last executing test programs: 20.680587696s ago: executing program 4 (id=402): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0xff, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x80}}, 0x1c}}, 0x0) r3 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) r10 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x853, 0x148, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x2, 0xff, {0x9, 0x21, 0xff7f, 0x57, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x8, 0x64}}}}}]}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io(r10, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x20fb87, 0x10, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9f92, 0x200, 0x1006, 0x15a, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7be, 0x8000, 0x30000000, 0x146, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8301, 0x8, 0x0, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8ae, 0x4000000, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 19.85020297s ago: executing program 4 (id=404): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0, 0xeeef0000}) unshare(0x6a060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001840)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000022e6144060108000034e40000000000000001050001000600000005000400030000000900020073797a3100000000050005000a00000013000300686173683a6e65742c69666163640d8293378dc97d7cee806fe94beb553c6ef5d0fb8d17f27dc7e95dff5a1e842b4c0d0bb12c3cc3b7a2599c3d10c40841e931737b0d54e8834bcfd70defde1a033547ad01ac2b660b76de61df327e"], 0x4c}}, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, 0x0, 0x40040) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) syz_open_procfs(0x0, &(0x7f0000000200)='net/udplite\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f0000000200)="78279f22607e84a9ba7c0add25955c732d23becc771d89f309b00a71697a572485057c11897525edb3a081e687ad86f8aa35667cd598b8a37903faca914cc6715c372c72f70d28899ef8f42ce4a99ee6077c17c654521c2a38a44d80e705f3a535da2937e0e933d0aad4ceabbd17dd57038f3075709adab98452558fba1c9b8c1979d00d082b3f10786e37125c8c9d5bc17444d0eb2e95737709802d6b30cf01dfff5212a3f2db6e161d9a2333999f03417156f0f408cd4f7a9e0c19f4574e4e5433d40b6a6fd3d69c1d385fccfd2cc98ca6311ba4543296b394f7798ae53a9569f047", &(0x7f0000000340)=@tcp6=r6, 0x4}, 0x1c) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000000)=0x639) timer_create(0x2, &(0x7f00000003c0)={0x0, 0x2f, 0x0, @thr={&(0x7f0000000100)='W', &(0x7f0000000140)="09e2ecf806a47a340092f9f0830573b91f233a0ac70eb88564ef40f09b15f7aeb7acd3cbe1bd713f994b19b235f4f29babf56be220660a46da61"}}, &(0x7f00000004c0)=0x0) timer_gettime(r7, &(0x7f0000000500)) 15.953456973s ago: executing program 2 (id=410): syz_usb_connect$uac1(0x2, 0x9e, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201010200000020050b431740000102030109028c00030109403f0904000000010100000a2401d2000a00020102090401000001020000090401010101020000072401080505000f2402020002ff0f00f441a4440fb209050109ff037808ba072501080403000904020000010200000904020101010200000f240202000007000223c586c54c01072501000e0300e7eb3381d03a03a016e6d7d3583e5811e4008da56117918ec584e8aa00a8459f05a579dd6516753a8097ccb0b400"/203], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x100004, 0x220104, 0xe2a3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000580), 0x2000cc0, r3}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, &(0x7f0000000440)=""/30, &(0x7f0000000380), &(0x7f0000000280), 0x1, r3}, 0x38) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000002780)={0x18, 0x2f, 0x9, 0x70bd28, 0x0, {0x4}, [@nested={0x4, 0x12}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3600) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000780)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0xf0ffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2ff8}], 0x0, 0x0, 0x0}) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f00000001c0)={0x6, 0x10, '\x00', 0x1, &(0x7f0000000140)=[0x0, 0x0]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x3, 0x2, 0x0, 0x1], 0x8080000}) mprotect(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x6) ioctl$KVM_RUN(r8, 0xae80, 0x0) 15.897971145s ago: executing program 0 (id=421): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x1c, 0x800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) r2 = geteuid() setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@remote, @in=@local, 0x4e22, 0x4, 0x4e22, 0x7, 0x2, 0x80, 0xb120e7530780181d, 0x4, r1, r2}, {0x5, 0x5, 0x7, 0x2, 0x7fffffffffffffff, 0x8, 0x810, 0x5}, {0x8, 0x0, 0x3, 0x9}, 0x8, 0x6e6bb2, 0x2, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d2, 0xff}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3503, 0x2, 0x2, 0x9, 0x4, 0x8, 0x5}}, 0xe4) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100), 0x4) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000080)=0x7ff, 0x4) syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x16, 0x0, 0x8400, 0x1}, 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet(0xa, 0x2, 0xffffffff) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xd}, 0x1c) r7 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/config', 0x0, 0x0) mkdirat(r7, &(0x7f0000000180)='./control\x00', 0x20) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x58, r8, 0x8, 0x0, 0x0, {0x24}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) write$binfmt_script(r6, &(0x7f0000000200), 0xfffffd9d) 15.544777965s ago: executing program 4 (id=413): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, 0x0, &(0x7f0000000440)) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911052000000000095"], 0x0}, 0x94) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000140)=0x4) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1, 0x80000001}}}, 0x88) ioperm(0x0, 0x6e, 0xe) syz_clone(0xa088067dddde4d7e, 0x0, 0x0, 0x0, 0x0, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f00000000c0)={0x8001, 0x5, 0x4d, 0x2}, 0x0) r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0xffffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x4, 0x0, 0x80}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000000)=0x1) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1401100100000040f80600b04000010203010902600003010900080904000000010100000a240106000a00020102090401000001020000090401010101ffff000905", @ANYBLOB="75c8"], 0x0) ioctl$USBDEVFS_CLEAR_HALT(r1, 0xc0105502, &(0x7f0000000040)={0x1, 0x1}) 14.498775017s ago: executing program 0 (id=416): socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000040)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80e02, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) read$alg(r4, 0x0, 0x0) 14.07030133s ago: executing program 3 (id=417): socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x2, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000140)={0xa041, 0x3, 0x2, 0x0, 0x6}, 0x30, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = syz_ublk_setup_io_uring(0x1f3, &(0x7f0000000a80)={0x0, 0xabba, 0x400, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f00000006c0)=0x0, &(0x7f0000000580)=0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000500)='net/anycast6\x00') lseek(r5, 0x1000000, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000001c000000000000a6871ce8000000000cd5b33ded90ff670000"], 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000ffff2abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1503e3ffb309180008000a00", @ANYRES64=r0, @ANYBLOB="240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES16=r6], 0x54}, 0x1, 0x0, 0x0, 0x24004845}, 0x8000002) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="0023020000000b08284d3efd9ee3e3417106e5e29fa26c701cd0037312503db9b25664b7be0de74b2ba37a08a5a197055974951f00000098fc5c65e82776556c03caa97906701cb0"], 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000054}, 0x2000c000) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500200000040cc1700104000010203010902600003010910040904"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) syz_ublk_add_dev(r5, r2, r3, r4, &(0x7f00000002c0)={0x2e, 0x2d, 0x0, r8, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, r9, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000280)=@any_dev={0x2004, 0x67a, 0x0, 0x0, 0x1000, 0xa8, 0x0, 0x0, 0x4a}}}, &(0x7f0000000540)=0x0) syz_ublk_setup_queues(r11, r12, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x21}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x1, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) 12.578370345s ago: executing program 2 (id=419): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01ea00000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 11.809416929s ago: executing program 2 (id=420): socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x2, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000140)={0xa041, 0x3, 0x2, 0x0, 0x6}, 0x30, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = syz_ublk_setup_io_uring(0x1f3, &(0x7f0000000a80)={0x0, 0xabba, 0x400, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f00000006c0)=0x0, &(0x7f0000000580)=0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000500)='net/anycast6\x00') lseek(r5, 0x1000000, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000001c000000000000a6871ce8000000000cd5b33ded90ff670000"], 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000ffff2abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1503e3ffb309180008000a00", @ANYRES64=r0, @ANYBLOB="240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES16=r6], 0x54}, 0x1, 0x0, 0x0, 0x24004845}, 0x8000002) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="0023020000000b08284d3efd9ee3e3417106e5e29fa26c701cd0037312503db9b25664b7be0de74b2ba37a08a5a197055974951f00000098fc5c65e82776556c03caa97906701cb0"], 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000054}, 0x2000c000) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500200000040cc1700104000010203010902600003010910040904"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) syz_ublk_add_dev(r5, r2, r3, r4, &(0x7f00000002c0)={0x2e, 0x2d, 0x0, r8, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, r9, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000280)=@any_dev={0x2004, 0x67a, 0x0, 0x0, 0x1000, 0xa8, 0x0, 0x0, 0x4a}}}, &(0x7f0000000540)=0x0) syz_ublk_setup_queues(r11, r12, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x21}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x1, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) 11.807780683s ago: executing program 0 (id=431): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0xfff}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f00000005c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00}, 0x97) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003500)={0x20, 0x2f, 0x9, 0x70bd27, 0x25dfdbfe, {0x4}, [@nested={0x8, 0x11, 0x0, 0x1, [@nested={0x4, 0x11b}]}, @typed={0x4, 0x102}]}, 0x20}, 0x1, 0x0, 0x0, 0x42914}, 0x40000d4) 10.510683028s ago: executing program 3 (id=424): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x90, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfdfffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xe, 0xa}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x64, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x1, '\x00', 0x0, 0x9, 0x2, 0x7}}, @TCA_CBS_PARMS={0x18, 0x1, {0xa7, '\x00', 0x2, 0x1, 0x2, 0x181}}, @TCA_CBS_PARMS={0x18, 0x1, {0x9, '\x00', 0x5787, 0xffffffd5, 0x3ff, 0x8}}, @TCA_CBS_PARMS={0x18, 0x1, {0xf0, '\x00', 0x2, 0x8, 0xf}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0x6}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x10000, 0x8, 0xbb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x85c}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000810}, 0x4000080) close(0x3) 10.50958894s ago: executing program 0 (id=425): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8002) ioctl$SG_IO(r2, 0x2285, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0205710, &(0x7f0000000640)={0x0, 0x7, 0x9}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r4, 0x700, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={0xffffffffffffffff, &(0x7f0000000500)="7c7acf3c2e1a5fcd45ffb2d359d8ed352e88e0ef7843a6bc82096294a112176252598064f5d41bc714c022be5136a106a546bb335aee0e0d1aaa5e76654683303ecb65b61789d4104685c4d6bd58af296de4d2d16e81", &(0x7f0000000580)=""/10}, 0x1c) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'pim6reg1\x00', &(0x7f00000001c0)=@ethtool_pauseparam={0x1b, 0x4, 0x62, 0x5}}) r5 = socket$kcm(0x10, 0x2, 0x0) removexattr(&(0x7f0000000280)='./file2\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="73656308000000792e0600000000"]) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa, 0x0, 0x6, 0x0, 0x4000000000000009, 0x10200}) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240006000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x7d8}, 0x1, 0x0, 0x0, 0x4}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) 9.255981671s ago: executing program 3 (id=427): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x20000000) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000240)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x2804c8c4}, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x2}, 0x8) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8b0b, &(0x7f0000000180)={'virt_wifi0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x0) fchown(r5, 0x0, 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc01c586a, &(0x7f00000004c0)={r0, &(0x7f00000003c0)='(-!\x00', 0x84080, &(0x7f0000000400)={@align, {0x7, 0x4, 0x7, 0xca}}, 0x4, &(0x7f0000000440), &(0x7f0000000480)=0x9}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="8f0079de849a72fc700601000000000000004b8a00007857bbaa8d6f3e4fc30f5f891ae304f93bd41a720555407ee57f1e92e0fe4c67cfeabf3a19a4bab49cd324c8ae4b613777c95452fd2d5244c3a545d20daf69d741bf4ceb1cefc3b7b4b1425f1e92184dfcb90bc32f4955497999f55ef5a80ad98961558600c0404f3e86e442bac98de33002fe6e7733b5fe318c5a47c8b762b8f6b317f423fc3d33059f1608be164fd4128a040b", @ANYRES16=r6, @ANYBLOB="300d28bd7000fbdbdf2500000000060006000400000008000400ac1e000108000500e00000020800080003000000080009000200000008000100", @ANYRES32=r1, @ANYBLOB="08000400ac1414bb08000700", @ANYRES32=r7, @ANYBLOB="14000b00fc0100000000000000000000000000010800040000000000"], 0x70}}, 0x100488c5) r8 = dup(r3) write(r8, &(0x7f0000000080)="16", 0x1) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xffffffff}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) 8.483686719s ago: executing program 2 (id=428): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x80000010}) 8.382228436s ago: executing program 4 (id=429): r0 = socket$netlink(0x10, 0x3, 0xc) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000000400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) 7.936141893s ago: executing program 3 (id=432): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x4000}, 0x4) 7.781907423s ago: executing program 2 (id=433): r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2) poll(&(0x7f0000000340)=[{r0, 0xa2f0}], 0x1, 0x10000) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000100)=0x4) 7.50986997s ago: executing program 1 (id=434): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000bc0)="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", 0x1e9}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df4050d43d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0xa0}, {&(0x7f0000000700)="f610e61fc81cc3edc86f0500094d27a5a42cf1880bd81fb7b8db6dc284c23b8d50", 0x21}], 0x4, 0x0, 0x0, 0x900}, 0x78050000}], 0x1, 0x4000000) 7.480550206s ago: executing program 3 (id=435): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0xfff}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f00000005c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00}, 0x97) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003500)={0x20, 0x2f, 0x9, 0x70bd27, 0x25dfdbfe, {0x4}, [@nested={0x8, 0x11, 0x0, 0x1, [@nested={0x4, 0x11b}]}, @typed={0x4, 0x102}]}, 0x20}, 0x1, 0x0, 0x0, 0x42914}, 0x40000d4) 7.328623321s ago: executing program 2 (id=436): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000010000304000000000000000000000420", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRES32=r1], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x8044) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4008054) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000200)='bridge0\x00') openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000280)="1a", 0x1}], 0x1}, 0x8001) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000700)="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", 0x161}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20040050) getdents(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9a000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mremap(&(0x7f0000af3000/0x4000)=nil, 0x4000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) landlock_restrict_self(0xffffffffffffffff, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f00001d3000/0x3000)=nil, 0x3000, 0x1000001, 0x810, 0xffffffffffffffff, 0xb9894000) io_uring_setup(0x3454, 0x0) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003"], 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000400)}, 0xff00) recvmsg$kcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/4095, 0xfff}], 0x2}, 0x40000000) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x11, 0x2, 0x10001) 7.190622817s ago: executing program 1 (id=437): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @ifru_ivalue=0x8}) ioctl$sock_ifreq(r0, 0x8936, 0x0) syz_usb_connect(0x0, 0x5e, &(0x7f00000003c0)=ANY=[@ANYBLOB="12011003cff3a040c6051834f65f0102030109024c0001031c12000904cf01000206000f052406000105240008000d240f01070000000e0000801406241a000804052406fc0005030006000d240f", @ANYRES16=r0, @ANYRESDEC=r0], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x20000000000000b5}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYRES16=r1], 0x60}, 0x1, 0x0, 0x0, 0x2000c811}, 0x1) sendmsg$IPSET_CMD_DESTROY(r2, 0x0, 0x4008400) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f00000000c0)={'bridge0\x00', @ifru_ivalue=0x8005}) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000100)={'bridge0\x00', @ifru_ivalue=0xb}) ioctl$sock_ifreq(r0, 0x8993, &(0x7f0000000000)={'bridge0\x00', @ifru_map={0x3, 0x9, 0x3, 0x40, 0x6, 0x5}}) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000180)={'bridge0\x00', @ifru_ivalue=0xd}) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000200)={'bridge0\x00', @ifru_ivalue=0xf}) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000240)={'bridge0\x00', @ifru_ivalue=0x10}) ioctl$sock_ifreq(r2, 0x89a2, &(0x7f0000000300)={'bridge0\x00', @ifru_addrs=@can}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'nr0\x00'}) 6.475828583s ago: executing program 3 (id=438): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe1a}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @multicast}, 0x10) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r2}, 0x14) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x4, 0x0, 0x8d, 0x4, 0x3, 0x6, 0x8, 0x19, 0x34, 0x25e, 0x408, 0x4, 0x20, 0x2, 0x5, 0x8, 0x1fd}, [{0x70000000, 0x8, 0x7, 0x3, 0x2, 0xc, 0x8, 0x7fffffff}, {0x4, 0xd, 0x40, 0x6, 0xfffffffb, 0x3049, 0x8000, 0x7}]}, 0x74) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setxattr$incfs_metadata(&(0x7f0000000480)='./cgroup\x00', &(0x7f0000000280), 0x0, 0x0, 0x2) mlock2(&(0x7f000004e000/0x4000)=nil, 0x4000, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) syz_usb_connect$uac1(0x2, 0x9e, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201010200000020050b431740000102030109028c00030109403f0904000000010100000a2401d2000a00020102090401000001020000090401010101020000072401080505000f2402020002ff0f00f441a4440fb209050109ff037808ba072501080403000904020000010200000904020101010200000f240202000007000223c586c54c01072501000e0300e7eb3381d03a03a016e6d7d3583e5811e4008da56117918ec584e8aa00a8459f05a579dd6516753a8097ccb0b400"/203], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000002780)={0x18, 0x2f, 0x9, 0x70bd28, 0x0, {0x4}, [@nested={0x4, 0x12}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r9, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000180)={0x1}) 6.235226057s ago: executing program 4 (id=439): socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x2, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000140)={0xa041, 0x3, 0x2, 0x0, 0x6}, 0x30, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) syz_ublk_setup_io_uring(0x1f3, &(0x7f0000000a80)={0x0, 0xabba, 0x400, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f00000006c0)=0x0, &(0x7f0000000580)=0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000500)='net/anycast6\x00') lseek(r4, 0x1000000, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000001c000000000000a6871ce8000000000cd5b33ded90ff670000"], 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000ffff2abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1503e3ffb309180008000a00", @ANYRES64=r0, @ANYBLOB="240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES16=r5], 0x54}, 0x1, 0x0, 0x0, 0x24004845}, 0x8000002) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500200000040cc1700104000010203010902600003010910040904"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) syz_ublk_add_dev(r4, r1, r2, r3, &(0x7f00000002c0)={0x2e, 0x2d, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000280)=@any_dev={0x2004, 0x67a, 0x0, 0x0, 0x1000, 0xa8, 0x0, 0x0, 0x4a}}}, &(0x7f0000000540)=0x0) syz_ublk_setup_queues(r7, r8, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x21}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x1, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000180)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9ffff28bbe044ff092403f3", @ANYRES8, @ANYRES64], 0x0) 6.038494316s ago: executing program 0 (id=440): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e515bce1e8", 0x14}], 0x1}, 0x840) 5.854270958s ago: executing program 0 (id=441): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, 0x0, &(0x7f0000000440)) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911052000000000095"], 0x0}, 0x94) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000140)=0x4) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1, 0x80000001}}}, 0x88) ioperm(0x0, 0x6e, 0xe) syz_clone(0xa088067dddde4d7e, 0x0, 0x0, 0x0, 0x0, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f00000000c0)={0x8001, 0x5, 0x4d, 0x2}, 0x0) r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0xffffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x4, 0x0, 0x80}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000000)=0x1) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1401100100000040f80600b04000010203010902600003010900080904000000010100000a240106000a00020102090401000001020000090401010101ffff000905", @ANYBLOB="75c8"], 0x0) ioctl$USBDEVFS_CLEAR_HALT(r1, 0xc0105502, &(0x7f0000000040)={0x1, 0x1}) 5.399014696s ago: executing program 1 (id=442): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000240)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x2804c8c4}, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x2}, 0x8) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8b0b, &(0x7f0000000180)={'virt_wifi0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x0) fchown(r5, 0x0, 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc01c586a, &(0x7f00000004c0)={r0, &(0x7f00000003c0)='(-!\x00', 0x84080, &(0x7f0000000400)={@align, {0x7, 0x4, 0x7, 0xca}}, 0x4, &(0x7f0000000440), &(0x7f0000000480)=0x9}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="8f0079de849a72fc700601000000000000004b8a00007857bbaa8d6f3e4fc30f5f891ae304f93bd41a720555407ee57f1e92e0fe4c67cfeabf3a19a4bab49cd324c8ae4b613777c95452fd2d5244c3a545d20daf69d741bf4ceb1cefc3b7b4b1425f1e92184dfcb90bc32f4955497999f55ef5a80ad98961558600c0404f3e86e442bac98de33002fe6e7733b5fe318c5a47c8b762b8f6b317f423fc3d33059f1608be164fd4128a040b", @ANYRES16=r6, @ANYBLOB="300d28bd7000fbdbdf2500000000060006000400000008000400ac1e000108000500e00000020800080003000000080009000200000008000100", @ANYRES32=r1, @ANYBLOB="08000400ac1414bb08000700", @ANYRES32=r7, @ANYBLOB="14000b00fc0100000000000000000000000000010800040000000000"], 0x70}}, 0x100488c5) r8 = dup(r3) write(r8, &(0x7f0000000080)="16", 0x1) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xffffffff}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) 5.071613097s ago: executing program 1 (id=443): geteuid() r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='fdinfo\x00') getdents64(r1, &(0x7f00000008c0)=""/4096, 0x18) 4.134741535s ago: executing program 1 (id=444): r0 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x80000010}) 3.840079467s ago: executing program 1 (id=445): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000006c0)={0x0, 0xffffffffffffffbc, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="413fb06e", @ANYRESDEC=r1, @ANYRES16=r1], 0x30}}, 0x60000810) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000006c0)={0x0, 0xffffffffffffffbc, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="413fb06e", @ANYRESDEC=r1, @ANYRES16=r1], 0x30}}, 0x60000810) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) getpid() ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f00000001c0)={0x0, 0x9, 0x9, 0xc0ab}) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a01010000000000000000070000090500010073797a310000000014"], 0x48}, 0x1, 0x0, 0x0, 0x2c00c082}, 0x20000048) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a01010000000000000000070000090500010073797a310000000014"], 0x48}, 0x1, 0x0, 0x0, 0x2c00c082}, 0x20000048) r8 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r10 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r10, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r10, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0xffffffff}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r10, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0xffffffff}) write$binfmt_misc(r9, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000000500)={r9, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x3f00, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe10804000000af8e0e3dc11d875397bdb22d0000b420a1a93e527d3d458d080000000000000000000000000000000000000000004300", "f4bd00000080190000efffca0000000000001a000000ff00", [0x2]}}) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000200)={0x44, r7, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}]}, 0x44}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_KEY(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000200)={0x44, r7, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000080)={0x1c, r6, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x40) 0s ago: executing program 4 (id=446): r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2) poll(&(0x7f0000000340)=[{r0, 0xa2f0}], 0x1, 0x10000) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000100)=0x4) kernel console output (not intermixed with test programs): Call Trace: [ 131.666173][ T6485] [ 131.666209][ T6485] dump_stack_lvl+0xe8/0x150 [ 131.666327][ T6485] should_fail_ex+0x410/0x560 [ 131.666435][ T6485] should_failslab+0xa8/0x100 [ 131.666503][ T6485] ? skb_clone+0x212/0x3a0 [ 131.666584][ T6485] kmem_cache_alloc_noprof+0xa1/0x600 [ 131.666657][ T6485] ? skb_clone+0x212/0x3a0 [ 131.666746][ T6485] skb_clone+0x212/0x3a0 [ 131.666830][ T6485] __netlink_deliver_tap+0x413/0x860 [ 131.666936][ T6485] ? netlink_deliver_tap+0x2e/0x1b0 [ 131.667019][ T6485] netlink_deliver_tap+0x19c/0x1b0 [ 131.667099][ T6485] netlink_unicast+0x781/0x940 [ 131.667192][ T6485] netlink_sendmsg+0x813/0xb40 [ 131.667290][ T6485] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.667387][ T6485] ? apparmor_socket_sendmsg+0x98/0x360 [ 131.667483][ T6485] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.667573][ T6485] sock_sendmsg_nosec+0x13a/0x180 [ 131.667681][ T6485] ____sys_sendmsg+0x54e/0x850 [ 131.667766][ T6485] ? __pfx_____sys_sendmsg+0x10/0x10 [ 131.667879][ T6485] ___sys_sendmsg+0x2a5/0x360 [ 131.667940][ T6485] ? __lock_acquire+0x6df/0x2e50 [ 131.668016][ T6485] ? __pfx____sys_sendmsg+0x10/0x10 [ 131.668082][ T6485] ? get_pid_task+0x20/0x1f0 [ 131.668136][ T6485] ? get_pid_task+0x20/0x1f0 [ 131.668188][ T6485] ? get_pid_task+0x20/0x1f0 [ 131.668316][ T6485] ? __fget_files+0x2a/0x420 [ 131.668390][ T6485] ? __fget_files+0x3a2/0x420 [ 131.668494][ T6485] __sys_sendmsg+0x177/0x240 [ 131.668577][ T6485] ? __pfx___sys_sendmsg+0x10/0x10 [ 131.668700][ T6485] __do_fast_syscall_32+0x27a/0x6a0 [ 131.668764][ T6485] ? do_fast_syscall_32+0x33/0x70 [ 131.668817][ T6485] ? asm_int80_emulation+0x1a/0x20 [ 131.668872][ T6485] ? do_int80_emulation+0x299/0x500 [ 131.668932][ T6485] ? trace_irq_disable+0x3b/0x140 [ 131.669022][ T6485] do_fast_syscall_32+0x33/0x70 [ 131.669104][ T6485] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 131.669169][ T6485] RIP: 0023:0xf704f0ec [ 131.669229][ T6485] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 131.669272][ T6485] RSP: 002b:00000000f543d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 131.669326][ T6485] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000200 [ 131.669367][ T6485] RDX: 0000000000044000 RSI: 0000000000000000 RDI: 0000000000000000 [ 131.669399][ T6485] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 131.669431][ T6485] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 131.669463][ T6485] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 131.669543][ T6485] [ 131.994019][ T6489] netlink: 36 bytes leftover after parsing attributes in process `syz.3.201'. [ 132.003230][ T6489] netlink: 22 bytes leftover after parsing attributes in process `syz.3.201'. [ 132.133791][ T6491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.204'. [ 132.134053][ T6491] macvlan2: left allmulticast mode [ 132.134167][ T6491] macvlan2: left promiscuous mode [ 132.134943][ T6491] bridge0: port 3(macvlan2) entered disabled state [ 132.172169][ T6491] bridge_slave_1: left allmulticast mode [ 132.172230][ T6491] bridge_slave_1: left promiscuous mode [ 132.177073][ T6491] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.195881][ T6491] bridge_slave_0: left allmulticast mode [ 132.195936][ T6491] bridge_slave_0: left promiscuous mode [ 132.207651][ T6491] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.579738][ T5697] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 132.619269][ T6508] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.624031][ T6508] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.725223][ T6508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.734563][ T5697] usb 2-1: unable to get BOS descriptor or descriptor too short [ 132.734638][ T5697] usb 2-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 132.738076][ T5697] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.738312][ T5697] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 132.738488][ T5697] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 132.786480][ T5697] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 132.786541][ T5697] usb 2-1: Product: syz [ 132.786557][ T5697] usb 2-1: Manufacturer: syz [ 132.786608][ T5697] usb 2-1: SerialNumber: syz [ 132.814063][ T6508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.951815][ T6508] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 132.959826][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.960530][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.999645][ T1011] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.999714][ T1011] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.999796][ T1011] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.999837][ T1011] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.481303][ T5697] usb 2-1: USB disconnect, device number 11 [ 133.654045][ T6525] udevd[6525]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 133.789536][ T5684] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 133.939563][ T5684] usb 5-1: Using ep0 maxpacket: 16 [ 133.947401][ T5684] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 133.961551][ T5684] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.961597][ T5684] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 133.985225][ T5684] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.995198][ T5684] usb 5-1: Product: syz [ 134.001162][ T5684] usb 5-1: Manufacturer: syz [ 134.001185][ T5684] usb 5-1: SerialNumber: syz [ 134.025215][ T5684] usb 5-1: 0:2 : does not exist [ 134.298074][ T5684] usb 5-1: USB disconnect, device number 14 [ 134.345124][ T5621] udevd[5621]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 134.474022][ T6534] FAULT_INJECTION: forcing a failure. [ 134.474022][ T6534] name failslab, interval 1, probability 0, space 0, times 0 [ 134.474091][ T6534] CPU: 1 UID: 0 PID: 6534 Comm: syz.1.214 Tainted: G L syzkaller #0 PREEMPT(full) [ 134.474119][ T6534] Tainted: [L]=SOFTLOCKUP [ 134.474126][ T6534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 134.474187][ T6534] Call Trace: [ 134.474219][ T6534] [ 134.474255][ T6534] dump_stack_lvl+0xe8/0x150 [ 134.474347][ T6534] should_fail_ex+0x410/0x560 [ 134.474436][ T6534] should_failslab+0xa8/0x100 [ 134.474500][ T6534] __kvmalloc_node_noprof+0x176/0x820 [ 134.474588][ T6534] ? bpf_jit_binary_pack_alloc+0x10a/0x300 [ 134.474647][ T6534] ? bpf_jit_binary_pack_alloc+0x10a/0x300 [ 134.474747][ T6534] bpf_jit_binary_pack_alloc+0x10a/0x300 [ 134.474817][ T6534] ? __pfx_jit_fill_hole+0x10/0x10 [ 134.474910][ T6534] bpf_int_jit_compile+0xa16/0x17e0 [ 134.475044][ T6534] ? __pfx_bpf_int_jit_compile+0x10/0x10 [ 134.475146][ T6534] ? rcu_is_watching+0x16/0xb0 [ 134.475217][ T6534] ? trace_kmalloc+0x2a/0xf0 [ 134.475331][ T6534] __bpf_prog_select_runtime+0x53e/0xbf0 [ 134.475432][ T6534] bpf_check+0x23e7/0x2e10 [ 134.475518][ T6534] ? ktime_get_with_offset+0x93/0x2d0 [ 134.475590][ T6534] ? __pfx_bpf_check+0x10/0x10 [ 134.475668][ T6534] ? bpf_obj_name_cpy+0x194/0x1e0 [ 134.475777][ T6534] bpf_prog_load+0x14d6/0x1c20 [ 134.475871][ T6534] ? __pfx_bpf_prog_load+0x10/0x10 [ 134.476006][ T6534] __sys_bpf+0xd0d/0xd90 [ 134.476088][ T6534] ? __pfx___sys_bpf+0x10/0x10 [ 134.476160][ T6534] ? ksys_write+0x1e6/0x270 [ 134.476256][ T6534] ? __mutex_unlock_slowpath+0x731/0x900 [ 134.476380][ T6534] ? fput+0xa0/0xd0 [ 134.476450][ T6534] ? ksys_write+0x242/0x270 [ 134.476545][ T6534] __ia32_sys_bpf+0xba/0xd0 [ 134.476609][ T6534] __do_fast_syscall_32+0x27a/0x6a0 [ 134.476672][ T6534] ? do_fast_syscall_32+0x33/0x70 [ 134.476732][ T6534] ? asm_int80_emulation+0x1a/0x20 [ 134.476781][ T6534] ? do_int80_emulation+0x299/0x500 [ 134.476826][ T6534] ? trace_irq_disable+0x3b/0x140 [ 134.476897][ T6534] do_fast_syscall_32+0x33/0x70 [ 134.476951][ T6534] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 134.477030][ T6534] RIP: 0023:0xf7fc80ec [ 134.477090][ T6534] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 134.477149][ T6534] RSP: 002b:00000000f548650c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 134.477214][ T6534] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000900 [ 134.477264][ T6534] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 134.477297][ T6534] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 134.477329][ T6534] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 134.477362][ T6534] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 134.477442][ T6534] [ 135.209482][ T6548] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:00fc with DS=0x1 [ 135.220191][ T6545] process 'syz.0.217' launched './file0' with NULL argv: empty string added [ 135.339921][ T5684] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 135.499550][ T5684] usb 3-1: Using ep0 maxpacket: 16 [ 135.507039][ T5684] usb 3-1: unable to get BOS descriptor or descriptor too short [ 135.515026][ T5684] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40 [ 135.534369][ T5684] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.534416][ T5684] usb 3-1: Product: syz [ 135.534461][ T5684] usb 3-1: Manufacturer: syz [ 135.534481][ T5684] usb 3-1: SerialNumber: syz [ 135.832656][ T6536] netlink: 14 bytes leftover after parsing attributes in process `syz.2.215'. [ 135.945014][ T5684] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 136.400145][ T5684] usb 3-1: USB disconnect, device number 8 [ 136.448752][ T5622] Bluetooth: hci1: unexpected event for opcode 0x2024 [ 136.490228][ T6573] netlink: 'syz.1.229': attribute type 10 has an invalid length. [ 136.545939][ T6576] netlink: 'syz.1.229': attribute type 10 has an invalid length. [ 136.575735][ T5621] udevd[5621]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.666562][ T6573] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 136.691070][ T6573] team0: Port device netdevsim1 added [ 137.012676][ T6584] bond_slave_0: Caught tx_queue_len zero misconfig [ 137.529771][ T5697] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 137.689086][ T5697] usb 2-1: unable to get BOS descriptor or descriptor too short [ 137.689166][ T5697] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 137.703456][ T5697] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.703686][ T5697] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 137.738488][ T5697] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.738553][ T5697] usb 2-1: Product: syz [ 137.738589][ T5697] usb 2-1: Manufacturer: syz [ 137.738605][ T5697] usb 2-1: SerialNumber: syz [ 137.752499][ T5684] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 137.919533][ T5684] usb 1-1: Using ep0 maxpacket: 16 [ 137.940304][ T6595] netlink: 40 bytes leftover after parsing attributes in process `syz.0.235'. [ 137.940453][ T6595] netlink: 40 bytes leftover after parsing attributes in process `syz.0.235'. [ 138.028998][ T6604] netlink: 40 bytes leftover after parsing attributes in process `syz.0.235'. [ 138.029162][ T6604] netlink: 40 bytes leftover after parsing attributes in process `syz.0.235'. [ 138.198695][ T6610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.209561][ T6610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.271250][ T6595] netlink: 40 bytes leftover after parsing attributes in process `syz.0.235'. [ 138.271354][ T6595] netlink: 40 bytes leftover after parsing attributes in process `syz.0.235'. [ 138.309589][ T5683] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 138.343902][ T6604] netlink: 40 bytes leftover after parsing attributes in process `syz.0.235'. [ 138.344057][ T6604] netlink: 40 bytes leftover after parsing attributes in process `syz.0.235'. [ 138.375014][ T5697] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 138.459790][ T5683] usb 3-1: Using ep0 maxpacket: 32 [ 138.468729][ T5683] usb 3-1: New USB device found, idVendor=056a, idProduct=0015, bcdDevice= 0.00 [ 138.479910][ T5683] usb 3-1: too many endpoints for config 0 interface 0 altsetting 4: 132, using maximum allowed: 30 [ 138.490955][ T5683] usb 3-1: config 0 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 132 [ 138.490991][ T5683] usb 3-1: config 0 interface 0 has no altsetting 0 [ 138.491056][ T5683] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.532767][ T5683] usb 3-1: config 0 descriptor?? [ 138.636447][ T6595] netlink: 40 bytes leftover after parsing attributes in process `syz.0.235'. [ 138.694744][ T5697] usb 2-1: USB disconnect, device number 12 [ 138.759939][ T5683] usbhid 3-1:0.0: can't add hid device: -71 [ 138.766191][ T5683] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 138.781365][ T5684] usb 1-1: unable to get BOS descriptor or descriptor too short [ 138.781434][ T5684] usb 1-1: New USB device found, idVendor=0582, idProduct=0156, bcdDevice= 0.40 [ 138.805335][ T5684] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 138.805391][ T5684] usb 1-1: can't read configurations, error -71 [ 138.823966][ T5683] usb 3-1: USB disconnect, device number 9 [ 138.917224][ T5621] udevd[5621]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 138.999784][ T6622] syzkaller0: entered promiscuous mode [ 138.999834][ T6622] syzkaller0: entered allmulticast mode [ 139.079576][ T6470] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 139.209530][ T6470] usb 5-1: device descriptor read/64, error -71 [ 139.359914][ T5683] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 139.450602][ T6470] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 139.519575][ T5683] usb 2-1: Using ep0 maxpacket: 16 [ 139.525501][ T5683] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 139.541544][ T5683] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.541588][ T5683] usb 2-1: Product: syz [ 139.541620][ T5683] usb 2-1: Manufacturer: syz [ 139.541640][ T5683] usb 2-1: SerialNumber: syz [ 139.591398][ T6470] usb 5-1: device descriptor read/64, error -71 [ 139.638752][ T6647] FAULT_INJECTION: forcing a failure. [ 139.638752][ T6647] name failslab, interval 1, probability 0, space 0, times 0 [ 139.664289][ T6647] CPU: 0 UID: 0 PID: 6647 Comm: syz.3.250 Tainted: G L syzkaller #0 PREEMPT(full) [ 139.664325][ T6647] Tainted: [L]=SOFTLOCKUP [ 139.664333][ T6647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 139.664346][ T6647] Call Trace: [ 139.664354][ T6647] [ 139.664363][ T6647] dump_stack_lvl+0xe8/0x150 [ 139.664420][ T6647] should_fail_ex+0x410/0x560 [ 139.664460][ T6647] should_failslab+0xa8/0x100 [ 139.664487][ T6647] __kmalloc_noprof+0xfe/0x720 [ 139.664534][ T6647] ? tomoyo_encode+0x2ad/0x570 [ 139.664557][ T6647] ? tomoyo_encode+0x2ad/0x570 [ 139.664588][ T6647] tomoyo_encode+0x2ad/0x570 [ 139.664619][ T6647] tomoyo_realpath_from_path+0x5fa/0x640 [ 139.664656][ T6647] ? tomoyo_path_number_perm+0x219/0x5f0 [ 139.664691][ T6647] tomoyo_path_number_perm+0x246/0x5f0 [ 139.664728][ T6647] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 139.664771][ T6647] ? __lock_acquire+0x6df/0x2e50 [ 139.664807][ T6647] ? hook_file_ioctl_compat+0x1f2/0x600 [ 139.664852][ T6647] ? __fget_files+0x2a/0x420 [ 139.664886][ T6647] ? __fget_files+0x3a2/0x420 [ 139.664914][ T6647] ? __fget_files+0x2a/0x420 [ 139.664947][ T6647] security_file_ioctl_compat+0xc3/0x2a0 [ 139.664983][ T6647] __ia32_compat_sys_ioctl+0x139/0x950 [ 139.665010][ T6647] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 139.665036][ T6647] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 139.665072][ T6647] ? __fget_files+0x3a2/0x420 [ 139.665127][ T6647] ? fput+0xa0/0xd0 [ 139.665154][ T6647] ? ksys_write+0x242/0x270 [ 139.665199][ T6647] __do_fast_syscall_32+0x27a/0x6a0 [ 139.665224][ T6647] ? do_fast_syscall_32+0x33/0x70 [ 139.665247][ T6647] ? asm_int80_emulation+0x1a/0x20 [ 139.665268][ T6647] ? do_int80_emulation+0x299/0x500 [ 139.665303][ T6647] do_fast_syscall_32+0x33/0x70 [ 139.665326][ T6647] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 139.665354][ T6647] RIP: 0023:0xf706f0ec [ 139.665375][ T6647] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 139.665395][ T6647] RSP: 002b:00000000f545d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 139.665419][ T6647] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040045612 [ 139.665435][ T6647] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 139.665448][ T6647] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 139.665462][ T6647] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 139.665476][ T6647] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 139.665508][ T6647] [ 139.733257][ T6470] usb usb5-port1: attempt power cycle [ 139.767094][ T6647] ERROR: Out of memory at tomoyo_realpath_from_path. [ 139.928468][ T5684] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 139.953974][ T5683] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 139.973958][ T5683] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 139.984898][ T5683] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 139.996631][ T5683] usb 2-1: media controller created [ 140.018992][ T5683] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 140.079562][ T5684] usb 1-1: device descriptor read/64, error -71 [ 140.192555][ T5684] usb usb1-port1: attempt power cycle [ 140.270831][ T5683] zl10353_read_register: readreg error (reg=127, ret==-110) [ 140.294086][ T6470] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 140.318656][ T6659] netlink: 'syz.2.254': attribute type 13 has an invalid length. [ 140.328214][ T6470] usb 5-1: device descriptor read/8, error -71 [ 140.388217][ T5683] dvb_usb_gl861 2-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 140.403829][ T5683] usb 2-1: USB disconnect, device number 13 [ 140.469916][ T5622] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 140.469995][ T5622] Bluetooth: hci1: Injecting HCI hardware error event [ 140.474073][ T5622] Bluetooth: hci1: hardware error 0x00 [ 140.549567][ T5684] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 140.569831][ T6470] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 140.571878][ T5684] usb 1-1: device descriptor read/8, error -71 [ 140.589543][ T5745] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 140.597808][ T6470] usb 5-1: device descriptor read/8, error -71 [ 140.619613][ T31] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 140.701717][ T6470] usb usb5-port1: unable to enumerate USB device [ 140.729560][ T5745] usb 4-1: device descriptor read/64, error -71 [ 140.770439][ T31] usb 3-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.40 [ 140.780771][ T31] usb 3-1: config 1 interface 0 has no altsetting 0 [ 140.790505][ T31] usb 3-1: string descriptor 0 read error: -22 [ 140.796930][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.810820][ T5684] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 140.831024][ T5684] usb 1-1: device descriptor read/8, error -71 [ 140.940629][ T5684] usb usb1-port1: unable to enumerate USB device [ 140.979886][ T5745] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 141.140872][ T5745] usb 4-1: device descriptor read/64, error -71 [ 141.249839][ T5745] usb usb4-port1: attempt power cycle [ 141.299715][ T5684] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 141.451178][ T5684] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 141.455927][ T5684] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.456009][ T5684] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 141.456146][ T5684] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.474840][ T5684] usb 2-1: config 0 descriptor?? [ 141.497731][ T5684] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 141.523956][ T5684] dvb-usb: bulk message failed: -22 (3/0) [ 141.534472][ T5684] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 141.541244][ T5684] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 141.541447][ T5684] usb 2-1: media controller created [ 141.566617][ T5684] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 141.589562][ T5745] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 141.604361][ T5684] dvb-usb: bulk message failed: -22 (6/0) [ 141.604670][ T5684] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 141.619314][ T5745] usb 4-1: device descriptor read/8, error -71 [ 141.632838][ T5684] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8 [ 141.669315][ T5684] dvb-usb: schedule remote query interval to 150 msecs. [ 141.669372][ T5684] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 141.821543][ T6470] dvb-usb: bulk message failed: -22 (1/0) [ 141.821634][ T6470] dvb-usb: error while querying for an remote control event. [ 141.849550][ T5745] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 141.874251][ T5745] usb 4-1: device descriptor read/8, error -71 [ 141.990102][ T5745] usb usb4-port1: unable to enumerate USB device [ 141.991006][ T5684] dvb-usb: bulk message failed: -22 (1/0) [ 141.991101][ T5684] dvb-usb: error while querying for an remote control event. [ 142.084817][ T31] usbhid 3-1:1.0: can't add hid device: -71 [ 142.095068][ T31] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 142.127388][ T31] usb 3-1: USB disconnect, device number 10 [ 142.164105][ T5684] dvb-usb: bulk message failed: -22 (1/0) [ 142.164173][ T5684] dvb-usb: error while querying for an remote control event. [ 142.207495][ T6685] __nla_validate_parse: 4 callbacks suppressed [ 142.215526][ T6685] netlink: 24 bytes leftover after parsing attributes in process `syz.4.261'. [ 142.320152][ T6470] dvb-usb: bulk message failed: -22 (1/0) [ 142.320813][ T6470] dvb-usb: error while querying for an remote control event. [ 142.480321][ T5683] dvb-usb: bulk message failed: -22 (1/0) [ 142.493309][ T5683] dvb-usb: error while querying for an remote control event. [ 142.539582][ T5684] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 142.551505][ T5622] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 142.651256][ T6470] dvb-usb: bulk message failed: -22 (1/0) [ 142.653702][ T6470] dvb-usb: error while querying for an remote control event. [ 142.672497][ T5684] usb 5-1: device descriptor read/64, error -71 [ 142.821348][ T6470] dvb-usb: bulk message failed: -22 (1/0) [ 142.823762][ T6470] dvb-usb: error while querying for an remote control event. [ 142.979563][ T6470] dvb-usb: bulk message failed: -22 (1/0) [ 142.984111][ T5684] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 142.988283][ T6470] dvb-usb: error while querying for an remote control event. [ 143.141062][ T6470] dvb-usb: bulk message failed: -22 (1/0) [ 143.142248][ T6470] dvb-usb: error while querying for an remote control event. [ 143.150890][ T5684] usb 5-1: device descriptor read/64, error -71 [ 143.259837][ T5684] usb usb5-port1: attempt power cycle [ 143.299626][ T6470] dvb-usb: bulk message failed: -22 (1/0) [ 143.299682][ T6470] dvb-usb: error while querying for an remote control event. [ 143.480142][ T6470] dvb-usb: bulk message failed: -22 (1/0) [ 143.482586][ T6470] dvb-usb: error while querying for an remote control event. [ 143.599520][ T5684] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 143.622932][ T5684] usb 5-1: device descriptor read/8, error -71 [ 143.641831][ T5683] dvb-usb: bulk message failed: -22 (1/0) [ 143.641902][ T5683] dvb-usb: error while querying for an remote control event. [ 143.704331][ T27] IPVS: starting estimator thread 0... [ 143.789669][ T6711] IPVS: using max 38 ests per chain, 91200 per kthread [ 143.800938][ T5704] dvb-usb: bulk message failed: -22 (1/0) [ 143.801105][ T5704] dvb-usb: error while querying for an remote control event. [ 143.859576][ T5684] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 143.879755][ T6470] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 143.882189][ T5684] usb 5-1: device descriptor read/8, error -71 [ 143.960748][ T5704] dvb-usb: bulk message failed: -22 (1/0) [ 143.960891][ T5704] dvb-usb: error while querying for an remote control event. [ 143.990076][ T5684] usb usb5-port1: unable to enumerate USB device [ 144.032067][ T6470] usb 1-1: unable to get BOS descriptor or descriptor too short [ 144.034745][ T6470] usb 1-1: not running at top speed; connect to a high speed hub [ 144.034939][ T6470] usb 1-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 144.040976][ T6470] usb 1-1: config 1 has an invalid descriptor of length 231, skipping remainder of the config [ 144.041062][ T6470] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 144.041101][ T6470] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 144.060068][ T6470] usb 1-1: string descriptor 0 read error: -22 [ 144.060643][ T6470] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.120611][ T6470] usb 1-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 144.120663][ T6470] usb 1-1: found format II with max.bitrate = 512, frame size=4095 [ 144.124785][ T6470] usb 1-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 144.124869][ T6470] usb 1-1: found format II with max.bitrate = 512, frame size=4095 [ 144.146491][ T5684] dvb-usb: bulk message failed: -22 (1/0) [ 144.146640][ T5684] dvb-usb: error while querying for an remote control event. [ 144.299582][ T5684] dvb-usb: bulk message failed: -22 (1/0) [ 144.299661][ T5684] dvb-usb: error while querying for an remote control event. [ 144.366441][ T31] usb 2-1: USB disconnect, device number 14 [ 144.452194][ T6715] syzkaller1: entered promiscuous mode [ 144.452239][ T6715] syzkaller1: entered allmulticast mode [ 144.520452][ T31] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 144.856009][ T6726] netlink: 'syz.2.273': attribute type 13 has an invalid length. [ 145.150471][ T5684] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 145.224421][ T6470] usb 1-1: USB disconnect, device number 11 [ 145.249532][ T5704] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 145.311144][ T5684] usb 3-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.40 [ 145.326256][ T5684] usb 3-1: config 1 interface 0 has no altsetting 0 [ 145.350634][ T5684] usb 3-1: string descriptor 0 read error: -22 [ 145.357376][ T5684] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.757325][ T6746] netlink: 40 bytes leftover after parsing attributes in process `syz.1.280'. [ 146.031233][ T6753] netlink: 'syz.3.283': attribute type 28 has an invalid length. [ 146.041956][ T6753] netlink: 48 bytes leftover after parsing attributes in process `syz.3.283'. [ 146.054637][ T6753] bridge_slave_0: left allmulticast mode [ 146.062946][ T6753] bridge_slave_0: left promiscuous mode [ 146.063248][ T6753] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.109585][ T6470] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 146.129534][ T31] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 146.194418][ T6758] FAULT_INJECTION: forcing a failure. [ 146.194418][ T6758] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 146.209340][ T6758] CPU: 0 UID: 0 PID: 6758 Comm: syz.3.285 Tainted: G L syzkaller #0 PREEMPT(full) [ 146.209380][ T6758] Tainted: [L]=SOFTLOCKUP [ 146.209389][ T6758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 146.209403][ T6758] Call Trace: [ 146.209412][ T6758] [ 146.209425][ T6758] dump_stack_lvl+0xe8/0x150 [ 146.209463][ T6758] should_fail_ex+0x410/0x560 [ 146.209503][ T6758] prepare_alloc_pages+0x223/0x600 [ 146.209532][ T6758] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 146.209560][ T6758] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 146.209587][ T6758] ? __pfx_policy_nodemask+0x10/0x10 [ 146.209615][ T6758] ? do_raw_spin_lock+0x12b/0x2f0 [ 146.209651][ T6758] alloc_pages_mpol+0x21e/0x390 [ 146.209684][ T6758] alloc_pages_noprof+0xb1/0x2b0 [ 146.209715][ T6758] pte_alloc_one+0x22/0x370 [ 146.209743][ T6758] __pte_alloc+0x25/0x1a0 [ 146.209781][ T6758] copy_pmd_range+0x539a/0x5c10 [ 146.209831][ T6758] ? stack_depot_save_flags+0x33/0x7f0 [ 146.209880][ T6758] ? __pfx_copy_pmd_range+0x10/0x10 [ 146.209917][ T6758] ? __lock_acquire+0x6df/0x2e50 [ 146.209946][ T6758] ? mas_wr_store_type+0xf80/0x1980 [ 146.209986][ T6758] copy_page_range+0xc82/0x1290 [ 146.210032][ T6758] ? __pfx_copy_page_range+0x10/0x10 [ 146.210065][ T6758] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 146.210100][ T6758] ? __mapping_rmap_tree_augment_rotate+0x16e/0x1a0 [ 146.210140][ T6758] dup_mmap+0xf17/0x1dc0 [ 146.210192][ T6758] ? __pfx_dup_mmap+0x10/0x10 [ 146.210226][ T6758] ? do_raw_spin_lock+0x12b/0x2f0 [ 146.210279][ T6758] ? lock_acquire+0x115/0x350 [ 146.210319][ T6758] copy_mm+0x11a/0x480 [ 146.210349][ T6758] ? copy_process+0xd3c/0x43e0 [ 146.210375][ T6758] copy_process+0x1e75/0x43e0 [ 146.210419][ T6758] ? copy_process+0xd3c/0x43e0 [ 146.210466][ T6758] ? __pfx_copy_process+0x10/0x10 [ 146.210499][ T6758] ? get_pid_task+0x20/0x1f0 [ 146.210529][ T6758] kernel_clone+0x2d7/0x940 [ 146.210567][ T6758] ? __pfx_kernel_clone+0x10/0x10 [ 146.210609][ T6758] ? ksys_write+0x1e6/0x270 [ 146.210648][ T6758] __ia32_compat_sys_ia32_clone+0x1b4/0x230 [ 146.210674][ T6758] ? __fget_files+0x2a/0x420 [ 146.210705][ T6758] ? __pfx___ia32_compat_sys_ia32_clone+0x10/0x10 [ 146.210744][ T6758] ? ksys_write+0x242/0x270 [ 146.210790][ T6758] __do_fast_syscall_32+0x27a/0x6a0 [ 146.210815][ T6758] ? do_fast_syscall_32+0x33/0x70 [ 146.210838][ T6758] ? asm_int80_emulation+0x1a/0x20 [ 146.210859][ T6758] ? do_int80_emulation+0x299/0x500 [ 146.210880][ T6758] ? trace_irq_disable+0x3b/0x140 [ 146.210909][ T6758] do_fast_syscall_32+0x33/0x70 [ 146.210932][ T6758] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 146.210961][ T6758] RIP: 0023:0xf706f0ec [ 146.210982][ T6758] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 146.211002][ T6758] RSP: 002b:00000000f545d4bc EFLAGS: 00000206 ORIG_RAX: 0000000000000078 [ 146.211027][ T6758] RAX: ffffffffffffffda RBX: 0000000004104000 RCX: 0000000000000000 [ 146.211043][ T6758] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000080000200 [ 146.211059][ T6758] RBP: 00000000f7464f80 R08: 0000000000000000 R09: 0000000000000000 [ 146.211073][ T6758] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 146.211087][ T6758] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 146.211121][ T6758] [ 146.304493][ T31] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 146.304616][ T31] usb 1-1: too many configurations: 53, using maximum allowed: 8 [ 146.350919][ T6470] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 146.356658][ T6470] usb 2-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 146.356690][ T6470] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 146.443309][ T6470] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.443340][ T6470] usb 2-1: Product: syz [ 146.443355][ T6470] usb 2-1: Manufacturer: syz [ 146.443371][ T6470] usb 2-1: SerialNumber: syz [ 146.538690][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.538775][ T31] usb 1-1: Product: syz [ 146.538819][ T31] usb 1-1: Manufacturer: syz [ 146.538865][ T31] usb 1-1: SerialNumber: syz [ 146.609566][ T6470] usb 2-1: config 0 descriptor?? [ 146.911061][ T6766] bridge0: port 1(macvlan3) entered blocking state [ 146.919531][ T6766] bridge0: port 1(macvlan3) entered disabled state [ 146.919780][ T6766] macvlan3: entered allmulticast mode [ 146.937064][ T6766] macvlan3: entered promiscuous mode [ 146.978401][ T6750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.982712][ T6750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.119095][ T31] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 147.119194][ T31] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 147.119240][ T31] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 147.164328][ T31] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 147.196761][ T31] usb 1-1: USB disconnect, device number 12 [ 147.365748][ T6771] netlink: 'syz.3.288': attribute type 8 has an invalid length. [ 147.365789][ T6771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.288'. [ 147.504501][ T6470] mos7840 2-1:0.0: required endpoints missing [ 147.521958][ T6771] veth1_to_team: entered promiscuous mode [ 147.538435][ T6771] gretap0: entered promiscuous mode [ 147.572078][ T6771] veth1_to_team: left promiscuous mode [ 147.585318][ T6470] usb 2-1: USB disconnect, device number 15 [ 147.595961][ T5684] usbhid 3-1:1.0: can't add hid device: -71 [ 147.596191][ T5684] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 147.613461][ T6771] gretap0: left promiscuous mode [ 147.628169][ T6772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.289'. [ 147.777341][ T5684] usb 3-1: USB disconnect, device number 11 [ 148.079883][ T6787] netlink: 32 bytes leftover after parsing attributes in process `syz.3.292'. [ 148.475652][ T6794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.293'. [ 149.054014][ T6794] 8021q: adding VLAN 0 to HW filter on device bond1 [ 149.146826][ T6805] netlink: 32 bytes leftover after parsing attributes in process `syz.3.296'. [ 149.174769][ T6807] netlink: 'syz.2.294': attribute type 10 has an invalid length. [ 149.291768][ T6808] netlink: 'syz.2.294': attribute type 10 has an invalid length. [ 149.395119][ T6811] ksmbd: Unknown IPC event: 3, ignore. [ 149.949717][ T6808] team0: Port device netdevsim1 removed [ 150.007857][ T6808] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 150.075656][ T6808] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 150.342527][ T6470] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 150.501295][ T6470] usb 2-1: Using ep0 maxpacket: 8 [ 150.514995][ T6470] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 150.530683][ T6470] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.555979][ T6470] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.556088][ T6470] usb 2-1: Product: syz [ 150.561967][ T6470] usb 2-1: Manufacturer: syz [ 150.562022][ T6470] usb 2-1: SerialNumber: syz [ 150.595735][ T6470] usb 2-1: config 0 descriptor?? [ 150.623133][ T6470] iowarrior 2-1:0.0: no interrupt-in endpoint found [ 150.667945][ T6819] FAULT_INJECTION: forcing a failure. [ 150.667945][ T6819] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.683735][ T6819] CPU: 1 UID: 0 PID: 6819 Comm: syz.3.299 Tainted: G L syzkaller #0 PREEMPT(full) [ 150.683773][ T6819] Tainted: [L]=SOFTLOCKUP [ 150.683782][ T6819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 150.683796][ T6819] Call Trace: [ 150.683806][ T6819] [ 150.683815][ T6819] dump_stack_lvl+0xe8/0x150 [ 150.683853][ T6819] should_fail_ex+0x410/0x560 [ 150.683898][ T6819] _copy_to_iter+0x1e4/0x1810 [ 150.683948][ T6819] ? __asan_memset+0x22/0x50 [ 150.683986][ T6819] ? __pfx__copy_to_iter+0x10/0x10 [ 150.684031][ T6819] ? crng_make_state+0xb6/0x600 [ 150.684062][ T6819] get_random_bytes_user+0x1d0/0x3d0 [ 150.684095][ T6819] ? __pfx_get_random_bytes_user+0x10/0x10 [ 150.684145][ T6819] ? import_ubuf+0xfb/0x1d0 [ 150.684172][ T6819] __ia32_sys_getrandom+0x17a/0x270 [ 150.684202][ T6819] ? __pfx___ia32_sys_getrandom+0x10/0x10 [ 150.684246][ T6819] __do_fast_syscall_32+0x27a/0x6a0 [ 150.684272][ T6819] ? do_fast_syscall_32+0x33/0x70 [ 150.684294][ T6819] ? asm_int80_emulation+0x1a/0x20 [ 150.684316][ T6819] ? do_int80_emulation+0x299/0x500 [ 150.684338][ T6819] ? trace_irq_disable+0x3b/0x140 [ 150.684365][ T6819] do_fast_syscall_32+0x33/0x70 [ 150.684388][ T6819] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 150.684415][ T6819] RIP: 0023:0xf706f0ec [ 150.684434][ T6819] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 150.684454][ T6819] RSP: 002b:00000000f545d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000163 [ 150.684477][ T6819] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 00000000fffffdde [ 150.684494][ T6819] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 150.684508][ T6819] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 150.684522][ T6819] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 150.684536][ T6819] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 150.684567][ T6819] [ 150.985286][ T5697] usb 2-1: USB disconnect, device number 16 [ 152.371825][ T5745] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 152.541681][ T5745] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 152.552646][ T5745] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.565836][ T5745] usb 2-1: config 0 descriptor?? [ 152.578659][ T5745] cp210x 2-1:0.0: cp210x converter detected [ 152.909462][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 153.070153][ T6844] FAULT_INJECTION: forcing a failure. [ 153.070153][ T6844] name failslab, interval 1, probability 0, space 0, times 0 [ 153.070211][ T6844] CPU: 1 UID: 0 PID: 6844 Comm: syz.4.306 Tainted: G L syzkaller #0 PREEMPT(full) [ 153.070259][ T6844] Tainted: [L]=SOFTLOCKUP [ 153.070268][ T6844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 153.070282][ T6844] Call Trace: [ 153.070290][ T6844] [ 153.070301][ T6844] dump_stack_lvl+0xe8/0x150 [ 153.070339][ T6844] should_fail_ex+0x410/0x560 [ 153.070380][ T6844] ? __alloc_skb+0x1db/0x7a0 [ 153.070402][ T6844] should_failslab+0xa8/0x100 [ 153.070431][ T6844] ? __alloc_skb+0x1db/0x7a0 [ 153.070451][ T6844] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 153.070488][ T6844] ? do_raw_write_lock+0x11d/0x260 [ 153.070519][ T6844] ? __alloc_skb+0x1db/0x7a0 [ 153.070549][ T6844] __alloc_skb+0x1db/0x7a0 [ 153.070577][ T6844] tipc_buf_acquire+0x2b/0xe0 [ 153.070611][ T6844] tipc_named_withdraw+0x1e6/0x760 [ 153.070661][ T6844] tipc_nametbl_withdraw+0x108/0x2d0 [ 153.070693][ T6844] tipc_release+0x80c/0x24d0 [ 153.070737][ T6844] ? __pfx_tipc_release+0x10/0x10 [ 153.070768][ T6844] ? down_write+0x16b/0x200 [ 153.070793][ T6844] ? __pfx_down_write+0x10/0x10 [ 153.070831][ T6844] __sock_release+0xa0/0x1f0 [ 153.070863][ T6844] ? __pfx_sock_close+0x10/0x10 [ 153.070893][ T6844] sock_close+0x1c/0x30 [ 153.070921][ T6844] __fput+0x418/0xa50 [ 153.070959][ T6844] fput_close_sync+0x11f/0x240 [ 153.070988][ T6844] ? __pfx_fput_close_sync+0x10/0x10 [ 153.071018][ T6844] ? do_raw_spin_unlock+0xf5/0x200 [ 153.071058][ T6844] __ia32_sys_close+0x7e/0x110 [ 153.071089][ T6844] __do_fast_syscall_32+0x27a/0x6a0 [ 153.071115][ T6844] ? do_fast_syscall_32+0x33/0x70 [ 153.071141][ T6844] ? asm_int80_emulation+0x1a/0x20 [ 153.071164][ T6844] ? do_int80_emulation+0x299/0x500 [ 153.071191][ T6844] do_fast_syscall_32+0x33/0x70 [ 153.071216][ T6844] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 153.071244][ T6844] RIP: 0023:0xf7f130ec [ 153.071264][ T6844] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 153.071284][ T6844] RSP: 002b:00000000f53d650c EFLAGS: 00000206 ORIG_RAX: 0000000000000006 [ 153.071308][ T6844] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 153.071324][ T6844] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 153.071337][ T6844] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 153.071351][ T6844] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 153.071365][ T6844] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 153.071398][ T6844] [ 153.071473][ T6844] tipc: Withdrawal distribution failure [ 153.322093][ T5745] usb 2-1: cp210x converter now attached to ttyUSB0 [ 153.486319][ T6847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.308'. [ 153.517841][ T5684] usb 2-1: USB disconnect, device number 17 [ 153.535572][ T6841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.305'. [ 153.621713][ T5684] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 153.691222][ T5684] cp210x 2-1:0.0: device disconnected [ 153.817665][ T6853] netlink: 40 bytes leftover after parsing attributes in process `syz.4.309'. [ 154.651565][ T6875] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 154.766415][ T6880] syz_tun: entered allmulticast mode [ 154.783300][ T6880] dvmrp8: entered allmulticast mode [ 154.794015][ T6877] syz_tun: left allmulticast mode [ 154.839572][ T5697] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 154.990217][ T5697] usb 1-1: Using ep0 maxpacket: 8 [ 154.997329][ T5697] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 155.010258][ T5697] usb 1-1: config 1 has an invalid interface number: 98 but max is 6 [ 155.010305][ T5697] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 155.010346][ T5697] usb 1-1: config 1 has no interface number 0 [ 155.010389][ T5697] usb 1-1: too many endpoints for config 1 interface 98 altsetting 121: 116, using maximum allowed: 30 [ 155.010434][ T5697] usb 1-1: config 1 interface 98 altsetting 121 has 0 endpoint descriptors, different from the interface descriptor's value: 116 [ 155.010469][ T5697] usb 1-1: config 1 interface 98 has no altsetting 0 [ 155.074308][ T5697] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 155.084419][ T5697] usb 1-1: Product: syz [ 155.084443][ T5697] usb 1-1: Manufacturer: syz [ 155.084461][ T5697] usb 1-1: SerialNumber: syz [ 155.323354][ T5697] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 155.323403][ T5697] usb 1-1: Handspring Visor / Palm OS: port 0, is for HotSync use [ 155.323444][ T5697] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 155.323469][ T5697] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 155.424793][ T6870] FAULT_INJECTION: forcing a failure. [ 155.424793][ T6870] name failslab, interval 1, probability 0, space 0, times 0 [ 155.438804][ T6870] CPU: 1 UID: 0 PID: 6870 Comm: syz.4.318 Tainted: G L syzkaller #0 PREEMPT(full) [ 155.438839][ T6870] Tainted: [L]=SOFTLOCKUP [ 155.438848][ T6870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 155.438865][ T6870] Call Trace: [ 155.438874][ T6870] [ 155.438883][ T6870] dump_stack_lvl+0xe8/0x150 [ 155.438921][ T6870] should_fail_ex+0x410/0x560 [ 155.438962][ T6870] should_failslab+0xa8/0x100 [ 155.438990][ T6870] __kmalloc_noprof+0xfe/0x720 [ 155.439024][ T6870] ? string+0x28a/0x2d0 [ 155.439050][ T6870] ? diag_fmt_alloc+0x1ff/0x570 [ 155.439074][ T6870] ? diag_fmt_alloc+0x1ff/0x570 [ 155.439108][ T6870] diag_fmt_alloc+0x1ff/0x570 [ 155.439142][ T6870] bpf_diag_fmt+0x179/0x220 [ 155.439184][ T6870] ? __pfx_bpf_diag_fmt+0x10/0x10 [ 155.439208][ T6870] ? number+0xc60/0xed0 [ 155.439242][ T6870] ? __pfx_number+0x10/0x10 [ 155.439277][ T6870] check_reg_type+0x103b/0x1640 [ 155.439322][ T6870] do_check_insn+0xe602/0x17d70 [ 155.439393][ T6870] ? __asan_memcpy+0x40/0x70 [ 155.439429][ T6870] ? __pfx_do_check_insn+0x10/0x10 [ 155.439488][ T6870] ? verbose+0x11d/0x1a0 [ 155.439534][ T6870] ? __pfx_verbose+0x10/0x10 [ 155.439577][ T6870] ? print_insn_state+0x135/0x170 [ 155.439603][ T6870] do_check_common+0x3c19/0x5d30 [ 155.439672][ T6870] ? __pfx_do_check_common+0x10/0x10 [ 155.439699][ T6870] ? __pfx_verbose+0x10/0x10 [ 155.439730][ T6870] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 155.439779][ T6870] bpf_check+0x2639/0x2e10 [ 155.439801][ T6870] ? trace_irq_disable+0x3b/0x140 [ 155.439842][ T6870] ? __pfx_bpf_check+0x10/0x10 [ 155.439867][ T6870] ? bpf_obj_name_cpy+0x194/0x1e0 [ 155.439903][ T6870] bpf_prog_load+0x14d6/0x1c20 [ 155.439942][ T6870] ? __pfx_bpf_prog_load+0x10/0x10 [ 155.439995][ T6870] __sys_bpf+0xd0d/0xd90 [ 155.440029][ T6870] ? __pfx___sys_bpf+0x10/0x10 [ 155.440056][ T6870] ? ksys_write+0x1e6/0x270 [ 155.440093][ T6870] ? __mutex_unlock_slowpath+0x731/0x900 [ 155.440148][ T6870] ? fput+0xa0/0xd0 [ 155.440174][ T6870] ? ksys_write+0x242/0x270 [ 155.440211][ T6870] __ia32_sys_bpf+0xba/0xd0 [ 155.440236][ T6870] __do_fast_syscall_32+0x27a/0x6a0 [ 155.440261][ T6870] ? do_fast_syscall_32+0x33/0x70 [ 155.440281][ T6870] ? asm_int80_emulation+0x1a/0x20 [ 155.440311][ T6870] ? do_int80_emulation+0x299/0x500 [ 155.440337][ T6870] do_fast_syscall_32+0x33/0x70 [ 155.440359][ T6870] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 155.440386][ T6870] RIP: 0023:0xf7f130ec [ 155.440406][ T6870] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 155.440426][ T6870] RSP: 002b:00000000f53d650c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 155.440450][ T6870] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000400 [ 155.440471][ T6870] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 155.440485][ T6870] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 155.440498][ T6870] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 155.440512][ T6870] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 155.440544][ T6870] [ 155.488073][ T5684] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 155.692993][ T5697] usb 1-1: palm_os_3_probe - error -110 getting bytes available request [ 155.693076][ T5697] visor 1-1:1.98: Handspring Visor / Palm OS converter detected [ 155.693143][ T5684] usb 3-1: Using ep0 maxpacket: 16 [ 155.762114][ T6896] netlink: 32 bytes leftover after parsing attributes in process `syz.1.325'. [ 155.778771][ T5684] usb 3-1: unable to get BOS descriptor or descriptor too short [ 155.778934][ T5684] usb 3-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.48 [ 155.818983][ T5684] usb 3-1: config 4 has an invalid interface number: 127 but max is 0 [ 155.819066][ T5684] usb 3-1: config 4 has no interface number 0 [ 155.819168][ T5684] usb 3-1: config 4 interface 127 has no altsetting 0 [ 155.848356][ T5697] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 155.860523][ T5697] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 155.885510][ T5684] usb 3-1: string descriptor 0 read error: -22 [ 155.890153][ T5684] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.167483][ T5684] usb 3-1: USB disconnect, device number 12 [ 156.561759][ T5704] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 156.698164][ T31] usb 1-1: USB disconnect, device number 13 [ 156.749810][ T5704] usb 2-1: Using ep0 maxpacket: 16 [ 156.756403][ T5704] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 156.768627][ T5704] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.770586][ T5704] usb 2-1: config 0 has no interfaces? [ 156.770695][ T5704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.803861][ T31] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 156.822203][ T31] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 156.835957][ T31] visor 1-1:1.98: device disconnected [ 156.835965][ T5704] usb 2-1: config 0 descriptor?? [ 157.047191][ T6917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.116899][ T6907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.328'. [ 157.126441][ T6907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.328'. [ 157.144915][ T5704] usb 2-1: USB disconnect, device number 18 [ 157.182894][ T6922] netlink: 44 bytes leftover after parsing attributes in process `syz.3.334'. [ 157.249711][ T5684] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 157.403033][ T5684] usb 5-1: Using ep0 maxpacket: 8 [ 157.412407][ T5684] usb 5-1: unable to get BOS descriptor or descriptor too short [ 157.422001][ T5684] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 157.431411][ T31] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 157.443081][ T5684] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 157.443172][ T5684] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.444757][ T5684] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 157.446329][ T5684] usb 5-1: config 1 has no interface number 1 [ 157.455756][ T5684] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 157.465945][ T5684] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 157.466013][ T5684] usb 5-1: config 1 interface 2 has no altsetting 0 [ 157.537127][ T5684] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.537256][ T5684] usb 5-1: Product: syz [ 157.541263][ T5684] usb 5-1: Manufacturer: syz [ 157.541316][ T5684] usb 5-1: SerialNumber: syz [ 157.603359][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 157.611956][ T31] usb 4-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice= 0.40 [ 157.623583][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.633887][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 157.650656][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.650704][ T31] usb 4-1: Product: syz [ 157.650744][ T31] usb 4-1: Manufacturer: syz [ 157.650766][ T31] usb 4-1: SerialNumber: syz [ 157.977228][ T6934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.995398][ T6934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.024637][ T5684] usb 5-1: USB disconnect, device number 23 [ 158.318692][ T5621] udevd[5621]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 158.369452][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 158.691979][ T6933] netlink: 'syz.1.336': attribute type 28 has an invalid length. [ 158.692023][ T6933] netlink: 48 bytes leftover after parsing attributes in process `syz.1.336'. [ 158.693083][ T6933] bridge_slave_0: left allmulticast mode [ 158.693113][ T6933] bridge_slave_0: left promiscuous mode [ 158.693401][ T6933] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.885556][ T31] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 158.909158][ T31] usb 4-1: USB disconnect, device number 17 [ 159.073155][ T6944] veth0_macvtap: Caught tx_queue_len zero misconfig [ 159.715061][ T6949] fuse: Unknown parameter 'user_id00000000000000000000' [ 159.837974][ T6953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.341'. [ 160.292175][ T6959] netlink: 'syz.2.342': attribute type 8 has an invalid length. [ 160.301195][ T6959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.342'. [ 160.494946][ T6959] veth1_to_team: entered promiscuous mode [ 160.556198][ T6959] gretap0: entered promiscuous mode [ 160.590469][ T6959] veth1_to_team: left promiscuous mode [ 160.618472][ T6959] gretap0: left promiscuous mode [ 160.705556][ T32] audit: type=1326 audit(1788632105.563:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.3.344" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 160.735919][ T32] audit: type=1326 audit(1788632105.593:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.3.344" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 160.771593][ T32] audit: type=1326 audit(1788632105.633:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.3.344" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 160.797294][ T32] audit: type=1326 audit(1788632105.633:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.3.344" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 160.831062][ T32] audit: type=1326 audit(1788632105.693:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.3.344" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=43 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 160.831137][ T32] audit: type=1326 audit(1788632105.693:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.3.344" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 160.831202][ T32] audit: type=1326 audit(1788632105.693:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.3.344" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 160.922912][ T32] audit: type=1326 audit(1788632105.783:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.3.344" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 160.922985][ T32] audit: type=1326 audit(1788632105.783:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.3.344" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 160.974476][ T32] audit: type=1326 audit(1788632105.813:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.3.344" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=43 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 161.385777][ T5622] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 161.760201][ T31] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 161.922585][ T31] usb 5-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 161.933412][ T31] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 161.950303][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 161.959554][ T31] usb 5-1: Product: syz [ 161.959576][ T31] usb 5-1: Manufacturer: syz [ 162.012896][ T6987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.923098][ T6998] netlink: 9 bytes leftover after parsing attributes in process `syz.0.364'. [ 162.935873][ T6998] netlink: 9 bytes leftover after parsing attributes in process `syz.0.364'. [ 163.159885][ T5704] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 163.188691][ T7003] netlink: 'syz.0.366': attribute type 6 has an invalid length. [ 163.198253][ T7003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.366'. [ 163.324447][ T5704] usb 2-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00 [ 163.339690][ T5704] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.339857][ T5704] usb 2-1: config 0 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 163.339959][ T5704] usb 2-1: config 0 interface 0 has no altsetting 0 [ 163.352106][ T5697] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 163.360677][ T5704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.426107][ T5704] usb 2-1: config 0 descriptor?? [ 163.552959][ T5697] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 163.553028][ T5697] usb 3-1: too many configurations: 53, using maximum allowed: 8 [ 163.593709][ T5697] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.593759][ T5697] usb 3-1: Product: syz [ 163.593800][ T5697] usb 3-1: Manufacturer: syz [ 163.593821][ T5697] usb 3-1: SerialNumber: syz [ 163.961718][ T5697] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 163.961800][ T5697] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 163.961847][ T5697] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 163.998681][ T5697] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 164.026627][ T5697] usb 3-1: USB disconnect, device number 13 [ 164.399339][ T6470] usb 5-1: USB disconnect, device number 24 [ 164.554377][ T7009] picdev_read: 4 callbacks suppressed [ 164.586022][ T7009] kvm: pic: non byte read [ 164.636491][ T7009] kvm: pic: non byte read [ 164.641351][ T7009] kvm: pic: non byte read [ 164.646235][ T7009] kvm: pic: non byte read [ 164.653205][ T7009] kvm: pic: non byte read [ 164.658193][ T7009] kvm: pic: non byte read [ 164.662977][ T7009] kvm: pic: non byte read [ 164.667689][ T7009] kvm: pic: non byte read [ 164.673143][ T7009] kvm: pic: non byte read [ 164.678672][ T7009] kvm: pic: non byte read [ 164.972050][ T7026] netlink: 44 bytes leftover after parsing attributes in process `syz.0.359'. [ 165.061366][ T7027] netlink: 44 bytes leftover after parsing attributes in process `syz.0.359'. [ 165.262453][ T6470] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 165.413471][ T7035] netlink: 'syz.3.363': attribute type 1 has an invalid length. [ 165.451354][ T6470] usb 5-1: Invalid ep0 maxpacket: 64 [ 165.461973][ T5704] usb 2-1: string descriptor 0 read error: -71 [ 165.523411][ T5704] usb 2-1: USB disconnect, device number 19 [ 165.570381][ T31] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 165.583183][ T6470] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 165.648846][ T7035] 8021q: adding VLAN 0 to HW filter on device bond2 [ 165.714387][ T7037] macvlan4: entered promiscuous mode [ 165.714487][ T7037] macvlan4: entered allmulticast mode [ 165.720916][ T7037] bond2: entered allmulticast mode [ 165.726173][ T7037] bond2: entered promiscuous mode [ 165.728048][ T7037] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 165.732778][ T31] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 165.759081][ T31] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 165.770973][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 165.780260][ T6470] usb 5-1: Invalid ep0 maxpacket: 64 [ 165.783759][ T6470] usb usb5-port1: attempt power cycle [ 165.794590][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 165.794635][ T31] usb 1-1: SerialNumber: syz [ 165.811350][ T7037] team0: Port device macvlan4 added [ 166.133742][ T6470] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 166.178570][ T6470] usb 5-1: Invalid ep0 maxpacket: 64 [ 166.240728][ T31] usb 1-1: 0:2 : does not exist [ 166.240841][ T31] usb 1-1: unit 255 not found! [ 166.308257][ T31] usb 1-1: USB disconnect, device number 14 [ 166.327599][ T6470] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 166.365649][ T6470] usb 5-1: Invalid ep0 maxpacket: 64 [ 166.371919][ T6470] usb usb5-port1: unable to enumerate USB device [ 166.427967][ T5621] udevd[5621]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 166.473830][ T7051] binder: 7049:7051 ioctl 8983 80000240 returned -22 [ 166.497237][ T7050] netlink: 'syz.3.369': attribute type 13 has an invalid length. [ 166.588809][ T7056] netlink: 40 bytes leftover after parsing attributes in process `syz.1.370'. [ 166.891521][ T31] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 167.051809][ T31] usb 4-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.40 [ 167.062827][ T31] usb 4-1: config 1 interface 0 has no altsetting 0 [ 167.076103][ T31] usb 4-1: string descriptor 0 read error: -22 [ 167.082670][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.229580][ T986] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 167.271310][ T7072] syz_tun: entered allmulticast mode [ 167.374962][ T7072] dvmrp8: entered allmulticast mode [ 167.384523][ T986] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 167.393982][ T986] usb 2-1: too many configurations: 53, using maximum allowed: 8 [ 167.477529][ T7071] syz_tun: left allmulticast mode [ 167.486725][ T986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.486770][ T986] usb 2-1: Product: syz [ 167.486809][ T986] usb 2-1: Manufacturer: syz [ 167.486867][ T986] usb 2-1: SerialNumber: syz [ 168.186801][ T986] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 168.186889][ T986] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 168.186963][ T986] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 168.230798][ T986] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 168.256737][ T986] usb 2-1: USB disconnect, device number 20 [ 168.299768][ T5745] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 168.399708][ T5697] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 168.462630][ T5745] usb 1-1: unable to get BOS descriptor or descriptor too short [ 168.462735][ T5745] usb 1-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice= 0.40 [ 168.482401][ T5745] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.492925][ T5745] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 168.510418][ T5745] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.518603][ T5745] usb 1-1: Product: syz [ 168.522982][ T5745] usb 1-1: Manufacturer: syz [ 168.527703][ T5745] usb 1-1: SerialNumber: syz [ 168.569667][ T5697] usb 5-1: Using ep0 maxpacket: 8 [ 168.575505][ T5697] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 168.589796][ T5697] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.605033][ T5697] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.616171][ T5697] usb 5-1: Product: syz [ 168.616229][ T5697] usb 5-1: Manufacturer: syz [ 168.616246][ T5697] usb 5-1: SerialNumber: syz [ 168.655603][ T5697] usb 5-1: config 0 descriptor?? [ 168.687092][ T5697] iowarrior 5-1:0.0: no interrupt-in endpoint found [ 168.846977][ T7083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.856252][ T7083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.066894][ T5684] usb 5-1: USB disconnect, device number 29 [ 169.348727][ T7085] netlink: 44 bytes leftover after parsing attributes in process `syz.1.381'. [ 169.448503][ T31] usbhid 4-1:1.0: can't add hid device: -71 [ 169.448667][ T31] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 169.511364][ T31] usb 4-1: USB disconnect, device number 18 [ 169.830048][ T986] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 170.006688][ T986] usb 2-1: unable to get BOS descriptor or descriptor too short [ 170.006789][ T986] usb 2-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice= 0.40 [ 170.025951][ T986] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.026023][ T986] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 170.072942][ T986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.073021][ T986] usb 2-1: Product: syz [ 170.073058][ T986] usb 2-1: Manufacturer: syz [ 170.073078][ T986] usb 2-1: SerialNumber: syz [ 170.236262][ T31] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 170.390632][ T31] usb 4-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00 [ 170.414678][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.414751][ T31] usb 4-1: config 0 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 170.414838][ T31] usb 4-1: config 0 interface 0 has no altsetting 0 [ 170.414881][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.465599][ T31] usb 4-1: config 0 descriptor?? [ 170.538510][ T5745] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 170.551951][ T5745] usb 1-1: USB disconnect, device number 15 [ 170.623330][ T7086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.624013][ T7086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.788243][ T7090] binder: 7089:7090 ioctl 8983 80000240 returned -22 [ 171.373098][ T7095] lo: Caught tx_queue_len zero misconfig [ 171.373210][ T7095] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 171.495339][ T7097] netdevsim netdevsim0: Direct firmware load for .. @ failed with error -2 [ 171.495497][ T7097] netdevsim netdevsim0: Falling back to sysfs fallback for: .. @ [ 171.624466][ T7101] sctp: [Deprecated]: syz.0.384 (pid 7101) Use of struct sctp_assoc_value in delayed_ack socket option. [ 171.624466][ T7101] Use struct sctp_sack_info instead [ 171.904775][ T986] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 171.922119][ T986] usb 2-1: USB disconnect, device number 21 [ 172.150503][ T31] usb 4-1: string descriptor 0 read error: -71 [ 172.175112][ T31] usb 4-1: USB disconnect, device number 19 [ 172.986608][ T7121] ip6tnl1: entered promiscuous mode [ 172.993443][ T7121] ip6tnl1: entered allmulticast mode [ 173.069328][ T7121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.392'. [ 173.080183][ T7121] veth0: entered promiscuous mode [ 173.080238][ T7121] veth0: entered allmulticast mode [ 173.119748][ T986] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 173.196338][ T7121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.392'. [ 173.272977][ T986] usb 3-1: unable to get BOS descriptor or descriptor too short [ 173.273048][ T986] usb 3-1: New USB device found, idVendor=05c6, idProduct=3418, bcdDevice=5f.f6 [ 173.303439][ T986] usb 3-1: config 3 has an invalid interface number: 207 but max is 0 [ 173.311777][ T986] usb 3-1: config 3 has an invalid descriptor of length 48, skipping remainder of the config [ 173.311805][ T986] usb 3-1: config 3 has no interface number 0 [ 173.311839][ T986] usb 3-1: config 3 interface 207 has no altsetting 0 [ 173.362991][ T986] usb 3-1: string descriptor 0 read error: -22 [ 173.363144][ T986] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.384446][ T986] cdc_ether 3-1:3.207: More than one union descriptor, skipping ... [ 173.392673][ T986] cdc_ether 3-1:3.207: skipping garbage [ 173.398374][ T986] usb 3-1: No union descriptors [ 173.699083][ T986] usb 3-1: USB disconnect, device number 14 [ 174.491453][ T7144] netlink: 24 bytes leftover after parsing attributes in process `syz.2.399'. [ 174.587808][ T7146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.399'. [ 174.974874][ T5622] Bluetooth: hci0: unexpected event for opcode 0x2024 [ 175.016780][ T7154] netlink: 'syz.4.401': attribute type 10 has an invalid length. [ 175.039164][ T7154] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 175.052620][ T7154] team0: Port device netdevsim1 added [ 175.078361][ T7154] netlink: 'syz.4.401': attribute type 10 has an invalid length. [ 175.632809][ T7161] netlink: 'syz.2.412': attribute type 13 has an invalid length. [ 175.659751][ T7162] netlink: 'syz.4.402': attribute type 13 has an invalid length. [ 176.039671][ T5684] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 176.233135][ T5684] usb 3-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.40 [ 176.243595][ T5684] usb 3-1: config 1 interface 0 has no altsetting 0 [ 176.269776][ T5684] usb 3-1: string descriptor 0 read error: -22 [ 176.277015][ T5684] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.549469][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 176.799460][ T0] NOHZ tick-stop error: local softirq work is pending, handler #204!!! [ 177.419456][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 178.419784][ T5704] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 178.564857][ T5684] usbhid 3-1:1.0: can't add hid device: -71 [ 178.575332][ T5684] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 178.585454][ T5704] usb 5-1: Using ep0 maxpacket: 8 [ 178.596968][ T5704] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 178.615285][ T5704] usb 5-1: config 0 has no interfaces? [ 178.615446][ T5704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.695178][ T5684] usb 3-1: USB disconnect, device number 15 [ 178.759794][ T5704] usb 5-1: config 0 descriptor?? [ 179.031062][ T5622] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 179.031943][ T5622] Bluetooth: hci0: Injecting HCI hardware error event [ 179.045093][ T5614] Bluetooth: hci0: hardware error 0x00 [ 179.064848][ T5684] usb 5-1: USB disconnect, device number 30 [ 179.139508][ T986] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 179.312923][ T986] usb 2-1: unable to get BOS descriptor or descriptor too short [ 179.314901][ T986] usb 2-1: New USB device found, idVendor=05c6, idProduct=3418, bcdDevice=5f.f6 [ 179.338968][ T986] usb 2-1: config 3 has an invalid interface number: 207 but max is 0 [ 179.347584][ T986] usb 2-1: config 3 has an invalid descriptor of length 48, skipping remainder of the config [ 179.347636][ T986] usb 2-1: config 3 has no interface number 0 [ 179.347675][ T986] usb 2-1: config 3 interface 207 has no altsetting 0 [ 179.379530][ T986] usb 2-1: string descriptor 0 read error: -22 [ 179.379683][ T986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.424095][ T986] cdc_ether 2-1:3.207: More than one union descriptor, skipping ... [ 179.437007][ T986] cdc_ether 2-1:3.207: skipping garbage [ 179.437069][ T986] usb 2-1: No union descriptors [ 179.643309][ T7182] bridge0: port 1(syz_tun) entered blocking state [ 179.655535][ T7182] bridge0: port 1(syz_tun) entered disabled state [ 179.655881][ T7182] syz_tun: entered allmulticast mode [ 179.676275][ T7182] syz_tun: entered promiscuous mode [ 179.685337][ T7182] bridge0: port 1(syz_tun) entered blocking state [ 179.685626][ T7182] bridge0: port 1(syz_tun) entered forwarding state [ 179.926164][ T7182] bridge0: port 3(bond0) entered blocking state [ 179.926311][ T7182] bridge0: port 3(bond0) entered disabled state [ 179.926508][ T7182] bond0: entered allmulticast mode [ 179.926531][ T7182] bond_slave_0: entered allmulticast mode [ 179.926573][ T7182] bond_slave_1: entered allmulticast mode [ 179.984447][ T7182] bond0: entered promiscuous mode [ 179.991706][ T7182] bond_slave_0: entered promiscuous mode [ 179.991953][ T7182] bond_slave_1: entered promiscuous mode [ 179.993535][ T7182] bridge0: port 3(bond0) entered blocking state [ 179.993648][ T7182] bridge0: port 3(bond0) entered forwarding state [ 180.046103][ T7187] bridge0: port 4(team0) entered blocking state [ 180.046272][ T7187] bridge0: port 4(team0) entered disabled state [ 180.046435][ T7187] team0: entered allmulticast mode [ 180.046458][ T7187] team_slave_0: entered allmulticast mode [ 180.046479][ T7187] team_slave_1: entered allmulticast mode [ 180.046712][ T7187] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 180.104424][ T7187] team0: entered promiscuous mode [ 180.104468][ T7187] team_slave_0: entered promiscuous mode [ 180.104683][ T7187] team_slave_1: entered promiscuous mode [ 180.104877][ T7187] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 180.105541][ T7187] bridge0: port 4(team0) entered blocking state [ 180.105647][ T7187] bridge0: port 4(team0) entered forwarding state [ 180.201823][ T7186] bridge0: port 5(veth1_to_bridge) entered blocking state [ 180.209295][ T7186] bridge0: port 5(veth1_to_bridge) entered disabled state [ 180.210810][ T7186] veth1_to_bridge: entered allmulticast mode [ 180.215590][ T7186] veth1_to_bridge: entered promiscuous mode [ 180.216139][ T7186] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 180.216809][ T7186] bridge0: port 5(veth1_to_bridge) entered blocking state [ 180.223123][ T7186] bridge0: port 5(veth1_to_bridge) entered forwarding state [ 180.450430][ T986] usb 2-1: USB disconnect, device number 22 [ 180.547253][ T7196] veth0_macvtap: Caught tx_queue_len zero misconfig [ 180.709902][ T5684] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 180.865727][ T5684] usb 3-1: unable to get BOS descriptor or descriptor too short [ 180.882140][ T5684] usb 3-1: not running at top speed; connect to a high speed hub [ 180.883679][ T5684] usb 3-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 180.911703][ T5684] usb 3-1: config 1 has an invalid descriptor of length 231, skipping remainder of the config [ 180.916166][ T5684] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 180.916306][ T5684] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 180.956337][ T5684] usb 3-1: string descriptor 0 read error: -22 [ 180.959960][ T5684] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.015159][ T5684] usb 3-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 181.015255][ T5684] usb 3-1: found format II with max.bitrate = 512, frame size=4095 [ 181.021755][ T5684] usb 3-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 181.021822][ T5684] usb 3-1: found format II with max.bitrate = 512, frame size=4095 [ 181.113398][ T5614] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 181.590009][ T31] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 181.751120][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 181.758402][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 181.758491][ T31] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 181.786853][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.786902][ T31] usb 2-1: Product: syz [ 181.786937][ T31] usb 2-1: Manufacturer: syz [ 181.786958][ T31] usb 2-1: SerialNumber: syz [ 182.107183][ T31] usb 2-1: selecting invalid altsetting 1 [ 182.230448][ T7211] netlink: 44 bytes leftover after parsing attributes in process `syz.3.417'. [ 182.250876][ T7211] netlink: 44 bytes leftover after parsing attributes in process `syz.3.417'. [ 182.385446][ T7213] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 182.385477][ T7213] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 182.411479][ T7213] vhci_hcd vhci_hcd.0: Device attached [ 182.502563][ T7213] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 182.630164][ T6470] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 182.675912][ T5684] usb 3-1: USB disconnect, device number 16 [ 182.689697][ T986] usb 42-1: SetAddress Request (2) to port 0 [ 182.689861][ T986] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 182.813681][ T6469] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 182.844679][ T6470] usb 4-1: unable to get BOS descriptor or descriptor too short [ 182.844850][ T6470] usb 4-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice= 0.40 [ 182.870273][ T31] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 182.892516][ T6470] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.892643][ T6470] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 182.914630][ T31] usb 2-1: USB disconnect, device number 23 [ 182.936694][ T6470] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.936821][ T6470] usb 4-1: Product: syz [ 182.938854][ T6470] usb 4-1: Manufacturer: syz [ 182.939679][ T6470] usb 4-1: SerialNumber: syz [ 183.041444][ T6469] usb 5-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 183.101025][ T6469] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.101158][ T6469] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 183.123824][ T6469] usb 5-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x75, changing to 0x5 [ 183.180367][ T6469] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.180488][ T6469] usb 5-1: Product: syz [ 183.188549][ T6469] usb 5-1: Manufacturer: syz [ 183.188591][ T6469] usb 5-1: SerialNumber: syz [ 183.212044][ T5621] udevd[5621]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 183.526468][ T7213] usb usb8: usbfs: process 7213 (syz.4.413) did not claim interface 0 before use [ 183.599547][ T31] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 183.703640][ T7227] syzkaller0: entered promiscuous mode [ 183.714021][ T7227] syzkaller0: entered allmulticast mode [ 183.736127][ T7227] tipc: Started in network mode [ 183.742545][ T7227] tipc: Node identity 3a9abf26e6c9, cluster identity 4711 [ 183.742778][ T7227] tipc: Enabled bearer , priority 0 [ 183.760394][ T7226] tipc: Resetting bearer [ 183.770220][ T31] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 183.788987][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 49424, setting to 64 [ 183.789044][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 183.827315][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.827364][ T31] usb 2-1: Product: syz [ 183.827405][ T31] usb 2-1: Manufacturer: syz [ 183.827425][ T31] usb 2-1: SerialNumber: syz [ 183.856583][ T31] usb 2-1: config 0 descriptor?? [ 183.958170][ T7226] tipc: Disabling bearer [ 184.326931][ T31] usb 2-1: USB disconnect, device number 24 [ 184.509932][ T7234] netlink: 44 bytes leftover after parsing attributes in process `syz.2.420'. [ 184.526037][ T7234] netlink: 44 bytes leftover after parsing attributes in process `syz.2.420'. [ 184.579165][ T5796] udevd[5796]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 184.759464][ T0] NOHZ tick-stop error: local softirq work is pending, handler #104!!! [ 184.971008][ T31] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 184.989469][ T0] NOHZ tick-stop error: local softirq work is pending, handler #206!!! [ 185.134423][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 185.134496][ T31] usb 3-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice= 0.40 [ 185.161696][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.171981][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 185.189856][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.189903][ T31] usb 3-1: Product: syz [ 185.189935][ T31] usb 3-1: Manufacturer: syz [ 185.189956][ T31] usb 3-1: SerialNumber: syz [ 185.503820][ T6470] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 185.529186][ T6470] usb 4-1: USB disconnect, device number 20 [ 185.742679][ T7251] netlink: 44 bytes leftover after parsing attributes in process `syz.1.423'. [ 186.043799][ T7256] netlink: 'syz.3.424': attribute type 1 has an invalid length. [ 186.043846][ T7256] netlink: 'syz.3.424': attribute type 1 has an invalid length. [ 186.043940][ T7256] netlink: 'syz.3.424': attribute type 1 has an invalid length. [ 186.043959][ T7256] netlink: 'syz.3.424': attribute type 1 has an invalid length. [ 186.117834][ T7256] netlink: 'syz.3.424': attribute type 1 has an invalid length. [ 186.402494][ T7257] netlink: 'syz.0.425': attribute type 10 has an invalid length. [ 186.454831][ T7259] netlink: 'syz.0.425': attribute type 10 has an invalid length. [ 186.482489][ T7261] netlink: 12 bytes leftover after parsing attributes in process `syz.1.426'. [ 186.604065][ T7257] bond0: (slave netdevsim1): Releasing backup interface [ 186.636297][ T7257] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 186.658047][ T7257] team0: Port device netdevsim1 added [ 186.724623][ T7214] vhci_hcd: connection reset by peer [ 186.755953][ T6469] usb 5-1: 0:2 : does not exist [ 186.770174][ T27] vhci_hcd vhci_hcd.4: stop threads [ 186.770300][ T27] vhci_hcd vhci_hcd.4: release socket [ 186.770989][ T27] vhci_hcd vhci_hcd.4: disconnect device [ 186.804050][ T7257] ksmbd: Unknown IPC event: 3, ignore. [ 186.886341][ T7259] team0: Port device netdevsim1 removed [ 186.928793][ T7259] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 186.948597][ T7259] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 187.355683][ T6469] usb 5-1: USB disconnect, device number 31 [ 187.454020][ T31] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 187.473193][ T31] usb 3-1: USB disconnect, device number 17 [ 187.506754][ T7261] 8021q: adding VLAN 0 to HW filter on device bond2 [ 187.687512][ T7262] macvlan2: entered promiscuous mode [ 187.703936][ T7262] macvlan2: entered allmulticast mode [ 187.704401][ T7262] bond2: entered allmulticast mode [ 187.704450][ T7262] bond2: entered promiscuous mode [ 187.732384][ T7262] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 187.749771][ T986] usb 42-1: device descriptor read/8, error -110 [ 187.802520][ T7262] team0: Port device macvlan2 added [ 187.835618][ T5621] udevd[5621]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 188.167418][ T986] usb usb42-port1: attempt power cycle [ 188.735202][ T986] usb usb42-port1: unable to enumerate USB device [ 189.100596][ T986] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 189.166823][ T7291] bridge0: entered promiscuous mode [ 189.166961][ T7291] bridge0: entered allmulticast mode [ 189.251855][ T7291] team0: Port device bridge0 added [ 189.257367][ T7293] bridge0: port 1(team0) entered blocking state [ 189.257469][ T7293] bridge0: port 1(team0) entered disabled state [ 189.257621][ T7293] team0: entered allmulticast mode [ 189.257638][ T7293] team_slave_0: entered allmulticast mode [ 189.257657][ T7293] team_slave_1: entered allmulticast mode [ 189.312302][ T986] usb 2-1: unable to get BOS descriptor or descriptor too short [ 189.320546][ T986] usb 2-1: New USB device found, idVendor=05c6, idProduct=3418, bcdDevice=5f.f6 [ 189.331249][ T986] usb 2-1: config 3 has an invalid interface number: 207 but max is 0 [ 189.339655][ T986] usb 2-1: config 3 has an invalid descriptor of length 48, skipping remainder of the config [ 189.339684][ T986] usb 2-1: config 3 has no interface number 0 [ 189.339716][ T986] usb 2-1: config 3 interface 207 has no altsetting 0 [ 189.367533][ T986] usb 2-1: string descriptor 0 read error: -22 [ 189.374003][ T986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.392376][ T986] cdc_ether 2-1:3.207: More than one union descriptor, skipping ... [ 189.401706][ T986] cdc_ether 2-1:3.207: skipping garbage [ 189.407541][ T986] usb 2-1: No union descriptors [ 189.493440][ T7293] team0: left allmulticast mode [ 189.499004][ T7293] team_slave_0: left allmulticast mode [ 189.513528][ T7293] team_slave_1: left allmulticast mode [ 189.853511][ T7297] veth1_to_bond: entered promiscuous mode [ 189.906898][ T31] usb 2-1: USB disconnect, device number 25 [ 190.081627][ T7306] netlink: 44 bytes leftover after parsing attributes in process `syz.4.439'. [ 190.334715][ T986] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 190.419632][ T31] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 190.494276][ T986] usb 5-1: unable to get BOS descriptor or descriptor too short [ 190.494357][ T986] usb 5-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice= 0.40 [ 190.520183][ T986] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.538255][ T986] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 190.563388][ T986] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.563436][ T986] usb 5-1: Product: syz [ 190.563470][ T986] usb 5-1: Manufacturer: syz [ 190.563490][ T986] usb 5-1: SerialNumber: syz [ 190.592460][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 190.600750][ T31] usb 4-1: not running at top speed; connect to a high speed hub [ 190.600791][ T31] usb 4-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 190.626922][ T31] usb 4-1: config 1 has an invalid descriptor of length 231, skipping remainder of the config [ 190.627047][ T31] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 190.627093][ T31] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 190.681553][ T31] usb 4-1: string descriptor 0 read error: -22 [ 190.688037][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.749578][ T31] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 190.758200][ T31] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 190.758456][ T31] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 190.758488][ T31] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 190.830578][ T7311] veth0_macvtap: Caught tx_queue_len zero misconfig [ 190.984280][ T7314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.993798][ T7314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.223144][ T6469] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 191.400262][ T6469] usb 3-1: Using ep0 maxpacket: 16 [ 191.410298][ T6469] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 191.438272][ T6469] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.438409][ T6469] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 191.477563][ T6469] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 191.477667][ T6469] usb 3-1: SerialNumber: syz [ 191.492217][ T6469] usb 3-1: config 0 descriptor?? [ 191.764647][ T7296] veth1_to_bond: left promiscuous mode [ 192.115841][ T31] usb 4-1: USB disconnect, device number 21 [ 192.238631][ T986] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 192.259832][ T986] usb 5-1: USB disconnect, device number 32 [ 192.405287][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.406305][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.407010][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.407830][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.408493][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.409309][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.410007][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.410848][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.411537][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.412505][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.619446][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 192.679469][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 193.403919][ T7326] loop2: detected capacity change from 0 to 7 [ 195.682653][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.690222][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.754585][ T7326] Dev loop2: unable to read RDB block 7 [ 195.754739][ T7326] loop2: unable to read partition table [ 195.755357][ T7326] loop2: partition table beyond EOD, truncated [ 195.755424][ T7326] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 197.410451][ C0] net_ratelimit: 8128 callbacks suppressed [ 197.410509][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.411071][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.413010][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.413634][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.414322][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.414867][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.415527][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.416116][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.416778][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.417366][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.419862][ C1] net_ratelimit: 11542 callbacks suppressed [ 202.419889][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.420337][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.420496][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.421117][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.421591][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.421808][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.422412][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.422675][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.423008][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.423575][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.429814][ C0] net_ratelimit: 11290 callbacks suppressed [ 207.429858][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.429909][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.430540][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.431126][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.431173][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.431787][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.432355][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.432402][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.432997][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.433579][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.855251][ C0] sched: DL replenish lagged too much [ 212.447611][ C1] net_ratelimit: 12381 callbacks suppressed [ 212.447637][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.448240][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.448762][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.448765][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.449357][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.449375][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.449890][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.449967][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.450518][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.450637][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.449761][ C1] net_ratelimit: 10984 callbacks suppressed [ 217.449802][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.450191][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.450550][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.451223][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.451606][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.451961][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.452674][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.452892][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.453451][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.454067][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.459886][ C0] net_ratelimit: 9466 callbacks suppressed [ 222.459917][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.460509][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.461227][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.461940][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.462666][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.463326][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.463977][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.466134][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.466825][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.467398][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.470634][ C0] net_ratelimit: 9035 callbacks suppressed [ 227.470687][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.471156][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.471764][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.471845][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.472372][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.473027][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.473348][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.473743][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.474618][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.475646][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.480128][ C0] net_ratelimit: 8485 callbacks suppressed [ 232.480175][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.481332][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.481955][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.482488][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.483118][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.483803][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.484463][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.485306][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.486486][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.486512][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.489871][ C1] net_ratelimit: 8455 callbacks suppressed [ 237.489898][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 237.490500][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.490564][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.491225][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:4f:5a:ca:76:8f, vlan:0) [ 237.491815][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.493158][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.494688][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.494992][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.495570][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.495902][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.499624][ C1] net_ratelimit: 8638 callbacks suppressed [ 242.499657][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:4f:5a:ca:76:8f, vlan:0) [ 242.500050][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.501433][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.502587][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.503014][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.503554][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.503629][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.504230][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.504841][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.504868][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.509838][ C1] net_ratelimit: 8058 callbacks suppressed [ 247.509863][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.510394][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.510474][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:4f:5a:ca:76:8f, vlan:0) [ 247.511545][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.512728][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.513905][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.514004][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.514454][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.515049][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.515103][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.521236][ C1] net_ratelimit: 8280 callbacks suppressed [ 252.521263][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.521939][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.522554][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 252.522650][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.523222][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.523823][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.523839][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:4f:5a:ca:76:8f, vlan:0) [ 252.524839][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.526160][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.527251][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.529558][ C1] net_ratelimit: 8299 callbacks suppressed [ 257.529586][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.530157][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.530336][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.530762][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.531420][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.531556][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.532145][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.532731][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.534057][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.534118][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.540257][ C1] net_ratelimit: 8335 callbacks suppressed [ 262.540265][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.540281][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.540997][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.541301][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.541553][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 262.542233][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.542489][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.542904][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:4f:5a:ca:76:8f, vlan:0) [ 262.543673][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.544950][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.550799][ C0] net_ratelimit: 8309 callbacks suppressed [ 267.550856][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.551547][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.552199][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.552245][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.552771][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 267.553428][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.553650][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.554053][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:4f:5a:ca:76:8f, vlan:0) [ 267.557634][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.558186][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.111494][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 268.130880][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 272.559983][ C1] net_ratelimit: 8073 callbacks suppressed [ 272.560010][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.560581][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.560599][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 272.561292][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.561697][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.561882][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:4f:5a:ca:76:8f, vlan:0) [ 272.562986][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.564187][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.565255][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.565502][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.569589][ C1] net_ratelimit: 8449 callbacks suppressed [ 277.569616][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.570147][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.570237][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.570900][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.571271][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.572576][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.572795][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.573451][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.573816][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.574040][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 282.579401][ C1] net_ratelimit: 8334 callbacks suppressed [ 282.579427][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.579977][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.580574][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.581293][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.581960][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.582854][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.583837][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.584218][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.584494][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.585076][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 287.589439][ C1] net_ratelimit: 8337 callbacks suppressed [ 287.589466][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.589597][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.590067][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.590675][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.590877][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.591420][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.592057][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.593171][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.593382][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.594058][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.599968][ C0] net_ratelimit: 8462 callbacks suppressed [ 292.600009][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.601341][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.601401][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.601938][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.602400][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.602530][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.603132][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.603548][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.603785][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.604814][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.614921][ C1] net_ratelimit: 8462 callbacks suppressed [ 297.614946][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 297.615628][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.615828][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.616236][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:4f:5a:ca:76:8f, vlan:0) [ 297.617071][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.618311][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.619583][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.619758][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.620141][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.620781][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.619516][ C1] net_ratelimit: 8037 callbacks suppressed [ 302.619543][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:4f:5a:ca:76:8f, vlan:0) [ 302.619652][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.620920][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.622126][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.622941][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.623569][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.624218][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.624826][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.625499][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.625943][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.629688][ C1] net_ratelimit: 8327 callbacks suppressed [ 307.629715][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:4f:5a:ca:76:8f, vlan:0) [ 307.630517][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.631947][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.633130][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.633169][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.633675][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.634322][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.634413][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.634922][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.635629][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.639568][ C1] net_ratelimit: 8525 callbacks suppressed [ 312.639596][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.640197][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.641335][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.643059][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.643199][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.643931][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.644328][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.644463][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 312.645119][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.645480][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.651559][ C1] net_ratelimit: 8570 callbacks suppressed [ 317.651586][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.652115][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.652685][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.652893][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.653284][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.653941][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.654098][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.655165][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.656282][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.656556][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.034813][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.054414][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.389373][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 322.662462][ C0] net_ratelimit: 8190 callbacks suppressed [ 322.662640][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.664269][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.666493][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.671083][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.672764][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.674420][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.676262][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.681209][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.682938][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.691334][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.562339][ C1] rcu: (detected by 1, t=10718 jiffies, g=34733, q=1613 ncpus=2) [ 324.570175][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 2670 (4294969561-4294966891), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 324.583504][ C1] rcu: rcu_preempt kthread starved for 2671 jiffies! g34733 f0x2 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 324.594471][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 324.604478][ C1] rcu: RCU grace-period kthread stack dump: [ 324.610407][ C1] task:rcu_preempt state:R running task stack:27496 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 324.623971][ C1] Call Trace: [ 324.627292][ C1] [ 324.630271][ C1] __schedule+0x17db/0x58f0 [ 324.634857][ C1] ? __pfx___schedule+0x10/0x10 [ 324.639755][ C1] ? lock_acquire+0x115/0x350 [ 324.644482][ C1] ? schedule+0x90/0x2b0 [ 324.649107][ C1] schedule+0x164/0x2b0 [ 324.653315][ C1] schedule_timeout+0x152/0x2c0 [ 324.658213][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 324.663624][ C1] ? __pfx_process_timeout+0x10/0x10 [ 324.669031][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 324.674909][ C1] ? prepare_to_swait_event+0x322/0x350 [ 324.680524][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 324.685426][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 324.691621][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 324.696939][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 324.702194][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 324.708054][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 324.712686][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 324.717926][ C1] ? __kthread_parkme+0x71/0x1f0 [ 324.722921][ C1] ? __kthread_parkme+0x199/0x1f0 [ 324.728007][ C1] kthread+0x38b/0x480 [ 324.732115][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 324.737347][ C1] ? __pfx_kthread+0x10/0x10 [ 324.741983][ C1] ret_from_fork+0x514/0xb70 [ 324.746609][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 324.751767][ C1] ? __switch_to+0xc89/0x1420 [ 324.756529][ C1] ? __pfx_kthread+0x10/0x10 [ 324.761154][ C1] ret_from_fork_asm+0x1a/0x30 [ 324.765992][ C1] [ 324.769038][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 324.775402][ C1] Sending NMI from CPU 1 to CPUs 0: [ 324.780641][ C0] NMI backtrace for cpu 0 [ 324.780661][ C0] CPU: 0 UID: 0 PID: 27 Comm: kworker/u8:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 324.780688][ C0] Tainted: [L]=SOFTLOCKUP [ 324.780695][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 324.780708][ C0] Workqueue: wg-kex-wg0 wg_packet_handshake_send_worker [ 324.780744][ C0] RIP: 0010:__lock_acquire+0xaff/0x2e50 [ 324.780766][ C0] Code: 00 00 48 09 dd 49 8b 46 20 89 c1 81 e1 00 80 04 00 81 f9 00 00 04 00 0f 85 49 02 00 00 25 ff 1f 00 00 48 0f a3 05 e1 0c f7 12 <72> 34 83 3d b8 9c fa 18 00 75 2b 90 e8 10 85 37 03 85 c0 74 1c 83 [ 324.780783][ C0] RSP: 0018:ffffc90000006170 EFLAGS: 00000007 [ 324.780799][ C0] RAX: 0000000000000071 RBX: 0000000073125dae RCX: 0000000000040000 [ 324.780812][ C0] RDX: 00000000001cee7d RSI: 000000009dc59b3c RDI: ffff88801e6f0000 [ 324.780825][ C0] RBP: bc101d9a73125dae R08: fb00000000000000 R09: 0000000000080000 [ 324.780839][ C0] R10: 0000000000000000 R11: ffff8880b8628298 R12: 0000000000000000 [ 324.780851][ C0] R13: 0000000000000000 R14: ffff88801e6f0cf0 R15: 0000000000000008 [ 324.780864][ C0] FS: 0000000000000000(0000) GS:ffff888124cd8000(0000) knlGS:0000000000000000 [ 324.780880][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 324.780892][ C0] CR2: 00000000f0477000 CR3: 000000007e2a8000 CR4: 00000000003526f0 [ 324.780910][ C0] Call Trace: [ 324.780917][ C0] [ 324.780928][ C0] ? lock_acquire+0x115/0x350 [ 324.780945][ C0] ? advance_sched+0x9e8/0xc80 [ 324.780979][ C0] lock_acquire+0x115/0x350 [ 324.780995][ C0] ? __hrtimer_run_queues+0x466/0xa10 [ 324.781024][ C0] ? __pfx_advance_sched+0x10/0x10 [ 324.781053][ C0] _raw_spin_lock_irq+0x3d/0x50 [ 324.781078][ C0] ? __hrtimer_run_queues+0x466/0xa10 [ 324.781103][ C0] __hrtimer_run_queues+0x466/0xa10 [ 324.781136][ C0] hrtimer_interrupt+0x4cd/0xaa0 [ 324.781174][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 324.781197][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 324.781226][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 324.781246][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 324.781264][ C0] Code: ff ff ff e8 20 29 41 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 72 64 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 cf 2c 44 0a cc 48 8d 3d f7 32 da [ 324.781280][ C0] RSP: 0018:ffffc90000006660 EFLAGS: 00000296 [ 324.781295][ C0] RAX: 6d527a7c5ea93600 RBX: 0000000000000000 RCX: 8000000000000101 [ 324.781309][ C0] RDX: 000000004dbb4af1 RSI: ffffffff8e6fceb0 RDI: ffffffff8c6d9480 [ 324.781323][ C0] RBP: ffff88801e6f0000 R08: bb00000000000000 R09: 0000000000000000 [ 324.781336][ C0] R10: 0000000000000000 R11: ffffffff8ed5c6e0 R12: ffffffff8ed5c6e0 [ 324.781349][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 324.781368][ C0] ? NF_HOOK+0x23e/0x3f0 [ 324.781388][ C0] ? unwind_next_frame+0x8f/0x2550 [ 324.781410][ C0] unwind_next_frame+0xac/0x2550 [ 324.781430][ C0] ? unwind_next_frame+0x8f/0x2550 [ 324.781453][ C0] ? nf_hook_slow+0xc5/0x220 [ 324.781485][ C0] ? unwind_next_frame+0x8f/0x2550 [ 324.781507][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 324.781537][ C0] arch_stack_walk+0x11b/0x150 [ 324.781561][ C0] ? NF_HOOK+0x23e/0x3f0 [ 324.781581][ C0] stack_trace_save+0xa9/0x100 [ 324.781609][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 324.781639][ C0] ? __lock_acquire+0x6df/0x2e50 [ 324.781658][ C0] kasan_save_track+0x3e/0x80 [ 324.781677][ C0] ? kasan_save_track+0x3e/0x80 [ 324.781694][ C0] ? kasan_save_free_info+0x40/0x50 [ 324.781718][ C0] ? __kasan_slab_free+0x5c/0x80 [ 324.781736][ C0] ? kmem_cache_free+0x182/0x650 [ 324.781753][ C0] ? br_nf_dev_queue_xmit+0x4f6/0x25c0 [ 324.781777][ C0] ? NF_HOOK+0x64e/0x6e0 [ 324.781797][ C0] ? br_nf_post_routing+0xa53/0xee0 [ 324.781819][ C0] ? nf_hook_slow+0xc5/0x220 [ 324.781845][ C0] ? NF_HOOK+0x23e/0x3f0 [ 324.781883][ C0] ? br_nf_dev_queue_xmit+0x4f6/0x25c0 [ 324.781922][ C0] kasan_save_free_info+0x40/0x50 [ 324.781948][ C0] __kasan_slab_free+0x5c/0x80 [ 324.781967][ C0] kmem_cache_free+0x182/0x650 [ 324.781985][ C0] ? __skb_ext_put+0x221/0x2f0 [ 324.782003][ C0] ? __skb_ext_del+0x271/0x390 [ 324.782024][ C0] br_nf_dev_queue_xmit+0x4f6/0x25c0 [ 324.782053][ C0] ? NF_HOOK+0xa2/0x6e0 [ 324.782074][ C0] NF_HOOK+0x64e/0x6e0 [ 324.782098][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 324.782120][ C0] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 324.782145][ C0] ? net_generic+0x1e/0x240 [ 324.782166][ C0] ? net_generic+0x1e/0x240 [ 324.782189][ C0] br_nf_post_routing+0xa53/0xee0 [ 324.782211][ C0] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 324.782237][ C0] ? __pfx_br_nf_post_routing+0x10/0x10 [ 324.782261][ C0] nf_hook_slow+0xc5/0x220 [ 324.782288][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 324.782308][ C0] NF_HOOK+0x23e/0x3f0 [ 324.782326][ C0] ? stack_depot_save_flags+0x33/0x7f0 [ 324.782357][ C0] ? NF_HOOK+0xa2/0x3f0 [ 324.782375][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 324.782395][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 324.782417][ C0] ? net_generic+0x1e/0x240 [ 324.782440][ C0] br_forward_finish+0xd3/0x130 [ 324.782458][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 324.782485][ C0] br_nf_forward_finish+0xa76/0xea0 [ 324.782513][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 324.782538][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 324.782560][ C0] ? NF_HOOK+0xa2/0x6e0 [ 324.782581][ C0] ? NF_HOOK+0xa2/0x6e0 [ 324.782602][ C0] NF_HOOK+0x64e/0x6e0 [ 324.782626][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 324.782647][ C0] ? net_generic+0x1e/0x240 [ 324.782671][ C0] ? net_generic+0x1e/0x240 [ 324.782692][ C0] ? net_generic+0x1e/0x240 [ 324.782715][ C0] br_nf_forward_ip+0x7eb/0xa30 [ 324.782737][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 324.782762][ C0] ? __pfx_br_nf_forward+0x10/0x10 [ 324.782785][ C0] nf_hook_slow+0xc5/0x220 [ 324.782812][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 324.782832][ C0] NF_HOOK+0x23e/0x3f0 [ 324.782852][ C0] ? NF_HOOK+0xa2/0x3f0 [ 324.782870][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 324.782889][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 324.782911][ C0] ? br_handle_vlan+0x5e/0x530 [ 324.782941][ C0] __br_forward+0x397/0x540 [ 324.782960][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 324.782982][ C0] br_flood+0x3e6/0x8d0 [ 324.783007][ C0] br_handle_frame_finish+0x1119/0x1950 [ 324.783029][ C0] ? __netif_receive_skb_core+0x989/0x30c0 [ 324.783056][ C0] ? process_backlog+0x727/0x18b0 [ 324.783084][ C0] ? __napi_poll+0xaa/0x330 [ 324.783114][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 324.783138][ C0] ? __lock_acquire+0x6df/0x2e50 [ 324.783158][ C0] ? nf_hook_slow+0x176/0x220 [ 324.783185][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 324.783207][ C0] br_nf_hook_thresh+0x3dd/0x4c0 [ 324.783234][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 324.783258][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 324.783282][ C0] ? lock_acquire+0x115/0x350 [ 324.783302][ C0] br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 324.783327][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 324.783353][ C0] br_nf_pre_routing_ipv6+0x382/0x6f0 [ 324.783378][ C0] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 324.783402][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 324.783429][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 324.783454][ C0] ? br_nf_pre_routing+0x720/0x14b0 [ 324.783485][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 324.783507][ C0] br_handle_frame+0x127f/0x1510 [ 324.783534][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 324.783557][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 324.783580][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 324.783609][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 324.783639][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 324.783661][ C0] __netif_receive_skb_core+0x989/0x30c0 [ 324.783696][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 324.783722][ C0] ? ip6_rcv_finish+0x265/0x280 [ 324.783743][ C0] ? NF_HOOK+0x336/0x3c0 [ 324.783765][ C0] ? lock_acquire+0x115/0x350 [ 324.783786][ C0] ? process_backlog+0x3de/0x18b0 [ 324.783813][ C0] ? process_backlog+0x3de/0x18b0 [ 324.783842][ C0] process_backlog+0x727/0x18b0 [ 324.783871][ C0] ? call_timer_fn+0xd5/0x5f0 [ 324.783892][ C0] ? process_backlog+0x3de/0x18b0 [ 324.783926][ C0] __napi_poll+0xaa/0x330 [ 324.783953][ C0] net_rx_action+0x61d/0xf50 [ 324.783988][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 324.784015][ C0] ? xfrm_dev_backlog+0x24b/0x3c0 [ 324.784048][ C0] handle_softirqs+0x226/0x860 [ 324.784074][ C0] ? do_softirq+0x77/0xd0 [ 324.784099][ C0] ? kernel_fpu_end+0x62/0x80 [ 324.784127][ C0] do_softirq+0x77/0xd0 [ 324.784149][ C0] [ 324.784155][ C0] [ 324.784162][ C0] __local_bh_enable_ip+0x100/0x140 [ 324.784186][ C0] blake2s_compress+0xfa/0x1c00 [ 324.784212][ C0] ? encode_point+0x8346/0x84b0 [ 324.784238][ C0] ? __crypto_xor+0xac6/0xd10 [ 324.784258][ C0] ? chacha_crypt+0xf24/0xf90 [ 324.784284][ C0] ? __pfx_chacha_crypt+0x10/0x10 [ 324.784308][ C0] ? poly1305_blocks+0x2b5/0x450 [ 324.784326][ C0] ? __pfx_blake2s_compress+0x10/0x10 [ 324.784351][ C0] ? __asan_memset+0x22/0x50 [ 324.784378][ C0] ? __asan_memset+0x22/0x50 [ 324.784405][ C0] ? __chacha20poly1305_encrypt+0x316/0x350 [ 324.784437][ C0] blake2s_final+0x10f/0x260 [ 324.784462][ C0] hmac+0x204/0x3b0 [ 324.784492][ C0] ? __pfx_hmac+0x10/0x10 [ 324.784514][ C0] ? kernel_fpu_end+0x62/0x80 [ 324.784541][ C0] ? blake2s_compress+0x1b4d/0x1c00 [ 324.784576][ C0] kdf+0x12d/0x290 [ 324.784599][ C0] ? __pfx_blake2s_compress+0x10/0x10 [ 324.784624][ C0] ? __pfx_kdf+0x10/0x10 [ 324.784654][ C0] ? __asan_memset+0x22/0x50 [ 324.784682][ C0] wg_noise_handshake_create_initiation+0x460/0x810 [ 324.784711][ C0] ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10 [ 324.784738][ C0] ? __lock_acquire+0x6df/0x2e50 [ 324.784757][ C0] ? __lock_acquire+0x6df/0x2e50 [ 324.784783][ C0] ? lock_acquire+0x115/0x350 [ 324.784803][ C0] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 324.784825][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 324.784852][ C0] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 324.784871][ C0] ? ktime_get_coarse_with_offset+0x102/0x150 [ 324.784891][ C0] wg_packet_handshake_send_worker+0x18c/0x370 [ 324.784923][ C0] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 324.784952][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 324.784988][ C0] ? rcu_is_watching+0x16/0xb0 [ 324.785010][ C0] ? process_scheduled_works+0x97a/0x1630 [ 324.785035][ C0] process_scheduled_works+0xc3d/0x1630 [ 324.785072][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 324.785099][ C0] ? assign_work+0x3cf/0x5d0 [ 324.785124][ C0] worker_thread+0xa47/0xfb0 [ 324.785154][ C0] ? __kthread_parkme+0x71/0x1f0 [ 324.785184][ C0] kthread+0x38b/0x480 [ 324.785201][ C0] ? __pfx_worker_thread+0x10/0x10 [ 324.785225][ C0] ? __pfx_kthread+0x10/0x10 [ 324.785242][ C0] ret_from_fork+0x514/0xb70 [ 324.785260][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 324.785288][ C0] ? __switch_to+0xc89/0x1420 [ 324.785314][ C0] ? __pfx_kthread+0x10/0x10 [ 324.785331][ C0] ret_from_fork_asm+0x1a/0x30 [ 324.785367][ C0]