last executing test programs: 8m9.054104861s ago: executing program 2 (id=271): bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) io_uring_setup(0x61f3, &(0x7f00000004c0)={0x0, 0xe58f, 0x8000, 0x2, 0x1db}) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) write$binfmt_script(r3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x449) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setuid(0x0) ioprio_set$uid(0x3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000002c0)={0x1c, r4, 0x303, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x14014) close(r3) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x506603, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'veth1_to_hsr\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) 7m57.554348789s ago: executing program 2 (id=280): bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x138, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd4e40006df455836aa3bd3aaa2c9b95578719c46f89e01798d28b6d63cf7465ea95bd97b018b7afaccdcb28bb42d677b73c44e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236743acd06103cd77bd07f2df5989ee40e409b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ffcf44f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990f7acfdb8216ea52f604b9f12033688caa4b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d6"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x89101) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r6, r6, &(0x7f0000000000)=0x2eb4, 0x2000007ff) io_uring_setup(0x705b, &(0x7f00000004c0)={0x0, 0xe58f, 0x8000, 0x2, 0x1db}) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') socket$netlink(0x10, 0x3, 0x0) 7m45.627620439s ago: executing program 2 (id=284): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000002600)={0x0, 0x3, "5a77bd318786aeb202dfcdcdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a544304cfb2d22415e11068881e50f68530c2b21a100ef00000000ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171111d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b30855a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) r4 = fsopen(&(0x7f0000000740)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000000100)='0..:\x00', 0x0) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r6) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000800}, 0x4000004) fsetxattr$trusted_overlay_redirect(r5, &(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x8, 0x0) socket$packet(0x11, 0x2, 0x300) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r8, &(0x7f0000000300)={0xa, 0x4e20, 0x800, @loopback, 0x3}, 0x1c) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) close(r0) 7m32.395802747s ago: executing program 2 (id=295): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @link_local, 'macvtap0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETS(r4, 0x545c, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, "43e6323cce19dc42a867c4e745c80552a700"}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, 0x0, 0x80) r6 = socket$can_j1939(0x1d, 0x2, 0x7) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000000)={0x1d, r8, 0x1, {0x0, 0x1, 0x1}, 0xfe}, 0x18) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800008) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000340)={0x88ab1b249e3a04b3, 0x0, {[0x2, 0x12ad, 0x7611, 0xa, 0xed, 0xa, 0x7, 0x81]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, 0x0) 7m30.477377698s ago: executing program 2 (id=297): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb40000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe}) ioctl(r4, 0x8b21, &(0x7f0000000040)) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x10, 0x4}}}}}]}}]}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x2400c000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x7a}, @call={0x85, 0x0, 0x0, 0x70}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000000)='nfs\x00', 0x0) userfaultfd(0x801) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[]) 7m16.67556918s ago: executing program 2 (id=306): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f0000000680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000240)={r6, @in6={{0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0xa}, 0x1}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="e06c811642686ab99694e6ac1465acf0df6983", @ANYRES16=r9, @ANYBLOB="010027bd7000fddbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @broadcast, @broadcast}, &(0x7f00000006c0)=0xc) shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000000000/0x4000)=nil) unshare(0x28020480) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x29, 0xff, 0xdd, 0x2, 0x20, @remote, @private0, 0x1, 0x8, 0x2, 0x7}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000004c0)={0x0, @broadcast, @loopback}, &(0x7f0000000500)=0xc) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x9c, r9, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x20044815) 7m1.01931014s ago: executing program 32 (id=306): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f0000000680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000240)={r6, @in6={{0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0xa}, 0x1}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="e06c811642686ab99694e6ac1465acf0df6983", @ANYRES16=r9, @ANYBLOB="010027bd7000fddbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @broadcast, @broadcast}, &(0x7f00000006c0)=0xc) shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000000000/0x4000)=nil) unshare(0x28020480) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x29, 0xff, 0xdd, 0x2, 0x20, @remote, @private0, 0x1, 0x8, 0x2, 0x7}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000004c0)={0x0, @broadcast, @loopback}, &(0x7f0000000500)=0xc) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x9c, r9, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x20044815) 19.600336102s ago: executing program 0 (id=873): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e1a, 0x7, @dev={0xfe, 0x80, '\x00', 0x11}, 0x6}, 0x1c) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x1}, 0x1c) syz_emit_ethernet(0x86, &(0x7f0000000300)={@random="5bb65d3f2511", @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0xe, 0x78, 0x65, 0x0, 0x3, 0x11, 0x0, @empty, @multicast1}, {0x4e20, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x3, "f66abb6f369aaa15d309a5209a57d6b633de150bf5c0f9eed577c9053e33e8a6", "ad01c9ea336a20bee7eb5eca2632253a", {"d69e4998ec79f91be2f5fdbe24252c46", "94f2cbbb76aeff3f3f60692fd9841b58"}}}}}}}, 0x0) 19.357137546s ago: executing program 4 (id=875): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x355737d6d65d287a, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000000e00)={0xe62b, 0x80000000000000, 0x309, 0x0, 0x8004, 0x9f69, 0x0, 0x200000000002004, 0x2, 0xb2f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x80000001, 0x30, 0x80000001, 0x0, 0x0, 0x6, 0x5, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) close(0x3) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r4}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f0000000180)={0xa0, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}}) r5 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r6 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r7, 0xc0405610, &(0x7f0000000040)={0x2}) 18.634664352s ago: executing program 0 (id=877): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@private0, @in=@multicast1, 0x0, 0x8, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x63, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}}, 0xb8}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 17.957795579s ago: executing program 0 (id=878): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x355737d6d65d287a, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000000e00)={0xe62b, 0x80000000000000, 0x309, 0x0, 0x8004, 0x9f69, 0x0, 0x200000000002004, 0x2, 0xb2f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x80000001, 0x30, 0x80000001, 0x0, 0x0, 0x6, 0x5, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) close(0x3) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r4}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f0000000180)={0xa0, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}}) r5 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r6 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r7, 0xc0405610, &(0x7f0000000040)={0x2}) 14.378299277s ago: executing program 5 (id=884): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_emit_ethernet(0x0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x7, 0x0) r1 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) pwritev(r1, &(0x7f0000000440)=[{&(0x7f00000002c0)='0', 0x1}], 0x1, 0x8000, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb48, 0x9, 0x8, 0x2, 0x21}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4f23, 0xfffc, 0x4e23, 0x6, 0xa, 0x2a11bad3d5f03f34, 0x30}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x4, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x4, 0x9}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x210000, 0x33}, 0x0, @in6=@empty, 0xffffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1}}, 0xffffffffffffff1e) sendmmsg(r2, 0x0, 0x0, 0xffe0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8923, &(0x7f0000000000)={'netdevsim0\x00', 0x7}) r4 = syz_open_dev$dvb_demux(&(0x7f0000000000), 0x5, 0x2) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000004c0)={0x401, 0x7, 0x2, 0x0, 0x0, [{{r0}, 0x5}, {{}, 0x4}]}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000000102010200"], 0x44}, 0x1, 0x0, 0x0, 0x400c054}, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r6, 0x0, 0x0) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) renameat(r7, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', r7, &(0x7f0000000200)='./cgroup.net/cgroup.procs\x00') bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_io_uring_setup(0xf00, &(0x7f0000000000)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) 11.630184585s ago: executing program 5 (id=889): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x13, &(0x7f0000000300), 0x4) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0x6, 0x3, 0x5, 0x2, 0x3}, 0x0) fsopen(&(0x7f0000000040)='afs\x00', 0x0) userfaultfd(0x1) close(0x3) openat$adsp1(0xffffffffffffff9c, 0x0, 0xb0201, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) r4 = dup2(r3, r3) write$P9_RREADLINK(r4, 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xfe02) socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000050) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="0200009c5150ab87237421000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000140), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r6, &(0x7f0000000100)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r6, &(0x7f00000000c0), 0x2) sync() 11.607229743s ago: executing program 1 (id=890): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_usb_connect(0x5, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8=r1, @ANYBLOB="79a9"], 0x0) r2 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$P9_RVERSION(r2, &(0x7f0000002200)=ANY=[], 0xfffffcd9) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 10.033019423s ago: executing program 4 (id=892): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$media(&(0x7f00000006c0), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 9.982551735s ago: executing program 1 (id=893): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newlink={0x4c, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10200, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffc}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x8000) 8.747348043s ago: executing program 4 (id=894): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000080)={0x10000, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x1, 0x4, 0x1000, 0x10000, &(0x7f0000ff0000/0x10000)=nil, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000340)={0x1000, 0x10000}) (async) close(r2) 8.420732873s ago: executing program 0 (id=895): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x7, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff3e5, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x8, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000000, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed9b, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0xfffffffe, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x4, 0x5, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x51, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) openat$sndtimer(0xffffffffffffff9c, 0x0, 0xa1001) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004004) gettid() r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) syz_clone(0x95008100, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r6, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r6, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xce21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8c0}, 0x0) 8.170524069s ago: executing program 1 (id=896): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) read$dsp(r0, &(0x7f0000000280)=""/79, 0x4f) read$dsp(r0, &(0x7f00000001c0)=""/62, 0x3e) 8.126499979s ago: executing program 3 (id=897): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x7, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff3e5, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x8, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000000, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed9b, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0xfffffffe, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x4, 0x5, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x51, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) openat$sndtimer(0xffffffffffffff9c, 0x0, 0xa1001) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004004) gettid() r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) readv(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x5}], 0x1}, 0x0) sendmsg$rds(r5, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xce21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8c0}, 0x0) 7.667575087s ago: executing program 4 (id=898): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r2 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r2, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000006340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 6.933356203s ago: executing program 4 (id=899): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_emit_ethernet(0x0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x7, 0x0) r1 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) pwritev(r1, &(0x7f0000000440)=[{&(0x7f00000002c0)='0', 0x1}], 0x1, 0x8000, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb48, 0x9, 0x8, 0x2, 0x21}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4f23, 0xfffc, 0x4e23, 0x6, 0xa, 0x2a11bad3d5f03f34, 0x30}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x4, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x4, 0x9}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x210000, 0x33}, 0x0, @in6=@empty, 0xffffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1}}, 0xffffffffffffff1e) sendmmsg(r2, 0x0, 0x0, 0xffe0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8923, &(0x7f0000000000)={'netdevsim0\x00', 0x7}) r4 = syz_open_dev$dvb_demux(&(0x7f0000000000), 0x5, 0x2) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000004c0)={0x401, 0x7, 0x2, 0x0, 0x0, [{{r0}, 0x5}, {{}, 0x4}]}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000000102010200"], 0x44}, 0x1, 0x0, 0x0, 0x400c054}, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r6, 0x0, 0x0) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) renameat(r7, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', r7, &(0x7f0000000200)='./cgroup.net/cgroup.procs\x00') bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_io_uring_setup(0xf00, &(0x7f0000000000)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) 6.79403215s ago: executing program 3 (id=900): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)=@newtaction={0x64, 0x30, 0x1, 0x70bd2b, 0xfffffefd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x1, 0x9, 0x7860, 0xfff}, 0x4c}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4084}, 0x0) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 6.404044783s ago: executing program 0 (id=901): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x42002) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r1 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) r2 = socket(0xa, 0x80805, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000002300)={'sit0\x00', &(0x7f00000021c0)={'syztnl2\x00', 0x0, 0x80, 0x7, 0xffffffff, 0x2, {{0x6, 0x4, 0x0, 0x3d, 0x18, 0x68, 0x0, 0x0, 0x29, 0x0, @local, @loopback, {[@timestamp_prespec={0x44, 0x4, 0xbd, 0x3, 0xe}]}}}}}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, 0x0, &(0x7f0000000080)) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000000c0)={r5, 0x7}, 0x8) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x3, 0xa, 0xfc, 0x4}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000007c0)={0x2, @win={{0x5, 0x5, 0x8, 0x3}, 0x6, 0x17d, 0x0, 0x80000000, 0x0, 0x2}}) r6 = socket$tipc(0x1e, 0x5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000100)={r5, @in={{0x2, 0x4e20, @rand_addr=0x64010101}}, 0x5, 0x3, 0x8, 0x8, 0x9, 0x9, 0x6}, 0x9c) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="01002cbd7000fddbdf251000000008000300e48132f8ef1554c79353f451ab8338e86e03f281658978e73641dde9594f45f53ec7c99e00034de2e5c1b071abf0c848e8cb5df32a60ffe970a5c061b4bd074ba6dadeae4da6", @ANYRES32=r9, @ANYBLOB], 0x1c}}, 0x4044050) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r11, 0x0, 0x0, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x6, 0x0, 0xb49, 0x9, 0x9, 0x2, 0x3}, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r12 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0xc8002, 0x40) write(r13, &(0x7f0000004200)='t', 0x1) sendfile(r13, r12, 0x0, 0x7fffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0xa, &(0x7f00000002c0)=[{0x4, 0x1, 0xb, 0x100}, {0xfffc, 0xd2, 0x4, 0x40}, {0x6, 0x8, 0x8, 0x3}, {0x2, 0x4, 0x7, 0x4}, {0x1ff, 0xd, 0xcf, 0x2}, {0x8, 0x1, 0xd, 0xc8ae9880}, {0xb94, 0x1, 0x7, 0x7}, {0x7bdb, 0xe, 0x9, 0x124}, {0x4, 0x76, 0x4, 0x9}, {0x5, 0x4, 0x9c, 0x3}]}) 6.166301608s ago: executing program 1 (id=902): openat$dlm_control(0xffffffffffffff9c, 0x0, 0xad82, 0x0) unshare(0x2040400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f00000002c0)={'bridge0\x00', &(0x7f0000000340)=@ethtool_regs={0x4, 0x0, 0x1b, "aede62497cf56c9ab5bfd7b842f6b7ea6b8579d27d9c47d7da09f5"}}) 5.618400082s ago: executing program 3 (id=903): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0xc, &(0x7f00000006c0)={&(0x7f0000000440)=@newtfilter={0x7c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x1, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x48, 0x2, [@TCA_MATCHALL_ACT={0x44, 0x2, [@m_vlan={0x40, 0x1, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x5, 0x3, 0x57f}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x779}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) 4.865421153s ago: executing program 0 (id=904): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r1, &(0x7f0000000140), &(0x7f0000000980)=0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) fsopen(&(0x7f0000000200)='adfs\x00', 0x1) close(r2) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000400)) getpid() socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x20000080) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f00000001c0), 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_raw(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xd209f6d83486bb56) r4 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) mq_timedsend(r4, 0x0, 0x0, 0x8000000000000001, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_emit_ethernet(0x68, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b3c359", 0x32, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "f84bd7", 0x0, 0x2c, 0x0, @private1, @private2, [], 'b*'}}}}}}}, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x8f}]}) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0xe7af3cf0599a7105, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x8dc3, 0x900) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r6, 0xc0045520, &(0x7f0000000080)=0xffffbf7f) 4.801507448s ago: executing program 4 (id=905): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x355737d6d65d287a, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000000e00)={0xe62b, 0x80000000000000, 0x309, 0x0, 0x8004, 0x9f69, 0x0, 0x200000000002004, 0x2, 0xb2f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x80000001, 0x30, 0x80000001, 0x0, 0x0, 0x6, 0x5, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) close(0x3) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r4}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f0000000180)={0xa0, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}}) r5 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r6 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r7, 0xc0405610, &(0x7f0000000040)={0x2}) 4.663081693s ago: executing program 1 (id=906): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) setrlimit(0x40000000000008, &(0x7f0000000000)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000240)={0x28, 0x2, r1, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x4, r1, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x9}) 4.273837593s ago: executing program 3 (id=907): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x42002) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r1 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) r2 = socket(0xa, 0x80805, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000002300)={'sit0\x00', &(0x7f00000021c0)={'syztnl2\x00', 0x0, 0x80, 0x7, 0xffffffff, 0x2, {{0x6, 0x4, 0x0, 0x3d, 0x18, 0x68, 0x0, 0x0, 0x29, 0x0, @local, @loopback, {[@timestamp_prespec={0x44, 0x4, 0xbd, 0x3, 0xe}]}}}}}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000000)={r5, 0x0, 0x80, 0x1}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000000c0)={r5, 0x7}, 0x8) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x3, 0xa, 0xfc, 0x4}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000007c0)={0x2, @win={{0x5, 0x5, 0x8, 0x3}, 0x6, 0x17d, 0x0, 0x80000000, 0x0, 0x2}}) r6 = socket$tipc(0x1e, 0x5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="01002cbd7000fddbdf251000000008000300e48132f8ef1554c79353f451ab8338e86e03f281658978e73641dde9594f45f53ec7c99e00034de2e5c1b071abf0c848e8cb5df32a60ffe970a5c061b4bd074ba6dadeae4da6", @ANYRES32=r9, @ANYBLOB], 0x1c}}, 0x4044050) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r11, 0x0, 0x0, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x6, 0x0, 0xb49, 0x9, 0x9, 0x2, 0x3}, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r12 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0xc8002, 0x40) write(r13, &(0x7f0000004200)='t', 0x1) sendfile(r13, r12, 0x0, 0x7fffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0xa, &(0x7f00000002c0)=[{0x4, 0x1, 0xb, 0x100}, {0xfffc, 0xd2, 0x4, 0x40}, {0x6, 0x8, 0x8, 0x3}, {0x2, 0x4, 0x7, 0x4}, {0x1ff, 0xd, 0xcf, 0x2}, {0x8, 0x1, 0xd, 0xc8ae9880}, {0xb94, 0x1, 0x7, 0x7}, {0x7bdb, 0xe, 0x9, 0x124}, {0x4, 0x76, 0x4, 0x9}, {0x5, 0x4, 0x9c, 0x3}]}) 3.703558229s ago: executing program 5 (id=908): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x8a800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x134e8c}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x5, r1}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1}) 3.265698315s ago: executing program 1 (id=909): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 2.687116184s ago: executing program 3 (id=910): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000}) 2.012714272s ago: executing program 5 (id=911): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r3, &(0x7f00000001c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)="f4000900062b8825fe80000000000000dc8f850f23846632189c54ebcc00007a000000ad6e911b51", 0x28}], 0x1}, 0x0) 929.998519ms ago: executing program 5 (id=912): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty, 0x30}, 0x1c) listen(r0, 0x6) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000080)=0xffffffff, 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 427.727007ms ago: executing program 3 (id=913): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x82002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0xeeee0000, 0x1000b, 0xfefffffb, 0xfffffffc, 0x0, [{0xc, 0xfc, 0x8, '\x00', 0xb4}, {0x83, 0x9, 0x8, '\x00', 0x4b}, {0xf9, 0xe, 0x47, '\x00', 0x7f}, {0x0, 0x5, 0x8, '\x00', 0x8}, {0x28, 0xd, 0x8}, {0x2, 0x5, 0x6, '\x00', 0xfc}, {0x6, 0xe, 0x4b, '\x00', 0x6}, {0x5, 0x90, 0x6, '\x00', 0xe9}, {0xd, 0x7, 0xa7, '\x00', 0x1}, {0x9, 0xf, 0x14, '\x00', 0x5}, {0x1, 0x0, 0xb, '\x00', 0x8}, {0x0, 0x3, 0x2, '\x00', 0x7}, {0x1, 0xca, 0x80, '\x00', 0xa}, {0x7, 0xf1, 0x2, '\x00', 0x4}, {0x8, 0x4, 0x0, '\x00', 0xfd}, {0x6, 0x0, 0x4, '\x00', 0x9}, {0x7, 0x2, 0x4, '\x00', 0x10}, {0x9, 0x6, 0x4, '\x00', 0xff}, {0x11, 0x41, 0xf, '\x00', 0xfe}, {0x9, 0x3, 0x54, '\x00', 0x4}, {0x1, 0x3, 0x6, '\x00', 0x4}, {0x9, 0x40, 0x7}, {0xa, 0x0, 0x7, '\x00', 0x7}, {0x5, 0x5, 0xfa, '\x00', 0x40}]}}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000040)) 0s ago: executing program 5 (id=914): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x42002) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) r1 = socket(0xa, 0x80805, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000002300)={'sit0\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={r4, 0x0, 0x80, 0x1}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000000c0)={r4, 0x7}, 0x8) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) socket$tipc(0x1e, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002cbd7000fddbdf251000000008000300e48132f8ef1554c79353f451ab8338e86e03f281658978e73641dde9594f45f53ec7c99e00034de2e5c1b071abf0c848e8cb5df32a60ffe970a5c061b4bd074ba6dadeae4da6", @ANYRES32, @ANYBLOB], 0x1c}}, 0x4044050) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x6, 0x0, 0xb49, 0x9, 0x9, 0x2, 0x3}, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) write(0xffffffffffffffff, &(0x7f0000004200)='t', 0x1) sendfile(0xffffffffffffffff, r8, 0x0, 0x7fffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0xa, &(0x7f00000002c0)=[{0x4, 0x1, 0xb, 0x100}, {0xfffc, 0xd2, 0x4, 0x40}, {0x6, 0x8, 0x8, 0x3}, {0x2, 0x4, 0x7, 0x4}, {0x1ff, 0xd, 0xcf, 0x2}, {0x8, 0x1, 0xd, 0xc8ae9880}, {0xb94, 0x1, 0x7, 0x7}, {0x7bdb, 0xe, 0x9, 0x124}, {0x4, 0x76, 0x4, 0x9}, {0x5, 0x4, 0x9c, 0x3}]}) kernel console output (not intermixed with test programs): 408][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.120436][ T7461] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.179472][ T7461] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.233292][ T7461] bridge_slave_1: entered allmulticast mode [ 384.337358][ T7461] bridge_slave_1: entered promiscuous mode [ 384.431544][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.042022][ T7521] JFS: charset not found [ 385.072243][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.081383][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.660112][ T7461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.032297][ T7461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.125132][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.826170][ T7461] team0: Port device team_slave_0 added [ 387.133407][ T7461] team0: Port device team_slave_1 added [ 387.237048][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.473360][ T6935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.862326][ T7135] bridge_slave_1: left allmulticast mode [ 387.927144][ T7135] bridge_slave_1: left promiscuous mode [ 387.990696][ T7135] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.302995][ T7135] bridge_slave_0: left allmulticast mode [ 388.342527][ T7135] bridge_slave_0: left promiscuous mode [ 388.395183][ T7135] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.846143][ T29] usb 4-1: USB disconnect, device number 14 [ 388.973447][ T29] usblp0: removed [ 390.887517][ T7555] netlink: 'syz.4.332': attribute type 4 has an invalid length. [ 390.980912][ T24] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 391.053030][ T7558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.106339][ T7558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.220845][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 391.262261][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 391.313046][ T24] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 391.366860][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 391.389316][ T24] usb 4-1: SerialNumber: syz [ 391.727027][ T7554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.779503][ T7554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.835431][ T7135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.974932][ T7135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.064393][ T7135] bond0 (unregistering): Released all slaves [ 392.239507][ T7135] bond1 (unregistering): Released all slaves [ 392.561853][ T7461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.646624][ T7461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.866927][ T7461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.144942][ T7461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.217987][ T7461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.396979][ T7461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.264162][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 394.283212][ T24] usb 4-1: invalid UAC_HEADER (v1) [ 394.461837][ T7578] JFS: charset not found [ 394.616105][ T7461] hsr_slave_0: entered promiscuous mode [ 394.681573][ T7461] hsr_slave_1: entered promiscuous mode [ 394.752694][ T7461] debugfs: 'hsr0' already exists in 'hsr' [ 394.795287][ T7461] Cannot create hsr debugfs directory [ 395.300062][ T24] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 395.421762][ T24] usb 4-1: USB disconnect, device number 15 [ 395.788155][ T7471] udevd[7471]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 397.144208][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 397.144268][ T30] audit: type=1326 audit(1785233338.459:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7589 comm="syz.3.340" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196819de99 code=0x7ffc0000 [ 397.237467][ T7587] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 397.496636][ T30] audit: type=1326 audit(1785233338.509:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7589 comm="syz.3.340" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196819de99 code=0x7ffc0000 [ 397.789550][ T30] audit: type=1326 audit(1785233338.539:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7589 comm="syz.3.340" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f196819de99 code=0x7ffc0000 [ 398.466699][ T7135] hsr_slave_0: left promiscuous mode [ 398.538818][ T7135] hsr_slave_1: left promiscuous mode [ 398.625229][ T7135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.668522][ T7135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.776336][ T7135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.850970][ T7135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.407922][ T7135] veth1_macvtap: left promiscuous mode [ 399.476897][ T7135] veth0_macvtap: left promiscuous mode [ 399.564463][ T7135] veth1_vlan: left promiscuous mode [ 399.659746][ T7135] veth0_vlan: left promiscuous mode [ 402.230897][ T5718] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 402.638063][ T5718] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 402.711254][ T5718] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 402.780429][ T5718] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 403.117114][ T5718] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 403.172157][ T5718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 403.256736][ T5718] usb 4-1: Product: syz [ 403.291406][ T5718] usb 4-1: Manufacturer: syz [ 403.314828][ T5718] usb 4-1: SerialNumber: syz [ 404.461939][ T7614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.586667][ T7614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.983421][ T7614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.084537][ T7614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.184477][ T7135] team0 (unregistering): Port device team_slave_1 removed [ 406.368439][ T7135] team0 (unregistering): Port device team_slave_0 removed [ 408.545444][ T5718] usb 4-1: can't set config #1, error -110 [ 408.929237][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 410.170002][ T5716] usb 4-1: USB disconnect, device number 16 [ 411.587359][ T7648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.636871][ T7135] IPVS: stop unused estimator thread 0... [ 411.665532][ T7648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.717270][ T7461] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 412.904048][ T7461] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 413.025821][ T7461] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 413.186624][ T7461] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 413.212043][ T7461] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 413.344372][ T7461] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 413.446540][ T7461] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 413.575190][ T7461] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 413.804735][ T7661] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 414.653005][ T6935] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 414.935371][ T6935] usb 5-1: Using ep0 maxpacket: 16 [ 415.040487][ T6935] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 415.107542][ T6935] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 415.196182][ T6935] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 415.248931][ T6935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.362346][ T6935] usb 5-1: config 0 descriptor?? [ 415.475988][ T6935] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 415.662705][ T7461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.949903][ T7678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.016957][ T7678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.075663][ T7461] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.383499][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.391847][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.666551][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.674757][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.184109][ T5687] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 417.219857][ T30] audit: type=1326 audit(1785233358.529:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7699 comm="syz.1.362" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a439de99 code=0x7ffc0000 [ 417.403306][ T30] audit: type=1326 audit(1785233358.629:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7699 comm="syz.1.362" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a439de99 code=0x7ffc0000 [ 417.479454][ T5716] usb 5-1: USB disconnect, device number 14 [ 417.496858][ T5687] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 417.574874][ T5687] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 417.647886][ T30] audit: type=1326 audit(1785233358.659:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7699 comm="syz.1.362" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a439de99 code=0x7ffc0000 [ 417.686093][ T5687] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 417.903065][ T5687] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 417.955909][ T30] audit: type=1326 audit(1785233358.679:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7699 comm="syz.1.362" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a439de99 code=0x7ffc0000 [ 418.003329][ T5687] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 418.065662][ T5687] usb 4-1: Product: syz [ 418.089030][ T5687] usb 4-1: Manufacturer: syz [ 418.160195][ T5687] usb 4-1: SerialNumber: syz [ 418.208991][ T30] audit: type=1326 audit(1785233358.699:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7699 comm="syz.1.362" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7ff3a439de99 code=0x7ffc0000 [ 418.570794][ T30] audit: type=1326 audit(1785233358.699:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7699 comm="syz.1.362" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a439de99 code=0x7ffc0000 [ 418.634892][ T5687] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 418.753639][ T7461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.770974][ T30] audit: type=1326 audit(1785233358.699:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7699 comm="syz.1.362" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a439de99 code=0x7ffc0000 [ 418.953239][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 419.026119][ T30] audit: type=1326 audit(1785233358.709:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7699 comm="syz.1.362" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff3a439de99 code=0x7ffc0000 [ 419.259468][ T30] audit: type=1326 audit(1785233358.709:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7699 comm="syz.1.362" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff3a439de99 code=0x7ffc0000 [ 419.936675][ T7703] loop5: detected capacity change from 0 to 7 [ 419.984965][ T7461] veth0_vlan: entered promiscuous mode [ 419.997782][ T7704] Buffer I/O error on dev loop5, logical block 0, async page read [ 420.075322][ T7703] Buffer I/O error on dev loop5, logical block 0, async page read [ 420.137676][ T7703] Buffer I/O error on dev loop5, logical block 0, async page read [ 420.229004][ T7703] Buffer I/O error on dev loop5, logical block 0, async page read [ 420.293686][ T7703] Buffer I/O error on dev loop5, logical block 0, async page read [ 420.360966][ T7703] Buffer I/O error on dev loop5, logical block 0, async page read [ 420.429549][ T7461] veth1_vlan: entered promiscuous mode [ 420.445937][ T7703] Buffer I/O error on dev loop5, logical block 0, async page read [ 420.560949][ T7703] Buffer I/O error on dev loop5, logical block 0, async page read [ 420.643668][ T7703] ldm_validate_partition_table(): Disk read failed. [ 420.716345][ T7703] Buffer I/O error on dev loop5, logical block 0, async page read [ 420.771920][ T7703] Buffer I/O error on dev loop5, logical block 0, async page read [ 420.837062][ T7703] Dev loop5: unable to read RDB block 0 [ 420.877503][ T7703] loop5: unable to read partition table [ 420.921247][ T7703] loop5: partition table beyond EOD, truncated [ 420.959358][ T7703] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾Sêj̳–¢P=Ãë?ã}X‹ºÐ œëÜ5õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 421.102943][ T7461] veth0_macvtap: entered promiscuous mode [ 421.249625][ T7461] veth1_macvtap: entered promiscuous mode [ 421.757845][ T7461] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.059317][ T7461] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.408437][ T1107] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.494022][ T1107] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.568441][ T1107] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.685633][ T1107] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.892891][ T7725] netlink: 48 bytes leftover after parsing attributes in process `syz.0.368'. [ 424.332776][ T7140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.455845][ T7140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.128713][ T7140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.214379][ T7140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.589571][ T10] usb 4-1: USB disconnect, device number 17 [ 427.630963][ T7744] JFS: charset not found [ 427.755027][ T10] usblp0: removed [ 429.031180][ T192] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 429.240736][ T192] usb 4-1: Using ep0 maxpacket: 16 [ 429.340259][ T192] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 429.447177][ T192] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 429.549680][ T192] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 429.584118][ T5288] 8021q: adding VLAN 0 to HW filter on device eth4 [ 429.608670][ T192] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.695580][ T192] usb 4-1: config 0 descriptor?? [ 429.801021][ T192] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 430.279380][ T7753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.463594][ T7753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.862552][ T5687] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 432.279367][ T24] usb 4-1: USB disconnect, device number 18 [ 432.400221][ T5687] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 432.473165][ T5687] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.543559][ T5687] usb 1-1: Product: syz [ 432.580986][ T5687] usb 1-1: Manufacturer: syz [ 432.612341][ T5687] usb 1-1: SerialNumber: syz [ 432.777454][ T5687] usb 1-1: config 0 descriptor?? [ 433.212670][ T24] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 433.454631][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 433.527995][ T24] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 433.596258][ T24] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 433.664195][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.714001][ T24] usb 4-1: Product: syz [ 433.762792][ T24] usb 4-1: Manufacturer: syz [ 433.826352][ T24] usb 4-1: SerialNumber: syz [ 433.918441][ T24] r8152-cfgselector 4-1: Unknown version 0x0000 [ 433.982089][ T24] r8152-cfgselector 4-1: config 0 descriptor?? [ 434.597843][ T7790] mmap: syz.1.381 (7790): VmData 37457920 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 435.007517][ T809] r8152-cfgselector 4-1: USB disconnect, device number 19 [ 435.939995][ T7802] JFS: charset not found [ 440.129049][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.139772][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.969445][ T10] usb 1-1: USB disconnect, device number 21 [ 445.045780][ T809] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 445.312279][ T809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.421476][ T809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.502176][ T809] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 445.584142][ T809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.695101][ T809] usb 5-1: config 0 descriptor?? [ 449.789022][ T7897] JFS: charset not found [ 450.028853][ T7891] loop5: detected capacity change from 0 to 7 [ 450.068342][ T7899] JFS: charset not found [ 450.088494][ T7891] buffer_io_error: 15 callbacks suppressed [ 450.088557][ T7891] Buffer I/O error on dev loop5, logical block 0, async page read [ 450.215142][ T7891] Buffer I/O error on dev loop5, logical block 0, async page read [ 450.321810][ T7891] Buffer I/O error on dev loop5, logical block 0, async page read [ 450.422875][ T7891] Buffer I/O error on dev loop5, logical block 0, async page read [ 450.474087][ T7891] Buffer I/O error on dev loop5, logical block 0, async page read [ 450.553097][ T7891] Buffer I/O error on dev loop5, logical block 0, async page read [ 450.653134][ T7891] Buffer I/O error on dev loop5, logical block 0, async page read [ 450.728341][ T7891] ldm_validate_partition_table(): Disk read failed. [ 450.778182][ T7891] Buffer I/O error on dev loop5, logical block 0, async page read [ 450.830250][ T7891] Buffer I/O error on dev loop5, logical block 0, async page read [ 450.886684][ T7891] Buffer I/O error on dev loop5, logical block 0, async page read [ 450.947734][ T809] usbhid 5-1:0.0: can't add hid device: -32 [ 450.995415][ T7891] Dev loop5: unable to read RDB block 0 [ 451.031591][ T7891] loop5: unable to read partition table [ 451.047617][ T7891] loop5: partition table beyond EOD, truncated [ 451.085200][ T809] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 451.132350][ T7891] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾Sêj̳–¢P=Ãë?ã}X‹ºÐ œëÜ5õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 457.235733][ T7949] netlink: 48 bytes leftover after parsing attributes in process `syz.5.413'. [ 462.250995][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 462.582291][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 462.655078][ T24] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 462.748231][ T24] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 462.848253][ T7974] loop5: detected capacity change from 0 to 7 [ 462.933231][ T7974] buffer_io_error: 14 callbacks suppressed [ 462.933274][ T7974] Buffer I/O error on dev loop5, logical block 0, async page read [ 462.953566][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 463.027293][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 463.037677][ T7976] Buffer I/O error on dev loop5, logical block 0, async page read [ 463.090378][ T7974] Buffer I/O error on dev loop5, logical block 0, async page read [ 463.148608][ T24] usb 6-1: Product: syz [ 463.166663][ T7974] Buffer I/O error on dev loop5, logical block 0, async page read [ 463.221163][ T24] usb 6-1: Manufacturer: syz [ 463.253342][ T24] usb 6-1: SerialNumber: syz [ 463.275157][ T7974] Buffer I/O error on dev loop5, logical block 0, async page read [ 463.374719][ T7974] Buffer I/O error on dev loop5, logical block 0, async page read [ 463.474302][ T7974] Buffer I/O error on dev loop5, logical block 0, async page read [ 463.559169][ T7974] Buffer I/O error on dev loop5, logical block 0, async page read [ 463.631337][ T7974] ldm_validate_partition_table(): Disk read failed. [ 463.691358][ T7974] Buffer I/O error on dev loop5, logical block 0, async page read [ 463.751721][ T24] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 463.777772][ T7974] Buffer I/O error on dev loop5, logical block 0, async page read [ 463.847729][ T7974] Dev loop5: unable to read RDB block 0 [ 463.919334][ T7974] loop5: unable to read partition table [ 463.976349][ T7974] loop5: partition table beyond EOD, truncated [ 464.040881][ T7974] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾Sêj̳–¢P=Ãë?ã}X‹ºÐ œëÜ5õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 468.505447][ T8018] netlink: 48 bytes leftover after parsing attributes in process `syz.0.426'. [ 469.181117][ T8019] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 470.968533][ T8032] JFS: charset not found [ 471.806669][ T5687] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 472.045000][ T5687] usb 1-1: Using ep0 maxpacket: 16 [ 472.109288][ T5687] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 472.215227][ T5687] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 472.300819][ T5687] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.373013][ T5687] usb 1-1: Product: syz [ 472.419779][ T5687] usb 1-1: Manufacturer: syz [ 472.460766][ T5687] usb 1-1: SerialNumber: syz [ 472.581618][ T5687] r8152-cfgselector 1-1: Unknown version 0x0000 [ 472.662990][ T5687] r8152-cfgselector 1-1: config 0 descriptor?? [ 473.083772][ T5687] r8152-cfgselector 1-1: Unknown version 0x0000 [ 473.150324][ T5687] r8152-cfgselector 1-1: No union descriptors [ 473.174473][ T10] usb 6-1: USB disconnect, device number 2 [ 473.412352][ T10] usblp0: removed [ 473.638847][ T5718] r8152-cfgselector 1-1: USB disconnect, device number 22 [ 477.105939][ T8056] JFS: charset not found [ 481.904270][ T8085] netlink: 48 bytes leftover after parsing attributes in process `syz.4.440'. [ 483.438112][ T8097] netlink: 48 bytes leftover after parsing attributes in process `syz.3.443'. [ 484.434126][ T8105] netlink: 48 bytes leftover after parsing attributes in process `syz.0.444'. [ 484.551316][ T8106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.629187][ T8106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.989934][ T8115] vlan2: entered promiscuous mode [ 486.026379][ T8115] batadv0: entered promiscuous mode [ 486.701093][ T5687] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 486.737596][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 486.966219][ T5687] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.996725][ T10] usb 4-1: device descriptor read/64, error -71 [ 487.042938][ T5687] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.115657][ T5687] usb 1-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 487.201306][ T5687] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.304851][ T5687] usb 1-1: config 0 descriptor?? [ 487.326379][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 487.576279][ T10] usb 4-1: device descriptor read/64, error -71 [ 487.773618][ T809] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 487.790396][ T10] usb usb4-port1: attempt power cycle [ 487.985960][ T809] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 488.057138][ T809] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.123815][ T809] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.213120][ T809] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 488.240702][ T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 488.253318][ T5687] uclogic 0003:5543:0042.0002: hidraw0: USB HID v0.00 Device [HID 5543:0042] on usb-dummy_hcd.0-1/input0 [ 488.334462][ T10] usb 4-1: device descriptor read/8, error -71 [ 488.385779][ T5687] usb 1-1: USB disconnect, device number 23 [ 488.414812][ T809] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 488.490726][ T809] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.614146][ T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 488.755405][ T809] usb 6-1: config 0 descriptor?? [ 488.891437][ T8131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.994594][ T8131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.473217][ T809] holtek_kbd 0003:04D9:A055.0003: bogus close delimiter [ 489.556573][ T809] holtek_kbd 0003:04D9:A055.0003: item 0 4 2 10 parsing failed [ 489.597966][ T809] holtek_kbd 0003:04D9:A055.0003: probe with driver holtek_kbd failed with error -22 [ 489.709973][ T8129] fido_id[8129]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 489.767356][ T809] usb 6-1: USB disconnect, device number 3 [ 489.809034][ T8133] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 490.357461][ T5718] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 490.555021][ T8140] netlink: 48 bytes leftover after parsing attributes in process `syz.4.455'. [ 490.631468][ T5718] usb 1-1: Using ep0 maxpacket: 16 [ 490.689854][ T5718] usb 1-1: unable to get BOS descriptor or descriptor too short [ 490.792105][ T5718] usb 1-1: config 7 has an invalid interface number: 106 but max is 3 [ 490.907769][ T5718] usb 1-1: config 7 has an invalid interface number: 182 but max is 3 [ 491.014175][ T5718] usb 1-1: config 7 has an invalid interface number: 148 but max is 3 [ 491.109076][ T5718] usb 1-1: config 7 has an invalid interface number: 227 but max is 3 [ 491.182386][ T5718] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 491.228023][ T5718] usb 1-1: config 7 has no interface number 0 [ 491.260861][ T5718] usb 1-1: config 7 has no interface number 1 [ 491.315534][ T5718] usb 1-1: config 7 has no interface number 2 [ 491.363698][ T5718] usb 1-1: config 7 has no interface number 3 [ 491.421038][ T5718] usb 1-1: config 7 interface 106 altsetting 89 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 491.545097][ T8148] netdevsim netdevsim5 : renamed from netdevsim0 (while UP) [ 491.558177][ T5718] usb 1-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 491.640880][ T5718] usb 1-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 491.660093][ T5718] usb 1-1: config 7 interface 106 altsetting 89 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 491.694392][ T5718] usb 1-1: config 7 interface 106 altsetting 89 has 6 endpoint descriptors, different from the interface descriptor's value: 13 [ 491.810823][ T5718] usb 1-1: config 7 interface 182 altsetting 248 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 491.849554][ T8150] netlink: 48 bytes leftover after parsing attributes in process `syz.5.457'. [ 491.929183][ T5718] usb 1-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 492.054325][ T5718] usb 1-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 492.155062][ T5718] usb 1-1: config 7 interface 182 altsetting 248 has an invalid descriptor for endpoint zero, skipping [ 492.254740][ T5718] usb 1-1: config 7 interface 148 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 492.336015][ T5718] usb 1-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 492.457120][ T5718] usb 1-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 492.567560][ T5718] usb 1-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 492.703024][ T5718] usb 1-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 492.931295][ T5718] usb 1-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 493.024123][ T5718] usb 1-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x2, skipping [ 493.108601][ T5718] usb 1-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 493.280676][ T5718] usb 1-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 493.427838][ T5718] usb 1-1: config 7 interface 148 altsetting 5 has an endpoint descriptor with address 0x52, changing to 0x2 [ 493.520083][ T5718] usb 1-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x2, skipping [ 493.639662][ T5718] usb 1-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 493.758408][ T5718] usb 1-1: config 7 interface 148 altsetting 5 has 13 endpoint descriptors, different from the interface descriptor's value: 12 [ 493.792266][ T10] usb 4-1: device descriptor read/8, error -110 [ 493.884383][ T5718] usb 1-1: config 7 interface 227 altsetting 187 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 493.955948][ T10] usb usb4-port1: unable to enumerate USB device [ 493.995265][ T5718] usb 1-1: config 7 interface 106 has no altsetting 0 [ 494.064878][ T5718] usb 1-1: config 7 interface 182 has no altsetting 0 [ 494.135751][ T5718] usb 1-1: config 7 interface 148 has no altsetting 0 [ 494.167202][ T8164] netlink: 48 bytes leftover after parsing attributes in process `syz.0.460'. [ 494.205682][ T5718] usb 1-1: config 7 interface 227 has no altsetting 0 [ 494.275374][ T5718] usb 1-1: string descriptor 0 read error: -71 [ 494.333307][ T5718] usb 1-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=c7.5a [ 494.445584][ T5718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.613185][ T8157] JFS: charset not found [ 494.648255][ T5718] usb 1-1: can't set config #7, error -71 [ 494.724900][ T5718] usb 1-1: USB disconnect, device number 24 [ 496.419182][ T8180] usb usb8: usbfs: process 8180 (syz.4.466) did not claim interface 0 before use [ 497.002833][ T5687] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 497.219439][ T5687] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 497.261225][ T5687] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 4 [ 497.318927][ T5687] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 497.424414][ T5687] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 497.484541][ T5687] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 497.559877][ T5687] usb 1-1: Product: syz [ 497.586448][ T5687] usb 1-1: Manufacturer: syz [ 497.616273][ T5687] usb 1-1: SerialNumber: syz [ 497.697215][ T8194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.709226][ T5687] usb 1-1: config 0 descriptor?? [ 497.769240][ T5687] usb 1-1: no audio or video endpoints found [ 497.777825][ T8194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.128757][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 498.154146][ T5687] usb 1-1: USB disconnect, device number 25 [ 498.338143][ T24] usb 6-1: config 0 has an invalid interface number: 120 but max is 0 [ 498.362952][ T24] usb 6-1: config 0 has no interface number 0 [ 498.386996][ T24] usb 6-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 498.443137][ T24] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 498.487077][ T24] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 498.520175][ T5640] Bluetooth: hci5: command 0x0406 tx timeout [ 498.566670][ T24] usb 6-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 498.607342][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.628410][ T24] usb 6-1: config 0 descriptor?? [ 498.703542][ T24] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.120/input/input38 [ 501.267430][ T5687] usb 6-1: USB disconnect, device number 4 [ 501.583219][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.604452][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.741103][ T10] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 501.951056][ T10] usb 4-1: device descriptor read/64, error -71 [ 502.254695][ T8219] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 502.288052][ T10] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 502.500912][ T10] usb 4-1: device descriptor read/64, error -71 [ 502.522148][ T8224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.551850][ T8224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.661319][ T10] usb usb4-port1: attempt power cycle [ 502.684098][ T24] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 502.903099][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 502.999955][ T24] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 503.092821][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.111341][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 503.204205][ T24] usb 1-1: config 0 descriptor?? [ 503.255125][ T10] usb 4-1: device descriptor read/8, error -71 [ 503.572134][ T10] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 503.971362][ T24] ath6kl: Failed to read usb control message: -71 [ 504.048985][ T24] ath6kl: Unable to read the bmi data from the device: -71 [ 504.163028][ T24] ath6kl: unable to read target info byte count: -71 [ 504.283390][ T24] ath6kl: Failed to init ath6kl core: -71 [ 504.339158][ T24] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 504.456237][ T24] usb 1-1: USB disconnect, device number 26 [ 508.750917][ T10] usb 4-1: device descriptor read/8, error -110 [ 508.901422][ T10] usb usb4-port1: unable to enumerate USB device [ 511.969543][ T8270] JFS: charset not found [ 513.096106][ T8278] JFS: charset not found [ 519.561137][ T8307] usb usb8: usbfs: process 8307 (syz.1.500) did not claim interface 0 before use [ 522.017429][ T8316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.866032][ T8316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.682924][ T8320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.871519][ T8320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.583067][ T5718] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 525.830766][ T5718] usb 6-1: Using ep0 maxpacket: 32 [ 525.885720][ T5718] usb 6-1: unable to get BOS descriptor or descriptor too short [ 525.924972][ T5718] usb 6-1: config 3 has an invalid interface number: 223 but max is 1 [ 525.973705][ T5718] usb 6-1: config 3 has an invalid interface number: 25 but max is 1 [ 526.044877][ T5718] usb 6-1: config 3 has an invalid interface number: 223 but max is 1 [ 526.115890][ T5718] usb 6-1: config 3 has no interface number 0 [ 526.174251][ T5718] usb 6-1: config 3 has no interface number 1 [ 526.228477][ T5718] usb 6-1: config 3 interface 25 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 526.333085][ T5718] usb 6-1: too many endpoints for config 3 interface 223 altsetting 155: 82, using maximum allowed: 30 [ 526.449506][ T5718] usb 6-1: config 3 interface 223 altsetting 155 has 0 endpoint descriptors, different from the interface descriptor's value: 82 [ 526.553686][ T5718] usb 6-1: config 3 interface 223 has no altsetting 1 [ 526.621541][ T5718] usb 6-1: config 3 interface 25 has no altsetting 0 [ 526.678375][ T5718] usb 6-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=2a.c0 [ 526.738824][ T5718] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.830776][ T5718] usb 6-1: Product: syz [ 526.869305][ T5718] usb 6-1: Manufacturer: syz [ 526.890194][ T5718] usb 6-1: SerialNumber: syz [ 527.398962][ T8330] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 527.684308][ T5718] usb 6-1: USB disconnect, device number 5 [ 530.300266][ T8347] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 532.860230][ T8356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.966540][ T8356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.293965][ T192] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 533.580759][ T192] usb 6-1: Using ep0 maxpacket: 16 [ 534.208322][ T192] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 534.281920][ T192] usb 6-1: can't read configurations, error -61 [ 534.545309][ T192] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 534.819097][ T192] usb 6-1: Using ep0 maxpacket: 16 [ 536.810405][ T8363] JFS: charset not found [ 538.762224][ T5687] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 539.010681][ T5687] usb 4-1: Using ep0 maxpacket: 16 [ 539.050163][ T5687] usb 4-1: unable to get BOS descriptor or descriptor too short [ 539.111019][ T5687] usb 4-1: config 7 has an invalid interface number: 106 but max is 3 [ 539.180357][ T5687] usb 4-1: config 7 has an invalid interface number: 182 but max is 3 [ 539.240974][ T5687] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 539.267746][ T8373] JFS: charset not found [ 539.321010][ T5687] usb 4-1: config 7 has 2 interfaces, different from the descriptor's value: 4 [ 539.422555][ T5687] usb 4-1: config 7 has no interface number 0 [ 539.465054][ T5687] usb 4-1: config 7 has no interface number 1 [ 539.514070][ T5687] usb 4-1: config 7 interface 106 altsetting 89 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 539.600323][ T5687] usb 4-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 539.725598][ T5687] usb 4-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 539.819614][ T5687] usb 4-1: config 7 interface 106 altsetting 89 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 539.900031][ T5687] usb 4-1: config 7 interface 106 altsetting 89 has 6 endpoint descriptors, different from the interface descriptor's value: 13 [ 540.066723][ T5687] usb 4-1: config 7 interface 182 altsetting 248 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 540.180765][ T5687] usb 4-1: config 7 interface 182 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 540.226279][ T192] usb 6-1: unable to read config index 0 descriptor/start: -110 [ 540.259208][ T192] usb 6-1: can't read configurations, error -110 [ 540.269253][ T5687] usb 4-1: config 7 interface 106 has no altsetting 0 [ 540.302762][ T192] usb usb6-port1: attempt power cycle [ 540.328650][ T5687] usb 4-1: config 7 interface 182 has no altsetting 0 [ 540.382716][ T5687] usb 4-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=c7.5a [ 540.440985][ T5687] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.491177][ T5687] usb 4-1: Product: syz [ 540.498707][ T5687] usb 4-1: Manufacturer: syz [ 540.535584][ T5687] usb 4-1: SerialNumber: syz [ 540.690772][ T192] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 541.588287][ T5687] usb 4-1: USB disconnect, device number 28 [ 543.429881][ T192] usb 6-1: device descriptor read/8, error -71 [ 544.575190][ T8391] binder: 8383:8391 ioctl c0306201 0 returned -14 [ 546.542464][ T8401] JFS: charset not found [ 548.323422][ T29] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 548.549086][ T29] usb 1-1: Using ep0 maxpacket: 32 [ 548.591319][ T29] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 548.645354][ T29] usb 1-1: config 0 has no interface number 0 [ 548.697293][ T29] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 548.731795][ T8413] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 548.750208][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.778559][ T29] usb 1-1: Product: syz [ 548.805322][ T29] usb 1-1: Manufacturer: syz [ 548.850326][ T29] usb 1-1: SerialNumber: syz [ 548.941751][ T29] usb 1-1: config 0 descriptor?? [ 549.003548][ T29] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 549.114269][ T29] usb 1-1: selecting invalid altsetting 1 [ 549.196195][ T29] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 549.282508][ T5718] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 549.376334][ T29] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 549.458966][ T29] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 549.503240][ T5718] usb 6-1: Using ep0 maxpacket: 16 [ 549.555642][ T29] usb 1-1: media controller created [ 549.571530][ T5718] usb 6-1: unable to get BOS descriptor or descriptor too short [ 549.618594][ T5718] usb 6-1: config 7 has an invalid interface number: 106 but max is 3 [ 549.685644][ T5718] usb 6-1: config 7 has an invalid interface number: 182 but max is 3 [ 549.729106][ T5718] usb 6-1: config 7 has an invalid interface number: 148 but max is 3 [ 549.742998][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 549.753335][ T5718] usb 6-1: config 7 has an invalid interface number: 227 but max is 3 [ 549.768939][ T5718] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 549.818387][ T8391] syz.3.518 (8391): drop_caches: 2 [ 549.869234][ T5718] usb 6-1: config 7 has no interface number 0 [ 549.947693][ T5718] usb 6-1: config 7 has no interface number 1 [ 549.997467][ T5718] usb 6-1: config 7 has no interface number 2 [ 550.043113][ T5718] usb 6-1: config 7 has no interface number 3 [ 550.109734][ T5718] usb 6-1: config 7 interface 106 altsetting 89 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 550.168776][ T29] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 550.179621][ T5718] usb 6-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 550.203438][ T29] zl10353_read_register: readreg error (reg=127, ret==-71) [ 550.229601][ T5718] usb 6-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 550.258932][ T29] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 550.271315][ T5718] usb 6-1: config 7 interface 106 altsetting 89 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 550.309292][ T5718] usb 6-1: config 7 interface 106 altsetting 89 has 6 endpoint descriptors, different from the interface descriptor's value: 13 [ 550.402527][ T5718] usb 6-1: config 7 interface 182 altsetting 248 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 550.478981][ T5718] usb 6-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 550.520655][ T5718] usb 6-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 550.606143][ T5718] usb 6-1: config 7 interface 182 altsetting 248 has an invalid descriptor for endpoint zero, skipping [ 550.670248][ T29] usb 1-1: USB disconnect, device number 27 [ 550.687063][ T5718] usb 6-1: config 7 interface 148 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 550.787289][ T5718] usb 6-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 550.868295][ T5718] usb 6-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 550.974214][ T5718] usb 6-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 551.061212][ T5718] usb 6-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 551.139207][ T5718] usb 6-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 551.215584][ T5718] usb 6-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x2, skipping [ 551.227991][ T29] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 551.289543][ T5718] usb 6-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 551.365709][ T5718] usb 6-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 551.410828][ T29] usb 1-1: Using ep0 maxpacket: 16 [ 551.429342][ T5718] usb 6-1: config 7 interface 148 altsetting 5 has an endpoint descriptor with address 0x52, changing to 0x2 [ 551.490718][ T29] usb 1-1: unable to get BOS descriptor or descriptor too short [ 551.515585][ T5718] usb 6-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x2, skipping [ 551.547762][ T29] usb 1-1: config 7 has an invalid interface number: 106 but max is 3 [ 551.590836][ T5718] usb 6-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 551.627925][ T29] usb 1-1: config 7 has an invalid interface number: 182 but max is 3 [ 551.669108][ T29] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 551.685928][ T5718] usb 6-1: config 7 interface 148 altsetting 5 has 13 endpoint descriptors, different from the interface descriptor's value: 12 [ 551.770139][ T29] usb 1-1: config 7 has 2 interfaces, different from the descriptor's value: 4 [ 551.805427][ T5718] usb 6-1: config 7 interface 227 altsetting 187 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 551.849633][ T29] usb 1-1: config 7 has no interface number 0 [ 551.916553][ T29] usb 1-1: config 7 has no interface number 1 [ 551.946665][ T5718] usb 6-1: config 7 interface 106 has no altsetting 0 [ 551.976353][ T29] usb 1-1: config 7 interface 106 altsetting 89 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 552.025073][ T5718] usb 6-1: config 7 interface 182 has no altsetting 0 [ 552.061357][ T29] usb 1-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 552.087600][ T5718] usb 6-1: config 7 interface 148 has no altsetting 0 [ 552.134662][ T5718] usb 6-1: config 7 interface 227 has no altsetting 0 [ 552.178962][ T29] usb 1-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 552.217073][ T5718] usb 6-1: string descriptor 0 read error: -71 [ 552.266360][ T5718] usb 6-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=c7.5a [ 552.289161][ T29] usb 1-1: config 7 interface 106 altsetting 89 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 552.361386][ T5718] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.403722][ T29] usb 1-1: config 7 interface 106 altsetting 89 has 6 endpoint descriptors, different from the interface descriptor's value: 13 [ 552.489552][ T5718] usb 6-1: can't set config #7, error -71 [ 552.540013][ T29] usb 1-1: config 7 interface 182 altsetting 248 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 552.590215][ T5718] usb 6-1: USB disconnect, device number 10 [ 552.664658][ T29] usb 1-1: config 7 interface 182 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 552.744843][ T29] usb 1-1: config 7 interface 106 has no altsetting 0 [ 552.841813][ T8431] netlink: 16 bytes leftover after parsing attributes in process `syz.4.532'. [ 552.862288][ T29] usb 1-1: config 7 interface 182 has no altsetting 0 [ 552.918036][ T29] usb 1-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=c7.5a [ 552.948217][ T8431] netlink: 29 bytes leftover after parsing attributes in process `syz.4.532'. [ 552.964957][ T8431] tipc: Invalid UDP bearer configuration [ 552.965156][ T8431] tipc: Enabling of bearer rejected, failed to enable media [ 553.001723][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.059207][ T29] usb 1-1: Product: syz [ 553.085748][ T29] usb 1-1: Manufacturer: syz [ 553.121327][ T29] usb 1-1: SerialNumber: syz [ 554.295573][ T29] usb 1-1: USB disconnect, device number 28 [ 554.813428][ T8443] JFS: charset not found [ 555.462647][ T8440] JFS: charset not found [ 555.532082][ T8448] netlink: 56 bytes leftover after parsing attributes in process `syz.3.536'. [ 556.651641][ T29] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 556.860758][ T29] usb 4-1: Using ep0 maxpacket: 32 [ 556.918869][ T29] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.965203][ T29] usb 4-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 556.982355][ T29] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 557.002981][ T8463] netlink: 'syz.0.541': attribute type 1 has an invalid length. [ 557.026815][ T29] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x8F has invalid wMaxPacketSize 0 [ 557.078118][ T29] usb 4-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 557.081071][ T8460] JFS: charset not found [ 557.191759][ T29] usb 4-1: config 0 interface 0 has no altsetting 0 [ 557.237014][ T8467] netlink: 48 bytes leftover after parsing attributes in process `syz.1.542'. [ 557.249893][ T29] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 557.298760][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.398729][ T29] usb 4-1: config 0 descriptor?? [ 558.093078][ T29] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0 [ 558.126828][ T29] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0 [ 558.195841][ T29] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0 [ 558.276844][ T29] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0 [ 558.357422][ T29] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0 [ 558.482563][ T29] hid-thrustmaster 0003:044F:B65D.0004: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 558.554523][ T29] hid-thrustmaster 0003:044F:B65D.0004: setup data couldn't be sent [ 558.633754][ C1] hid-thrustmaster 0003:044F:B65D.0004: URB to get model id failed with error -71 [ 558.791614][ T29] usb 4-1: USB disconnect, device number 29 [ 559.783857][ T8473] fido_id[8473]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 560.102211][ T5720] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 560.320742][ T5720] usb 4-1: Using ep0 maxpacket: 16 [ 560.387726][ T5720] usb 4-1: unable to get BOS descriptor or descriptor too short [ 560.466177][ T5720] usb 4-1: config 7 has an invalid interface number: 106 but max is 3 [ 560.549174][ T5720] usb 4-1: config 7 has an invalid interface number: 182 but max is 3 [ 560.615739][ T5720] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 560.696204][ T5720] usb 4-1: config 7 has 2 interfaces, different from the descriptor's value: 4 [ 560.767482][ T5720] usb 4-1: config 7 has no interface number 0 [ 560.811395][ T5720] usb 4-1: config 7 has no interface number 1 [ 560.848352][ T5720] usb 4-1: config 7 interface 106 altsetting 89 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 560.949447][ T5720] usb 4-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 561.068639][ T5720] usb 4-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 561.162938][ T5720] usb 4-1: config 7 interface 106 altsetting 89 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 561.314921][ T5720] usb 4-1: config 7 interface 106 altsetting 89 has 6 endpoint descriptors, different from the interface descriptor's value: 13 [ 561.480177][ T5720] usb 4-1: config 7 interface 182 altsetting 248 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 561.586379][ T5720] usb 4-1: config 7 interface 182 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 561.738692][ T5720] usb 4-1: config 7 interface 106 has no altsetting 0 [ 561.785448][ T5720] usb 4-1: config 7 interface 182 has no altsetting 0 [ 561.836501][ T5720] usb 4-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=c7.5a [ 561.928453][ T5720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.007428][ T5720] usb 4-1: Product: syz [ 562.055663][ T5720] usb 4-1: Manufacturer: syz [ 562.086857][ T5720] usb 4-1: SerialNumber: syz [ 563.001681][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.025330][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.228240][ T5720] usb 4-1: USB disconnect, device number 30 [ 564.279235][ T8496] JFS: charset not found [ 566.554454][ T8507] netlink: 'syz.4.552': attribute type 1 has an invalid length. [ 568.611687][ T8523] capability: warning: `syz.3.557' uses 32-bit capabilities (legacy support in use) [ 571.176457][ T8538] JFS: charset not found [ 571.290131][ T8540] JFS: charset not found [ 571.736444][ T8548] program syz.1.564 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 572.823351][ T8552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.892380][ T8552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.484548][ T8558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.568'. [ 586.744606][ T8616] JFS: charset not found [ 590.306262][ T8633] netlink: 48 bytes leftover after parsing attributes in process `syz.5.590'. [ 591.838972][ T8645] JFS: charset not found [ 596.726755][ T8681] JFS: charset not found [ 600.225639][ T8690] netlink: 48 bytes leftover after parsing attributes in process `syz.3.607'. [ 600.905825][ T8694] netlink: 56 bytes leftover after parsing attributes in process `syz.4.608'. [ 603.281150][ T8706] JFS: charset not found [ 605.289358][ T8722] bond0: entered promiscuous mode [ 605.300996][ T8722] bond_slave_0: entered promiscuous mode [ 605.308556][ T8722] bond_slave_1: entered promiscuous mode [ 605.358762][ T8722] batadv0: entered promiscuous mode [ 605.522512][ T8722] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 605.615347][ T8722] bond0: left promiscuous mode [ 605.639368][ T8722] bond_slave_0: left promiscuous mode [ 605.692480][ T8722] bond_slave_1: left promiscuous mode [ 605.786237][ T8722] batadv0: left promiscuous mode [ 607.039120][ T8730] JFS: charset not found [ 610.782164][ T5628] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 610.962474][ T5720] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 611.022782][ T5628] usb 4-1: Using ep0 maxpacket: 32 [ 611.059786][ T5628] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 611.120308][ T5628] usb 4-1: config 0 has no interface number 0 [ 611.155922][ T5628] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 611.182963][ T5628] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.237355][ T5628] usb 4-1: Product: syz [ 611.258597][ T5628] usb 4-1: Manufacturer: syz [ 611.294020][ T5628] usb 4-1: SerialNumber: syz [ 611.305526][ T5720] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 611.391375][ T5720] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 611.446944][ T5628] usb 4-1: config 0 descriptor?? [ 611.461984][ T5720] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 611.606182][ T5628] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 611.679412][ T5720] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 611.748514][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 611.828152][ T5720] usb 1-1: Product: syz [ 611.850704][ T8748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.872879][ T5720] usb 1-1: Manufacturer: syz [ 611.905873][ T5720] usb 1-1: SerialNumber: syz [ 611.973154][ T8748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.152499][ T5628] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 612.325447][ T5628] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 612.446639][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 612.477498][ T5628] usb 4-1: USB disconnect, device number 31 [ 612.502733][ T5720] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 29 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 612.746177][ T5628] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 613.102305][ T5628] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 613.302194][ T5628] quatech2 4-1:0.51: device disconnected [ 614.192303][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 615.608645][ T8760] JFS: charset not found [ 616.998279][ T8764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.082499][ T8764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.561414][ T29] usb 1-1: USB disconnect, device number 29 [ 620.685054][ T29] usblp0: removed [ 622.343947][ T8787] JFS: charset not found [ 624.441465][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.451482][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.541888][ T8809] netlink: 48 bytes leftover after parsing attributes in process `syz.3.640'. [ 624.686304][ T8806] JFS: charset not found [ 624.714322][ T8813] netlink: 36 bytes leftover after parsing attributes in process `syz.4.641'. [ 625.798358][ T8817] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 633.720876][ T8847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.802621][ T8847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 634.826306][ T8851] JFS: charset not found [ 636.032603][ T8865] netlink: 48 bytes leftover after parsing attributes in process `syz.3.653'. [ 638.154909][ T8876] JFS: charset not found [ 639.041185][ T8887] ipvlan1: entered allmulticast mode [ 639.074685][ T8887] batadv_slave_1: entered allmulticast mode [ 639.209092][ T8887] batman_adv: batadv0: Adding interface: ipvlan1 [ 639.232822][ T8887] batman_adv: batadv0: The MTU of interface ipvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 639.461937][ T8887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.699551][ T8887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.889355][ T8887] batman_adv: batadv0: Interface activated: ipvlan1 [ 641.599861][ T8891] JFS: charset not found [ 644.313782][ T8906] JFS: charset not found [ 647.065659][ T8920] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 650.998784][ T8931] netlink: 48 bytes leftover after parsing attributes in process `syz.1.667'. [ 654.245533][ T8952] JFS: charset not found [ 654.443959][ T8963] netlink: 12 bytes leftover after parsing attributes in process `syz.0.676'. [ 654.763521][ T8967] JFS: charset not found [ 656.388859][ T8976] JFS: charset not found [ 662.849325][ T8990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.925457][ T8990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 666.529447][ T9018] JFS: charset not found [ 669.994872][ T9030] JFS: charset not found [ 672.333825][ T9041] JFS: charset not found [ 674.340041][ T9050] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 674.552120][ T9050] loop5: detected capacity change from 0 to 7 [ 674.673597][ T9050] Dev loop5: unable to read RDB block 7 [ 674.723468][ C0] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 674.735126][ C0] buffer_io_error: 15 callbacks suppressed [ 674.735162][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 674.781823][ T9050] loop5: unable to read partition table [ 674.819409][ T9050] loop5: partition table beyond EOD, truncated [ 674.862449][ T9050] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 675.048900][ T9058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 675.073976][ T9058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 676.046818][ T9062] support for the xor transformation has been removed. [ 676.679973][ T4993] Dev loop5: unable to read RDB block 7 [ 676.711914][ T4993] loop5: unable to read partition table [ 676.747243][ T4993] loop5: partition table beyond EOD, truncated [ 679.057617][ T9092] loop8: detected capacity change from 0 to 8 [ 679.227558][ T9092] Dev loop8: unable to read RDB block 8 [ 679.271434][ T9092] loop8: unable to read partition table [ 679.307459][ T9092] loop8: partition table beyond EOD, truncated [ 679.343464][ T9092] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 679.467231][ T9088] JFS: charset not found [ 684.080529][ T9114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.257707][ T9114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 685.892995][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.906271][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.072452][ T9117] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 686.309794][ T9118] loop5: detected capacity change from 0 to 7 [ 686.510832][ T9118] Dev loop5: unable to read RDB block 7 [ 686.521546][ C0] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 686.533118][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 686.633319][ T9118] loop5: unable to read partition table [ 686.718852][ T9118] loop5: partition table beyond EOD, truncated [ 686.808153][ T9118] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 686.940728][ T5720] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 687.150913][ T5720] usb 4-1: Using ep0 maxpacket: 16 [ 687.188686][ T5720] usb 4-1: unable to get BOS descriptor or descriptor too short [ 687.209734][ T5720] usb 4-1: config 7 has an invalid interface number: 106 but max is 3 [ 687.219511][ T5720] usb 4-1: config 7 has an invalid interface number: 182 but max is 3 [ 687.233034][ T5720] usb 4-1: config 7 has an invalid interface number: 148 but max is 3 [ 687.244888][ T5720] usb 4-1: config 7 has an invalid interface number: 227 but max is 3 [ 687.275562][ T5720] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 687.331662][ T5720] usb 4-1: config 7 has no interface number 0 [ 687.379213][ T5720] usb 4-1: config 7 has no interface number 1 [ 687.408465][ T5720] usb 4-1: config 7 has no interface number 2 [ 687.430195][ T5720] usb 4-1: config 7 has no interface number 3 [ 687.450713][ T5720] usb 4-1: config 7 interface 106 altsetting 89 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 687.482704][ T5720] usb 4-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 687.534044][ T5720] usb 4-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 687.573666][ T5720] usb 4-1: config 7 interface 106 altsetting 89 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 687.599715][ T5720] usb 4-1: config 7 interface 106 altsetting 89 has 6 endpoint descriptors, different from the interface descriptor's value: 13 [ 687.621331][ T5720] usb 4-1: config 7 interface 182 altsetting 248 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 687.634869][ T5720] usb 4-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 687.743630][ T5720] usb 4-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 687.802918][ T4993] Dev loop5: unable to read RDB block 7 [ 687.809438][ T4993] loop5: unable to read partition table [ 687.830311][ T4993] loop5: partition table beyond EOD, truncated [ 687.845900][ T5720] usb 4-1: config 7 interface 182 altsetting 248 has an invalid descriptor for endpoint zero, skipping [ 687.909834][ T5720] usb 4-1: config 7 interface 148 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 688.008406][ T5720] usb 4-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 688.094591][ T5720] usb 4-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 688.198401][ T5720] usb 4-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 688.336322][ T5720] usb 4-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 688.405303][ T5720] usb 4-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 688.448332][ T5720] usb 4-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x2, skipping [ 688.484766][ T5720] usb 4-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 688.514814][ T9137] JFS: charset not found [ 688.556370][ T5720] usb 4-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 688.570684][ T9146] netlink: 48 bytes leftover after parsing attributes in process `syz.0.726'. [ 688.645243][ T5720] usb 4-1: config 7 interface 148 altsetting 5 has an endpoint descriptor with address 0x52, changing to 0x2 [ 688.670186][ T5720] usb 4-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x2, skipping [ 688.933282][ T5720] usb 4-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 689.048137][ T5720] usb 4-1: config 7 interface 148 altsetting 5 has 13 endpoint descriptors, different from the interface descriptor's value: 12 [ 689.155712][ T5720] usb 4-1: config 7 interface 227 altsetting 187 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 689.313894][ T5720] usb 4-1: config 7 interface 106 has no altsetting 0 [ 689.336627][ T5720] usb 4-1: config 7 interface 182 has no altsetting 0 [ 689.365303][ T5720] usb 4-1: config 7 interface 148 has no altsetting 0 [ 689.429931][ T5720] usb 4-1: config 7 interface 227 has no altsetting 0 [ 689.483237][ T5720] usb 4-1: string descriptor 0 read error: -71 [ 689.545933][ T5720] usb 4-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=c7.5a [ 689.656749][ T5720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.800576][ T5720] usb 4-1: can't set config #7, error -71 [ 689.879909][ T5720] usb 4-1: USB disconnect, device number 32 [ 693.110338][ T9178] JFS: charset not found [ 697.162715][ T9205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.268731][ T9205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.237395][ T9230] netlink: 48 bytes leftover after parsing attributes in process `syz.3.748'. [ 703.612935][ T9248] JFS: charset not found [ 704.110173][ T9255] Invalid argument reading file caps for ./file0 [ 705.692319][ T9266] usb usb7: usbfs: process 9266 (syz.1.757) did not claim interface 0 before use [ 705.759238][ T9266] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 712.540640][ T9334] JFS: charset not found [ 713.549705][ T9340] JFS: charset not found [ 713.930155][ T9345] loop8: detected capacity change from 0 to 8 [ 713.997158][ T9345] Dev loop8: unable to read RDB block 8 [ 714.025560][ T9345] loop8: unable to read partition table [ 714.067771][ T9345] loop8: partition table beyond EOD, truncated [ 714.136763][ T9345] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 718.355073][ T9363] JFS: charset not found [ 719.416042][ T9368] netlink: 64 bytes leftover after parsing attributes in process `syz.0.788'. [ 721.855133][ T9386] netlink: 48 bytes leftover after parsing attributes in process `syz.3.794'. [ 724.266859][ T9403] JFS: charset not found [ 724.763144][ T5720] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 724.964684][ T5720] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 725.026055][ T5720] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.127174][ T5720] usb 6-1: config 0 descriptor?? [ 725.196549][ T5720] cp210x 6-1:0.0: cp210x converter detected [ 725.757979][ T5720] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 726.145808][ T5720] usb 6-1: cp210x converter now attached to ttyUSB0 [ 726.371415][ T5720] usb 6-1: USB disconnect, device number 11 [ 726.587635][ T5720] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 726.809341][ T5720] cp210x 6-1:0.0: device disconnected [ 727.116885][ T9420] JFS: charset not found [ 727.907367][ T9429] raw_sendmsg: syz.1.805 forgot to set AF_INET. Fix it! [ 728.969874][ T9436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 729.077957][ T9436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.056968][ T9452] netlink: 48 bytes leftover after parsing attributes in process `syz.5.812'. [ 732.964599][ T5718] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 733.275978][ T5718] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 733.443785][ T5718] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 733.487626][ T5718] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 733.615861][ T5718] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 733.660525][ T5718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 733.672976][ T5718] usb 4-1: Product: syz [ 733.737722][ T5718] usb 4-1: Manufacturer: syz [ 733.777697][ T5718] usb 4-1: SerialNumber: syz [ 734.249181][ T5718] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 33 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 736.040864][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 741.061888][ T29] usb 4-1: USB disconnect, device number 33 [ 741.081283][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 741.289701][ T29] usblp0: removed [ 741.322831][ T9505] JFS: charset not found [ 742.121602][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 742.145032][ T9513] netlink: 48 bytes leftover after parsing attributes in process `syz.3.828'. [ 743.151361][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 743.221004][ T9518] netlink: 'syz.4.830': attribute type 1 has an invalid length. [ 744.161607][ T9518] 8021q: adding VLAN 0 to HW filter on device bond1 [ 746.323078][ T9532] netlink: 48 bytes leftover after parsing attributes in process `syz.4.834'. [ 746.742352][ T9538] netlink: 44 bytes leftover after parsing attributes in process `syz.0.836'. [ 746.950641][ T9538] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.960125][ T9538] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.314893][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.351801][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.893724][ T5718] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 748.092345][ T5718] usb 4-1: Using ep0 maxpacket: 8 [ 748.134709][ T5718] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 748.201100][ T5718] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 748.286264][ T5718] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 748.340665][ T5718] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 748.400073][ T5718] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 748.478428][ T5718] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 748.541930][ T5718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.003291][ T5718] usb 4-1: usb_control_msg returned -32 [ 749.049623][ T5718] usbtmc 4-1:16.0: can't read capabilities [ 749.623729][ T9551] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -90 [ 750.941371][ T5718] usb 4-1: USB disconnect, device number 34 [ 752.852558][ T9578] netlink: 68 bytes leftover after parsing attributes in process `syz.5.848'. [ 752.972496][ T5718] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 753.188241][ T5718] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 753.266006][ T5718] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 753.304119][ T809] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 753.329581][ T5718] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 753.392105][ T5718] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 753.443970][ T5718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.501518][ T809] usb 6-1: Using ep0 maxpacket: 32 [ 753.557913][ T809] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 753.590090][ T5718] usb 4-1: config 0 descriptor?? [ 753.614897][ T809] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 753.688201][ T809] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 753.765499][ T809] usb 6-1: config 1 has no interface number 0 [ 753.816434][ T809] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 34305, setting to 1024 [ 753.908121][ T809] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 753.997603][ T809] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 754.079697][ T809] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.217376][ T9579] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 754.353938][ T809] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 754.389880][ T5718] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 754.755888][ T5718] usb 4-1: USB disconnect, device number 35 [ 755.001236][ T9578] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 755.183714][ T809] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 755.777059][ T10] usb 6-1: USB disconnect, device number 12 [ 755.879733][ T9586] fido_id[9586]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 755.884482][ T10] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 757.841774][ T9595] JFS: charset not found [ 758.372735][ T9605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 758.452400][ T9605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 759.398395][ T9610] netlink: 48 bytes leftover after parsing attributes in process `syz.5.855'. [ 764.411594][ T9640] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 764.564626][ T9640] loop5: detected capacity change from 0 to 7 [ 764.624820][ T9643] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 765.012444][ T9640] Dev loop5: unable to read RDB block 7 [ 765.072178][ T9640] loop5: unable to read partition table [ 765.100826][ T5687] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 765.167347][ T9640] loop5: partition table beyond EOD, truncated [ 765.219149][ T9640] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 765.495722][ T5687] usb 1-1: Using ep0 maxpacket: 16 [ 765.585553][ T5687] usb 1-1: unable to get BOS descriptor or descriptor too short [ 765.686954][ T5687] usb 1-1: config 7 has an invalid interface number: 106 but max is 3 [ 765.781567][ T5687] usb 1-1: config 7 has an invalid interface number: 182 but max is 3 [ 765.868725][ T5687] usb 1-1: config 7 has an invalid interface number: 148 but max is 3 [ 765.955769][ T5687] usb 1-1: config 7 has an invalid interface number: 227 but max is 3 [ 766.040302][ T5687] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 766.115683][ T5687] usb 1-1: config 7 has no interface number 0 [ 766.187774][ T5687] usb 1-1: config 7 has no interface number 1 [ 766.245251][ T5687] usb 1-1: config 7 has no interface number 2 [ 766.318582][ T5687] usb 1-1: config 7 has no interface number 3 [ 766.362849][ T5687] usb 1-1: config 7 interface 106 altsetting 89 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 766.448743][ T5687] usb 1-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 766.519519][ T5687] usb 1-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 766.576016][ T5687] usb 1-1: config 7 interface 106 altsetting 89 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 766.643483][ T5687] usb 1-1: config 7 interface 106 altsetting 89 has 6 endpoint descriptors, different from the interface descriptor's value: 13 [ 766.747332][ T5687] usb 1-1: config 7 interface 182 altsetting 248 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 766.828792][ T5687] usb 1-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 766.919078][ T5687] usb 1-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 766.989363][ T5687] usb 1-1: config 7 interface 182 altsetting 248 has an invalid descriptor for endpoint zero, skipping [ 767.053785][ T5687] usb 1-1: config 7 interface 148 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 767.141179][ T5687] usb 1-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 767.220841][ T5687] usb 1-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 767.330157][ T5687] usb 1-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 767.408080][ T5687] usb 1-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 767.495937][ T5687] usb 1-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 767.578152][ T5687] usb 1-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x2, skipping [ 767.666305][ T5687] usb 1-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 767.779362][ T5687] usb 1-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 767.876912][ T5687] usb 1-1: config 7 interface 148 altsetting 5 has an endpoint descriptor with address 0x52, changing to 0x2 [ 767.969035][ T5687] usb 1-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x2, skipping [ 768.074022][ T5687] usb 1-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 768.188117][ T5687] usb 1-1: config 7 interface 148 altsetting 5 has 13 endpoint descriptors, different from the interface descriptor's value: 12 [ 768.320766][ T5687] usb 1-1: config 7 interface 227 altsetting 187 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 768.440642][ T5687] usb 1-1: config 7 interface 106 has no altsetting 0 [ 768.529671][ T5687] usb 1-1: config 7 interface 182 has no altsetting 0 [ 768.608542][ T5687] usb 1-1: config 7 interface 148 has no altsetting 0 [ 768.657037][ T5687] usb 1-1: config 7 interface 227 has no altsetting 0 [ 768.726938][ T5687] usb 1-1: string descriptor 0 read error: -71 [ 768.808337][ T5687] usb 1-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=c7.5a [ 768.867677][ T9663] netlink: 48 bytes leftover after parsing attributes in process `syz.3.869'. [ 768.894227][ T5687] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.054859][ T5687] usb 1-1: can't set config #7, error -71 [ 769.168143][ T5687] usb 1-1: USB disconnect, device number 30 [ 771.794023][ T5628] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 771.850254][ T9687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.876'. [ 772.026908][ T5628] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 772.084640][ T5628] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 772.130652][ T5628] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 772.214838][ T5628] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 772.259014][ T5628] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.368459][ T5628] usb 4-1: config 0 descriptor?? [ 773.115499][ T5628] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 774.479603][ T5628] usb 4-1: reset high-speed USB device number 36 using dummy_hcd [ 775.479579][ T809] usb 4-1: USB disconnect, device number 36 [ 776.295458][ T9717] netlink: 'syz.3.883': attribute type 2 has an invalid length. [ 776.965819][ T9724] netlink: 48 bytes leftover after parsing attributes in process `syz.5.884'. [ 779.344814][ T9739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.407971][ T9739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 784.022485][ T9775] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 784.032748][ T9775] IPv6: NLM_F_CREATE should be set when creating new route [ 784.172665][ T9777] netlink: 48 bytes leftover after parsing attributes in process `syz.4.899'. [ 784.222922][ T9775] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 784.867862][ T9785] bridge0: port 3(veth0_to_bridge) entered blocking state [ 784.918722][ T9785] bridge0: port 3(veth0_to_bridge) entered disabled state [ 784.987167][ T9785] veth0_to_bridge: entered allmulticast mode [ 785.059001][ T9785] veth0_to_bridge: entered promiscuous mode [ 785.132432][ T9785] bridge0: port 3(veth0_to_bridge) entered blocking state [ 785.141477][ T9785] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 786.281549][ T9800] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 787.103095][ T5687] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 787.414179][ T5687] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 787.485912][ T5687] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.551281][ T5687] usb 1-1: Product: syz [ 787.578899][ T5687] usb 1-1: Manufacturer: syz [ 787.639161][ T5687] usb 1-1: SerialNumber: syz [ 787.708139][ T5687] usb 1-1: config 0 descriptor?? [ 787.748312][ T9815] netlink: 'syz.1.909': attribute type 16 has an invalid length. [ 787.874047][ T9815] netlink: 'syz.1.909': attribute type 17 has an invalid length. [ 788.319288][ T9812] bridge0: port 3(veth0_to_bridge) entered disabled state [ 788.401993][ T9812] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.556435][ T9812] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.270255][ T9815] bridge0: port 3(veth0_to_bridge) entered blocking state [ 790.278528][ T9815] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 790.360140][ T9815] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.368325][ T9815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 790.388249][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 790.404801][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 790.419629][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 790.433680][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 790.447671][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 790.461556][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 790.476005][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 790.489221][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 790.502587][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 790.515958][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 795.390836][ C1] net_ratelimit: 8632 callbacks suppressed [ 795.390891][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 795.411557][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 795.425583][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 795.439888][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 795.453842][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 795.467756][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 795.481703][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 795.495638][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 795.509649][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 795.523616][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 800.400428][ C1] net_ratelimit: 9545 callbacks suppressed [ 800.400481][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 800.421523][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 800.435690][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 800.450132][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 800.464103][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 800.478375][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 800.492602][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 800.506385][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 800.520020][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 800.533393][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 805.410733][ C1] net_ratelimit: 8599 callbacks suppressed [ 805.410773][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 805.431920][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 805.446266][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 805.460650][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 805.474298][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 805.487947][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 805.501248][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 805.514587][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 805.528595][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 805.542579][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 808.764701][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 810.420391][ C1] net_ratelimit: 9766 callbacks suppressed [ 810.420432][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 810.440533][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 810.453908][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 810.467290][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 810.480680][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 810.493917][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 810.507324][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 810.521160][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 810.535120][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 810.548771][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 815.430708][ C1] net_ratelimit: 8808 callbacks suppressed [ 815.430760][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 815.451597][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 815.465685][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 815.479516][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 815.493526][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 815.507547][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 815.521572][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 815.535539][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 815.549430][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 815.563689][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 820.440692][ C1] net_ratelimit: 8601 callbacks suppressed [ 820.440748][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 820.460968][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 820.474409][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 820.488572][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 820.503027][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 820.517469][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 820.531028][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 820.544546][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 820.558524][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 820.571970][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 820.609117][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 825.450425][ C1] net_ratelimit: 9330 callbacks suppressed [ 825.450468][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 825.471589][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 825.485995][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 825.500063][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 825.514227][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 825.528276][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 825.542350][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 825.556387][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 825.570030][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 825.583593][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 830.134584][ C0] sched: DL replenish lagged too much [ 830.460524][ C0] net_ratelimit: 11366 callbacks suppressed [ 830.460563][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 830.461977][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 830.468122][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 830.481909][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 830.494766][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 830.508943][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 830.521808][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 830.536088][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 830.549038][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 830.563257][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 835.470682][ C1] net_ratelimit: 19361 callbacks suppressed [ 835.470735][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 835.470748][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 835.476800][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 835.477237][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 835.481075][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 835.493022][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 835.505017][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 835.518629][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 835.532004][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 835.545731][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 840.480495][ C1] net_ratelimit: 18799 callbacks suppressed [ 840.480534][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 840.480643][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 840.488183][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 840.508596][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 840.517348][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 840.528342][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 840.541515][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 840.561178][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 840.570377][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 840.580875][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 845.490740][ C0] net_ratelimit: 18664 callbacks suppressed [ 845.490789][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 845.491179][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 845.498376][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 845.520746][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 845.528509][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 845.539871][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 845.551021][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 845.563966][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 845.585784][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 845.593497][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 850.500340][ C0] net_ratelimit: 19174 callbacks suppressed [ 850.500395][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 850.502694][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 850.508680][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 850.521483][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 850.534927][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 850.548265][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 850.572740][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 850.578699][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 850.588934][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 850.600922][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 855.510418][ C1] net_ratelimit: 19729 callbacks suppressed [ 855.510458][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 855.511665][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 855.517969][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 855.531461][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 855.551950][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 855.561583][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 855.571439][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 855.584219][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 855.602284][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 855.612720][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 860.520613][ C1] net_ratelimit: 20323 callbacks suppressed [ 860.520656][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 860.520662][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 860.524278][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 860.529746][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 860.542375][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 860.554152][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 860.572247][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 860.582330][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 860.593821][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 860.606810][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 865.530456][ C0] net_ratelimit: 18099 callbacks suppressed [ 865.530512][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 865.530858][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 865.538379][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 865.551421][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 865.565315][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 865.578483][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 865.592418][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 865.605571][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 865.619570][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 865.639528][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 870.540611][ C1] net_ratelimit: 19170 callbacks suppressed [ 870.540627][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 870.540663][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 870.548213][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 870.573016][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 870.573561][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 870.574059][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 870.574550][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 870.582489][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 870.591187][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 870.602187][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 875.550404][ C0] net_ratelimit: 18165 callbacks suppressed [ 875.550449][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 875.556546][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 875.557071][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 875.560700][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 875.572942][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 875.585287][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 875.599049][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 875.612267][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 875.626532][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 875.639962][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 880.560411][ C0] net_ratelimit: 18248 callbacks suppressed [ 880.560466][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 880.566628][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 880.567922][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 880.581502][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 880.595809][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 880.608410][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 880.622885][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 880.635749][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 880.650246][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 880.668649][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 885.570495][ C1] net_ratelimit: 17104 callbacks suppressed [ 885.570550][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 885.581315][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 885.593228][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 885.605054][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 885.619039][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 885.631780][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 885.646159][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 885.659043][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 885.673275][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 885.695032][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 890.580456][ C1] net_ratelimit: 17807 callbacks suppressed [ 890.580474][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 890.580499][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 890.586767][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 890.589694][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 890.601739][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 890.615602][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 890.628160][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 890.642444][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 890.655267][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 890.669824][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 895.590665][ C1] net_ratelimit: 17684 callbacks suppressed [ 895.590726][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 895.593353][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 895.598714][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 895.611861][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 895.633328][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 895.641146][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 895.651623][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 895.664345][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 895.684453][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 895.693471][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 900.600480][ C1] net_ratelimit: 17649 callbacks suppressed [ 900.600536][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 900.606926][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 900.609338][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 900.622887][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 900.634890][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 900.649160][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 900.667767][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 900.678057][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 900.688883][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 900.702560][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 905.610534][ C0] net_ratelimit: 17514 callbacks suppressed [ 905.610586][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 905.610635][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 905.625020][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 905.634029][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 905.644726][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 905.657772][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 905.670908][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 905.684875][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 905.702588][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 905.713394][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 910.620526][ C1] net_ratelimit: 19793 callbacks suppressed [ 910.620568][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 910.620608][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 910.630885][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 910.642277][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 910.654795][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 910.668146][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 910.681572][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 910.695096][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 910.708634][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 910.728817][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 915.630400][ C1] net_ratelimit: 19420 callbacks suppressed [ 915.630460][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 915.630832][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 915.637996][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 915.660433][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 915.668160][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 915.679183][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 915.690761][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 915.703538][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 915.720741][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 915.731731][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 920.640389][ C1] net_ratelimit: 18265 callbacks suppressed [ 920.640415][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 920.640442][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 920.646614][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 920.647131][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 920.650620][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 920.662843][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 920.674882][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 920.688678][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 920.701943][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 920.716016][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 925.650502][ C1] net_ratelimit: 20176 callbacks suppressed [ 925.650540][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 925.651562][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 925.658275][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 925.671541][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 925.684979][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 925.699132][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 925.712192][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 925.725534][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 925.739213][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 925.752752][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 930.660488][ C0] net_ratelimit: 19859 callbacks suppressed [ 930.660543][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 930.660611][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 930.678285][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 930.684370][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 930.694762][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 930.707088][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 930.720338][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 930.740532][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 930.750537][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 930.762190][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 934.260303][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 934.267311][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P1107/1:b..l P4982/1:b..l [ 934.276916][ C0] rcu: (detected by 0, t=10503 jiffies, g=107105, q=634 ncpus=2) [ 934.284774][ C0] task:klogd state:R running task stack:23312 pid:4982 tgid:4982 ppid:1 task_flags:0x400100 flags:0x00080000 [ 934.299297][ C0] Call Trace: [ 934.302616][ C0] [ 934.305579][ C0] __schedule+0x17d9/0x56c0 [ 934.310160][ C0] ? __kernel_text_address+0xd/0x30 [ 934.315403][ C0] ? __lock_acquire+0x683/0x2cf0 [ 934.320391][ C0] ? __pfx___schedule+0x10/0x10 [ 934.325280][ C0] ? __lock_acquire+0x683/0x2cf0 [ 934.330296][ C0] preempt_schedule_irq+0x4d/0xa0 [ 934.335362][ C0] irqentry_exit+0x14f/0x8f0 [ 934.339989][ C0] ? trace_irq_disable+0x3b/0x140 [ 934.345065][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 934.351079][ C0] RIP: 0010:lock_acquire+0x221/0x350 [ 934.356410][ C0] Code: ff ff ff e8 61 3f 2e 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 4b 6a ca 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 38 6a b8 [ 934.376052][ C0] RSP: 0018:ffffc90002e3f570 EFLAGS: 00000282 [ 934.382174][ C0] RAX: 152126d463a7fd00 RBX: 0000000000000000 RCX: 0000000000000046 [ 934.390191][ C0] RDX: 00000000d9196744 RSI: ffffffff8e4b26f2 RDI: ffffffff8c4bdc80 [ 934.398195][ C0] RBP: ffffffff82403b22 R08: ffffffff82403b22 R09: 0000000000000000 [ 934.406211][ C0] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: 0000000000000002 [ 934.414216][ C0] R13: ffffffff8eb59c60 R14: 0000000000000000 R15: 0000000000000246 [ 934.422228][ C0] ? page_ext_get+0x22/0x2e0 [ 934.426869][ C0] ? page_ext_get+0x22/0x2e0 [ 934.431512][ C0] ? page_ext_get+0x22/0x2e0 [ 934.436146][ C0] page_ext_get+0x3e/0x2e0 [ 934.440600][ C0] ? page_ext_get+0x22/0x2e0 [ 934.445237][ C0] __reset_page_owner+0x28/0x1f0 [ 934.450228][ C0] __free_frozen_pages+0xc1e/0xd10 [ 934.455397][ C0] __slab_free+0x274/0x2c0 [ 934.459882][ C0] qlist_free_all+0x99/0x100 [ 934.464533][ C0] kasan_quarantine_reduce+0x148/0x160 [ 934.470038][ C0] __kasan_slab_alloc+0x22/0x80 [ 934.474938][ C0] __kmalloc_node_track_caller_noprof+0x461/0x730 [ 934.481420][ C0] ? kmem_cache_alloc_node_noprof+0x1f5/0x610 [ 934.487530][ C0] ? __kmalloc_node_track_caller_noprof+0x2fd/0x730 [ 934.494162][ C0] ? alloc_skb_with_frags+0xc6/0x760 [ 934.499489][ C0] ? alloc_skb_with_frags+0xc6/0x760 [ 934.504825][ C0] __alloc_skb+0x2bd/0x7a0 [ 934.509284][ C0] alloc_skb_with_frags+0xc6/0x760 [ 934.514443][ C0] ? irqentry_exit+0x218/0x8f0 [ 934.519247][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 934.524489][ C0] sock_alloc_send_pskb+0x878/0x990 [ 934.529751][ C0] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 934.535525][ C0] ? __lock_acquire+0x683/0x2cf0 [ 934.540511][ C0] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 934.546621][ C0] unix_dgram_sendmsg+0x4da/0x17b0 [ 934.551852][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 934.557449][ C0] ? __lock_acquire+0x683/0x2cf0 [ 934.562439][ C0] ? aa_sock_msg_perm+0xda/0x1b0 [ 934.567424][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 934.573023][ C0] sock_sendmsg_nosec+0x13a/0x180 [ 934.578100][ C0] __sys_sendto+0x408/0x5a0 [ 934.582651][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 934.587708][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 934.592976][ C0] ? __irq_exit_rcu+0xca/0x220 [ 934.597785][ C0] ? handle_softirqs+0x70f/0x840 [ 934.602766][ C0] __x64_sys_sendto+0xde/0x100 [ 934.607566][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.613669][ C0] do_syscall_64+0x174/0x580 [ 934.618302][ C0] ? clear_bhb_loop+0x40/0x90 [ 934.623014][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.628944][ C0] RIP: 0033:0x7fc63a404407 [ 934.633407][ C0] RSP: 002b:00007ffc333186c0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 934.641854][ C0] RAX: ffffffffffffffda RBX: 00007fc63a2b4c80 RCX: 00007fc63a404407 [ 934.649857][ C0] RDX: 00000000000000a1 RSI: 00007ffc33318800 RDI: 0000000000000003 [ 934.657867][ C0] RBP: 00007ffc33318c30 R08: 0000000000000000 R09: 0000000000000000 [ 934.665871][ C0] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffc33318c48 [ 934.673885][ C0] R13: 00007ffc33318800 R14: 0000000000000086 R15: 00007ffc33318800 [ 934.681920][ C0] [ 934.684987][ C0] task:kworker/u8:7 state:R running task stack:20632 pid:1107 tgid:1107 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 934.698606][ C0] Workqueue: krds_cp_wq#2/0 rds_connect_worker [ 934.704804][ C0] Call Trace: [ 934.708114][ C0] [ 934.711085][ C0] __schedule+0x17d9/0x56c0 [ 934.715647][ C0] ? __lock_acquire+0x683/0x2cf0 [ 934.720629][ C0] ? __pfx___schedule+0x10/0x10 [ 934.725514][ C0] ? __lock_acquire+0x683/0x2cf0 [ 934.730509][ C0] preempt_schedule_irq+0x4d/0xa0 [ 934.735609][ C0] irqentry_exit+0x14f/0x8f0 [ 934.740242][ C0] ? trace_irq_disable+0x3b/0x140 [ 934.745307][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 934.751363][ C0] RIP: 0010:lock_release+0x44/0x3c0 [ 934.756607][ C0] Code: 8b 05 60 3b ca 11 48 89 44 24 28 0f 1f 44 00 00 65 8b 05 63 3b ca 11 83 f8 08 0f 83 56 02 00 00 89 c0 48 0f a3 05 4c ac b4 0e <73> 0d e8 25 f9 08 00 84 c0 0f 84 94 02 00 00 83 3d 46 df b4 0e 00 [ 934.776247][ C0] RSP: 0018:ffffc900059271b8 EFLAGS: 00000293 [ 934.782372][ C0] RAX: 0000000000000000 RBX: ffffc900059272d8 RCX: 0000000080000001 [ 934.790370][ C0] RDX: ffffc90005927301 RSI: ffffffff8177827f RDI: ffffffff8eb59c60 [ 934.798367][ C0] RBP: 1ffffffff2245a01 R08: ffffc900059277c8 R09: 0000000000000000 [ 934.806401][ C0] R10: ffffc90005927318 R11: fffff52000b24e65 R12: ffffc90005920000 [ 934.814412][ C0] R13: ffffffff8177827f R14: ffffffff8eb59c60 R15: ffffc900059277d8 [ 934.822418][ C0] ? unwind_next_frame+0x8f/0x2550 [ 934.827579][ C0] ? unwind_next_frame+0x8f/0x2550 [ 934.832733][ C0] ? deref_stack_reg+0x18e/0x220 [ 934.837713][ C0] ? unwind_next_frame+0x8f/0x2550 [ 934.842866][ C0] unwind_next_frame+0x1baa/0x2550 [ 934.848028][ C0] ? security_sk_alloc+0x52/0x360 [ 934.853092][ C0] ? unwind_next_frame+0x8f/0x2550 [ 934.858249][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 934.864443][ C0] arch_stack_walk+0x11b/0x150 [ 934.869254][ C0] ? sk_prot_alloc+0x101/0x210 [ 934.874062][ C0] stack_trace_save+0xa9/0x100 [ 934.878879][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 934.884300][ C0] save_stack+0x122/0x230 [ 934.888682][ C0] ? __pfx_save_stack+0x10/0x10 [ 934.893568][ C0] ? __free_frozen_pages+0xc1e/0xd10 [ 934.898886][ C0] ? __slab_free+0x274/0x2c0 [ 934.903520][ C0] ? qlist_free_all+0x99/0x100 [ 934.908332][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 934.914005][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 934.919081][ C0] ? __kmalloc_noprof+0x311/0x720 [ 934.924140][ C0] ? security_sk_alloc+0x52/0x360 [ 934.929214][ C0] ? page_ext_put+0x97/0xc0 [ 934.933760][ C0] __reset_page_owner+0x71/0x1f0 [ 934.938743][ C0] __free_frozen_pages+0xc1e/0xd10 [ 934.943918][ C0] __slab_free+0x274/0x2c0 [ 934.948383][ C0] ? qlist_free_all+0x8e/0x100 [ 934.953201][ C0] qlist_free_all+0x99/0x100 [ 934.957841][ C0] ? __kmalloc_noprof+0x1ad/0x720 [ 934.962921][ C0] kasan_quarantine_reduce+0x148/0x160 [ 934.968425][ C0] __kasan_slab_alloc+0x22/0x80 [ 934.973321][ C0] __kmalloc_noprof+0x311/0x720 [ 934.978237][ C0] ? __kmalloc_noprof+0x1ad/0x720 [ 934.983300][ C0] ? security_sk_alloc+0x52/0x360 [ 934.988359][ C0] ? security_sk_alloc+0x52/0x360 [ 934.993443][ C0] security_sk_alloc+0x52/0x360 [ 934.998357][ C0] sk_prot_alloc+0x101/0x210 [ 935.003001][ C0] sk_alloc+0x3a/0x390 [ 935.007104][ C0] inet_create+0x7a9/0xff0 [ 935.011553][ C0] ? inet_create+0x9d/0xff0 [ 935.016097][ C0] __sock_create+0x4b3/0x9d0 [ 935.020749][ C0] rds_tcp_conn_path_connect+0x2d8/0x920 [ 935.026449][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 935.031538][ C0] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 935.037739][ C0] ? irqentry_exit+0x218/0x8f0 [ 935.042536][ C0] ? trace_irq_disable+0x3b/0x140 [ 935.047603][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 935.053380][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 935.059155][ C0] rds_connect_worker+0x1d8/0x290 [ 935.064239][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 935.069996][ C0] process_scheduled_works+0xa8e/0x14e0 [ 935.075604][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 935.081631][ C0] ? assign_work+0x3cf/0x5d0 [ 935.086271][ C0] worker_thread+0xa47/0xfb0 [ 935.090936][ C0] kthread+0x388/0x470 [ 935.095048][ C0] ? __pfx_worker_thread+0x10/0x10 [ 935.100231][ C0] ? __pfx_kthread+0x10/0x10 [ 935.104872][ C0] ret_from_fork+0x514/0xb70 [ 935.109523][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 935.114691][ C0] ? __switch_to+0xc89/0x1420 [ 935.119415][ C0] ? __pfx_kthread+0x10/0x10 [ 935.124062][ C0] ret_from_fork_asm+0x1a/0x30 [ 935.128883][ C0] [ 935.131939][ C0] rcu: rcu_preempt kthread starved for 10579 jiffies! g107105 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 935.143262][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 935.153288][ C0] rcu: RCU grace-period kthread stack dump: [ 935.159205][ C0] task:rcu_preempt state:R running task stack:27496 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 935.172756][ C0] Call Trace: [ 935.176068][ C0] [ 935.179034][ C0] __schedule+0x17d9/0x56c0 [ 935.183607][ C0] ? __pfx___schedule+0x10/0x10 [ 935.188542][ C0] ? schedule+0x90/0x2b0 [ 935.192826][ C0] schedule+0x164/0x2b0 [ 935.197029][ C0] schedule_timeout+0x152/0x2c0 [ 935.201929][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 935.207354][ C0] ? __pfx_process_timeout+0x10/0x10 [ 935.212684][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 935.218527][ C0] ? prepare_to_swait_event+0x322/0x350 [ 935.224223][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 935.229123][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 935.234364][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 935.240205][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 935.246406][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 935.251738][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 935.256979][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 935.262825][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 935.267477][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 935.272722][ C0] ? __kthread_parkme+0x71/0x1f0 [ 935.277702][ C0] ? __kthread_parkme+0x196/0x1f0 [ 935.282775][ C0] kthread+0x388/0x470 [ 935.286904][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 935.292152][ C0] ? __pfx_kthread+0x10/0x10 [ 935.296789][ C0] ret_from_fork+0x514/0xb70 [ 935.301452][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 935.306622][ C0] ? __switch_to+0xc89/0x1420 [ 935.311353][ C0] ? __pfx_kthread+0x10/0x10 [ 935.315990][ C0] ret_from_fork_asm+0x1a/0x30 [ 935.320822][ C0] [ 935.323880][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 935.330228][ C0] Sending NMI from CPU 0 to CPUs 1: [ 935.335499][ C1] NMI backtrace for cpu 1 [ 935.335523][ C1] CPU: 1 UID: 0 PID: 3229 Comm: kworker/R-bat_e Not tainted syzkaller #0 PREEMPT(full) [ 935.335545][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 935.335559][ C1] Workqueue: bat_events batadv_tt_purge [ 935.335609][ C1] RIP: 0010:preempt_count_add+0x32/0x190 [ 935.335636][ C1] Code: 53 49 bf 00 00 00 00 00 fc ff df 48 c7 c0 80 75 78 9a 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 ea 00 00 00 83 3d be 06 e4 18 00 <75> 07 65 8b 05 65 b1 d8 11 65 01 3d 5e b1 d8 11 48 c7 c0 80 75 78 [ 935.335653][ C1] RSP: 0018:ffffc90000a07640 EFLAGS: 00000046 [ 935.335668][ C1] RAX: 0000000000000004 RBX: ffff8880b87281c0 RCX: ffffffff9a787503 [ 935.335694][ C1] RDX: 0000000000010100 RSI: ffffffff8c4bdc60 RDI: 0000000000000001 [ 935.335706][ C1] RBP: ffff88807c8ad300 R08: ffffffff90579137 R09: 1ffffffff20af226 [ 935.335720][ C1] R10: dffffc0000000000 R11: fffffbfff20af227 R12: ffff8880b87281c0 [ 935.335733][ C1] R13: 0000000000000001 R14: ffff8880b8728360 R15: dffffc0000000000 [ 935.335746][ C1] FS: 0000000000000000(0000) GS:ffff88812504e000(0000) knlGS:0000000000000000 [ 935.335760][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 935.335773][ C1] CR2: 00007f7db79eb158 CR3: 000000000e946000 CR4: 00000000003526f0 [ 935.335789][ C1] Call Trace: [ 935.335796][ C1] [ 935.335804][ C1] _raw_spin_lock_irq+0x21/0x50 [ 935.335822][ C1] __hrtimer_run_queues+0x466/0xa10 [ 935.335852][ C1] hrtimer_interrupt+0x448/0x910 [ 935.335888][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 935.335909][ C1] sysvec_apic_timer_interrupt+0x52/0xc0 [ 935.335929][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 935.335949][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x10/0x90 [ 935.335972][ C1] Code: cc cc 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 15 b8 17 a6 11 <65> 8b 0d d9 17 a6 11 81 e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 [ 935.335987][ C1] RSP: 0018:ffffc90000a07958 EFLAGS: 00000246 [ 935.336001][ C1] RAX: ffffffff8a7ee8b8 RBX: 0000000000000001 RCX: 0000000080000101 [ 935.336013][ C1] RDX: ffff888032d11f00 RSI: 0000000000000001 RDI: 0000000000000000 [ 935.336025][ C1] RBP: ffffc90000a07ab8 R08: ffffc90000a07be0 R09: ffffc90000a07bf0 [ 935.336038][ C1] R10: ffffc90000a07a40 R11: fffff52000140f4a R12: 1ffff1100d27de8c [ 935.336052][ C1] R13: dffffc0000000000 R14: ffff8880693cf800 R15: ffffc90000a07bb8 [ 935.336070][ C1] ? __find_rr_leaf+0x358/0x740 [ 935.336112][ C1] __find_rr_leaf+0x358/0x740 [ 935.336138][ C1] ? __pfx___find_rr_leaf+0x10/0x10 [ 935.336156][ C1] ? __pfx_fib6_node_lookup+0x10/0x10 [ 935.336186][ C1] ? __lock_acquire+0x683/0x2cf0 [ 935.336215][ C1] fib6_table_lookup+0x3c6/0xae0 [ 935.336253][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 935.336296][ C1] ? ip6_pol_route+0x163/0x14d0 [ 935.336322][ C1] ? __pfx_fib6_table_lookup+0x10/0x10 [ 935.336351][ C1] ip6_pol_route+0x229/0x14d0 [ 935.336380][ C1] ? ip6_pol_route+0x163/0x14d0 [ 935.336406][ C1] ? __pfx_ip6_pol_route+0x10/0x10 [ 935.336432][ C1] ? net_generic+0x1e/0x240 [ 935.336464][ C1] ? net_generic+0x1e/0x240 [ 935.336484][ C1] fib6_rule_lookup+0x556/0x730 [ 935.336507][ C1] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 935.336530][ C1] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 935.336554][ C1] ? NF_HOOK+0xa2/0x3f0 [ 935.336581][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 935.336609][ C1] ? NF_HOOK+0x369/0x3f0 [ 935.336641][ C1] ip6_route_input+0x78d/0xb20 [ 935.336667][ C1] ? __pfx_ip6_route_input+0x10/0x10 [ 935.336696][ C1] ? ip6_parse_tlv+0xae4/0x1f20 [ 935.336727][ C1] ? ip6_rcv_finish_core+0x222/0x420 [ 935.336746][ C1] ip6_rcv_finish+0x141/0x280 [ 935.336763][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 935.336780][ C1] ip_sabotage_in+0x1e1/0x270 [ 935.336798][ C1] ? __pfx_ip_sabotage_in+0x10/0x10 [ 935.336818][ C1] nf_hook_slow+0xc5/0x220 [ 935.336845][ C1] NF_HOOK+0x21f/0x3c0 [ 935.336863][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 935.336881][ C1] ? NF_HOOK+0x9e/0x3c0 [ 935.336896][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 935.336911][ C1] ? ip6_rcv_core+0xa1/0x1870 [ 935.336929][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 935.336950][ C1] ? netif_receive_skb+0x102/0xbf0 [ 935.336976][ C1] netif_receive_skb+0x278/0xbf0 [ 935.337000][ C1] ? NF_HOOK+0xfa/0x3a0 [ 935.337017][ C1] ? lock_acquire+0x106/0x350 [ 935.337044][ C1] ? __pfx_netif_receive_skb+0x10/0x10 [ 935.337072][ C1] ? br_netif_receive_skb+0x126/0x190 [ 935.337093][ C1] NF_HOOK+0xa4/0x3a0 [ 935.337111][ C1] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 935.337131][ C1] ? NF_HOOK+0xfa/0x3a0 [ 935.337149][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 935.337169][ C1] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 935.337192][ C1] ? br_pass_frame_up+0x275/0x420 [ 935.337213][ C1] br_handle_frame_finish+0x1192/0x1990 [ 935.337232][ C1] ? kasan_save_track+0x4f/0x80 [ 935.337263][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 935.337286][ C1] ? ip6t_do_table+0x1d1/0x15b0 [ 935.337311][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 935.337335][ C1] ? nf_hook_slow+0x176/0x220 [ 935.337371][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 935.337391][ C1] br_nf_hook_thresh+0x3dd/0x4c0 [ 935.337409][ C1] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 935.337434][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 935.337455][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 935.337474][ C1] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 935.337495][ C1] ? lock_acquire+0x106/0x350 [ 935.337523][ C1] br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 935.337545][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 935.337568][ C1] br_nf_pre_routing_ipv6+0x382/0x6f0 [ 935.337589][ C1] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 935.337610][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 935.337632][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 935.337654][ C1] ? br_nf_pre_routing+0x720/0x14b0 [ 935.337677][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 935.337695][ C1] br_handle_frame+0x127f/0x1510 [ 935.337731][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 935.337750][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 935.337773][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 935.337790][ C1] __netif_receive_skb_core+0x989/0x30b0 [ 935.337824][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 935.337855][ C1] ? process_backlog+0x3c3/0x1860 [ 935.337870][ C1] ? lock_acquire+0x106/0x350 [ 935.337893][ C1] ? process_backlog+0x3c3/0x1860 [ 935.337911][ C1] ? process_backlog+0x3c3/0x1860 [ 935.337926][ C1] ? process_backlog+0x3c3/0x1860 [ 935.337942][ C1] process_backlog+0x706/0x1860 [ 935.337960][ C1] ? process_backlog+0x3c3/0x1860 [ 935.337982][ C1] __napi_poll+0xaa/0x330 [ 935.338008][ C1] net_rx_action+0x61d/0xf50 [ 935.338029][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 935.338043][ C1] ? xfrm_dev_backlog+0x24b/0x3c0 [ 935.338081][ C1] handle_softirqs+0x225/0x840 [ 935.338103][ C1] ? do_softirq+0x76/0xd0 [ 935.338125][ C1] ? batadv_tt_local_purge+0x2c1/0x340 [ 935.338150][ C1] do_softirq+0x76/0xd0 [ 935.338168][ C1] [ 935.338174][ C1] [ 935.338180][ C1] __local_bh_enable_ip+0xf8/0x130 [ 935.338200][ C1] batadv_tt_local_purge+0x2c1/0x340 [ 935.338230][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 935.338251][ C1] batadv_tt_purge+0x35/0xa10 [ 935.338277][ C1] ? rcu_is_watching+0x15/0xb0 [ 935.338294][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 935.338313][ C1] process_scheduled_works+0xa8e/0x14e0 [ 935.338370][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 935.338390][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 935.338415][ C1] ? assign_work+0x3af/0x5d0 [ 935.338437][ C1] rescuer_thread+0x7b6/0x10b0 [ 935.338463][ C1] ? rescuer_thread+0xb8/0x10b0 [ 935.338496][ C1] kthread+0x388/0x470 [ 935.338521][ C1] ? __pfx_rescuer_thread+0x10/0x10 [ 935.338543][ C1] ? __pfx_kthread+0x10/0x10 [ 935.338569][ C1] ret_from_fork+0x514/0xb70 [ 935.338596][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 935.338621][ C1] ? __switch_to+0xc89/0x1420 [ 935.338645][ C1] ? __pfx_kthread+0x10/0x10 [ 935.338671][ C1] ret_from_fork_asm+0x1a/0x30 [ 935.338696][ C1] [ 935.672247][ C1] net_ratelimit: 14538 callbacks suppressed [ 935.672301][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 936.136892][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 936.137303][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 936.137798][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 936.144717][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 936.147693][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 936.155481][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 936.156599][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 936.164156][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 936.166416][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 940.680326][ C1] net_ratelimit: 26294 callbacks suppressed [ 940.680380][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 940.680426][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 940.681057][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 940.689573][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 940.698681][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 940.698930][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 940.699176][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 940.699426][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 940.699669][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 940.700265][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9e:07:98:a8:b6, vlan:0) [ 941.161116][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 941.204163][ T1319] ieee802154 phy1 wpan1: encryption failed: -22