ T7417] cm6533_jd 0003:0D8C:0022.005A: unknown main item tag 0x0
[  812.458738][ T7417] cm6533_jd 0003:0D8C:0022.005A: unknown main item tag 0x0
[  812.493613][ T7417] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.005A/input/input104
[  812.537429][ T7417] cm6533_jd 0003:0D8C:0022.005A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0
[  812.684537][T15586] usb 1-1: USB disconnect, device number 116
[  812.730820][T17113] fido_id[17113]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  813.072083][T17128] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3424'.
[  813.099937][T17128] openvswitch: netlink: Flow key attr not present in new flow.
[  813.522403][T15586] usb 6-1: new high-speed USB device number 64 using dummy_hcd
[  813.715036][T15586] usb 6-1: unable to get BOS descriptor or descriptor too short
[  813.774174][T15586] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  813.794332][T17149] fuse: Unknown parameter '³µ'
[  813.807319][T15586] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  813.840763][T15586] usb 6-1: Product: syz
[  813.856794][T15586] usb 6-1: Manufacturer: syz
[  813.868369][T17157] syzkaller0: entered promiscuous mode
[  813.870757][T15586] usb 6-1: SerialNumber: syz
[  813.890317][T17157] syzkaller0: entered allmulticast mode
[  813.923703][T15586] usb 6-1: selecting invalid altsetting 1
[  813.943064][T15586] usb 6-1: unit 6 not found!
[  813.968657][T15586] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22
[  814.001930][T15586] usb 6-1: selecting invalid altsetting 1
[  814.019104][T15586] usb 6-1: unit 6 not found!
[  814.039708][T15586] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -22
[  814.079451][T15586] usb 6-1: selecting invalid altsetting 1
[  814.096667][T15586] usb 6-1: unit 6 not found!
[  814.271404][T15586] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -22
[  814.380493][T12254] udevd[12254]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  814.791096][T17167] syzkaller0: entered promiscuous mode
[  814.800332][T17167] syzkaller0: entered allmulticast mode
[  815.012811][T14894] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  815.164017][T17171] syzkaller0: entered promiscuous mode
[  815.182473][T17171] syzkaller0: entered allmulticast mode
[  815.192439][T14894] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  815.214619][T14894] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  815.241275][T14894] usb 7-1: Product: syz
[  815.249860][T14894] usb 7-1: Manufacturer: syz
[  815.261405][T14894] usb 7-1: SerialNumber: syz
[  815.267581][T17171] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  815.572341][ T5690] usb 1-1: new low-speed USB device number 117 using dummy_hcd
[  815.691727][T14894] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  815.707978][T14894] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  815.734362][ T5690] usb 1-1: config 0 interface 0 altsetting 67 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  815.762316][ T5690] usb 1-1: config 0 interface 0 altsetting 67 endpoint 0x81 has invalid maxpacket 64, setting to 8
[  815.782465][ T5690] usb 1-1: config 0 interface 0 altsetting 67 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  815.812314][ T5690] usb 1-1: config 0 interface 0 has no altsetting 0
[  815.818959][ T5690] usb 1-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00
[  815.842275][ T5690] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  815.854630][ T5690] usb 1-1: config 0 descriptor??
[  815.873075][T17177] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  816.303861][ T7417] usb 6-1: USB disconnect, device number 64
[  816.316249][ T5690] petalynx 0003:18B1:0037.005B: unknown main item tag 0x0
[  816.339914][ T5690] petalynx 0003:18B1:0037.005B: unknown main item tag 0x0
[  816.359875][ T5690] petalynx 0003:18B1:0037.005B: unknown main item tag 0x0
[  816.379721][ T5690] petalynx 0003:18B1:0037.005B: unknown main item tag 0x0
[  816.395014][ T5690] petalynx 0003:18B1:0037.005B: unknown main item tag 0x0
[  816.420762][ T5690] petalynx 0003:18B1:0037.005B: unknown main item tag 0x0
[  816.447562][ T5690] petalynx 0003:18B1:0037.005B: unknown main item tag 0x0
[  816.455500][T17184] veth0_to_bond: entered allmulticast mode
[  816.464020][ T5690] petalynx 0003:18B1:0037.005B: unknown main item tag 0x0
[  816.493632][ T5690] petalynx 0003:18B1:0037.005B: hidraw0: USB HID v0.01 Device [HID 18b1:0037] on usb-dummy_hcd.0-1/input0
[  816.677367][T17193] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3446'.
[  816.707059][T15586] usb 1-1: USB disconnect, device number 117
[  816.955456][T17169] syzkaller0: entered promiscuous mode
[  816.967944][T17169] syzkaller0: entered allmulticast mode
[  817.063118][T17209] syzkaller0: entered promiscuous mode
[  817.068628][T17209] syzkaller0: entered allmulticast mode
[  817.089362][T14894] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  817.105858][T14894] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO
[  817.105911][T17209] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  817.120324][T14894] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  817.139520][T14894] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  817.151502][T14894] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  817.166257][T16730] usb 2-1: new full-speed USB device number 111 using dummy_hcd
[  817.177055][T14894] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71
[  817.195104][T14894] usb 7-1: USB disconnect, device number 4
[  817.334163][T16730] usb 2-1: config 251 has an invalid interface number: 254 but max is 0
[  817.347150][T16730] usb 2-1: config 251 has no interface number 0
[  817.354037][T16730] usb 2-1: config 251 interface 254 has no altsetting 0
[  817.374587][T16730] usb 2-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=e1.c1
[  817.384551][T16730] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  817.394166][T16730] usb 2-1: Product: syz
[  817.398662][T16730] usb 2-1: Manufacturer: syz
[  817.403419][T16730] usb 2-1: SerialNumber: syz
[  817.615641][T17217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3454'.
[  817.648028][T16730] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:251.254/input/input105
[  817.676803][T16730] usb 2-1: USB disconnect, device number 111
[  817.723761][T17227] FAULT_INJECTION: forcing a failure.
[  817.723761][T17227] name failslab, interval 1, probability 0, space 0, times 0
[  817.737572][T17227] CPU: 1 UID: 0 PID: 17227 Comm: syz.6.3459 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  817.737598][T17227] Tainted: [L]=SOFTLOCKUP
[  817.737605][T17227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  817.737617][T17227] Call Trace:
[  817.737625][T17227]  <TASK>
[  817.737633][T17227]  dump_stack_lvl+0xe8/0x150
[  817.737663][T17227]  should_fail_ex+0x412/0x560
[  817.737690][T17227]  should_failslab+0xa8/0x100
[  817.737717][T17227]  ? skb_clone+0x212/0x3a0
[  817.737742][T17227]  kmem_cache_alloc_noprof+0x87/0x650
[  817.737766][T17227]  ? __netlink_lookup+0xc6/0x8b0
[  817.737795][T17227]  skb_clone+0x212/0x3a0
[  817.737822][T17227]  __netlink_deliver_tap+0x404/0x850
[  817.737865][T17227]  ? netlink_deliver_tap+0x2e/0x1b0
[  817.737888][T17227]  netlink_deliver_tap+0x19c/0x1b0
[  817.737911][T17227]  netlink_unicast+0x730/0x8e0
[  817.737941][T17227]  netlink_sendmsg+0x813/0xb40
[  817.737971][T17227]  ? __pfx_netlink_sendmsg+0x10/0x10
[  817.737997][T17227]  ? aa_sock_msg_perm+0xf1/0x1b0
[  817.738022][T17227]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  817.738049][T17227]  ____sys_sendmsg+0x972/0x9f0
[  817.738072][T17227]  ? __might_fault+0xaf/0x130
[  817.738099][T17227]  ? __pfx_____sys_sendmsg+0x10/0x10
[  817.738131][T17227]  ? import_iovec+0x73/0xa0
[  817.738160][T17227]  ___sys_sendmsg+0x2a5/0x360
[  817.738183][T17227]  ? __lock_acquire+0x6b5/0x2cf0
[  817.738207][T17227]  ? __pfx____sys_sendmsg+0x10/0x10
[  817.738262][T17227]  ? __fget_files+0x2a/0x420
[  817.738283][T17227]  ? __fget_files+0x3a0/0x420
[  817.738313][T17227]  __x64_sys_sendmsg+0x1bd/0x2a0
[  817.738341][T17227]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  817.738372][T17227]  ? __pfx_ksys_write+0x10/0x10
[  817.738405][T17227]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  817.738425][T17227]  do_syscall_64+0x15f/0xf80
[  817.738447][T17227]  ? trace_irq_disable+0x3b/0x140
[  817.738472][T17227]  ? clear_bhb_loop+0x40/0x90
[  817.738495][T17227]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  817.738513][T17227] RIP: 0033:0x7fc399f9cdd9
[  817.738531][T17227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  817.738547][T17227] RSP: 002b:00007fc39aefd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  817.738567][T17227] RAX: ffffffffffffffda RBX: 00007fc39a215fa0 RCX: 00007fc399f9cdd9
[  817.738579][T17227] RDX: 0000000022000000 RSI: 0000200000000380 RDI: 0000000000000003
[  817.738591][T17227] RBP: 00007fc39aefd090 R08: 0000000000000000 R09: 0000000000000000
[  817.738602][T17227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  817.738611][T17227] R13: 00007fc39a216038 R14: 00007fc39a215fa0 R15: 00007fc39a33fa48
[  817.738638][T17227]  </TASK>
[  818.097823][T14894] usb 1-1: new high-speed USB device number 118 using dummy_hcd
[  818.252925][T14894] usb 1-1: Using ep0 maxpacket: 16
[  818.265363][T14894] usb 1-1: unable to get BOS descriptor or descriptor too short
[  818.289606][T17235] IPVS: sed: FWM 3 0x00000003 - no destination available
[  818.308020][T16730] IPVS: starting estimator thread 0...
[  818.313188][T17239] syzkaller0: entered promiscuous mode
[  818.318966][T17239] syzkaller0: entered allmulticast mode
[  818.321445][T14894] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  818.356446][T14894] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  818.363000][T17239] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  818.367002][T14894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  818.383498][T14894] usb 1-1: Product: syz
[  818.388401][T14894] usb 1-1: Manufacturer: syz
[  818.396513][T14894] usb 1-1: SerialNumber: syz
[  818.425670][T17240] IPVS: using max 31 ests per chain, 74400 per kthread
[  818.541022][T17245] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3466'.
[  818.582400][T17245] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  818.603892][T17245] tipc: Started in network mode
[  818.613276][T17245] tipc: Node identity ac14140f, cluster identity 4711
[  818.620656][T17245] tipc: Enabled bearer <udp:syz2>, priority 10
[  818.633794][T14894] usb 1-1: Audio class v2/v3 interfaces need an interface association
[  818.654354][T14894] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[  818.785094][T14894] usb 1-1: USB disconnect, device number 118
[  819.042332][ T5690] usb 2-1: new full-speed USB device number 112 using dummy_hcd
[  819.117477][T17263] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  819.152632][T14894] usb 1-1: new high-speed USB device number 119 using dummy_hcd
[  819.173632][ T5690] usb 2-1: device descriptor read/64, error -71
[  819.312741][T14894] usb 1-1: Using ep0 maxpacket: 16
[  819.324242][T14894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  819.338941][T14894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  819.355434][T14894] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  819.384537][T14894] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  819.398692][T14894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  819.413704][T14894] usb 1-1: config 0 descriptor??
[  819.413900][ T5690] usb 2-1: new full-speed USB device number 113 using dummy_hcd
[  819.582355][ T5690] usb 2-1: device descriptor read/64, error -71
[  819.591637][T17269] IPVS: sed: FWM 3 0x00000003 - no destination available
[  819.600360][ T7417] IPVS: starting estimator thread 0...
[  819.622538][T15586] tipc: Node number set to 2886997007
[  819.658802][T17254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  819.670906][T17254] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  819.703382][T17270] IPVS: using max 33 ests per chain, 79200 per kthread
[  819.711897][ T5690] usb usb2-port1: attempt power cycle
[  819.759832][T17272] syzkaller0: entered promiscuous mode
[  819.776663][T17272] syzkaller0: entered allmulticast mode
[  819.834664][T17272] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  819.930021][T17254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  819.940577][T17254] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  819.977757][T14894] hid_parser_main: 30 callbacks suppressed
[  819.977770][T14894] microsoft 0003:045E:07DA.005C: unknown main item tag 0x0
[  819.998720][T14894] microsoft 0003:045E:07DA.005C: ignoring exceeding usage max
[  820.018286][T14894] microsoft 0003:045E:07DA.005C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  820.040680][T14894] microsoft 0003:045E:07DA.005C: no inputs found
[  820.058926][T14894] microsoft 0003:045E:07DA.005C: could not initialize ff, continuing anyway
[  820.071628][ T5690] usb 2-1: new full-speed USB device number 114 using dummy_hcd
[  820.122911][ T5690] usb 2-1: device descriptor read/8, error -71
[  820.144033][T17274] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  820.217281][T16781] usb 1-1: USB disconnect, device number 119
[  820.341803][T17281] bridge0: port 5(veth0_to_bridge) entered blocking state
[  820.351741][T17281] bridge0: port 5(veth0_to_bridge) entered disabled state
[  820.359428][T17281] veth0_to_bridge: entered allmulticast mode
[  820.365650][ T5690] usb 2-1: new full-speed USB device number 115 using dummy_hcd
[  820.367242][T17281] veth0_to_bridge: entered promiscuous mode
[  820.379532][T17281] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  820.393093][ T5690] usb 2-1: device descriptor read/8, error -71
[  820.395600][T17281] bridge0: port 5(veth0_to_bridge) entered blocking state
[  820.406498][T17281] bridge0: port 5(veth0_to_bridge) entered forwarding state
[  820.513839][ T5690] usb usb2-port1: unable to enumerate USB device
[  820.787274][T17300] FAULT_INJECTION: forcing a failure.
[  820.787274][T17300] name failslab, interval 1, probability 0, space 0, times 0
[  820.799974][T17300] CPU: 1 UID: 0 PID: 17300 Comm: syz.0.3483 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  820.800001][T17300] Tainted: [L]=SOFTLOCKUP
[  820.800007][T17300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  820.800013][T17300] Call Trace:
[  820.800018][T17300]  <TASK>
[  820.800022][T17300]  dump_stack_lvl+0xe8/0x150
[  820.800040][T17300]  should_fail_ex+0x412/0x560
[  820.800056][T17300]  should_failslab+0xa8/0x100
[  820.800072][T17300]  __kmalloc_cache_node_noprof+0x8a/0x6b0
[  820.800087][T17300]  ? __pfx_css_rstat_updated+0x10/0x10
[  820.800097][T17300]  ? __get_vm_area_node+0x13f/0x300
[  820.800113][T17300]  __get_vm_area_node+0x13f/0x300
[  820.800124][T17300]  ? mod_memcg_lruvec_state+0xd5/0x270
[  820.800137][T17300]  __vmalloc_node_range_noprof+0x36a/0x1750
[  820.800151][T17300]  ? copy_process+0x89b/0x4440
[  820.800172][T17300]  ? __memcg_slab_post_alloc_hook+0x493/0xe80
[  820.800188][T17300]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  820.800203][T17300]  ? rcu_is_watching+0x15/0xb0
[  820.800217][T17300]  ? memcpy_and_pad+0x48/0x80
[  820.800229][T17300]  __vmalloc_node_noprof+0xc2/0x100
[  820.800242][T17300]  ? copy_process+0x89b/0x4440
[  820.800252][T17300]  ? copy_process+0x89b/0x4440
[  820.800263][T17300]  dup_task_struct+0x298/0x840
[  820.800276][T17300]  copy_process+0x89b/0x4440
[  820.800302][T17300]  ? __pfx_copy_process+0x10/0x10
[  820.800316][T17300]  ? mutex_init_lockdep+0xdf/0x110
[  820.800331][T17300]  vhost_task_create+0x1f9/0x380
[  820.800344][T17300]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  820.800357][T17300]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  820.800371][T17300]  ? __pfx_vhost_task_create+0x10/0x10
[  820.800388][T17300]  ? __pfx_vhost_task_fn+0x10/0x10
[  820.800403][T17300]  ? __lock_acquire+0x6b5/0x2cf0
[  820.800416][T17300]  ? kasan_save_track+0x4f/0x80
[  820.800428][T17300]  ? kasan_save_track+0x3e/0x80
[  820.800440][T17300]  ? kasan_save_free_info+0x46/0x50
[  820.800451][T17300]  ? __kasan_slab_free+0x5c/0x80
[  820.800463][T17300]  ? kfree+0x1c5/0x640
[  820.800476][T17300]  kvm_mmu_post_init_vm+0x147/0x2d0
[  820.800493][T17300]  kvm_arch_vcpu_ioctl_run+0x106/0x20d0
[  820.800512][T17300]  ? __mutex_trylock_common+0x158/0x260
[  820.800525][T17300]  ? look_up_lock_class+0x57/0x110
[  820.800539][T17300]  ? register_lock_class+0x31/0x2e0
[  820.800549][T17300]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  820.800565][T17300]  ? __lock_acquire+0x6b5/0x2cf0
[  820.800577][T17300]  ? __mutex_lock+0x319/0x1550
[  820.800593][T17300]  ? kasan_quarantine_put+0xbb/0x1f0
[  820.800612][T17300]  ? do_raw_write_lock+0x11d/0x260
[  820.800640][T17300]  kvm_vcpu_ioctl+0xa62/0xfd0
[  820.800657][T17300]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  820.800669][T17300]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[  820.800692][T17300]  ? __fget_files+0x2a/0x420
[  820.800706][T17300]  ? __fget_files+0x2a/0x420
[  820.800717][T17300]  ? __fget_files+0x3a0/0x420
[  820.800728][T17300]  ? __fget_files+0x2a/0x420
[  820.800741][T17300]  ? bpf_lsm_file_ioctl+0x9/0x20
[  820.800756][T17300]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  820.800769][T17300]  __se_sys_ioctl+0xfc/0x170
[  820.800784][T17300]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  820.800795][T17300]  do_syscall_64+0x15f/0xf80
[  820.800808][T17300]  ? trace_irq_disable+0x3b/0x140
[  820.800822][T17300]  ? clear_bhb_loop+0x40/0x90
[  820.800835][T17300]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  820.800844][T17300] RIP: 0033:0x7fb64459cdd9
[  820.800855][T17300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  820.800869][T17300] RSP: 002b:00007fb6427ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  820.800887][T17300] RAX: ffffffffffffffda RBX: 00007fb644815fa0 RCX: 00007fb64459cdd9
[  820.800900][T17300] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008
[  820.800911][T17300] RBP: 00007fb6427ee090 R08: 0000000000000000 R09: 0000000000000000
[  820.800922][T17300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  820.800933][T17300] R13: 00007fb644816038 R14: 00007fb644815fa0 R15: 00007fb64493fa48
[  820.800950][T17300]  </TASK>
[  820.801132][T17300] syz.0.3483: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  821.219822][T17300] CPU: 1 UID: 0 PID: 17300 Comm: syz.0.3483 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  821.219849][T17300] Tainted: [L]=SOFTLOCKUP
[  821.219855][T17300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  821.219866][T17300] Call Trace:
[  821.219874][T17300]  <TASK>
[  821.219882][T17300]  dump_stack_lvl+0xe8/0x150
[  821.219906][T17300]  warn_alloc+0x249/0x340
[  821.219933][T17300]  ? __pfx_warn_alloc+0x10/0x10
[  821.219958][T17300]  ? __get_vm_area_node+0x13f/0x300
[  821.219986][T17300]  ? __get_vm_area_node+0x2b5/0x300
[  821.220006][T17300]  ? mod_memcg_lruvec_state+0xd5/0x270
[  821.220032][T17300]  __vmalloc_node_range_noprof+0x38f/0x1750
[  821.220075][T17300]  ? __memcg_slab_post_alloc_hook+0x493/0xe80
[  821.220104][T17300]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  821.220129][T17300]  ? rcu_is_watching+0x15/0xb0
[  821.220153][T17300]  ? memcpy_and_pad+0x48/0x80
[  821.220173][T17300]  __vmalloc_node_noprof+0xc2/0x100
[  821.220196][T17300]  ? copy_process+0x89b/0x4440
[  821.220218][T17300]  ? copy_process+0x89b/0x4440
[  821.220237][T17300]  dup_task_struct+0x298/0x840
[  821.220258][T17300]  copy_process+0x89b/0x4440
[  821.220305][T17300]  ? __pfx_copy_process+0x10/0x10
[  821.220331][T17300]  ? mutex_init_lockdep+0xdf/0x110
[  821.220356][T17300]  vhost_task_create+0x1f9/0x380
[  821.220379][T17300]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  821.220401][T17300]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  821.220425][T17300]  ? __pfx_vhost_task_create+0x10/0x10
[  821.220454][T17300]  ? __pfx_vhost_task_fn+0x10/0x10
[  821.220481][T17300]  ? __lock_acquire+0x6b5/0x2cf0
[  821.220503][T17300]  ? kasan_save_track+0x4f/0x80
[  821.220524][T17300]  ? kasan_save_track+0x3e/0x80
[  821.220542][T17300]  ? kasan_save_free_info+0x46/0x50
[  821.220561][T17300]  ? __kasan_slab_free+0x5c/0x80
[  821.220581][T17300]  ? kfree+0x1c5/0x640
[  821.220608][T17300]  kvm_mmu_post_init_vm+0x147/0x2d0
[  821.220635][T17300]  kvm_arch_vcpu_ioctl_run+0x106/0x20d0
[  821.220669][T17300]  ? __mutex_trylock_common+0x158/0x260
[  821.220691][T17300]  ? look_up_lock_class+0x57/0x110
[  821.220715][T17300]  ? register_lock_class+0x31/0x2e0
[  821.220732][T17300]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  821.220760][T17300]  ? __lock_acquire+0x6b5/0x2cf0
[  821.220782][T17300]  ? __mutex_lock+0x319/0x1550
[  821.220814][T17300]  ? kasan_quarantine_put+0xbb/0x1f0
[  821.220849][T17300]  ? do_raw_write_lock+0x11d/0x260
[  821.220886][T17300]  kvm_vcpu_ioctl+0xa62/0xfd0
[  821.220916][T17300]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  821.220937][T17300]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[  821.220978][T17300]  ? __fget_files+0x2a/0x420
[  821.221002][T17300]  ? __fget_files+0x2a/0x420
[  821.221020][T17300]  ? __fget_files+0x3a0/0x420
[  821.221040][T17300]  ? __fget_files+0x2a/0x420
[  821.221063][T17300]  ? bpf_lsm_file_ioctl+0x9/0x20
[  821.221089][T17300]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  821.221112][T17300]  __se_sys_ioctl+0xfc/0x170
[  821.221137][T17300]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  821.221156][T17300]  do_syscall_64+0x15f/0xf80
[  821.221178][T17300]  ? trace_irq_disable+0x3b/0x140
[  821.221203][T17300]  ? clear_bhb_loop+0x40/0x90
[  821.221224][T17300]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  821.221240][T17300] RIP: 0033:0x7fb64459cdd9
[  821.221258][T17300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  821.221274][T17300] RSP: 002b:00007fb6427ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  821.221292][T17300] RAX: ffffffffffffffda RBX: 00007fb644815fa0 RCX: 00007fb64459cdd9
[  821.221304][T17300] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008
[  821.221315][T17300] RBP: 00007fb6427ee090 R08: 0000000000000000 R09: 0000000000000000
[  821.221327][T17300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  821.221338][T17300] R13: 00007fb644816038 R14: 00007fb644815fa0 R15: 00007fb64493fa48
[  821.221366][T17300]  </TASK>
[  821.221445][T17300] Mem-Info:
[  821.619647][T17300] active_anon:7216 inactive_anon:0 isolated_anon:0
[  821.619647][T17300]  active_file:19558 inactive_file:40295 isolated_file:0
[  821.619647][T17300]  unevictable:768 dirty:128 writeback:12
[  821.619647][T17300]  slab_reclaimable:11609 slab_unreclaimable:137320
[  821.619647][T17300]  mapped:32606 shmem:1569 pagetables:1587
[  821.619647][T17300]  sec_pagetables:0 bounce:0
[  821.619647][T17300]  kernel_misc_reclaimable:0
[  821.619647][T17300]  free:1243522 free_pcp:21032 free_cma:0
[  821.666317][T17300] Node 0 active_anon:28864kB inactive_anon:0kB active_file:77800kB inactive_file:160976kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:129992kB dirty:444kB writeback:48kB shmem:4740kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12748kB pagetables:6208kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  821.712869][T17300] Node 1 active_anon:0kB inactive_anon:0kB active_file:432kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:432kB dirty:68kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  821.746918][T17300] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  821.778643][T17300] lowmem_reserve[]: 0 2492 2493 2493 2493
[  821.784582][T17300] Node 0 DMA32 free:1051952kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28752kB inactive_anon:0kB active_file:77800kB inactive_file:160976kB unevictable:1536kB writepending:472kB zspages:0kB present:3129332kB managed:2552664kB mlocked:0kB bounce:0kB free_pcp:48176kB local_pcp:26804kB free_cma:0kB
[  821.910237][T17300] lowmem_reserve[]: 0 0 0 0 0
[  821.915357][T17300] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB
[  821.982295][T17300] lowmem_reserve[]: 0 0 0 0 0
[  821.999889][T17300] Node 1 Normal free:3913824kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:432kB inactive_file:204kB unevictable:1536kB writepending:68kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:29204kB local_pcp:17148kB free_cma:0kB
[  822.036039][T17300] lowmem_reserve[]: 0 0 0 0 0
[  822.040813][T17300] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  822.054209][T17300] Node 0 DMA32: 5061*4kB (UME) 4170*8kB (UME) 2240*16kB (UME) 2365*32kB (UME) 1039*64kB (UME) 405*128kB (UME) 194*256kB (UME) 146*512kB (UME) 49*1024kB (UME) 12*2048kB (UE) 139*4096kB (UM) = 1051972kB
[  822.088784][T17308] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  822.101337][T17300] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  822.125636][T17300] Node 1 Normal: 28*4kB (UM) 26*8kB (UM) 12*16kB (UM) 7*32kB (UM) 8*64kB (UM) 7*128kB (UM) 14*256kB (M) 13*512kB (UM) 4*1024kB (UM) 1*2048kB (M) 951*4096kB (M) = 3913824kB
[  822.143651][T17300] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  822.156839][T17300] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  822.167364][T17300] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  822.177591][T17300] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  822.190960][T17300] 61420 total pagecache pages
[  822.200502][T17300] 0 pages in swap cache
[  822.206666][T17300] Free swap  = 124996kB
[  822.231271][T17300] Total swap = 124996kB
[  822.236789][T17300] 2097051 pages RAM
[  822.252937][T17300] 0 pages HighMem/MovableOnly
[  822.259346][T17300] 427102 pages reserved
[  822.266060][T17300] 0 pages cma reserved
[  822.472771][T17326] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  822.652312][T15586] usb 1-1: new high-speed USB device number 120 using dummy_hcd
[  822.732719][ T5690] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  822.802321][T15586] usb 1-1: Using ep0 maxpacket: 16
[  822.809030][T15586] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  822.820168][T15586] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  822.830140][T15586] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  822.843233][T15586] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  822.852649][T15586] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  822.863468][T15586] usb 1-1: config 0 descriptor??
[  822.882354][ T5690] usb 7-1: Using ep0 maxpacket: 32
[  822.889222][ T5690] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  822.897934][ T5690] usb 7-1: config 0 has no interface number 0
[  822.906913][ T5690] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  822.916294][ T5690] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  822.924372][ T5690] usb 7-1: Product: syz
[  822.928610][ T5690] usb 7-1: Manufacturer: syz
[  822.933527][ T5690] usb 7-1: SerialNumber: syz
[  822.940497][ T5690] usb 7-1: config 0 descriptor??
[  822.948495][ T5690] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  822.957417][ T5690] usb 7-1: selecting invalid altsetting 1
[  822.963536][ T5690] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  822.974146][ T5690] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  822.984835][ T5690] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  822.993206][ T5690] usb 7-1: media controller created
[  823.009074][ T5690] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  823.089282][T17322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  823.109076][T17322] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  823.151416][T17319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  823.161825][T17319] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  823.171680][ T5690] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  823.179898][ T5690] zl10353_read_register: readreg error (reg=127, ret==-71)
[  823.188157][ T5690] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  823.230196][ T5690] usb 7-1: USB disconnect, device number 5
[  823.320191][T17322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  823.334666][T17322] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  823.352447][T14894] usb 2-1: new high-speed USB device number 116 using dummy_hcd
[  823.360342][T15586] microsoft 0003:045E:07DA.005D: unknown main item tag 0x0
[  823.371434][T15586] microsoft 0003:045E:07DA.005D: ignoring exceeding usage max
[  823.388444][T15586] microsoft 0003:045E:07DA.005D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  823.400837][T15586] microsoft 0003:045E:07DA.005D: no inputs found
[  823.422794][T15586] microsoft 0003:045E:07DA.005D: could not initialize ff, continuing anyway
[  823.508904][T17347] FAULT_INJECTION: forcing a failure.
[  823.508904][T17347] name failslab, interval 1, probability 0, space 0, times 0
[  823.522497][T14894] usb 2-1: Using ep0 maxpacket: 16
[  823.525189][T17347] CPU: 1 UID: 0 PID: 17347 Comm: syz.5.3499 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  823.525217][T17347] Tainted: [L]=SOFTLOCKUP
[  823.525223][T17347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  823.525233][T17347] Call Trace:
[  823.525241][T17347]  <TASK>
[  823.525249][T17347]  dump_stack_lvl+0xe8/0x150
[  823.525274][T17347]  should_fail_ex+0x412/0x560
[  823.525301][T17347]  should_failslab+0xa8/0x100
[  823.525326][T17347]  ? skb_clone+0x212/0x3a0
[  823.525350][T17347]  kmem_cache_alloc_noprof+0x87/0x650
[  823.525373][T17347]  ? __netlink_lookup+0xc6/0x8b0
[  823.525402][T17347]  skb_clone+0x212/0x3a0
[  823.525428][T17347]  __netlink_deliver_tap+0x404/0x850
[  823.525461][T17347]  ? netlink_deliver_tap+0x2e/0x1b0
[  823.525485][T17347]  netlink_deliver_tap+0x19c/0x1b0
[  823.525509][T17347]  netlink_unicast+0x730/0x8e0
[  823.525539][T17347]  netlink_sendmsg+0x813/0xb40
[  823.525569][T17347]  ? __pfx_netlink_sendmsg+0x10/0x10
[  823.525595][T17347]  ? aa_sock_msg_perm+0xf1/0x1b0
[  823.525619][T17347]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  823.525645][T17347]  ____sys_sendmsg+0x972/0x9f0
[  823.525673][T17347]  ? __might_fault+0xaf/0x130
[  823.525701][T17347]  ? __pfx_____sys_sendmsg+0x10/0x10
[  823.525732][T17347]  ? import_iovec+0x73/0xa0
[  823.525759][T17347]  ___sys_sendmsg+0x2a5/0x360
[  823.525781][T17347]  ? __lock_acquire+0x6b5/0x2cf0
[  823.525804][T17347]  ? __pfx____sys_sendmsg+0x10/0x10
[  823.525859][T17347]  ? __fget_files+0x2a/0x420
[  823.525878][T17347]  ? __fget_files+0x3a0/0x420
[  823.525908][T17347]  __x64_sys_sendmsg+0x1bd/0x2a0
[  823.525933][T17347]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  823.525965][T17347]  ? __pfx_ksys_write+0x10/0x10
[  823.525997][T17347]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  823.526017][T17347]  do_syscall_64+0x15f/0xf80
[  823.526041][T17347]  ? trace_irq_disable+0x3b/0x140
[  823.526066][T17347]  ? clear_bhb_loop+0x40/0x90
[  823.526087][T17347]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  823.526105][T17347] RIP: 0033:0x7f156fb9cdd9
[  823.526121][T17347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  823.526137][T17347] RSP: 002b:00007f156ddf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  823.526155][T17347] RAX: ffffffffffffffda RBX: 00007f156fe15fa0 RCX: 00007f156fb9cdd9
[  823.526168][T17347] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  823.526179][T17347] RBP: 00007f156ddf6090 R08: 0000000000000000 R09: 0000000000000000
[  823.526190][T17347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  823.526201][T17347] R13: 00007f156fe16038 R14: 00007f156fe15fa0 R15: 00007f156ff3fa48
[  823.526229][T17347]  </TASK>
[  823.564798][ T5690] usb 1-1: USB disconnect, device number 120
[  823.798088][T17349] syzkaller0: entered promiscuous mode
[  823.800473][T14894] usb 2-1: config 0 has an invalid interface number: 34 but max is 0
[  823.804963][T17349] syzkaller0: entered allmulticast mode
[  823.809900][T14894] usb 2-1: config 0 has no interface number 0
[  823.834578][T14894] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  823.844915][T14894] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  823.857158][T14894] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  823.866370][T14894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  823.878797][T17349] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  823.882284][T14894] usb 2-1: Product: syz
[  823.897191][T14894] usb 2-1: Manufacturer: syz
[  823.901834][T14894] usb 2-1: SerialNumber: syz
[  823.913297][T14894] usb 2-1: config 0 descriptor??
[  823.926120][T17338] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[  823.936882][T17338] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[  824.130865][T17360] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  824.139097][T17360] syzkaller0: entered promiscuous mode
[  824.144873][T17360] syzkaller0: entered allmulticast mode
[  824.194800][T17359] tipc: Resetting bearer <eth:syzkaller0>
[  824.214244][T17359] tipc: Disabling bearer <eth:syzkaller0>
[  824.226249][T14894] asix 2-1:0.34: probe with driver asix failed with error -71
[  824.242842][T14894] usb 2-1: USB disconnect, device number 116
[  824.273364][T16730] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  824.317893][T17363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3505'.
[  824.335266][T17363] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  824.352169][T17363] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  824.436049][T16730] usb 7-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  824.445251][T16730] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  824.453768][T16730] usb 7-1: Product: syz
[  824.457946][T16730] usb 7-1: Manufacturer: syz
[  824.462585][T16730] usb 7-1: SerialNumber: syz
[  824.469045][T16730] usb 7-1: config 0 descriptor??
[  824.675590][T16730] usb 7-1: ignoring: probably an ADSL modem
[  824.889650][T16730] cxacru 7-1:0.0: usbatm_usb_probe: bind failed: -19!
[  824.924087][T16730] usb 7-1: USB disconnect, device number 6
[  825.060922][T17375] xt_hashlimit: max too large, truncated to 1048576
[  825.552382][ T5690] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  825.712386][ T5690] usb 7-1: Using ep0 maxpacket: 16
[  825.722669][ T5690] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  825.739483][ T5690] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  825.764945][ T5690] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  825.801921][ T5690] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  825.826242][ T5690] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  825.854205][ T5690] usb 7-1: config 0 descriptor??
[  826.098837][T17391] syz_tun: entered allmulticast mode
[  826.134635][T17391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  826.160100][T17391] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  826.390101][T17391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  826.402352][ T7417] usb 6-1: new full-speed USB device number 65 using dummy_hcd
[  826.413227][T17391] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  826.422661][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  826.435073][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  826.447417][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  826.459749][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  826.472107][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  826.484464][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  826.496768][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  826.509112][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  826.521468][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  826.533787][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  826.577052][ T7417] usb 6-1: unable to get BOS descriptor or descriptor too short
[  826.595791][ T5690] microsoft 0003:045E:07DA.005E: unknown main item tag 0x0
[  827.633933][ T7417] usb 6-1: not running at top speed; connect to a high speed hub
[  827.660041][ T5690] microsoft 0003:045E:07DA.005E: ignoring exceeding usage max
[  827.699766][ T7417] usb 6-1: config 1 has an invalid interface number: 116 but max is 0
[  827.725475][ T7417] usb 6-1: config 1 has no interface number 0
[  827.736470][T17405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3517'.
[  827.746465][ T7417] usb 6-1: config 1 interface 116 altsetting 15 has an invalid descriptor for endpoint zero, skipping
[  827.764584][ T5690] microsoft 0003:045E:07DA.005E: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0
[  827.794126][ T7417] usb 6-1: config 1 interface 116 altsetting 15 endpoint 0xA has invalid maxpacket 512, setting to 64
[  827.829502][T17405] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  827.845496][ T5690] microsoft 0003:045E:07DA.005E: no inputs found
[  827.860742][ T7417] usb 6-1: config 1 interface 116 altsetting 15 has an endpoint descriptor with address 0xA1, changing to 0x81
[  827.891925][ T5690] microsoft 0003:045E:07DA.005E: could not initialize ff, continuing anyway
[  827.917669][T17405] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  827.934463][ T7417] usb 6-1: config 1 interface 116 altsetting 15 endpoint 0x81 has invalid maxpacket 48940, setting to 64
[  827.961960][ T5690] usb 7-1: USB disconnect, device number 7
[  828.022938][ T7417] usb 6-1: config 1 interface 116 altsetting 15 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  828.105378][ T7417] usb 6-1: config 1 interface 116 has no altsetting 0
[  828.164831][T17406] fido_id[17406]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  828.235566][ T7417] usb 6-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01
[  828.344974][ T7417] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  828.442140][ T7417] usb 6-1: Product: syz
[  828.478771][ T7417] usb 6-1: Manufacturer: syz
[  828.508499][ T7417] usb 6-1: SerialNumber: syz
[  828.526386][T17403] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  828.540818][T17403] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  828.580864][T17411] FAULT_INJECTION: forcing a failure.
[  828.580864][T17411] name failslab, interval 1, probability 0, space 0, times 0
[  828.606565][T17411] CPU: 1 UID: 0 PID: 17411 Comm: syz.1.3518 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  828.606592][T17411] Tainted: [L]=SOFTLOCKUP
[  828.606602][T17411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  828.606613][T17411] Call Trace:
[  828.606620][T17411]  <TASK>
[  828.606627][T17411]  dump_stack_lvl+0xe8/0x150
[  828.606653][T17411]  should_fail_ex+0x412/0x560
[  828.606682][T17411]  should_failslab+0xa8/0x100
[  828.606709][T17411]  ? skb_clone+0x212/0x3a0
[  828.606734][T17411]  kmem_cache_alloc_noprof+0x87/0x650
[  828.606758][T17411]  ? __netlink_lookup+0xc6/0x8b0
[  828.606787][T17411]  skb_clone+0x212/0x3a0
[  828.606815][T17411]  __netlink_deliver_tap+0x404/0x850
[  828.606849][T17411]  ? netlink_deliver_tap+0x2e/0x1b0
[  828.606873][T17411]  netlink_deliver_tap+0x19c/0x1b0
[  828.606897][T17411]  netlink_unicast+0x730/0x8e0
[  828.606929][T17411]  netlink_sendmsg+0x813/0xb40
[  828.606962][T17411]  ? __pfx_netlink_sendmsg+0x10/0x10
[  828.606988][T17411]  ? aa_sock_msg_perm+0xf1/0x1b0
[  828.607011][T17411]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  828.607038][T17411]  ____sys_sendmsg+0x972/0x9f0
[  828.607062][T17411]  ? __might_fault+0xaf/0x130
[  828.607091][T17411]  ? __pfx_____sys_sendmsg+0x10/0x10
[  828.607123][T17411]  ? import_iovec+0x73/0xa0
[  828.607152][T17411]  ___sys_sendmsg+0x2a5/0x360
[  828.607174][T17411]  ? __lock_acquire+0x6b5/0x2cf0
[  828.607199][T17411]  ? __pfx____sys_sendmsg+0x10/0x10
[  828.607262][T17411]  ? __fget_files+0x2a/0x420
[  828.607283][T17411]  ? __fget_files+0x3a0/0x420
[  828.607312][T17411]  __x64_sys_sendmsg+0x1bd/0x2a0
[  828.607339][T17411]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  828.607372][T17411]  ? __pfx_ksys_write+0x10/0x10
[  828.607405][T17411]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  828.607425][T17411]  do_syscall_64+0x15f/0xf80
[  828.607448][T17411]  ? trace_irq_disable+0x3b/0x140
[  828.607473][T17411]  ? clear_bhb_loop+0x40/0x90
[  828.607494][T17411]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  828.607512][T17411] RIP: 0033:0x7f7b7319cdd9
[  828.607529][T17411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  828.607545][T17411] RSP: 002b:00007f7b74061028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  828.607565][T17411] RAX: ffffffffffffffda RBX: 00007f7b73415fa0 RCX: 00007f7b7319cdd9
[  828.607576][T17411] RDX: 0000000000000c00 RSI: 0000200000000140 RDI: 0000000000000003
[  828.607588][T17411] RBP: 00007f7b74061090 R08: 0000000000000000 R09: 0000000000000000
[  828.607599][T17411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  828.607609][T17411] R13: 00007f7b73416038 R14: 00007f7b73415fa0 R15: 00007f7b7353fa48
[  828.607638][T17411]  </TASK>
[  828.720258][    T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!!
[  829.616327][ T7417] ums-usbat 6-1:1.116: USB Mass Storage device detected
[  829.993519][ T7417] ums-usbat 6-1:1.116: probe with driver ums-usbat failed with error -5
[  830.165277][ T7417] usb 6-1: USB disconnect, device number 65
[  831.015859][T17426] FAULT_INJECTION: forcing a failure.
[  831.015859][T17426] name failslab, interval 1, probability 0, space 0, times 0
[  831.052326][ T7417] usb 6-1: new high-speed USB device number 66 using dummy_hcd
[  831.134448][T17426] CPU: 0 UID: 0 PID: 17426 Comm: syz.1.3523 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  831.134465][T17426] Tainted: [L]=SOFTLOCKUP
[  831.134469][T17426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  831.134476][T17426] Call Trace:
[  831.134481][T17426]  <TASK>
[  831.134485][T17426]  dump_stack_lvl+0xe8/0x150
[  831.134502][T17426]  should_fail_ex+0x412/0x560
[  831.134518][T17426]  should_failslab+0xa8/0x100
[  831.134535][T17426]  __kmalloc_noprof+0xe8/0x760
[  831.134548][T17426]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  831.134566][T17426]  tomoyo_realpath_from_path+0xe3/0x5d0
[  831.134581][T17426]  ? tomoyo_domain+0xd7/0x130
[  831.134597][T17426]  ? tomoyo_path_number_perm+0x219/0x630
[  831.134608][T17426]  tomoyo_path_number_perm+0x246/0x630
[  831.134621][T17426]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  831.134632][T17426]  ? __lock_acquire+0x6b5/0x2cf0
[  831.134651][T17426]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[  831.134675][T17426]  ? __fget_files+0x2a/0x420
[  831.134692][T17426]  ? __fget_files+0x2a/0x420
[  831.134703][T17426]  ? __fget_files+0x3a0/0x420
[  831.134714][T17426]  ? __fget_files+0x2a/0x420
[  831.134728][T17426]  security_file_ioctl+0xc3/0x2a0
[  831.134740][T17426]  __se_sys_ioctl+0x47/0x170
[  831.134755][T17426]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  831.134766][T17426]  do_syscall_64+0x15f/0xf80
[  831.134778][T17426]  ? trace_irq_disable+0x3b/0x140
[  831.134792][T17426]  ? clear_bhb_loop+0x40/0x90
[  831.134809][T17426]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  831.134819][T17426] RIP: 0033:0x7f7b7319cdd9
[  831.134830][T17426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  831.134839][T17426] RSP: 002b:00007f7b74061028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  831.134850][T17426] RAX: ffffffffffffffda RBX: 00007f7b73415fa0 RCX: 00007f7b7319cdd9
[  831.134858][T17426] RDX: 00002000000002c0 RSI: 0000000000003b85 RDI: 0000000000000003
[  831.134865][T17426] RBP: 00007f7b74061090 R08: 0000000000000000 R09: 0000000000000000
[  831.134871][T17426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  831.134877][T17426] R13: 00007f7b73416038 R14: 00007f7b73415fa0 R15: 00007f7b7353fa48
[  831.134893][T17426]  </TASK>
[  831.134897][T17426] ERROR: Out of memory at tomoyo_realpath_from_path.
[  831.441650][    C0] net_ratelimit: 24170 callbacks suppressed
[  831.441661][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  831.441855][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  831.442032][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  831.442206][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  831.442477][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  831.442652][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  831.442860][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  831.443058][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  831.443229][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  831.443400][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  831.716021][T13749] Bluetooth: hci3: command 0x0406 tx timeout
[  831.903968][ T7417] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64
[  831.920362][ T7417] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32
[  832.093704][ T7417] usb 6-1: config 1 interface 0 has no altsetting 0
[  832.110952][ T7417] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[  832.120755][ T7417] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  832.129209][ T7417] usb 6-1: Product: syz
[  832.139204][ T7417] usb 6-1: Manufacturer: syz
[  832.145001][ T7417] usb 6-1: SerialNumber: syz
[  832.161680][T17419] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  832.197994][T17419] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  832.403636][T17428] 8021q: adding VLAN 0 to HW filter on device macsec1
[  832.513149][ T5690] IPVS: starting estimator thread 0...
[  832.622535][T17441] IPVS: using max 27 ests per chain, 64800 per kthread
[  832.792463][ T7417] rtl8150 6-1:1.0: couldn't reset the device
[  832.802726][ T5690] usb 1-1: new high-speed USB device number 121 using dummy_hcd
[  832.852872][ T7417] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5
[  832.934796][T17445] FAULT_INJECTION: forcing a failure.
[  832.934796][T17445] name failslab, interval 1, probability 0, space 0, times 0
[  832.979393][ T7417] usb 6-1: USB disconnect, device number 66
[  833.032346][ T5690] usb 1-1: Using ep0 maxpacket: 16
[  833.041781][T17445] CPU: 1 UID: 0 PID: 17445 Comm: syz.5.3530 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  833.041809][T17445] Tainted: [L]=SOFTLOCKUP
[  833.041816][T17445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  833.041826][T17445] Call Trace:
[  833.041834][T17445]  <TASK>
[  833.041843][T17445]  dump_stack_lvl+0xe8/0x150
[  833.041868][T17445]  should_fail_ex+0x412/0x560
[  833.041905][T17445]  should_failslab+0xa8/0x100
[  833.041932][T17445]  ? skb_clone+0x212/0x3a0
[  833.041957][T17445]  kmem_cache_alloc_noprof+0x87/0x650
[  833.041982][T17445]  ? __netlink_lookup+0xc6/0x8b0
[  833.042012][T17445]  skb_clone+0x212/0x3a0
[  833.042040][T17445]  __netlink_deliver_tap+0x404/0x850
[  833.042074][T17445]  ? netlink_deliver_tap+0x2e/0x1b0
[  833.042100][T17445]  netlink_deliver_tap+0x19c/0x1b0
[  833.042124][T17445]  netlink_unicast+0x730/0x8e0
[  833.042156][T17445]  netlink_sendmsg+0x813/0xb40
[  833.042188][T17445]  ? __pfx_netlink_sendmsg+0x10/0x10
[  833.042219][T17445]  ? aa_sock_msg_perm+0xf1/0x1b0
[  833.042243][T17445]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  833.042270][T17445]  ____sys_sendmsg+0x972/0x9f0
[  833.042294][T17445]  ? __might_fault+0xaf/0x130
[  833.042323][T17445]  ? __pfx_____sys_sendmsg+0x10/0x10
[  833.042356][T17445]  ? import_iovec+0x73/0xa0
[  833.042384][T17445]  ___sys_sendmsg+0x2a5/0x360
[  833.042407][T17445]  ? __lock_acquire+0x6b5/0x2cf0
[  833.042431][T17445]  ? __pfx____sys_sendmsg+0x10/0x10
[  833.042488][T17445]  ? __fget_files+0x2a/0x420
[  833.042510][T17445]  ? __fget_files+0x3a0/0x420
[  833.042540][T17445]  __x64_sys_sendmsg+0x1bd/0x2a0
[  833.042567][T17445]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  833.042600][T17445]  ? __pfx_ksys_write+0x10/0x10
[  833.042631][T17445]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  833.042650][T17445]  do_syscall_64+0x15f/0xf80
[  833.042672][T17445]  ? trace_irq_disable+0x3b/0x140
[  833.042697][T17445]  ? clear_bhb_loop+0x40/0x90
[  833.042718][T17445]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  833.042736][T17445] RIP: 0033:0x7f156fb9cdd9
[  833.042754][T17445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  833.042769][T17445] RSP: 002b:00007f156ddf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  833.042789][T17445] RAX: ffffffffffffffda RBX: 00007f156fe15fa0 RCX: 00007f156fb9cdd9
[  833.042802][T17445] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003
[  833.042813][T17445] RBP: 00007f156ddf6090 R08: 0000000000000000 R09: 0000000000000000
[  833.042825][T17445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  833.042836][T17445] R13: 00007f156fe16038 R14: 00007f156fe15fa0 R15: 00007f156ff3fa48
[  833.042866][T17445]  </TASK>
[  833.407992][ T5690] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  833.419406][ T5690] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  833.429472][ T5690] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  833.442363][ T5690] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  833.451681][ T5690] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  833.471618][ T5690] usb 1-1: config 0 descriptor??
[  833.532339][ T5675] usb 4-1: new high-speed USB device number 102 using dummy_hcd
[  833.697735][ T5675] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  833.722377][ T5675] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  833.740189][ T5675] usb 4-1: Product: syz
[  833.760001][ T5675] usb 4-1: Manufacturer: syz
[  833.790927][T17443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  833.825714][ T5675] usb 4-1: SerialNumber: syz
[  833.827953][T17443] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  833.881282][ T5675] r8152-cfgselector 4-1: Unknown version 0x0000
[  833.914966][ T5675] r8152-cfgselector 4-1: config 0 descriptor??
[  834.031647][T17461] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3536'.
[  834.117789][T17443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  834.137496][T17461] netlink: 268 bytes leftover after parsing attributes in process `syz.1.3536'.
[  834.195169][T17443] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  834.233756][ T5690] microsoft 0003:045E:07DA.005F: unknown main item tag 0x0
[  834.249492][ T5690] microsoft 0003:045E:07DA.005F: ignoring exceeding usage max
[  834.345393][ T5690] microsoft 0003:045E:07DA.005F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  834.441431][ T5690] microsoft 0003:045E:07DA.005F: no inputs found
[  834.537891][ T5690] microsoft 0003:045E:07DA.005F: could not initialize ff, continuing anyway
[  834.596597][ T5690] usb 1-1: USB disconnect, device number 121
[  835.054115][T17472] fido_id[17472]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  835.526274][T17481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3541'.
[  835.579482][T17484] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  835.584307][T17481] netlink: 'syz.1.3541': attribute type 30 has an invalid length.
[  835.587969][ T5675] r8152-cfgselector 4-1: Unknown version 0x0000
[  835.631449][ T5675] r8152-cfgselector 4-1: No union descriptors
[  835.679111][ T5675] r8152-cfgselector 4-1: USB disconnect, device number 102
[  836.049677][T17486] tipc: Resetting bearer <eth:syzkaller0>
[  836.055494][    T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!!
[  836.097312][T17494] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  836.441084][T17482] tipc: Disabling bearer <eth:syzkaller0>
[  836.446917][    C0] net_ratelimit: 18684 callbacks suppressed
[  836.446933][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  836.447214][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  836.447484][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  836.447761][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  836.501617][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  836.502591][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  836.513876][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  836.525923][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  836.537858][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  836.549815][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  840.360918][    C0] sched: DL replenish lagged too much
[  841.452257][    C0] net_ratelimit: 31890 callbacks suppressed
[  841.452277][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  841.452414][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  841.458580][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  841.470474][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  841.482343][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  841.494440][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  841.506422][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  841.518271][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  841.530134][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  841.542245][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  846.462291][    C1] net_ratelimit: 30440 callbacks suppressed
[  846.462312][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  846.462528][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  846.468662][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  846.480484][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  846.492502][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  846.504534][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  846.516323][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  846.528226][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  846.540292][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  846.552306][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  850.007010][T13749] Bluetooth: hci4: command 0x0406 tx timeout
[  850.752507][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!!
[  850.922190][    T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!!
[  850.962620][    T0] NOHZ tick-stop error: local softirq work is pending, handler #19a!!!
[  851.002680][    T0] NOHZ tick-stop error: local softirq work is pending, handler #1a!!!
[  851.472443][    C1] net_ratelimit: 30213 callbacks suppressed
[  851.472463][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  851.472540][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  851.478680][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  851.490587][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  851.502634][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  851.514648][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  851.526496][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  851.538397][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  851.550497][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  851.562480][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  856.482407][    C0] net_ratelimit: 29083 callbacks suppressed
[  856.482428][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  856.482470][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  856.488588][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  856.500661][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  856.512692][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  856.524503][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  856.536378][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  856.548480][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  856.560432][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  856.572309][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  861.492415][    C1] net_ratelimit: 30036 callbacks suppressed
[  861.492436][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  861.492493][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  861.498642][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  861.510614][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  861.522610][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  861.534626][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  861.546462][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  861.558364][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  861.570408][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  861.582484][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  866.502230][    C1] net_ratelimit: 29932 callbacks suppressed
[  866.502230][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  866.502249][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  866.508391][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  866.520389][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  866.532828][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  866.544482][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  866.556107][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  866.568211][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  866.580157][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  866.592024][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  870.321260][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  870.337898][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  871.512273][    C0] net_ratelimit: 29945 callbacks suppressed
[  871.512295][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  871.512407][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  871.518448][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  871.530577][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  871.542444][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  871.554280][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  871.566217][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  871.578186][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  871.590197][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  871.602001][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  876.522329][    C0] net_ratelimit: 29116 callbacks suppressed
[  876.522350][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  876.522396][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  876.528577][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  876.540553][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  876.552626][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  876.564344][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  876.576337][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  876.588431][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  876.600308][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  876.612127][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  881.532219][    C0] net_ratelimit: 26643 callbacks suppressed
[  881.532240][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  881.532481][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  881.538525][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  881.550351][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  881.563139][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  881.574235][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  881.586380][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  881.598234][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  881.610818][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  881.622034][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  886.542278][    C1] net_ratelimit: 21505 callbacks suppressed
[  886.542299][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  886.542946][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  886.548561][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  886.560603][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  886.572411][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  886.585194][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  886.596266][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  886.608396][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  886.620260][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  886.632910][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  891.552353][    C0] net_ratelimit: 20815 callbacks suppressed
[  891.552374][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  891.552380][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  891.552671][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  891.558651][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  891.570432][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  891.583229][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  891.594531][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  891.606526][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  891.618313][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  891.630969][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  896.562222][    C0] net_ratelimit: 20771 callbacks suppressed
[  896.562244][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  896.562326][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  896.569214][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  896.580546][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  896.592399][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  896.604774][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  896.616914][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  896.628215][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  896.640156][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  896.652023][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  901.572290][    C1] net_ratelimit: 20815 callbacks suppressed
[  901.572311][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  901.572507][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  901.578495][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  901.591659][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  901.602624][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  901.614444][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  901.626330][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  901.639086][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  901.650242][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  901.662280][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  906.582414][    C1] net_ratelimit: 20773 callbacks suppressed
[  906.582433][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  906.583166][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  906.588686][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  906.600750][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  906.612585][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  906.625407][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  906.636432][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  906.648571][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  906.660458][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  906.673173][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  908.628919][ T5633] Bluetooth: hci1: command 0x0406 tx timeout
[  911.592598][    C1] net_ratelimit: 20410 callbacks suppressed
[  911.592618][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  911.593049][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  911.598830][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  911.610893][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  911.622953][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  911.635412][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  911.646720][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  911.658711][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  911.670595][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  911.683262][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  916.602472][    C1] net_ratelimit: 20096 callbacks suppressed
[  916.602492][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  916.602755][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  916.608682][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  916.620822][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  916.632705][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  916.646027][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  916.656549][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  916.668490][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  916.680354][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  916.693007][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  921.612404][    C1] net_ratelimit: 17882 callbacks suppressed
[  921.612425][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  921.612437][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  921.612802][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  921.618674][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  921.631367][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  921.642608][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  921.654551][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  921.672339][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  921.679182][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  921.690390][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  926.622302][    C1] net_ratelimit: 17351 callbacks suppressed
[  926.622324][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  926.622374][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  926.628488][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  926.641391][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  926.652584][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  926.664437][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  926.676301][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  926.688935][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  926.700207][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  926.712229][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  931.632319][    C0] net_ratelimit: 17378 callbacks suppressed
[  931.632339][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  931.632469][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  931.638614][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  931.650599][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  931.663143][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  931.682305][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  931.686368][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  931.698192][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  931.711074][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  931.722064][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  936.642411][    C1] net_ratelimit: 17247 callbacks suppressed
[  936.642431][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  936.642480][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  936.648887][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  936.661339][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  936.682338][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  936.684560][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  936.696472][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  936.709154][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  936.720255][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  936.732365][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  941.652222][    C0] net_ratelimit: 17223 callbacks suppressed
[  941.652243][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  941.652270][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  941.658633][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  941.670458][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  941.682994][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  941.694353][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  941.706245][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  941.718079][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  941.730847][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  941.741976][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  946.662316][    C1] net_ratelimit: 17223 callbacks suppressed
[  946.662332][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  946.662336][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  946.662729][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  946.669312][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  946.682349][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  946.692492][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  946.704361][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  946.716999][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  946.728160][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  946.740238][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  951.672330][    C1] net_ratelimit: 17326 callbacks suppressed
[  951.672360][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  951.672710][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  951.678628][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  951.690677][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  951.702493][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  951.715250][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  951.726373][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  951.738456][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  951.750375][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  951.762942][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  956.682256][    C1] net_ratelimit: 17372 callbacks suppressed
[  956.682277][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  956.682372][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  956.688633][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  956.701193][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  956.712435][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  956.724395][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  956.736236][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  956.748977][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  956.760117][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  956.772235][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  960.282212][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  960.289182][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P17489/1:b..l
[  960.297726][    C1] rcu: 	(detected by 1, t=10502 jiffies, g=141233, q=3771 ncpus=2)
[  960.305625][    C1] task:syz.5.3540      state:R  running task     stack:24888 pid:17489 tgid:17478 ppid:10692  task_flags:0x400040 flags:0x00080002
[  960.320027][    C1] Call Trace:
[  960.323312][    C1]  <TASK>
[  960.326249][    C1]  __schedule+0x17b4/0x5680
[  960.330790][    C1]  ? unwind_next_frame+0xa6/0x2550
[  960.335908][    C1]  ? __pfx___schedule+0x10/0x10
[  960.340780][    C1]  preempt_schedule_irq+0x4d/0xa0
[  960.345811][    C1]  irqentry_exit+0x14f/0x730
[  960.350411][    C1]  ? trace_irq_disable+0x3b/0x140
[  960.355458][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  960.361445][    C1] RIP: 0010:lock_acquire+0x221/0x350
[  960.366734][    C1] Code: ff ff ff e8 51 94 06 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 3b 4f 97 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 48 4e 92
[  960.386341][    C1] RSP: 0018:ffffc900051ae9b8 EFLAGS: 00000286
[  960.392426][    C1] RAX: e17df4b6db6b4500 RBX: 0000000000000000 RCX: 0000000000000046
[  960.400400][    C1] RDX: 00000000b025bb95 RSI: ffffffff8e218a98 RDI: ffffffff8c28ace0
[  960.408373][    C1] RBP: ffffffff8176f256 R08: ffffffff8176f256 R09: ffffffff8e95cd60
[  960.416345][    C1] R10: ffffc900051aeb28 R11: fffff52000a35d71 R12: 0000000000000002
[  960.424327][    C1] R13: ffffffff8e95cd60 R14: 0000000000000000 R15: 0000000000000246
[  960.432312][    C1]  ? unwind_next_frame+0xa6/0x2550
[  960.437431][    C1]  ? unwind_next_frame+0xa6/0x2550
[  960.442554][    C1]  ? __unwind_start+0xf7/0x760
[  960.447327][    C1]  ? unwind_next_frame+0xa6/0x2550
[  960.452442][    C1]  unwind_next_frame+0xc3/0x2550
[  960.457388][    C1]  ? unwind_next_frame+0xa6/0x2550
[  960.462508][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  960.467710][    C1]  ? get_stack_info_noinstr+0x1b/0x130
[  960.473181][    C1]  __unwind_start+0x5b8/0x760
[  960.477868][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  960.484033][    C1]  arch_stack_walk+0xe3/0x150
[  960.488726][    C1]  ? __unwind_start+0xf7/0x760
[  960.493499][    C1]  stack_trace_save+0xa9/0x100
[  960.498269][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  960.503655][    C1]  ? stack_depot_save_flags+0x33/0x810
[  960.509129][    C1]  ? __lock_acquire+0x6b5/0x2cf0
[  960.514069][    C1]  kasan_save_track+0x3e/0x80
[  960.518797][    C1]  ? kasan_quarantine_put+0xbb/0x1f0
[  960.524087][    C1]  ? decay_va_pool_node+0x786/0xec0
[  960.529291][    C1]  kasan_save_free_info+0x46/0x50
[  960.534325][    C1]  __kasan_slab_free+0x5c/0x80
[  960.539096][    C1]  kmem_cache_free+0x182/0x650
[  960.543878][    C1]  decay_va_pool_node+0x786/0xec0
[  960.548931][    C1]  ? __pfx_decay_va_pool_node+0x10/0x10
[  960.554504][    C1]  __purge_vmap_area_lazy+0x160/0xb40
[  960.559897][    C1]  _vm_unmap_aliases+0x73d/0x7e0
[  960.564845][    C1]  ? _vm_unmap_aliases+0x1c8/0x7e0
[  960.569959][    C1]  ? __pfx__vm_unmap_aliases+0x10/0x10
[  960.575425][    C1]  ? lookup_address_in_pgd_attr+0x5c4/0x8c0
[  960.581328][    C1]  change_page_attr_set_clr+0x307/0xf40
[  960.586882][    C1]  ? __pfx_change_page_attr_set_clr+0x10/0x10
[  960.592971][    C1]  _set_pages_array+0x193/0x270
[  960.597831][    C1]  drm_gem_shmem_get_pages_locked+0x2fa/0x480
[  960.603907][    C1]  ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10
[  960.610506][    C1]  ? ww_mutex_lock+0x3f/0x1c0
[  960.615197][    C1]  drm_gem_shmem_mmap+0x193/0x440
[  960.620239][    C1]  drm_gem_mmap_obj+0x18a/0x4c0
[  960.625106][    C1]  drm_gem_mmap+0xc5/0x1a0
[  960.629525][    C1]  mmap_region+0x19a3/0x22a0
[  960.634140][    C1]  ? __pfx_mmap_region+0x10/0x10
[  960.639098][    C1]  ? rcu_is_watching+0x15/0xb0
[  960.643916][    C1]  ? preempt_schedule_thunk+0x16/0x30
[  960.649315][    C1]  ? mm_get_unmapped_area+0xd3/0x100
[  960.654619][    C1]  ? cap_mmap_addr+0xaf/0x100
[  960.659312][    C1]  ? bpf_lsm_mmap_addr+0x9/0x50
[  960.664172][    C1]  ? shmem_mapping+0xd/0x50
[  960.668679][    C1]  ? memfd_check_seals_mmap+0xc5/0x200
[  960.674143][    C1]  do_mmap+0xc39/0x10c0
[  960.678315][    C1]  ? __pfx_do_mmap+0x10/0x10
[  960.682905][    C1]  ? down_write_killable+0x180/0x240
[  960.688201][    C1]  ? __pfx_down_write_killable+0x10/0x10
[  960.693839][    C1]  ? apparmor_mmap_file+0x2da/0x3e0
[  960.699048][    C1]  vm_mmap_pgoff+0x2c9/0x4f0
[  960.703657][    C1]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  960.708772][    C1]  ? __fget_files+0x2a/0x420
[  960.713367][    C1]  ? __fget_files+0x3a0/0x420
[  960.718046][    C1]  ? __fget_files+0x2a/0x420
[  960.722646][    C1]  ksys_mmap_pgoff+0x51e/0x760
[  960.727421][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  960.733488][    C1]  do_syscall_64+0x15f/0xf80
[  960.738085][    C1]  ? clear_bhb_loop+0x40/0x90
[  960.742768][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  960.748663][    C1] RIP: 0033:0x7f156fb9cdd9
[  960.753080][    C1] RSP: 002b:00007f156ddb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  960.761495][    C1] RAX: ffffffffffffffda RBX: 00007f156fe16180 RCX: 00007f156fb9cdd9
[  960.769471][    C1] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000200000001000
[  960.777453][    C1] RBP: 00007f156fc32d69 R08: 0000000000000009 R09: 0000000100000000
[  960.785434][    C1] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000
[  960.793407][    C1] R13: 00007f156fe16218 R14: 00007f156fe16180 R15: 00007f156ff3fa48
[  960.801399][    C1]  </TASK>
[  960.804420][    C1] rcu: rcu_preempt kthread starved for 4573 jiffies! g141233 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[  960.815609][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  960.825584][    C1] rcu: RCU grace-period kthread stack dump:
[  960.831483][    C1] task:rcu_preempt     state:R  running task     stack:27640 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
[  960.844973][    C1] Call Trace:
[  960.848253][    C1]  <TASK>
[  960.851190][    C1]  __schedule+0x17b4/0x5680
[  960.855700][    C1]  ? __lock_acquire+0x6b5/0x2cf0
[  960.860671][    C1]  ? __pfx___schedule+0x10/0x10
[  960.865537][    C1]  ? schedule+0x90/0x360
[  960.869791][    C1]  schedule+0x164/0x360
[  960.873955][    C1]  schedule_timeout+0x158/0x2c0
[  960.878816][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[  960.884193][    C1]  ? __pfx_process_timeout+0x10/0x10
[  960.889493][    C1]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  960.895308][    C1]  ? prepare_to_swait_event+0x340/0x370
[  960.900871][    C1]  rcu_gp_fqs_loop+0x312/0x11d0
[  960.905739][    C1]  ? __pfx_rcu_watching_snap_recheck+0x10/0x10
[  960.911901][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  960.917188][    C1]  ? _raw_spin_unlock_irq+0x2e/0x50
[  960.922402][    C1]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  960.928217][    C1]  rcu_gp_kthread+0x9e/0x2b0
[  960.932813][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  960.938016][    C1]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  960.943835][    C1]  ? __kthread_parkme+0x7a/0x1f0
[  960.948784][    C1]  ? __kthread_parkme+0x19c/0x1f0
[  960.953822][    C1]  kthread+0x388/0x470
[  960.957900][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  960.963098][    C1]  ? __pfx_kthread+0x10/0x10
[  960.967697][    C1]  ret_from_fork+0x514/0xb70
[  960.972293][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  960.977410][    C1]  ? __switch_to+0xc79/0x1410
[  960.982107][    C1]  ? __pfx_kthread+0x10/0x10
[  960.986712][    C1]  ret_from_fork_asm+0x1a/0x30
[  960.991498][    C1]  </TASK>
[  960.994516][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  961.000842][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  961.011379][    C1] Tainted: [L]=SOFTLOCKUP
[  961.015697][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  961.025749][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  961.031389][    C1] Code: 0b 7e 02 e9 93 f6 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 21 21 00 fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  961.051003][    C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246
[  961.057076][    C1] RAX: 00000000010d1417 RBX: ffffffff819a91ea RCX: 0000000080000001
[  961.065049][    C1] RDX: 0000000000000001 RSI: ffffffff8dfa5b55 RDI: ffffffff8c28ace0
[  961.073021][    C1] RBP: ffffc90000197f10 R08: ffff8880b87339db R09: 1ffff110170e673b
[  961.080996][    C1] R10: dffffc0000000000 R11: ffffed10170e673c R12: 0000000000000001
[  961.088970][    C1] R13: 1ffff11003b5b000 R14: 0000000000000001 R15: 1ffff11003b5b000
[  961.096942][    C1] FS:  0000000000000000(0000) GS:ffff888125390000(0000) knlGS:0000000000000000
[  961.105870][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  961.112454][    C1] CR2: 00005555703414e8 CR3: 000000007a262000 CR4: 00000000003526f0
[  961.120429][    C1] Call Trace:
[  961.123711][    C1]  <TASK>
[  961.126641][    C1]  default_idle+0x9/0x20
[  961.130891][    C1]  default_idle_call+0x72/0xb0
[  961.135663][    C1]  do_idle+0x36a/0x5f0
[  961.139735][    C1]  ? asm_sysvec_call_function_single+0x1a/0x20
[  961.145897][    C1]  ? __pfx_do_idle+0x10/0x10
[  961.150498][    C1]  cpu_startup_entry+0x43/0x60
[  961.155271][    C1]  start_secondary+0x101/0x110
[  961.160039][    C1]  common_startup_64+0x13e/0x147
[  961.165001][    C1]  </TASK>
[  961.692388][    C1] net_ratelimit: 15728 callbacks suppressed
[  961.692408][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  961.692715][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  961.698665][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  961.710666][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  961.722514][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  961.735219][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  961.746429][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  961.758464][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  961.770401][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  961.782920][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  966.702585][    C1] net_ratelimit: 20496 callbacks suppressed
[  966.702606][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  966.702634][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  966.708880][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  966.720860][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  966.732719][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  966.745377][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  966.756593][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  966.768647][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:ef:ac:45:ec:fc, vlan:0)
[  966.780651][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  966.793133][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  970.222566][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  970.238972][ T1316] ieee802154 phy1 wpan1: encryption failed: -22