last executing test programs: 3m45.982375294s ago: executing program 0 (id=1224): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd0b, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x2e, 0x2, {0x1, 0x8, 0x40}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x808}, 0x800) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 3m45.623633119s ago: executing program 0 (id=1226): mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x118, 0x29, 0x4, {0x4, 0x1f, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x9, "e80ee304ecb784ec46"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x148, 0x29, 0x36, {0x5e, 0x25, '\x00', [@generic={0xff, 0x23, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xc0, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e8"}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0x8000]}}, @generic={0x1, 0x4, "2bdb86d1"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x2f8}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3m45.187162574s ago: executing program 0 (id=1228): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000880) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETS(r2, 0x5402, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e21, 0x3, @loopback, 0x400014}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc895d8eb00066c2", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r1, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 3m42.065340372s ago: executing program 0 (id=1244): epoll_create1(0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x2008800, &(0x7f00000010c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000082c0)="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", 0x2000, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0xb, {0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xfffffffe, 0x30004004, 0x0, 0xfffe, 0x6, 0xfffffffe, 0x0, 0x0, 0x1, 0x100}}, 0x50) close(0x3) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0xaa24, 0xc000, 0x3, 0x1fa}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r2, 0x6633, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) close(r0) 3m41.089897972s ago: executing program 0 (id=1249): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x14000, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x387c02, 0x0) r3 = open(0x0, 0x60840, 0x0) fsopen(&(0x7f0000000000)='overlay\x00', 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000180)=@x86={0x3, 0x5, 0x81, 0x0, 0x9, 0xe, 0x5, 0x2, 0x1, 0x1, 0x6, 0x5, 0x0, 0x1af2, 0x3, 0x8, 0xf, 0xf4, 0x9, '\x00', 0x5, 0x8}) set_mempolicy(0x2, &(0x7f0000000000)=0x4000000ffb, 0x1000000000008) io_setup(0x10000, &(0x7f00000014c0)) 3m40.60373921s ago: executing program 0 (id=1263): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000680)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000940)=ANY=[], 0x0, 0x0}) 3m40.03203034s ago: executing program 32 (id=1263): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000680)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000940)=ANY=[], 0x0, 0x0}) 1m31.971506042s ago: executing program 5 (id=1696): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x9, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0x1, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 1m31.23426092s ago: executing program 5 (id=1702): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000000)='source', 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) sendfile(r3, r3, 0x0, 0x200000) r4 = syz_pidfd_open(r2, 0x0) setns(r4, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) syz_open_dev$mtd(0x0, 0x260c, 0xa02) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) sched_setattr(0x0, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x18, {"a2e3ad21ed6b52f99cfbf4c087f70c9b3e6ee7ff7fc6e5539b9b3b0e8b9b411b5d30091b080d29428f0e1ac6e7049b3468959b4c9a242a9b67f3988f7ef319520100ffe8d178708c523c921b1b25380a169b63d336cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x100d}}, 0xfffffdef) 1m28.24166775s ago: executing program 5 (id=1709): socket$netlink(0x10, 0x3, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x8, 0x2d, &(0x7f0000000280)=""/45, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfef8, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100015ae4c41096050100f5050100030109021b0001000000000904d60001b5e14500090583"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000008c0)={0x34, &(0x7f0000000500)={0x20, 0x0, 0x10, "025b8c6f2261832b1a8d801657547f59"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x4000080) 1m27.75621824s ago: executing program 5 (id=1710): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0x3, 0x2) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x81, 0x9, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x2b, 0xfe}}}}}]}}]}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x37b9, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) 1m25.305408902s ago: executing program 1 (id=1716): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0xa00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_clone3(&(0x7f0000000480)={0x800, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x5}, &(0x7f00000002c0)=""/65, 0x41, &(0x7f0000000340)=""/105, &(0x7f0000000440)=[0x0], 0x1}, 0x58) sched_setattr(r4, &(0x7f0000000500)={0x38, 0x0, 0x24, 0x80000000, 0xc19, 0x7, 0x7, 0x8, 0xd, 0x8}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xe42, 0x9, 0xfffffffffffffffb, 0x5, 0x10000, 0x3, 0x4002004c2, 0x100000007ff, 0x1, 0x0, 0x10000000000400, 0x80, 0x8b, 0x0, 0x8, 0x8b], 0x58000, 0x240046}) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r7 = memfd_secret(0x80000) r8 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r8, 0xc0d05604, &(0x7f00000001c0)={0x1, @meta={0x54505356, 0x1dad0a13, 0x4fdb, 0xec20, 0x35334504}}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r7, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="003179000000fd50"], 0x0, 0x0}) 1m24.083160521s ago: executing program 3 (id=1718): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f00000000c0)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)={0xc7, 0x0, 0x1}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1m24.034381324s ago: executing program 2 (id=1719): r0 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r1 = dup(r0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x78) r2 = fanotify_init(0x200, 0x1000) r3 = dup(0xffffffffffffffff) fanotify_mark(r2, 0x1, 0x48001028, r3, 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x1a2c42) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001ac0)={r4, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1ff, 0x0, 0x0, 0x1a, 0x1c, "3384020bbe82b398000000000000000000001d0ec0c1b4e9b1c4369d03740100ceaac594b3d6d741dd17c1c50d38ef2a565ef1e80000000058966500", "a9103939c787a16c1ca4f837026d1a8554feac911e1cd130e04d528539f3d3289737f0374c72a964a02447a75df8a6ca7f040000000000000072fd29f35239d2", "24431a1e77a68e174f00", [0x9, 0x400]}}) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) socket(0x40000000015, 0x5, 0x0) fcntl$setstatus(r6, 0x4, 0xc000) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106, 0xa}}, 0x20) r7 = socket$netlink(0x10, 0x3, 0x4) unshare(0xa020480) fallocate(0xffffffffffffffff, 0x3, 0x10003, 0x2d22) writev(r7, &(0x7f0000000300), 0x0) 1m23.737565519s ago: executing program 3 (id=1720): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4004) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000400), 0x7, 0x2) socket$inet(0x2, 0x80001, 0x84) listen(r1, 0x6) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r3, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) write$sysctl(r3, &(0x7f00000000c0)='2\x00', 0x2) 1m23.737166897s ago: executing program 4 (id=1721): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8f"], 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x1e0, 0x78, 0x180, 0x0, 0x4, 0x2, {0x0, 0x9}, {0x350, 0x20002, 0xffffffff}, {0x10, 0x300}, {0x4, 0x4000000}, 0x1, 0x100, 0x2, 0xd614, 0x1, 0x0, 0x2, 0xfffffffe, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) sync() write$binfmt_aout(r4, 0x0, 0xffffffdb) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x20, 0x1, 0x3, 0x401, 0x0, 0x0, {0x1}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x4004840) r5 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x2710, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x34b130198900281b, 0x0, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r6, &(0x7f0000000000)=@other={'trylock', ' ', 'none'}, 0xd) 1m23.400629981s ago: executing program 2 (id=1722): bind$unix(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x1694, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000340), 0x1, 0x80) ioctl$SNDRV_PCM_IOCTL_UNLINK(r1, 0x4161, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x3, 0x0, 0x0, 0x0) 1m22.17245316s ago: executing program 1 (id=1723): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x240, 0x0) close(r1) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000001c80)) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff2, 0x10f204d33bba3dde}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x10008040) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x80) 1m21.801037465s ago: executing program 1 (id=1724): socket(0x1e, 0x1, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f0000002340)={0x178, 0x0, r1, [{0x0, 0x2, 0x14f, 0x3, '/>\rv/cuse\x00\xe5\xec\xd8\x0f\xddP\x02\x1bn\xb8\xde|\x92zQC*\xaf=\xff\x01$\xeeW=?\xc3\x94~\xf0\xdanT\xb1\xf1)\xe6\x98\x83\x85P\xa7\x85R\xf3\xe5\x12TkR\xe45\xd1\xd6\x89/i(\x1e]\x8f\xc8\xfd\xf9L\xc9\xf3W\x1e(\x04\x16j\r\x9as\x87\xdb\xff\x13\"YL\xe5\xbdQ]\xb2\xebG+\xde\"\xe5F\xd8\xe0N\x03\xae\t\xb9\xb1M\x14b\n!\xab:c\x9c\xc8\x9f\xd8\x80\xed\x1bao$W\x14Y\f\xf34Q\x05\xd1\xe9\xcaLz\xd6\x90\xfe\x99\x8f\x88m\x01\xeb\x88\xe0\x00>2\xa2\x93\x89a\"\xeb\xee V\xad\xc4|\xff#\xday\x18\xef\x80S\x97\x18io\xe5L\xe5\xce\x1c\xe0\x94\xa28\x869\xd4I\xff\xe8\xdc\xa5\xd1\xae\x9e\xc3\x87\xc5[\xa5<\a^\xceQ\xce\xd3>\x94nH\x0fw\xa0\xdd\xd7\'0K\x0eV\xc6,\x86\xb9${\\\x9dd\x7f\x8d\x1b\x0f\x01+\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\xd9L\xd0P\xa7\xf4\xbf\x92t|%\xcd\x16\x80\x1cI\x9f\xb8\xe8\x9eO\xd8\x18\xd9\xe4K\bu\tG\xec\xc2\xcf\xc7\xaa|\xdcQ\xfcU\x0e\xcb\x9cDv\x85F\x89\xdd,*p\xe1(o9\xd0{u\xe1\xf6\xba[\xa7\xe8\xb5\xa8\x91\xb2\xe9gI\x1d\xc1P\xcc\xcdYV'}]}, 0x178) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) memfd_create(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x1, 0x0, 0x0, 0xb5b, 0x9, 0xfffffffffffffff7, 0x1ff, 0x3e}, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioprio_set$pid(0x2, 0x0, 0x0) syz_ublk_setup_queues(r8, r6, &(0x7f0000002280)={0x0, 0x1, 0x100, 0x3, 0x254}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffd, 0x40000, 0x1, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x80000, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0xfffffffe, 0x363}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004900)={0x2020}, 0x2081) 1m21.408593826s ago: executing program 2 (id=1725): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) io_uring_setup(0x1858, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x19, &(0x7f0000000000)=""/218, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x30, 0x3, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x800) socket$kcm(0x10, 0x400000002, 0x0) 1m21.093633925s ago: executing program 4 (id=1726): bind$unix(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x1694, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000340), 0x1, 0x80) ioctl$SNDRV_PCM_IOCTL_UNLINK(r1, 0x4161, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x3, 0x0, 0x0, 0x0) 1m20.471796919s ago: executing program 1 (id=1727): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4000040) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000140)=""/191) fcntl$lock(0xffffffffffffffff, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x2, 0x4) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) shutdown(r1, 0x1) recvfrom$inet(r1, 0x0, 0x0, 0x720, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) fchown(0xffffffffffffffff, 0x0, 0x0) 1m20.362173802s ago: executing program 2 (id=1728): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newtfilter={0x9c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x68, 0x2, [@TCA_MATCHALL_ACT={0x64, 0x2, [@m_simple={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x40, 0x9, 0x6, 0xb, 0x7}}, @TCA_DEF_DATA={0x18, 0x3, 'bas]\x90\xa3\xaa9o\xcf\x82>\xe2\xfc\xd1Q/ic\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m20.154890623s ago: executing program 2 (id=1729): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) request_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)='[-/}\x00', 0xfffffffffffffffc) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b40)={0x2c, &(0x7f00000008c0)={0x20, 0x31}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1m19.970320797s ago: executing program 3 (id=1730): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x11, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e22, 0x1, @private0, 0x8}, 0x1c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000002380)="c744240000000080c744240200000000c7442406000000000f011424b9a90900000f320f32c744240005000000c744240200000100c7442406000000000f01142448b802000000000000000f23d80f21f835400000a00f23f866b806018ec067430f01c248b800180000000000000f23d80f21f835800000100f23f82e0f1c440a0966b89a008ee0", 0x88}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="85", 0x1}], 0x1}}], 0x1, 0x40880c0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r6, 0x4068aea3, &(0x7f00000002c0)={0xbc, 0x0, 0x2}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m18.958905901s ago: executing program 5 (id=1710): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0x3, 0x2) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x81, 0x9, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x2b, 0xfe}}}}}]}}]}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x37b9, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) 1m18.803679973s ago: executing program 3 (id=1731): bind$unix(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x1694, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000340), 0x1, 0x80) ioctl$SNDRV_PCM_IOCTL_UNLINK(r1, 0x4161, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x3, 0x0, 0x0, 0x0) 1m18.664941929s ago: executing program 4 (id=1732): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xe) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000580)='m'}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0xc0002003}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 1m18.459775309s ago: executing program 4 (id=1733): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x10001}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048024}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x5, 0x5, 0xfffffdff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m18.083484456s ago: executing program 4 (id=1734): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x240, 0x0) close(r1) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000001c80)) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff2, 0x10f204d33bba3dde}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x10008040) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x80) 1m17.846987136s ago: executing program 4 (id=1735): bind$unix(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x1694, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000340), 0x1, 0x80) ioctl$SNDRV_PCM_IOCTL_UNLINK(r1, 0x4161, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x3, 0x0, 0x0, 0x0) 1m17.152109953s ago: executing program 1 (id=1736): openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1020082, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x3, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x1, 0x0, 0xfc0, 0x66, 0x0, 0x5, 0x11, 0x0, @remote, @multicast2}, {0x4e23, 0x4e21, 0xfac, 0x0, @gue={{0x2, 0x1, 0x0, 0x38}, "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"}}}}, 0xfce) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f00003b6000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000173000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1e64, &(0x7f0000000040)={0x0, 0xc899, 0xc000, 0x1, 0x65}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m16.745656875s ago: executing program 1 (id=1737): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r4, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f00000000c0)="fc", 0x7}]) 1m16.745114643s ago: executing program 3 (id=1738): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x240408a0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x5, 0x5, 0xfffffdff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0xffff, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m16.616183293s ago: executing program 2 (id=1739): r0 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) recvmsg$kcm(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x102) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@RTM_GETNSID={0x14, 0x5a, 0x200, 0x2070bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000801) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) syz_emit_ethernet(0x143, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8840}, 0x8000) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x4, 0x1}, {0x4f, 0x1}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) write$UHID_INPUT(r4, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 1m16.553085432s ago: executing program 3 (id=1740): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) epoll_wait(r0, &(0x7f0000000040)=[{}, {}, {}], 0x3, 0x4d0d) bind$xdp(0xffffffffffffffff, &(0x7f0000000340)={0x2c, 0x20, 0x0, 0xb}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 1m16.291416316s ago: executing program 5 (id=1741): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r0, 0x1000) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r2, &(0x7f0000000040)=@hat={'changehat '}, 0x1d) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'ipvlan1\x00'}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x24000000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), r4) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x38, r5, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x18}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x4) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f00000002c0)={'bridge0\x00', &(0x7f0000000340)=@ethtool_regs={0x4, 0x0, 0x1b, "aede62497cf56c9ab5bfd7b842f6b7ea6b8579d27d9c47d7da09f5"}}) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readlinkat(r6, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa) statx(r6, &(0x7f0000000200)='./file0\x00', 0x800, 0x2, &(0x7f0000000380)) r7 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x3, {0x8000, 0xffffffff, 0x4, 0x2}}) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 33 (id=1741): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r0, 0x1000) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r2, &(0x7f0000000040)=@hat={'changehat '}, 0x1d) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'ipvlan1\x00'}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x24000000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), r4) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x38, r5, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x18}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x4) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f00000002c0)={'bridge0\x00', &(0x7f0000000340)=@ethtool_regs={0x4, 0x0, 0x1b, "aede62497cf56c9ab5bfd7b842f6b7ea6b8579d27d9c47d7da09f5"}}) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readlinkat(r6, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa) statx(r6, &(0x7f0000000200)='./file0\x00', 0x800, 0x2, &(0x7f0000000380)) r7 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x3, {0x8000, 0xffffffff, 0x4, 0x2}}) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): x15f/0x270 [ 461.620575][T10818] __vmalloc_node_range_noprof+0x12c/0x1730 [ 461.620606][T10818] ? rcu_is_watching+0x15/0xb0 [ 461.620642][T10818] ? trace_contention_end+0x3d/0x140 [ 461.620667][T10818] ? __mutex_lock+0x30d/0x1550 [ 461.620705][T10818] ? tomoyo_path_number_perm+0x219/0x5f0 [ 461.620743][T10818] ? tomoyo_path_number_perm+0x219/0x5f0 [ 461.620774][T10818] ? dvb_dvr_do_ioctl+0x76/0x220 [ 461.620804][T10818] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 461.620831][T10818] ? do_vfs_ioctl+0x116f/0x1530 [ 461.620875][T10818] ? dvb_dvr_do_ioctl+0x12b/0x220 [ 461.620900][T10818] vmalloc_noprof+0xb2/0xe0 [ 461.620925][T10818] ? dvb_dvr_do_ioctl+0x12b/0x220 [ 461.620950][T10818] dvb_dvr_do_ioctl+0x12b/0x220 [ 461.620979][T10818] dvb_usercopy+0x199/0x2e0 [ 461.621013][T10818] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 461.621037][T10818] ? __pfx_dvb_usercopy+0x10/0x10 [ 461.621085][T10818] ? __fget_files+0x3a2/0x420 [ 461.621112][T10818] ? __fget_files+0x2a/0x420 [ 461.621144][T10818] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 461.621169][T10818] dvb_dvr_ioctl+0x29/0x40 [ 461.621194][T10818] __se_sys_ioctl+0xfc/0x170 [ 461.621215][T10818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.621241][T10818] do_syscall_64+0x174/0x580 [ 461.621270][T10818] ? trace_irq_disable+0x3b/0x140 [ 461.621299][T10818] ? clear_bhb_loop+0x40/0x90 [ 461.621327][T10818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.621350][T10818] RIP: 0033:0x7f908fd9de59 [ 461.621371][T10818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.621390][T10818] RSP: 002b:00007f9090cc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 461.621416][T10818] RAX: ffffffffffffffda RBX: 00007f9090025fa0 RCX: 00007f908fd9de59 [ 461.621433][T10818] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000004 [ 461.621447][T10818] RBP: 00007f908fe33e6f R08: 0000000000000000 R09: 0000000000000000 [ 461.621461][T10818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 461.621474][T10818] R13: 00007f9090026038 R14: 00007f9090025fa0 R15: 00007f909014fa48 [ 461.621509][T10818] [ 461.621549][T10818] Mem-Info: [ 461.925444][T10822] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1472'. [ 461.939973][T10818] active_anon:7241 inactive_anon:1 isolated_anon:0 [ 461.939973][T10818] active_file:2 inactive_file:43606 isolated_file:0 [ 461.939973][T10818] unevictable:768 dirty:343 writeback:0 [ 461.939973][T10818] slab_reclaimable:9331 slab_unreclaimable:105454 [ 461.939973][T10818] mapped:33680 shmem:1945 pagetables:1498 [ 461.939973][T10818] sec_pagetables:0 bounce:0 [ 461.939973][T10818] kernel_misc_reclaimable:0 [ 461.939973][T10818] free:1314954 free_pcp:9788 free_cma:0 [ 462.011828][T10818] Node 0 active_anon:29000kB inactive_anon:4kB active_file:8kB inactive_file:174088kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:134584kB dirty:1436kB writeback:0kB shmem:6228kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13852kB pagetables:5936kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 462.072842][T10818] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:344kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 462.131690][T10818] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 462.162217][T10818] lowmem_reserve[]: 0 2489 2489 2489 2489 [ 462.170688][T10818] Node 0 DMA32 free:1291112kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29000kB inactive_anon:4kB active_file:8kB inactive_file:174088kB unevictable:1536kB writepending:1436kB zspages:0kB present:3129332kB managed:2548772kB mlocked:0kB bounce:0kB free_pcp:38740kB local_pcp:20592kB free_cma:0kB [ 462.218434][T10818] lowmem_reserve[]: 0 0 0 0 0 [ 462.223897][T10818] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:264kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 462.254542][T10818] lowmem_reserve[]: 0 0 0 0 0 [ 462.259490][T10818] Node 1 Normal free:3953224kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:344kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 462.292371][T10818] lowmem_reserve[]: 0 0 0 0 0 [ 462.298539][T10818] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 462.312265][T10818] Node 0 DMA32: 156*4kB (M) 465*8kB (UME) 395*16kB (ME) 333*32kB (UME) 91*64kB (UME) 63*128kB (UME) 45*256kB (M) 34*512kB (ME) 24*1024kB (ME) 1*2048kB (E) 293*4096kB (UM) = 1290888kB [ 462.331078][T10818] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 462.343117][T10818] Node 1 Normal: 2*4kB (U) 8*8kB (U) 12*16kB (UM) 10*32kB (UM) 8*64kB (UM) 6*128kB (UM) 5*256kB (UM) 7*512kB (UM) 4*1024kB (UM) 5*2048kB (UM) 960*4096kB (UM) = 3953224kB [ 462.361533][T10818] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 462.384167][T10818] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 462.394260][T10818] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 462.405063][T10818] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 462.415541][T10818] 45548 total pagecache pages [ 462.420432][T10818] 1 pages in swap cache [ 462.424957][T10818] Free swap = 124992kB [ 462.429848][T10818] Total swap = 124996kB [ 462.434434][T10818] 2097051 pages RAM [ 462.438395][T10818] 0 pages HighMem/MovableOnly [ 462.443559][T10818] 428177 pages reserved [ 462.448235][T10818] 0 pages cma reserved [ 462.472727][ T809] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 462.633204][ T809] usb 4-1: Using ep0 maxpacket: 16 [ 462.640560][ T809] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 462.656109][ T809] usb 4-1: config 0 has no interface number 0 [ 462.662405][ T809] usb 4-1: config 0 interface 255 has no altsetting 0 [ 462.673738][ T809] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 462.683156][ T809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.711173][ T809] usb 4-1: Product: syz [ 462.715608][ T809] usb 4-1: Manufacturer: syz [ 462.720300][ T809] usb 4-1: SerialNumber: syz [ 462.741795][ T809] usb 4-1: config 0 descriptor?? [ 462.750265][ T809] ums-onetouch 4-1:0.255: USB Mass Storage device detected [ 463.356075][T10836] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 465.849900][T10824] vlan2: entered allmulticast mode [ 465.895098][T10824] bridge2: entered allmulticast mode [ 465.921356][T10826] bridge2: port 1(erspan0) entered blocking state [ 465.950691][T10826] bridge2: port 1(erspan0) entered disabled state [ 465.975780][T10826] erspan0: entered allmulticast mode [ 466.001965][T10826] erspan0: entered promiscuous mode [ 466.025042][T10826] bridge2: port 1(erspan0) entered blocking state [ 466.031701][T10826] bridge2: port 1(erspan0) entered forwarding state [ 466.084790][T10827] bridge2: port 1(erspan0) entered disabled state [ 466.139922][T10827] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.149781][T10827] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.217597][T10827] bridge0: port 3(macvlan3) entered disabled state [ 466.224809][ T48] bond1: (slave ip6gretap1): link status up again after 0 ms [ 466.256349][ T35] bond1: (slave ip6gretap1): link status up again after 0 ms [ 466.278714][ T35] bond2: (slave ip6gretap2): link status up again after 0 ms [ 466.287694][ T48] bond1: (slave ip6gretap1): link status up again after 0 ms [ 466.303508][ T48] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 466.333131][ T35] bond2: (slave ip6gretap2): link status up again after 0 ms [ 466.347445][ T42] usb 4-1: USB disconnect, device number 36 [ 466.366973][ T35] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 466.445293][ T48] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 466.468214][T10853] syzkaller0: entered promiscuous mode [ 466.475659][T10853] syzkaller0: entered allmulticast mode [ 466.991093][ T5728] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 467.144587][ T5815] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 467.169302][ T14] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 467.183767][ T5728] usb 3-1: unable to get BOS descriptor or descriptor too short [ 467.208098][ T5728] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 8 [ 467.231966][ T5728] usb 3-1: New USB device found, idVendor=0582, idProduct=004d, bcdDevice= 0.40 [ 467.243435][ T5728] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.269445][ T5728] usb 3-1: Product: syz [ 467.292760][ T5728] usb 3-1: Manufacturer: syz [ 467.311515][ T5728] usb 3-1: SerialNumber: syz [ 467.332011][T10863] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 467.658570][ T5728] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 467.679143][ T5728] usb 3-1: invalid MIDI in EP 0 [ 468.037568][ T5728] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 468.092114][ T5728] usb 3-1: USB disconnect, device number 36 [ 468.198742][ T5698] udevd[5698]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 468.252825][T10885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1489'. [ 468.374256][T10886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1489'. [ 468.430886][T10886] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1489'. [ 468.606541][T10888] loop4: detected capacity change from 0 to 2640 [ 468.641332][T10888] buffer_io_error: 6 callbacks suppressed [ 468.641353][T10888] Buffer I/O error on dev loop4, logical block 0, async page read [ 468.705797][T10891] Buffer I/O error on dev loop4, logical block 73, async page read [ 468.732778][ T42] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 468.747503][T10888] Buffer I/O error on dev loop4, logical block 0, async page read [ 468.782420][T10891] Buffer I/O error on dev loop4, logical block 73, async page read [ 468.812904][T10888] Buffer I/O error on dev loop4, logical block 0, async page read [ 468.841939][T10888] Buffer I/O error on dev loop4, logical block 0, async page read [ 468.905174][ T42] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.938712][ T42] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 468.958141][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.968169][T10896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.986464][T10888] Buffer I/O error on dev loop4, logical block 0, async page read [ 469.009301][ T42] usb 5-1: Product: syz [ 469.015844][ T42] usb 5-1: Manufacturer: syz [ 469.019133][T10896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.033190][T10887] Buffer I/O error on dev loop4, logical block 0, async page read [ 469.041952][ T42] usb 5-1: SerialNumber: syz [ 469.057406][ T42] usb 5-1: config 0 descriptor?? [ 469.081562][ T42] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 469.098931][T10888] Buffer I/O error on dev loop4, logical block 0, async page read [ 469.120647][T10888] Buffer I/O error on dev loop4, logical block 0, async page read [ 469.151293][T10888] ldm_validate_partition_table(): Disk read failed. [ 469.189182][T10888] Dev loop4: unable to read RDB block 0 [ 469.211206][T10888] loop4: unable to read partition table [ 469.237841][T10888] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 469.385940][ T4993] ldm_validate_partition_table(): Disk read failed. [ 469.394919][ T4993] Dev loop4: unable to read RDB block 0 [ 469.400997][ T4993] loop4: unable to read partition table [ 469.492702][ T42] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 469.508287][ T42] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 469.535213][ T5713] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 469.548036][ T42] usb 5-1: USB disconnect, device number 47 [ 469.702748][ T5713] usb 4-1: Using ep0 maxpacket: 16 [ 469.713260][ T5713] usb 4-1: config 8 has an invalid interface number: 206 but max is 0 [ 469.732179][ T5713] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 469.745116][ T5713] usb 4-1: config 8 has no interface number 0 [ 469.751331][ T5713] usb 4-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 469.768510][ T5713] usb 4-1: config 8 interface 206 altsetting 1 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 469.780085][ T5713] usb 4-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid wMaxPacketSize 0 [ 469.791887][ T5713] usb 4-1: config 8 interface 206 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 469.809956][ T5713] usb 4-1: config 8 interface 206 has no altsetting 0 [ 469.819527][ T5713] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 469.828964][ T5713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.837172][ T5713] usb 4-1: Product: syz [ 469.841450][ T5713] usb 4-1: Manufacturer: syz [ 469.846424][ T5713] usb 4-1: SerialNumber: syz [ 470.512881][ T187] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 470.603250][ T5713] garmin_gps 4-1:8.206: Garmin GPS usb/tty converter detected [ 470.621713][ T5713] garmin_gps ttyUSB0: failed to submit interrupt urb: -90 [ 470.635255][ T5713] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -90 [ 470.649727][ T5713] usb 4-1: USB disconnect, device number 37 [ 470.680184][ T5713] garmin_gps 4-1:8.206: device disconnected [ 470.693637][ T187] usb 5-1: Using ep0 maxpacket: 32 [ 470.716280][ T187] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 470.738627][ T187] usb 5-1: config 0 has no interface number 0 [ 470.760976][ T187] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 470.780203][ T187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.793139][ T187] usb 5-1: Product: syz [ 470.798598][ T187] usb 5-1: Manufacturer: syz [ 470.804204][ T187] usb 5-1: SerialNumber: syz [ 470.818099][ T187] usb 5-1: config 0 descriptor?? [ 470.883551][T10916] kvm: user requested TSC rate below hardware speed [ 470.895279][T10916] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 470.937881][T10916] tipc: Enabling of bearer rejected, failed to enable media [ 471.236287][ T187] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 471.272769][ T5815] net_ratelimit: 69 callbacks suppressed [ 471.272794][ T5815] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 471.293371][ T187] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 471.303693][ T5815] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 471.402804][ T8462] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 471.453435][ T8462] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 471.542886][ T8462] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 471.572766][ T5815] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 471.662733][ T5815] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 471.692908][ T35] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 471.782911][ T35] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 471.834930][ T6277] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 472.816312][ T187] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 472.850348][ T187] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 472.881974][ T187] usb 5-1: USB disconnect, device number 48 [ 474.105677][T10906] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 474.274071][T10906] usb 2-1: Using ep0 maxpacket: 8 [ 474.317665][T10906] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 474.351932][T10906] usb 2-1: config 179 has no interface number 0 [ 474.379058][T10906] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 474.400779][T10906] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 474.430092][T10906] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 474.453434][T10906] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 474.467284][T10906] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 474.488855][T10906] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 474.498022][T10906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.515348][T10955] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 475.027288][T10906] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input32 [ 475.671859][ T9] usb 2-1: USB disconnect, device number 42 [ 475.671858][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 475.686562][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 476.304140][ T35] net_ratelimit: 69 callbacks suppressed [ 476.304157][ T35] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 476.333433][ T35] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 476.432916][ T35] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 476.473345][ T35] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 476.563232][ T35] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 476.605575][ T8462] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 476.692721][ T8462] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 476.766621][ T6277] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 476.812117][T10988] syzkaller1: entered promiscuous mode [ 476.832802][T10988] syzkaller1: entered allmulticast mode [ 476.933471][ T14] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 476.966486][ T8462] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 477.219309][T11005] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1525'. [ 477.236917][T11005] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1525'. [ 478.973059][T10906] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 479.143401][T10906] usb 5-1: Using ep0 maxpacket: 8 [ 479.170771][T10906] usb 5-1: config 1 has an invalid descriptor of length 191, skipping remainder of the config [ 479.212115][T10906] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xA7, changing to 0x87 [ 479.282702][T10906] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 225, changing to 7 [ 479.323230][T10906] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 34649, setting to 1024 [ 479.359208][T10906] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 479.406043][T10906] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 479.442714][T10906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.473012][T10906] usb 5-1: Product: syz [ 479.494710][T10906] usb 5-1: Manufacturer: syz [ 479.523175][T10906] usb 5-1: SerialNumber: syz [ 479.571645][T10906] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 479.620018][T10906] usbtest 5-1:1.0: Linux user mode ISO test driver [ 479.658530][T10906] usbtest 5-1:1.0: high-speed {control iso-in} tests (+alt) [ 480.458854][T11042] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 480.785099][T11044] syzkaller0: entered promiscuous mode [ 480.790764][T11044] syzkaller0: entered allmulticast mode [ 481.334393][ T8462] net_ratelimit: 75 callbacks suppressed [ 481.334415][ T8462] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 481.373943][ T8462] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 481.472837][ T8462] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 481.502738][ T8462] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 481.539619][ T5713] usb 5-1: USB disconnect, device number 49 [ 481.604003][ T5815] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 481.632729][ T5815] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 481.723470][ T6277] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 481.763676][ T5815] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 481.853400][ T14] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 481.883677][ T14] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 482.282627][ T5713] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 482.301097][T11061] syzkaller0: entered promiscuous mode [ 482.315402][T11061] syzkaller0: entered allmulticast mode [ 482.462762][ T5713] usb 5-1: Using ep0 maxpacket: 16 [ 482.481348][ T5713] usb 5-1: unable to get BOS descriptor or descriptor too short [ 482.514115][ T5713] usb 5-1: config 3 has an invalid interface number: 74 but max is 0 [ 482.544592][ T5713] usb 5-1: config 3 has no interface number 0 [ 482.568001][ T5713] usb 5-1: config 3 interface 74 has no altsetting 0 [ 482.593533][ T5713] usb 5-1: New USB device found, idVendor=045e, idProduct=0468, bcdDevice=b2.9c [ 482.629876][ T5713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.661298][ T5713] usb 5-1: Product: syz [ 482.671683][ T5713] usb 5-1: Manufacturer: syz [ 482.690860][ T5713] usb 5-1: SerialNumber: syz [ 483.848800][ T5713] usb 5-1: USB disconnect, device number 50 [ 484.810222][ T187] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 485.034735][ T187] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 485.044394][ T187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.075081][ T187] usb 5-1: Product: syz [ 485.080886][ T187] usb 5-1: Manufacturer: syz [ 485.097055][ T187] usb 5-1: SerialNumber: syz [ 485.127665][ T187] usb 5-1: config 0 descriptor?? [ 485.142769][ T187] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 485.664465][ T187] gspca_sunplus: reg_r err -110 [ 486.240570][T11086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1548'. [ 489.451973][ T42] usb 5-1: USB disconnect, device number 51 [ 489.602800][ T5713] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 489.753201][ T5713] usb 2-1: Using ep0 maxpacket: 32 [ 489.779934][ T5713] usb 2-1: unable to get BOS descriptor or descriptor too short [ 489.803879][ T5713] usb 2-1: too many configurations: 80, using maximum allowed: 8 [ 489.818499][ T5713] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 489.829953][ T5713] usb 2-1: can't read configurations, error -71 [ 489.864117][ T63] net_ratelimit: 6 callbacks suppressed [ 489.864139][ T63] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 489.892664][ T42] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 489.902798][ T63] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 490.002841][ T63] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 490.047367][ T8462] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 490.063152][ T42] usb 5-1: Using ep0 maxpacket: 32 [ 490.073616][ T42] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 490.092318][ T42] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 490.111811][ T42] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 490.130761][ T42] usb 5-1: Product: syz [ 490.142164][ T42] usb 5-1: Manufacturer: syz [ 490.152807][ T8462] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 490.153302][ T42] usb 5-1: SerialNumber: syz [ 490.185014][ T42] usb 5-1: config 0 descriptor?? [ 490.202884][ T6277] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 490.210797][T11111] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 490.228108][T11117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1556'. [ 490.245619][ T42] hub 5-1:0.0: bad descriptor, ignoring hub [ 490.262818][ T42] hub 5-1:0.0: probe with driver hub failed with error -5 [ 490.272874][ T14] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 490.334596][ T14] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 490.393575][ T63] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 490.514131][ T63] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 490.611463][T11128] tc action pedit offset must be on 32 bit boundaries [ 490.755943][ T5728] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 490.876475][T11135] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1559'. [ 490.937465][ T5728] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 490.968390][ T5728] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 490.990712][ T5728] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 491.012378][ T5728] usb 4-1: Product: syz [ 491.027061][ T5728] usb 4-1: Manufacturer: syz [ 491.048549][ T5728] usb 4-1: SerialNumber: syz [ 491.231508][T11110] usb 5-1: reset high-speed USB device number 52 using dummy_hcd [ 491.404396][T11143] netlink: 'syz.5.1561': attribute type 10 has an invalid length. [ 491.512872][T11110] usb 5-1: device firmware changed [ 491.534601][ T809] usb 5-1: USB disconnect, device number 52 [ 491.561891][T11143] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 491.617726][T11143] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 491.702771][ T809] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 491.872632][ T809] usb 5-1: Using ep0 maxpacket: 32 [ 491.888424][ T809] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 491.915200][ T809] usb 5-1: string descriptor 0 read error: -22 [ 491.929314][ T809] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 491.950089][ T809] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 491.973594][ T809] usb 5-1: config 0 descriptor?? [ 491.984210][T11111] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 492.001670][ T809] hub 5-1:0.0: bad descriptor, ignoring hub [ 492.013679][ T809] hub 5-1:0.0: probe with driver hub failed with error -5 [ 492.365098][T11149] syzkaller0: entered promiscuous mode [ 492.382191][T11149] syzkaller0: entered allmulticast mode [ 492.690017][T11154] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1565'. [ 492.919257][T11158] tipc: Enabled bearer , priority 0 [ 492.930590][T11158] syzkaller0: entered promiscuous mode [ 492.941462][T11158] syzkaller0: entered allmulticast mode [ 492.957999][T11158] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 493.015965][T11158] tipc: Resetting bearer [ 493.028080][T11157] tipc: Resetting bearer [ 493.088958][T11157] tipc: Disabling bearer [ 493.149934][ T42] usb 4-1: USB disconnect, device number 38 [ 493.472981][ T809] usb 5-1: USB disconnect, device number 53 [ 493.602832][ T42] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 493.774834][T11172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1571'. [ 493.784420][ T42] usb 4-1: Using ep0 maxpacket: 16 [ 493.804641][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 493.841202][T11174] netlink: 'syz.2.1571': attribute type 10 has an invalid length. [ 493.868547][ T42] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 493.902016][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.926241][ T42] usb 4-1: Product: syz [ 493.942299][ T42] usb 4-1: Manufacturer: syz [ 493.957785][ T42] usb 4-1: SerialNumber: syz [ 493.992148][ T42] usb 4-1: config 0 descriptor?? [ 494.046381][ T42] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 494.136440][ T42] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 494.594668][ T5728] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 494.630412][ T42] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 494.685402][T11174] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 494.738746][T11174] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 494.779292][ T5728] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 494.815320][ T5728] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.852600][ T5728] usb 5-1: config 0 has no interface number 0 [ 494.927394][T11181] syzkaller0: entered promiscuous mode [ 494.936133][ T5728] usb 5-1: config 0 interface 1 altsetting 149 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 494.965746][T11181] syzkaller0: entered allmulticast mode [ 494.979653][ T5728] usb 5-1: config 0 interface 1 has no altsetting 0 [ 494.997708][ T5728] usb 5-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 495.022795][ T8462] net_ratelimit: 49 callbacks suppressed [ 495.022818][ T8462] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 495.040343][ T5728] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.104376][ T5728] usb 5-1: config 0 descriptor?? [ 495.131737][ T5728] usbhid 5-1:0.1: couldn't find an input interrupt endpoint [ 495.188775][ T42] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 495.227721][ T42] em28xx 4-1:0.0: board has no eeprom [ 495.634920][ T42] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 495.655712][ T42] em28xx 4-1:0.0: dvb set to bulk mode. [ 495.665656][T10906] em28xx 4-1:0.0: Binding DVB extension [ 496.862164][T11160] em28xx 4-1:0.0: reading from i2c device at 0xe failed (error=-5) [ 496.897823][ T42] usb 4-1: USB disconnect, device number 39 [ 496.952150][ T42] em28xx 4-1:0.0: Disconnecting em28xx [ 497.056593][T10906] em28xx 4-1:0.0: Registering input extension [ 497.063527][ T42] em28xx 4-1:0.0: Closing input extension [ 497.336248][ T42] em28xx 4-1:0.0: Freeing device [ 497.981123][T11201] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1578'. [ 498.436839][ T187] usb 5-1: USB disconnect, device number 54 [ 500.624250][T11203] bond0: (slave team0): Releasing backup interface [ 500.635121][T11203] bridge_slave_0: left allmulticast mode [ 500.647318][T11203] bridge_slave_0: left promiscuous mode [ 500.656198][T11203] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.677645][T11203] bridge_slave_1: left allmulticast mode [ 500.693704][T11203] bridge_slave_1: left promiscuous mode [ 500.701997][T11203] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.737154][T11203] bond0: (slave bond_slave_0): Releasing backup interface [ 500.779216][T11203] bond0: (slave bond_slave_1): Releasing backup interface [ 500.810209][T11203] team0: Port device team_slave_0 removed [ 500.822042][T11203] team0: Port device team_slave_1 removed [ 500.833980][T11203] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 500.843993][T11203] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 500.852332][T11203] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 501.248894][T11224] tipc: Enabled bearer , priority 0 [ 501.268039][T11224] syzkaller0: entered promiscuous mode [ 501.312188][T11224] syzkaller0: entered allmulticast mode [ 501.390714][T11227] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 501.416224][T11229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1587'. [ 501.577040][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.589966][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.721713][T11227] tipc: Resetting bearer [ 501.752399][T11221] tipc: Resetting bearer [ 501.785711][ T42] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 501.915095][T11221] tipc: Disabling bearer [ 501.942704][ T42] usb 3-1: Using ep0 maxpacket: 16 [ 501.967427][ T42] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 501.982798][ T14] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 502.004035][ T35] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 502.022453][ T42] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 502.071158][ T42] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 502.096244][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.113242][ T35] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 502.149827][ T42] usb 3-1: Product: syz [ 502.162695][ T35] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 502.164628][ T42] usb 3-1: Manufacturer: syz [ 502.181862][ T42] usb 3-1: SerialNumber: syz [ 502.204343][ T42] usb 3-1: config 0 descriptor?? [ 502.262709][ T6277] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 502.343630][ T35] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 502.382733][ T35] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 502.472730][ T35] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 502.523159][ T35] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 503.353263][T11252] tipc: Enabled bearer , priority 0 [ 503.384947][T11252] syzkaller0: entered promiscuous mode [ 503.403668][T11252] syzkaller0: entered allmulticast mode [ 503.434829][T11252] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 503.553092][T11252] tipc: Resetting bearer [ 503.628953][T11251] tipc: Resetting bearer [ 503.803385][ T42] usb 3-1: USB disconnect, device number 37 [ 503.813191][T11251] tipc: Disabling bearer [ 504.250568][T11265] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1594'. [ 504.522776][T10906] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 504.692799][T10906] usb 5-1: Using ep0 maxpacket: 8 [ 504.702493][T10906] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 504.709675][T11284] input: syz1 as /devices/virtual/input/input35 [ 504.720196][T10906] usb 5-1: config 179 has no interface number 0 [ 504.735708][T10906] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 504.768835][T10906] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 504.781375][T10906] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 504.794476][T10906] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 504.812767][ T187] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 504.814324][T10906] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 504.847814][T10906] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 504.857493][T10906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.875451][T11265] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 504.915038][T11287] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1599'. [ 504.929943][T11287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 504.951650][T11285] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 504.968570][T11287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 504.983263][ T187] usb 2-1: Using ep0 maxpacket: 8 [ 504.996114][ T187] usb 2-1: config 0 has an invalid interface number: 33 but max is 1 [ 505.004688][ T5713] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 505.013768][ T187] usb 2-1: config 0 has no interface number 1 [ 505.027662][ T187] usb 2-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 505.040358][ T187] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 505.051776][ T187] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 505.066086][ T187] usb 2-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 505.078632][ T187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.101040][ T187] usb 2-1: Product: syz [ 505.105510][ T187] usb 2-1: Manufacturer: syz [ 505.110396][ T187] usb 2-1: SerialNumber: syz [ 505.137009][ T42] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input36 [ 505.160896][ T187] usb 2-1: config 0 descriptor?? [ 505.186346][ T5713] usb 4-1: unable to get BOS descriptor or descriptor too short [ 505.194139][ T187] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 505.245104][ T5713] usb 4-1: config 63 has an invalid interface number: 66 but max is 0 [ 505.276591][ T5713] usb 4-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 505.302816][ T5713] usb 4-1: config 63 has no interface number 0 [ 505.321226][ T5713] usb 4-1: config 63 interface 66 has no altsetting 0 [ 505.331572][ T5720] usb 5-1: USB disconnect, device number 55 [ 505.331765][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 505.345890][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 505.370396][ T5713] usb 4-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 505.380634][ T5713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.393888][ T5713] usb 4-1: Product: syz [ 505.402647][ T5713] usb 4-1: Manufacturer: syz [ 505.402672][ T5713] usb 4-1: SerialNumber: syz [ 505.419059][T11290] loop5: detected capacity change from 0 to 2640 [ 505.419809][T11290] buffer_io_error: 53 callbacks suppressed [ 505.419826][T11290] Buffer I/O error on dev loop5, logical block 0, async page read [ 505.424900][T11290] Buffer I/O error on dev loop5, logical block 0, async page read [ 505.425038][T11290] Buffer I/O error on dev loop5, logical block 0, async page read [ 505.425169][T11290] Buffer I/O error on dev loop5, logical block 0, async page read [ 505.425295][T11290] Buffer I/O error on dev loop5, logical block 0, async page read [ 505.425445][T11290] Buffer I/O error on dev loop5, logical block 0, async page read [ 505.425592][T11290] Buffer I/O error on dev loop5, logical block 0, async page read [ 505.425719][T11290] Buffer I/O error on dev loop5, logical block 0, async page read [ 505.425738][T11290] ldm_validate_partition_table(): Disk read failed. [ 505.425864][T11290] Buffer I/O error on dev loop5, logical block 0, async page read [ 505.580932][ T2366] pvrusb2: Failed to submit write-control URB status=-90 [ 505.591649][T11290] Buffer I/O error on dev loop5, logical block 0, async page read [ 505.610497][ T187] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 505.631946][ T2366] usb 2-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 505.651442][T11290] Dev loop5: unable to read RDB block 0 [ 505.672392][ T2366] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 505.682071][T11290] loop5: unable to read partition table [ 505.694937][ T187] usb 2-1: USB disconnect, device number 45 [ 505.703378][ T5713] uvcvideo 4-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 505.710979][ T5713] uvcvideo 4-1:63.66: No valid video chain found. [ 505.721686][T11290] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 505.749436][ T5713] usb 4-1: USB disconnect, device number 40 [ 505.885346][ T6277] net_ratelimit: 47 callbacks suppressed [ 505.885367][ T6277] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 505.922682][ T5815] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 505.937907][T11297] loop9: detected capacity change from 0 to 2640 [ 505.947342][T11297] ldm_validate_partition_table(): Disk read failed. [ 505.954511][T11297] Dev loop9: unable to read RDB block 0 [ 505.960503][T11297] loop9: unable to read partition table [ 505.967281][T11297] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 506.022859][ T5815] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 506.055486][ T5815] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 506.162735][ T8462] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 506.192693][ T8462] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 506.293178][ T8462] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 506.323300][ T8462] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 506.433444][ T5815] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 506.547588][T11312] syz_tun (unregistering): left allmulticast mode [ 506.559668][T11312] syz_tun (unregistering): left promiscuous mode [ 506.582675][ T5728] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 506.652697][ T35] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 506.769315][ T5728] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 506.781144][ T5728] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 506.794101][ T5728] usb 5-1: config 0 has no interfaces? [ 506.805661][ T5728] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 506.817424][ T5728] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.862316][ T5728] usb 5-1: config 0 descriptor?? [ 507.705177][T11327] tipc: Enabled bearer , priority 0 [ 507.748674][T11327] syzkaller0: entered promiscuous mode [ 507.772138][T11327] syzkaller0: entered allmulticast mode [ 507.814188][T11327] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 507.921280][T11327] tipc: Resetting bearer [ 507.956513][T11326] tipc: Resetting bearer [ 508.028111][T11326] tipc: Disabling bearer [ 508.247594][T11319] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 508.278350][T11319] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 508.321472][T11319] netdevsim netdevsim3 netdevsim0: refused to change device tx_queue_len [ 509.240093][T11339] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 509.377080][T11343] syzkaller0: entered promiscuous mode [ 509.385643][T11343] syzkaller0: entered allmulticast mode [ 509.532820][T11342] tipc: Enabled bearer , priority 0 [ 509.578145][T11341] tipc: Resetting bearer [ 509.621036][T11341] tipc: Disabling bearer [ 509.869136][T11346] syzkaller0: entered promiscuous mode [ 509.890920][T11346] syzkaller0: entered allmulticast mode [ 509.920785][ T5720] usb 5-1: USB disconnect, device number 56 [ 510.234861][T11354] kvm: kvm [11353]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x6 [ 510.286209][T11354] kvm: kvm [11353]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x1 [ 510.342194][T11354] kvm: kvm [11353]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x8 [ 510.486416][T11364] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 510.508760][T11364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1620'. [ 511.612636][T10906] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 511.772638][T10906] usb 4-1: Using ep0 maxpacket: 8 [ 511.817941][T10906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 511.829293][T10906] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 511.841979][T10906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.856325][T10906] usb 4-1: config 0 descriptor?? [ 512.101977][T10906] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 513.308611][ T11] usb 4-1: USB disconnect, device number 41 [ 513.585689][T11382] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1624'. [ 515.254471][T11393] batman_adv: batadv0: Adding interface: vxlan0 [ 515.286306][T11393] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.352782][T11393] batman_adv: batadv0: Not using interface vxlan0 (retrying later): interface not active [ 515.422944][ T5816] net_ratelimit: 39 callbacks suppressed [ 515.422964][ T5816] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 515.472640][ T48] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 515.564720][ T48] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 515.603764][ T48] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 515.702674][ T48] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 515.734051][ T8462] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 515.824197][ T8462] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 515.873082][ T35] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 515.943054][ T5816] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 516.022888][ T5816] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 517.744075][T11424] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1634'. [ 517.874731][T11427] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 518.001651][T11428] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1633'. [ 518.003303][T10906] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 518.153006][T10906] usb 5-1: Using ep0 maxpacket: 8 [ 518.164489][T10906] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 518.185476][T10906] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 518.214491][T10906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.254367][T10906] usb 5-1: config 0 descriptor?? [ 518.263159][ T5720] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 518.290217][T10906] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 518.447187][ T5720] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 518.493092][ T5720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.536946][ T5720] usb 4-1: Product: syz [ 518.568988][ T5720] usb 4-1: Manufacturer: syz [ 518.594419][ T5720] usb 4-1: SerialNumber: syz [ 518.625819][ T5720] usb 4-1: config 0 descriptor?? [ 518.905436][T11431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.995307][T11431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.107530][T10906] gspca_vc032x: reg_w err -71 [ 519.128995][T10906] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 519.181085][T10906] usb 5-1: USB disconnect, device number 57 [ 519.646244][ T11] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 519.753072][ T5720] usb 4-1: Firmware version (0.0) predates our first public release. [ 519.776051][ T5720] usb 4-1: Please update to version 0.2 or newer [ 519.844273][ T11] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 519.894282][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 519.939432][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 520.060369][ T11] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 520.132137][ T11] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 520.147820][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.191520][ T11] usb 3-1: config 0 descriptor?? [ 520.224606][T11445] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 520.493509][ T8462] net_ratelimit: 76 callbacks suppressed [ 520.493532][ T8462] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 520.533160][ T8462] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 520.642859][ T8462] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 520.675250][ T8462] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 520.712211][ T11] usbhid 3-1:0.0: can't add hid device: -71 [ 520.724918][ T11] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 520.744710][ T11] usb 3-1: USB disconnect, device number 38 [ 520.766700][ T14] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 520.792715][ T14] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 520.892668][ T35] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 520.914693][ T48] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 520.926055][ T42] usb 4-1: USB disconnect, device number 42 [ 521.052767][ T35] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 521.085444][ T48] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 523.023785][ T5720] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 523.202912][ T5720] usb 3-1: Using ep0 maxpacket: 8 [ 523.222719][ T5720] usb 3-1: unable to get BOS descriptor or descriptor too short [ 523.234396][ T5720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 523.271196][ T5720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 523.297084][ T5720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 523.322742][ T5720] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 523.333467][ T5720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 523.373231][ T5720] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 44 [ 523.406645][ T5720] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 523.422071][ T5720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.434955][ T5720] usb 3-1: Product: syz [ 523.462197][ T5720] usb 3-1: Manufacturer: syz [ 523.482556][ T5720] usb 3-1: SerialNumber: syz [ 523.513651][ T5720] usb 3-1: config 0 descriptor?? [ 523.530538][T11487] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 523.557354][T11487] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 523.608492][ T5720] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 523.936268][ T29] audit: type=1326 audit(1783511457.028:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11486 comm="syz.2.1649" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fae3259de59 code=0x0 [ 524.848080][T11500] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 525.186737][T11505] tipc: Enabled bearer , priority 0 [ 525.202791][ T42] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 525.255652][T11505] syzkaller0: entered promiscuous mode [ 525.261188][T11505] syzkaller0: entered allmulticast mode [ 525.288157][T11505] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 525.363772][ T42] usb 5-1: Using ep0 maxpacket: 32 [ 525.368786][T11505] tipc: Resetting bearer [ 525.393647][T11504] tipc: Resetting bearer [ 525.447682][T11504] tipc: Disabling bearer [ 525.518754][ T63] net_ratelimit: 63 callbacks suppressed [ 525.518778][ T63] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 525.552748][ T63] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 525.654298][ T35] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 525.684848][ T63] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 525.794112][ T35] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 525.812767][ T35] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 525.887408][ T5720] usb 3-1: USB disconnect, device number 39 [ 525.912827][ T35] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 525.962940][ T35] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 526.000293][ T42] usb 5-1: unable to get BOS descriptor or descriptor too short [ 526.028482][ T42] usb 5-1: too many configurations: 80, using maximum allowed: 8 [ 526.055267][ T35] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 526.096138][ T42] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 526.112312][ T35] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 526.136843][ T42] usb 5-1: can't read configurations, error -71 [ 526.392839][ T5713] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 526.553912][ T5713] usb 4-1: Using ep0 maxpacket: 32 [ 526.571389][ T5713] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 526.591450][ T5713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.609563][ T5713] usb 4-1: config 0 descriptor?? [ 526.627546][ T5713] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 526.648004][T11534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1663'. [ 526.704930][T11537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.752882][T11537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.072627][ T5720] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 527.172700][ T42] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 527.243130][ T5720] usb 3-1: Using ep0 maxpacket: 16 [ 527.251083][ T5720] usb 3-1: unable to get BOS descriptor or descriptor too short [ 527.260840][ T5720] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 233, changing to 7 [ 527.272281][ T5720] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 240, changing to 7 [ 527.283805][ T5720] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1600, setting to 1024 [ 527.328440][ T5720] usb 3-1: language id specifier not provided by device, defaulting to English [ 527.342130][ T42] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 527.361679][ T42] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 527.367435][ T5720] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 527.381265][ T42] usb 5-1: Product: syz [ 527.390031][ T42] usb 5-1: SerialNumber: syz [ 527.403349][ T5720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.418476][ T42] usb 5-1: config 0 descriptor?? [ 527.434762][ T5720] usb 3-1: Product: syz [ 527.448653][ T5720] usb 3-1: Manufacturer: ⯉褮æ¤á€¤çƒ”᜞ꅰ넺猳Ⅼ몭Ѣéï¿£ì¸á¹žè–¹à¨…쉜ƛâ¹ìŠŒë¿…ë“²î€… [ 527.473815][ T5720] usb 3-1: SerialNumber: syz [ 527.678024][ T42] usb 5-1: USB disconnect, device number 59 [ 527.758120][ T5720] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 527.884028][ T5720] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 527.910157][ T5720] usb 3-1: USB disconnect, device number 40 [ 527.982976][ T5690] udevd[5690]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 528.142997][ T5713] gspca_vc032x: reg_w err -110 [ 528.148077][ T5713] gspca_vc032x: I2c Bus Busy Wait 00 [ 528.156944][ T5713] gspca_vc032x: I2c Bus Busy Wait 00 [ 528.174542][ T5713] gspca_vc032x: I2c Bus Busy Wait 00 [ 528.184942][ T5713] gspca_vc032x: I2c Bus Busy Wait 00 [ 528.191170][ T5713] gspca_vc032x: I2c Bus Busy Wait 00 [ 528.196998][ T5713] gspca_vc032x: I2c Bus Busy Wait 00 [ 528.206336][ T5713] gspca_vc032x: I2c Bus Busy Wait 00 [ 528.212417][ T5713] gspca_vc032x: I2c Bus Busy Wait 00 [ 528.219405][ T5713] gspca_vc032x: I2c Bus Busy Wait 00 [ 528.227728][ T5713] gspca_vc032x: I2c Bus Busy Wait 00 [ 528.257511][ T5713] gspca_vc032x: I2c Bus Busy Wait 00 [ 528.264971][T11553] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 528.272763][ T5713] gspca_vc032x: I2c Bus Busy Wait 00 [ 528.287309][ T5713] gspca_vc032x: I2c Bus Busy Wait 00 [ 528.308219][ T5713] gspca_vc032x: I2c Bus Busy Wait 00 [ 528.331067][ T5713] gspca_vc032x: I2c Bus Busy Wait 00 [ 528.350306][ T5713] gspca_vc032x: I2c Bus Busy Wait 00 [ 528.356969][ T5713] gspca_vc032x: I2c Bus Busy Wait 00 [ 528.365508][ T5713] gspca_vc032x: I2c Bus Busy Wait 00 [ 528.379768][ T5713] gspca_vc032x: Unknown sensor... [ 528.390567][ T5713] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 529.051513][T11568] loop9: detected capacity change from 0 to 2640 [ 529.062228][T11568] buffer_io_error: 363 callbacks suppressed [ 529.062246][T11568] Buffer I/O error on dev loop9, logical block 0, async page read [ 529.078458][T11568] Buffer I/O error on dev loop9, logical block 0, async page read [ 529.104603][T11568] Buffer I/O error on dev loop9, logical block 0, async page read [ 529.114785][T11570] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 529.133787][T11568] Buffer I/O error on dev loop9, logical block 1, async page read [ 529.163541][ T5713] usb 4-1: USB disconnect, device number 43 [ 529.198178][T11568] Dev loop9: unable to read RDB block 8 [ 529.206068][T11568] Buffer I/O error on dev loop9, logical block 3, async page read [ 529.233342][T11568] loop9: unable to read partition table [ 529.243692][T11568] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 529.288551][T11570] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 529.298048][T11570] Buffer I/O error on dev loop9, logical block 1, lost async page write [ 529.307123][T11570] Buffer I/O error on dev loop9, logical block 2, lost async page write [ 529.315868][T11570] Buffer I/O error on dev loop9, logical block 3, lost async page write [ 529.732352][T11585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.757721][T11585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.569879][ T5816] net_ratelimit: 79 callbacks suppressed [ 530.569901][ T5816] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 530.622775][ T5816] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 530.752754][ T8462] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 530.782898][ T8462] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 530.882676][ T8462] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 530.915340][ T48] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 530.991422][T11617] loop9: detected capacity change from 0 to 2640 [ 531.013382][ T48] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 531.035780][T11611] kvm: kvm [11610]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xbb00000000 [ 531.076958][T11611] kvm: kvm [11610]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xbb00000000 [ 531.140847][T11611] kvm: kvm [11610]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xbb00000000 [ 531.174729][T11611] kvm: kvm [11610]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 531.215582][T11614] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.223278][T11614] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.281695][T11611] kvm: kvm [11610]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xbb00000000 [ 531.325294][T11611] kvm: kvm [11610]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xbb00000000 [ 531.512324][T11614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 531.900726][ T5816] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.930099][ T5816] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.947699][ T5816] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.965731][ T35] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.992961][ T35] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 532.014145][T11624] syzkaller0: entered promiscuous mode [ 532.035091][T11624] syzkaller0: entered allmulticast mode [ 532.072943][ T35] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 532.110019][T11629] loop9: detected capacity change from 0 to 2640 [ 532.137329][T11629] ldm_validate_partition_table(): Disk read failed. [ 532.161706][T11629] Dev loop9: unable to read RDB block 0 [ 532.183205][T11629] loop9: unable to read partition table [ 532.213784][T11629] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 532.512214][ T35] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 532.682172][T11641] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1696'. [ 532.723085][T11641] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1696'. [ 532.733485][T11641] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1696'. [ 532.794881][T11649] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1700'. [ 533.092652][ T5720] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 533.286394][T11655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.309372][T11655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.357730][T11655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.390415][T11655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.918373][ T5720] usb 3-1: unable to get BOS descriptor or descriptor too short [ 533.937388][ T5720] usb 3-1: no configurations [ 533.943800][ T5720] usb 3-1: can't read configurations, error -22 [ 535.612836][ T63] net_ratelimit: 48 callbacks suppressed [ 535.612857][ T63] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 535.643417][ T8462] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 535.742689][ T8462] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 535.772684][ T8462] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 535.864552][ T5816] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 535.925068][ T5816] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 536.009442][ T63] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 536.101746][ T63] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 536.182681][ T63] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 536.263234][ T63] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 536.473447][ T5713] usb 6-1: USB disconnect, device number 2 [ 537.195941][T11695] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 537.345402][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 537.361499][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 537.395970][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 537.431323][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 537.439913][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 537.465250][ T5636] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 537.511598][ T5636] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 537.521530][ T5636] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 537.533326][ T5636] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 537.541104][ T5636] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 538.295143][T11698] program syz.2.1712 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 538.702716][ T11] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 538.889162][ T11] usb 3-1: unable to get BOS descriptor or descriptor too short [ 538.928458][ T11] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 538.977265][ T11] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 539.016386][ T11] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 97, using maximum allowed: 30 [ 539.055526][ T11] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 539.099257][ T11] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 539.113397][T11702] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.124573][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.135611][T11702] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.152893][ T11] usb 3-1: Product: syz [ 539.158230][T11702] bridge_slave_0: entered allmulticast mode [ 539.168183][ T11] usb 3-1: Manufacturer: syz [ 539.180139][T11702] bridge_slave_0: entered promiscuous mode [ 539.186235][ T11] usb 3-1: SerialNumber: syz [ 539.252368][T11702] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.278120][T11702] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.311597][T11702] bridge_slave_1: entered allmulticast mode [ 539.340067][T11702] bridge_slave_1: entered promiscuous mode [ 539.425150][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 539.455157][ T11] usb 3-1: selecting invalid altsetting 1 [ 539.560277][ T11] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 539.574949][ T11] usb 3-1: USB disconnect, device number 43 [ 539.649201][ T5636] Bluetooth: hci1: command tx timeout [ 539.751137][ T5690] udevd[5690]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 539.771046][T11702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 539.789345][T11702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 539.891902][T11702] team0: Port device team_slave_0 added [ 539.911822][T11702] team0: Port device team_slave_1 added [ 539.979852][T11702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 539.997369][T11702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 540.086993][T11702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 540.127366][T11702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 540.136718][T11702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 540.168044][T11702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 540.370980][T11702] hsr_slave_0: entered promiscuous mode [ 540.389784][T11702] hsr_slave_1: entered promiscuous mode [ 540.411093][T11702] debugfs: 'hsr0' already exists in 'hsr' [ 540.427541][T11702] Cannot create hsr debugfs directory [ 540.635860][T11731] loop5: detected capacity change from 0 to 2640 [ 540.646184][T11731] buffer_io_error: 1007 callbacks suppressed [ 540.646202][T11731] Buffer I/O error on dev loop5, logical block 0, async page read [ 540.661543][T11731] Buffer I/O error on dev loop5, logical block 0, async page read [ 540.677615][T11731] Buffer I/O error on dev loop5, logical block 0, async page read [ 540.698649][T11731] Buffer I/O error on dev loop5, logical block 0, async page read [ 540.727572][T11731] Buffer I/O error on dev loop5, logical block 0, async page read [ 540.778273][T11731] loop5: unable to read partition table [ 540.802321][T11731] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 540.824560][T11732] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 540.833521][T11732] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 540.853706][T11732] Buffer I/O error on dev loop5, logical block 2, lost async page write [ 540.881582][T11732] Buffer I/O error on dev loop5, logical block 3, lost async page write [ 540.893485][ T48] net_ratelimit: 30 callbacks suppressed [ 540.893503][ T48] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 540.920069][T11732] Buffer I/O error on dev loop5, logical block 4, lost async page write [ 540.935148][ T48] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 541.104767][ T5720] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 541.253539][ T8462] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 541.263635][ T5720] usb 5-1: Using ep0 maxpacket: 16 [ 541.272717][ T42] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 541.280441][ T8462] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 541.289449][ T5720] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 541.312869][ T5720] usb 5-1: config 0 has no interface number 0 [ 541.326457][ T5720] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 541.371091][ T5720] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 541.389218][ T5720] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 541.415109][ T5720] usb 5-1: Product: syz [ 541.429582][ T5720] usb 5-1: SerialNumber: syz [ 541.452065][ T5720] usb 5-1: config 0 descriptor?? [ 541.453124][ T8462] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 541.475889][ T5720] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 541.496777][ T42] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 541.505882][ T42] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.517443][ T42] usb 4-1: config 0 has no interfaces? [ 541.523693][ T5815] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 541.554541][ T42] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 541.581471][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.657761][ T42] usb 4-1: config 0 descriptor?? [ 541.684313][T11702] bond0: (slave netdevsim1): Releasing backup interface [ 541.728914][ T5636] Bluetooth: hci1: command tx timeout [ 541.752694][ T5815] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 541.764321][ T5815] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 541.953677][ T5815] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 541.982769][ T35] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 542.550454][ T42] usb 5-1: USB disconnect, device number 60 [ 542.808001][T11702] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 542.842420][T11702] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 542.860305][T11702] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 542.911708][T11702] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 542.935014][T11702] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 542.973239][T11702] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 542.989753][T11702] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 543.018471][T11702] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 543.423210][T11702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.499546][T11702] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.553586][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.560753][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.651490][ T8462] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.658749][ T8462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.803022][ T5636] Bluetooth: hci1: command tx timeout [ 544.039207][T11702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.192474][T11702] veth0_vlan: entered promiscuous mode [ 544.249153][T11702] veth1_vlan: entered promiscuous mode [ 544.425824][T11702] veth0_macvtap: entered promiscuous mode [ 544.473671][T11702] veth1_macvtap: entered promiscuous mode [ 544.518575][ T5713] usb 4-1: USB disconnect, device number 44 [ 544.610727][T11702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 544.651464][T11702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 544.692771][ T42] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 544.706100][ T48] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.738308][ T48] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.791554][ T48] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.839285][ T48] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.854861][ T42] usb 3-1: Using ep0 maxpacket: 16 [ 544.887253][ T42] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 544.921387][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 545.007445][ T42] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 545.021068][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.080393][ T42] usb 3-1: Product: syz [ 545.091269][ T42] usb 3-1: Manufacturer: syz [ 545.102157][ T42] usb 3-1: SerialNumber: syz [ 545.122055][ T42] usb 3-1: config 0 descriptor?? [ 545.130533][ T5815] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.158469][ T5815] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.171894][ T42] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 545.205795][ T42] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 545.301576][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.321141][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.792322][ T42] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 545.814280][ T42] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 545.882747][ T5636] Bluetooth: hci1: command tx timeout [ 545.903069][ T5720] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 545.963188][ T8462] net_ratelimit: 45 callbacks suppressed [ 545.963210][ T8462] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 545.992696][ T8462] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 546.097614][ T8462] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 546.109101][ T5720] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 546.140134][ T5720] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 546.157973][T11794] syzkaller0: entered promiscuous mode [ 546.165125][T11794] syzkaller0: entered allmulticast mode [ 546.176955][ T5720] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 546.191426][T11794] tipc: Enabled bearer , priority 0 [ 546.196937][ T5720] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.210101][ T8462] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 546.222746][ T63] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 546.233309][ T5720] usb 6-1: config 0 descriptor?? [ 546.241245][T11794] tipc: Resetting bearer [ 546.266120][T11793] tipc: Resetting bearer [ 546.313531][T11793] tipc: Disabling bearer [ 546.332728][ T63] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 546.353309][ T8462] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 546.457325][ T42] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 546.468219][ T5816] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 546.489616][ T42] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 546.503859][ T5816] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 546.518491][ T42] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 546.543699][ T42] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 546.562396][ T42] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 546.581838][ T42] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 546.604681][ T63] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 547.210537][ T42] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 547.230268][ T42] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 547.249402][ T42] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 547.266252][ T42] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 547.282235][ T42] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 547.328695][ T42] usb 3-1: USB disconnect, device number 44 [ 547.561172][ T5720] usbhid 6-1:0.0: can't add hid device: -71 [ 547.581135][ T5720] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 547.607162][ T5720] usb 6-1: USB disconnect, device number 3 [ 547.866436][T11807] tipc: Enabling of bearer rejected, already enabled [ 548.067823][T11815] Mem-Info: [ 548.072847][T11815] active_anon:10461 inactive_anon:476 isolated_anon:0 [ 548.072847][T11815] active_file:2 inactive_file:43647 isolated_file:0 [ 548.072847][T11815] unevictable:768 dirty:254 writeback:0 [ 548.072847][T11815] slab_reclaimable:9675 slab_unreclaimable:106484 [ 548.072847][T11815] mapped:36987 shmem:3277 pagetables:1429 [ 548.072847][T11815] sec_pagetables:0 bounce:0 [ 548.072847][T11815] kernel_misc_reclaimable:0 [ 548.072847][T11815] free:1302650 free_pcp:11598 free_cma:0 [ 548.072954][T11815] Node 0 active_anon:41844kB inactive_anon:1904kB active_file:8kB inactive_file:174244kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:147852kB dirty:1012kB writeback:0kB shmem:11572kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:6144kB kernel_stack:14220kB pagetables:5564kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 548.073019][T11815] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:344kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 548.073073][T11815] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 548.073136][T11815] lowmem_reserve[]: 0 2489 2489 2489 2489 [ 548.073180][T11815] Node 0 DMA32 free:1242016kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41844kB inactive_anon:1904kB active_file:8kB inactive_file:174244kB unevictable:1536kB writepending:1012kB zspages:4kB present:3129332kB managed:2548772kB mlocked:0kB bounce:0kB free_pcp:46392kB local_pcp:25236kB free_cma:0kB [ 548.073247][T11815] lowmem_reserve[]: 0 0 0 0 0 [ 548.073288][T11815] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:264kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 548.073348][T11815] lowmem_reserve[]: 0 0 0 0 0 [ 548.073394][T11815] Node 1 Normal free:3953224kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:344kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 548.073461][T11815] lowmem_reserve[]: 0 0 0 0 0 [ 548.073507][T11815] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 548.073685][T11815] Node 0 DMA32: 520*4kB (UME) 706*8kB (UM) 409*16kB (UME) 361*32kB (UME) 113*64kB (UME) 77*128kB (UME) 70*256kB (UME) 45*512kB (ME) 33*1024kB (UME) 1*2048kB (U) 274*4096kB (UM) = 1242016kB [ 548.073902][T11815] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 548.074026][T11815] Node 1 Normal: 2*4kB (U) 8*8kB (U) 12*16kB (UM) 10*32kB (UM) 8*64kB (UM) 6*128kB (UM) 5*256kB (UM) 7*512kB (UM) 4*1024kB (UM) 5*2048kB (UM) 960*4096kB (UM) = 3953224kB [ 548.074222][T11815] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 548.074248][T11815] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 548.074277][T11815] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 548.074291][T11815] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 548.074304][T11815] 47398 total pagecache pages [ 548.074311][T11815] 476 pages in swap cache [ 548.074317][T11815] Free swap = 118848kB [ 548.074324][T11815] Total swap = 124996kB [ 548.074331][T11815] 2097051 pages RAM [ 548.074337][T11815] 0 pages HighMem/MovableOnly [ 548.074343][T11815] 428177 pages reserved [ 548.074349][T11815] 0 pages cma reserved [ 548.465860][T11823] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 548.578366][T11823] bridge0: port 3(veth0_to_bridge) entered blocking state [ 548.578475][T11823] bridge0: port 3(veth0_to_bridge) entered disabled state [ 548.578709][T11823] veth0_to_bridge: entered allmulticast mode [ 548.580318][T11823] veth0_to_bridge: entered promiscuous mode [ 548.580432][T11823] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 548.580994][T11823] bridge0: port 3(veth0_to_bridge) entered blocking state [ 548.581096][T11823] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 550.972578][ C0] net_ratelimit: 7936 callbacks suppressed [ 550.972602][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.972948][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.973444][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.973805][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 550.973836][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.974343][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:8f:d0:da:da:9c, vlan:0) [ 550.974362][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.974710][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.975208][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.975565][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.422527][ C0] sched: DL replenish lagged too much [ 555.982584][ C1] net_ratelimit: 17683 callbacks suppressed [ 555.982601][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 555.982607][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:8f:d0:da:da:9c, vlan:0) [ 555.982967][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 555.983472][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 555.983826][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 555.983921][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 555.984368][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 555.984440][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:8f:d0:da:da:9c, vlan:0) [ 555.984721][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 555.985218][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 560.992860][ C0] net_ratelimit: 18182 callbacks suppressed [ 560.992877][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:8f:d0:da:da:9c, vlan:0) [ 560.992883][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 560.993265][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 560.993267][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 560.993692][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 560.993743][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:8f:d0:da:da:9c, vlan:0) [ 560.994186][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 560.994613][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 560.994973][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 560.995392][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.191503][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.203249][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.002791][ C0] net_ratelimit: 17141 callbacks suppressed [ 566.002816][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 566.002856][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 566.003339][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 566.003381][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:8f:d0:da:da:9c, vlan:0) [ 566.003779][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 566.004155][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 566.004593][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 566.005097][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 566.005502][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 566.005542][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 571.012618][ C0] net_ratelimit: 17459 callbacks suppressed [ 571.012641][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 571.013051][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 571.013558][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 571.013708][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 571.014024][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 571.014167][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:8f:d0:da:da:9c, vlan:0) [ 571.014377][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 571.014525][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 571.014825][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 571.014968][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:8f:d0:da:da:9c, vlan:0) [ 572.448959][ T4993] udevd[4993]: worker [10373] /devices/platform/dummy_hcd.1/usb2/2-1 is taking a long time [ 573.048705][ T2366] pvrusb2: request_firmware fatal error with code=-110 [ 573.048745][ T2366] pvrusb2: Failure uploading firmware1 [ 573.048756][ T2366] pvrusb2: Device initialization was not successful. [ 573.048766][ T2366] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 573.048778][ T2366] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 573.048824][ T2366] pvrusb2: Failed to submit write-control URB status=-19 [ 573.049483][ T2366] usb 2-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 573.049508][ T2366] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 574.585852][ T187] pvrusb2: Device being rendered inoperable [ 576.022552][ C1] net_ratelimit: 18104 callbacks suppressed [ 576.022575][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:8f:d0:da:da:9c, vlan:0) [ 576.022831][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 576.023019][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:8f:d0:da:da:9c, vlan:0) [ 576.023283][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 576.023391][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 576.023786][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 576.024121][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 576.024615][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 576.025031][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 576.025397][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 581.032629][ C0] net_ratelimit: 16563 callbacks suppressed [ 581.032652][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 581.033001][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 581.033422][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 581.033905][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 581.034242][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 581.034276][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 581.034760][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 581.035212][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 581.035562][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 581.035734][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:8f:d0:da:da:9c, vlan:0) [ 586.042867][ C0] net_ratelimit: 15846 callbacks suppressed [ 586.042890][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 586.042948][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 586.043387][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 586.043752][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 586.044226][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 586.044626][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:8f:d0:da:da:9c, vlan:0) [ 586.044651][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 586.044946][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 586.045017][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 586.045413][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:8f:d0:da:da:9c, vlan:0) [ 591.052585][ C0] net_ratelimit: 17256 callbacks suppressed [ 591.052609][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 591.053055][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 591.053436][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 591.053461][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 591.053948][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 591.054471][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 591.054883][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 591.054977][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:8f:d0:da:da:9c, vlan:0) [ 591.055306][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 591.055403][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 596.062648][ C0] net_ratelimit: 17690 callbacks suppressed [ 596.062673][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 596.063068][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 596.063407][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 596.063911][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 596.064184][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 596.064389][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 596.064718][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 596.065197][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 596.065585][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:8f:d0:da:da:9c, vlan:0) [ 596.065605][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 601.072615][ C1] net_ratelimit: 18149 callbacks suppressed [ 601.072640][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:8f:d0:da:da:9c, vlan:0) [ 601.072794][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 601.073115][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:8f:d0:da:da:9c, vlan:0) [ 601.073283][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 601.073450][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 601.073746][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 601.074127][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 601.074505][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 601.074898][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 601.075347][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 606.082595][ C0] net_ratelimit: 18685 callbacks suppressed [ 606.082618][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 606.082942][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 606.083428][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 606.083513][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 606.083747][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 606.084201][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 606.084588][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 606.084914][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 606.085055][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:8f:d0:da:da:9c, vlan:0) [ 606.085296][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 611.092726][ C0] net_ratelimit: 19120 callbacks suppressed [ 611.092749][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 611.093137][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 611.093395][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 611.093485][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 611.093880][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 611.093894][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:8f:d0:da:da:9c, vlan:0) [ 611.094371][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 611.094700][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 611.095150][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 611.095165][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 616.102866][ C0] net_ratelimit: 19017 callbacks suppressed [ 616.102890][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 616.102888][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 616.103254][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 616.103592][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 616.103928][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 616.104166][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 616.104495][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 616.104725][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 616.105079][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 616.105403][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 621.112813][ C0] net_ratelimit: 18232 callbacks suppressed [ 621.112837][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 621.113239][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 621.113420][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:8f:d0:da:da:9c, vlan:0) [ 621.113892][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 621.114308][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 621.114774][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 621.114776][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 621.115166][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 621.115270][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:8f:d0:da:da:9c, vlan:0) [ 621.115642][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 625.216072][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.227776][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.122538][ C1] net_ratelimit: 18114 callbacks suppressed [ 626.122562][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 626.122815][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 626.123142][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 626.123535][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 626.123953][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:8f:d0:da:da:9c, vlan:0) [ 626.124006][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 626.124329][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 626.124861][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 626.125184][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 626.125238][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 631.132747][ C0] net_ratelimit: 18949 callbacks suppressed [ 631.132771][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.132822][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:8f:d0:da:da:9c, vlan:0) [ 631.133175][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 631.133204][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.133656][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.133972][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.134467][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.134552][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 631.134786][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.135055][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:8f:d0:da:da:9c, vlan:0) [ 636.142562][ C0] net_ratelimit: 18359 callbacks suppressed [ 636.142584][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.142658][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:8f:d0:da:da:9c, vlan:0) [ 636.142978][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 636.143095][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.143448][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.143990][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.144175][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 636.144414][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.144631][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:8f:d0:da:da:9c, vlan:0) [ 636.144847][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 641.152884][ C0] net_ratelimit: 17888 callbacks suppressed [ 641.152908][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 641.153124][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 641.153385][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 641.153583][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:8f:d0:da:da:9c, vlan:0) [ 641.153735][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 641.153971][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:8f:d0:da:da:9c, vlan:0) [ 641.154207][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 641.154303][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 641.154548][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 641.155028][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 646.162739][ C0] net_ratelimit: 17900 callbacks suppressed [ 646.162764][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 646.163130][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 646.163476][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 646.163617][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 646.164119][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 646.164486][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 646.165062][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 646.165244][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:8f:d0:da:da:9c, vlan:0) [ 646.165430][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 646.165958][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 651.172629][ C0] net_ratelimit: 17280 callbacks suppressed [ 651.172652][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 651.172997][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 651.173414][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 651.173757][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:8f:d0:da:da:9c, vlan:0) [ 651.173888][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 651.174236][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 651.174710][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 651.174994][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 651.175080][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 651.175490][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:8f:d0:da:da:9c, vlan:0) [ 656.182939][ C0] net_ratelimit: 17619 callbacks suppressed [ 656.182963][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 656.183144][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:8f:d0:da:da:9c, vlan:0) [ 656.183316][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 656.183875][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 656.184299][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 656.184386][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 656.184657][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 656.184874][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:8f:d0:da:da:9c, vlan:0) [ 656.185081][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 656.185266][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:8f:d0:da:da:9c, vlan:0) [ 661.192544][ C0] net_ratelimit: 17514 callbacks suppressed [ 661.192567][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 661.192806][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 661.192924][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 661.193346][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 661.193600][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:8f:d0:da:da:9c, vlan:0) [ 661.193835][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 661.194038][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:8f:d0:da:da:9c, vlan:0) [ 661.194343][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 661.194385][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 661.194840][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.504604][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 666.202802][ C1] net_ratelimit: 18051 callbacks suppressed [ 666.202825][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 666.202848][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 666.203201][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 666.203319][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:8f:d0:da:da:9c, vlan:0) [ 666.203713][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 666.204063][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 666.204592][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 666.204601][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 666.205025][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 666.205384][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 671.212873][ C1] net_ratelimit: 18192 callbacks suppressed [ 671.212898][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 671.212905][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 671.213326][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 671.213360][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:8f:d0:da:da:9c, vlan:0) [ 671.213680][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 671.214215][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 671.214515][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 671.214751][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 671.215111][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 671.215603][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 676.222764][ C0] net_ratelimit: 18648 callbacks suppressed [ 676.222788][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 676.222944][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 676.223191][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 676.223450][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:8f:d0:da:da:9c, vlan:0) [ 676.223646][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 676.223872][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:8f:d0:da:da:9c, vlan:0) [ 676.223978][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 676.224429][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 676.224753][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 676.225241][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 681.232482][ C0] net_ratelimit: 17698 callbacks suppressed [ 681.232505][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 681.232676][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 681.232936][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 681.233173][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:8f:d0:da:da:9c, vlan:0) [ 681.233422][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 681.233772][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 681.234126][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 681.234306][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 681.234629][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:8f:d0:da:da:9c, vlan:0) [ 681.234700][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.804263][ T2366] pvrusb2: request_firmware fatal error with code=-110 [ 685.804289][ T2366] pvrusb2: Failure uploading firmware1 [ 685.804300][ T2366] pvrusb2: Device initialization was not successful. [ 685.804311][ T2366] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 685.804323][ T2366] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 685.804611][ T187] pvrusb2: Device being rendered inoperable [ 686.242643][ C1] net_ratelimit: 17457 callbacks suppressed [ 686.242667][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:8f:d0:da:da:9c, vlan:0) [ 686.242738][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 686.243168][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 686.243459][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 686.243488][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 686.243882][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 686.243918][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:8f:d0:da:da:9c, vlan:0) [ 686.244329][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 686.244646][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 686.244703][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 687.162142][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.174685][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.252485][ C0] net_ratelimit: 18907 callbacks suppressed [ 691.252509][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 691.252877][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 691.253077][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 691.253382][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 691.253565][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:8f:d0:da:da:9c, vlan:0) [ 691.253730][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 691.254229][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 691.254407][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 691.254652][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 691.254904][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:8f:d0:da:da:9c, vlan:0) [ 696.262648][ C0] net_ratelimit: 17739 callbacks suppressed [ 696.262671][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 696.263036][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 696.263142][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:8f:d0:da:da:9c, vlan:0) [ 696.263545][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 696.263909][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 696.263932][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 696.264393][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:8f:d0:da:da:9c, vlan:0) [ 696.264429][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 696.264859][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 696.265156][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 697.580185][ T30] INFO: task kworker/0:1:11 blocked for more than 144 seconds. [ 697.580218][ T30] Tainted: G L syzkaller #0 [ 697.580232][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 697.580245][ T30] task:kworker/0:1 state:D stack:20104 pid:11 tgid:11 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 697.580310][ T30] Workqueue: events console_callback [ 697.580449][ T30] Call Trace: [ 697.580459][ T30] [ 697.580475][ T30] __schedule+0x17d9/0x56c0 [ 697.580540][ T30] ? __pfx___schedule+0x10/0x10 [ 697.580580][ T30] ? schedule+0x90/0x2b0 [ 697.580612][ T30] schedule+0x164/0x2b0 [ 697.580643][ T30] schedule_timeout+0xc0/0x2c0 [ 697.580677][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 697.580701][ T30] ? __lock_acquire+0x683/0x2cf0 [ 697.580749][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 697.580781][ T30] __down_common+0x3b7/0x850 [ 697.580825][ T30] ? __pfx___down_common+0x10/0x10 [ 697.580863][ T30] ? rcu_is_watching+0x15/0xb0 [ 697.580904][ T30] down+0x80/0xd0 [ 697.580936][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 697.580976][ T30] console_lock+0x58/0x90 [ 697.580998][ T30] console_callback+0x69/0x450 [ 697.581033][ T30] ? __pfx_console_callback+0x10/0x10 [ 697.581071][ T30] ? rcu_is_watching+0x15/0xb0 [ 697.581108][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 697.581135][ T30] process_scheduled_works+0xa8e/0x14e0 [ 697.581192][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 697.581227][ T30] ? assign_work+0x3cf/0x5d0 [ 697.581259][ T30] worker_thread+0xa47/0xfb0 [ 697.581315][ T30] kthread+0x388/0x470 [ 697.581349][ T30] ? __pfx_worker_thread+0x10/0x10 [ 697.581374][ T30] ? __pfx_kthread+0x10/0x10 [ 697.581407][ T30] ret_from_fork+0x514/0xb70 [ 697.581444][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 697.594555][ T30] ? __switch_to+0xc89/0x1420 [ 697.594601][ T30] ? __pfx_kthread+0x10/0x10 [ 697.594636][ T30] ret_from_fork_asm+0x1a/0x30 [ 697.594689][ T30] [ 697.594893][ T30] INFO: task syz.2.1739:11815 blocked for more than 144 seconds. [ 697.594917][ T30] Tainted: G L syzkaller #0 [ 697.594932][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 697.594943][ T30] task:syz.2.1739 state:D stack:26584 pid:11815 tgid:11811 ppid:5645 task_flags:0x400040 flags:0x00080002 [ 697.595013][ T30] Call Trace: [ 697.595022][ T30] [ 697.595037][ T30] __schedule+0x17d9/0x56c0 [ 697.595097][ T30] ? __pfx___schedule+0x10/0x10 [ 697.595136][ T30] ? schedule+0x90/0x2b0 [ 697.595167][ T30] schedule+0x164/0x2b0 [ 697.595198][ T30] schedule_preempt_disabled+0x13/0x30 [ 697.595227][ T30] __mutex_lock+0x7bf/0x1550 [ 697.595264][ T30] ? __mutex_lock+0x5d4/0x1550 [ 697.595299][ T30] ? n_tty_write+0x2ac/0x11e0 [ 697.595329][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 697.595375][ T30] ? down_read+0x2be/0x330 [ 697.595413][ T30] n_tty_write+0x2ac/0x11e0 [ 697.595440][ T30] ? __might_fault+0xaf/0x130 [ 697.595473][ T30] ? _copy_from_iter+0x2d3/0x1660 [ 697.595583][ T30] ? __pfx_futex_wake_mark+0x10/0x10 [ 697.595617][ T30] ? file_tty_write+0x1e4/0x9c0 [ 697.595690][ T30] ? __pfx_n_tty_write+0x10/0x10 [ 697.595717][ T30] ? __pfx_woken_wake_function+0x10/0x10 [ 697.595750][ T30] ? __lock_acquire+0x683/0x2cf0 [ 697.595780][ T30] ? ldsem_down_read+0x12/0x40 [ 697.595813][ T30] ? __pfx_n_tty_write+0x10/0x10 [ 697.595839][ T30] file_tty_write+0x509/0x9c0 [ 697.595882][ T30] vfs_write+0x612/0xba0 [ 697.595928][ T30] ? __pfx_vfs_write+0x10/0x10 [ 697.595974][ T30] ? __fget_files+0x2a/0x420 [ 697.596014][ T30] ksys_write+0x150/0x270 [ 697.596051][ T30] ? __pfx_ksys_write+0x10/0x10 [ 697.596094][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.596121][ T30] do_syscall_64+0x174/0x580 [ 697.596152][ T30] ? trace_irq_disable+0x3b/0x140 [ 697.596182][ T30] ? clear_bhb_loop+0x40/0x90 [ 697.596211][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.596235][ T30] RIP: 0033:0x7fae3259de59 [ 697.596257][ T30] RSP: 002b:00007fae333e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 697.596283][ T30] RAX: ffffffffffffffda RBX: 00007fae32826090 RCX: 00007fae3259de59 [ 697.596301][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 697.596316][ T30] RBP: 00007fae32633e6f R08: 0000000000000000 R09: 0000000000000000 [ 697.596332][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 697.596347][ T30] R13: 00007fae32826128 R14: 00007fae32826090 R15: 00007fae3294fa48 [ 697.596383][ T30] [ 697.596408][ T30] [ 697.596408][ T30] Showing all locks held in the system: [ 697.596418][ T30] 1 lock held by kthreadd/2: [ 697.596435][ T30] 4 locks held by kworker/0:0/9: [ 697.596448][ T30] #0: ffff888033d7fd40 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 697.596525][ T30] #1: ffffc900000e7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 697.596607][ T30] #2: ffff888012159440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 697.596745][ T30] #3: ffff888079e77028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0 [ 697.596814][ T30] 2 locks held by kworker/0:1/11: [ 697.596828][ T30] #0: ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 697.596891][ T30] #1: ffffc90000107c40 (console_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 697.596953][ T30] 3 locks held by kworker/u8:0/12: [ 697.596968][ T30] 1 lock held by kworker/R-mm_pe/13: [ 697.596981][ T30] #0: ffffffff8e9f6ea0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xbda/0x10b0 [ 697.597048][ T30] 4 locks held by kworker/u8:1/14: [ 697.597066][ T30] 1 lock held by khungtaskd/30: [ 697.597078][ T30] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 697.597156][ T30] 4 locks held by kworker/u8:2/35: [ 697.597172][ T30] 4 locks held by kworker/1:1/42: [ 697.597185][ T30] #0: ffff888035f60940 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 697.597255][ T30] #1: ffffc90000b27c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 697.597333][ T30] #2: ffff88807836d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 697.597400][ T30] #3: ffff88803675d270 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0 [ 697.597467][ T30] 3 locks held by kworker/u8:3/48: [ 697.597481][ T30] #0: ffff888032b0e940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 697.597544][ T30] #1: ffffc90000b87c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 697.597609][ T30] #2: ffffffff9002bec0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 697.597762][ T30] 3 locks held by kworker/u8:4/63: [ 697.597780][ T30] 6 locks held by kworker/u8:5/140: [ 697.597794][ T30] 6 locks held by kworker/0:2/187: [ 697.597808][ T30] 5 locks held by kworker/1:2/809: [ 697.597839][ T30] 4 locks held by kworker/u8:9/3291: [ 697.597853][ T30] 4 locks held by kworker/u8:10/3353: [ 697.597868][ T30] 2 locks held by klogd/4982: [ 697.597883][ T30] 2 locks held by udevd/4993: [ 697.597896][ T30] 5 locks held by dhcpcd/5288: [ 697.597909][ T30] 2 locks held by getty/5381: [ 697.597923][ T30] #0: ffff8880373b60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 697.597993][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 697.598057][ T30] 2 locks held by syz-executor/5613: [ 697.598072][ T30] 7 locks held by kworker/u9:5/5636: [ 697.598085][ T30] #0: ffff888054cbe140 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 697.598148][ T30] #1: ffffc900041dfc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 697.598210][ T30] #2: ffff88807d7a0ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 697.598327][ T30] #3: ffff88807d7a00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 697.598416][ T30] #4: ffffffff901b2c20 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x145/0x320 [ 697.598515][ T30] #5: ffff888079a6baf8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x92/0x570 [ 697.598612][ T30] #6: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 697.598690][ T30] 4 locks held by kworker/1:6/5713: [ 697.598704][ T30] #0: ffff888033d7fd40 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 697.598774][ T30] #1: ffffc9000497fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 697.598854][ T30] #2: ffff888012159440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 697.598923][ T30] #3: ffff888079e76640 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0 [ 697.598991][ T30] 3 locks held by kworker/0:5/5720: [ 697.599005][ T30] #0: ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 697.599068][ T30] #1: ffffc900050efc40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 697.599129][ T30] #2: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 697.599192][ T30] 3 locks held by kworker/1:7/5727: [ 697.599206][ T30] 3 locks held by kworker/0:6/5728: [ 697.599220][ T30] 3 locks held by kworker/u8:11/5815: [ 697.599234][ T30] 8 locks held by kworker/u8:12/5816: [ 697.599249][ T30] 4 locks held by kworker/u8:13/5817: [ 697.599263][ T30] 4 locks held by kworker/u8:14/5818: [ 697.599278][ T30] 4 locks held by kworker/u8:17/5824: [ 697.599292][ T30] 3 locks held by kworker/u8:18/5825: [ 697.599306][ T30] 4 locks held by kworker/u8:20/5828: [ 697.599320][ T30] 4 locks held by kworker/u8:24/5832: [ 697.599335][ T30] 4 locks held by kworker/u8:25/5833: [ 697.599349][ T30] 4 locks held by kworker/u8:26/5834: [ 697.599364][ T30] 4 locks held by kworker/u8:27/6270: [ 697.599378][ T30] 2 locks held by kworker/u8:28/6271: [ 697.599393][ T30] 4 locks held by kworker/u8:29/6272: [ 697.599407][ T30] 3 locks held by kworker/u8:30/6274: [ 697.599421][ T30] 4 locks held by kworker/u8:32/6276: [ 697.599435][ T30] 7 locks held by kworker/u8:33/6277: [ 697.599449][ T30] 4 locks held by kworker/u8:34/6278: [ 697.599466][ T30] 3 locks held by kworker/u8:35/8462: [ 697.599483][ T30] 3 locks held by kworker/0:3/10154: [ 697.599497][ T30] 3 locks held by kworker/0:4/10156: [ 697.599511][ T30] 4 locks held by udevd/10373: [ 697.599525][ T30] #0: ffff888033bef878 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 [ 697.599615][ T30] #1: ffff88807dd0d880 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 697.599698][ T30] #2: ffff8880764645a8 (kn->active#31){.+.+}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 697.599767][ T30] #3: ffff8880799321d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 697.599889][ T30] 3 locks held by kworker/1:0/10906: [ 697.599905][ T30] 1 lock held by syz-executor/11702: [ 697.599919][ T30] 1 lock held by kworker/R-wg-cr/11717: [ 697.599933][ T30] #0: ffffffff8e9f6ea0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xbda/0x10b0 [ 697.600000][ T30] 1 lock held by kworker/R-wg-cr/11718: [ 697.600014][ T30] #0: ffffffff8e9f6ea0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 697.600079][ T30] 1 lock held by kworker/R-wg-cr/11719: [ 697.600095][ T30] 4 locks held by kworker/0:8/11785: [ 697.600108][ T30] #0: ffff88801b029d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 697.600173][ T30] #1: ffffc90003ca7c40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 697.600235][ T30] #2: ffffffff9002bec0 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xac/0x1110 [ 697.600382][ T30] #3: ffff888041d707a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_check_chans_work+0x1a1/0x1110 [ 697.600453][ T30] 1 lock held by syz.4.1735/11826: [ 697.600468][ T30] 4 locks held by syz.2.1739/11815: [ 697.600482][ T30] #0: ffff888051ebd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 697.600551][ T30] #1: ffff888051ebd128 (&tty->atomic_write_lock){+.+.}-{4:4}, at: file_tty_write+0x1e4/0x9c0 [ 697.600620][ T30] #2: ffff888051ebd2c8 (&tty->termios_rwsem){++++}-{4:4}, at: n_tty_write+0x1f5/0x11e0 [ 697.600694][ T30] #3: ffffc90003239370 (&ldata->output_lock){+.+.}-{4:4}, at: n_tty_write+0x2ac/0x11e0 [ 697.600759][ T30] [ 697.600767][ T30] ============================================= [ 697.600767][ T30] [ 697.600779][ T30] NMI backtrace for cpu 0 [ 697.600800][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 697.600840][ T30] Tainted: [L]=SOFTLOCKUP [ 697.600847][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 697.600860][ T30] Call Trace: [ 697.600868][ T30] [ 697.600877][ T30] dump_stack_lvl+0xe8/0x150 [ 697.600910][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 697.600992][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 697.601026][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 697.601054][ T30] sys_info+0x135/0x170 [ 697.601075][ T30] watchdog+0xfd7/0x1030 [ 697.601110][ T30] ? watchdog+0x1c7/0x1030 [ 697.601143][ T30] kthread+0x388/0x470 [ 697.601173][ T30] ? __pfx_watchdog+0x10/0x10 [ 697.601197][ T30] ? __pfx_kthread+0x10/0x10 [ 697.601228][ T30] ret_from_fork+0x514/0xb70 [ 697.601262][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 697.601293][ T30] ? __switch_to+0xc89/0x1420 [ 697.601323][ T30] ? __pfx_kthread+0x10/0x10 [ 697.601354][ T30] ret_from_fork_asm+0x1a/0x30 [ 697.601392][ T30] [ 697.601400][ T30] Sending NMI from CPU 0 to CPUs 1: [ 697.601442][ C1] NMI backtrace for cpu 1 [ 697.601458][ C1] CPU: 1 UID: 0 PID: 6277 Comm: kworker/u8:33 Tainted: G L syzkaller #0 PREEMPT(full) [ 697.601484][ C1] Tainted: [L]=SOFTLOCKUP [ 697.601490][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 697.601503][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 697.601586][ C1] RIP: 0010:deref_stack_reg+0xb5/0x220 [ 697.601608][ C1] Code: 85 39 01 00 00 41 83 3f 00 0f 95 c0 4c 39 c5 0f 96 c1 20 c1 4d 39 c6 0f 97 c0 20 c8 3c 01 75 18 49 8d 40 08 48 39 e8 0f 97 c1 <4c> 39 f0 0f 96 c0 84 c1 0f 85 c0 00 00 00 49 8d 7f 28 48 89 f8 48 [ 697.601625][ C1] RSP: 0018:ffffc90000a07ab8 EFLAGS: 00000202 [ 697.601645][ C1] RAX: ffffc9000205ff40 RBX: 1ffff92000140f75 RCX: 0000000000000001 [ 697.601660][ C1] RDX: ffffc90000a07be8 RSI: dffffc0000000000 RDI: ffffc90000a07bb8 [ 697.601674][ C1] RBP: ffffc90002058000 R08: ffffc9000205ff38 R09: 0000000000000000 [ 697.601687][ C1] R10: ffffc90000a07bf8 R11: fffff52000140f81 R12: 1ffff92000140f76 [ 697.601701][ C1] R13: 1ffff92000140f77 R14: ffffc90002060000 R15: ffffc90000a07ba8 [ 697.601717][ C1] FS: 0000000000000000(0000) GS:ffff888125059000(0000) knlGS:0000000000000000 [ 697.601732][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 697.601745][ C1] CR2: 0000200000ba5000 CR3: 000000000e946000 CR4: 00000000003526f0 [ 697.601762][ C1] Call Trace: [ 697.601769][ C1] [ 697.601779][ C1] unwind_next_frame+0x19bd/0x2550 [ 697.601801][ C1] ? ret_from_fork+0x514/0xb70 [ 697.601825][ C1] ? unwind_next_frame+0x8f/0x2550 [ 697.601845][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 697.601869][ C1] arch_stack_walk+0x11b/0x150 [ 697.601889][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 697.601908][ C1] stack_trace_save+0xa9/0x100 [ 697.601929][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 697.601954][ C1] ? __lock_acquire+0x683/0x2cf0 [ 697.601981][ C1] kasan_save_track+0x3e/0x80 [ 697.602012][ C1] ? kasan_save_track+0x3e/0x80 [ 697.602034][ C1] ? kasan_save_free_info+0x40/0x50 [ 697.602052][ C1] ? __kasan_slab_free+0x5c/0x80 [ 697.602075][ C1] ? kmem_cache_free+0x182/0x650 [ 697.602097][ C1] ? ip6_mc_input+0x909/0xbc0 [ 697.602122][ C1] ? ip_sabotage_in+0x1e1/0x270 [ 697.602176][ C1] ? nf_hook_slow+0xc5/0x220 [ 697.602249][ C1] ? NF_HOOK+0x21f/0x3c0 [ 697.602271][ C1] ? netif_receive_skb+0x278/0xbf0 [ 697.602329][ C1] ? NF_HOOK+0xa4/0x3a0 [ 697.602397][ C1] ? br_handle_frame_finish+0x1192/0x1990 [ 697.602425][ C1] ? br_nf_hook_thresh+0x3dd/0x4c0 [ 697.602451][ C1] ? br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 697.602481][ C1] ? br_nf_pre_routing_ipv6+0x382/0x6f0 [ 697.602509][ C1] ? br_handle_frame+0x127f/0x1510 [ 697.602533][ C1] ? __netif_receive_skb_core+0x989/0x30b0 [ 697.602582][ C1] ? process_backlog+0x706/0x1860 [ 697.602608][ C1] ? __napi_poll+0xaa/0x330 [ 697.602631][ C1] ? net_rx_action+0x61d/0xf50 [ 697.602657][ C1] ? handle_softirqs+0x225/0x840 [ 697.602688][ C1] ? do_softirq+0x76/0xd0 [ 697.602710][ C1] ? __local_bh_enable_ip+0xf8/0x130 [ 697.602734][ C1] ? cfg80211_inform_single_bss_data+0x1491/0x1be0 [ 697.602759][ C1] ? cfg80211_inform_bss_data+0x258/0x3c40 [ 697.602781][ C1] ? cfg80211_inform_bss_frame_data+0x3c7/0x730 [ 697.602805][ C1] ? ieee80211_bss_info_update+0x791/0xa50 [ 697.602898][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x1c8b/0x2be0 [ 697.602952][ C1] ? ieee80211_iface_work+0x78a/0x1010 [ 697.603007][ C1] ? cfg80211_wiphy_work+0x29e/0x420 [ 697.603034][ C1] ? process_scheduled_works+0xa8e/0x14e0 [ 697.603058][ C1] ? worker_thread+0xa47/0xfb0 [ 697.603082][ C1] ? kthread+0x388/0x470 [ 697.603111][ C1] ? ret_from_fork+0x514/0xb70 [ 697.603167][ C1] ? ip6_mc_input+0x909/0xbc0 [ 697.603196][ C1] kasan_save_free_info+0x40/0x50 [ 697.603220][ C1] __kasan_slab_free+0x5c/0x80 [ 697.603250][ C1] kmem_cache_free+0x182/0x650 [ 697.603284][ C1] ip6_mc_input+0x909/0xbc0 [ 697.603318][ C1] ? __pfx_ip6_mc_input+0x10/0x10 [ 697.603352][ C1] ? ip6_rcv_finish+0x265/0x280 [ 697.603380][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 697.603419][ C1] ip_sabotage_in+0x1e1/0x270 [ 697.603449][ C1] ? __pfx_ip_sabotage_in+0x10/0x10 [ 697.603482][ C1] nf_hook_slow+0xc5/0x220 [ 697.603509][ C1] NF_HOOK+0x21f/0x3c0 [ 697.603545][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 697.603573][ C1] ? NF_HOOK+0x9e/0x3c0 [ 697.603601][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 697.603627][ C1] ? ip6_rcv_core+0xa1/0x1870 [ 697.603656][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 697.603689][ C1] ? netif_receive_skb+0x102/0xbf0 [ 697.603715][ C1] netif_receive_skb+0x278/0xbf0 [ 697.603739][ C1] ? NF_HOOK+0xfa/0x3a0 [ 697.603767][ C1] ? lock_acquire+0x106/0x350 [ 697.603800][ C1] ? __pfx_netif_receive_skb+0x10/0x10 [ 697.603827][ C1] ? br_netif_receive_skb+0x126/0x190 [ 697.603861][ C1] NF_HOOK+0xa4/0x3a0 [ 697.603890][ C1] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 697.603922][ C1] ? NF_HOOK+0xfa/0x3a0 [ 697.603950][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 697.603982][ C1] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 697.604018][ C1] ? br_pass_frame_up+0x275/0x420 [ 697.604051][ C1] br_handle_frame_finish+0x1192/0x1990 [ 697.604082][ C1] ? kasan_save_track+0x4f/0x80 [ 697.604116][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 697.604159][ C1] ? ip6t_do_table+0x1d1/0x15b0 [ 697.604215][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 697.604239][ C1] ? nf_hook_slow+0x176/0x220 [ 697.604264][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 697.604295][ C1] br_nf_hook_thresh+0x3dd/0x4c0 [ 697.604325][ C1] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 697.604423][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 697.604456][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 697.604488][ C1] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 697.604521][ C1] ? lock_acquire+0x106/0x350 [ 697.604554][ C1] br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 697.604588][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 697.604624][ C1] br_nf_pre_routing_ipv6+0x382/0x6f0 [ 697.604657][ C1] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 697.604689][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 697.604723][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 697.604756][ C1] ? br_nf_pre_routing+0x720/0x14b0 [ 697.604791][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 697.604821][ C1] br_handle_frame+0x127f/0x1510 [ 697.604859][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 697.604892][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 697.604922][ C1] ? kasan_quarantine_put+0xbb/0x1f0 [ 697.604950][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 697.604984][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 697.605014][ C1] __netif_receive_skb_core+0x989/0x30b0 [ 697.605049][ C1] ? __pfx_ip6_mc_input+0x10/0x10 [ 697.605081][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 697.605107][ C1] ? ip6_rcv_finish+0x265/0x280 [ 697.605137][ C1] ? NF_HOOK+0x336/0x3c0 [ 697.605178][ C1] ? process_backlog+0x3c3/0x1860 [ 697.605206][ C1] ? lock_acquire+0x106/0x350 [ 697.605235][ C1] ? process_backlog+0x3c3/0x1860 [ 697.605267][ C1] ? process_backlog+0x3c3/0x1860 [ 697.605294][ C1] ? process_backlog+0x3c3/0x1860 [ 697.605324][ C1] process_backlog+0x706/0x1860 [ 697.605355][ C1] ? process_backlog+0x3c3/0x1860 [ 697.605393][ C1] __napi_poll+0xaa/0x330 [ 697.605421][ C1] net_rx_action+0x61d/0xf50 [ 697.605457][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 697.605503][ C1] handle_softirqs+0x225/0x840 [ 697.605531][ C1] ? do_softirq+0x76/0xd0 [ 697.605557][ C1] ? cfg80211_inform_single_bss_data+0x1491/0x1be0 [ 697.605583][ C1] do_softirq+0x76/0xd0 [ 697.605607][ C1] [ 697.605615][ C1] [ 697.605624][ C1] __local_bh_enable_ip+0xf8/0x130 [ 697.605650][ C1] cfg80211_inform_single_bss_data+0x1491/0x1be0 [ 697.605682][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 697.605724][ C1] ? _ieee802_11_parse_elems_full+0x2c0/0x4950 [ 697.605782][ C1] ? cfg80211_inform_bss_data+0x245/0x3c40 [ 697.605809][ C1] cfg80211_inform_bss_data+0x258/0x3c40 [ 697.605850][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 697.605899][ C1] ? __lock_acquire+0x683/0x2cf0 [ 697.605939][ C1] ? cfg80211_defragment_element+0x3e/0x360 [ 697.605966][ C1] ? ieee80211_bss_info_update+0x30f/0xa50 [ 697.606002][ C1] cfg80211_inform_bss_frame_data+0x3c7/0x730 [ 697.606030][ C1] ? ieee80211_bss_info_update+0x30f/0xa50 [ 697.606067][ C1] ieee80211_bss_info_update+0x791/0xa50 [ 697.606104][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 697.606137][ C1] ? sta_info_get+0x4f/0x300 [ 697.606176][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xf16/0x2be0 [ 697.606212][ C1] ieee80211_ibss_rx_queued_mgmt+0x1c8b/0x2be0 [ 697.606252][ C1] ? process_scheduled_works+0xa8e/0x14e0 [ 697.606281][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xf16/0x2be0 [ 697.606314][ C1] ? __lock_acquire+0x683/0x2cf0 [ 697.606345][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 697.606400][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 697.606432][ C1] ? kcov_remote_start+0x181/0x790 [ 697.606465][ C1] ieee80211_iface_work+0x78a/0x1010 [ 697.606512][ C1] cfg80211_wiphy_work+0x29e/0x420 [ 697.606542][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 697.606567][ C1] process_scheduled_works+0xa8e/0x14e0 [ 697.606615][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 697.606645][ C1] ? assign_work+0x3cf/0x5d0 [ 697.606672][ C1] worker_thread+0xa47/0xfb0 [ 697.606714][ C1] kthread+0x388/0x470 [ 697.606746][ C1] ? __pfx_worker_thread+0x10/0x10 [ 697.606770][ C1] ? __pfx_kthread+0x10/0x10 [ 697.606801][ C1] ret_from_fork+0x514/0xb70 [ 697.606835][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 697.606867][ C1] ? __switch_to+0xc89/0x1420 [ 697.606895][ C1] ? __pfx_kthread+0x10/0x10 [ 697.606927][ C1] ret_from_fork_asm+0x1a/0x30 [ 697.606958][ C1] [ 697.614925][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 697.614951][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 697.614982][ T30] Tainted: [L]=SOFTLOCKUP [ 697.614992][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 697.615007][ T30] Call Trace: [ 697.615017][ T30] [ 697.615028][ T30] vpanic+0x56c/0xa60 [ 697.615072][ T30] ? __pfx_vpanic+0x10/0x10 [ 697.615108][ T30] ? __down_trylock_console_sem+0x6b/0x110 [ 697.615141][ T30] panic+0xc5/0xd0 [ 697.615173][ T30] ? __pfx_panic+0x10/0x10 [ 697.615211][ T30] ? wq_watchdog_touch+0xf9/0x160 [ 697.615238][ T30] ? nmi_trigger_cpumask_backtrace+0x247/0x380 [ 697.615270][ T30] watchdog+0x1030/0x1030 [ 697.615306][ T30] ? watchdog+0x1c7/0x1030 [ 697.615341][ T30] kthread+0x388/0x470 [ 697.615372][ T30] ? __pfx_watchdog+0x10/0x10 [ 697.615397][ T30] ? __pfx_kthread+0x10/0x10 [ 697.615430][ T30] ret_from_fork+0x514/0xb70 [ 697.615466][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 697.615498][ T30] ? __switch_to+0xc89/0x1420 [ 697.615529][ T30] ? __pfx_kthread+0x10/0x10 [ 697.615561][ T30] ret_from_fork_asm+0x1a/0x30 [ 697.615600][ T30] [ 697.615766][ T30] Kernel Offset: disabled