last executing test programs: 1m57.45962725s ago: executing program 0 (id=450): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'ip_vti0\x00', @broadcast}) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r4, {}, {0x2, 0xb}, {0x9, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="7f4ba13c5a27118dc920175650f0c9ba1809dd13a6e2d5b38f40adfa278c09e0e3bd05add4d780cd753b50f06f3b51f43761c7783f38ceaefc2dad57889d8b3a2d21314410f64ec2fa92e3a14b0141b39c020021d1edd011fbccb808a317fff4cf49aab12da619d67102048ec43c76cdb9d395e8b7b6e589d788aeeecb5080fc3d5ec6ccd656e49c0a642671d3fc363b46240bbc46ad965399b71db3c8f2b269b20870a3d2a6a8de5213b0f9d41c510c827056b7284391da244ec7653648b670f9a3483b314d861992ed7fb369eda093e1643c300b94d996fc592adb22c379be070ce5cd806da85a492dd4199cceb4c5b750222485325cf1073bf87e93bdf7da8af8f5f626541afd142e24ee8f4be9f038453c0edf500deabfe4d1a7a9de51df012bc2f3b767b3c03be6ace8c37ad571323cd363116e01f98a8ff8148d3900a65b788e99ddf9d9a2383f1730c7868d2dd031034bce5a77bd1ef3385105968be7bd830bde788092f657be36f89ea55ced486e18982d01339ed04a934a43c7b3", 0x17f}], 0x3}, 0x4) 1m56.94101785s ago: executing program 0 (id=453): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r0) getgroups(0x8, &(0x7f0000002c80)=[0xee01, 0xee00, 0xee01, 0xee00, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) syz_fuse_handle_req(r0, &(0x7f0000000600)="a5c0904246e06d3d0fb4124736c598fd9f5698428f394d89380724193a5c49464dbf4bbf742aaa76e4bfc7ea2bef2a7892e030f8d72128699932c8ec07a91137c28476964b9ab7b3721417fe5c75d77c7539031e4f51363b14eca8486eebf07c6afc7705309925a4c0a56773856ffe16848a11198eb2947434a6113e1cfae3d1e532aeb2848c9d21a33352bac086185a26ff109f09015d79cbe7cd71d262f480ccdd81bfa311b88d355fafe1fa8de731b49fcf1dbc19c638407952e72b483cbbabd5fcde408d14a2a5166e003af5dc6e5487590c0e51a94809bf12e5dd4570df932b9968ec8ec463ce7cf46cdd808a1870e080c1bbbe82d1ab8004f61e24db5e97bc119a9f2c401032021bcd4aa3d6619910c93f4fa0e725219e3d62ab87f04242fe5c50653a44803eacf5bf3fa787ba5e84482f175446888a9161573ddb3a2c5ef2f86def666cbe607ef53358241d07ec92b29d433f4ff596cb71e4c39429e8e08d2fc4b93c38a21b16d515c16c972c9033e57b331a53ac2ea82f39a0886e548ecf7c3c9a647119c004e25748d9b01647129d907d246ce7fefb3af36a05a1c0fb7bfec053ffe6ccba099dc818e1a38bd3d3e0e40f44eb34e22d8d444d0b6cdf1330617f301aadc3434806b405a22419993eec46484e58040aa8ce54c2e069e9b5aea2d37b12710322a94efd3d1de912ac987949d7da7adc2f796bee1e0aae335633f5b22a734925958a222d3f8cc225e283e19ceb19a3238a38d2188c593c21a7eba884e5dedc4d8c7d8f497288dfa844bdcab1a96f5e766605daec2278828a31ec32a81fd622585d4f8d14da45c0a0afcdc96f870a475813c0aba3b8ff4fc2c77dd5f97eb17d5eaaa912a7a95c91c83e78cfbffe07c670aa3f2f0f720ab2e4ebdcf25aa5dd90376cf6935a29ca000035bec7545ec2ce0a4b89f1e9005a10739bbea9e92a35d8defc16f99768418217fafe994e12893bfbb862520cb4095e0d874bd8107e35e8abd94aa112b44b21f16a2449ef31c58ee16a558622aee873094c48f071d3e66ffb375c638fdada3a90e9c54dabd5d88b3ceaf01a205f319db5ef2d581d5b8f67af3cde5b667b053b63d22551b2cbf1ac8a9fe8714e757c476dfade61212a00bc493af9380d0e69c790a901f7b6d58f27e60d9e626c8fe36773d4de25b63f6dd22df35a71b86dad91f26ab2aded66a2a8ced96246ab39b5a4585dc168689bc71a7a5b2e8ef5468e61e9d390bc249965d79efde70bbd2e9a9ed3c79bc835fa4287041ca0ff6eb7fac51169340b0aaeec651ac9cd4ed13663f75ff32d2bb7baca802e8941bd490e1e61fd054d5bed287a2a6eaa6dfabd2b922a62a42ac3538a4a2c56118e7814784b35ee416dc60c2bd1e217540884429a229fb0c0e761e353a2de4fe64caccffc5ffebb1ce9d86d953fce6ef7714fcd947c9b360be786a0abbca5464688b9330203bc7189cf12686146c44addc923a871e8e44e9333a581cd78b4efd2a59c77f09a95e1abe725aa6f8204c6f1094dfbed77527d3e4bd573c846924a905c9ca08a78f5140c4d27fc91b94901a65f4990c21be0e7266064d761b0c73d58fb908638fbdb87db3e5e53823feba5b22d471b4f83af09d47b14a10376b3631c8c307e460e42e391914d71a458b9ed09f78c21e73984f7fd9bdc2be1d045c36a56e22817f604a72dbd9cb3c1012394ee35e475495ee0297ada46d99ea5d8d418bc15a419bd5b69da74eac15a50bbd696419eea1f2b3021cb34c86ce9bb094e0de763ad0c9b23d56e883bbfa521ad2ad9d736ad290dd29979c6d303a26d1eca85f009b70f17949635a535982ae6b75ea998956d3c601044bd62e0919e4af29e957fdbd8f393d94f72dd23d7465b5a1f4558c84a5f64a4e2299c58f891df7e3b22549828d628083c428cf7aa4b54827c3aab7cfbd1282ee442656b838cf96985e001c5c495fd7eb30d77132fc90d3a6625ca4a05028069d6653c6088533e88269eeb3b55841714590acc32ea302a5dc1017ff9bf62ad8216c1b6488ddf7785ac487baff9cf782cefa9ab8943cd899e1e26b0021cdebb4e61689526387bdc7b7ec37d2a2b03aa47b3b936ffdf3f7544d6bc247a443eb7912205a3aae404e154d77695af55e4e43c9956d63e77594fd6d31c5bb9991104fb1702993ff58a264f376b972145cb8b0ad8e7d5b3fb7dcddcc9387fad3449397939c0f8f8c0e2563dc9ec21ad0db8724f52b2836e0b62806246a71ac176fb93439a36d3c0777a24ab406bf128c4aa5e20c0cc0209ed385f4e75ad71212da5725f1423c82da366f19bc805f3de7ffe8e9ab7b454cdccc95043464f04a937ac794b12e7b3f8e0a87dfd0c0cc2413aa0986115bd8ae7d00b58047930ece629cdd79452a5e03ffb30c375ed1d9d1f843757c28e64e9b3d94728782c0c910b7215af6052500e83eaf395c7f71ab6373b17b943299fc6e9a87767812eac0a987aafb3b31c2fced80256f3d86162eca3c052819b22b452154f3dbecf5ecf03b7978f69db3a3533021f489e13412aff84d09015ab28d49f4d01f7aebb3e6c500c6aa3abb484b22daf51a156a2f5854d24c7f2a4a254adabba53109d2cd30a8a0ccc39e9941a867bef58c76cce6f2e0ac7ce121e68b22371936699274f8517a29e52d27cf899879f05ac5b572ad366b6283045390894b95961578a1e4f44619a601be00fd3571994e56b17bcefd9c62adc9dcb86c9beef0a8a3f3c029c4265d40da19f447a8bb1158378af899326cdc915bd52d513d6df9c8a8b4fb340af989a99f1ac653c04f3d06c3fd3b0ae592ed156a16f94626eca633d4cf82efcecc264bb39bb818fa866004f3de6ff8d2019e85f1d91c30cbee861b9092db3b4dae15bab056ed5985cd8fce0f4c6c36b18da7ffd8610bb5985e6be76d0a8e7bc39f22c1b628cdf7614bdfbd8c8de732d7ebc977b1015ea5f6dbbb20deec7e62c5e190092637e83c7a7f8588fbf356575a369bae0f1b07682eaf1c4f248a89d3feacbe7a4d9d20d366b4c63671d8de95eba1c38e769dddc54df6f3a9a82793820625314eb7269be73c98db21944aec8e73c660ea8198e2f6186db88a048eb790296f387a1d8300f21ff91b0810464e84208348e99b7ffbf05468dba03bcd7feff4097eef6bb2fb1e9379f0d40f17ceb7c45a376199880471df058c19c369017f7fd5ed709021bbba64921c344e6caf63b08af049f5cd11c964d334ed05a95ea78bd0d00112cf42516b29e285ceacca2a0d27700dfe35c3063fd468bd6271d3fef77aae6f11235710eaa9369a96a656fded6ef2968331bcf0916daa7a34f2f60a1d98955112bc4c9068f3c93b463e29f488e4bbcc1e4e519a57bfa0da7cc7e05c445a720516f5b8cb0b81ef3e33ae7bbdf6ae94fb735ee7e350b0a99655ecb4927cb0a28a38a159160070d1e8c3cd81c2da6b078dbdd170c13207448062ae2da9bf1c773dbe102224ae801cae167b5bae931a1bb56b3f699c1447125171b2cb36d5aabd2e06b33f8598ce593675f1302d166f7c01e3cf53746a3900165cb10cc2fdedf0492f9a8539e36853e2cb4f27ff0bd283b75d489e47a9654ac0280e96739a0ddbca53fa04ca74862b7c680e32810458723bd630207fcf54f29b3ac9d0c52396d11f28c49993556cdb2cba9d8cc991e49008760a698dfd80dd1b6a199615ca13bab6223b4ab7770172ae4894fbd80bbc2e872a2eed087eff1f69ce217977929eaf7c130b97d767e78da026d90e91d9fc4a4a6622bb411977794c38c22a3f4d19705b243146592f306e36143d1f8c7e4628639b97575ff1bb91a0d5423057a47a742db5a60deb30b7804073b90587e05aca7648b58850d3bacf3138905f5a5b419469428c02d040da7d843a4048b6e8993923cbd4888d7c8c78015e1973464257ae23288fb6801d356aa451393f70895ed871d20290ad97abf2587182df515e445ca13a5e3aae30c46d6b067692c706d2e7773a5fea593350266739e7ee369a8347edeec15ec3f9c038f1b30981a51f5b086a972d4668a8d176ae95bc1cfcaf7f65203a31c4de2019c52b78097d46a0ba5db0734404bf8abbee7847974c77b8ebcd41566c8048326174ee06985b869f12acada1e601d7bbc0a4f011fad8061c786b5b6dcd3395ea40020ff29fc007ae3faff38ce131d7c6d9aa93291a373d2503974b1fd827c043caf6e7eeff46b93c5036827c174065aae1920d18541559d2525fe17c017083e2b2f902efa44e45f8f04d17b83a6f6380fa60d370eee2c5679b2371d514fa88fe5e654bdeefdc5da159d56c04a940e89751b5cd427ed2fe9cf08c868204373f2db44a08d3cd31726b79f9b7d0a3fa5ef54315ef1dc1bd6861b3f0fe3a79d583279c86ac687a15049616952bad3245b8fcf9d685a2bfcc7f831fa428051c5729d0fcc441edbdab18df2326b278c8796e337ad9fd3a0e8d07547c84b1aa780e7935b62856868a1850d02b17938186ec5fad250cafa7e75d7f1d7021c5723b89574486fd5f9d9ec469eaac80e165d75b3126c76b7c2988a59a2b68f5c22ec798a8d93977e33814e242f9539ac17a0ce0a6bf6324b5196866e947ebcc598e13eea84d2881b8d616f5ef461c9cb60427529a0b5c0f31d509e39b5f694b7158fe839e93ef208500907b510b900ebf093c74ec44900f3a8e0f3780c815779b02028481a0279239864806c3495776d54c0a650af9fcf5829923278cc40fd33c43e3743b3972d7403f567895f1aae7ccd2b307520f9f9dd4b5dbb0575c4439bdbb53c252fe57ae37bed22055de5b81862aa5c9fec5c35535d4cd0f095d2bd46110b376aa22a0d5e063ccc583ea3be3cf0184d131c96c1d624e64b0b2d418090664d04ad61fe616bfb9298c7cda25dac8e2b8a42238bb25830baa9b63d94fdcbb132aa57b4afbf2d375a6df46547919691623872364c7a1bf7a749c9b3eb694f12dfa55131824412b4d64ef05fbe4997e4f9feb9a78e228a3b3ae1d0267b177fa8347cd3cea0d5c01c1a51191db0f6cc8528ad64a684e72599f47cda064a2db2e8730fcc8a73b87ee39d4b873e10ea7f3a242783f633224ba9d9ba1d9159948e2d6cc9e47cdf2ffe536e779207d11178b76b346f5359a46483f122be021251ccce1cd3bf5a074eb7cc4823961b131a03e66fc3c59b4a424e0b691c0cd566ae2138a51d4e7b31fcc2903063f7a7356d3a5050b127bfd389ff3a221253737eb3a1e48e707f8ce400885ec537956c96943a648ba9947dff66bc97f85a90f8c7e4defe549e2751f0d0d1340a6b36a970ff245838c88e8e614e92ce1f2be23c2d92ab3e124acbcd99d1e283992c56cc6465a16781a49f23814d3e902aae40c762dba0bb9c8f720216641b6428817f7aee892ddd1de78f4044589759a673f4cfac0d18b9ffb23bf73d021aa6e818ac6f40f64452b67e7ac2bdbf09156a0be006fbd58260780eab567f4fb0ac1838ae7f5b25f4d1a2956a993cd24d4ff2a72c889b8826089fa41eae4562f56d8aa7327703fd425f956b98095afbf797c0c02f18728cca240fb8dec7156edab38bd550a24dd402e2dff6cdee4a8a2554c3a83038a4693279889464bfec488cf5a2ab726e21fa80cc1403917986c24be61acbad59b0326fefa0b0d87af8e2e1a9b9fdb876b0e047885af48b8387432e1e05fa010966b710308fa36bb99cbf55cf9b786986fa6a83c38b2667618f70f5c9cfa45a984cf5ccef6c2f069d85ed48d128f27be2250f6acb45deb3feb56f94d50ddebe1478ba3a5f87749b3e00728ff2c69bd83b60439e7bf171e9877259fac2efb1cb97d9900924f708affc06cf74e0635b6a9f4f92b97c5f32b63a78098beb8de85f2996dbcd284d76630b6ffdee67a00bc4dd7f680e4eb6044ba2956afce9ea65ad7da4b5e6b56e61f50bc1d9de94e348fe3f02f1c6ef4b92ae12e96017b46ea867aa36db016eacc372ac1d48de94cc55b001491d209daef8e7be6351cb7d1760ae84bfeec89ca0d45e98c83e8f9409b1e6c073b418deb3664c23bc47ed4bc6c6d31e24d219eda6a96fbd8049d45e82fda23677a10861e1b7633f429cfa77e2efebe7399c4e11340bb34b6217cebb016411f02c8759579800ad05044184402cb9ea43c7040dbf6a6d30a3cf86a49f4044872f139d1273281603fd8c9341af1da8d706ce0b81b0c6bd3f825955dd93ee467e30fd7bf88ac8972b314945609f8ea422cd7bf04e550bd235cd9e936db36c0d634eb3c3b8ea10dcb7a763075695da95da71ea97220d01f2fc89a5b011e40296d5ee73e8079d33e923b2cbcbef499fc34ef91585523ffdf7e82e619a0c2fec1c28c3cf2bada404165daf7e6b97d03bf9de4c896f26c041cca62c2059bf56244ad7b182024d5d0738ddb994bfd6505438c9594c3ed82796912d619197fa7820176820f227b4f8e47497ba47a69e9707b23547a0a91a90f545765087ce919d23545d0de1b9696215c6843a0eadfde886aebec1239b76fa08717aa5e7e6eb3e3ee4309b230f8d68b4f5f1b7e7fda4a99a424dede624cda21694cfa0bde262dc28862ed27052cf0dd62d1fcef24e1fac3848deca25c96a64bace35b01e92168891098748dce5bb9334bfd1ea3c33687b912b21db08ed22405fab1ab71af3f91c30b3d03ab48813147fea796ee29f720196ce2eaf7e7d0cffa5e3e629823fab52a40a639e8cce02b171b4316137ed859a184c46be9e9c54fa1b6721cdad6dd238db00d65db498beddc48d6f3c971c42aabcd2c77c6768b7bcbffd449f937354b9985378cc4a122d24ba45a317c2a84b682188c19ffcf49560bc5720b502253a6aecb7b37e64c047c889dc03daa1534ba9fdd2d91dfba9560936735f4d789e42069a6c6f31753c7a2a60549437ecd431b1041102556d3dfd331224b27101bb5c26a63c79c48eef85af5979d3123cb75a44cc136d686ebe630418897981e6c009201149390b517f20036467d439f2a2d243427b4d4e4deaa525016462a070e1d2a9c0195a35781a614b5663a9a74a5ba216c508ba9f463539dad1be6dd2c4c033614714fe2b2a7708d596d1142f6ee2de39f7c7d8de8eda240e83a681d0f4a5a1f1a87b9afa81568764d7d30f84d40302adcdb571c0f5d7a5bfcfc01615eca801444191c03b646e05eba5e2b0106a82bcf37de74d8d529d512b1ba37305b1cfd83885494b91caa99999761a079f209af67563ca043dee8b8089952f08243361a970f3d5845b1f49075e42132df30c4eee973f63c5bb6f4e6411bb8eb526cee74d52c96d32f57c2235e1a8a9def9179f5363d8db83196ea97f7af5cfc95be0ce547d9929214f22d72079ca9dc3882fe3a990cfcf0a5ca6c87a2874df0dbb20dde110277317715eda52591bf21c4a9e158a6ceb0d07415945bd77df2503668aad38ca9df4da2af115420f07f18d5f21e36d6ba926df24f594dbc2a4cc8132c2856b70437e0fb4c34a6e58cd5491be035d21331cca56a2e8a497e610f18b2977ce2032619ef0254808eb25aa482ff8b45fa997126f403fb8716dabce8b0c334f16d560fee086da5c544ec3df4d04abf3376af084cc08e92d1ea3b40198e7b40cf3d3d1763927b9d5ac684416056ba040760b6542bb51ebc4d705c65c87b3c066600787eab83010ce9d721e575fa678ce1a506fda8b0c2ee91282f239c85fe11f510a3f1b8c5ae8d9b5720857f9a96bae2c77524f72471df879e156ed29ea3c2672ea43fc3e01809821f2da7c0816fa90518fe6222ac884ae5b0e647dcd631d06fa3b31a964d29630dff516f1b337401de4f104de0a5c49e8551a5b99817373202b037eb5e33130a41597402a780674d594c8aeeb91cd5d9f69706fbd30f5019fd506e14c77ffcebd49f0ed49b999d6851ae5e63b1b3e375b81e2bce4181bf3b8e8c0f1ab119b6ab6c047047ce2bb7b152e50cc27d6bf14b48162d26a601df8519428126b1ec68a40b4837a88111cbcb80ea1a087e7fa1c907b6c38052c1a584841ba4cf703f6b659c9c3aaa90d971d422354856e384682ad20c88ec1ca655747a753d6b9261cd7d882acf90c4068807c16c76e0a20c949735a3e0738601dddcc589c6b27d3ce666700d7236a1a1df78a14092aa7c2f971cefd32ae69322ee5e1dea45853541f45a6e43db60e5cc77abd595e140d2c7d413fb059eae6bb0e180e72628b2e00597f2109cee4f85d09a357cabbd24ec03fd8f91e3e0c1f38332651b6a5f02103022b37f2c28b61d97a94162a42f1ef53b959147ac1d0134d1f2483bde582da1545304c9e91eaae72783cd6255469178b3690ff9283ebd0fe157d01819f944a378b835e22da3027fb1e215573c745dcc1c1ae2fd79b936c133b938ad841023f780c42257ba117813424ceb7f2d9cdbb3843af27c7749136b540e73418835266f412a2d7fce3a7dbc576588eb197d7a3c21049f67c37ad91f3f574734fe73da832d99ff5dc9f540ca4005e53d7bedf2779be923e6cc634ab1dda8357929bf4e2d8d2c80e411b890e0fabfdff324d7fe36083095729d6777f6d3ee7ccc7997aa0681557f6b1b9b0e38f26bd4586c5b1fd751e52f80260bb0ee3992f15420eb8115040d8f9ebf9bb143632c478e09dc81aea88b18746574058c5f6808e525bec56c1eae9380991b2834b8d3d0875c1c48d375f2e8567f92b6b21e69968daa4094c48bbdaa697d2ae63d772eb12ca2f8a2517942aeccf9297601dfdbef65c5414bddc907ff81fc5e44c06e9c0ae6fbf7c1e7daf68c40838852f9c27ddb777e385df57a3fa706fccf174f131561684e4ab292509c7243acf4e08f9bec8ecb7c403f66a4c51fe79f7bfbfaeb0ad8315ef6f25a24e691a6214a48026fc48a00e23b6e31d2f185c01176f41423b1da6ac170a2c285a80e8d7cfdd547366f2a4520907a500375b8c0323e2b7e7eebafd9435a39a6ab189b235b9f210006df316e2f1ec85ccdc8553d026cbd62bda23441e6cb67a0bc10fd62b9a62ee431b14a21c39f11d3a2f2e95c5fc659d1f40b3daed676918d402299a92f4776e92639baf6a00efc4e6b68038544bf28874c43d6323adf3ca8c21b5f9e5a3f2e697fdc3a2b8ba518e2743cc1caf5af471dbb113e8394e43687635a5fab9efd8316b2a6d7d93f2999264adfc0656f2e6f7a8d9fe030be1fb1015e7a38cf45a9def8a6f32d8b5182fe2b5a868eafe6af749271a143bb4fda1c5b8187b299a0d63d2fa423a86c5182fe732e574e5bb7a95d9a5f5b43b79dcdfee26cd57e0d1934d25822970352aff7dff3fcb317dcb7faba3cbcbf5a43c2aacc9b64a2ed7c3b1b4d6ac5c620ae5d2ded6730aa7655189c596115fc0cad5c11966445f1af21904d1e9b0af32b6e0124e8e4dd3d050f1b5a87199411a46f09b1d51a04386586b3c7bd3db070c7b736708d12e2cf9db5343d8079450a922741cfe65e339af8299105ad622a4d97f72dbbe430a651aa0f2a0b828185b75a43f80d53b16d8ca1273efb3b9685c40664425a40552606daf8b6b7323bea933e23f577fd1f192336300815e08dd4141d8a7152e44ccf08e3a5fa2be74617581fc08403e4777df95377c96cb1446e511708fc8ba7d5537119bee7e596abcbbf0aa454136ac969aa97c1d41aa320082ad2b1efebb3692203ec6acc2083f56d83ff41ad528a30906f06b4c1987a46193b8ad683f2116150748a7ce837063865ae077fa54f78024dd250a7af50aec9359ffceee8ba436955dbb1c0989461424ce56decdeb3f77e9cebba71fcf091bd88ce66d50f8411d89fbcf8a7b4df463c19604a1b117027383b7de2e944553d97488668b1461a1ca41688c7fa964e685b046e9f8eb2956c9041a3c453b548ffc442dfe91de309d0f6b456e900ed98dd3f91c362dcdad3e79077bfaffa303da05875a589de32f1c668871cb87aff309d3cc1ba465859adfbb6581e973de5188557225173ab759ce658a43fc44927107a6c55acd4abed33130b3fa31ca8ac7b0c5952939849cdfd49a5993a1ff6f0439520cff86b80d190ed11e35ac32214ab192ae88b1f40d4ab8dd4c71f1eed64363afbe75ce6daa0904d92f9130e3b532566aa5c0e0a58f293c296599c2e18410ceafe2489578aace7acb04ed3d8caf57afc83d940480de4bea7f431b4b8726ca72d4e7ce302298fcc1f767b7d3933b3023a1c023a0e9748fed757d2a1d2fb85adc653835533b4d2dc7e6295c5ba6837a4d9735e3fcc90a3ab7a49cd56a2dfae3c5283d5f74ee2dfb813e53f29dd9cc8aad69da0697aa95d67f6ca501574e427b0a6e55307dcdbae195ff9f37f4649809c92c78a69b174143deea217f21db14967aa1b1e7c957ba8c95e43e55557034452a6f0206c1127062d8839120a9bd36feeb6f6ec80c78db1bb0c52d8df6a280ce0d16934dd72dce3b5ddac2ad6f0bd4dfbe12083085b9344b912fbde1a96e85a158a994d0e65e3665865a11402c1f610e9d1226966b25e7c6d5d3c40f15e0222f43cf328f74b37766050ceb42b4ea4eb79705a17d891f5607eef386338798a1ae6fd468a07b9862b912d7feb05fa216ac93aafba09b9a3e6b101253a2349825c2476fbf370342c6f2645d43e578642fca8e72668bc2c9b54ab2a072587c8afd04ff9eb423ccc4e66e190b39237c1927c0ee6effdea749c197490224842feb9496547ff7bcbc912f5cacd6682cb69dc87f8f7a72619e8740970ce2045dc45c30a392bfceaf79a887589c0029ace5644ac118238c39338fc0afdce0fe8b204dc0100372cac766efa8f8813837f815a5968aa1d93238b35dc8aef6c35bac204d5d5d343038206a3c1303b11c73ba253bdf8d471d04621aa43167953a55420ab7e612d4323c5f1a0805bb602f66660f85e55b814fcfb84881cd863823419775d534004a468e527197690fe53a6577225ddc045d2d4a360d26a1679242682f9314d46c17396adc452ac47a9576ab1683b9a9f47129b854b0ae1040bd684a807128bcde93cc076a0ca0159fc9f5bbbedfa3556fd8e66ce44664c0a86580c30db6b8494a61ae92a0c81bd8af0dc62d42b4e74670fc8cb44af709bef742d633c3d23a181616c45d6e2ba9c1f83ba9b76f8abf40f5cbd01e429ea6a30996f0f2c786b2eef72af22a23e3c8653f1c82e156d963c9cb7f59a3479520d13df721702b5cadaf60b61980cd50f4a1a69917427d8735e4d8fee518017725c9a8e7f071c82a598109fd4a24c5748b070aea265aff0041b5d28243fb48d7f624b5818ebc5c089053f272159da6e617bc2b60fad1b1a349b4f3125376130ca6e2fa3fa21b0ee5a7fe34aef2fd3095438b28c1a382954ff523717f3dcfd6012cf1994d5986c1f6a5e8ecc4a4b92c072714154da8abfe6bc0df53e43449908963a704934f2842568052c4434187e77ca81dd37f643123afcc65ddf55d4e2d3b0687e9c2606861dadaaa8de0bbc4b88cbefb235485bbab280205a7887d4f1f38e0f37498ae0134f987c43f9380f4ea068414bc14d0136fe0ad72dc652ad1d16ca560ae42400611416efa1d4a761560d9c47c7d14604e27c9252c3eda287b1e54908bae899d7407dab7d87797cc9492aafe", 0x2000, &(0x7f0000002e00)={&(0x7f00000002c0)={0x50, 0x0, 0xfffffffffffffff4, {0x7, 0x2b, 0xfffffffc, 0x200, 0x3, 0x0, 0x9, 0xfb, 0x0, 0x0, 0x20, 0x9}}, 0x0, &(0x7f0000000340)={0x18, 0x0, 0x0, {0x100000000}}, &(0x7f0000000380)={0x18, 0x0, 0x7fffffff, {0x6}}, &(0x7f00000003c0)={0x18, 0x0, 0x1000, {0x1ff}}, &(0x7f0000000400)={0x28, 0xfffffffffffffff5, 0x0, {{0x800, 0x1, 0x1}}}, &(0x7f0000002600)={0x60, 0xfffffffffffffffe, 0x3, {{0x1, 0x0, 0x9, 0x10000, 0x7, 0xb, 0xa, 0x7}}}, &(0x7f0000000440)={0x18, 0x0, 0xfff, {0x5}}, &(0x7f0000002680)={0x13, 0xfffffffffffffff5, 0x5, {'+!\x00'}}, &(0x7f00000026c0)={0x20, 0xfffffffffffffff5, 0x8, {0x0, 0xd}}, &(0x7f00000027c0)={0x78, 0x0, 0x1a3, {0x3, 0xffff7fff, 0x0, {0x2, 0x1, 0x8, 0x0, 0x7fffffff, 0xfffffffeffffffff, 0x1, 0x9, 0x5, 0x6000, 0xa4, 0x0, 0x0, 0x7, 0x7}}}, &(0x7f0000002840)={0x90, 0xffffffffffffffb4, 0x2, {0x1, 0x1, 0x7, 0x6, 0x7ff, 0xfffffffd, {0x5, 0x5, 0x58ea35d1, 0x3, 0x7, 0x7, 0x926, 0x9, 0xfff, 0xa000, 0x1, 0x0, 0x0, 0x1}}}, &(0x7f0000002900)={0xa8, 0x0, 0x4, [{0x0, 0x9, 0x1, 0x1000, '&'}, {0x5, 0x0, 0x1, 0x1000, '\x00'}, {0x0, 0x5, 0x3, 0x64a19400, 'ns\x00'}, {0x3, 0x1, 0x4, 0x4, '}(:#'}, {0x5, 0x9, 0x0, 0x10000}]}, &(0x7f0000002a00)={0xb0, 0x0, 0x3, [{{0x4, 0x0, 0x4, 0x9, 0xfffffffa, 0x1000, {0x0, 0x4, 0xc545, 0x7f, 0xa6, 0x9, 0x4, 0xcc21, 0xed, 0x8000, 0x2, 0x0, 0x0, 0x7e, 0x6}}, {0x6, 0x3, 0x2, 0x6, ')-'}}]}, &(0x7f0000002b80)={0xa0, 0x0, 0xf, {{0x2, 0x1, 0x81, 0xfffffffffffffff9, 0x3, 0x5, {0x0, 0x20000000007, 0x0, 0xe79, 0x3, 0xed, 0x2, 0x40, 0x7, 0xc000, 0x6, 0x0, 0x0, 0x3, 0xfffffff7}}, {0x0, 0x2}}}, &(0x7f0000002c40)={0x20, 0xffffffffffffffda, 0x2, {0x4, 0x4, 0xc, 0x7}}, &(0x7f0000002cc0)={0x130, 0x0, 0x100000000, {0x4, 0x4, 0x0, '\x00', {0x1, 0x7, 0x0, 0x7, 0x0, r1, 0x8000, '\x00', 0x7, 0x10001, 0x8, 0x80000000, {0x172, 0xa5a5}, {0x7, 0x7}, {0x9, 0x2}, {0x6, 0x93a1}, 0xf, 0xa, 0x3, 0x10000}}}}) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9b}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) unshare(0x22020400) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000040)) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x600, 0x2000}, 0x4) 1m56.574407736s ago: executing program 4 (id=455): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r1, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000280)='-\t:\xfd\xff\xff\xff\v\xff\xd0\x86\xd3Y\x8aT\x826\xd5\x14s\xda\a\x00\x00\x00SP\x90\x1b\x8e\xb3\xc9\x9c\x9d\xd2\x1f,\xc6\xea/\x9d\x0f0KR\xc8\xe3,<$P\x91\x1fj_\xa35\x86\xe5\xechCGz\'\xa9\xb3\x86\r\xda\x1bNG\xac\xf3O\x02\x83\x96\x00\xfc\x00'/95, 0x4) r2 = fanotify_init(0x200, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000180)={{0x2, 0x4e22, @empty}, {0x306, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010101}}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc01cf509, &(0x7f0000000200)={r2, 0x82, 0x10000, 0x4}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f0000000240)={0x5, 0x15, 0x401, 0xfff, "10f823483248e4aaffeb13fc184c89c69801b7aba14f2deea5a843b1382bba4b"}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000540), &(0x7f00000005c0)=0x4) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) close(r6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0xc100, 0x0) fanotify_mark(r2, 0x1, 0x800101f, r0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffff19ffff08c9ba199f059299bc0000889078ac1e0101ac1414aa00014e2400109078c2e60000e3e00000c1b1063c89e6ff2b2f"], 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat$cgroup_subtree(r8, &(0x7f0000000180), 0x2, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r9, &(0x7f0000002d00)=[{{&(0x7f0000001080)={0xa, 0x4e22, 0x1, @private2, 0x10001}, 0x1c, &(0x7f00000010c0)=[{&(0x7f00000011c0)="e6e2", 0x2}], 0x1}}, {{&(0x7f0000001100)={0xa, 0x4e20, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffff7}, 0x1c, &(0x7f00000019c0)=[{&(0x7f0000001140)="a5", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r9, 0x1) getsockopt$bt_hci(r9, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) 1m56.366143595s ago: executing program 4 (id=456): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x4, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0xb, 0x0, 0x8}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000000c0)={r2}, &(0x7f0000000040)=0x8) r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) r4 = socket$kcm(0x29, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x119, 0x487, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, 0x3, 0x3, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x7b2}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1a01, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r7, &(0x7f0000000340)=ANY=[], 0x20) 1m56.241281696s ago: executing program 4 (id=457): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={&(0x7f00000005c0), 0x6e, &(0x7f0000000340)=[{&(0x7f0000002040)=""/4097, 0x1001}, {0x0}, {&(0x7f0000000240)=""/22, 0x16}, {&(0x7f00000000c0)=""/39, 0x27}], 0x4, &(0x7f00000004c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0xc}}, @cred={{0x18}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0xc}}], 0x9c}, 0x10000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7fff, 0x0, 0x3, 0x0, 0x8001, 0xfa11, 0x9}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000074a27b9129b4cf8e772ddd6941fb742f7bf8503931edf3569e5667e1ee7da5080d98a691c1c0e2ff776b3707934c2617d8590eaaa1b5c5c16d0a31f14dd0e8c0aa96", @ANYRES16=r3, @ANYBLOB="01002bbd7000fedbdf2506000000140008007866726d3000"/34], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x800) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket(0x400000000010, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f00007e8000/0x4000)=nil, 0x4000, 0x4, 0x30, 0xffffffffffffffff, 0xe31d2000) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r6 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000300)=ANY=[], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x41}, 0x94) io_uring_enter(r6, 0x48e9, 0x0, 0x2, 0x0, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 1m56.104252308s ago: executing program 0 (id=458): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000240)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4040844) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000000)=0x100) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8) 1m55.801267717s ago: executing program 2 (id=459): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x29, 0xfd, 0x0, 0xd, 0x3a, @empty, @rand_addr=' \x01\x00', 0x7, 0x80, 0xfffffffc, 0xdc67}}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x1004) write(0xffffffffffffffff, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000cee0203001a000000", 0x33a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000fc0)=ANY=[@ANYRES8=r1, @ANYRESHEX=r0, @ANYBLOB="15020000000000001c00128009000100760002800600010000000000"], 0x3c}, 0x1, 0xba01, 0x0, 0x40}, 0x1) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r5 = openat$kvm(0xffffff9c, &(0x7f0000000300), 0x80800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000140), 0x430000, 0x0) epoll_ctl$EPOLL_CTL_DEL(r7, 0x2, r3) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x32}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) sendmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000180)='\r', 0x1}], 0x1}, 0x14) 1m55.5519998s ago: executing program 3 (id=461): socket$inet6_udp(0xa, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000004400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x5b04, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x24, &(0x7f00000001c0)={0x0, 0x17, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m54.914897814s ago: executing program 0 (id=462): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x23}, 0x8) socket(0x2d, 0x2, 0x0) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x1, r1}) ioctl$DMA_BUF_SET_NAME_A(r4, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0x5}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0xfffffffe, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x3, 0x7, 0x5, 0xffffffff, 0x18e, 0x6, 0x6, 0x0, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0xfffffffc, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff8001, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x8, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x800007, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x1, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000008, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x400003], [0x7, 0x40c, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0xb, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x40000005, 0xfffffffd, 0x1ef, 0x5, 0x9, 0x86, 0x3, 0x303c, 0x0, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x5, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2006, 0x80a2ed, 0x5, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x80005, 0x937, 0x6, 0x6, 0x0, 0xb9, 0x4, 0x1fe, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10001, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0x1000, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9622, 0x80000001, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfffffff8]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)=ANY=[@ANYBLOB="f0010000", @ANYRES16=r5, @ANYBLOB="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"], 0x1f0}, 0x1, 0x0, 0x0, 0x2404c890}, 0x0) r6 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x6, 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0) ioctl$I2C_RDWR(r7, 0x707, &(0x7f00000000c0)={&(0x7f0000000080), 0x23}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) msgsnd(0x0, &(0x7f0000000480)={0x2, "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"}, 0x401, 0x0) msgctl$IPC_RMID(0x0, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x90, 0x17, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x34, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4e7}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x8080) 1m54.662340916s ago: executing program 3 (id=465): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4f21, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e9000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 1m54.628854916s ago: executing program 4 (id=466): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r1, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000280)='-\t:\xfd\xff\xff\xff\v\xff\xd0\x86\xd3Y\x8aT\x826\xd5\x14s\xda\a\x00\x00\x00SP\x90\x1b\x8e\xb3\xc9\x9c\x9d\xd2\x1f,\xc6\xea/\x9d\x0f0KR\xc8\xe3,<$P\x91\x1fj_\xa35\x86\xe5\xechCGz\'\xa9\xb3\x86\r\xda\x1bNG\xac\xf3O\x02\x83\x96\x00\xfc\x00'/95, 0x4) r2 = fanotify_init(0x200, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000180)={{0x2, 0x4e22, @empty}, {0x306, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010101}}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc01cf509, &(0x7f0000000200)={r2, 0x82, 0x10000, 0x4}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f0000000240)={0x5, 0x15, 0x401, 0xfff, "10f823483248e4aaffeb13fc184c89c69801b7aba14f2deea5a843b1382bba4b"}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000540), &(0x7f00000005c0)=0x4) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) close(r6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0xc100, 0x0) fanotify_mark(r2, 0x1, 0x800101f, r0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffff19ffff08c9ba199f059299bc0000889078ac1e0101ac1414aa00014e2400109078c2e60000e3e00000c1b1063c89e6ff2b2f"], 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat$cgroup_subtree(r8, &(0x7f0000000180), 0x2, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r9, &(0x7f0000002d00)=[{{&(0x7f0000001080)={0xa, 0x4e22, 0x1, @private2, 0x10001}, 0x1c, &(0x7f00000010c0)=[{&(0x7f00000011c0)="e6e2", 0x2}], 0x1}}, {{&(0x7f0000001100)={0xa, 0x4e20, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffff7}, 0x1c, &(0x7f00000019c0)=[{&(0x7f0000001140)="a5", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r9, 0x1) getsockopt$bt_hci(r9, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) 1m54.381055285s ago: executing program 3 (id=468): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r2 = eventfd(0x7) io_submit(r1, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x42, r2, 0x0, 0x0, 0x34}, &(0x7f00000000c0)={0x0, 0x0, 0x8000000, 0x7, 0x0, r2, 0x0, 0x0, 0x7, 0x0, 0x1, r2}]) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00\x00@\x00'}, 0x28) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000440)={{0xffbe, 0x5, 0x2, 0x5}, 'syz1\x00', 0x53}) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x2) ioctl$UI_DEV_CREATE(r6, 0x5501) ppoll(&(0x7f0000000300)=[{r6, 0x200}], 0x1, 0x0, 0x0, 0x0) write$uinput_user_dev(r5, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0x2, 0x1, 0x7f5b, 0x3, 0x6, 0x2, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xb, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0x9, 0x7, 0x0, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x6, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x80000201, 0x0, 0xfffffffd, 0x4, 0x4, 0xa, 0xa, 0x1, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x9550, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x4, 0x6f, 0x80b, 0x1, 0x6, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x800, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x3ff, 0x1, 0x4, 0x8, 0x1, 0x7, 0x9, 0x6, 0x4, 0x5, 0xffffffff, 0x3, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0xd21e, 0x9, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x9, 0x7c83, 0xd, 0x1, 0x2, 0xf, 0x3, 0x47, 0x7, 0x0, 0x11, 0x3, 0xdfd, 0x7, 0x7, 0x7ffd, 0x7ff, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c, 0x2], [0x81, 0x3, 0x10, 0x4e26, 0x2, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc29, 0x9, 0x5, 0x5, 0x8000000a, 0x79a, 0x40, 0x40009, 0x6, 0xc41f, 0x5, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1003, 0x10, 0xd, 0x6, 0x8000, 0x3ff, 0xf, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0x8, 0x100007, 0x9a33247, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) 1m54.358415552s ago: executing program 2 (id=469): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000240)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4040844) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000000)=0x100) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8) 1m54.265360929s ago: executing program 1 (id=470): socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) setsockopt(0xffffffffffffffff, 0x1, 0x10000000000009, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) futex_waitv(&(0x7f0000001fc0)=[{0x0, 0x0}], 0x1, 0x0, &(0x7f0000002040), 0x2) io_uring_setup(0x35a7, &(0x7f00000000c0)={0x0, 0x7f12, 0x3410, 0x3, 0xfefffffd}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x500, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c00990000000200000000000800a00094090000080026009409000008002700000000000800a1"], 0x48}}, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r6 = socket(0x1e, 0x4, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r8, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendto$inet6(r9, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r10, 0xffffffffffffffff, 0x200000000000000) 1m54.211710581s ago: executing program 4 (id=471): syz_usb_connect(0x5, 0x51, &(0x7f0000001dc0)={{0x12, 0x1, 0x200, 0xc, 0x22, 0x32, 0x40, 0x421, 0x1d0, 0x44b3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x9, 0x2, 0x0, 0xf7, [{{0x9, 0x4, 0x20, 0x9, 0x5, 0x3, 0xe6, 0x0, 0x7, [], [{{0x9, 0x5, 0xf, 0x0, 0x20, 0x1, 0x3, 0x1}}, {{0x9, 0x5, 0xe, 0x14, 0x10, 0x1, 0xfe, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x3ef, 0x6, 0xe, 0x7}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0xf7, 0xda, 0x8}}, {{0x9, 0x5, 0x2, 0x12, 0x400, 0x5, 0xd, 0x40}}]}}]}}]}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan0\x00', 0x0}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) r4 = getpgid(0x0) setpgid(r3, r4) r5 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x180, 0x0) name_to_handle_at(r5, &(0x7f0000000080)='./cgroup.net/cgroup.procs/../file0\x00', 0x0, 0x0, 0x1e00) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0xfffffffc}, 0x1c) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r2, @ANYBLOB="080003"], 0x44}}, 0x10) 1m53.848924584s ago: executing program 1 (id=472): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x262) r5 = openat$autofs(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, 0x0) sendto$inet(r2, 0x0, 0x0, 0x400c806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r2, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0x1f0268bc, @empty, 0x6}}, 0x0, 0x0, 0x3fc, 0x1, 0x32, 0xb}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x400, @remote, 0xfffffff8}}, 0xb6a, 0x300, 0x3, 0x4002, 0x5c}, 0x9c) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x41) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r8, &(0x7f0000000600)=""/4093, 0x1049, 0xfffffffd) 1m53.815618208s ago: executing program 2 (id=473): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0x0, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="4103082c1116480412020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 1m53.220828291s ago: executing program 2 (id=474): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.numa_stat\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x5, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd0007008019000200000000000000022122af0e4ccfb7b3cada00", [0x0, 0x2000000000001]}}) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000180)={0xc, 0x8, 0xfa00, {&(0x7f0000000240)}}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}, 0xfffffffffffffff0}], 0x0, 0x0, 0x0}) 1m53.190417557s ago: executing program 3 (id=475): socket$inet6_udp(0xa, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000004400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x5b04, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x24, &(0x7f00000001c0)={0x0, 0x17, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m53.077033335s ago: executing program 0 (id=476): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e21, @multicast2}, 0x10) bind$alg(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r4 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$pagemap(r4, &(0x7f00000001c0)) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getsockopt(r1, 0x7, 0x8, 0x0, &(0x7f0000000100)) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x2404c0dd}, 0x8000) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendto(r1, &(0x7f0000000180)='%', 0x300000, 0x840, 0x0, 0x60) close(0x3) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000300)={'tunl0\x00', 0x0, 0x1, 0x40, 0x2, 0x0, {{0x1a, 0x4, 0x3, 0x7, 0x68, 0x67, 0x0, 0x7, 0x2f, 0x0, @multicast1, @private=0xa010100, {[@ssrr={0x89, 0x17, 0x4, [@empty, @empty, @multicast2, @multicast1, @local]}, @cipso={0x86, 0x3b, 0x0, [{0x6, 0xe, "64dae9cfd69828039dc1ef0a"}, {0x2, 0x12, "f7c8a82be37335aa036644100255fdd8"}, {0x7, 0xa, "c4f13025e686c47c"}, {0x4, 0xb, "61c6574cb35ac19ceb"}]}]}}}}}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000d694d9501246efea78d42d017766991b67e093bcd412ae150c87376e7e64f2cba7f08d7bda48723889cf5741ef174bcde1f5b8b30224bf75da92ec03b5b88c5c99e3ca30166132f1ce4305d1f31e3b52da234f76717b1094c0f2a082cc0ef7d92b98571c55d8917bbee49f74f64fab65a3f75c090634bcf7", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r6, @ANYRES32, @ANYBLOB="01000000010000000200"/28], 0x50) fanotify_init(0x200, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000400)='net/l2cap\x00') r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x248000, &(0x7f0000000a40)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r1, @ANYRES16=r3, @ANYRESHEX=0x0, @ANYBLOB="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"], 0x3, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x40020, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00276243740501720624347,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="0000b46b20aa6386bb435465a97af5952c1a089d2edba6b182a3f626d8095560b121bc25470413935d5783510114160fdcd3d30c375f17fa5f3fdf70a80faff9d4471cc2bb246ba753d710d12b6561df541c4cf6c17593e77c88738954c451da8494b2a531cb9035d54642b57dad373420ff837bbce0210df6c37bdf85d9fd69e4211e0c8aa3de53840cb991fe5486dcbfa0b9f3538adee0c24b1ab1910557560caf38fedb8a"]) pread64(r7, &(0x7f0000000080)=""/237, 0xed, 0x5) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x0) 1m52.749043834s ago: executing program 2 (id=477): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x101a00, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0xf0b, 0x2000, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0xc2}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3d}, @TCA_CAKE_RAW={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44004}, 0x4000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r2) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0xd0, r5, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc0000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000014}, 0x4010) r6 = syz_open_dev$video(&(0x7f0000000000), 0xc407, 0x800) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000140)={0xfffffffd, 0x9, 0x1, 0x0, 0x7}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES64=r6, @ANYBLOB="010028bd7000010000000f00000008"], 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r9, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}}) r10 = socket$inet_udp(0x2, 0x2, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) recvmmsg(0xffffffffffffffff, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x4b53bc60}], 0x1, 0x40002020, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000680)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r11, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x7b}}}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xe}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x20004080) ioctl$sock_inet_SIOCSIFDSTADDR(r10, 0x8918, &(0x7f0000000080)={'ipvlan0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x37}}}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40004) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x5, 0xb}, {0xfff3, 0xb}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x40000) r12 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r12, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d88a8", 0x16, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r8, 0x1, 0xd8, 0x6, @multicast}, 0x14) 1m52.697700417s ago: executing program 1 (id=478): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4f21, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e9000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 1m52.544957408s ago: executing program 1 (id=479): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), r1) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)={0x2c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x20000004) (async, rerun: 64) r3 = socket(0x10, 0x803, 0x0) (rerun: 64) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) r4 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x402) writev(r4, &(0x7f0000007ec0)=[{&(0x7f0000005c40)="07ba", 0x2}], 0x1) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000000)) (async) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000440)={'ip6gre0\x00', r5, 0x29, 0x9, 0x61, 0x25, 0x1, @dev={0xfe, 0x80, '\x00', 0x42}, @remote, 0x8000, 0x8, 0x3, 0x100}}) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x34, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, 0x21801, 0x1103}, [@IFLA_IFALIAS={0x14, 0x14, 'macvlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) (rerun: 64) r6 = socket$netlink(0x10, 0x3, 0x0) (async) pipe(0x0) getpeername$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, &(0x7f0000000180)=0x1c) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000002c0)) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) 1m52.483716212s ago: executing program 2 (id=480): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={&(0x7f00000005c0), 0x6e, &(0x7f0000000340)=[{&(0x7f0000002040)=""/4097, 0x1001}, {0x0}, {&(0x7f0000000240)=""/22, 0x16}, {&(0x7f00000000c0)=""/39, 0x27}], 0x4, &(0x7f00000004c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0xc}}, @cred={{0x18}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0xc}}], 0x9c}, 0x10000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7fff, 0x0, 0x3, 0x0, 0x8001, 0xfa11, 0x9}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000074a27b9129b4cf8e772ddd6941fb742f7bf8503931edf3569e5667e1ee7da5080d98a691c1c0e2ff776b3707934c2617d8590eaaa1b5c5c16d0a31f14dd0e8c0aa96", @ANYRES16=r3, @ANYBLOB="01002bbd7000fedbdf2506000000140008007866726d3000"/34], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x800) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket(0x400000000010, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f00007e8000/0x4000)=nil, 0x4000, 0x4, 0x30, 0xffffffffffffffff, 0xe31d2000) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r6 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000300)=ANY=[], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x41}, 0x94) io_uring_enter(r6, 0x48e9, 0x0, 0x2, 0x0, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 1m52.432538155s ago: executing program 3 (id=481): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r1, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000280)='-\t:\xfd\xff\xff\xff\v\xff\xd0\x86\xd3Y\x8aT\x826\xd5\x14s\xda\a\x00\x00\x00SP\x90\x1b\x8e\xb3\xc9\x9c\x9d\xd2\x1f,\xc6\xea/\x9d\x0f0KR\xc8\xe3,<$P\x91\x1fj_\xa35\x86\xe5\xechCGz\'\xa9\xb3\x86\r\xda\x1bNG\xac\xf3O\x02\x83\x96\x00\xfc\x00'/95, 0x4) r2 = fanotify_init(0x200, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000180)={{0x2, 0x4e22, @empty}, {0x306, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010101}}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc01cf509, &(0x7f0000000200)={r2, 0x82, 0x10000, 0x4}) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f0000000240)={0x5, 0x15, 0x401, 0xfff, "10f823483248e4aaffeb13fc184c89c69801b7aba14f2deea5a843b1382bba4b"}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000540), &(0x7f00000005c0)=0x4) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) close(r6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0xc100, 0x0) fanotify_mark(r2, 0x1, 0x800101f, r0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffff19ffff08c9ba199f059299bc0000889078ac1e0101ac1414aa00014e2400109078c2e60000e3e00000c1b1063c89e6ff2b2f"], 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat$cgroup_subtree(r8, &(0x7f0000000180), 0x2, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r9, &(0x7f0000002d00)=[{{&(0x7f0000001080)={0xa, 0x4e22, 0x1, @private2, 0x10001}, 0x1c, &(0x7f00000010c0)=[{&(0x7f00000011c0)="e6e2", 0x2}], 0x1}}, {{&(0x7f0000001100)={0xa, 0x4e20, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffff7}, 0x1c, &(0x7f00000019c0)=[{&(0x7f0000001140)="a5", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r9, 0x1) getsockopt$bt_hci(r9, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) 1m52.355045251s ago: executing program 1 (id=482): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e22, 0x1000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}}, 0x0, 0x0, 0x31, 0x0, "c7e270b2a3b7c542510c068f66120b7b397a7fd99ed64b789de2e533e3df9ba4d045e3e79b209c8a9c2051afc8b8ec1332124e2393a5cebd712387f6c5c0708bb707eb14c11c59a2b28acdd9ffd0c9b9"}, 0xd8) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) r3 = memfd_create(&(0x7f0000000740)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1emI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\xbe\x84_s?\xde[\xa5U=\xac\xc2a\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1zj\v\x18\xf2CJ\xf7+\xa5R\xb5\xa3\x964\xe0\xad\x97\x83?W\xa7\x8d}\x17\xdcz\xd9~\xf1\xee4\xc0\xe5\x93\x8f6\xd7\xd9\xf4\x98d\x03\x194\xb7\xb4k\xf0\x0f\xc6\xcee\x06h\xdbG<\xd4\x17\x959\xc0\xe5\x14\xfdFK\x01\xb7\x84\xe4\xbe\xd2\xfd\xe6$\x03\x83\xbb]\xcc\xe5\x91\xaa\xd4\xe5\x17m\x9f\x8c\xf9\xbf6\x1d\xaf\xfe\x9ah\x94\xd4x\x83\x80\x9c\x92\x15\xf1\x84\xc1\xf9\xb1\xd3\xa0j3\x1e\xbd\x9b\xa8&\x1eIk\xe8*\x83\xd5\xfe\x14\xe1sM.\x95\xd8\x1aJ\xde(\x9bf\xb65P\x8a`cg\x04\x98\xf5\x1e\x9a\x859/0\x97\xac\xbc\x0f\x04/\xc2\x1e]d\x1d4\xe8y\xd6\x19\x8f\xeb\x15\x0eK\xc4VL\x92\xc5+\x88\xe8/\xdc\x1b@ X\xcd\x81\tYS3y\x8f\xdf*\x00IW\x11H3\xc6\xffd\xa4M\x937S\xcd\xce8\xa2P\xb5{\x16\x84Q\xee\xd5\\i\x8b\xee3\x97\xf15\x02\xdc\xb2*\x8d', 0x1) r4 = dup(r3) ioctl$PTP_SYS_OFFSET(r4, 0x43403d05, &(0x7f0000000400)={0x5}) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r4, 0x4004af77, &(0x7f0000000080)=0x7) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x9fc, 0x0, 0xfffffc80, 0x8000, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20, 0x0, 0xfffffffa, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10001, 0x0, 0x2, 0x3f, 0x7, 0x0, 0x2, 0xffffffff, 0x2, 0x810, 0x20000000, 0x0, 0x0, 0x1ff, 0x6, 0x0, 0x1, 0x0, 0x1000, 0xfffffff9, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000005, 0xbab, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x401, 0x4, 0x0, 0x2, 0x0, 0x1, 0x0, 0x40003, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffb, 0x0, 0x0, 0x1ff, 0x0, 0xfffffffd, 0x0, 0x40000, 0x0, 0x20000, 0x2, 0x60, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x5, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x4ff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x2, 0x9, 0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0xa847, 0x2, 0x0, 0x4b7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x3, 0x7, 0x0, 0x0, 0xffffffff, 0x8, 0x0, 0x0, 0xb3c, 0x0, 0xfffffff6, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x7db, 0x0, 0x800000, 0x3, 0x0, 0xfffffffe, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x0, 0x82, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x5, 0x404, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x400, 0x0, 0x0, 0x4000d79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffefd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x4, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x240040c4}, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xa}, @hci_ev_le_conn_update_complete={{}, {0x0, 0xc9, 0x2, 0xffff, 0x6}}}}, 0xd) 1m52.093514321s ago: executing program 4 (id=483): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002e00090027bd70000000000019e000000800180008ac0f00"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0x9, 0x7c, 0x3}, 0x0) socket$unix(0x1, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000001c0)={0x9, 0x3, 0x3, 0x0, 0x7}) r6 = add_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r4, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x30}}, 0x0) sendmsg$nl_xfrm(r7, 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r10 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r10, 0x0, 0x487, &(0x7f0000000200)={{0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'lblc\x00', 0x0, 0x3240, 0x31}, {@rand_addr=0x64010102, 0x4e22, 0x4, 0x8628, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r10, 0x0, 0x488, &(0x7f0000000280)={{0x84, @broadcast, 0x4e20, 0x3, 'none\x00', 0xd, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc26, 0x9, 0xfffffffc}}, 0x44) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 1m52.025475164s ago: executing program 0 (id=484): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000180), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000001c0)=0x1) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000000)=0xb000) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x4e24, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x5}, 0x1c) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x70bd29, 0x0, {0xa, 0x40, 0x0, 0xff, r8}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x10}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01"], 0x3c}}, 0x0) r9 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb9, 0x50, 0xb1, 0x40, 0x4e8, 0x662e, 0x9dcb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x71, 0x2, 0x2, 0x68, 0x8b, 0xef, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x3d, 0x1}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r9, 0x0, 0x0) 1m51.992018957s ago: executing program 3 (id=485): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="95e429bd7000fddbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="2c002c8008000000ff00000008"], 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x4000000) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x0, 0x10, 0x0, 0x80000001}, 0xc) syz_usb_control_io$hid(r4, 0x0, 0x0) r6 = syz_usb_connect$cdc_ecm(0x2, 0x66, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x54, 0x1, 0x1, 0x9, 0x40, 0x5, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0x6, {{0x9, 0x24, 0x6, 0x0, 0x0, "31bbb5f0"}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x3, 0x7, 0x2}, [@obex={0x5, 0x24, 0x15, 0x8}, @dmm={0x7, 0x24, 0x14, 0xa2f3, 0x8}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x10, 0x8, 0xb6}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x76, 0x1, 0xfe}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x49, 0x0, 0xff}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x7, 0x78, 0x40, 0x8, 0x5}, 0x4e, &(0x7f00000001c0)={0x5, 0xf, 0x4e, 0x2, [@ssp_cap={0x1c, 0x10, 0xa, 0x3, 0x4, 0x4, 0xf000, 0x4, [0x0, 0xffc06f, 0xc000, 0xff00]}, @generic={0x2d, 0x10, 0xa, "33d6367e47fe65de6a354321f8ca5853753836b57beae759b2e6c9f5060ed6331a92ca3717db21d79e87"}]}, 0x1, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x429}}]}) syz_usb_control_io$cdc_ecm(r6, &(0x7f0000000300)={0xc, &(0x7f0000000380)={0x20, 0x23, 0xca, {0xca, 0x22, "0224e73535ece04282ae47ce2a09bdab1e754d8764228f9fce9d18d2605c2963b5cdaa159fc3ee9c517384853daaa84e401c7602d4fb98c706c69bfa0a5e19d197f5154eb2a6e0122db831138772afc4783f992ce57d0b4884e37ffe34f14749a376833395781524c584234f8541651c1268a5afc5b66b0842bc21ce51373883f38349c856cbc6ff162c4eddf403f88d001b772ec41210bc46b5495a9c9d325864a61bf150d8ff5c76023da6f94b9300b519b9714a6982ae13589aea14d604aed8d68c22da3bfaef"}}, &(0x7f00000002c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000600)={0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="000fb5000000a9fc0160330a3d54248a6aa161b293efa20de359b19d57ae0630cba7e81b146ff28c307fe66499d17b725f2ca78f072cedbba52d856c2dca2c7ab346ec3e7f1eef696f42e926f33c03983ccf3ae44fb31c366ea2329a8d89f04398fb267279d07fa48c548731aca839af18d104cbed3467b43609504e6665edbb387b703aa01df439cab23485b7fe3ea978aa5916c1f9f9771108bf6f484049edef30dd1528bf12405aaa346fd5a9e135782f0474b53efa3428ea59"], &(0x7f0000000580)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x4}}) syz_usb_control_io$hid(r4, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x2, "19fde941"}]}}, 0x0}, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$getregset(0x4205, r7, 0x46e62b7f, &(0x7f0000000240)={0x0}) r8 = socket$netlink(0x10, 0x3, 0x14) syz_usb_control_io(r4, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3445}}, 0x0, 0x0, 0x0}, 0x0) readv(r8, &(0x7f0000000540)=[{&(0x7f00000004c0)=""/94, 0x5e}, {&(0x7f0000000740)=""/165, 0xa5}, {&(0x7f0000000280)=""/38, 0x26}], 0x3) syz_usb_control_io(r4, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0003120000001203556e621df8882b94e467dc02b3a38a38"], 0x0, 0x0, 0x0}, 0x0) 1m51.990126949s ago: executing program 1 (id=486): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) close(0x3) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r1, 0x29, 0x60, &(0x7f0000000000)=0x7, 0x4) sendmmsg$inet6(r1, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c, 0x0}}], 0x4d, 0x24000000) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2122, 0x0) r2 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xc, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aa0600000000000000090000000000000080530001aaaaaaaaaaaa08000000bbbbbbbbbbbb0a010102"], 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000084c0)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x130, 0x8}, 0x0, 0x0, 0x6, 0x4, 0x1, 0x5685, 0xfc72, 0xfff, 0x0, 0xa}) syz_genetlink_get_family_id$batadv(&(0x7f0000002100), 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2, &(0x7f0000006280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB="2c726fba3822b36f746d6f27f0affed464653d30303030303030303030303001000000000000003030302c7573b67f02c7c8ca1dac3642eae680f6f20a3d50e032ac5547d9bf40fe04e87b943384c0864d86faa7d2af74705de8708253a53ed07a46045a7178", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) statfs(&(0x7f0000000000)='./file0\x00', 0x0) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x60, 0x0, 0x800000000000ed2d, {{0x7, 0x10000007ffd, 0x3, 0x2, 0x400002, 0xd7c, 0x0, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f00000020c0), r3) read$FUSE(r2, &(0x7f0000004240)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='freezer.self_freezing\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r6, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001400)="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", 0x11d}, {&(0x7f0000000140)="937df4e4eadc6dccf4bcb7bb3ad5a6590c3309df46dd02f8e085f852448c686d2c29e740a901be19e2524899a6d680e7d0e811a4416faa66d07fb0fa7eb0282aea7f3531a560754b1292cf99bba5416ed995f275022034f1b9de5c86083dbd3034855b4454a24c836a4c8b816ecb9e43326af8d3d8f135fb163f59d31a234f9a2d57111804492ec49f66ed19c57704025940280f07397b93c201118579e1c52738c5b38de4", 0xa5}, {&(0x7f0000000400)="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", 0x3c1}], 0x3, 0x0, 0x0, 0x10000000}, 0x52cc) close(0x3) 0s ago: executing program 32 (id=484): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000180), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000001c0)=0x1) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000000)=0xb000) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x4e24, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x5}, 0x1c) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x70bd29, 0x0, {0xa, 0x40, 0x0, 0xff, r8}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x10}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01"], 0x3c}}, 0x0) r9 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb9, 0x50, 0xb1, 0x40, 0x4e8, 0x662e, 0x9dcb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x71, 0x2, 0x2, 0x68, 0x8b, 0xef, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x3d, 0x1}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r9, 0x0, 0x0) kernel console output (not intermixed with test programs): [ T6916] netlink: 'syz.3.273': attribute type 10 has an invalid length. [ 138.295509][ T6915] sg_write: data in/out 41084/1 bytes for SCSI command 0x1c-- guessing data in; [ 138.295509][ T6915] program syz.1.272 not setting count and/or reply_len properly [ 138.303288][ T6916] batadv0: left promiscuous mode [ 138.358311][ T6916] batadv0: left allmulticast mode [ 138.375020][ T6916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.379089][ T6918] netlink: 'syz.3.273': attribute type 10 has an invalid length. [ 138.383445][ T6916] batadv0: entered promiscuous mode [ 138.396230][ T6916] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 138.440978][ T6917] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.462475][ T6918] netlink: 40 bytes leftover after parsing attributes in process `syz.3.273'. [ 138.500459][ T30] audit: type=1326 audit(1770052623.935:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6913 comm="syz.3.273" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 138.503660][ T6918] batadv0: entered allmulticast mode [ 138.523803][ T30] audit: type=1326 audit(1770052623.965:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6913 comm="syz.3.273" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 138.566946][ T30] audit: type=1326 audit(1770052624.005:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6913 comm="syz.3.273" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 138.597185][ T6918] bond0: (slave batadv0): Releasing backup interface [ 138.612827][ T6918] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 138.989986][ T6934] netlink: 16 bytes leftover after parsing attributes in process `syz.3.276'. [ 139.655357][ T6936] FAULT_INJECTION: forcing a failure. [ 139.655357][ T6936] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.679183][ T6936] CPU: 0 UID: 0 PID: 6936 Comm: syz.1.278 Tainted: G L syzkaller #0 PREEMPT(full) [ 139.679201][ T6936] Tainted: [L]=SOFTLOCKUP [ 139.679205][ T6936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 139.679211][ T6936] Call Trace: [ 139.679216][ T6936] [ 139.679221][ T6936] dump_stack_lvl+0xe8/0x150 [ 139.679240][ T6936] should_fail_ex+0x412/0x560 [ 139.679255][ T6936] _copy_from_iter+0x1d3/0x1670 [ 139.679268][ T6936] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 139.679282][ T6936] ? __pfx_policy_nodemask+0x10/0x10 [ 139.679294][ T6936] ? __pfx__copy_from_iter+0x10/0x10 [ 139.679309][ T6936] ? set_page_refcounted+0xa0/0x1e0 [ 139.679320][ T6936] ? page_copy_sane+0x4e/0x270 [ 139.679334][ T6936] copy_page_from_iter+0xdd/0x170 [ 139.679349][ T6936] tun_get_user+0x1d4b/0x3dd0 [ 139.679359][ T6936] ? tun_get_user+0x6ff/0x3dd0 [ 139.679377][ T6936] ? aa_file_perm+0x440/0x1630 [ 139.679390][ T6936] ? __pfx_tun_get_user+0x10/0x10 [ 139.679400][ T6936] ? __lock_acquire+0x6b5/0x2cf0 [ 139.679420][ T6936] ? ref_tracker_alloc+0x363/0x4d0 [ 139.679434][ T6936] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 139.679447][ T6936] ? tun_get+0x1c/0x2f0 [ 139.679456][ T6936] ? tun_get+0x1c/0x2f0 [ 139.679467][ T6936] ? tun_get+0x1c/0x2f0 [ 139.679476][ T6936] ? tun_get+0x1c/0x2f0 [ 139.679487][ T6936] tun_chr_write_iter+0x113/0x200 [ 139.679499][ T6936] vfs_write+0x61d/0xb90 [ 139.679517][ T6936] ? __pfx_vfs_write+0x10/0x10 [ 139.679535][ T6936] ? __fget_files+0x2a/0x420 [ 139.679549][ T6936] ksys_write+0x150/0x270 [ 139.679564][ T6936] ? __pfx_ksys_write+0x10/0x10 [ 139.679580][ T6936] ? asm_int80_emulation+0x1a/0x20 [ 139.679591][ T6936] ? asm_int80_emulation+0x1a/0x20 [ 139.679600][ T6936] do_int80_emulation+0x111/0x400 [ 139.679612][ T6936] ? clear_bhb_loop+0x60/0xb0 [ 139.679621][ T6936] ? clear_bhb_loop+0x60/0xb0 [ 139.679632][ T6936] asm_int80_emulation+0x1a/0x20 [ 139.679641][ T6936] RIP: 0023:0xf713572b [ 139.679651][ T6936] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 139.679658][ T6936] RSP: 002b:00000000f53f644c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 139.679676][ T6936] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000100 [ 139.679682][ T6936] RDX: 0000000000000056 RSI: 0000000000000000 RDI: 0000000000000000 [ 139.679688][ T6936] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 139.679693][ T6936] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 139.679698][ T6936] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 139.679711][ T6936] [ 140.838468][ T6957] netlink: 'syz.3.286': attribute type 10 has an invalid length. [ 140.860285][ T6957] batadv0: left promiscuous mode [ 140.879746][ T6957] batadv0: left allmulticast mode [ 140.897833][ T6958] netlink: 'syz.3.286': attribute type 10 has an invalid length. [ 140.917526][ T6957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.931374][ T6958] netlink: 40 bytes leftover after parsing attributes in process `syz.3.286'. [ 140.953079][ T6957] batadv0: entered promiscuous mode [ 140.968186][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 140.968201][ T30] audit: type=1326 audit(1770052626.405:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6956 comm="syz.3.286" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 140.979509][ T6957] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 141.015569][ T30] audit: type=1326 audit(1770052626.405:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6956 comm="syz.3.286" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 141.038176][ T6958] batadv0: entered allmulticast mode [ 141.044785][ T6958] bond0: (slave batadv0): Releasing backup interface [ 141.062311][ T6958] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 141.062405][ T30] audit: type=1326 audit(1770052626.455:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6956 comm="syz.3.286" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 141.129923][ T30] audit: type=1326 audit(1770052626.455:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6956 comm="syz.3.286" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 141.158217][ T30] audit: type=1326 audit(1770052626.455:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6956 comm="syz.3.286" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 141.218830][ T30] audit: type=1326 audit(1770052626.475:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6956 comm="syz.3.286" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 141.295888][ T30] audit: type=1326 audit(1770052626.475:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6956 comm="syz.3.286" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 141.376810][ T30] audit: type=1326 audit(1770052626.475:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6956 comm="syz.3.286" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 142.088949][ T6973] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.162202][ T6973] bond0: (slave bond1): Enslaving as an active interface with an up link [ 142.231321][ T6979] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.290'. [ 143.423559][ T6995] netlink: 'syz.0.297': attribute type 10 has an invalid length. [ 143.469536][ T6995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.491624][ T6997] netlink: 'syz.0.297': attribute type 10 has an invalid length. [ 143.495033][ T6995] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 143.613734][ T6997] netlink: 40 bytes leftover after parsing attributes in process `syz.0.297'. [ 143.668161][ T30] audit: type=1326 audit(1770052629.105:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6994 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d539 code=0x7ffc0000 [ 143.767233][ T6997] batadv0: entered promiscuous mode [ 143.772485][ T6997] batadv0: entered allmulticast mode [ 143.827797][ T30] audit: type=1326 audit(1770052629.105:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6994 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf741d539 code=0x7ffc0000 [ 143.880645][ T6997] bond0: (slave batadv0): Releasing backup interface [ 143.895255][ T7001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.299'. [ 143.906779][ T6997] bridge0: port 3(batadv0) entered blocking state [ 143.917315][ T6997] bridge0: port 3(batadv0) entered disabled state [ 143.936824][ T7001] netlink: 'syz.4.299': attribute type 2 has an invalid length. [ 143.945803][ T7001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.299'. [ 144.074375][ T4244] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 144.083648][ T4244] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 144.185005][ T7007] FAULT_INJECTION: forcing a failure. [ 144.185005][ T7007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.247587][ T7007] CPU: 1 UID: 0 PID: 7007 Comm: syz.0.302 Tainted: G L syzkaller #0 PREEMPT(full) [ 144.247614][ T7007] Tainted: [L]=SOFTLOCKUP [ 144.247620][ T7007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 144.247628][ T7007] Call Trace: [ 144.247638][ T7007] [ 144.247645][ T7007] dump_stack_lvl+0xe8/0x150 [ 144.247671][ T7007] should_fail_ex+0x412/0x560 [ 144.247694][ T7007] _copy_from_user+0x2d/0xb0 [ 144.247717][ T7007] get_compat_msghdr+0xb3/0x4c0 [ 144.247739][ T7007] ? _parse_integer_limit+0x1ae/0x1f0 [ 144.247757][ T7007] ? __pfx_get_compat_msghdr+0x10/0x10 [ 144.247778][ T7007] ? kstrtoull+0x12f/0x1d0 [ 144.247802][ T7007] ___sys_sendmsg+0x201/0x360 [ 144.247821][ T7007] ? __lock_acquire+0x6b5/0x2cf0 [ 144.247845][ T7007] ? __pfx____sys_sendmsg+0x10/0x10 [ 144.247865][ T7007] ? get_pid_task+0x20/0x1f0 [ 144.247883][ T7007] ? get_pid_task+0x20/0x1f0 [ 144.247898][ T7007] ? get_pid_task+0x20/0x1f0 [ 144.247934][ T7007] ? __fget_files+0x2a/0x420 [ 144.247950][ T7007] ? __fget_files+0x3a0/0x420 [ 144.247975][ T7007] __sys_sendmsg+0x183/0x260 [ 144.247996][ T7007] ? __pfx___sys_sendmsg+0x10/0x10 [ 144.248025][ T7007] ? __pfx_ksys_write+0x10/0x10 [ 144.248053][ T7007] __do_fast_syscall_32+0x1d2/0x540 [ 144.248072][ T7007] ? lockdep_hardirqs_on+0x7a/0x110 [ 144.248087][ T7007] ? do_fast_syscall_32+0x33/0x70 [ 144.248102][ T7007] ? asm_int80_emulation+0x1a/0x20 [ 144.248117][ T7007] ? do_int80_emulation+0x20e/0x400 [ 144.248138][ T7007] do_fast_syscall_32+0x33/0x70 [ 144.248155][ T7007] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 144.248174][ T7007] RIP: 0023:0xf741d539 [ 144.248189][ T7007] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 144.248202][ T7007] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 144.248220][ T7007] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 144.248231][ T7007] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 144.248241][ T7007] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 144.248260][ T7007] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 144.248269][ T7007] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 144.248294][ T7007] [ 144.512714][ T7011] loop2: detected capacity change from 0 to 7 [ 144.519410][ T7011] Dev loop2: unable to read RDB block 7 [ 144.525058][ T7011] loop2: unable to read partition table [ 144.530902][ T7011] loop2: partition table beyond EOD, truncated [ 144.537108][ T7011] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 144.708598][ T7018] input: syz0 as /devices/virtual/input/input21 [ 144.783825][ T7023] lo: Caught tx_queue_len zero misconfig [ 145.719033][ T7043] FAULT_INJECTION: forcing a failure. [ 145.719033][ T7043] name failslab, interval 1, probability 0, space 0, times 0 [ 145.783480][ T7043] CPU: 0 UID: 0 PID: 7043 Comm: syz.4.313 Tainted: G L syzkaller #0 PREEMPT(full) [ 145.783509][ T7043] Tainted: [L]=SOFTLOCKUP [ 145.783515][ T7043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 145.783524][ T7043] Call Trace: [ 145.783530][ T7043] [ 145.783538][ T7043] dump_stack_lvl+0xe8/0x150 [ 145.783564][ T7043] should_fail_ex+0x412/0x560 [ 145.783588][ T7043] should_failslab+0xa8/0x100 [ 145.783609][ T7043] __kmalloc_cache_noprof+0x83/0x6e0 [ 145.783627][ T7043] ? cma_alloc_port+0xb9/0x680 [ 145.783650][ T7043] cma_alloc_port+0xb9/0x680 [ 145.783671][ T7043] rdma_bind_addr_dst+0xdca/0x3610 [ 145.783723][ T7043] rdma_resolve_addr+0x6f8/0x21d0 [ 145.783752][ T7043] ? trace_contention_end+0x39/0x100 [ 145.783771][ T7043] ? __pfx_rdma_resolve_addr+0x10/0x10 [ 145.783790][ T7043] ? __mutex_lock+0x319/0x1300 [ 145.783819][ T7043] ? ucma_resolve_ip+0x302/0x490 [ 145.783836][ T7043] ? xa_load+0x60/0x210 [ 145.783869][ T7043] ? do_raw_spin_unlock+0xf5/0x210 [ 145.783892][ T7043] ucma_resolve_ip+0x338/0x490 [ 145.783915][ T7043] ? __pfx_ucma_resolve_ip+0x10/0x10 [ 145.783948][ T7043] ucma_write+0x24e/0x2f0 [ 145.783967][ T7043] ? __pfx_ucma_write+0x10/0x10 [ 145.783982][ T7043] ? security_file_permission+0x75/0x260 [ 145.784000][ T7043] ? rw_verify_area+0x255/0x4d0 [ 145.784020][ T7043] ? __pfx_ucma_write+0x10/0x10 [ 145.784038][ T7043] vfs_write+0x29a/0xb90 [ 145.784064][ T7043] ? __pfx_vfs_write+0x10/0x10 [ 145.784086][ T7043] ? __fget_files+0x2a/0x420 [ 145.784105][ T7043] ? __fget_files+0x2a/0x420 [ 145.784121][ T7043] ? __fget_files+0x3a0/0x420 [ 145.784136][ T7043] ? __fget_files+0x2a/0x420 [ 145.784162][ T7043] ksys_write+0x150/0x270 [ 145.784192][ T7043] ? __pfx_ksys_write+0x10/0x10 [ 145.784213][ T7043] ? __pfx_ksys_write+0x10/0x10 [ 145.784230][ T7043] __do_fast_syscall_32+0x1d2/0x540 [ 145.784242][ T7043] ? lockdep_hardirqs_on+0x7a/0x110 [ 145.784251][ T7043] ? do_fast_syscall_32+0x33/0x70 [ 145.784261][ T7043] ? asm_int80_emulation+0x1a/0x20 [ 145.784270][ T7043] ? do_int80_emulation+0x20e/0x400 [ 145.784283][ T7043] do_fast_syscall_32+0x33/0x70 [ 145.784294][ T7043] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 145.784306][ T7043] RIP: 0023:0xf746d539 [ 145.784316][ T7043] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 145.784324][ T7043] RSP: 002b:00000000f549650c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 145.784335][ T7043] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 145.784342][ T7043] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 145.784348][ T7043] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 145.784353][ T7043] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 145.784359][ T7043] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 145.784373][ T7043] [ 146.330994][ T7053] loop2: detected capacity change from 0 to 7 [ 146.378184][ T7053] Dev loop2: unable to read RDB block 7 [ 146.399257][ T7053] loop2: unable to read partition table [ 146.434343][ T7053] loop2: partition table beyond EOD, truncated [ 146.464103][ T7053] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 146.480522][ T7051] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 146.558781][ T7063] sctp: [Deprecated]: syz.4.322 (pid 7063) Use of int in max_burst socket option. [ 146.558781][ T7063] Use struct sctp_assoc_value instead [ 146.798919][ T5907] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 146.931757][ T7075] hsr_slave_1 (unregistering): left promiscuous mode [ 147.024072][ T5907] usb 2-1: Using ep0 maxpacket: 8 [ 147.038769][ T5907] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 147.061406][ T5907] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 147.093390][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.121953][ T5907] usb 2-1: Product: syz [ 147.127099][ T5907] usb 2-1: Manufacturer: syz [ 147.132443][ T5907] usb 2-1: SerialNumber: syz [ 147.195949][ T5907] usb 2-1: config 0 descriptor?? [ 147.224281][ T5907] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 147.304692][ T5907] usb 2-1: setting power ON [ 147.326452][ T5907] dvb-usb: bulk message failed: -22 (2/0) [ 147.407663][ T7086] netdevsim netdevsim3: Direct firmware load for nel/address_bits failed with error -2 [ 147.432145][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 147.432161][ T30] audit: type=1326 audit(1770052632.865:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7060 comm="syz.1.321" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f34539 code=0x0 [ 147.465153][ T7086] netdevsim netdevsim3: Falling back to sysfs fallback for: nel/address_bits [ 147.477870][ T5907] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 147.544454][ T7093] dvb-usb: bulk message failed: -22 (3/0) [ 147.565520][ T5907] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 147.817496][ T5907] usb 2-1: media controller created [ 147.829775][ T7083] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 147.836536][ T7083] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 147.927688][ T5907] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 148.076938][ T5907] usb 2-1: selecting invalid altsetting 6 [ 148.139864][ T7105] FAULT_INJECTION: forcing a failure. [ 148.139864][ T7105] name failslab, interval 1, probability 0, space 0, times 0 [ 148.179483][ T7083] vhci_hcd vhci_hcd.0: Device attached [ 148.185421][ T5907] usb 2-1: digital interface selection failed (-22) [ 148.192425][ T7105] CPU: 0 UID: 0 PID: 7105 Comm: syz.2.330 Tainted: G L syzkaller #0 PREEMPT(full) [ 148.192453][ T7105] Tainted: [L]=SOFTLOCKUP [ 148.192459][ T7105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 148.192470][ T7105] Call Trace: [ 148.192477][ T7105] [ 148.192485][ T7105] dump_stack_lvl+0xe8/0x150 [ 148.192511][ T7105] should_fail_ex+0x412/0x560 [ 148.192536][ T7105] should_failslab+0xa8/0x100 [ 148.192558][ T7105] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 148.192583][ T7105] ? __alloc_skb+0x1d7/0x390 [ 148.192601][ T7105] ? __local_bh_enable_ip+0xd0/0x130 [ 148.192618][ T7105] ? __alloc_skb+0x193/0x390 [ 148.192638][ T7105] __alloc_skb+0x1d7/0x390 [ 148.192659][ T7105] nl80211_send_remain_on_chan_event+0xbb/0x640 [ 148.192685][ T7105] ? __pfx_nl80211_send_remain_on_chan_event+0x10/0x10 [ 148.192708][ T7105] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 148.192734][ T7105] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 148.192762][ T7105] cfg80211_remain_on_channel_expired+0xeb/0x240 [ 148.192789][ T7105] ieee80211_roc_notify_destroy+0x356/0x4a0 [ 148.192808][ T7105] ? __update_load_avg_se+0x79a/0xbe0 [ 148.192830][ T7105] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 148.192850][ T7105] ? __pfx_ieee80211_roc_notify_destroy+0x10/0x10 [ 148.192874][ T7105] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 148.192898][ T7105] ieee80211_end_finished_rocs+0x1c2/0x2e0 [ 148.192925][ T7105] __ieee80211_roc_work+0x17f/0x320 [ 148.192945][ T7105] ieee80211_do_stop+0x243/0x1ff0 [ 148.192963][ T7105] ? ieee80211_fill_ifcomb_params+0xd26/0xd50 [ 148.192998][ T7105] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 148.193023][ T7105] ? ieee80211_stop_queues_by_reason+0x149/0x1a0 [ 148.193073][ T7105] ieee80211_if_change_type+0x430/0x940 [ 148.193100][ T7105] ieee80211_change_iface+0xd5/0x510 [ 148.193130][ T7105] cfg80211_change_iface+0x6ba/0xe20 [ 148.193161][ T7105] nl80211_set_interface+0x773/0xa90 [ 148.193193][ T7105] ? __pfx_nl80211_set_interface+0x10/0x10 [ 148.193219][ T7105] ? nl80211_pre_doit+0x4fb/0x930 [ 148.193245][ T7105] genl_family_rcv_msg_doit+0x22a/0x330 [ 148.193273][ T7105] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 148.193306][ T7105] ? bpf_lsm_capable+0x9/0x20 [ 148.193325][ T7105] ? security_capable+0x7e/0x2c0 [ 148.193348][ T7105] genl_rcv_msg+0x61c/0x7a0 [ 148.193376][ T7105] ? __pfx_genl_rcv_msg+0x10/0x10 [ 148.193395][ T7105] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 148.193415][ T7105] ? __pfx_nl80211_set_interface+0x10/0x10 [ 148.193435][ T7105] ? __pfx_nl80211_post_doit+0x10/0x10 [ 148.193464][ T7105] ? __pfx_ref_tracker_free+0x10/0x10 [ 148.193483][ T7105] ? __skb_clone+0x63/0x7a0 [ 148.193510][ T7105] netlink_rcv_skb+0x232/0x4b0 [ 148.193529][ T7105] ? __pfx_genl_rcv_msg+0x10/0x10 [ 148.193551][ T7105] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 148.193567][ T7105] ? genl_rcv+0x19/0x40 [ 148.193604][ T7105] ? down_read+0x272/0x2e0 [ 148.193620][ T7105] ? genl_rcv+0xd/0x40 [ 148.193642][ T7105] genl_rcv+0x28/0x40 [ 148.193660][ T7105] netlink_unicast+0x80f/0x9b0 [ 148.193694][ T7105] ? __pfx_netlink_unicast+0x10/0x10 [ 148.193716][ T7105] ? __alloc_skb+0x193/0x390 [ 148.193735][ T7105] ? netlink_sendmsg+0x650/0xb40 [ 148.193751][ T7105] ? skb_put+0x11b/0x210 [ 148.193774][ T7105] netlink_sendmsg+0x813/0xb40 [ 148.193800][ T7105] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.193821][ T7105] ? aa_sock_msg_perm+0xf1/0x1b0 [ 148.193842][ T7105] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 148.193862][ T7105] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.193878][ T7105] ____sys_sendmsg+0xa68/0xad0 [ 148.193906][ T7105] ? __pfx_____sys_sendmsg+0x10/0x10 [ 148.193930][ T7105] ? kstrtoull+0x12f/0x1d0 [ 148.193955][ T7105] ___sys_sendmsg+0x2a5/0x360 [ 148.193975][ T7105] ? __lock_acquire+0x6b5/0x2cf0 [ 148.193999][ T7105] ? __pfx____sys_sendmsg+0x10/0x10 [ 148.194022][ T7105] ? get_pid_task+0x20/0x1f0 [ 148.194046][ T7105] ? get_pid_task+0x20/0x1f0 [ 148.194062][ T7105] ? get_pid_task+0x20/0x1f0 [ 148.194106][ T7105] ? __fget_files+0x2a/0x420 [ 148.194123][ T7105] ? __fget_files+0x3a0/0x420 [ 148.194151][ T7105] __sys_sendmsg+0x183/0x260 [ 148.194173][ T7105] ? __pfx___sys_sendmsg+0x10/0x10 [ 148.194207][ T7105] ? __pfx_ksys_write+0x10/0x10 [ 148.194238][ T7105] __do_fast_syscall_32+0x1d2/0x540 [ 148.194256][ T7105] ? lockdep_hardirqs_on+0x7a/0x110 [ 148.194272][ T7105] ? do_fast_syscall_32+0x33/0x70 [ 148.194288][ T7105] ? asm_int80_emulation+0x1a/0x20 [ 148.194304][ T7105] ? do_int80_emulation+0x20e/0x400 [ 148.194326][ T7105] do_fast_syscall_32+0x33/0x70 [ 148.194345][ T7105] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 148.194364][ T7105] RIP: 0023:0xf744d539 [ 148.194379][ T7105] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 148.194393][ T7105] RSP: 002b:00000000f547650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 148.194411][ T7105] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000100 [ 148.194424][ T7105] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 148.194434][ T7105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 148.194444][ T7105] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 148.194455][ T7105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 148.194483][ T7105] [ 148.200982][ T5907] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 148.724412][ T797] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 148.829274][ T5907] usb 2-1: setting power OFF [ 148.835751][ T5907] dvb-usb: bulk message failed: -22 (2/0) [ 148.842061][ T5907] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 148.851872][ T5907] (NULL device *): no alternate interface [ 148.883765][ T7108] syzkaller0: entered promiscuous mode [ 148.924041][ T7108] syzkaller0: entered allmulticast mode [ 148.965594][ T7113] loop2: detected capacity change from 0 to 7 [ 148.982354][ T7113] Dev loop2: unable to read RDB block 7 [ 148.993776][ T7113] loop2: unable to read partition table [ 149.009211][ T7113] loop2: partition table beyond EOD, truncated [ 149.034016][ T7113] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 149.179841][ T7116] FAULT_INJECTION: forcing a failure. [ 149.179841][ T7116] name failslab, interval 1, probability 0, space 0, times 0 [ 149.205230][ T7116] CPU: 0 UID: 0 PID: 7116 Comm: syz.4.333 Tainted: G L syzkaller #0 PREEMPT(full) [ 149.205249][ T7116] Tainted: [L]=SOFTLOCKUP [ 149.205253][ T7116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 149.205258][ T7116] Call Trace: [ 149.205263][ T7116] [ 149.205267][ T7116] dump_stack_lvl+0xe8/0x150 [ 149.205285][ T7116] should_fail_ex+0x412/0x560 [ 149.205300][ T7116] should_failslab+0xa8/0x100 [ 149.205313][ T7116] __kmalloc_cache_noprof+0x83/0x6e0 [ 149.205322][ T7116] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 149.205333][ T7116] ? sctp_add_bind_addr+0x8c/0x370 [ 149.205345][ T7116] sctp_add_bind_addr+0x8c/0x370 [ 149.205357][ T7116] sctp_copy_local_addr_list+0x314/0x4f0 [ 149.205369][ T7116] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 149.205379][ T7116] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 149.205390][ T7116] ? sctp_v6_is_any+0x64/0x80 [ 149.205401][ T7116] ? sctp_copy_one_addr+0x93/0x360 [ 149.205412][ T7116] sctp_bind_addr_copy+0xb3/0x3c0 [ 149.205422][ T7116] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 149.205440][ T7116] sctp_connect_new_asoc+0x2ff/0x6b0 [ 149.205455][ T7116] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 149.205468][ T7116] ? __ipv6_addr_type+0x14d/0x2f0 [ 149.205484][ T7116] ? sctp_inet6_send_verify+0x6e/0x300 [ 149.205493][ T7116] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 149.205506][ T7116] __sctp_connect+0x5cb/0xdc0 [ 149.205524][ T7116] ? __pfx___sctp_connect+0x10/0x10 [ 149.205536][ T7116] ? security_sctp_bind_connect+0x7e/0x2c0 [ 149.205547][ T7116] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 149.205564][ T7116] sctp_setsockopt+0x708/0x12c0 [ 149.205575][ T7116] ? sock_common_setsockopt+0x36/0xc0 [ 149.205586][ T7116] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 149.205596][ T7116] do_sock_setsockopt+0x17c/0x1b0 [ 149.205612][ T7116] __ia32_sys_setsockopt+0x13d/0x1b0 [ 149.205627][ T7116] __do_fast_syscall_32+0x1d2/0x540 [ 149.205639][ T7116] ? lockdep_hardirqs_on+0x7a/0x110 [ 149.205648][ T7116] ? do_fast_syscall_32+0x33/0x70 [ 149.205658][ T7116] ? asm_int80_emulation+0x1a/0x20 [ 149.205666][ T7116] ? do_int80_emulation+0x20e/0x400 [ 149.205679][ T7116] do_fast_syscall_32+0x33/0x70 [ 149.205690][ T7116] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 149.205702][ T7116] RIP: 0023:0xf746d539 [ 149.205711][ T7116] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 149.205719][ T7116] RSP: 002b:00000000f549650c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 149.205731][ T7116] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084 [ 149.205737][ T7116] RDX: 000000000000006e RSI: 0000000080000140 RDI: 0000000000000038 [ 149.205743][ T7116] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 149.205749][ T7116] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 149.205754][ T7116] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 149.205768][ T7116] [ 149.551770][ T5907] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 149.644247][ T5907] usb 2-1: USB disconnect, device number 10 [ 149.669583][ T7084] vhci_hcd: connection reset by peer [ 149.676895][ T12] vhci_hcd vhci_hcd.3: stop threads [ 149.682757][ T12] vhci_hcd vhci_hcd.3: release socket [ 149.695511][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 149.760514][ T7125] sctp: [Deprecated]: syz.2.336 (pid 7125) Use of int in max_burst socket option. [ 149.760514][ T7125] Use struct sctp_assoc_value instead [ 149.921595][ T7126] netlink: 'syz.4.335': attribute type 13 has an invalid length. [ 150.564267][ T5929] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 150.733708][ T5929] usb 3-1: Using ep0 maxpacket: 16 [ 150.754406][ T5929] usb 3-1: config 0 has no interfaces? [ 150.824740][ T5929] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 150.846102][ T5929] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 151.211990][ T5929] usb 3-1: Manufacturer: syz [ 151.224967][ T7150] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 151.241946][ T5929] usb 3-1: config 0 descriptor?? [ 151.569410][ T7151] netlink: 'syz.1.337': attribute type 3 has an invalid length. [ 151.587383][ T7151] netlink: 766 bytes leftover after parsing attributes in process `syz.1.337'. [ 151.887159][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 151.970505][ T9] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 151.998571][ T7158] sctp: [Deprecated]: syz.4.344 (pid 7158) Use of int in maxseg socket option. [ 151.998571][ T7158] Use struct sctp_assoc_value instead [ 152.156697][ T7159] fido_id[7159]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 152.364013][ T7167] sctp: [Deprecated]: syz.0.348 (pid 7167) Use of int in max_burst socket option. [ 152.364013][ T7167] Use struct sctp_assoc_value instead [ 152.559563][ T7174] ªªªªªª: renamed from vlan0 (while UP) [ 152.634048][ T5907] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 152.737589][ T7179] loop2: detected capacity change from 0 to 7 [ 152.754684][ T7179] Dev loop2: unable to read RDB block 7 [ 152.761358][ T7179] loop2: unable to read partition table [ 152.767613][ T7179] loop2: partition table beyond EOD, truncated [ 152.773829][ T7179] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 152.798180][ T5907] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.828743][ T5907] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 152.858640][ T5907] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.902350][ T5907] usb 2-1: config 0 interface 0 has no altsetting 0 [ 152.923969][ T5907] usb 2-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 152.948038][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.969050][ T5907] usb 2-1: config 0 descriptor?? [ 152.994328][ T7183] netlink: 16 bytes leftover after parsing attributes in process `syz.4.354'. [ 153.054454][ T9] usb 3-1: USB disconnect, device number 13 [ 153.078292][ T7184] netlink: 36 bytes leftover after parsing attributes in process `syz.3.355'. [ 153.122936][ T7189] netlink: 16 bytes leftover after parsing attributes in process `syz.4.354'. [ 153.183836][ T7193] netlink: 20 bytes leftover after parsing attributes in process `syz.0.358'. [ 153.356325][ T7198] sctp: [Deprecated]: syz.4.360 (pid 7198) Use of int in max_burst socket option. [ 153.356325][ T7198] Use struct sctp_assoc_value instead [ 153.399808][ T5907] kye 0003:0458:5019.0007: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 153.448507][ T5907] kye 0003:0458:5019.0007: hidraw0: USB HID v0.09 Device [HID 0458:5019] on usb-dummy_hcd.1-1/input0 [ 153.481979][ T5907] kye 0003:0458:5019.0007: tablet-enabling feature report not found [ 153.498212][ T5907] kye 0003:0458:5019.0007: tablet enabling failed [ 153.772391][ T7207] netlink: 'syz.2.361': attribute type 13 has an invalid length. [ 153.849006][ T797] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 154.024256][ T5907] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 154.245549][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.256993][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.272100][ T5907] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 154.344865][ T5907] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 154.354064][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.406116][ T39] usb 2-1: USB disconnect, device number 11 [ 154.446518][ T5907] usb 5-1: config 0 descriptor?? [ 154.467218][ T7213] ªªªªªª: renamed from vlan0 (while UP) [ 154.833353][ T7226] GUP no longer grows the stack in syz.1.365 (7226): 80005000-80008000 (80004000) [ 154.843146][ T7226] CPU: 1 UID: 0 PID: 7226 Comm: syz.1.365 Tainted: G L syzkaller #0 PREEMPT(full) [ 154.843177][ T7226] Tainted: [L]=SOFTLOCKUP [ 154.843184][ T7226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 154.843196][ T7226] Call Trace: [ 154.843204][ T7226] [ 154.843212][ T7226] dump_stack_lvl+0xe8/0x150 [ 154.843244][ T7226] fixup_user_fault+0x637/0x6f0 [ 154.843275][ T7226] fault_in_user_writeable+0x71/0xd0 [ 154.843301][ T7226] futex_lock_pi+0x800/0xb00 [ 154.843330][ T7226] ? __pfx_futex_lock_pi+0x10/0x10 [ 154.843352][ T7226] ? __pfx___schedule+0x10/0x10 [ 154.843389][ T7226] ? __pfx_futex_wake_mark+0x10/0x10 [ 154.843419][ T7226] ? do_futex+0x273/0x420 [ 154.843446][ T7226] do_futex+0x292/0x420 [ 154.843469][ T7226] ? __pfx_do_futex+0x10/0x10 [ 154.843494][ T7226] __se_sys_futex_time32+0x3ab/0x440 [ 154.843518][ T7226] ? rcu_is_watching+0x15/0xb0 [ 154.843537][ T7226] ? __pfx___se_sys_futex_time32+0x10/0x10 [ 154.843574][ T7226] ? __ia32_sys_futex_time32+0x21/0xf0 [ 154.843604][ T7226] __do_fast_syscall_32+0x1d2/0x540 [ 154.843627][ T7226] ? do_fast_syscall_32+0x33/0x70 [ 154.843646][ T7226] ? irqentry_exit+0x10e/0x620 [ 154.843664][ T7226] ? rcu_is_watching+0x15/0xb0 [ 154.843684][ T7226] do_fast_syscall_32+0x33/0x70 [ 154.843703][ T7226] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 154.843732][ T7226] RIP: 0023:0xf7f34539 [ 154.843748][ T7226] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 154.843763][ T7226] RSP: 002b:00000000f4b6e50c EFLAGS: 00000206 ORIG_RAX: 00000000000000f0 [ 154.843784][ T7226] RAX: ffffffffffffffda RBX: 0000000080004000 RCX: 000000000000008d [ 154.843797][ T7226] RDX: 00000000fffffffd RSI: 0000000000000000 RDI: 0000000000000000 [ 154.843809][ T7226] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 154.843819][ T7226] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 154.843831][ T7226] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 154.843855][ T7226] [ 154.954038][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 155.130559][ T7227] netlink: 12 bytes leftover after parsing attributes in process `syz.2.367'. [ 155.139837][ T7227] netlink: 12 bytes leftover after parsing attributes in process `syz.2.367'. [ 155.180048][ T5907] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 155.180143][ T7224] netlink: 'syz.2.367': attribute type 1 has an invalid length. [ 155.215399][ T7224] netlink: 'syz.2.367': attribute type 1 has an invalid length. [ 155.310431][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 155.320239][ T10] usb 4-1: config 1 has no interface number 0 [ 155.326486][ T10] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.341690][ T10] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 155.350973][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 155.365465][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 155.464367][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.477776][ T10] usb 4-1: Product: syz [ 155.485918][ T10] usb 4-1: Manufacturer: syz [ 155.490626][ T10] usb 4-1: SerialNumber: syz [ 155.613404][ T7234] netlink: 'syz.2.368': attribute type 1 has an invalid length. [ 155.933532][ T10] cdc_ncm 4-1:1.1: bind() failure [ 155.948520][ T10] usb 4-1: USB disconnect, device number 9 [ 156.024688][ T30] audit: type=1326 audit(1770052641.455:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7235 comm="syz.1.369" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f34539 code=0x0 [ 156.658154][ T7239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.369'. [ 156.763209][ T7248] loop2: detected capacity change from 0 to 7 [ 156.771395][ T5825] Dev loop2: unable to read RDB block 7 [ 156.777197][ T5825] loop2: unable to read partition table [ 156.783322][ T5825] loop2: partition table beyond EOD, truncated [ 156.791044][ T7248] Dev loop2: unable to read RDB block 7 [ 156.801512][ T7248] loop2: unable to read partition table [ 156.808193][ T7248] loop2: partition table beyond EOD, truncated [ 156.823280][ T7248] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 156.926580][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 157.138078][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 157.276038][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.284973][ T9] usb 4-1: Product: syz [ 157.289237][ T9] usb 4-1: Manufacturer: syz [ 157.293844][ T9] usb 4-1: SerialNumber: syz [ 157.493534][ T5907] usb 5-1: USB disconnect, device number 17 [ 157.866938][ T7271] netlink: 'syz.1.377': attribute type 13 has an invalid length. [ 157.914216][ T7246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.120619][ T7246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.197867][ T7274] FAULT_INJECTION: forcing a failure. [ 158.197867][ T7274] name failslab, interval 1, probability 0, space 0, times 0 [ 158.226410][ T7270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.378'. [ 158.249378][ T7270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.378'. [ 158.490460][ T7275] netlink: 'syz.4.378': attribute type 1 has an invalid length. [ 158.498927][ T7274] CPU: 1 UID: 0 PID: 7274 Comm: syz.0.379 Tainted: G L syzkaller #0 PREEMPT(full) [ 158.498947][ T7274] Tainted: [L]=SOFTLOCKUP [ 158.498951][ T7274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 158.498958][ T7274] Call Trace: [ 158.498962][ T7274] [ 158.498967][ T7274] dump_stack_lvl+0xe8/0x150 [ 158.498987][ T7274] should_fail_ex+0x412/0x560 [ 158.499013][ T7274] should_failslab+0xa8/0x100 [ 158.499035][ T7274] __kmalloc_noprof+0xde/0x7e0 [ 158.499052][ T7274] ? kfree+0x4d/0x650 [ 158.499071][ T7274] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 158.499089][ T7274] tomoyo_realpath_from_path+0xe3/0x5d0 [ 158.499104][ T7274] ? tomoyo_domain+0xd7/0x130 [ 158.499119][ T7274] ? tomoyo_path_number_perm+0x219/0x630 [ 158.499129][ T7274] tomoyo_path_number_perm+0x246/0x630 [ 158.499148][ T7274] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 158.499166][ T7274] ? __lock_acquire+0x6b5/0x2cf0 [ 158.499229][ T7274] ? __fget_files+0x2a/0x420 [ 158.499243][ T7274] ? __fget_files+0x3a0/0x420 [ 158.499252][ T7274] ? __fget_files+0x2a/0x420 [ 158.499264][ T7274] security_file_ioctl_compat+0xc3/0x2a0 [ 158.499276][ T7274] __ia32_compat_sys_ioctl+0x139/0x950 [ 158.499300][ T7274] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 158.499326][ T7274] ? __fget_files+0x3a0/0x420 [ 158.499350][ T7274] ? fput+0xa0/0xd0 [ 158.499369][ T7274] ? ksys_write+0x242/0x270 [ 158.499385][ T7274] ? __pfx_ksys_write+0x10/0x10 [ 158.499403][ T7274] __do_fast_syscall_32+0x1d2/0x540 [ 158.499415][ T7274] ? lockdep_hardirqs_on+0x7a/0x110 [ 158.499424][ T7274] ? do_fast_syscall_32+0x33/0x70 [ 158.499436][ T7274] ? asm_int80_emulation+0x1a/0x20 [ 158.499452][ T7274] ? do_int80_emulation+0x20e/0x400 [ 158.499474][ T7274] do_fast_syscall_32+0x33/0x70 [ 158.499493][ T7274] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 158.499512][ T7274] RIP: 0023:0xf741d539 [ 158.499524][ T7274] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 158.499533][ T7274] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 158.499545][ T7274] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000004008ae6a [ 158.499551][ T7274] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 158.499557][ T7274] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 158.499563][ T7274] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 158.499568][ T7274] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 158.499586][ T7274] [ 158.499594][ T7274] ERROR: Out of memory at tomoyo_realpath_from_path. [ 158.794785][ T7275] netlink: 'syz.4.378': attribute type 1 has an invalid length. [ 158.805890][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 158.877949][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 158.898537][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 158.934860][ T9] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 159.073032][ T9] usb 4-1: USB disconnect, device number 10 [ 159.191484][ T7285] bridge0: port 4(veth0_to_bridge) entered blocking state [ 159.200631][ T7285] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 159.252587][ T7285] bridge0: port 4(veth0_to_bridge) entered disabled state [ 159.277905][ T7285] veth0_to_bridge: entered allmulticast mode [ 159.308327][ T7285] veth0_to_bridge: entered promiscuous mode [ 159.328334][ T7285] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 159.384419][ T7285] bridge0: port 4(veth0_to_bridge) entered blocking state [ 159.391821][ T7285] bridge0: port 4(veth0_to_bridge) entered forwarding state [ 159.446996][ T7293] netlink: 'syz.0.385': attribute type 32 has an invalid length. [ 159.494032][ T7293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.385'. [ 159.619394][ T7293] bond1: option coupled_control: invalid value (170) [ 159.658523][ T7293] bond1 (unregistering): Released all slaves [ 159.720752][ T7295] veth0_to_team: Caught tx_queue_len zero misconfig [ 159.908193][ T7308] sctp: [Deprecated]: syz.2.391 (pid 7308) Use of int in max_burst socket option. [ 159.908193][ T7308] Use struct sctp_assoc_value instead [ 159.923992][ T5872] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 160.084185][ T5872] usb 5-1: Using ep0 maxpacket: 8 [ 160.091433][ T5872] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 160.101631][ T7315] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 160.110281][ T5872] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 160.160110][ T5872] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 160.181414][ T5872] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 160.201536][ T5872] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 160.218372][ T7317] input: syz1 as /devices/virtual/input/input22 [ 160.224831][ T5872] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 160.234028][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.562716][ T5872] usb 5-1: GET_CAPABILITIES returned 80 [ 160.572478][ T5872] usbtmc 5-1:16.0: can't read capabilities [ 160.772364][ T7331] tls_set_device_offload_rx: netdev not found [ 160.810769][ T9] usb 5-1: USB disconnect, device number 18 [ 161.344246][ T7348] FAULT_INJECTION: forcing a failure. [ 161.344246][ T7348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.358747][ T7348] CPU: 1 UID: 0 PID: 7348 Comm: syz.0.403 Tainted: G L syzkaller #0 PREEMPT(full) [ 161.358765][ T7348] Tainted: [L]=SOFTLOCKUP [ 161.358769][ T7348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 161.358775][ T7348] Call Trace: [ 161.358780][ T7348] [ 161.358784][ T7348] dump_stack_lvl+0xe8/0x150 [ 161.358802][ T7348] should_fail_ex+0x412/0x560 [ 161.358817][ T7348] _copy_from_user+0x2d/0xb0 [ 161.358832][ T7348] csum_and_copy_from_iter_full+0x684/0x1f00 [ 161.358846][ T7348] ? rcu_is_watching+0x15/0xb0 [ 161.358865][ T7348] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 161.358880][ T7348] ? __lock_acquire+0x6b5/0x2cf0 [ 161.358898][ T7348] ip_generic_getfrag+0x149/0x2d0 [ 161.358912][ T7348] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 161.358924][ T7348] ? skb_page_frag_refill+0x199/0x310 [ 161.358942][ T7348] __ip_append_data+0x2120/0x3f30 [ 161.358953][ T7348] ? __lock_acquire+0x6b5/0x2cf0 [ 161.358975][ T7348] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 161.358997][ T7348] ? __pfx___ip_append_data+0x10/0x10 [ 161.359009][ T7348] ? do_raw_spin_lock+0x12b/0x2f0 [ 161.359021][ T7348] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 161.359033][ T7348] ip_append_data+0x10d/0x190 [ 161.359047][ T7348] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 161.359060][ T7348] udp_sendmsg+0x448/0x2240 [ 161.359075][ T7348] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 161.359092][ T7348] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 161.359104][ T7348] ? __pfx_udp_sendmsg+0x10/0x10 [ 161.359124][ T7348] ? aa_sk_perm+0x15a/0x960 [ 161.359136][ T7348] ? aa_sk_perm+0x82d/0x960 [ 161.359150][ T7348] ? __pfx_aa_sk_perm+0x10/0x10 [ 161.359159][ T7348] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 161.359174][ T7348] ? __import_iovec+0x40e/0x7e0 [ 161.359188][ T7348] ? sock_rps_record_flow+0x19/0x400 [ 161.359203][ T7348] ? inet_sendmsg+0x29c/0x370 [ 161.359215][ T7348] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 161.359227][ T7348] ____sys_sendmsg+0x894/0xad0 [ 161.359244][ T7348] ? __pfx_____sys_sendmsg+0x10/0x10 [ 161.359259][ T7348] ? rcu_is_watching+0x15/0xb0 [ 161.359268][ T7348] ? ___sys_sendmsg+0x2b5/0x360 [ 161.359284][ T7348] ___sys_sendmsg+0x2a5/0x360 [ 161.359296][ T7348] ? __lock_acquire+0x6b5/0x2cf0 [ 161.359321][ T7348] ? __pfx____sys_sendmsg+0x10/0x10 [ 161.359335][ T7348] ? kstrtoull+0x12f/0x1d0 [ 161.359367][ T7348] __sys_sendmmsg+0x2e7/0x4e0 [ 161.359383][ T7348] ? __pfx___sys_sendmmsg+0x10/0x10 [ 161.359400][ T7348] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 161.359420][ T7348] ? ksys_write+0x242/0x270 [ 161.359436][ T7348] ? __pfx_ksys_write+0x10/0x10 [ 161.359451][ T7348] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 161.359466][ T7348] __do_fast_syscall_32+0x1d2/0x540 [ 161.359477][ T7348] ? lockdep_hardirqs_on+0x7a/0x110 [ 161.359486][ T7348] ? do_fast_syscall_32+0x33/0x70 [ 161.359496][ T7348] ? asm_int80_emulation+0x1a/0x20 [ 161.359505][ T7348] ? do_int80_emulation+0x20e/0x400 [ 161.359517][ T7348] do_fast_syscall_32+0x33/0x70 [ 161.359528][ T7348] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 161.359539][ T7348] RIP: 0023:0xf741d539 [ 161.359549][ T7348] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 161.359557][ T7348] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 161.359568][ T7348] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000a40 [ 161.359575][ T7348] RDX: 0000000000000003 RSI: 000000002000c044 RDI: 0000000000000000 [ 161.359581][ T7348] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 161.359586][ T7348] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 161.359592][ T7348] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 161.359606][ T7348] [ 161.844079][ T5872] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 161.909981][ T7356] sctp: [Deprecated]: syz.0.406 (pid 7356) Use of int in max_burst socket option. [ 161.909981][ T7356] Use struct sctp_assoc_value instead [ 162.037742][ T5872] usb 2-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 162.048495][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.056647][ T5872] usb 2-1: Product: syz [ 162.060822][ T5872] usb 2-1: Manufacturer: syz [ 162.065482][ T5872] usb 2-1: SerialNumber: syz [ 162.073242][ T5872] usb 2-1: config 0 descriptor?? [ 162.311493][ T7370] tipc: Started in network mode [ 162.324023][ T7370] tipc: Node identity eea4f0aea7af, cluster identity 4711 [ 162.334538][ T7370] tipc: Enabled bearer , priority 0 [ 162.342170][ T5872] usb 2-1: USB disconnect, device number 12 [ 162.389871][ T7373] syzkaller0: entered promiscuous mode [ 162.401428][ T7373] syzkaller0: entered allmulticast mode [ 162.532399][ T7367] tipc: Resetting bearer [ 162.570581][ T7364] netlink: 5040 bytes leftover after parsing attributes in process `syz.4.409'. [ 162.589311][ T7367] tipc: Disabling bearer [ 162.788015][ T7376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.412'. [ 162.970615][ T7376] syz_tun: entered promiscuous mode [ 163.004240][ T7376] macvtap1: entered promiscuous mode [ 163.024242][ T7376] macvtap1: entered allmulticast mode [ 163.049446][ T7376] syz_tun: entered allmulticast mode [ 163.100359][ T7380] loop2: detected capacity change from 0 to 7 [ 163.131988][ T7380] loop2: [ 163.139451][ T7380] loop2: partition table partially beyond EOD, truncated [ 163.164908][ T7377] syz_tun: left allmulticast mode [ 163.242663][ T7377] syz_tun: left promiscuous mode [ 163.306390][ T7384] netlink: 'syz.4.415': attribute type 10 has an invalid length. [ 163.356975][ T7384] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 163.800198][ T7399] sctp: [Deprecated]: syz.3.420 (pid 7399) Use of int in max_burst socket option. [ 163.800198][ T7399] Use struct sctp_assoc_value instead [ 163.934373][ T5907] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 163.963612][ T7398] netlink: 12 bytes leftover after parsing attributes in process `syz.4.421'. [ 163.990755][ T7398] netlink: 32 bytes leftover after parsing attributes in process `syz.4.421'. [ 164.006962][ T7404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.422'. [ 164.089617][ T7398] ipvlan0: Caught tx_queue_len zero misconfig [ 164.105586][ T5907] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 164.117150][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.129896][ T5907] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 164.141448][ T5907] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 164.154302][ T5907] usb 3-1: Manufacturer: syz [ 164.156003][ T7407] input: syz0 as /devices/virtual/input/input23 [ 164.166925][ T5907] usb 3-1: config 0 descriptor?? [ 164.258698][ T7400] binder: 7396:7400 ioctl 4018620d 0 returned -22 [ 164.265762][ T5907] rc_core: IR keymap rc-hauppauge not found [ 164.271739][ T5907] Registered IR keymap rc-empty [ 164.279368][ T5907] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 164.294385][ T5907] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input24 [ 164.311130][ T7410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.424'. [ 164.457416][ T7413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.425'. [ 164.592679][ T7411] rc rc0: two consecutive events of type space [ 164.687754][ T7418] FAULT_INJECTION: forcing a failure. [ 164.687754][ T7418] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.701562][ T7418] CPU: 1 UID: 0 PID: 7418 Comm: syz.3.427 Tainted: G L syzkaller #0 PREEMPT(full) [ 164.701590][ T7418] Tainted: [L]=SOFTLOCKUP [ 164.701594][ T7418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 164.701600][ T7418] Call Trace: [ 164.701604][ T7418] [ 164.701609][ T7418] dump_stack_lvl+0xe8/0x150 [ 164.701626][ T7418] should_fail_ex+0x412/0x560 [ 164.701641][ T7418] _copy_from_user+0x2d/0xb0 [ 164.701662][ T7418] io_submit_one+0xd3/0x14c0 [ 164.701686][ T7418] ? irqentry_exit+0x59c/0x620 [ 164.701704][ T7418] ? lockdep_hardirqs_on+0x7a/0x110 [ 164.701728][ T7418] ? irqentry_exit+0x59c/0x620 [ 164.701746][ T7418] ? __pfx_io_submit_one+0x10/0x10 [ 164.701759][ T7418] ? __might_fault+0xaf/0x130 [ 164.701779][ T7418] ? __might_fault+0xaf/0x130 [ 164.701794][ T7418] __ia32_compat_sys_io_submit+0x1e1/0x390 [ 164.701813][ T7418] ? __pfx___ia32_compat_sys_io_submit+0x10/0x10 [ 164.701839][ T7418] ? __pfx_ksys_write+0x10/0x10 [ 164.701870][ T7418] __do_fast_syscall_32+0x1d2/0x540 [ 164.701888][ T7418] ? lockdep_hardirqs_on+0x7a/0x110 [ 164.701899][ T7418] ? do_fast_syscall_32+0x33/0x70 [ 164.701909][ T7418] ? asm_int80_emulation+0x1a/0x20 [ 164.701917][ T7418] ? do_int80_emulation+0x20e/0x400 [ 164.701930][ T7418] do_fast_syscall_32+0x33/0x70 [ 164.701941][ T7418] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 164.701954][ T7418] RIP: 0023:0xf73bd539 [ 164.701969][ T7418] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 164.701983][ T7418] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 00000000000000f8 [ 164.702003][ T7418] RAX: ffffffffffffffda RBX: 00000000f7f20000 RCX: 0000000000000001 [ 164.702013][ T7418] RDX: 0000000080000280 RSI: 0000000000000000 RDI: 0000000000000000 [ 164.702023][ T7418] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 164.702033][ T7418] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 164.702043][ T7418] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 164.702070][ T7418] [ 165.036590][ T9] usb 3-1: USB disconnect, device number 14 [ 165.157956][ T7422] IPv6: addrconf: prefix option has invalid lifetime [ 165.164862][ T7422] IPv6: addrconf: prefix option has invalid lifetime [ 165.298988][ T7426] lo: Caught tx_queue_len zero misconfig [ 165.436296][ T7430] sctp: [Deprecated]: syz.3.432 (pid 7430) Use of int in max_burst socket option. [ 165.436296][ T7430] Use struct sctp_assoc_value instead [ 165.555827][ T30] audit: type=1326 audit(1770052650.995:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7423 comm="syz.4.430" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf746d539 code=0x0 [ 166.706307][ T7451] fuse: Unknown parameter 'fd30x0000000000000004' [ 166.718047][ T5872] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 166.783182][ T7452] netlink: 20 bytes leftover after parsing attributes in process `syz.0.438'. [ 166.865930][ T5872] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 167.394232][ T5872] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 167.643995][ T5872] usb 4-1: Using ep0 maxpacket: 8 [ 167.664396][ T5872] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 167.680035][ T5872] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 167.691458][ T5872] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 167.701655][ T5872] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 167.765688][ T5872] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 167.819481][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.934453][ T7465] sctp: [Deprecated]: syz.2.443 (pid 7465) Use of int in max_burst socket option. [ 167.934453][ T7465] Use struct sctp_assoc_value instead [ 168.071386][ T5872] usb 4-1: usb_control_msg returned -71 [ 168.119239][ T5872] usbtmc 4-1:16.0: can't read capabilities [ 168.208955][ T5872] usb 4-1: USB disconnect, device number 11 [ 168.637569][ T7475] bond1: Unable to set down delay as MII monitoring is disabled [ 169.020676][ T7475] bond1 (unregistering): Released all slaves [ 169.534024][ T5872] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 169.545635][ T30] audit: type=1326 audit(1770052654.975:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7473 comm="syz.1.446" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f34539 code=0x0 [ 169.707275][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 169.730276][ T5872] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 169.753980][ T5872] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 169.771829][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.841789][ T5872] usb 5-1: config 0 descriptor?? [ 169.870052][ T7484] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 170.162735][ T5872] usbhid 5-1:0.0: can't add hid device: -71 [ 170.188649][ T5872] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 170.216618][ T5872] usb 5-1: USB disconnect, device number 19 [ 170.429760][ T7508] netlink: 12 bytes leftover after parsing attributes in process `syz.1.452'. [ 170.731798][ T7516] sctp: [Deprecated]: syz.4.455 (pid 7516) Use of int in max_burst socket option. [ 170.731798][ T7516] Use struct sctp_assoc_value instead [ 171.243243][ T7527] netlink: 'syz.0.458': attribute type 10 has an invalid length. [ 171.318062][ T7529] netlink: 'syz.0.458': attribute type 10 has an invalid length. [ 171.358296][ T7529] netlink: 40 bytes leftover after parsing attributes in process `syz.0.458'. [ 171.378938][ T30] audit: type=1326 audit(1770052656.815:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7526 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d539 code=0x7ffc0000 [ 171.437353][ T30] audit: type=1326 audit(1770052656.815:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7526 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf741d539 code=0x7ffc0000 [ 171.490453][ T30] audit: type=1326 audit(1770052656.815:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7526 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d539 code=0x7ffc0000 [ 171.524829][ T7533] netlink: 'syz.4.457': attribute type 13 has an invalid length. [ 171.544885][ T30] audit: type=1326 audit(1770052656.815:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7526 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf741d539 code=0x7ffc0000 [ 171.572327][ T30] audit: type=1326 audit(1770052656.815:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7526 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d539 code=0x7ffc0000 [ 171.606410][ T7527] batadv0: left allmulticast mode [ 171.611554][ T7527] batadv0: left promiscuous mode [ 171.620523][ T7527] bridge0: port 3(batadv0) entered disabled state [ 171.630261][ T7527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.640853][ T7527] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 171.755123][ T30] audit: type=1326 audit(1770052656.815:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7526 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf741d539 code=0x7ffc0000 [ 171.819110][ T30] audit: type=1326 audit(1770052656.815:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7526 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d539 code=0x7ffc0000 [ 171.841388][ T30] audit: type=1326 audit(1770052656.815:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7526 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d539 code=0x7ffc0000 [ 171.867354][ T7541] netlink: 28 bytes leftover after parsing attributes in process `syz.2.459'. [ 172.236472][ T7529] batadv0: entered promiscuous mode [ 172.242201][ T7529] batadv0: entered allmulticast mode [ 172.274618][ T7529] bond0: (slave batadv0): Releasing backup interface [ 172.290882][ T7529] bridge0: port 3(batadv0) entered blocking state [ 172.298433][ T7529] bridge0: port 3(batadv0) entered disabled state [ 172.467026][ T65] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 172.476321][ T65] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 172.725364][ T7558] loop2: detected capacity change from 0 to 7 [ 172.738682][ T7558] Dev loop2: unable to read RDB block 7 [ 172.754711][ T7558] loop2: unable to read partition table [ 172.760680][ T7558] loop2: partition table beyond EOD, truncated [ 172.783872][ T7558] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 172.826426][ T5194] Dev loop2: unable to read RDB block 7 [ 172.833385][ T5194] loop2: unable to read partition table [ 172.843077][ T5194] loop2: partition table beyond EOD, truncated [ 172.869736][ T7561] sctp: [Deprecated]: syz.4.466 (pid 7561) Use of int in max_burst socket option. [ 172.869736][ T7561] Use struct sctp_assoc_value instead [ 173.051901][ T7571] netlink: 'syz.2.469': attribute type 10 has an invalid length. [ 173.061337][ T7571] batadv0: left allmulticast mode [ 173.066537][ T7571] batadv0: left promiscuous mode [ 173.071930][ T7571] bridge0: port 3(batadv0) entered disabled state [ 173.099734][ T7567] input: syz1 as /devices/virtual/input/input25 [ 173.113198][ T7573] netlink: 'syz.2.469': attribute type 10 has an invalid length. [ 173.115141][ T7574] netlink: 'syz.1.470': attribute type 4 has an invalid length. [ 173.122078][ T7573] netlink: 40 bytes leftover after parsing attributes in process `syz.2.469'. [ 173.134781][ T7574] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.470'. [ 173.173528][ T7571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.205502][ T30] audit: type=1326 audit(1770052658.645:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.2.469" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d539 code=0x7ffc0000 [ 173.232601][ T7571] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 173.272174][ T30] audit: type=1326 audit(1770052658.645:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.2.469" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d539 code=0x7ffc0000 [ 173.272195][ T7569] tipc: Started in network mode [ 173.309662][ T7569] tipc: Node identity 4, cluster identity 4711 [ 173.316635][ T7569] tipc: Node number set to 4 [ 173.331714][ T7573] batadv0: entered promiscuous mode [ 173.339952][ T7573] batadv0: entered allmulticast mode [ 173.355570][ T7573] bond0: (slave batadv0): Releasing backup interface [ 173.364657][ T7573] bridge0: port 3(batadv0) entered blocking state [ 173.371277][ T7573] bridge0: port 3(batadv0) entered disabled state [ 173.443529][ T797] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 173.527555][ T7584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.473'. [ 173.861561][ T797] usb 5-1: config 9 has an invalid interface number: 32 but max is 0 [ 173.880514][ T797] usb 5-1: config 9 has no interface number 0 [ 173.897456][ T797] usb 5-1: config 9 interface 32 altsetting 9 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 173.926333][ T797] usb 5-1: config 9 interface 32 altsetting 9 bulk endpoint 0x2 has invalid maxpacket 1024 [ 173.980420][ T797] usb 5-1: config 9 interface 32 has no altsetting 0 [ 174.063148][ T797] usb 5-1: New USB device found, idVendor=0421, idProduct=01d0, bcdDevice=44.b3 [ 174.072837][ T797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.081574][ T797] usb 5-1: Product: syz [ 174.108056][ T797] usb 5-1: Manufacturer: syz [ 174.118307][ T797] usb 5-1: SerialNumber: syz [ 174.139654][ T7579] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 174.228493][ T7591] loop2: detected capacity change from 0 to 7 [ 174.514600][ T797] usb 5-1: USB disconnect, device number 20 [ 174.597932][ T7597] veth1_to_bridge: Caught tx_queue_len zero misconfig [ 174.642143][ T7599] loop2: detected capacity change from 0 to 7 [ 174.649343][ T7599] Dev loop2: unable to read RDB block 7 [ 174.661143][ T7600] syzkaller0: entered promiscuous mode [ 174.667094][ T7599] loop2: unable to read partition table [ 174.674059][ T7600] syzkaller0: entered allmulticast mode [ 174.679794][ T7599] loop2: partition table beyond EOD, truncated [ 174.692019][ T7599] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 174.887014][ T7606] sctp: [Deprecated]: syz.3.481 (pid 7606) Use of int in max_burst socket option. [ 174.887014][ T7606] Use struct sctp_assoc_value instead [ 174.968161][ T7611] ip6gre0: Caught tx_queue_len zero misconfig [ 175.164406][ T7611] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 175.385714][ T7619] netlink: 28 bytes leftover after parsing attributes in process `syz.0.484'. [ 175.431152][ T7617] netlink: 'syz.2.480': attribute type 13 has an invalid length. [ 175.469664][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.482251][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.494873][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.507123][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.519363][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.531580][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.543837][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.556060][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.568270][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.580452][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.474049][ C0] net_ratelimit: 23988 callbacks suppressed [ 180.474070][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.474189][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 180.480347][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.492373][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 180.505655][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 180.516365][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 180.528239][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 180.540317][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 180.552328][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.564181][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 184.253936][ C1] sched: DL replenish lagged too much [ 185.484107][ C1] net_ratelimit: 21943 callbacks suppressed [ 185.484128][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 185.484758][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 185.490460][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 185.502380][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 185.514401][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 185.526457][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.538274][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 185.550247][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.562222][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 185.575216][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 190.258277][ T5929] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 190.494078][ C1] net_ratelimit: 22196 callbacks suppressed [ 190.494100][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 190.494112][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 190.494531][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.500396][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 190.512850][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.524754][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 190.537770][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 190.548800][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 190.560632][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 190.572637][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 192.195631][ T5822] Bluetooth: hci0: command 0x0406 tx timeout [ 192.201686][ T5822] Bluetooth: hci4: command 0x0406 tx timeout [ 195.504174][ C0] net_ratelimit: 21274 callbacks suppressed [ 195.504195][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.504237][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 195.510494][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.522445][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 195.535478][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 195.546474][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 195.558300][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 195.570422][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 195.582942][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.594833][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 195.724630][ T5929] usb 4-1: device descriptor read/64, error -110 [ 196.201190][ T5929] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 196.288404][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.721659][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.626935][ T5824] Bluetooth: hci2: command 0x0406 tx timeout [ 198.633041][ T5824] Bluetooth: hci3: command 0x0406 tx timeout [ 200.514388][ C1] net_ratelimit: 22250 callbacks suppressed [ 200.514410][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 200.514749][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 200.520687][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 200.532721][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 200.545443][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 200.557442][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.569506][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 200.581762][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.594076][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 200.606908][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 205.523975][ C1] net_ratelimit: 21242 callbacks suppressed [ 205.523996][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 205.524026][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.530228][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 205.542286][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.555099][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.567115][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 205.578736][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.589968][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 205.602014][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 205.614131][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.533992][ C1] net_ratelimit: 17224 callbacks suppressed [ 210.534014][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.534056][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.540417][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.552170][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.564227][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 210.577457][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 210.588166][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 210.600093][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 210.612914][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.624106][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.544071][ C0] net_ratelimit: 17099 callbacks suppressed [ 215.544072][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 215.544091][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 215.544387][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 215.544557][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.544902][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.545553][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.545940][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.546300][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 215.546304][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 215.546607][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 220.553973][ C1] net_ratelimit: 18067 callbacks suppressed [ 220.553994][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 220.554225][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.554300][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 220.554528][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.555428][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.555624][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 220.555842][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.555972][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 220.556190][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 220.556375][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.564126][ C0] net_ratelimit: 17245 callbacks suppressed [ 225.564136][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.564147][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.564442][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.564584][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 225.564936][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 225.565702][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 225.565977][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 225.566290][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.566554][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.567511][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 230.574124][ C1] net_ratelimit: 17456 callbacks suppressed [ 230.574146][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.574514][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 230.574801][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 230.574810][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 230.575108][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 230.575504][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.575827][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.575976][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.576404][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.576746][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 235.584073][ C1] net_ratelimit: 17427 callbacks suppressed [ 235.584095][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 235.584326][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 235.584411][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 235.584634][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 235.585534][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.585926][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.586203][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.586619][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.586986][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 235.587277][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 240.594250][ C0] net_ratelimit: 17075 callbacks suppressed [ 240.594278][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.595063][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.595480][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.595541][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 240.595849][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 240.595894][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 240.596144][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 240.596350][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.596713][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.597220][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.604116][ C1] net_ratelimit: 17423 callbacks suppressed [ 245.604137][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.604567][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.604955][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 245.605118][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 245.605268][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 245.605403][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 245.605804][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.606099][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.606536][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.606974][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.614104][ C1] net_ratelimit: 17708 callbacks suppressed [ 250.614115][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 250.614125][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 250.614408][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 250.614506][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 250.615019][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.615404][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.615590][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.615991][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.616336][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 250.616629][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 255.624888][ C1] net_ratelimit: 17180 callbacks suppressed [ 255.624909][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.624932][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 255.625220][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 255.625486][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.625643][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.626309][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 255.628223][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 255.628446][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.628616][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.629268][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 257.104438][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.115509][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.634202][ C1] net_ratelimit: 17266 callbacks suppressed [ 260.634222][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.634228][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 260.634521][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 260.634650][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.634932][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.634994][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 260.635279][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.635301][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 260.636420][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.636513][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 265.643998][ C0] net_ratelimit: 18296 callbacks suppressed [ 265.644020][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.644177][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 265.644453][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 265.644501][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 265.644910][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.645247][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.645793][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.646221][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.646606][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 265.646623][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 270.654020][ C1] net_ratelimit: 18567 callbacks suppressed [ 270.654048][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.654068][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.654404][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.654458][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.654803][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 270.654827][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 270.655118][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 270.655237][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.655561][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.656280][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.664000][ C0] net_ratelimit: 18851 callbacks suppressed [ 275.664027][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.664147][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.664543][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 275.664851][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.665417][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 275.665765][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.666167][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.666215][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 275.666595][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.666603][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.674195][ C0] net_ratelimit: 19607 callbacks suppressed [ 280.674216][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.674435][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.674548][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.674859][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 280.675220][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.675613][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 280.675834][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 280.675920][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.676137][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.677068][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 285.684059][ C0] net_ratelimit: 19350 callbacks suppressed [ 285.684081][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 285.684380][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 285.684784][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 285.685000][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.685161][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.685451][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 285.685462][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.685829][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.685836][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 285.686221][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 290.694002][ C0] net_ratelimit: 20312 callbacks suppressed [ 290.694024][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.694345][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.694976][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.695526][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 290.695668][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 290.695948][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.695991][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 290.696370][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 290.696417][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 290.696700][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 295.704171][ C0] net_ratelimit: 19691 callbacks suppressed [ 295.704193][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.704323][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.704732][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 295.705041][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 295.705462][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 295.705749][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 295.706152][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 295.706288][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.706511][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.706704][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 300.713997][ C0] net_ratelimit: 19625 callbacks suppressed [ 300.714018][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 300.714068][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.714342][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.714502][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 300.714788][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 300.714865][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.715163][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.715233][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 300.715528][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.715547][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.724128][ C0] net_ratelimit: 20202 callbacks suppressed [ 305.724151][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.724255][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 305.724598][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.724620][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.724940][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 305.724948][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.725233][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.726279][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.726355][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 305.726675][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 310.734223][ C0] net_ratelimit: 19610 callbacks suppressed [ 310.734243][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.734633][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.734807][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.735070][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.735254][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 310.735390][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.735620][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.735994][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 310.736324][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.736746][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 315.744676][ C0] net_ratelimit: 20506 callbacks suppressed [ 315.744697][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 315.744777][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.745016][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.745423][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 315.745549][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.745800][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.745992][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 315.746146][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.746411][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.746540][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.754031][ C1] net_ratelimit: 19880 callbacks suppressed [ 320.754052][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.754260][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.754436][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.754577][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.754842][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 320.755192][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.755571][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 320.755863][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.755897][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 320.756231][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 321.463324][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.474273][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.764122][ C0] net_ratelimit: 20299 callbacks suppressed [ 325.764143][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.764864][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.765254][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 325.765540][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 325.765689][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 325.765860][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 325.766058][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.766295][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 325.766449][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 325.766683][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.774057][ C0] net_ratelimit: 20019 callbacks suppressed [ 330.774078][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 330.774160][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 330.774549][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.774614][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 330.774877][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.774979][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.775352][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 330.775679][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 330.776246][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 330.776603][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 335.783946][ C0] net_ratelimit: 20107 callbacks suppressed [ 335.783967][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 335.784297][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.784423][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 335.784686][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 335.784804][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.785119][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 335.785132][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.785507][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.785546][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 335.785878][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 340.794142][ C0] net_ratelimit: 20615 callbacks suppressed [ 340.794164][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 340.794304][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.794454][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 340.794708][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 340.794876][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 340.795139][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 340.795218][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.795512][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.795529][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.795893][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 345.804196][ C0] net_ratelimit: 19868 callbacks suppressed [ 345.804208][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 345.804218][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 345.804523][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 345.804611][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.804914][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.804928][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.805300][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 345.805734][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.806069][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.806240][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.814706][ C1] net_ratelimit: 18877 callbacks suppressed [ 350.814733][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.814892][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.815215][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.815797][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.816134][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 350.816513][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 350.816562][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 350.816835][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 350.816902][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.817239][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 355.824151][ C0] net_ratelimit: 19402 callbacks suppressed [ 355.824174][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 355.824550][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.824879][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.824887][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.825279][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 355.825717][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.826057][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.826060][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.826426][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 355.826863][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 360.834135][ C1] net_ratelimit: 19513 callbacks suppressed [ 360.834155][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 360.834476][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 360.834864][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.835073][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 360.835364][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 360.835777][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 360.836141][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.836212][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.836462][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.836834][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 365.843990][ C1] net_ratelimit: 19094 callbacks suppressed [ 365.844011][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.844124][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 365.844537][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.844874][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.845153][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.845498][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 365.845903][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 365.846178][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 365.846246][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.846477][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 370.854306][ C0] net_ratelimit: 19046 callbacks suppressed [ 370.854327][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 370.854772][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 370.854934][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 370.855098][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 370.856083][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 370.856274][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 370.856461][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 370.856615][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 370.856868][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 370.857049][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 375.863943][ C0] net_ratelimit: 19324 callbacks suppressed [ 375.863963][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 375.864043][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 375.864416][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 375.864702][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 375.865041][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 375.865355][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 375.865675][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 375.866123][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 375.866327][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 375.866533][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 379.295113][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.306419][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.874033][ C1] net_ratelimit: 20105 callbacks suppressed [ 380.874055][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 380.874426][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 380.874451][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 380.874746][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 380.875184][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 380.875514][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 380.875797][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 380.875816][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 380.876159][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 380.876554][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.883980][ C0] net_ratelimit: 19340 callbacks suppressed [ 385.884001][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 385.884093][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.884440][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.884762][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.885295][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.886008][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 385.886231][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.886299][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 385.886564][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 385.886749][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:73:b4:6e:bd:fe, vlan:0) [ 389.335229][ T31] INFO: task kworker/1:8:5907 blocked for more than 159 seconds. [ 389.335258][ T31] Tainted: G L syzkaller #0 [ 389.335270][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 389.335292][ T31] task:kworker/1:8 state:D stack:19448 pid:5907 tgid:5907 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 389.335343][ T31] Workqueue: events_power_efficient reg_check_chans_work [ 389.335382][ T31] Call Trace: [ 389.335390][ T31] [ 389.335404][ T31] __schedule+0x14ea/0x5050 [ 389.335444][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 389.335463][ T31] ? wq_worker_sleeping+0xfe/0x250 [ 389.335484][ T31] ? __pfx___schedule+0x10/0x10 [ 389.335510][ T31] ? schedule+0x90/0x360 [ 389.335530][ T31] schedule+0x164/0x360 [ 389.335548][ T31] schedule_preempt_disabled+0x13/0x30 [ 389.335567][ T31] __mutex_lock+0x7fe/0x1300 [ 389.335591][ T31] ? __mutex_lock+0x5ac/0x1300 [ 389.335614][ T31] ? reg_check_chans_work+0x15a/0xf40 [ 389.335638][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 389.335656][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 389.335680][ T31] ? __pfx___schedule+0x10/0x10 [ 389.335694][ T31] ? add_lock_to_list+0xc7/0x100 [ 389.335719][ T31] reg_check_chans_work+0x15a/0xf40 [ 389.335745][ T31] ? irqentry_exit+0x59c/0x620 [ 389.335770][ T31] ? __pfx_reg_check_chans_work+0x10/0x10 [ 389.335789][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 389.335819][ T31] ? lock_acquire+0x221/0x330 [ 389.335840][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 389.335862][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 389.335888][ T31] process_scheduled_works+0xaec/0x17a0 [ 389.335938][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 389.335961][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 389.335984][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 389.336002][ T31] ? schedule+0x90/0x360 [ 389.336028][ T31] worker_thread+0xda6/0x1360 [ 389.336077][ T31] ? __kthread_parkme+0x19c/0x1f0 [ 389.336102][ T31] kthread+0x726/0x8b0 [ 389.336124][ T31] ? __pfx_worker_thread+0x10/0x10 [ 389.336147][ T31] ? __pfx_kthread+0x10/0x10 [ 389.336170][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 389.336195][ T31] ? __pfx_kthread+0x10/0x10 [ 389.336215][ T31] ret_from_fork+0x51b/0xa40 [ 389.336244][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 389.336266][ T31] ? __switch_to+0xc82/0x1410 [ 389.336293][ T31] ? __pfx_kthread+0x10/0x10 [ 389.336314][ T31] ret_from_fork_asm+0x1a/0x30 [ 389.336353][ T31] [ 389.336370][ T31] INFO: task kworker/u8:13:7635 blocked for more than 159 seconds. [ 389.336386][ T31] Tainted: G L syzkaller #0 [ 389.336397][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 389.336406][ T31] task:kworker/u8:13 state:D stack:27336 pid:7635 tgid:7635 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 389.336460][ T31] Workqueue: ipv6_addrconf addrconf_verify_work [ 389.336484][ T31] Call Trace: [ 389.336491][ T31] [ 389.336503][ T31] __schedule+0x14ea/0x5050 [ 389.336549][ T31] ? __pfx___schedule+0x10/0x10 [ 389.336577][ T31] ? schedule+0x90/0x360 [ 389.336597][ T31] schedule+0x164/0x360 [ 389.336618][ T31] schedule_preempt_disabled+0x13/0x30 [ 389.336636][ T31] __mutex_lock+0x7fe/0x1300 [ 389.336660][ T31] ? __mutex_lock+0x5ac/0x1300 [ 389.336684][ T31] ? addrconf_verify_work+0x19/0x30 [ 389.336709][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 389.336735][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 389.336770][ T31] addrconf_verify_work+0x19/0x30 [ 389.336789][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 389.336811][ T31] process_scheduled_works+0xaec/0x17a0 [ 389.336862][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 389.336885][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 389.336908][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 389.336926][ T31] ? schedule+0x90/0x360 [ 389.336952][ T31] worker_thread+0xda6/0x1360 [ 389.337000][ T31] kthread+0x726/0x8b0 [ 389.337024][ T31] ? __pfx_worker_thread+0x10/0x10 [ 389.337055][ T31] ? __pfx_kthread+0x10/0x10 [ 389.337078][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 389.337101][ T31] ? __pfx_kthread+0x10/0x10 [ 389.337122][ T31] ret_from_fork+0x51b/0xa40 [ 389.337149][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 389.337172][ T31] ? __switch_to+0xc82/0x1410 [ 389.337199][ T31] ? __pfx_kthread+0x10/0x10 [ 389.337220][ T31] ret_from_fork_asm+0x1a/0x30 [ 389.337257][ T31] [ 389.337274][ T31] [ 389.337274][ T31] Showing all locks held in the system: [ 389.337283][ T31] 1 lock held by kthreadd/2: [ 389.337296][ T31] 2 locks held by kworker/0:0/9: [ 389.337307][ T31] 4 locks held by kworker/0:1/10: [ 389.337318][ T31] 4 locks held by kworker/u8:0/12: [ 389.337329][ T31] #0: ffff888034bfa948 ((wq_completion)wg-kex-wg1#5){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 389.337392][ T31] #1: ffffc90000117bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 389.337447][ T31] #2: ffff8880346e9308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12f/0x830 [ 389.337501][ T31] #3: ffff88807d794890 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x140/0x830 [ 389.337554][ T31] 3 locks held by kworker/u8:1/13: [ 389.337567][ T31] 4 locks held by kworker/1:0/24: [ 389.337578][ T31] 1 lock held by khungtaskd/31: [ 389.337589][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 389.337643][ T31] 4 locks held by kworker/u8:2/36: [ 389.337654][ T31] 1 lock held by khugepaged/38: [ 389.337666][ T31] 4 locks held by kworker/1:1/39: [ 389.337676][ T31] #0: ffff88805783b948 ((wq_completion)wg-kex-wg1#7){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 389.337736][ T31] #1: ffffc90000af7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 389.337803][ T31] #2: ffff888057a59308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a1/0x9a0 [ 389.337856][ T31] #3: ffff88807d14c890 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x630/0x9a0 [ 389.337910][ T31] 3 locks held by kworker/u8:3/50: [ 389.337923][ T31] 4 locks held by kworker/u8:4/65: [ 389.337937][ T31] 4 locks held by kworker/0:2/797: [ 389.337948][ T31] #0: ffff888142bedd48 ((wq_completion)wg-kex-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 389.338008][ T31] #1: ffffc90003347bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 389.338082][ T31] #2: ffff888028161308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a1/0x9a0 [ 389.338134][ T31] #3: ffff88807d149708 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x58b/0x9a0 [ 389.338189][ T31] 5 locks held by kworker/1:2/983: [ 389.338202][ T31] 3 locks held by kworker/u8:5/1100: [ 389.338224][ T31] 3 locks held by kworker/u8:6/2999: [ 389.338235][ T31] 5 locks held by kworker/R-mld/3182: [ 389.338248][ T31] 3 locks held by kworker/R-bat_e/3408: [ 389.338258][ T31] 4 locks held by kworker/u8:7/4244: [ 389.338271][ T31] 1 lock held by klogd/5183: [ 389.338283][ T31] 2 locks held by dhcpcd/5489: [ 389.338293][ T31] 2 locks held by crond/5563: [ 389.338305][ T31] 2 locks held by getty/5579: [ 389.338316][ T31] #0: ffff88814e0510a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 389.338366][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 389.338419][ T31] 2 locks held by syz-executor/5807: [ 389.338431][ T31] 3 locks held by kworker/1:3/5819: [ 389.338443][ T31] 4 locks held by syz-executor/5836: [ 389.338455][ T31] 4 locks held by syz-executor/5837: [ 389.338467][ T31] 2 locks held by syz-executor/5840: [ 389.338478][ T31] 1 lock held by syz-executor/5841: [ 389.338492][ T31] 4 locks held by kworker/1:4/5872: [ 389.338504][ T31] 2 locks held by kworker/1:5/5879: [ 389.338516][ T31] 3 locks held by kworker/1:6/5886: [ 389.338529][ T31] 2 locks held by kworker/0:3/5899: [ 389.338541][ T31] 3 locks held by kworker/1:7/5906: [ 389.338552][ T31] 4 locks held by kworker/1:8/5907: [ 389.338563][ T31] #0: ffff88813fe56948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 389.338619][ T31] #1: ffffc9000517fbc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 389.338672][ T31] #2: ffffffff8f9ac148 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xa5/0xf40 [ 389.338722][ T31] #3: ffff888028268788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_check_chans_work+0x15a/0xf40 [ 389.338773][ T31] 9 locks held by kworker/0:4/5929: [ 389.338784][ T31] 4 locks held by kworker/0:5/5931: [ 389.338795][ T31] 3 locks held by kworker/0:6/5933: [ 389.338807][ T31] 3 locks held by kworker/0:7/5942: [ 389.338818][ T31] 4 locks held by kworker/u8:8/6270: [ 389.338830][ T31] 1 lock held by syz.2.480/7612: [ 389.338841][ T31] #0: ffff8880349a5900 (&mm->mmap_lock){++++}-{4:4}, at: __khugepaged_exit+0x165/0x460 [ 389.338892][ T31] 4 locks held by kworker/u8:9/7631: [ 389.338903][ T31] #0: ffff888034bfa948 ((wq_completion)wg-kex-wg1#5){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 389.338959][ T31] #1: ffffc9001b6dfbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 389.339012][ T31] #2: ffff8880346e9308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12f/0x830 [ 389.339070][ T31] #3: ffff88807d795278 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x140/0x830 [ 389.339123][ T31] 4 locks held by kworker/u8:10/7632: [ 389.339134][ T31] 4 locks held by kworker/u8:11/7633: [ 389.339146][ T31] #0: ffff888034bfb948 ((wq_completion)wg-kex-wg2){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 389.339200][ T31] #1: ffffc900040afbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 389.339254][ T31] #2: ffff888033c69308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12f/0x830 [ 389.339306][ T31] #3: ffff88807d7920f0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x140/0x830 [ 389.339359][ T31] 3 locks held by kworker/u8:12/7634: [ 389.339370][ T31] 3 locks held by kworker/u8:13/7635: [ 389.339381][ T31] #0: ffff88802fd4e948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 389.339435][ T31] #1: ffffc9001b32fbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 389.339489][ T31] #2: ffffffff8f9ac148 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 389.339540][ T31] 4 locks held by kworker/u8:14/7636: [ 389.339552][ T31] 2 locks held by kworker/u8:15/7637: [ 389.339563][ T31] #0: ffff88813fe69948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 389.339623][ T31] #1: ffffc9001bcafbc0 ((work_completion)(&pool->idle_cull_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 389.339679][ T31] [ 389.339685][ T31] ============================================= [ 389.339685][ T31] [ 389.339706][ T31] NMI backtrace for cpu 0 [ 389.339726][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 389.339773][ T31] Tainted: [L]=SOFTLOCKUP [ 389.339801][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 389.339811][ T31] Call Trace: [ 389.339818][ T31] [ 389.339825][ T31] dump_stack_lvl+0xe8/0x150 [ 389.339846][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 389.339869][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 389.339893][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 389.339917][ T31] sys_info+0x135/0x170 [ 389.339935][ T31] watchdog+0xf90/0xfe0 [ 389.339957][ T31] ? watchdog+0x209/0xfe0 [ 389.339981][ T31] kthread+0x726/0x8b0 [ 389.340002][ T31] ? __pfx_watchdog+0x10/0x10 [ 389.340018][ T31] ? __pfx_kthread+0x10/0x10 [ 389.340045][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 389.340067][ T31] ? __pfx_kthread+0x10/0x10 [ 389.340086][ T31] ret_from_fork+0x51b/0xa40 [ 389.340112][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 389.340133][ T31] ? __switch_to+0xc82/0x1410 [ 389.340158][ T31] ? __pfx_kthread+0x10/0x10 [ 389.340176][ T31] ret_from_fork_asm+0x1a/0x30 [ 389.340211][ T31] [ 389.340217][ T31] Sending NMI from CPU 0 to CPUs 1: [ 389.340252][ C1] NMI backtrace for cpu 1 [ 389.340266][ C1] CPU: 1 UID: 0 PID: 3408 Comm: kworker/R-bat_e Tainted: G L syzkaller #0 PREEMPT(full) [ 389.340306][ C1] Tainted: [L]=SOFTLOCKUP [ 389.340317][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 389.340335][ C1] Workqueue: bat_events batadv_tt_purge [ 389.340382][ C1] RIP: 0010:__this_cpu_preempt_check+0xe/0x20 [ 389.340400][ C1] Code: aa 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 fe 48 c7 c7 00 3a 07 8c fd fe ff ff cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 [ 389.340413][ C1] RSP: 0018:ffffc90000a07698 EFLAGS: 00000246 [ 389.340425][ C1] RAX: 1ffff1100afeb401 RBX: 1ffff1100a06daf0 RCX: ffff888030e21e80 [ 389.340436][ C1] RDX: 0000000000000100 RSI: ffffffff8cbafd80 RDI: ffffffff8c073a00 [ 389.340446][ C1] RBP: 0000000000000000 R08: ffffffff8fef1b77 R09: 1ffffffff1fde36e [ 389.340457][ C1] R10: dffffc0000000000 R11: fffffbfff1fde36f R12: 0000000000000000 [ 389.340467][ C1] R13: ffffffff8c44a000 R14: ffff88805036d780 R15: dffffc0000000000 [ 389.340478][ C1] FS: 0000000000000000(0000) GS:ffff8881257f5000(0000) knlGS:0000000000000000 [ 389.340490][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 389.340500][ C1] CR2: 0000000057604470 CR3: 0000000076f96000 CR4: 00000000003526f0 [ 389.340513][ C1] Call Trace: [ 389.340519][ C1] [ 389.340524][ C1] dev_hard_start_xmit+0x297/0x7f0 [ 389.340549][ C1] __dev_queue_xmit+0x168f/0x3850 [ 389.340568][ C1] ? kasan_save_track+0x4f/0x80 [ 389.340581][ C1] ? kasan_save_track+0x3e/0x80 [ 389.340594][ C1] ? br_nf_post_routing+0xb66/0xfe0 [ 389.340607][ C1] ? NF_HOOK+0x23e/0x3f0 [ 389.340624][ C1] ? br_nf_forward_finish+0xa5e/0xe90 [ 389.340637][ C1] ? __dev_queue_xmit+0x274/0x3850 [ 389.340655][ C1] ? br_nf_forward_ip+0x7ef/0xa30 [ 389.340667][ C1] ? nf_hook_slow+0xc5/0x220 [ 389.340682][ C1] ? NF_HOOK+0x23e/0x3f0 [ 389.340697][ C1] ? __br_forward+0x397/0x540 [ 389.340714][ C1] ? br_flood+0x6ee/0xb80 [ 389.340730][ C1] ? br_handle_frame_finish+0x1492/0x1b40 [ 389.340743][ C1] ? br_nf_hook_thresh+0x3dd/0x4c0 [ 389.340761][ C1] ? br_nf_pre_routing_ipv6+0x374/0x6f0 [ 389.340774][ C1] ? br_handle_frame+0x1277/0x1510 [ 389.340796][ C1] ? __netif_receive_skb_core+0x98f/0x30a0 [ 389.340810][ C1] ? process_backlog+0x76d/0x1950 [ 389.340824][ C1] ? __napi_poll+0xae/0x340 [ 389.340838][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 389.340855][ C1] ? batadv_tt_purge+0x4d1/0x9e0 [ 389.340871][ C1] ? process_scheduled_works+0xaec/0x17a0 [ 389.340889][ C1] ? rescuer_thread+0xcba/0x1390 [ 389.340901][ C1] ? kthread+0x726/0x8b0 [ 389.340914][ C1] ? ret_from_fork+0x51b/0xa40 [ 389.340931][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 389.340956][ C1] ? kasan_quarantine_put+0xbb/0x1f0 [ 389.340974][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 389.340992][ C1] br_dev_queue_push_xmit+0x6d2/0x8b0 [ 389.341011][ C1] ? br_nf_dev_queue_xmit+0x4ef/0x2560 [ 389.341025][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 389.341045][ C1] ? NF_HOOK+0xa2/0x6e0 [ 389.341057][ C1] ? NF_HOOK+0xa2/0x6e0 [ 389.341069][ C1] NF_HOOK+0x64e/0x6e0 [ 389.341084][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 389.341097][ C1] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 389.341111][ C1] ? net_generic+0x1e/0x240 [ 389.341123][ C1] ? net_generic+0x1e/0x240 [ 389.341134][ C1] ? net_generic+0x1e/0x240 [ 389.341145][ C1] ? skb_pull+0xc1/0x1d0 [ 389.341163][ C1] br_nf_post_routing+0xb66/0xfe0 [ 389.341177][ C1] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 389.341192][ C1] ? __pfx_br_nf_post_routing+0x10/0x10 [ 389.341206][ C1] nf_hook_slow+0xc5/0x220 [ 389.341221][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 389.341240][ C1] NF_HOOK+0x23e/0x3f0 [ 389.341258][ C1] ? NF_HOOK+0xa2/0x3f0 [ 389.341274][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 389.341290][ C1] ? net_generic+0x1e/0x240 [ 389.341303][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 389.341324][ C1] ? net_generic+0x1e/0x240 [ 389.341336][ C1] br_forward_finish+0xd3/0x130 [ 389.341353][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 389.341372][ C1] br_nf_forward_finish+0xa5e/0xe90 [ 389.341390][ C1] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 389.341405][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 389.341424][ C1] ? NF_HOOK+0xa2/0x6e0 [ 389.341436][ C1] ? NF_HOOK+0xa2/0x6e0 [ 389.341451][ C1] NF_HOOK+0x64e/0x6e0 [ 389.341466][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 389.341479][ C1] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 389.341493][ C1] ? net_generic+0x1e/0x240 [ 389.341508][ C1] br_nf_forward_ip+0x7ef/0xa30 [ 389.341521][ C1] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 389.341535][ C1] ? __pfx_br_nf_forward+0x10/0x10 [ 389.341549][ C1] nf_hook_slow+0xc5/0x220 [ 389.341564][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 389.341582][ C1] NF_HOOK+0x23e/0x3f0 [ 389.341600][ C1] ? NF_HOOK+0xa2/0x3f0 [ 389.341617][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 389.341634][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 389.341653][ C1] ? __skb_clone+0x483/0x7a0 [ 389.341668][ C1] ? br_handle_vlan+0x61/0x530 [ 389.341686][ C1] __br_forward+0x397/0x540 [ 389.341703][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 389.341722][ C1] br_flood+0x6ee/0xb80 [ 389.341745][ C1] br_handle_frame_finish+0x1492/0x1b40 [ 389.341759][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 389.341776][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 389.341799][ C1] ? ip6t_do_table+0x133/0x1560 [ 389.341816][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 389.341830][ C1] ? nf_hook_slow+0x176/0x220 [ 389.341845][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 389.341859][ C1] br_nf_hook_thresh+0x3dd/0x4c0 [ 389.341881][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 389.341900][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 389.341913][ C1] ? nf_nat_ipv6_in+0x203/0x2c0 [ 389.341935][ C1] br_nf_pre_routing_finish_ipv6+0xa3a/0xd70 [ 389.341949][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 389.341968][ C1] br_nf_pre_routing_ipv6+0x374/0x6f0 [ 389.341983][ C1] ? br_nf_pre_routing_ipv6+0x421/0x6f0 [ 389.341997][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 389.342012][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 389.342026][ C1] ? br_nf_pre_routing+0x720/0x1470 [ 389.342049][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 389.342066][ C1] br_handle_frame+0x1277/0x1510 [ 389.342084][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 389.342099][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 389.342117][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 389.342130][ C1] __netif_receive_skb_core+0x98f/0x30a0 [ 389.342145][ C1] ? ip6_mc_input+0x8de/0xbd0 [ 389.342170][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 389.342184][ C1] ? ip6_rcv_finish+0x29e/0x2e0 [ 389.342202][ C1] ? NF_HOOK+0x336/0x3c0 [ 389.342220][ C1] ? process_backlog+0x3eb/0x1950 [ 389.342234][ C1] ? lock_acquire+0x106/0x330 [ 389.342250][ C1] ? process_backlog+0x3eb/0x1950 [ 389.342268][ C1] ? process_backlog+0x3eb/0x1950 [ 389.342282][ C1] ? process_backlog+0x3eb/0x1950 [ 389.342297][ C1] ? process_backlog+0x3eb/0x1950 [ 389.342311][ C1] process_backlog+0x76d/0x1950 [ 389.342334][ C1] __napi_poll+0xae/0x340 [ 389.342347][ C1] ? skb_defer_free_flush+0x233/0x260 [ 389.342362][ C1] net_rx_action+0x627/0xf70 [ 389.342383][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 389.342409][ C1] handle_softirqs+0x22a/0x7c0 [ 389.342422][ C1] ? do_softirq+0x76/0xd0 [ 389.342437][ C1] ? batadv_tt_purge+0x4d1/0x9e0 [ 389.342455][ C1] do_softirq+0x76/0xd0 [ 389.342466][ C1] [ 389.342471][ C1] [ 389.342476][ C1] __local_bh_enable_ip+0xf8/0x130 [ 389.342489][ C1] batadv_tt_purge+0x4d1/0x9e0 [ 389.342509][ C1] ? process_scheduled_works+0xa0f/0x17a0 [ 389.342527][ C1] process_scheduled_works+0xaec/0x17a0 [ 389.342556][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 389.342573][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 389.342589][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 389.342609][ C1] rescuer_thread+0xcba/0x1390 [ 389.342626][ C1] ? rescuer_thread+0xb4/0x1390 [ 389.342647][ C1] kthread+0x726/0x8b0 [ 389.342662][ C1] ? __pfx_rescuer_thread+0x10/0x10 [ 389.342676][ C1] ? __pfx_kthread+0x10/0x10 [ 389.342691][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 389.342709][ C1] ? __pfx_kthread+0x10/0x10 [ 389.342723][ C1] ret_from_fork+0x51b/0xa40 [ 389.342742][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 389.342759][ C1] ? __switch_to+0xc82/0x1410 [ 389.342777][ C1] ? __pfx_kthread+0x10/0x10 [ 389.342797][ C1] ret_from_fork_asm+0x1a/0x30 [ 389.342819][ C1] [ 389.343255][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 389.343270][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 389.343294][ T31] Tainted: [L]=SOFTLOCKUP [ 389.343301][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 389.343312][ T31] Call Trace: [ 389.343319][ T31] [ 389.343327][ T31] vpanic+0x1e0/0x670 [ 389.343351][ T31] panic+0xc5/0xd0 [ 389.343370][ T31] ? __pfx_panic+0x10/0x10 [ 389.343399][ T31] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 389.343426][ T31] watchdog+0xfda/0xfe0 [ 389.343448][ T31] ? watchdog+0x209/0xfe0 [ 389.343472][ T31] kthread+0x726/0x8b0 [ 389.343493][ T31] ? __pfx_watchdog+0x10/0x10 [ 389.343511][ T31] ? __pfx_kthread+0x10/0x10 [ 389.343533][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 389.343555][ T31] ? __pfx_kthread+0x10/0x10 [ 389.343575][ T31] ret_from_fork+0x51b/0xa40 [ 389.343601][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 389.343622][ T31] ? __switch_to+0xc82/0x1410 [ 389.343645][ T31] ? __pfx_kthread+0x10/0x10 [ 389.343665][ T31] ret_from_fork_asm+0x1a/0x30 [ 389.343700][ T31] [ 389.344163][ T31] Kernel Offset: disabled