last executing test programs: 4m50.902421545s ago: executing program 0 (id=730): r0 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x8, 0x0, 0x1, 0x3, 0xc, 0x800}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r2, 0x8b32, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r6 = openat(0xffffffffffffff9c, 0x0, 0x101000, 0x1a) getdents64(r6, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000020102010100000000000005000000000000000740008400005261b98635ca4d4f966699531a15465a70f12ecbe66b748cf767d4cc22e5318c8935085a42d1eb804ed406a2c70c067142e55e1c2fa5d2ae886901000000000000007b221c53e1815eb034d9adadae07df81f36e2a8f79b0ec9a9ee402da9634a369b734c51192b94921b632aaa684bd124f30dcc9d26432e132e9985a4c78bee355af1326fec875110f992e6e4aae970d0d1cb7e9765156aaea825d85e020771106bf4aba2c41bb2f32894c405f4980684b6eab77edf1c740885504cbb1da00bd"], 0x1c}, 0x1, 0x0, 0x0, 0x44050}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xa, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x35, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f00000019c0)={0x7, [0x7, 0x6, 0x3, 0x3, 0x10, 0x5c48, 0x1, 0x2, 0x5, 0x4, 0x7, 0x7, 0x5, 0xff80, 0x6, 0xfff1, 0x7, 0x5, 0x6, 0x7, 0x0, 0x5a4b, 0x5, 0x6, 0x2c, 0x80, 0xfff1, 0x3, 0x6, 0x9, 0x1, 0x4, 0x131b, 0x2, 0x100, 0x2, 0x1d00, 0x5, 0xa23, 0x3, 0x10, 0x3, 0x3, 0x3, 0x8001, 0x9, 0xf3f, 0x8], 0x2}) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f00000000c0)=0x8) socket$inet6_sctp(0xa, 0x5, 0x84) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) syz_open_dev$dri(&(0x7f0000000180), 0x7fffffff, 0x28001) 4m48.787551393s ago: executing program 0 (id=743): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x1, 0x2000000, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x20}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x44004) 4m48.640655777s ago: executing program 0 (id=746): unshare(0x22000480) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={r0, 0x21, &(0x7f0000000000)={0xffffffffffffffff, 0x59, 0x0, 0x0}}, 0x10) 4m47.629323799s ago: executing program 0 (id=757): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000140)="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", 0xfc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x30, 0x68, 0xa898cf170ab9f9b9, 0x1, 0x0, {0xa, 0x0, 0x4}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x8, 0x3, @loopback}}, @NHA_BLACKHOLE={0x4}]}, 0x30}}, 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_pts(0xffffffffffffffff, 0x400000) ppoll(&(0x7f0000000040)=[{r1, 0x90}, {r0, 0x5c8}, {r2, 0x238}, {r4, 0x9048}], 0x4, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)={[0x6]}, 0x8) r5 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f0000002080)=0x64, 0x23b) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f0000000340)='\x00', &(0x7f0000000380)="d418abe893b405ae27d266d1bf23acad18acc3f262d26f7ee7c34a3a7f24a63845eb0854ec38bc7e68a7facabbc1fb342838b66cb99125c11eabe5c0d8d11bc9cf4d44e7d97c9b6975268e9a8feb4201721fb95423b7167360a58283f6786bb50881353094df2e39e1b35392455e740b3a9113283712e1e8ccac7f152cb4d4197268c0593ed2bf", 0x87) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$nl_route(r0, 0x0, 0x4040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x13, &(0x7f0000000500)=ANY=[@ANYBLOB="180800000000000000000000000000008550000006000000181000009b5ab3911c8936e94333387ffd00bd9f931d316fe8cee3de66f40bc1af0a83b1ee812caeff726fcd5cb64d8f75a7fe5227d1011837d842a6ca950b0726b7df0c99581ac0e4c49cb16122689055fbd7c218c0489d0c4f81e91fe387512419369f05dbca01fa6eb5f31f74096651a29c22dfbe86deb33d9da56d7038ac82fb302ea1ae25226ba5214a802ce02f1354f5bd7b728b25356ba58eb3166f3995af1b0eadb261e203cbfbf4020db1", @ANYRES8=r5, @ANYBLOB="00000000000000006600000000000000181600000000000000000000000000009500000000000000360a00000000000018010000202078250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb7020056fc3b8db77d09fecf24f7810008000000b50a000000000000850000000600000095000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4m46.955203306s ago: executing program 0 (id=760): r0 = bpf$PROG_LOAD(0x2, &(0x7f00000000c0)={0x3, 0x0, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x20000000000000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002ec0000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="252bca1b080000000c0000000300000001000000", @ANYRESHEX, @ANYRES16=r0, @ANYRESOCT=r5, @ANYRES8=r4, @ANYBLOB='\x00'/28], 0x48) ppoll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0x44a5}, {r6, 0x4000}, {r6, 0x248}], 0x4, &(0x7f0000000080), &(0x7f00000000c0)={[0x1000000000000003]}, 0x8) r7 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000200)={0x4, {{0xa, 0x0, 0x800, @mcast1={0xff, 0x7}}}, {{0xa, 0x4f22, 0x0, @private2}}}, 0x108) r8 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r8, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x4c}], 0x1, 0x5b, 0x0) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) fsetxattr$security_evm(r9, &(0x7f0000000040), &(0x7f0000000140)=@sha1={0x1, "ee006f02f7fc1b8c3d5773c13e953ee2ab54bd35"}, 0x15, 0x0) sendmsg$nl_route(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c747e95f45d251642dbef08581b6675048ea6158011af40d4a41c0020001a005df029bd7000fedbdfd50a108001fd01a681d68f0000"], 0x1c}, 0x1, 0x0, 0x0, 0x40048013}, 0x40005) r10 = syz_open_dev$tty20(0xc, 0x4, 0x0) r11 = dup(r10) r12 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r12, 0x5403, &(0x7f0000000200)={0x6, 0x2000000, 0x100, 0x1, 0x9, "90897f0000030000000000f4ff1d277fffffeb"}) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000080)={0x9, 0x2, 0x0, 0x82fa, 0x1a, "92d4893af82a9f2c"}) r13 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r13, 0x5412, &(0x7f00000002c0)=0x2) ioctl$TIOCSTI(r11, 0x5412, &(0x7f0000000100)=0xff) 4m46.81693796s ago: executing program 0 (id=762): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000001c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x401, 0x100, 0x400008, 0x0, 0x0, 0x40, 0x1}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000061c0)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x78, 0x0, 0x0, {0x7, 0x0, 0x0, {0x0, 0x3, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x857f}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chmod(&(0x7f0000000080)='./file0\x00', 0x1) 4m44.221869606s ago: executing program 32 (id=762): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000001c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x401, 0x100, 0x400008, 0x0, 0x0, 0x40, 0x1}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000061c0)="c0f61a5fb77193bea0c6599de09cf570067192ff7d5bf191681878eb121895cd4c4052feb0a5196b61ab6e28d35aec54bb2aee6802a27f50c4e8f36a2b1bb12d93dbcd320ed338fd1a8ed43a2dcb2bf11c773ae982800321c7dcd67fa8930472eee2990090cc2a92f3373d898573a2cd1712c18ea624e82422c96f0d8895bfb9541911ff3662cd28fd55d795d1a5f31c92defbed88d48db688f899fe88997b057ce3e898eaf9eb2e76a59c1d2c10610768b3296595221c2b063ca2aa664fa0a5456c4e2bcddc7f856e2e29ce1b8852997a4d24f918408bfa9969074de495dd4cc9591e48287d78a2b3e0de09b48eb5b6bf78c6afd134b09770c164000d1f300c92877afe8be5d381c38da3b5fb9bd540c2f43c7dd2ec8dcff2af3517ba839c827866d10608964445bdead091df1264f5591e91d2f31b2015dff1b3b7ff0a5dc8b15748278849ddf4389ca7112ec1ca45957e2809b3d763e336f7051ac4e832ec61d1b95b9266565293806933dd8e3b65eaa1b4fe7946056703426674379ccec7abff1c459b91248f3a1d9e8103ae395aa86dd4235a5c16d9bd12dcb1ea9565a7c3d58d247a51db6d9077ecf47152d0733d79a5c449480c40b1cf8e115df4de3404b73ad06ac4c0d03f3b51d1b89b05ded082a5db1f5fbd8d351015b93862b2cc0995fb318609237e404e8d78d8982af761c27ad1fbc8f4693194c5e6b99edcb7a6e9dd261a386d8ed4420a7c12cbdcc86ab19f4e7a6c0c9b80fa3f0549ae57b38a93f669a87584b81e56211b34263db87c2d244e422878aa93e2c24260c71d06f75da33079b48b7072859669c128ba03d1487336a4a04167f2a3fa928d002c8b3cafdedf7a479604aa8f94e6b7ba58395df3d136b783f7be6b0b6b7b4b735c88a53da064a493b16713726b39ce23f08af19a671fe81be1e9772d87ca9cb5dccc35759fe3f7935a3167924d0a7d1586821ffebe0fa57e72a24967f7958875c4bf56d779369074db0077ee58138400c2f646c645e0f453e9e39aaf48da67775f59f8e282db3dec88bbe20ca6e65e2c7e44ab0583840513bfab76d94d1512549ea6db4a5a64cbe6f76b0ecdb2f1f71aa6446bcf4f7249366474cb77ed70ccb2702134b9dc6c2bfaf27ac9a9c85b8d9c48d100ae8c0eaa34701d2125a405b1117307119b754ccbbbcb2c8b71eb76d1157ddc7fbe0c75652a4cfc31d785a489f2344d8b4c47ff1b772104f49658f62d6241ef7f782db0cc071788b3dfa74e69533cd0a02ffadacdfbc8b5a83b9d4b8db068b5a7370f947fc4a99158c6296a442beba2e23ac1ef68c50f19851f3fb68b67fb714a5e7e53bb5a7690286cac12f2b002e854d8595075fbd00622b29bd423c3dbaf600ad6f37c96dcde43de6290b053c76df5620ce17118e2230039304c88a0d207c7cd05dd3854c545cdbebe907cc4d3411a382afed5e080502363cebe68e2c8dc1f800ea4add827a83a9cdf0fe6d54eabfca5a0ba370a06a4af1c49a60cd19141a4d994fbcce888278ade6300bd40685267fcdf1317cdb3b06cae9e7d9edb08d5c98b6d7115c025fcc05058a515adcc23c65ce526aed3b8203f3c54986f65ba9ffe2a9bc26b2813a1fe339ba2a58515cb8375e2d62550bf35dfd4fbdb75a70bb9fdc47d3d0346a65b986b7efd12aab760124b6888480b341b16ef2fea93fe2fbdeb55706690aa2c02bd80b1ccb7b8f23720283df89b515e2020bc5364cc4aea5fdc250f10d46db93c128e2de7477f4c80ec016f7a872efdef50ae1730b3a1deb8085d82f4fd53015a518803cd02646c087d67b0fd7092852dd81ac93ca60346f23fd847cf7c4883cab81af956342da21fb399b69e1988d89f9693b0630fa8cc95714285940d20eda153f8f7b01e6b2b892327b5d1e754a36a3430c5c22c3b841357eb80e526d7792a8ab9c4b1d23d82e31f23ef38580c2b33ca72424fbfbbf237f315cf2e5d134783982cad204be087ef58da96c6bc5da2dc4bc78f293eed56157a10848c0a956de15b83daacede9ae1c54731149f9ce7231cd84e14f128f87361e1fc0cdb2940766f39c93b9ddc74bba0a32548cddb1ae20981576de2ef8a772b04ed90900b2da11ffc70bbdb7091b8b8ed600dc0c9d236277afd9bb97b035f3b8fc95ef3f30c056b67a195c5c9f44c0f2ca4debba0d6d8779903e8e34fdd6b766fbba6b57e722ad9a852dbbeca8eb9acb9929bdcb4d4fa57d54ef1c1a0fdc032a898d3334f5671c7df82361b7d616c1f87e23f7adf043edda83458051f073f2562904ed25ad9a7129f3c14286007c9e4c81ea56c6a7289d8e58782d949a19a2642dc89d107fb465d0a98128250e66eedd93cf063963b7f7a0e1d3b9f1dd212cc9edd662af45852dbbaec84c69a640be115a239b5abd46d990fa007988f6be78a8c1e426091ecb33822529f7fddfb34d9304466ea06bb546a34735021e98674ae4a5f5c0b4f153ad5434b81c6343c42ae79224fe5abfe8b9e6fba38164c3c318500c130323b2f9bbcdf6aceb664e10483e2084defa744cd745e565ac5a8b5c30166330dd95e70f2a072a5cf5462635f7e0a4f455bcb607426aede9fa06d708c7c0daaafe2b84896134ab3b379c6690c9049903156232e5b7ca9529d602968f1e1f7a73214aaf4a9575dd5147e5bef8f05907267580abdb728cf32f6845cdf3bc779451669e4972e0b787afac5a36bacc3c1bcce125e91e4bf9810d91d1f1a3d8316328dd2626040af09892f1241c6645537ebfbeb752afba5e8171f487edba97aa92404973d4e8d09254abd2b70bdadd9b98fa3c33355295a5c474e9b2f017a6636233a382e8ef4e73506880e2a588bf257b6bb11e57cd9e75e45ef609ba583f3a6b1f2f94c7a0443dc0a8906a13e0188b61550cd296e4c63faf45bf7aed852f68ffed377302da3f73d89e4274a64667636bf00e8e4408a8407e098aeeed98e545b9aef40896c8070a76aaa0042162979ec0b7b69b4ee701100d66d3e7d25a48c59989424522889b32e4f18676475782e86d652d2eb836c326b46b8544bb755eeb14727e5ca25875f7b9ae1c113068be55a1521cb4edefef34a7a4cabc3639e456c94f01d78c059c441ce2c468e7b39b56555ad5cd6a14df8e3518e4e1970fbd6f586ce46c51c4d9ad20c3f7f5048c071994e807f19b7176290a82406dd0ad3f0b64350bbce79b223f27ed99f819def43a33696c0739e09030460a5a5d04d251adfbde1af7a485894d3d30c79d49796a9a5e077aeddba1303f3e3a3187298c88da70885e2a9dc966eb69a6439e2d3b1934ae6e8ea328497d87a9dbbddbdbf12b0c582ca4ffe1f25cdcf89a6ccdb31880776ab808b4f050ae02adf70f64c73ab2a3b1c4da69950ab4f7bcf9cc22f81b99694a7783b792facd8197904c12d3776de5184afa143ee23eee82aab2ac79b25503e0692f3463e5c363e0b4b5f31af82898009f7da13d4f249a70de40314c003e7e59dfb233bc44d0316df3e45af806d216ca76a58417ff8abcdf7cfea2da8868c496cdec8f47c451ccdc8908c5e8c1039b6bfa8751637c29fdd9b7dc76279dea5ad7455af4db3394a34cb9be8b9bf1105862108f920c44d029c3372e77c44a25d06cba956da65ee40abe32b8b557e123fddaa87b4ed5ab3485eb11f13c61072720d4adbb937c336f2b60525933b6d49e7c6751f0769377bdcef02abe63639b17a6780a4afccc8067403aeea42726f253ec97994dcf55358e6faa3e622344dfc613f8be96714d5c49633d7b74b9a72883985782ea8691d26da620d905f3583adbd9d527d93f1ce623bcf70d98a0455ff80fb1d472c6fc6bf0390e81b8d755b196e94fb73bcc883f5f310043c5138c95c5d7079c24d5bc5876b422f46a2bb17aee407bf7a55dbbdb253e2865c1b91839737c37142a8fe8bdbc0a7bf89a392da717a5ed87af754052b1d0a1a37313b00cf3b4aad91ce7fa7777b1851121a63e374865b238ddf9a7ebd20641a719c68682b97e3c5126e732800c04cdb627bd415efbb7e5e19917bf4bd53f072b7ec2eaa0128b56e069a32e9f729718fa4a7212ab0fd1e5d3582a5723a704d84a88c235b44812849301ee8155cea471028beea1918cb1f4118728718674cca9dcc58bafcdb9379c57e9333ab348b30a801aa2f5c05c3107e52613cf0f591781ddb5e1e4844633057a26bb3179c31b5664db4bb8c6d762c7b9886317ab6e9e301de67f12085547ad2a20d1d63d361c2bcd66be2e25fe104f8b53b7cf89d90d456f063da31f60078b760ce340f9c9a8e8da113b6c6e3c53e666488d75ab209dbe31ecb531553f17446a29edc465ed22aee2d4c013ee8a4d935c0cd92bcba9e5a56a6c19ac114d12db58bcf5f931a7b282404af34fee464f4c28e16dab834de98dd57b107e45fa66b26c32fd94e848aef6e4a2a65fd4fbead1b1d445d6c343bf50d785e664220371e27566646e284c6a3b07c14c0c5b84b5cd1a01a84d655f8dd72ab8e3d0c48e67596f605cd4a50b5fde9b182792d7ee8ee457eb6666aadea80563b4d176933cc482f75cb98a8dde4a414041187cfb2abe3e5077f23c98bafd0afb8b023e0cb26efc1488dd98a51a19dc93412b5fd91c4e06439b6d2d20a174989f860de6b1be55923a11e5893d30fae74a625f777ef9362e64b529c964b5c0b5817a579a647ded28582c45f965e52e1f76084267c73f8fce8037b22c2496ee6674f56056d9c691eab831c831a27fccd90f961e949a51c90a80b677d11e70d01744f9632cc26b7e6476b8c92a688ec8e1280ea8b795eae7ee61e2735045b9ea516af752b35388a6c3ed98cfbc4e74c8d0717dc31eac87b6a9c06f0d4f412e8e1155ce48cec6d9c106f3013329596a2d43ffe7f942cb7b7449f38620a8a9e5138b5d5d03c8a563446e4dfb1905d841f7a350d6c67d85652297db21b3dd3291b795c90276ccc50eaf513f3ff9480b3d2c0096e92c93cbbea680833cfa630d72c4f5a21ef0f81910b8a5ef77d62175d3abf5b3417cce43e3c53bb84ee1f5e354b2d79c2b46e3bdb2ffb15420e7a28c800c2591cd331d71c645a6b1bc43f06703164c05f61b4abc0fecbaee510def6340c2bbcc32248655e9161c3e6f01520bb0c53be04c3a3ef4a2dc401663f6719ac758aa297f65d1681652e4ad042d754b054df9cede3ffef7ad2f52184ea6d93d6867cc262b0a413da11c02d0c7c49a663319333d8b29d56cbf630e66b6683ff7f3b1ce5c481d37151626eae761adb77642f802bf0f663f3c322ee17cf01a09f058dbf82d04bdd7c48f34f54392d1dd489891ce28373ae980f74897fe3f90db2a9ccdbe56160fd2517adbc953e88c5fa8981456b87ab9f122321816e0df119f6f6c505f0dcab1c8e6a7f4109055dd80001dd90ea984b80f0b0766bd9772d96ed42d95f219b4a8420d7cf04f28475d7f5d8a8a07b0930c40d0dfc2592f8f54e90a80e0a98d3055f4660b1530565c7f2d91d7d96142da19d644aa7c512e24f83e8305970f9d3fc3b9382ad141f63f2d5b265b7cda258119ca4f553fab11f2fd925a7a24c4021045073d867bb089ca7bcb702bcedbc28781e408cf8bd43498f8661a320d28c95c1fc42635c9e4c4de8787afc70bf5c8bf75e0a2937a9ca2b08c15453f24211168c7fb2a24218fc3f04160c2daaa46ef7fb710606a53228e134f20511169034cec55e77037a108060b8fd10ab9ae228d9ee4d5ab1380cfcb8611e6c9d5dc143db2bc856d967b0b9d0187ba8483f7adbd1092562b2b16420baa5ab6c1f7c02ae56f013e752d9f41df4b4f0b008bc25ff58f816e50bdce308e219068bc898a21f1dd26d7fe7760459629f3615bcf7582c87d296f041fb005a72c7ef4013ccd8ca3bea85db90ae6349f101adb9235dd343be423816b37db2661dde2b9db33800da7599e8a9194fcf06755e2659670c62aba1d5a01172a416a0296bade0b32e69b0ee60dd6cd1eecca4335eb0416df6ded75049a14660276df47bb4f224e087235742e90ddf6f57827a0cf26d71b9338f2ff5166bea85a7639de6ac97ec829a7d071fac1f4b27c6c23e952adb5536b45a68e75c1c1a6d44508be6f4b87c5bb880a6baad5faecd1fd6730783d8729c2d89b23a3f2f9b79b78f7fcb70a7812607b25b17ae857e65f205ad5dd87a34e52c6e9611f588236bdc59d816f277aa8cd4a19750461d3e82c8621181b803900d1df439babcf4909168d4125a7c962ceac2f834d79460f17f92f415a85ad7e12da4b76105bceb4641fc87da7797fee092828f6e9e42631fd5c87046ebe5c4044663a31a1b39a6f6a53ee2b7fbc3eede57619535bc781c44bb6e493287528bc5281496f1aee3c746e09aeef0b2d38bdd33e37446c1f7516767ecbe298b78ef8e03336a08a1a9e62805140573b034459a445240aff04593539aa97056957f3dec9c43e50a1bce1b9c8e860940e03ae39e8f76fb80ae746f7fa4ed0b050c9e08a788e666e9f18bc8e83c64ee3ea04eb9f1c1dd92b3be73d18cc53bca76ba4688b48c13982ae6d25fdd9b5b85612d5b706c9b9d7c6cca91141313356f0d7b859da0de669fb52a829014a0fdde51df658303ce085222a42ad624ee6c659ec94e0d0713b2d3c3becb53c6f76d30530e6129943e20361a7c9f7847f79cb871d866b5277eecc8c1626fe2719c9cf872c0fc78a98e6ca998555721e9abd5bf9e2d1848016e0bd3202c44575c688837136e71e85765d677e0f2b081707a4e7e22bef50b9280a1a5ea549022ef2a9fed989f156198975302608dffd03f8f1186a12585d4670ce868f0c96be37416b9132144f65c9abe8b00894d7a7e6d0a8554e09139ec2a0eb6d4f00c637684602c106257f5abe816e068e0f6f3e94a916ff41e23b6baa4876931209a6b0bce1f6fa8d1965665d3dc42e5c6b011bdb5144fa5fe4879779ac9dffe0843cf49806ecbb615b818e54c6dfe4d12ccae5b12b0ce87909c1e852e8d7587d1ee24c2575af61eb0b667c37b6d15b88121974598ac23cbc66503f95cf01a7a1e217f0712c4cc4e5fc22e83e3aa375eda531a73828eba91223d7de1194af730bbf2c1ed5ec47ecdf465b1794971010ff8c8771c488a1d3f98292b5d2ea9625e52589aaf7212fcdddcc0f1681b785911fcc64a6427358e4307a3d8bc583dd635ba5c41eeae96e0b6bc5236a1f539d291e568d5a0aee25ffbaa73d0cb84bf558cbf6d04b16ef7e97617b42d07100d82fda6f75dcade611e459bdb4773bf2b70e90a8add2bfe6ea6d3a4427940fef6c81931762dbea6678fc63e50c4430227b15cf184dbae4c3b2d8096292c17f701c560ac7cb33efe7d79d0c2a3c0c06e22d4e84655cfa19793256cd9074f1c5f8ef530af537164e0e43184f921d56094fa7c7744af35821a5833c9b9d56fcf525a39fc795cf33f14705d0c7087c081bf11ad29e4d6c8f6cbbb3a0d873262b89cfc54d4cec42c3e13a5ba604df942bf8b4eef7cdae1c0e2970edb7ea6437618e6f8312a745ca8bbf0c42df103f42c824ab4e77e8b118e2b9a84568ed3d4aa3800011d02be29c032192719635a1c6c28315b27368f6ffe852bbd661c351cbfbf97b1b36d52371a4ce57e5eb6e4b13cd01b022de1770a5b1cab0fe548092a16e04de76fb8d29d69a1c55f8aa11b34bd6f018d283a9a7c0338b8c1900e21c0054616ade6b56d0fe3379f1a8dec38b85fa8e74e9bb5df4287d037f77bad30de89ea87b03d40c3a1618db1073c07032f6d22f8a264cbf0c1113689308a2fcd7299603a64f884cb03f8c5f0e61e4981d2baac3d50975cb917b815efe2f7eda88f1cef1f34997f0819a92051c1d9eac3ef05de25a2b4d5f65619b4ea377180c541f2afbfa5c8fdae59f8e3a7635d2b30c4c759c32e570b8d9ec03b4aab65503e81e545dd41f593615cfedcf009424ae4854de3a9111115cb254608bc2666b18c85698ac193a9799f1a1f6098288b42dd2684db37e0d3b023ac9b417263b1566acd6d951df147e83db8e909b39bb6a1aa3fcc1c1a20795521b84e0884254b2524ebf0321e5709e7a79f2d62309247b7b24ec71553a9ab9daccacac1a8bd6019b7703c0ed468379640ac6e764ededb2fefaa2f88e15fc97ec6f16007f540cd7a57c7726f4aa9ff6640cc7f5d71a6c12048f98a9071ffd594f17e42e7336ab6d0fd429328df1238e5eb4ebe4f9d8ef01fbcfe8f53eb3f6defd4c7cb40b3772ea2f2130b655d2ad3643977cafa991bbc6aa2aaa2879a3c2d1dace3ec034beb3d06f0a09429b3fd1ac06870dde4ab97b7d5d7ff1394577a6bea7a3a53ca883a16c98d574ddad00de5dfe9f75369be7686a4badf44f4d9b110846b6ffca67f63973186433f6bc3691b580cdc689c159064c55a974fb849f56fd2f9cbe4738e0a1a8a764467dc1d3723278ee1ea573fad98a5318104218d359d89579614592fa6ae7cc4720e6ed71706fdc4c707b03ff77454daf4505700f249aea0abc909763416d44a069a6d605118ac0c20a325577fe1d8af053673fc72e489d24405281f01b4e2e05e4fa14e68a53294e4b5d201c146ff994cfb7a776ad80828732ee647092c20fe46d917142880318136557c47ff7e31d26f35f407c1e6d4254aae442b233b89dd4c0adcfc92b0f821a5a9dce95a24bed9bb5cd17a5b59d3e82086cdd7a3755064e4de22d8f0f973f4235aa58c6214dab89325638d94d3dc25f3ac4d912ff74be6ad8ef49aa2becede5453a409cc8ed8065dacf28a1a7498f6dd07a3478af093574fdd2d0a4f98d12fe898e47cd0550f1fc42810ed2e4cfe5cc4faa67d965f252aab1bd5c536bf2c936706bc71aae98b93494d364faac72a9a60188a23f15ddf1238896e4848da876789b57ca53cd5b1041612a49de9a64a545a39375aa2a516c4af4744daf65a9c28ffb635ba56b96731b763934afa0651fd6fb65e9f71eb0e6fd54bcfd2bf0118b486e97db512290bdb1dcfca76ed974722e13e5acd0569d5f944de70adf728379094981ffaec43848367ec8cdcc227b266649ced47a03b22016ce42be3a33135229670244cc7b3325ee448c95236d0de4bbf641e1cbb0516edb3f8829e60f91d43f0fe45595d8a99e699252930c7b05ba2ba679f8f46c38f789a7750ffa4eaed19c4c1a33aff60c8926ae42497662a130b83b3211e9399e2565d9f082ec30e26e5b02ea91cf43b0a046f9fe596e5bb2a9c800d761008dc7fced2a510af6b02d3f702fc3e1a98c6a87661f0d353b81bc4435c0d4376cfc74c057bf23febb101252c4eb168d4e347e697c8d0c48a687ffff24d58e5dc68c38de930164aba51e7cb19051fe64603c6b602c02c5cc22c6da1c47d906fa1cbf67312658b201b8f89a377d61695daaeee18eb2fb8caf38280fa8b95cca721afdf33d2c3092af57204bca72c46aeae9e9fc46f0ce76b96bbbb59a8517cb72d68f8b189280b6ce1e2686204913bac1d9aecd77623b7f05475352e57f245197894d767e5f17611bbf1bfe2015c9750e9b3f5ad4ad57be1ac4988c30d90829946b05fc5bd709dbd2590da2e3666294f83336e52758bc12c9d02af342a91fdcfc9144021a783643a9845a4898ee03417329ee0e2dd7bd53f3b23f3f9a10ea643b91b3c2df8438efb22fc894bbcdc408a13dbded7002d9cef6e38bf6dfa16f52f0f24087281a3ae95fb4995131938f9ca80c5f466c7367665e5717c823b318f43e7a3e2e8fe9c2e74959ca3d53b79fa45ac778d0a99351a1919b1c9ddfda10d61487fc5a2b8227493b14e2ea9fa41db870deb1700eb46665424fbc3f21c5d7ad61089ad0f99aadcca2a97d46fd091cf21d95674c3cf48f2724a89299b5342ebf8b18770e61c449455f77cacc5b2e0123005cc296acfc28e42e3d3b426469e39def114d6071a3f015f94dd8eab597dc4cf6109f2aeba0639ffe3f66f15ddaa74460a884a5c067e1e6f8d961ff32518e7571d53ae36badcaca50258a15743e67fb35e062e697d44ccd4e416010dbe62a1d13319d3ce88dc7826514d0f84cf7ffd5f1dbdbe3534af35bba26c5f951e18b012234a3e1cd22199358ba66421a326af09d36d45c3497c4725c0e8557395376fa9dcbe4c595aef7f822cb160e72138cd610563c382769b64f5da2ae6f62cbf09d24490565d7b88f6fefc30f050e74327b7efc168f040f18110a61cc6ecf73c43c0e9e73fafcfc6079ee68839a8ed710160fdcfd987394a790e01c42c916169e8c6a7af905c15d51f87e88877386b8f8743efe4fffc2dc8fd73b4e8905b428d4cd87d90e93513f19a981b5037370cd634f23859cb7bd6b5632bd25c6873b7195691e0f76fb07fce6e72d4b2b467e57a325febf4bb842820fe6896b23aa2a3eb37697753a3693ee936692e6cd91eae410bf89192df913f2689adc73b7b35eaf8bf80928c0023b105cbd2be51a08a371be88926636bd590466c218b203fe311d73dd1a8b440133f1ebb8249b4e1f6723b7b18b508dc34acd9da927ea60d2dc361c2d14cd43ad3b0137ac32e8988d11d11de19065d02e8012a2ee24891541989d11da87de4383036b757769222af022e86803b64ccd03e4bfe3a9d3b8a5d6522d7b6ade88aca72bc436382cfcba22a426ecb213661c6e88e9a68c0d61722617a4706852ef6e5eb42842d127f88dabcb8cd635d621a9082efe0cbb52fffb017c8cbf80e48ad1d8ac4c927bda50be7bbb6a302081951dd7c05142465ef8188774807ba482c155f7b56b663d24c4ad88140ddba388e4d6abda83048db46ad18328c63006d02844189a769167d94265148e06f3eca08dcd81691df655968de44c5931e62f5dcc4aa16b24ceb6e7a2c8783d9918a9be7c72dcd57fbf39f985ac29069241cbe3298d7651124f03bef8e2adcadb0c0e08efb096f72e5df2d3f8e2ea6f9cd2401533469e5099a6faa98acc2f73028eae115b3a771bc7ddd186ee7a634398e206ce9b1262b1dbb80575eac718eade048bc01ac1d410e21393dada6c1ced94c411fc19ccacdd175996501d66819b491fef65697f736ecc3a4c32f3675d1f90c8e4d44a1ba6048e77fa24d6998ad88da3cf5de223446d53dd72981c19d5915af69b9a7b9bdf35114ac1cee66b9f3f6df4b9a2d2c017d44443a28badca61b1e8db627d967827ebf32c8642b7de41508c15538b6cdf0284f1a94e8d9fcaa086236f11fb1689d57d500423a0c1d362a4fd57e5efa8858c237a0b58210b4df2b6f10fb01ff8b305cb69e65120c716970e1752cae51022a068b9ac2b7775ac415c56d31536c9f1eca654ec89d7ed00855b2d2564a74bf1a0a3b75cbeadad89fd4ce7e0a83a565c6d69077f026dd40ee186fb496d575c5f5d2f4f84e0efd6bca34f070b185903c7fcd6478f467b73687dee0b765477cc474cbe7f067d1f655efe1fac24a6cda9ed82dee343a36f5ce3894587937f31a14dff66e8384bb3c9adebb753f782570a894e09a38c096f523fbdfb7e0c09026fa023c8dc9e5822410d8343afd647a91130744017166a9b195996ee871eb284279fa725f7af7f853eb85bce100cfade5d458c4e166c839e4c1a8600", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x78, 0x0, 0x0, {0x7, 0x0, 0x0, {0x0, 0x3, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x857f}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chmod(&(0x7f0000000080)='./file0\x00', 0x1) 2m19.977478894s ago: executing program 3 (id=1278): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0xffffff, 0x25dfdbfc, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0x35, 0xd, 0x5}, {0xfffe}, {0x0, 0x1, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x4}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa0}}, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c0", 0x1}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x894b, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000140)=@fragment={0x32, 0x0, 0x92, 0x0, 0x0, 0x1b, 0x65}, 0x8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = userfaultfd(0x80801) cachestat(r3, &(0x7f0000000fc0)={0x7, 0x294b9e89}, &(0x7f0000001000), 0x0) sendto$inet6(r2, 0x0, 0x0, 0x400c0, &(0x7f0000000040)={0xa, 0x4e24, 0xffffff7c, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c) 2m19.813488258s ago: executing program 3 (id=1280): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280), 0x115580, 0x0) fsopen(&(0x7f00000000c0)='hfs\x00', 0x0) r0 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x0, 0x10100, 0x0, 0x3bc}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x40, 0x4007, @fd_index=0x8, 0x6, 0x0, 0x0, 0x10, 0x1, {0x3, r3}}) ftruncate(0xffffffffffffffff, 0xc17a) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000180)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb", r5}) connect$llc(0xffffffffffffffff, &(0x7f0000000400)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x80, @local}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0610000a000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRESDEC=r1, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r7, &(0x7f0000000000)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x42, 0x3}, 0x3}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000040)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x14) 2m19.681884249s ago: executing program 3 (id=1282): syz_usb_connect(0x3, 0x2c, &(0x7f0000000500)=ANY=[@ANYBLOB="120150024bae0110401c3405f3680102030109021a00010209500009047804005e77dd81080b4cc1ff"], &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0}) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x83, &(0x7f0000000140), 0x8) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000000c0)={0x60, 0x2, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x7, &(0x7f0000000040)=[{0x8b, 0x0, 0x4}, {0x4, 0x55, 0x6}, {0x14000, 0x3, 0x2}], 0x3, 0x6, 0xc, 0x1, 0x30, 0xc5}) 2m16.354564557s ago: executing program 3 (id=1298): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r0, 0xb, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000801, r1, &(0x7f0000000140)={0x4f9b, 0x2, 0x363f, 0x2, 0xf86, 0x7fffffffffffffff, 0x9, 0x5, 0xfffffff7}) 2m16.173465046s ago: executing program 3 (id=1301): close(0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r7, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) r8 = open(&(0x7f0000000000)='./file0\x00', 0x1012c0, 0x62) ioctl$BTRFS_IOC_DEFRAG_RANGE(r8, 0x40309410, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r9, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) r10 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x2, 0x3, 0xffff}, 0x20) 2m12.932613268s ago: executing program 3 (id=1309): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000140)='contention_end\x00', r0}, 0x18) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) io_setup(0x200, &(0x7f0000002800)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x18bf42) syz_usb_disconnect(r3) r4 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r6}}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a0000002600000004000000eb"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r8, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) sendto$inet6(r7, &(0x7f0000000500)="a4", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x4, @loopback, 0xffffffff}, 0x1c) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x11, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xfffffaef, 0x0, 0x0, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x9, 0xa, &(0x7f0000000080)=""/10, 0x41000, 0x15, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000100)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000280)=[{0x2, 0x2, 0xb, 0x3}, {0x5, 0x3, 0x5, 0x5}, {0x5, 0x5, 0x3, 0x7}, {0x3, 0x3, 0x3, 0x9}], 0x10, 0x1, @void, @value}, 0x94) r10 = creat(&(0x7f0000000400)='./file0\x00', 0x81) close(r10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) r11 = socket$inet_smc(0x2b, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x1000000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x200000a, 0x80010, r9, 0x1fad4000) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r2) 1m57.336221394s ago: executing program 33 (id=1309): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000140)='contention_end\x00', r0}, 0x18) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) io_setup(0x200, &(0x7f0000002800)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x18bf42) syz_usb_disconnect(r3) r4 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r6}}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a0000002600000004000000eb"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r8, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) sendto$inet6(r7, &(0x7f0000000500)="a4", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x4, @loopback, 0xffffffff}, 0x1c) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x11, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xfffffaef, 0x0, 0x0, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x9, 0xa, &(0x7f0000000080)=""/10, 0x41000, 0x15, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000100)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000280)=[{0x2, 0x2, 0xb, 0x3}, {0x5, 0x3, 0x5, 0x5}, {0x5, 0x5, 0x3, 0x7}, {0x3, 0x3, 0x3, 0x9}], 0x10, 0x1, @void, @value}, 0x94) r10 = creat(&(0x7f0000000400)='./file0\x00', 0x81) close(r10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) r11 = socket$inet_smc(0x2b, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x1000000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x200000a, 0x80010, r9, 0x1fad4000) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r2) 1m12.477341982s ago: executing program 5 (id=1521): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r3, r2}, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7ffe, 0x40024e}, &(0x7f0000000300), 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000"], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000089120e000000000095"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x40f00, 0x63, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fffffc, @void, @value}, 0x94) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 1m11.602851911s ago: executing program 5 (id=1525): socket$igmp(0x2, 0x3, 0x2) r0 = epoll_create1(0x0) r1 = eventfd2(0x3, 0x80801) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000b80)={0x60000012}) r2 = syz_io_uring_setup(0x6908, &(0x7f00000006c0)={0x0, 0x2, 0x10100, 0x2}, &(0x7f0000000200), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000000)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000280)) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000180)={0x20000005}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f80)={0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f00000033c0)={0x0, 0x0, &(0x7f00000032c0)=[{0x0}, {&(0x7f00000020c0)="f9de", 0x2}, {&(0x7f00000022c0)="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", 0x1000}], 0x3}, 0x4004004) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r8, &(0x7f0000000a00)=[{{&(0x7f0000000300)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000340)={0x2, 0xfff, 0x1, 0x2, 0x100, 0x80, 0x8000, 0x7, r7}, 0x20) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={r7, 0x9, 0x7, 0xc}, &(0x7f00000000c0)=0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r9}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1m9.585043607s ago: executing program 5 (id=1532): syz_open_dev$sndpcmp(0x0, 0xf5d, 0x4102) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x450140, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, 0x0, 0x0) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000380)='./file0\x00') unshare(0x22020400) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020020000000007b9a00fe00000000b6090800000000007b9af0ff0000000000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182800"/132, @ANYRES32, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf8f07000000000000080000000000008500000007000000b7"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) mknod$loop(&(0x7f0000019080)='./file0\x00', 0x8000, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x3) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m7.13176456s ago: executing program 5 (id=1546): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x3125899, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x1, 0x50) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe207c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'vcan0\x00', {0x8}, 0x7ff}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f00000002c0)={0x4000, r1}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000340)={{0x0, 0x4, 0x0, 0x0, '\x00', 0xffffffff}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb47, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x3, 0x80000004, 0x0, 0x0, 0x40, 0x0, 0xf, 0x7, 0x400000000, 0xb, 0xfffffffffffffffe, 0x4000000000000001, 0x8, 0x0, 0x0, 0x3bcc9942, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x7, 0x0, 0x0, 0x2000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x27, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d7, 0x3be5, 0x0, 0x0, 0x0, 0x0, 0x751, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5, 0xc, 0x0, 0xffffffff]}) memfd_create(0x0, 0x0) fanotify_init(0x200, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x40900, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r4, 0xc0045401, &(0x7f0000000940)=0x25b) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score\x00') read$FUSE(r5, 0x0, 0x0) 1m6.325409839s ago: executing program 5 (id=1548): pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r0, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) 1m6.039541076s ago: executing program 5 (id=1553): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000ffffffffffffaaaab0aaaa0008004500002000000000002f907800001fe1e0000001a00067dd000c907801000000"], 0x32) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x22, 0xe, &(0x7f0000001880)=ANY=[@ANYRESOCT=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x5, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x94) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000040000000400006ed70bb98a00090000", @ANYRES32, @ANYRESHEX=0x0, @ANYRESOCT=r0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7000000000000004e00000000000000870a001600000000950000000000f900"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000006000000040000000100000000000000", @ANYRES32=r4, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) syz_emit_ethernet(0x42, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f03c, 0x5}) capset(&(0x7f0000000000)={0xf1504}, &(0x7f0000000040)={0x80, 0x200002, 0x2, 0x0, 0x20, 0x3}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r6 = gettid() capget(&(0x7f0000000080)={0x20071026, r6}, &(0x7f0000000100)={0x0, 0x5, 0x369, 0x9db, 0x8, 0x1}) openat$kvm(0xffffffffffffff9c, 0x0, 0x121000, 0x0) r7 = socket(0x2a, 0x2, 0x0) connect$unix(r7, &(0x7f0000001100)=@abs, 0x6e) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x4dc}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 1m5.750780412s ago: executing program 34 (id=1553): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000ffffffffffffaaaab0aaaa0008004500002000000000002f907800001fe1e0000001a00067dd000c907801000000"], 0x32) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x22, 0xe, &(0x7f0000001880)=ANY=[@ANYRESOCT=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x5, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x94) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000040000000400006ed70bb98a00090000", @ANYRES32, @ANYRESHEX=0x0, @ANYRESOCT=r0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7000000000000004e00000000000000870a001600000000950000000000f900"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000006000000040000000100000000000000", @ANYRES32=r4, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) syz_emit_ethernet(0x42, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f03c, 0x5}) capset(&(0x7f0000000000)={0xf1504}, &(0x7f0000000040)={0x80, 0x200002, 0x2, 0x0, 0x20, 0x3}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r6 = gettid() capget(&(0x7f0000000080)={0x20071026, r6}, &(0x7f0000000100)={0x0, 0x5, 0x369, 0x9db, 0x8, 0x1}) openat$kvm(0xffffffffffffff9c, 0x0, 0x121000, 0x0) r7 = socket(0x2a, 0x2, 0x0) connect$unix(r7, &(0x7f0000001100)=@abs, 0x6e) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x4dc}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 41.1632347s ago: executing program 1 (id=1647): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)="5c00000026006bb39a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ecb55c3bbf4655c0d6fd0660417c8df66009a0880c8a04266346269f430e769463f5363f1665915d88565144dce1bffc8c8a8e86ac25137ba907f9fbd551def80abe7384193b004e206ae82cf00f3134182fe5c91eb9eccf841be70c43431f439567e67d74ec12831a6f44153a6abf6a9adcb4dcbbe53710bd380c5cb52b808973f1e0da04dfd068c803097d948f13bed08f201647ff801fd33c886f8142a02076a6cd01e338a64a2688a12d478f80211c94da26ab1d6bc0ddfead85ce1ee7dbd60dabb03e5d", 0x121}, {&(0x7f0000000680)="91426f6bd7916fc94bb3e75863c0f378b435100068c25b276e978d5100ea5aa4ea4abf1e8f40c4e9cba7a816d0795fffe2701681bb6b9f2c5384893304c3bf395f7fcb7c233e339c94cb9fd75c7ef449777c5521ad1d4ba7789e7c1dbd51ed4456ba4ba1ae000ad128776c0ae81f7b800154c4f9b9923ca09b218c35bf1f3c062fa1cb483905684dc9568b08e2ed4586e63e68068e269b79f8f56545b3e99b720545447604d99d4c1cde9abcd5cf543dc2db41a09ff1ea57ce441134c5097f412bad35cdc51710918799e4041b58", 0xce}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0xc001) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x10000) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, &(0x7f00000001c0)) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000580)="9ea9c0bea6ed9e7199117dbbe76de96f1632e99d49f4c03317830dcfafe1eecd4574c69784c47e3d033ab9e6592da885961367df5d594dbab703d4910684910e4c6ca2b24e1a21b934751266b413e93e52141c9e27e3685d253936fce8d157fe49620036340c95bd09ea2380851e0e8a9ad39692cb0bb53ceddb7ca0c9c031036c1ad73106242842d0cd974b50b521f38cf915909bfc8645e96e9ceae981b409ea", 0xa1}, {&(0x7f0000000780)="81eaaaeeabeec02117ad0e8c5949fdb4b0d3fff4f57060f62a53a2704d903655add2212aeafa58ab11a1f9a18462103efdb99e9ba5381c40cc58d62fb2b0bae6ee5b59344628537eb41cb60f66388737549ac83dc1a24acea91363609abed2d1ed3be6c55f26bcd1e01ec283887a7fcd69562cfc26348b45c6ec15823d52d8df16ae4ae9cd1f2e1ead133a8e259c8f0ee5485e5bfb2f5e090f6259151bad83fcb51966f1810d90aa82bd65a5aaf6aa1edd1bcd4b104a0724c59629685a307eebbab5c0d2538c65cf4f4e73897dd16a38", 0xd0}], 0x2, 0x1) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40000000) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x53, 0xb5, 0x8, 0x46d, 0x896, 0x3a11, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc0, 0xda, 0xfa}}]}}]}}, 0x0) r2 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000140)=0x12, 0x80800) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000001c0)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) getpid() rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) socket(0x0, 0x0, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'ipvlan0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d6163736563000014000280050006000000000005000f000000000008000500", @ANYRES32=r5], 0x4c}}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) recvmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x700, 0x0}, 0x0) 40.18551751s ago: executing program 6 (id=1652): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x80}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x0, 0x300, 0x0, 0x18}}}}}, 0x36) 40.144214542s ago: executing program 7 (id=1653): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000000080)=0x40005, 0x4) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r4, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002bc0)=""/4082, 0x1020, 0x16}, 0x80181}], 0x400000000000039, 0x10000, 0x0) r5 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r5, 0x0, 0x0, 0x2001, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0), 0x10b8c}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 39.172278663s ago: executing program 7 (id=1654): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x10c4}, 0xfffffff8}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000001fc0)=""/4088, 0xff8}, {&(0x7f0000000540)=""/174, 0xae}, {&(0x7f0000002fc0)=""/116, 0x74}], 0x3}, 0x4}, {{0x0, 0x0, 0x0}, 0xff}], 0x4, 0x100, 0x0) 39.021304244s ago: executing program 7 (id=1655): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, r2, 0x48075000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_usb_ep_write(r4, 0x81, 0x0, 0x0) syz_usb_ep_write(r4, 0x81, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000300)=0x1, 0x4) recvmsg(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000200)=""/159, 0x9f}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x200000) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@newqdisc={0x2c, 0x24, 0x10, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x9}, {0x2, 0xd}, {0x0, 0x9}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7fffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x44082) 39.021002642s ago: executing program 6 (id=1656): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x11, 0x0, 0x2, 0x1, 0x4, 0x844}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000580)='yeah\x00', 0x5) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xa0141, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 38.630227308s ago: executing program 4 (id=1658): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) close_range(r1, r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd59}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x70, 0x10, 0x1, 0x70bd2b, 0x25dfdbf4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20008}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x1ff, @broadcast}}]}]}]}, 0x70}}, 0x0) r8 = socket(0x11, 0x800000002, 0x0) ioctl$sock_inet_SIOCGARP(r8, 0x8954, &(0x7f0000000200)={{0x2, 0x4e23, @rand_addr=0x64010100}, {0x6, @local}, 0x3a, {0x2, 0x4e20, @broadcast}, 'vlan0\x00'}) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1c, "f42a97b96d025891dd3f75fdda624457ad3d5c36389c308570204262"}}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) 38.500950806s ago: executing program 6 (id=1659): r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) listen(0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, 0x0, &(0x7f00000004c0)=@tcp6}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001900)={0x30, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) write(0xffffffffffffffff, 0x0, 0x0) 38.325341308s ago: executing program 2 (id=1660): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000f80)=0x15) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000370400"/20, @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0) sendto$packet(r0, &(0x7f00000000c0)="8001c83a9c9e9cec12074a685b68", 0xe, 0x0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) 37.727124911s ago: executing program 1 (id=1661): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000}, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) r5 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcc2) write$binfmt_elf32(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda000020005d"], 0x69) close(r5) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) sendmsg$inet(r4, 0x0, 0x40084) socket(0x1f, 0x3, 0x4) ioprio_get$uid(0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)={0x3c, r6, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "01959e56da"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac06}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4091}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) 37.705479836s ago: executing program 2 (id=1662): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='ns\x00') openat$sysfs(0xffffffffffffff9c, 0x0, 0x400, 0x40) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) syz_emit_ethernet(0x67, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088cacd9c83264a2cdc70a9bba72eb7591352ace8ed19293a9ff6ffd06ad4a8b26f05f6dd1611a094c3b7ec1f00ecdb9c091dcad7c987df742d79702a5702df690f0b7905b1a193d777781c92e8c51214aae00000000000000000"], 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141201) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000000)={0x2, 0xd, 0x4, 0x9, 0x0, 0x4, 0x0}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="540100001a001307000000000000001cac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x154}}, 0x0) write$vga_arbiter(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB='trylock '], 0xf) 37.597433963s ago: executing program 4 (id=1663): iopl(0x3) socket$nl_route(0x10, 0x3, 0x0) mlockall(0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) ftruncate(r1, 0x6000000) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0xb, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x7fffffff], [0x10000, 0x0, 0x0, 0x0, 0x8001], [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]], '\x00', [{}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x80000001, 0x0, 0x0, 0x1, 0x1}, {0x7fff, 0xfffffffa}, {}, {0x8000000, 0x8f96}], '\x00', 0x1000}) pread64(r1, 0x0, 0x0, 0x7) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000580)={@rand_addr=' \x01\x00', @empty, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2000000, 0x0, 0x7d, 0xd00, 0x0, 0x930310}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x1, 0x0, 0x3c, 0x400, 0xffff, 0x10240}) write$P9_RVERSION(r1, &(0x7f0000000440)={0x15, 0x65, 0xffff, 0x80000000, 0x8, '9P2000.L'}, 0x15) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats}) msync(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0) 37.500932905s ago: executing program 4 (id=1664): r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x10001, 0x1, 0x2}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix={0x4, 0x2, 0x50565559, 0x4, 0xfffffffb, 0x4, 0x6, 0x4, 0x0, 0x4, 0x1, 0x7}}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) r2 = syz_open_dev$media(&(0x7f0000000000), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000480)={0x80000000, 0x0, &(0x7f0000000400)=[{{0x80000000, 0x0}, {0x80000000}}, {{}, {0x80000000, 0x0}}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48850}, 0x0) r6 = socket$inet6(0xa, 0x80001, 0x80000000) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x3, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x4e23, 0x0, @mcast1={0xff, 0x7}, 0x1ff}}, {{0xa, 0x4e23, 0x0, @private2}}}, 0x108) r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r7, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0xb6, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0x4, 0x4, 0x470, 0xffffffff, 0x0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x3a0, 0x3a0, 0x3a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffffff, 0xff, 0xff, 0xff000000], [0x0, 0xff, 0xff, 0xffffff00], 'macvtap0\x00', 'veth1_to_hsr\x00', {}, {}, 0x3c, 0x6, 0x4, 0x30}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x5, {0x7}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'veth0_to_batadv\x00', 'batadv_slave_1\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfffd]}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x57, {0x2000000}}}}, {{@ipv6={@empty, @mcast1, [], [0x0, 0xffffff00], 'ip6tnl0\x00', 'dvmrp0\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @mcast1, @private1, [0x0, 0x0, 0xff], [0xffffff00, 0x0, 0xffffff00], [], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f0000000140)={{r4, r5, 0x4, [0xfffffffc, 0x400500]}, {0x80000000, r3, 0x3, [0x0, 0x4]}, 0x2, [0x0, 0xc]}) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r1, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x20}, {&(0x7f00000000c0)="7757e7f0f540ba5046ea5dbf1b3cfc6355e6ca9261c1d4148a5883", 0x1b}], 0x2}}], 0x1, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0400000004000000040000000500010000080000", @ANYRES32, @ANYBLOB="000000000071f26eafacd60000000000000000000000000000003a3d9016485b6946bcd4269f9bea2eb9a6dd9584d5cc8ab188d328ebad7f111f7625e25b63b1d49c07ae978bdd088b06c2309b06141790d2fc3d452e7b0255364e89103c3b3e5add40dba8286f7418c8acfb6e2516701411188241f708466e5a098bff6c8865c0812cff7a38b5fb5557f1e89cc8758388dde590279cdddd8e614610b711a72f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000c60009040002010300010009210000000122f80409058103"], 0x0) syz_usb_control_io(r10, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0xf, &(0x7f0000000340)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_usb_control_io$hid(r10, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000021c0)={0x1c, 0x69, 0x400, 0x0, 0x4, "", [@generic="4376e457fc86fec7c4"]}, 0x1c}], 0x1, 0x0, 0x0, 0x8000}, 0x0) 34.380397725s ago: executing program 7 (id=1665): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x0, 0x0, 0x9, "00629a0000000000000000000000f7fffffb00"}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x10000000}) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x7) ioctl$TIOCEXCL(r3, 0x540c) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) 34.379725678s ago: executing program 6 (id=1666): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x2c8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@perf_event={0x4}}, 0x18) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, &(0x7f0000000b40)=""/140, &(0x7f00000001c0)=""/33, &(0x7f0000000d00)=""/181, 0x8080000}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000) write$sndseq(r2, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time}], 0x70) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendto$unix(r5, &(0x7f0000000240)="0014", 0x2, 0x4040085, 0x0, 0x0) recvfrom$unix(r6, 0x0, 0x0, 0x10102, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000c40)={0x4, 0x0, [{0x0, 0xf3, &(0x7f00000008c0)=""/243}, {0x1, 0x98, &(0x7f0000000580)=""/152}, {0xeeee8000, 0xa1, &(0x7f0000000a00)=""/161}, {0x8080000, 0x5d, &(0x7f0000000ac0)=""/93}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf, @void, @value}, 0x94) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r8, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xb}, 0xa) 34.255001478s ago: executing program 4 (id=1667): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x20000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{0x18, 0x0, 0x0, 0x201}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r4, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESTART(r5, 0x40101286, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) landlock_create_ruleset(0x0, 0xffffffffffffff4b, 0x10000000000001) sendmsg$NFT_BATCH(r6, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a140000060648685531de3d7a95910a090400000000fdffffff010000001400000011000100000000a5548d2daa12f9649abb3de81ae36eb4aeabdb7665c07f6ebd3a7955192827dc44bcd0e2e34235ac24579184965af66b0da65ec6e180bbcf6582e4cf766702d67d166aee66ee1e4ed8d71b4a8cb03d76c6cb81743659b3d17cb427c3a9d0c7e9a219d86edf2dc1585445e5a1716ce478ef06f4e8a63bf800217ea828d743fb7ea73d5e0487e4b7"], 0x3c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$smackfs_netlabel(r8, 0x0, 0x57) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x20, r9, 0x1, 0x0, 0x0, {0x1b}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYRES16, @ANYBLOB="03070000000000000000080000006800"], 0x7c}}, 0x0) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000100)={0x0, 0x7, 0xfa00, {0x4, &(0x7f0000000340)={0xffffffffffffffff}, 0x106, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r11, &(0x7f0000000180)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x4e20, 0xffffffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, r12}}, 0x38) 33.78099223s ago: executing program 7 (id=1668): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) brk(0x400000ffc020) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0xc, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}]}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x7ff}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x1, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="0300fe", @ANYRES16, @ANYBLOB="010000000000008000003400000008007300000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) 30.58100622s ago: executing program 4 (id=1669): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) brk(0x400000ffc020) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0xc, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}]}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x7ff}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x1, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="0300", @ANYRES16, @ANYBLOB="010000000000008000003400000008007300000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) 28.776884948s ago: executing program 1 (id=1670): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}], [], 0x2f}) r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 27.930902672s ago: executing program 6 (id=1671): syz_usb_connect$uac1(0x69a90eab3db9c902, 0x98, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x3, 0x1, 0x0, 0xa0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x7}, [@output_terminal={0x9, 0x24, 0x3, 0x23, 0x300, 0x3, 0x3, 0xf}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x80, 0x8, 0x1002}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xff, 0xc8, 0x3, {0x7, 0x25, 0x1, 0x41, 0x4, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x6, 0x1, 0xb, 0x1, '\x00\x00\x00'}, @as_header={0x7, 0x24, 0x1, 0x1, 0xc0, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x50, 0x5, 0x8, 0x1, {0x7, 0x25, 0x1, 0x82, 0xfe, 0x7}}}}}}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x54, 0x30, 0xb, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x32, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0x21000000}}}, @TCA_SKBMOD_ETYPE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x800000000001c8, 0x12) sendto$inet(r1, &(0x7f0000000040)="c0ddac5390860171d4c53d7328e35d7238a54c378e", 0x15, 0x80, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) 27.915184109s ago: executing program 2 (id=1672): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000f80)=0x15) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000370400"/20, @ANYRES32=r3, @ANYBLOB="8fd60400dd0000001c0012800e0001006970"], 0x3c}}, 0x0) sendto$packet(r0, &(0x7f00000000c0)="8001c83a9c9e9cec12074a685b68", 0xe, 0x0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) 27.694504089s ago: executing program 7 (id=1673): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x88441) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x14) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x0, @dev, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x4000800) close(r0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1, 0x0, 0x0, 0x300}, 0x2400c000) 27.396602931s ago: executing program 1 (id=1674): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0xac, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x71, 0x2a, [@perr={0x84, 0x42, {0x48, 0x4, [{{}, @device_b, 0x3, @void, 0x13}, {{0x0, 0x1}, @broadcast, 0x4, @value}, {{0x0, 0x1}, @device_b, 0xfffffff9, @value=@device_b}, {{}, @device_b, 0xea, @void, 0x13}]}}, @prep={0x83, 0x1f, {{}, 0x9, 0xff, @device_b, 0x47c3, @void, 0x0, 0xc93f, @device_b, 0xbddf}}, @cf={0x4, 0x6, {0xb, 0x4, 0x6, 0x200}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x26}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}]}, 0xac}, 0x1, 0x0, 0x0, 0x810}, 0x0) 26.843090401s ago: executing program 4 (id=1675): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0182101, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x28, 0x80008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000040)='\x00', 0x1, 0x20000045, &(0x7f0000000080)={0xa, 0x2, 0x396, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000340)='westwood\x00', 0x38) shutdown(r2, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r5, 0x32, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4001) io_uring_enter(r6, 0x3516, 0x483, 0x0, 0x0, 0x0) 26.320924191s ago: executing program 1 (id=1676): socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040f04000404089512eafdee781f5cd4efc84cc6e6ff2b8511d293b9e95302f4a8cab44afad5b00553ad5fab8e4de2904fec0df368160cc71c8f38a8374e2eabb343a0"], 0x7) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f00000000c0)={0x2, 0x8, 0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000140)={0x5, 0x81}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r4, 0x4020565b, &(0x7f0000000040)={0x0, 0x8001, 0x2}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x8400, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r6, 0x11b, 0x6, &(0x7f0000000000)=0x100818c, 0x4) 26.175987057s ago: executing program 2 (id=1677): socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x20040600) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x34, r1, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x818}, 0x4000) 24.146857924s ago: executing program 1 (id=1678): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) socket(0x1, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) syz_init_net_socket$nl_generic(0xb, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x8, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value=0x180}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@updsa={0x138, 0x1a, 0xffffffffffffffff, 0x70bd2a, 0x0, {{@in6=@mcast2, @in6=@dev={0xfe, 0x80, '\x00', 0x33}, 0x0, 0x0, 0x4, 0x0, 0x2, 0x20, 0x0, 0x2c}, {@in6=@empty, 0x4d4, 0x6c}, @in6=@private1, {0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x970}, {0x0, 0x1f, 0x0, 0xa6}, {}, 0x0, 0x3503, 0xa, 0x2, 0x4, 0x24}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20000094}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3}, 0x18) sendmmsg(r2, &(0x7f0000003e40), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) pselect6(0x40, &(0x7f0000000200)={0x0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000380)={0x1ff, 0x0, 0x0, 0x0, 0x8000000000000001, 0x1, 0x0, 0xffffffffffffffff}, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r4, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0xa1}], 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 24.09852938s ago: executing program 2 (id=1679): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x2, 0x0, 0x0) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$session_to_parent(0x12) syz_open_dev$hidraw(&(0x7f0000000280), 0x200, 0x1) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x23, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0xfff}, @IFLA_BOND_AD_LACP_RATE={0x5}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x4c}}, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@xattr}]}) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32], 0x90}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000180)={r1, 0x800, 0x3, 0x9}) mmap$dsp(&(0x7f0000af2000/0x2000)=nil, 0x2000, 0x8, 0x11, r5, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 23.959137742s ago: executing program 6 (id=1680): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@bridge_setlink={0x20, 0x13, 0xa2f, 0x70bd2b, 0x0, {0x7, 0x0, 0x68, 0x0, 0x948, 0x20}}, 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x4050) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000040)={0x0, 'netdevsim0\x00', {0x3}, 0xf}) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'vlan0\x00'}]}]}], {0x14}}, 0xa4}}, 0x40044) sendmsg$NBD_CMD_CONNECT(r0, 0x0, 0x0) 21.278487502s ago: executing program 2 (id=1681): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key(0x0, 0x0, 0x0, 0x0, r0) r2 = add_key(&(0x7f0000000200)='ceph\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) r3 = memfd_secret(0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_GET_THP_DISABLE(0x2a) r5 = add_key(&(0x7f0000000280)='trusted\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r1) sched_setscheduler(0x0, 0x1, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r9, 0x0, 0xc, &(0x7f0000000340)="00ad83b4", 0x4) getsockopt$inet_opts(r4, 0x0, 0x400000000000000, &(0x7f00000003c0)=""/17, &(0x7f0000000380)=0x11) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYRES32], 0x7c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r10, 0x4b72, 0x0) fcntl$setlease(r3, 0x400, 0x0) fremovexattr(r3, &(0x7f00000000c0)=@known='com.apple.system.Security\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC=r5, @ANYRES16=r2], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xe, 0xd, &(0x7f0000000480)=ANY=[@ANYRES64, @ANYRES64, @ANYBLOB="0000000000000000b700000000000000000007020000f8ffb703000008000000b7d33b4bf5e1d839ff00000003000000850000000f00000095000000d2b000"/80], &(0x7f0000000180)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe95, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 9.20201673s ago: executing program 35 (id=1673): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x88441) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x14) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x0, @dev, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x4000800) close(r0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1, 0x0, 0x0, 0x300}, 0x2400c000) 4.322855511s ago: executing program 36 (id=1675): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0182101, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x28, 0x80008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000040)='\x00', 0x1, 0x20000045, &(0x7f0000000080)={0xa, 0x2, 0x396, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000340)='westwood\x00', 0x38) shutdown(r2, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r5, 0x32, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4001) io_uring_enter(r6, 0x3516, 0x483, 0x0, 0x0, 0x0) 875.274326ms ago: executing program 37 (id=1678): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) socket(0x1, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) syz_init_net_socket$nl_generic(0xb, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x8, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value=0x180}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@updsa={0x138, 0x1a, 0xffffffffffffffff, 0x70bd2a, 0x0, {{@in6=@mcast2, @in6=@dev={0xfe, 0x80, '\x00', 0x33}, 0x0, 0x0, 0x4, 0x0, 0x2, 0x20, 0x0, 0x2c}, {@in6=@empty, 0x4d4, 0x6c}, @in6=@private1, {0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x970}, {0x0, 0x1f, 0x0, 0xa6}, {}, 0x0, 0x3503, 0xa, 0x2, 0x4, 0x24}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20000094}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3}, 0x18) sendmmsg(r2, &(0x7f0000003e40), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) pselect6(0x40, &(0x7f0000000200)={0x0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000380)={0x1ff, 0x0, 0x0, 0x0, 0x8000000000000001, 0x1, 0x0, 0xffffffffffffffff}, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r4, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0xa1}], 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 367.882184ms ago: executing program 38 (id=1681): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key(0x0, 0x0, 0x0, 0x0, r0) r2 = add_key(&(0x7f0000000200)='ceph\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) r3 = memfd_secret(0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_GET_THP_DISABLE(0x2a) r5 = add_key(&(0x7f0000000280)='trusted\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r1) sched_setscheduler(0x0, 0x1, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r9, 0x0, 0xc, &(0x7f0000000340)="00ad83b4", 0x4) getsockopt$inet_opts(r4, 0x0, 0x400000000000000, &(0x7f00000003c0)=""/17, &(0x7f0000000380)=0x11) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYRES32], 0x7c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r10, 0x4b72, 0x0) fcntl$setlease(r3, 0x400, 0x0) fremovexattr(r3, &(0x7f00000000c0)=@known='com.apple.system.Security\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC=r5, @ANYRES16=r2], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xe, 0xd, &(0x7f0000000480)=ANY=[@ANYRES64, @ANYRES64, @ANYBLOB="0000000000000000b700000000000000000007020000f8ffb703000008000000b7d33b4bf5e1d839ff00000003000000850000000f00000095000000d2b000"/80], &(0x7f0000000180)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe95, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 0s ago: executing program 39 (id=1680): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@bridge_setlink={0x20, 0x13, 0xa2f, 0x70bd2b, 0x0, {0x7, 0x0, 0x68, 0x0, 0x948, 0x20}}, 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x4050) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000040)={0x0, 'netdevsim0\x00', {0x3}, 0xf}) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'vlan0\x00'}]}]}], {0x14}}, 0xa4}}, 0x40044) sendmsg$NBD_CMD_CONNECT(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): bj=_ pid=10292 comm="syz.4.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f4f8e969 code=0x7ffc0000 [ 456.577792][ T30] audit: type=1326 audit(1747065687.560:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10292 comm="syz.4.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fe4f4f8e969 code=0x7ffc0000 [ 456.599769][ T30] audit: type=1326 audit(1747065687.560:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10292 comm="syz.4.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f4f8e969 code=0x7ffc0000 [ 456.675027][ T5875] usb 5-1: Using ep0 maxpacket: 16 [ 456.675030][ T5871] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 456.701922][ T5875] usb 5-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 456.746389][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.767526][ T5875] usb 5-1: Product: syz [ 456.771748][ T5875] usb 5-1: Manufacturer: syz [ 456.795062][ T5875] usb 5-1: SerialNumber: syz [ 456.821156][ T5875] usb 5-1: config 0 descriptor?? [ 456.835049][ T5871] usb 6-1: Using ep0 maxpacket: 32 [ 456.853109][ T5871] usb 6-1: config 185 has too many interfaces: 222, using maximum allowed: 32 [ 456.873312][ T5871] usb 6-1: config 185 has an invalid descriptor of length 0, skipping remainder of the config [ 456.889057][ T5871] usb 6-1: config 185 has 0 interfaces, different from the descriptor's value: 222 [ 456.909360][ T5871] usb 6-1: New USB device found, idVendor=04c8, idProduct=0720, bcdDevice=a4.1e [ 456.927756][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.962851][ T5871] usb 6-1: Product: syz [ 456.978106][ T5871] usb 6-1: Manufacturer: syz [ 456.982919][ T5871] usb 6-1: SerialNumber: syz [ 457.067553][T10296] netlink: 'syz.4.1228': attribute type 4 has an invalid length. [ 457.075607][T10296] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1228'. [ 457.089361][T10296] : renamed from bond0 (while UP) [ 457.097563][ T5906] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 457.165617][ T10] usb 5-1: USB disconnect, device number 15 [ 457.212693][ T5871] usb 6-1: USB disconnect, device number 4 [ 457.246610][ T5906] usb 4-1: device descriptor read/64, error -71 [ 458.306058][ T5906] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 458.365252][ T5904] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 458.455379][ T5906] usb 4-1: device descriptor read/64, error -71 [ 458.460910][T10334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1241'. [ 458.565507][ T5906] usb usb4-port1: attempt power cycle [ 458.573832][ T5904] usb 2-1: Using ep0 maxpacket: 32 [ 458.587407][ T5904] usb 2-1: config 0 has an invalid interface number: 235 but max is 0 [ 458.596043][ T5904] usb 2-1: config 0 has no interface number 0 [ 458.602183][ T5904] usb 2-1: config 0 interface 235 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 458.644645][ T5904] usb 2-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 459.053413][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.076098][ T5906] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 459.086739][ T5904] usb 2-1: Product: syz [ 459.091562][ T5904] usb 2-1: Manufacturer: syz [ 459.142229][ T5904] usb 2-1: SerialNumber: syz [ 459.179448][ T5906] usb 4-1: device descriptor read/8, error -71 [ 459.582098][ T5904] usb 2-1: config 0 descriptor?? [ 459.625050][ T5906] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 459.836191][T10325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.855069][ T5906] usb 4-1: device descriptor read/8, error -71 [ 459.862250][T10325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.903968][ T5904] kaweth 2-1:0.235: Firmware present in device. [ 460.028707][ T5906] usb usb4-port1: unable to enumerate USB device [ 460.099845][ T5904] kaweth 2-1:0.235: Error reading configuration (-71), no net device created [ 460.555842][ T5904] kaweth 2-1:0.235: probe with driver kaweth failed with error -5 [ 460.568783][ T5904] usb 2-1: USB disconnect, device number 19 [ 460.812807][T10364] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 460.819536][T10364] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 460.846325][T10364] vhci_hcd vhci_hcd.0: Device attached [ 461.007917][T10369] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1252'. [ 461.034346][T10369] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1252'. [ 461.045439][ T5906] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 461.700938][ T10] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 461.876900][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 461.902872][ T5906] usb 4-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 461.970884][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.982219][ T5906] usb 4-1: config 0 descriptor?? [ 462.205609][T10384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1255'. [ 462.225061][ T9] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 462.520964][ T9] usb 6-1: config 0 has an invalid interface number: 119 but max is 0 [ 462.531915][ T9] usb 6-1: config 0 has no interface number 0 [ 462.551259][ T9] usb 6-1: config 0 interface 119 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 462.599477][ T5906] usbhid 4-1:0.0: can't add hid device: -71 [ 462.609611][ T5906] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 462.791570][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=5a.a6 [ 462.801847][T10365] vhci_hcd: connection reset by peer [ 462.818339][ T3501] vhci_hcd: stop threads [ 462.822646][ T3501] vhci_hcd: release socket [ 462.827222][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.840413][ T3501] vhci_hcd: disconnect device [ 462.863240][ T9] usb 6-1: config 0 descriptor?? [ 462.866041][ T5906] usb 4-1: USB disconnect, device number 15 [ 462.872706][ T9] xbox_remote_probe: Unexpected desc.bNumEndpoints: 2 [ 463.123564][T10380] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 463.131259][T10380] IPv6: NLM_F_CREATE should be set when creating new route [ 463.303916][ T5904] usb 6-1: USB disconnect, device number 5 [ 463.545194][ T5906] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 464.043976][ T5906] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 464.063494][ T5906] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 464.081785][ T5906] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 464.093582][ T5906] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 464.104915][ T5906] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 464.175162][ T5906] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 464.224951][ T5906] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 464.876506][ T5906] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 464.888403][ T5906] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 464.899651][ T5906] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 464.912134][ T5906] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 464.924993][ T5906] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 464.958498][ T5906] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 464.981732][ T5906] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 465.010425][ T5906] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 465.057045][ T5906] usb 3-1: string descriptor 0 read error: -22 [ 465.085786][ T5906] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 465.115472][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.127909][T10419] binder: BINDER_SET_CONTEXT_MGR already set [ 465.134257][T10419] binder: 10418:10419 ioctl 4018620d 200000000040 returned -16 [ 465.176031][ T5906] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 465.406559][ T9] usb 3-1: USB disconnect, device number 18 [ 465.416070][ T55] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 465.497057][T10429] IPv6: Can't replace route, no match found [ 465.905080][ T3607] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 466.105391][ T3607] usb 2-1: Using ep0 maxpacket: 32 [ 466.296711][ T3607] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.296837][ T3607] usb 2-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 466.296863][ T3607] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.405660][ T3607] usb 2-1: config 0 descriptor?? [ 467.594978][ T10] vhci_hcd: vhci_device speed not set [ 468.384980][ T3607] usb 2-1: string descriptor 0 read error: -71 [ 468.397010][ T3607] uclogic 0003:5543:006E.0005: failed retrieving string descriptor #200: -71 [ 468.425179][ T3607] uclogic 0003:5543:006E.0005: failed retrieving pen parameters: -71 [ 468.439126][ T3607] uclogic 0003:5543:006E.0005: failed probing pen v2 parameters: -71 [ 468.460987][ T3607] uclogic 0003:5543:006E.0005: failed probing parameters: -71 [ 468.485175][ T3607] uclogic 0003:5543:006E.0005: probe with driver uclogic failed with error -71 [ 468.510685][ T3607] usb 2-1: USB disconnect, device number 20 [ 468.935070][ T55] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 469.595040][ T3607] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 470.007949][ T8846] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 470.017998][ T3607] usb 4-1: Using ep0 maxpacket: 16 [ 470.289198][ T3607] usb 4-1: unable to get BOS descriptor or descriptor too short [ 470.322452][ T3607] usb 4-1: config 2 has an invalid interface number: 120 but max is 0 [ 470.352327][ T3607] usb 4-1: config 2 has no interface number 0 [ 470.385059][ T3607] usb 4-1: config 2 interface 120 has no altsetting 0 [ 470.426229][ T3607] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=68.f3 [ 470.447149][ T8846] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.469948][ T3607] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.505517][ T8846] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.516502][ T3607] usb 4-1: Product: syz [ 470.527234][ T3607] usb 4-1: Manufacturer: syz [ 470.531885][ T3607] usb 4-1: SerialNumber: syz [ 470.547004][ T8846] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 470.580653][ T8846] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 470.599985][T10486] input: syz0 as /devices/virtual/input/input29 [ 470.606978][ T8846] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.636950][ T8846] usb 2-1: config 0 descriptor?? [ 470.690415][T10488] FAULT_INJECTION: forcing a failure. [ 470.690415][T10488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 470.727296][T10488] CPU: 0 UID: 0 PID: 10488 Comm: syz.4.1291 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 470.727330][T10488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 470.727343][T10488] Call Trace: [ 470.727351][T10488] [ 470.727360][T10488] dump_stack_lvl+0x189/0x250 [ 470.727389][T10488] ? __lock_acquire+0xaac/0xd20 [ 470.727419][T10488] ? __pfx_dump_stack_lvl+0x10/0x10 [ 470.727447][T10488] ? __pfx__printk+0x10/0x10 [ 470.727478][T10488] ? __might_fault+0xb0/0x130 [ 470.727522][T10488] should_fail_ex+0x414/0x560 [ 470.727560][T10488] _copy_to_iter+0x1db/0x15a0 [ 470.727588][T10488] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 470.727621][T10488] ? __pfx__copy_to_iter+0x10/0x10 [ 470.727643][T10488] ? kernfs_seq_stop+0x17e/0x200 [ 470.727675][T10488] ? kernfs_put_active+0xa0/0x100 [ 470.727696][T10488] ? kernfs_seq_stop+0x17e/0x200 [ 470.727727][T10488] seq_read_iter+0xbeb/0xe10 [ 470.727775][T10488] vfs_read+0x4cd/0x980 [ 470.727812][T10488] ? __pfx_vfs_read+0x10/0x10 [ 470.727850][T10488] ? __fget_files+0x2a/0x420 [ 470.727891][T10488] ksys_read+0x145/0x250 [ 470.727916][T10488] ? rcu_is_watching+0x15/0xb0 [ 470.727946][T10488] ? __pfx_ksys_read+0x10/0x10 [ 470.727975][T10488] ? do_syscall_64+0xba/0x210 [ 470.728003][T10488] do_syscall_64+0xf6/0x210 [ 470.728039][T10488] ? clear_bhb_loop+0x45/0xa0 [ 470.728064][T10488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.728094][T10488] RIP: 0033:0x7fe4f4f8e969 [ 470.728112][T10488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 470.728129][T10488] RSP: 002b:00007fe4f5ebd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 470.728149][T10488] RAX: ffffffffffffffda RBX: 00007fe4f51b5fa0 RCX: 00007fe4f4f8e969 [ 470.728163][T10488] RDX: 0000000000002020 RSI: 0000200000000180 RDI: 0000000000000004 [ 470.728176][T10488] RBP: 00007fe4f5ebd090 R08: 0000000000000000 R09: 0000000000000000 [ 470.728187][T10488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 470.728199][T10488] R13: 0000000000000000 R14: 00007fe4f51b5fa0 R15: 00007ffeb9ff3e58 [ 470.728231][T10488] [ 471.024307][ T3607] i2c-tiny-usb 4-1:2.120: version 68.f3 found at bus 004 address 016 [ 471.033126][ T3607] (null): failure setting delay to 10us [ 471.039458][ T3607] i2c-tiny-usb 4-1:2.120: probe with driver i2c-tiny-usb failed with error -5 [ 471.051278][ T3607] usb 4-1: USB disconnect, device number 16 [ 471.144625][T10496] o2cb: This node has not been configured. [ 471.161805][T10496] o2cb: Cluster check failed. Fix errors before retrying. [ 471.191737][T10496] (syz.5.1295,10496,1):user_dlm_register:674 ERROR: status = -22 [ 471.210604][T10496] (syz.5.1295,10496,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 471.308394][ T8846] plantronics 0003:047F:FFFF.0006: reserved main item tag 0xd [ 471.321172][ T8846] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 471.349911][ T8846] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 471.603052][T10476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.815151][ T55] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 471.844140][T10476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.929755][T10476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.002745][T10476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.095476][ T5906] usb 2-1: USB disconnect, device number 21 [ 473.569240][T10536] autofs: Unknown parameter './file1' [ 474.555188][ T55] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 475.505327][ T3607] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 475.698710][T10556] netlink: 'syz.1.1312': attribute type 4 has an invalid length. [ 475.799659][ T3607] usb 3-1: Using ep0 maxpacket: 32 [ 475.829409][ T3607] usb 3-1: config 0 interface 0 has no altsetting 0 [ 475.843973][ T3607] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 475.857550][ T3607] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.886802][ T3607] usb 3-1: Product: syz [ 475.899466][ T3607] usb 3-1: Manufacturer: syz [ 475.910640][ T3607] usb 3-1: SerialNumber: syz [ 475.928892][ T5904] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 475.974057][ T3607] usb 3-1: config 0 descriptor?? [ 476.490324][ T5904] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 476.517391][ T5904] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 476.542444][ T5904] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 476.759077][ T3607] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 476.788038][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.800449][T10547] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 477.044950][ T5904] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 477.454762][T10579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.489757][ T5904] usb 4-1: USB disconnect, device number 17 [ 477.497585][T10579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.175068][ T55] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 482.084289][ T3607] usb 3-1: USB disconnect, device number 19 [ 482.171806][T10593] 8021q: VLANs not supported on caif0 [ 482.238346][T10598] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1322'. [ 482.456035][T10610] input: syz0 as /devices/virtual/input/input31 [ 483.260706][T10620] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1328'. [ 483.317968][T10621] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 483.329007][T10621] netlink: 'syz.2.1328': attribute type 4 has an invalid length. [ 485.349587][T10637] 8021q: VLANs not supported on caif0 [ 485.612059][T10644] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1334'. [ 485.857121][T10649] sp0: Synchronizing with TNC [ 486.019534][T10651] input: syz0 as /devices/virtual/input/input33 [ 486.115035][T10653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 486.172691][T10653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 486.262682][T10654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 486.654781][T10665] 8021q: VLANs not supported on caif0 [ 487.310244][T10681] input: syz0 as /devices/virtual/input/input34 [ 488.866186][T10701] 8021q: VLANs not supported on caif0 [ 488.925164][ T52] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 490.046803][ T52] usb 6-1: Using ep0 maxpacket: 8 [ 490.054360][ T52] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 490.066735][ T52] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 490.088144][ T52] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 490.098838][ T52] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 490.108810][ T52] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 490.278220][ T52] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 490.287973][ T52] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.296118][ T52] usb 6-1: Product: syz [ 490.300391][ T52] usb 6-1: Manufacturer: syz [ 490.305049][ T52] usb 6-1: SerialNumber: syz [ 490.312350][ T52] usb 6-1: config 0 descriptor?? [ 490.319576][ T52] kvaser_usb 6-1:0.0: error -EMSGSIZE: Cannot get software info [ 490.327434][ T52] kvaser_usb 6-1:0.0: probe with driver kvaser_usb failed with error -90 [ 490.413579][T10719] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1361'. [ 490.947282][T10695] input: syz0 as /devices/virtual/input/input35 [ 491.018709][ T5904] usb 6-1: USB disconnect, device number 6 [ 493.215703][ T52] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 493.222188][ T52] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 493.882888][T10738] 8021q: VLANs not supported on caif0 [ 494.088201][T10747] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1370'. [ 495.004444][ T8846] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 495.175069][ T8846] usb 5-1: Using ep0 maxpacket: 16 [ 495.192649][ T8846] usb 5-1: config 0 has an invalid interface number: 167 but max is 0 [ 495.211574][ T8846] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 495.233032][ T8846] usb 5-1: config 0 has no interface number 0 [ 495.265047][ T8846] usb 5-1: config 0 interface 167 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 32 [ 495.267338][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 495.285566][ T52] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 495.291705][ T52] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 495.305052][ T8846] usb 5-1: config 0 interface 167 altsetting 0 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 495.335042][ T8846] usb 5-1: config 0 interface 167 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 495.351224][ T8846] usb 5-1: config 0 interface 167 altsetting 0 endpoint 0x3 has an invalid bInterval 128, changing to 7 [ 495.366482][T10756] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1372'. [ 495.375559][ T8846] usb 5-1: config 0 interface 167 altsetting 0 has an endpoint descriptor with address 0xE1, changing to 0x81 [ 495.375594][ T8846] usb 5-1: config 0 interface 167 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 495.401385][ T8846] usb 5-1: config 0 interface 167 altsetting 0 endpoint 0xE has an invalid bInterval 64, changing to 7 [ 495.412948][ T8846] usb 5-1: config 0 interface 167 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 495.424114][ T8846] usb 5-1: config 0 interface 167 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 495.435484][ T8846] usb 5-1: config 0 interface 167 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 495.446488][ T8846] usb 5-1: config 0 interface 167 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 495.460001][ T8846] usb 5-1: New USB device found, idVendor=04ca, idProduct=300d, bcdDevice=16.4e [ 495.481096][ T8846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.498720][ T8846] usb 5-1: Product: syz [ 495.518680][ T8846] usb 5-1: Manufacturer: syz [ 495.533537][ T8846] usb 5-1: SerialNumber: syz [ 495.544623][ T8846] usb 5-1: config 0 descriptor?? [ 495.556959][T10749] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 495.833139][ T8846] usb 5-1: USB disconnect, device number 16 [ 497.335379][ T55] Bluetooth: hci3: command 0x0406 tx timeout [ 497.341794][ T52] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 497.341841][ T52] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 497.577075][T10778] 8021q: VLANs not supported on caif0 [ 498.770696][T10789] cgroup: Unknown subsys name 'cpuset' [ 498.780691][T10787] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1381'. [ 499.415049][ T55] Bluetooth: hci4: command 0x0406 tx timeout [ 499.731058][ T52] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 499.737416][ T52] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 501.424508][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.424579][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.816179][ T55] Bluetooth: hci1: command 0x0405 tx timeout [ 502.606666][ T52] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 502.606694][ T52] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 503.868325][T10815] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 503.929982][ T5822] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 504.035202][ T5822] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 504.102183][ T5822] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 504.256873][ T5822] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 504.257959][ T5822] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 504.263852][ T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 504.275683][ T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 504.284035][ T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 504.367386][ T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 504.376959][ T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 504.617706][T10827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1392'. [ 504.870883][T10830] 8021q: VLANs not supported on caif0 [ 505.503049][T10744] chnl_net:caif_netlink_parms(): no params data found [ 505.769092][T10852] overlayfs: missing 'lowerdir' [ 505.803629][T10852] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 505.846532][T10744] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.862294][T10744] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.865815][T10857] netlink: 'syz.4.1397': attribute type 5 has an invalid length. [ 505.871559][T10744] bridge_slave_0: entered allmulticast mode [ 505.887756][T10744] bridge_slave_0: entered promiscuous mode [ 505.915063][T10744] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.924193][T10744] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.955213][T10744] bridge_slave_1: entered allmulticast mode [ 505.963489][T10744] bridge_slave_1: entered promiscuous mode [ 505.972886][T10857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1397'. [ 507.026160][ T5822] Bluetooth: hci5: command tx timeout [ 507.165265][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 507.215952][T10744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.242021][T10744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.335018][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 507.364759][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.406306][ T9] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.450644][ T9] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.501711][T10744] team0: Port device team_slave_0 added [ 507.509252][ T9] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 507.528524][T10744] team0: Port device team_slave_1 added [ 507.531799][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 508.183999][ T9] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 508.193543][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.223795][ T9] usb 3-1: config 0 descriptor?? [ 508.297434][T10744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.311658][T10744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.349804][T10744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.383279][T10744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.397366][T10744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.423458][T10744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.513910][T10744] hsr_slave_0: entered promiscuous mode [ 508.523463][T10884] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1403'. [ 508.534660][T10744] hsr_slave_1: entered promiscuous mode [ 508.555776][T10744] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 508.563384][T10744] Cannot create hsr debugfs directory [ 508.593642][T10884] bridge0: entered promiscuous mode [ 508.599627][T10884] bridge0: entered allmulticast mode [ 508.660396][T10864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.672176][T10864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.769838][T10865] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1400'. [ 509.017360][T10889] netlink: 'syz.5.1405': attribute type 2 has an invalid length. [ 509.101311][ T5822] Bluetooth: hci5: command tx timeout [ 509.228743][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 509.238213][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 509.251013][ T9] usb 3-1: USB disconnect, device number 20 [ 509.313005][T10889] : entered promiscuous mode [ 509.510146][T10744] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 509.527370][T10744] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 509.549925][T10744] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 509.674265][T10744] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 510.128010][T10904] dummy0: entered promiscuous mode [ 510.133840][T10904] macsec1: entered allmulticast mode [ 510.155096][T10904] dummy0: entered allmulticast mode [ 510.198831][T10904] dummy0: left allmulticast mode [ 510.207007][T10904] dummy0: left promiscuous mode [ 510.321739][T10909] IPv6: Can't replace route, no match found [ 510.446217][T10910] tipc: Enabled bearer , priority 0 [ 510.552461][T10915] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 510.559107][T10915] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 510.575639][T10915] vhci_hcd vhci_hcd.0: Device attached [ 510.652035][T10910] syzkaller0: entered promiscuous mode [ 510.662820][T10910] syzkaller0: entered allmulticast mode [ 510.729933][T10910] tipc: Resetting bearer [ 510.814122][T10907] tipc: Resetting bearer [ 510.825110][ T5871] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 510.907308][T10930] 9pnet_fd: Insufficient options for proto=fd [ 511.176992][ T5822] Bluetooth: hci5: command tx timeout [ 511.177427][ T52] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 511.379544][ T52] usb 5-1: Using ep0 maxpacket: 8 [ 511.387317][ T52] usb 5-1: config 1 interface 0 has no altsetting 0 [ 511.396301][ T52] usb 5-1: New USB device found, idVendor=05ac, idProduct=0340, bcdDevice= 0.40 [ 511.406642][ T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.414758][ T52] usb 5-1: Product: ﶁꟐ旻늋댥玝ㄭ濺䑓踵湣ᅯ屔ニ귋社錪뜜할蜯ٷ蛸됻뀗뼗ݞ獅࡛ [ 511.430838][ T52] usb 5-1: Manufacturer: Ѝ [ 511.435436][ T52] usb 5-1: SerialNumber: Ⰹ [ 511.873867][T10917] vhci_hcd: connection reset by peer [ 511.882742][ T3568] vhci_hcd: stop threads [ 511.901703][ T3568] vhci_hcd: release socket [ 511.945317][ T3568] vhci_hcd: disconnect device [ 511.955813][ T52] usbhid 5-1:1.0: can't add hid device: -71 [ 511.961936][ T52] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 511.974623][ T52] usb 5-1: USB disconnect, device number 17 [ 512.040974][T10935] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1421'. [ 512.355457][ T5904] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 512.681261][ T5904] usb 6-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b [ 512.697626][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.720767][ T5904] usb 6-1: config 0 descriptor?? [ 512.734331][ T5904] usb 6-1: unsupported MDLM descriptors [ 512.836317][T10947] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1423'. [ 513.048637][ T5904] usb 6-1: USB disconnect, device number 7 [ 513.297837][ T5822] Bluetooth: hci5: command tx timeout [ 513.558642][T10946] Falling back ldisc for ptm0. [ 513.698206][T10907] tipc: Disabling bearer [ 514.622162][T10744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.171518][T10744] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.501651][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.508850][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.836755][ T3568] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.843982][ T3568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.505120][ T5871] vhci_hcd: vhci_device speed not set [ 516.613898][T10964] netlink: 'syz.2.1432': attribute type 3 has an invalid length. [ 517.721043][T10744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.032035][ T5871] IPVS: starting estimator thread 0... [ 518.163267][T10998] IPVS: using max 28 ests per chain, 67200 per kthread [ 518.310253][T11000] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 519.867612][T11025] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 519.912374][T11023] openvswitch: netlink: IP tunnel TTL not specified. [ 520.246001][T11030] 9pnet_fd: Insufficient options for proto=fd [ 520.540917][T10744] veth0_vlan: entered promiscuous mode [ 520.562964][T10744] veth1_vlan: entered promiscuous mode [ 520.633706][T10744] veth0_macvtap: entered promiscuous mode [ 520.652870][T10744] veth1_macvtap: entered promiscuous mode [ 520.703470][T10744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.720778][T10744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.740000][T10744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.761323][T10744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.781692][T10744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.808376][T10744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.822651][T10744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.902336][T10744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.939680][T10744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.956623][T11043] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 520.985697][T10744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.045478][T10744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 521.571457][T10744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.585581][T10744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.595563][T10744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.606408][T10744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.626501][T10744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.651781][T10744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.677825][T10744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.718413][T10744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.840345][T10744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.851224][T10744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.877141][T10744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 521.928385][T10744] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.947084][T10744] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.970283][T10744] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.014966][T10744] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.204541][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.244193][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.602557][ T3568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.349471][ T3568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.503264][T11066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1462'. [ 523.518857][T11071] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1464'. [ 524.512751][T11084] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 524.894344][T11066] hsr_slave_1 (unregistering): left promiscuous mode [ 527.148772][T11114] overlayfs: failed to clone lowerpath [ 527.174868][T11118] 8021q: VLANs not supported on caif0 [ 527.335016][ T8846] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 527.407665][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 527.467232][ T59] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 527.505510][ T8846] usb 3-1: Using ep0 maxpacket: 8 [ 527.517419][ T8846] usb 3-1: unable to get BOS descriptor or descriptor too short [ 527.527233][ T8846] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 527.539886][ T8846] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 527.551188][ T8846] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 527.563144][ T8846] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 527.580415][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 527.588885][ T8846] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 527.602229][ T8846] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 222 [ 527.614068][ T9] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 527.623764][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.631367][ T59] usb 7-1: Using ep0 maxpacket: 16 [ 527.632652][ T9] usb 6-1: Product: syz [ 527.642802][ T59] usb 7-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=62.ba [ 527.647832][ T8846] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 527.659120][ T59] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.669192][ T8846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.669218][ T8846] usb 3-1: Product: syz [ 527.682039][ T9] usb 6-1: Manufacturer: syz [ 527.688432][ T9] usb 6-1: SerialNumber: syz [ 527.693440][ T8846] usb 3-1: Manufacturer: syz [ 527.701054][ T8846] usb 3-1: SerialNumber: syz [ 527.703976][ T59] usb 7-1: Product: syz [ 527.707077][ T9] usb 6-1: config 0 descriptor?? [ 527.719558][ T59] usb 7-1: Manufacturer: syz [ 527.720074][ T8846] usb 3-1: config 0 descriptor?? [ 527.724257][ T59] usb 7-1: SerialNumber: syz [ 527.735584][T11113] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 527.742860][T11113] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 527.752042][ T9] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 527.762447][ T8846] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 527.770183][ T9] usb 6-1: Detected FT232H [ 527.907114][ T59] usb 7-1: config 0 descriptor?? [ 527.927512][T11119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.965742][T11119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.028853][ T8846] usb 3-1: USB disconnect, device number 21 [ 528.195683][T11121] blkio.reset_stats is deprecated [ 528.327036][ T59] usb 7-1: can't set first interface for hiFace device. [ 528.408719][ T59] snd-usb-hiface 7-1:0.0: probe with driver snd-usb-hiface failed with error -5 [ 528.501251][ T59] usb 7-1: USB disconnect, device number 2 [ 528.887813][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 528.942023][ T9] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 528.950906][ T9] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 528.992037][ T9] usb 6-1: USB disconnect, device number 8 [ 529.019310][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 529.040442][ T9] ftdi_sio 6-1:0.0: device disconnected [ 529.495357][T11148] binder: 11145:11148 ioctl 400c620e 200000000380 returned -22 [ 530.022817][T11153] dummy0: entered promiscuous mode [ 530.066267][T11153] vlan2: entered promiscuous mode [ 531.023508][T11164] IPv6: Can't replace route, no match found [ 531.412092][ T30] kauditd_printk_skb: 306 callbacks suppressed [ 531.412111][ T30] audit: type=1326 audit(1747065765.102:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11174 comm="syz.1.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbce158e969 code=0x7fc00000 [ 531.448007][T11171] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1493'. [ 531.480573][ T30] audit: type=1326 audit(1747065765.182:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11174 comm="syz.1.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbce158e969 code=0x7fc00000 [ 531.615238][ T10] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 531.622974][ T5871] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 531.778094][ T10] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 531.786789][ T5871] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 531.787987][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.805090][ T5871] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 531.814503][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.814954][ T10] usb 3-1: config 0 descriptor?? [ 531.843524][ T10] gspca_main: spca508-2.14.0 probing 8086:0110 [ 531.875862][ T5871] usb 5-1: config 0 descriptor?? [ 531.884590][ T5871] pwc: Askey VC010 type 2 USB webcam detected. [ 532.041450][T11173] netlink: 35 bytes leftover after parsing attributes in process `syz.2.1495'. [ 532.064716][T11173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1495'. [ 532.089024][ T10] gspca_spca508: reg_read err -71 [ 532.101416][ T10] gspca_spca508: reg_read err -71 [ 532.110348][ T10] gspca_spca508: reg_read err -71 [ 532.117927][ T10] gspca_spca508: reg_read err -71 [ 532.123527][ T10] gspca_spca508: reg_read err -71 [ 532.132605][ T10] gspca_spca508: reg write: error -71 [ 532.140576][ T10] spca508 3-1:0.0: probe with driver spca508 failed with error -71 [ 532.159124][ T10] usb 3-1: USB disconnect, device number 22 [ 532.532356][ T5871] pwc: recv_control_msg error -32 req 02 val 2b00 [ 532.590788][ T5871] pwc: recv_control_msg error -32 req 02 val 2700 [ 532.669695][ T5871] pwc: recv_control_msg error -32 req 02 val 2c00 [ 532.787314][ T5871] pwc: recv_control_msg error -32 req 04 val 1000 [ 532.909340][ T5871] pwc: recv_control_msg error -32 req 04 val 1300 [ 532.936536][ T5871] pwc: recv_control_msg error -32 req 04 val 1400 [ 533.083113][T11204] 8021q: VLANs not supported on nlmon0 [ 533.166250][ T5871] pwc: recv_control_msg error -71 req 02 val 2100 [ 533.186436][ T5871] pwc: recv_control_msg error -71 req 04 val 1500 [ 533.211767][ T5871] pwc: recv_control_msg error -71 req 02 val 2500 [ 533.228654][ T5871] pwc: recv_control_msg error -71 req 02 val 2400 [ 533.302285][ T5871] pwc: recv_control_msg error -71 req 02 val 2600 [ 533.311773][ T5871] pwc: recv_control_msg error -71 req 02 val 2900 [ 533.318863][ T5871] pwc: recv_control_msg error -71 req 02 val 2800 [ 533.329675][ T5871] pwc: recv_control_msg error -71 req 04 val 1100 [ 533.336772][ T5871] pwc: recv_control_msg error -71 req 04 val 1200 [ 533.521826][ T5871] pwc: Registered as video103. [ 533.553402][ T52] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 533.737250][ T5871] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input36 [ 533.854982][ T52] usb 6-1: Using ep0 maxpacket: 8 [ 533.943200][ T5871] usb 5-1: USB disconnect, device number 18 [ 533.951553][ T52] usb 6-1: unable to get BOS descriptor or descriptor too short [ 533.970061][ T52] usb 6-1: config 248 has an invalid interface number: 51 but max is 0 [ 533.992814][ T52] usb 6-1: config 248 has no interface number 0 [ 534.007403][ T52] usb 6-1: New USB device found, idVendor=05ac, idProduct=0249, bcdDevice=39.f0 [ 534.020618][ T52] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.030320][ T52] usb 6-1: Product: syz [ 534.034685][ T52] usb 6-1: Manufacturer: syz [ 534.050789][ T52] usb 6-1: SerialNumber: syz [ 534.117927][T11217] dlm: non-version read from control device 36 [ 534.261473][T11221] netlink: 'syz.4.1511': attribute type 1 has an invalid length. [ 534.283684][ T52] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:248.51/input/input37 [ 534.329556][T11221] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 534.338941][T11221] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 534.348192][ T30] audit: type=1326 audit(1747065768.052:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11174 comm="syz.1.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbce158e969 code=0x7fc00000 [ 534.362912][ T5174] bcm5974 6-1:248.51: could not read from device [ 534.370377][T11221] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 534.385887][T11221] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 534.397670][T11221] bond0: (slave geneve2): making interface the new active one [ 534.406708][T11221] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 534.421412][T11228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.489589][T11221] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1511'. [ 534.500309][T11228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.533478][T11221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.559622][T11231] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1511'. [ 534.584289][ T5904] IPVS: starting estimator thread 0... [ 534.593955][ T52] usb 6-1: USB disconnect, device number 9 [ 534.600278][ T5174] bcm5974 6-1:248.51: could not read from device [ 534.612433][ T5174] bcm5974 6-1:248.51: could not read from device [ 534.613410][T11221] xt_policy: output policy not valid in PREROUTING and INPUT [ 534.685945][ T10] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 534.705385][T11233] IPVS: using max 32 ests per chain, 76800 per kthread [ 534.815054][ T10] usb 3-1: device descriptor read/64, error -71 [ 535.156079][ T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 535.415259][ T10] usb 3-1: device descriptor read/64, error -71 [ 535.473758][T11241] vlan2: entered promiscuous mode [ 535.525786][ T10] usb usb3-port1: attempt power cycle [ 535.615230][ T5904] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 535.701448][T11250] netlink: 'syz.1.1519': attribute type 8 has an invalid length. [ 535.796214][ T5904] usb 5-1: Using ep0 maxpacket: 8 [ 535.814154][ T5904] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 535.834207][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.863220][ T5904] usb 5-1: config 0 descriptor?? [ 535.875141][ T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 535.896657][ T10] usb 3-1: device descriptor read/8, error -71 [ 536.084349][ T5904] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 536.145033][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 536.167957][ T10] usb 3-1: device descriptor read/8, error -71 [ 536.275667][ T10] usb usb3-port1: unable to enumerate USB device [ 536.465115][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 536.630271][ T9] usb 7-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 536.639948][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.648080][ T9] usb 7-1: Product: syz [ 536.652385][ T9] usb 7-1: Manufacturer: syz [ 536.657602][ T9] usb 7-1: SerialNumber: syz [ 536.868698][T11266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.884404][T11266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.901293][T11266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.912087][T11266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.929347][T11266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.943809][T11266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.969447][T11266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.981883][T11266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.000146][T11266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.029415][T11266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.112701][ T9] gspca_main: pac207-2.14.0 probing 093a:2476 [ 537.122057][ T9] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 537.133870][ T9] usb 7-1: Found UVC 0.00 device syz (093a:2476) [ 537.142235][ T9] usb 7-1: No valid video chain found. [ 537.153990][ T9] usb 7-1: USB disconnect, device number 4 [ 537.920232][ T5904] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 537.932855][ T5904] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 537.943766][ T5904] asix 5-1:0.0: probe with driver asix failed with error -71 [ 538.062943][ T5904] usb 5-1: USB disconnect, device number 19 [ 538.414336][ T9] IPVS: starting estimator thread 0... [ 538.719857][T11285] IPVS: using max 27 ests per chain, 64800 per kthread [ 538.764310][T11289] 8021q: VLANs not supported on caif0 [ 539.049712][T11298] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1534'. [ 539.101269][T11298] bridge1: entered allmulticast mode [ 539.447416][T11311] overlayfs: failed to clone upperpath [ 539.506707][T11316] overlayfs: missing 'lowerdir' [ 539.585235][ T52] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 539.786223][ T52] usb 3-1: Using ep0 maxpacket: 8 [ 539.839635][ T52] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 539.874177][ T52] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.882863][T11321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 539.897531][T11321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 539.919017][ T52] usb 3-1: config 0 descriptor?? [ 539.972985][T11321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.147639][ T52] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 541.374753][T11333] netlink: 'syz.5.1546': attribute type 21 has an invalid length. [ 541.383255][T11333] netlink: 'syz.5.1546': attribute type 6 has an invalid length. [ 541.393050][T11333] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1546'. [ 541.739619][ T55] Bluetooth: hci5: command 0x0405 tx timeout [ 542.175337][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 542.301929][ T52] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 542.312523][ T52] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 542.322826][ T9] usb 5-1: device descriptor read/64, error -71 [ 542.353000][ T52] asix 3-1:0.0: probe with driver asix failed with error -71 [ 542.405943][ T52] usb 3-1: USB disconnect, device number 27 [ 542.439369][ T3501] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.526375][ T3501] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.595443][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 542.755558][ T9] usb 5-1: device descriptor read/64, error -71 [ 542.853005][ T3501] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.885550][ T9] usb usb5-port1: attempt power cycle [ 542.983061][ T3501] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.026795][ T5822] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 543.036632][ T5822] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 543.044618][ T5822] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 543.053889][ T5822] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 543.066182][ T5822] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 543.245091][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 543.295425][ T9] usb 5-1: device descriptor read/8, error -71 [ 543.436501][T11361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 543.451235][ T3501] bridge_slave_1: left allmulticast mode [ 543.462151][ T3501] bridge_slave_1: left promiscuous mode [ 543.468379][ T3501] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.521619][ T3501] bridge_slave_0: left allmulticast mode [ 543.529205][ T3501] bridge_slave_0: left promiscuous mode [ 543.530517][T11361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 543.535439][ T3501] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.564249][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 543.628017][ T9] usb 5-1: device descriptor read/8, error -71 [ 543.926241][ T9] usb usb5-port1: unable to enumerate USB device [ 545.030356][ T3501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 545.055848][ T3501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 545.134693][T11380] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1560'. [ 545.196328][ T55] Bluetooth: hci1: command tx timeout [ 545.661584][ T3501] bond0 (unregistering): Released all slaves [ 545.769769][T11357] chnl_net:caif_netlink_parms(): no params data found [ 545.842138][ T3501] : left promiscuous mode [ 545.997024][ T3501] IPVS: stopping master sync thread 8991 ... [ 546.309238][T11399] FAULT_INJECTION: forcing a failure. [ 546.309238][T11399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 546.322606][T11399] CPU: 1 UID: 0 PID: 11399 Comm: syz.6.1568 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 546.322634][T11399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 546.322647][T11399] Call Trace: [ 546.322654][T11399] [ 546.322663][T11399] dump_stack_lvl+0x189/0x250 [ 546.322701][T11399] ? __lock_acquire+0xaac/0xd20 [ 546.322730][T11399] ? __pfx_dump_stack_lvl+0x10/0x10 [ 546.322758][T11399] ? __pfx__printk+0x10/0x10 [ 546.322789][T11399] ? __might_fault+0xb0/0x130 [ 546.322831][T11399] should_fail_ex+0x414/0x560 [ 546.322869][T11399] _copy_from_user+0x2d/0xb0 [ 546.322897][T11399] ___sys_sendmsg+0x158/0x2a0 [ 546.322927][T11399] ? __pfx____sys_sendmsg+0x10/0x10 [ 546.322992][T11399] ? __fget_files+0x2a/0x420 [ 546.323022][T11399] ? __fget_files+0x3a0/0x420 [ 546.323064][T11399] __x64_sys_sendmsg+0x19b/0x260 [ 546.323093][T11399] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 546.323148][T11399] ? do_syscall_64+0xba/0x210 [ 546.323177][T11399] do_syscall_64+0xf6/0x210 [ 546.323201][T11399] ? clear_bhb_loop+0x45/0xa0 [ 546.323235][T11399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.323264][T11399] RIP: 0033:0x7f854c18e969 [ 546.323279][T11399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 546.323294][T11399] RSP: 002b:00007f8549fb4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 546.323312][T11399] RAX: ffffffffffffffda RBX: 00007f854c3b6160 RCX: 00007f854c18e969 [ 546.323325][T11399] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000005 [ 546.323336][T11399] RBP: 00007f8549fb4090 R08: 0000000000000000 R09: 0000000000000000 [ 546.323346][T11399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.323356][T11399] R13: 0000000000000000 R14: 00007f854c3b6160 R15: 00007ffe5e7aa748 [ 546.323383][T11399] [ 546.586218][ T3607] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 547.062716][ T3607] usb 5-1: no configurations [ 547.078214][ T3607] usb 5-1: can't read configurations, error -22 [ 547.233127][T11357] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.240700][T11357] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.248105][T11357] bridge_slave_0: entered allmulticast mode [ 547.258807][ T55] Bluetooth: hci1: command tx timeout [ 547.307907][T11357] bridge_slave_0: entered promiscuous mode [ 547.339735][T11411] usb usb8: usbfs: process 11411 (syz.2.1572) did not claim interface 0 before use [ 547.364165][ T3607] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 547.406078][T11357] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.415493][T11357] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.433256][T11357] bridge_slave_1: entered allmulticast mode [ 547.444777][T11357] bridge_slave_1: entered promiscuous mode [ 547.590039][ T3607] usb 5-1: no configurations [ 547.595185][ T3607] usb 5-1: can't read configurations, error -22 [ 547.609013][ T3607] usb usb5-port1: attempt power cycle [ 547.619053][ T3501] hsr_slave_0: left promiscuous mode [ 547.637263][ T3501] hsr_slave_1: left promiscuous mode [ 547.676427][ T3501] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 547.700401][ T3501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 547.720555][ T3501] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 547.731020][ T3501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 547.938612][ T3501] veth1_macvtap: left promiscuous mode [ 547.944459][ T3501] veth0_macvtap: left promiscuous mode [ 547.960409][ T3501] veth1_vlan: left promiscuous mode [ 547.968992][ T3501] veth0_vlan: left promiscuous mode [ 547.975290][ T3607] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 548.016262][ T3607] usb 5-1: no configurations [ 548.021326][ T3607] usb 5-1: can't read configurations, error -22 [ 548.177900][ T3607] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 548.238335][ T3607] usb 5-1: no configurations [ 548.243019][ T3607] usb 5-1: can't read configurations, error -22 [ 548.275072][ T3607] usb usb5-port1: unable to enumerate USB device [ 549.038089][T11428] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1577'. [ 549.097657][T11428] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1577'. [ 549.111459][T11428] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1577'. [ 549.148345][T11428] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1577'. [ 549.463166][ T55] Bluetooth: hci1: command tx timeout [ 550.900803][T11448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.990314][ T3501] team0 (unregistering): Port device team_slave_1 removed [ 551.534016][ T3501] team0 (unregistering): Port device team_slave_0 removed [ 551.575417][ T55] Bluetooth: hci1: command tx timeout [ 553.120919][T11357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.166819][T11357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 553.357342][T11357] team0: Port device team_slave_0 added [ 553.377764][T11357] team0: Port device team_slave_1 added [ 553.487081][T11357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 553.506520][T11357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 553.571297][T11357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 553.597418][T11357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 553.604595][T11357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 553.639589][T11357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 553.972798][ T5904] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 553.999770][ T3501] IPVS: stop unused estimator thread 0... [ 554.394947][ T5904] usb 7-1: device descriptor read/64, error -71 [ 554.400598][T11357] hsr_slave_0: entered promiscuous mode [ 554.413434][T11357] hsr_slave_1: entered promiscuous mode [ 554.424717][T11357] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 554.443274][T11357] Cannot create hsr debugfs directory [ 554.775217][ T5904] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 554.932246][ T5904] usb 7-1: device descriptor read/64, error -71 [ 555.063517][ T3607] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 555.079023][T11357] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 555.097144][ T5904] usb usb7-port1: attempt power cycle [ 555.342090][T11506] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 555.395940][T11357] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 555.417576][T11357] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 555.428404][T11357] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 555.455401][ T3607] usb 5-1: Using ep0 maxpacket: 16 [ 555.470800][ T3607] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.490135][ T3607] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.503932][ T3607] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 555.517352][ T3607] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 555.527339][ T3607] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.545285][ T3607] usb 5-1: config 0 descriptor?? [ 555.711764][T11357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 555.760725][T11357] 8021q: adding VLAN 0 to HW filter on device team0 [ 555.838020][ T5964] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.845317][ T5964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 555.915335][ T5904] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 555.935477][ T10] IPVS: starting estimator thread 0... [ 555.945666][ T5904] usb 7-1: device descriptor read/8, error -71 [ 555.979331][T11383] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.986505][T11383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.024293][ T3607] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 556.058354][ T3607] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 556.077114][T11521] IPVS: using max 27 ests per chain, 64800 per kthread [ 556.083023][ T3607] microsoft 0003:045E:07DA.0007: item fetching failed at offset 33/34 [ 556.126691][ T3607] microsoft 0003:045E:07DA.0007: parse failed [ 556.160042][ T3607] microsoft 0003:045E:07DA.0007: probe with driver microsoft failed with error -22 [ 556.215483][ T5904] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 556.238557][ T52] usb 5-1: USB disconnect, device number 28 [ 556.265518][ T5904] usb 7-1: device descriptor read/8, error -71 [ 556.386164][ T5904] usb usb7-port1: unable to enumerate USB device [ 557.412227][T11357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 557.717746][ T30] audit: type=1326 audit(1747065791.422:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11548 comm="syz.6.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854c18e969 code=0x7ffc0000 [ 557.876185][ T30] audit: type=1326 audit(1747065791.422:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11548 comm="syz.6.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f854c18e969 code=0x7ffc0000 [ 557.981337][ T30] audit: type=1326 audit(1747065791.422:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11548 comm="syz.6.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854c18e969 code=0x7ffc0000 [ 558.095120][ T30] audit: type=1326 audit(1747065791.422:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11548 comm="syz.6.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f854c18e969 code=0x7ffc0000 [ 558.143433][ T30] audit: type=1326 audit(1747065791.422:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11548 comm="syz.6.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854c18e969 code=0x7ffc0000 [ 558.167927][ T30] audit: type=1326 audit(1747065791.422:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11548 comm="syz.6.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f854c18e969 code=0x7ffc0000 [ 558.775158][ T30] audit: type=1326 audit(1747065791.422:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11548 comm="syz.6.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854c18e969 code=0x7ffc0000 [ 558.799101][ T30] audit: type=1326 audit(1747065791.422:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11548 comm="syz.6.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f854c18e969 code=0x7ffc0000 [ 558.840859][ T30] audit: type=1326 audit(1747065791.422:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11548 comm="syz.6.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854c18e969 code=0x7ffc0000 [ 558.893790][T11357] veth0_vlan: entered promiscuous mode [ 558.912743][ T30] audit: type=1326 audit(1747065791.422:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11548 comm="syz.6.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f854c18e969 code=0x7ffc0000 [ 558.944023][T11357] veth1_vlan: entered promiscuous mode [ 559.041768][T11357] veth0_macvtap: entered promiscuous mode [ 559.233220][ T5904] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 559.273605][T11357] veth1_macvtap: entered promiscuous mode [ 559.296987][T11357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.307514][T11357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.317565][T11357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.328058][T11357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.224703][T11357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.316487][T11357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.435354][ T5904] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 560.443002][ T5904] usb 7-1: can't read configurations, error -61 [ 560.459544][T11357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 561.153605][T11357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.177076][T11357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 561.187883][T11357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.207328][T11357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 561.218212][T11357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.265225][T11357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.287842][T11357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.312131][T11357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.339622][T11357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.350451][T11357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.361501][T11357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.373562][T11357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.384661][T11357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.439021][ T5904] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 561.456436][T11357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.483579][T11357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 561.604593][T11357] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.645579][T11357] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.654353][T11357] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.701857][T11357] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.997433][T11596] overlayfs: overlapping lowerdir path [ 562.693086][ T3501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.711303][ T3501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.732666][T11604] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1628'. [ 562.762700][ T5962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.779135][ T5962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.859918][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.876658][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.565211][ T3607] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 564.339181][ T3607] usb 5-1: unable to get BOS descriptor or descriptor too short [ 564.357206][ T3607] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 564.375166][ T3607] usb 5-1: can't read configurations, error -71 [ 565.666932][T11639] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 567.314105][T11668] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1646'. [ 567.454977][T11673] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1645'. [ 567.559178][T11675] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1645'. [ 567.979567][T11679] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1649'. [ 568.243401][T11678] mmap: syz.4.1650 (11678): VmData 37728256 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 568.308843][T11692] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1651'. [ 570.150718][T11715] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 570.178044][T11715] bridge0: port 3(veth0_to_bridge) entered blocking state [ 570.185727][T11715] bridge0: port 3(veth0_to_bridge) entered disabled state [ 570.193702][T11715] veth0_to_bridge: entered allmulticast mode [ 570.209406][T11715] veth0_to_bridge: entered promiscuous mode [ 570.216256][T11715] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 570.230213][T11715] bridge0: port 3(veth0_to_bridge) entered blocking state [ 570.237600][T11715] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 570.519223][T11718] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1660'. [ 570.765091][ T3607] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 570.916551][ T3607] usb 7-1: device descriptor read/64, error -71 [ 570.947663][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 570.960326][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 570.972890][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 570.985500][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 570.997980][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 571.010572][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 571.023043][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 571.035618][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 571.048137][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.145163][ T5904] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 573.215298][T11733] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1662'. [ 573.948241][ T5904] usb 5-1: Using ep0 maxpacket: 16 [ 574.022711][ T5904] usb 5-1: device descriptor read/all, error -71 [ 575.155538][ C0] net_ratelimit: 5065 callbacks suppressed [ 575.155592][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 575.175381][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 575.189069][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 575.202927][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 575.216744][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 575.230552][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 575.244107][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 575.260534][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 575.274009][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 575.287838][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.184839][ C0] sched: DL replenish lagged too much [ 580.078939][T11747] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 580.164975][ C0] net_ratelimit: 6805 callbacks suppressed [ 580.164995][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 580.183332][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 580.195771][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 580.208052][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 580.220398][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 580.232740][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 580.245366][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 580.257883][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 580.270470][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 580.283078][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 580.416484][T11753] overlay: Unknown parameter '/' [ 580.695852][T11751] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 580.894477][T11760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1672'. [ 581.351030][ T3607] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 581.813594][ T3607] usb 7-1: not running at top speed; connect to a high speed hub [ 582.055342][ T3607] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 582.064368][ T3607] usb 7-1: config 1 has no interface number 1 [ 582.101328][ T3607] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 582.144665][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 582.144683][ T30] audit: type=1326 audit(1747065815.842:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11768 comm="syz.4.1675" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4f4f8e969 code=0x0 [ 583.312283][ T3607] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 583.376346][ T3607] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.791813][ T3607] usb 7-1: Product: syz [ 584.809136][ T3607] usb 7-1: Manufacturer: syz [ 584.813750][ T3607] usb 7-1: SerialNumber: syz [ 585.031337][ T3607] usb 7-1: can't set config #1, error -71 [ 585.175068][ C0] net_ratelimit: 11271 callbacks suppressed [ 585.175084][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 585.193333][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 585.205625][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 585.218179][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 585.230545][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 585.242894][ T3607] usb 7-1: USB disconnect, device number 13 [ 585.249302][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 585.249592][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 585.250006][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 585.250299][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 585.250719][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 586.467562][T11791] new mount options do not match the existing superblock, will be ignored [ 586.482998][T11791] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 586.686942][T11789] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 590.185180][ C0] net_ratelimit: 14603 callbacks suppressed [ 590.185195][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.211689][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.224021][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.236298][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.249046][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.261337][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.273694][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.285977][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.298306][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.310607][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.195123][ C0] net_ratelimit: 16052 callbacks suppressed [ 595.195140][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.213375][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.225712][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.238013][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.250324][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.262598][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.275003][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.287296][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.299629][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.311905][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.205085][ C0] net_ratelimit: 15077 callbacks suppressed [ 600.205104][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.223327][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.235678][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.247996][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.260282][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.272598][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.284929][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.297238][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.309504][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.321786][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.215192][ C0] net_ratelimit: 15526 callbacks suppressed [ 605.215215][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.233642][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.246042][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.258459][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.270836][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.283275][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.295664][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.308044][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.320360][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 605.332768][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.224902][ C0] net_ratelimit: 13213 callbacks suppressed [ 610.224919][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.243139][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.255557][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.267923][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.280315][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.292626][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.305070][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.317369][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.329679][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 610.341993][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.235825][ C0] net_ratelimit: 12699 callbacks suppressed [ 615.235843][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.254317][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.267509][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.281647][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.294848][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.307510][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.320623][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.333077][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.346348][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.358816][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 617.450703][ T5822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 617.732671][ T5822] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 617.742572][ T5822] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 617.771666][ T5822] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 617.779834][ T5822] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 620.245048][ C0] net_ratelimit: 8579 callbacks suppressed [ 620.245071][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 620.245444][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 620.251980][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 620.263285][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 620.276358][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 620.287286][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 620.299378][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 620.312060][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 620.324150][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 620.335909][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 624.083191][ T5822] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 624.633943][ T5822] Bluetooth: hci3: command tx timeout [ 625.255119][ C1] net_ratelimit: 16615 callbacks suppressed [ 625.255150][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 625.255221][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 625.261542][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 625.274561][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 625.285469][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 625.297686][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 625.309340][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 625.321510][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 625.333203][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 625.347155][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 625.437940][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.455339][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.265047][ C1] net_ratelimit: 15542 callbacks suppressed [ 630.265068][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 630.265226][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 630.271412][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 630.283498][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 630.295293][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 630.309583][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 630.319288][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 630.331418][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 630.343234][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 630.355364][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 635.274871][ C1] net_ratelimit: 16211 callbacks suppressed [ 635.274893][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 635.275021][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 635.281266][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 635.293371][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 635.305319][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 635.318034][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 635.329166][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 635.341930][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 635.353191][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 635.365338][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 640.284894][ C1] net_ratelimit: 16225 callbacks suppressed [ 640.284916][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 640.285891][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 640.291354][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 640.303620][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 640.315337][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 640.327684][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 640.339260][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 640.352461][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 640.363243][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 640.375344][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 645.294945][ C1] net_ratelimit: 16208 callbacks suppressed [ 645.294973][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 645.295164][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 645.301489][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 645.313563][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 645.325340][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 645.338322][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 645.349324][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 645.361411][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 645.373228][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 645.385387][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.796626][ T5822] Bluetooth: hci3: command tx timeout [ 650.305039][ C0] net_ratelimit: 16040 callbacks suppressed [ 650.305063][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 650.305317][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 650.312505][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 650.323434][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 650.335496][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 650.347329][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 650.359378][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 650.371180][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 650.384247][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 650.395258][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 655.314970][ C1] net_ratelimit: 15307 callbacks suppressed [ 655.314993][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 655.315210][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.321352][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 655.333476][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 655.345302][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 655.357401][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.369177][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 655.382105][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.393099][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 655.406083][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 660.324818][ C1] net_ratelimit: 15980 callbacks suppressed [ 660.324839][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 660.325735][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.331176][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 660.343254][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 660.355082][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 660.367218][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.378980][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 660.392017][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.402968][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 660.415035][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 665.335053][ C1] net_ratelimit: 15801 callbacks suppressed [ 665.335073][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.335258][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.341567][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.354094][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 665.365932][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 665.378011][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.389744][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.402831][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.413802][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.425753][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 670.344954][ C1] net_ratelimit: 15356 callbacks suppressed [ 670.344976][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.345349][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.351357][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 670.363438][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 670.375180][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.387394][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.399174][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.412031][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.423100][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 670.435224][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 675.354867][ C1] net_ratelimit: 15756 callbacks suppressed [ 675.354888][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.355536][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.361364][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 675.373415][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 675.385200][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.397395][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.409167][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.422056][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.433024][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 675.445075][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 680.364888][ C1] net_ratelimit: 15662 callbacks suppressed [ 680.364910][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.364965][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.371339][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.384891][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.395251][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 680.407360][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 680.419137][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.431326][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.443145][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.456035][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 684.268564][ T55] Bluetooth: hci3: command tx timeout [ 685.374860][ C1] net_ratelimit: 15721 callbacks suppressed [ 685.374880][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.375038][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 685.381234][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 685.393387][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.405042][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.418327][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.429190][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.442249][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 685.453007][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 685.465166][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.952049][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.896871][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.385040][ C0] net_ratelimit: 16939 callbacks suppressed [ 690.385060][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 690.385081][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.391475][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.403326][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 690.416278][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.427187][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.439382][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 690.451300][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.464029][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.475085][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 694.699580][ T55] Bluetooth: hci3: command tx timeout [ 695.394964][ C1] net_ratelimit: 16984 callbacks suppressed [ 695.394985][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.395152][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.401427][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.413373][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 695.425183][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 695.437339][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.449076][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.462172][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.473256][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.485169][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 700.404982][ C1] net_ratelimit: 15336 callbacks suppressed [ 700.405005][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 700.405270][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.411309][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.424603][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.435543][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.447490][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 700.459268][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 700.471437][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.483216][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.496421][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.579506][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 705.414798][ C0] net_ratelimit: 16129 callbacks suppressed [ 705.414818][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.414936][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.422395][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.433215][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 705.445315][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 705.457037][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.469308][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.481250][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.494660][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.505087][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 710.424887][ C1] net_ratelimit: 15139 callbacks suppressed [ 710.424909][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.425092][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.431572][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.444387][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.455403][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 710.468011][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 710.479356][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.491603][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.503391][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.516316][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.434824][ C0] net_ratelimit: 16220 callbacks suppressed [ 715.434846][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.435328][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.442336][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.453262][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 715.465449][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 715.477176][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.489377][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.501238][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.514187][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.525048][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 720.445157][ C1] net_ratelimit: 18759 callbacks suppressed [ 720.445181][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.445679][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.451662][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 720.463809][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 720.475486][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.487686][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.499502][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.512462][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.523318][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 720.535431][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 725.455163][ C0] net_ratelimit: 18580 callbacks suppressed [ 725.455185][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 725.455226][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.461756][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.473639][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 725.486848][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.497597][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.509763][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 725.521622][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.533559][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.545320][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 730.464848][ C1] net_ratelimit: 17936 callbacks suppressed [ 730.464871][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.465174][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.471225][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 730.484293][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.495139][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.507305][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 730.519222][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.531211][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.542981][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 730.556013][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.475096][ C1] net_ratelimit: 18566 callbacks suppressed [ 735.475119][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.477434][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.481587][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 735.493774][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 735.505541][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.517852][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.529689][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.542658][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.553479][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 735.565618][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 740.484886][ C1] net_ratelimit: 17843 callbacks suppressed [ 740.484914][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.485000][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.491373][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.504349][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.515246][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 740.527329][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 740.539021][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.551285][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.563081][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.576110][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.494764][ C1] net_ratelimit: 18575 callbacks suppressed [ 745.495286][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.500733][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 745.514329][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.525079][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.537148][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 745.548970][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.560970][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.572776][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 745.586028][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.596696][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 747.594913][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.613091][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.504989][ C1] net_ratelimit: 18334 callbacks suppressed [ 750.505010][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 750.505097][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 750.511458][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 750.523673][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 750.535560][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 750.547460][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 750.559224][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 750.572385][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 750.583116][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 750.595342][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 754.664761][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 754.671769][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5904/1:b..l [ 754.680266][ C1] rcu: (detected by 1, t=10503 jiffies, g=46665, q=424 ncpus=2) [ 754.688020][ C1] task:kworker/1:5 state:R running task stack:20328 pid:5904 tgid:5904 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 754.702822][ C1] Workqueue: events send_dm_alert [ 754.707900][ C1] Call Trace: [ 754.711200][ C1] [ 754.714161][ C1] __schedule+0x168f/0x4c70 [ 754.718711][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 754.724037][ C1] ? __pfx___schedule+0x10/0x10 [ 754.728925][ C1] ? netif_rx_internal+0x130/0x560 [ 754.734074][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 754.739408][ C1] preempt_schedule_irq+0xb5/0x150 [ 754.744555][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 754.750321][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 754.756167][ C1] irqentry_exit+0x6f/0x90 [ 754.760614][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 754.766641][ C1] RIP: 0010:lock_acquire+0x175/0x360 [ 754.771962][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 6b 32 d4 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 754.791685][ C1] RSP: 0018:ffffc9000453f398 EFLAGS: 00000206 [ 754.797787][ C1] RAX: a656f8227828e400 RBX: 0000000000000000 RCX: a656f8227828e400 [ 754.805788][ C1] RDX: 0000000000000000 RSI: ffffffff8d9219f6 RDI: ffffffff8bc0ffa0 [ 754.813787][ C1] RBP: ffffffff8171a9f5 R08: 0000000000000000 R09: 0000000000000000 [ 754.821786][ C1] R10: 0000000000000000 R11: ffffffff8171a9f5 R12: 0000000000000002 [ 754.829781][ C1] R13: ffffffff8df3d860 R14: 0000000000000000 R15: 0000000000000246 [ 754.837780][ C1] ? unwind_next_frame+0xa5/0x2390 [ 754.843013][ C1] ? unwind_next_frame+0xa5/0x2390 [ 754.848173][ C1] ? unwind_next_frame+0xa5/0x2390 [ 754.853322][ C1] ? __free_frozen_pages+0xb05/0xcd0 [ 754.858639][ C1] ? unwind_next_frame+0xa5/0x2390 [ 754.863776][ C1] unwind_next_frame+0xc2/0x2390 [ 754.868757][ C1] ? unwind_next_frame+0xa5/0x2390 [ 754.873901][ C1] ? unwind_next_frame+0xa5/0x2390 [ 754.879044][ C1] ? __reset_page_owner+0x71/0x1f0 [ 754.884197][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 754.890378][ C1] arch_stack_walk+0x11c/0x150 [ 754.895178][ C1] ? __free_frozen_pages+0xb05/0xcd0 [ 754.900494][ C1] stack_trace_save+0x9c/0xe0 [ 754.905194][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 754.910606][ C1] save_stack+0xf7/0x1f0 [ 754.914980][ C1] ? __pfx_save_stack+0x10/0x10 [ 754.919867][ C1] ? __free_frozen_pages+0xb05/0xcd0 [ 754.925189][ C1] ? page_ext_put+0x97/0xc0 [ 754.929743][ C1] __reset_page_owner+0x71/0x1f0 [ 754.934728][ C1] __free_frozen_pages+0xb05/0xcd0 [ 754.939878][ C1] __put_partials+0x161/0x1c0 [ 754.944593][ C1] put_cpu_partial+0x17c/0x250 [ 754.949391][ C1] ? put_cpu_partial+0x6d/0x250 [ 754.954274][ C1] __slab_free+0x2f7/0x400 [ 754.958728][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 754.965087][ C1] ? __phys_addr+0xba/0x170 [ 754.969629][ C1] qlist_free_all+0x9a/0x140 [ 754.974261][ C1] kasan_quarantine_reduce+0x148/0x160 [ 754.979768][ C1] __kasan_slab_alloc+0x22/0x80 [ 754.984659][ C1] __kmalloc_node_track_caller_noprof+0x216/0x4e0 [ 754.991115][ C1] ? __alloc_skb+0x142/0x2d0 [ 754.995747][ C1] ? __alloc_skb+0x142/0x2d0 [ 755.000367][ C1] kmalloc_reserve+0x136/0x290 [ 755.005168][ C1] __alloc_skb+0x142/0x2d0 [ 755.009626][ C1] reset_per_cpu_data+0x31/0x1e0 [ 755.014599][ C1] send_dm_alert+0x1f/0xf0 [ 755.019047][ C1] ? process_scheduled_works+0x9ec/0x17a0 [ 755.024806][ C1] process_scheduled_works+0xadb/0x17a0 [ 755.030426][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 755.036463][ C1] worker_thread+0x8a0/0xda0 [ 755.041102][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 755.047468][ C1] ? __kthread_parkme+0x7b/0x200 [ 755.052448][ C1] kthread+0x70e/0x8a0 [ 755.056556][ C1] ? __pfx_worker_thread+0x10/0x10 [ 755.061704][ C1] ? __pfx_kthread+0x10/0x10 [ 755.066328][ C1] ? __pfx_kthread+0x10/0x10 [ 755.070951][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 755.076178][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 755.081409][ C1] ? __pfx_kthread+0x10/0x10 [ 755.086029][ C1] ret_from_fork+0x4b/0x80 [ 755.090465][ C1] ? __pfx_kthread+0x10/0x10 [ 755.095083][ C1] ret_from_fork_asm+0x1a/0x30 [ 755.099904][ C1] [ 755.102946][ C1] rcu: rcu_preempt kthread starved for 614 jiffies! g46665 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 755.113993][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 755.123984][ C1] rcu: RCU grace-period kthread stack dump: [ 755.129888][ C1] task:rcu_preempt state:R running task stack:27304 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 755.143424][ C1] Call Trace: [ 755.146727][ C1] [ 755.149687][ C1] __schedule+0x168f/0x4c70 [ 755.154234][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 755.159478][ C1] ? schedule+0x165/0x360 [ 755.163840][ C1] ? __pfx___schedule+0x10/0x10 [ 755.168731][ C1] ? schedule+0x91/0x360 [ 755.172999][ C1] schedule+0x165/0x360 [ 755.177184][ C1] schedule_timeout+0x12b/0x270 [ 755.182066][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 755.187475][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 755.193396][ C1] ? __pfx_process_timeout+0x10/0x10 [ 755.198741][ C1] ? prepare_to_swait_event+0x341/0x380 [ 755.204344][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 755.209239][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 755.214487][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 755.219451][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 755.225674][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 755.230993][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 755.236225][ C1] ? finish_swait+0xcd/0x1f0 [ 755.240852][ C1] rcu_gp_kthread+0x99/0x390 [ 755.245476][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 755.250705][ C1] ? __kthread_parkme+0x7b/0x200 [ 755.255666][ C1] ? __kthread_parkme+0x1a1/0x200 [ 755.260720][ C1] kthread+0x70e/0x8a0 [ 755.264819][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 755.270043][ C1] ? __pfx_kthread+0x10/0x10 [ 755.274667][ C1] ? __pfx_kthread+0x10/0x10 [ 755.279286][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 755.284506][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 755.289732][ C1] ? __pfx_kthread+0x10/0x10 [ 755.294348][ C1] ret_from_fork+0x4b/0x80 [ 755.298790][ C1] ? __pfx_kthread+0x10/0x10 [ 755.303418][ C1] ret_from_fork_asm+0x1a/0x30 [ 755.308229][ C1] [ 755.311272][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 755.317633][ C1] Sending NMI from CPU 1 to CPUs 0: [ 755.322883][ C0] NMI backtrace for cpu 0 [ 755.322899][ C0] CPU: 0 UID: 0 PID: 5962 Comm: kworker/u8:9 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 755.322925][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 755.322939][ C0] Workqueue: wg-kex-wg0 wg_packet_handshake_send_worker [ 755.322966][ C0] RIP: 0010:kasan_check_range+0x0/0x2b0 [ 755.322991][ C0] Code: 48 c7 c6 d0 2b 92 8d e8 1e 59 e5 ff 90 0f 0b cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 b0 01 48 85 f6 0f 84 b8 01 00 00 55 41 57 41 56 41 55 [ 755.323004][ C0] RSP: 0018:ffffc90000006cb0 EFLAGS: 00000246 [ 755.323016][ C0] RAX: 1ffff92000000dbc RBX: 0000000000000010 RCX: ffffffff8171b5e8 [ 755.323027][ C0] RDX: 0000000000000001 RSI: 0000000000000010 RDI: ffffc90000006df8 [ 755.323037][ C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000000 [ 755.323046][ C0] R10: 0000000000000000 R11: ffffffff8171a9f5 R12: ffffc90000007600 [ 755.323056][ C0] R13: ffffc90000006df8 R14: ffffc90000006df8 R15: ffffc90000006df0 [ 755.323068][ C0] FS: 0000000000000000(0000) GS:ffff8881260fb000(0000) knlGS:0000000000000000 [ 755.323080][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 755.323090][ C0] CR2: 00007f64b7fc31b0 CR3: 0000000051ddc000 CR4: 00000000003526f0 [ 755.323104][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 755.323112][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 755.323122][ C0] Call Trace: [ 755.323128][ C0] [ 755.323133][ C0] __asan_memset+0x22/0x50 [ 755.323152][ C0] unwind_next_frame+0xc98/0x2390 [ 755.323173][ C0] ? unwind_next_frame+0xa5/0x2390 [ 755.323189][ C0] ? br_nf_pre_routing_finish_ipv6+0x948/0xd00 [ 755.323209][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 755.323225][ C0] arch_stack_walk+0x11c/0x150 [ 755.323246][ C0] ? br_nf_pre_routing_ipv6+0x37e/0x6b0 [ 755.323264][ C0] stack_trace_save+0x9c/0xe0 [ 755.323278][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 755.323298][ C0] kasan_save_track+0x3e/0x80 [ 755.323316][ C0] ? kasan_save_track+0x3e/0x80 [ 755.323334][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 755.323353][ C0] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 755.323374][ C0] ? skb_clone+0x212/0x3a0 [ 755.323412][ C0] ? br_flood+0x414/0x6a0 [ 755.323434][ C0] ? br_handle_frame_finish+0x146c/0x1950 [ 755.323448][ C0] ? br_nf_hook_thresh+0x3bf/0x490 [ 755.323472][ C0] ? br_nf_pre_routing_finish_ipv6+0x948/0xd00 [ 755.323521][ C0] __kasan_slab_alloc+0x6c/0x80 [ 755.323544][ C0] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 755.323566][ C0] ? skb_clone+0x212/0x3a0 [ 755.323589][ C0] skb_clone+0x212/0x3a0 [ 755.323612][ C0] br_flood+0x414/0x6a0 [ 755.323639][ C0] br_handle_frame_finish+0x146c/0x1950 [ 755.323661][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 755.323683][ C0] ? ip6t_do_table+0x1db/0x1530 [ 755.323702][ C0] ? nf_hook_slow+0x176/0x220 [ 755.323718][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 755.323733][ C0] br_nf_hook_thresh+0x3bf/0x490 [ 755.323763][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 755.323789][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 755.323803][ C0] ? nf_nat_ipv6_in+0x1fc/0x2b0 [ 755.323831][ C0] br_nf_pre_routing_finish_ipv6+0x948/0xd00 [ 755.323847][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 755.323867][ C0] ? br_nf_pre_routing_ipv6+0x42f/0x6b0 [ 755.323884][ C0] br_nf_pre_routing_ipv6+0x37e/0x6b0 [ 755.323902][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 755.323920][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 755.323936][ C0] ? br_nf_pre_routing+0x720/0x1470 [ 755.323965][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 755.323989][ C0] br_handle_frame+0x97f/0x14c0 [ 755.324009][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 755.324023][ C0] ? rcu_lockdep_current_cpu_online+0x37/0x120 [ 755.324041][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 755.324054][ C0] ? __pfx_rcu_read_lock_bh_held+0x10/0x10 [ 755.324083][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 755.324098][ C0] __netif_receive_skb_core+0x10de/0x4180 [ 755.324127][ C0] ? ip6_input+0x23/0x270 [ 755.324148][ C0] ? ip6_mc_input+0x79a/0xbe0 [ 755.324174][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 755.324199][ C0] ? ip6_rcv_finish+0x29a/0x2d0 [ 755.324219][ C0] ? NF_HOOK+0x309/0x3a0 [ 755.324236][ C0] ? skb_orphan+0xaf/0xd0 [ 755.324264][ C0] ? process_backlog+0x2d5/0x14f0 [ 755.324281][ C0] ? process_backlog+0x2d5/0x14f0 [ 755.324299][ C0] __netif_receive_skb+0x72/0x380 [ 755.324316][ C0] ? process_backlog+0x2d5/0x14f0 [ 755.324333][ C0] process_backlog+0x60e/0x14f0 [ 755.324357][ C0] ? __pfx_process_backlog+0x10/0x10 [ 755.324378][ C0] __napi_poll+0xc4/0x480 [ 755.324391][ C0] ? net_rx_action+0x447/0xdf0 [ 755.324409][ C0] net_rx_action+0x6ea/0xdf0 [ 755.324424][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 755.324450][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 755.324485][ C0] handle_softirqs+0x283/0x870 [ 755.324515][ C0] ? do_softirq+0xec/0x180 [ 755.324540][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 755.324566][ C0] ? kernel_fpu_end+0xc8/0x120 [ 755.324587][ C0] do_softirq+0xec/0x180 [ 755.324609][ C0] [ 755.324614][ C0] [ 755.324620][ C0] ? __pfx_do_softirq+0x10/0x10 [ 755.324642][ C0] ? __pfx_do_softirq+0x10/0x10 [ 755.324668][ C0] ? lockdep_softirqs_on+0x13b/0x1c0 [ 755.324689][ C0] __local_bh_enable_ip+0x17d/0x1c0 [ 755.324713][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 755.324740][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 755.324762][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 755.324790][ C0] kernel_fpu_end+0xd2/0x120 [ 755.324810][ C0] ? __pfx_kernel_fpu_end+0x10/0x10 [ 755.324830][ C0] ? kernel_fpu_end+0xd2/0x120 [ 755.324850][ C0] ? __pfx_kernel_fpu_end+0x10/0x10 [ 755.324874][ C0] blake2s_compress+0x5f/0xd0 [ 755.324895][ C0] blake2s_update+0x14b/0x450 [ 755.324918][ C0] hmac+0x288/0x330 [ 755.324935][ C0] ? __pfx_hmac+0x10/0x10 [ 755.324972][ C0] kdf+0x105/0x270 [ 755.324989][ C0] ? __pfx_kdf+0x10/0x10 [ 755.325018][ C0] wg_noise_handshake_create_initiation+0x2f0/0x7e0 [ 755.325041][ C0] ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10 [ 755.325063][ C0] ? __lock_acquire+0xaac/0xd20 [ 755.325087][ C0] ? ktime_get_coarse_with_offset+0x83/0x140 [ 755.325108][ C0] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 755.325123][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 755.325140][ C0] ? ktime_get_coarse_with_offset+0x83/0x140 [ 755.325156][ C0] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 755.325175][ C0] ? __lock_acquire+0xaac/0xd20 [ 755.325199][ C0] ? ktime_get_coarse_with_offset+0xfb/0x140 [ 755.325217][ C0] wg_packet_handshake_send_worker+0x163/0x320 [ 755.325238][ C0] ? register_lock_class+0x51/0x320 [ 755.325262][ C0] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 755.325310][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 755.325326][ C0] ? process_scheduled_works+0x9ec/0x17a0 [ 755.325349][ C0] ? process_scheduled_works+0x9ec/0x17a0 [ 755.325373][ C0] process_scheduled_works+0xadb/0x17a0 [ 755.325411][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 755.325461][ C0] worker_thread+0x8a0/0xda0 [ 755.325488][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 755.325515][ C0] ? __kthread_parkme+0x7b/0x200 [ 755.325536][ C0] kthread+0x70e/0x8a0 [ 755.325555][ C0] ? __pfx_worker_thread+0x10/0x10 [ 755.325579][ C0] ? __pfx_kthread+0x10/0x10 [ 755.325596][ C0] ? __pfx_kthread+0x10/0x10 [ 755.325612][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 755.325628][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 755.325646][ C0] ? __pfx_kthread+0x10/0x10 [ 755.325663][ C0] ret_from_fork+0x4b/0x80 [ 755.325677][ C0] ? __pfx_kthread+0x10/0x10 [ 755.325694][ C0] ret_from_fork_asm+0x1a/0x30 [ 755.325727][ C0] [ 755.524990][ C1] net_ratelimit: 16413 callbacks suppressed [ 755.525011][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.526499][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.531152][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 755.537391][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.541769][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.546406][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 755.550620][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.556458][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.561389][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 755.568735][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 760.535042][ C1] net_ratelimit: 15060 callbacks suppressed [ 760.535064][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 760.535140][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 760.541433][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 760.553754][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 760.565555][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 760.577593][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 760.589319][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:8c:26:54:7f:53, vlan:0) [ 760.602448][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 760.613214][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 760.625431][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)