last executing test programs: 3m5.159666846s ago: executing program 2 (id=4340): msgctl$IPC_INFO(0x0, 0x3, &(0x7f00000000c0)=""/121) 3m5.111948791s ago: executing program 2 (id=4341): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="7000000010003b1a000300000003000000000000", @ANYRES32=0x0, @ANYBLOB="0010000000000000500012800b00010065727370616e000040000280050016000000000004001200050016000200000005000900050000000800040001"], 0x70}}, 0x4) 3m4.938014693s ago: executing program 2 (id=4342): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x2}) r0 = socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmmsg$inet6(r1, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabbcc", 0x3}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="aabbcc", 0x3}], 0x1}}], 0x2, 0x0) socket(0x2, 0x80805, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f"], 0x48) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd28, 0x6000000, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffc00, 0x8, 0x10000000, 0x200000b, 0xff}, @broadcast, @local, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x11, 0x8}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20, 0xffffffffffffffda}, 0x0}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r9, 0xae80, 0x0) setitimer(0x2, &(0x7f00000000c0)={{0x77359400}}, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) ioctl$KVM_CAP_VM_TYPES(r8, 0x4068aea3, &(0x7f0000000100)={0xeb, 0x0, 0x3}) getitimer(0x1, &(0x7f0000000080)) 3m3.823377369s ago: executing program 2 (id=4345): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) syz_usb_connect(0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d22a6640da0320283c520000000109022f0001000000000904000000ef040100052406"], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00'}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6(0xa, 0x3, 0x5) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x14}, @mpls={[], @ipv4=@gre={{0x7, 0x4, 0x2, 0x9, 0xd0, 0x67, 0x0, 0x1, 0x2f, 0x0, @loopback, @remote, {[@rr={0x7, 0x3, 0xc4}, @rr={0x7, 0x3, 0x6f}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xa, 0x0, [0x68], "1d944bfa30ece52bfd92"}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0xfffb]}, {0x8, 0x88be, 0x3, {{0x2, 0x1, 0x4, 0x3, 0x0, 0x3, 0x0, 0xf}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x4, {{0x9, 0x2, 0x80, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x2, {0x7fffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1}}}, {0x8, 0x6558, 0x4, "fa2c972047831c04ecd8a44dc771b301bd4b1948fedfd5b64152ba93c4ff191929eb45f3c0a13848ccff1e609bafaab86dabb3001a466b470c89d97db0ac00fa99f5993bd81534f23cca881eef50bd96d862e500ef56034e11996124fcbde38e5d77"}}}}}, 0xde) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x301, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4840}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x3) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x52f0, 0x1, 0x0, "7734eb0b8ad860b42dfe5cf056133fae0fdbe5587443683e8cc1a7b638182e3c", 0x34325258}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x140c32, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) unshare(0x2c020400) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) umount2(&(0x7f0000000080)='./file0\x00', 0xb) mknodat$loop(r6, &(0x7f0000000000)='./file0\x00', 0xc000, 0x1) 3m0.569256749s ago: executing program 2 (id=4362): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) io_setup(0xbf, &(0x7f0000000100)=0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x5, 0x810, 0xffffffffffffffff, 0x0) (async) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) (async) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3c, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0xffffff}}}}}, 0x0) (async) syz_emit_ethernet(0x16, &(0x7f0000000080)=ANY=[@ANYBLOB="bbaaaaaaaaaa88a80f008100330088ca"], 0x0) (async) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r0, &(0x7f0000000080)='\x00', 0x1}]) (async, rerun: 64) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0xa1e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x81, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc}}}}}]}}]}}, 0x0) (async, rerun: 64) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) (async) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r5 = dup(r4) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000340)={0xd0, 0x1c, '\x00', [@generic={0x6, 0xdb, "59e6b3608200929a3ace5f609031a0e0bb1d0bc9e88978cd186c28cf6137ffc700c98af07ff6a067a692e95be726bc09c4c3724ab28726032ab051979195830cf5c29f34e49c04e2c7891a7532f56dc3a1c13bdd4203c92243dd5bccc6b3003a0070ba00bd583b449ab256f6bf101e84b8ffd6a3a9a455558e01ae9a9770a219a03c65b6a8409c20c06eec634429b8be148d6acc0d66eea9e1a5762d818dfe50942ffa2a4c3b50d96aeade97a589169688a4b59e15217ad7dce23ea4b46023b93e579081b2bf8490e7e847d6995b82de338f27bf7bc2f6d2e90c2e"}, @ra={0x5, 0x2, 0x8}]}, 0xf0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) (rerun: 64) write$UHID_CREATE2(r7, &(0x7f0000000040)=ANY=[], 0x118) (async) syz_extract_tcp_res$synack(&(0x7f0000000200), 0x1, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r7, 0x0) ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xa, 0x4}) (async) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) syz_usb_control_io(r3, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io(r3, &(0x7f0000000040)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="20021f"], 0x0, 0x0, 0x0, 0x0}, 0x0) (rerun: 32) 3m0.198770499s ago: executing program 2 (id=4364): unshare(0x66000080) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174"], 0xcc}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="303e30800200000002d190c937dc6914243b0402d6dcb7154fe6727ae888746b024ee670a5882a0ad79716584e5704b7f62edac751478af9c62f000000000000", 0x40, r1) keyctl$revoke(0x3, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x3, 0x24, 0x0, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000480)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x40, 0x8000, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0x2b, 0xf08}, @sack={0x5, 0x16, [0x4, 0x6, 0x0, 0x2, 0x200]}, @sack={0x5, 0xe, [0x5, 0x8, 0xc709]}, @generic={0xfe, 0xe, "7574364ce7ebf32dd6726fff"}]}}}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 2m59.578977298s ago: executing program 32 (id=4364): unshare(0x66000080) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174"], 0xcc}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="303e30800200000002d190c937dc6914243b0402d6dcb7154fe6727ae888746b024ee670a5882a0ad79716584e5704b7f62edac751478af9c62f000000000000", 0x40, r1) keyctl$revoke(0x3, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x3, 0x24, 0x0, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000480)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x40, 0x8000, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0x2b, 0xf08}, @sack={0x5, 0x16, [0x4, 0x6, 0x0, 0x2, 0x200]}, @sack={0x5, 0xe, [0x5, 0x8, 0xc709]}, @generic={0xfe, 0xe, "7574364ce7ebf32dd6726fff"}]}}}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 59.176546531s ago: executing program 1 (id=5115): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'bond_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @remote}, 0x10) 58.931085388s ago: executing program 1 (id=5120): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="02"], 0x33fe0}}, 0x40010) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="6c6f636b206e6f6e916500"], 0xa) r6 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r7 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r8, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe3, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb776f6, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7357c35c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x5, 0x4, 0x40000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1cd5a44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r8, 0x7b0, &(0x7f00000000c0)={@hyper, 0x1}) r9 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r10 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000006900)="3e12", 0x2, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r7, r9, r10}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000180)=[@increfs_done], 0x4, 0x0, &(0x7f0000000240)="2294a696"}) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f00000000c0)='.\x00', 0x0, &(0x7f0000000280)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[], [{@obj_user={'obj_user', 0x3d, '/dev/cec#\x00'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x31, 0x5d, 0x39, 0x39, 0x37, 0x32, 0x30], 0x2d, [0x61, 0x64, 0x36, 0x61], 0x2d, [0x66, 0x65, 0x53, 0x39], 0x2d, [0x37, 0x30, 0x37, 0x64], 0x2d, [0x37, 0x34, 0x34, 0x0, 0x30, 0x66, 0x31, 0x33]}}}, {@audit}]}}, 0x1, 0x0, &(0x7f0000000380)="1503f47fcee8af5def8b900588653365fe9bef5529b7edb0d930d7b95f5a8b1812a532648a000f6dae612f70ab4449a944b8a2b7013c68d5a1ef8ae00fa0a3ea6bc3535c54ca942ec52db3d606e6eff38780ae28ea16ff34e775dc1508e3013f38de584f21de10dd9f6d71029e897fd4bcd21c44c2aa7f3587601a0c13846ffdf368d6ede017d83e5f81757daf700c2cb5bf53c4229d758b5cf0d8ac2211780d504ff1eccb2d2adbd076a446ee46881113265a38e6c1c42840ea4688667a0c9191f3b794ffd2b717288c155b81f5fb58f8048df014dbdff73b107e0febf4833e73ccb9df8acb0f090c5203038d32a09e6857216028beeae59e") 57.722202091s ago: executing program 0 (id=5131): syz_mount_image$fuse(&(0x7f0000002040), 0x0, 0x0, &(0x7f0000000080)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3e, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000c40)=ANY=[], 0x114}], 0x1}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) (fail_nth: 2) 57.090673233s ago: executing program 1 (id=5133): mkdir(&(0x7f0000000340)='./file0\x00', 0x180) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xaece, 0x2) preadv(r2, &(0x7f00000000c0)=[{&(0x7f00000031c0)=""/166, 0xa6}], 0x1, 0x43a, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) pread64(r4, &(0x7f00000003c0)=""/142, 0x8e, 0x40009) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x23}], 0x1, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="300000000000000084000000010000000000ffff0c"], 0x30}], 0x1, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000880)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)="cb12a33273c97f153f2ba39a", 0xc}], 0x1, 0x0, 0x0, 0x40}], 0x1, 0x20014082) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000240)=[@wr_crn={0x46, 0x20, {0x8, 0x828}}, @wr_crn={0x46, 0x20, {0xb, 0x1}}], 0x40}) ioctl$KVM_SET_CPUID(r9, 0x4008ae8a, &(0x7f0000000240)=ANY=[]) openat$snapshot(0xffffffffffffff9c, &(0x7f0000001180), 0x88003, 0x0) 56.907133046s ago: executing program 0 (id=5135): sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x40800) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000003b80), 0x0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x5, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000003d0000000e0001006e6574021d48ef696d0000000f0002006e657464657673696d300000c88882003c6c325f64726f7073000000000500870000000000"], 0x4c}}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000200c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000003bc0)={'\x00', 0xbe4f, 0x0, 0x7, 0x9, 0xed8}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) sendmsg$nl_route(r0, 0x0, 0x24040040) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c000000070a010300000000000000000a00400109"], 0x2c}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) r7 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r8 = openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff) syz_usb_connect(0x5, 0xe4, 0x0, 0x0) write$binfmt_elf64(r8, &(0x7f0000000200)=ANY=[], 0x1cb) close(r8) 56.816641095s ago: executing program 5 (id=5136): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty}}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x483) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000440)={0x5, 0x2, 0x0, 0x0, 0x12}) getrlimit(0x6, &(0x7f00000000c0)) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) 56.710827407s ago: executing program 3 (id=5137): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) sendmmsg$inet6(r0, &(0x7f0000003080)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x26}, 0x9}, 0x1c, 0x0}}], 0x1, 0x20004894) 56.602398391s ago: executing program 5 (id=5138): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000010, 0x13, r0, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[@ANYBLOB="4c0200001f0000012bbd7000fddbdf25ff010000000000000000000000000001000004d60a003c00fc00000000000000000000000000000154000000ff340000080016000bf3ffff0500190000000000a20008009e000800008196001fba5120a12e2f2aaedb36200a22895444440b4d403e8fb8832ba3aaa440398f278fcf9dd3723ecfc0cfef78dc258f12003c597a09ff8fa572a0c4cde6958cedb7c35e61adc3be03d6649b4db4b23eb2f481f54f151aeab2e822f0271aba4ec563329731a277ee89884a97f8dec87904544471ce74c12fc44d77027f09f42e64a7a97a75d22c97198628258a7d60775b99eaedfe2e64000016010100686d6163287368613235362d6e656f6e290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700600006fa080386652e13ae1dabfb6688dc5f86311ee7dedbb004fb9f2fec71056b960422887f0e5a5d0709c20623cb1454ec35ec8d9437c1feb03028c9c1d5e2fefa48ebf059520a173950c53d5e1f19ab34e74e113715b85995c61e6e69a71478ae5f46cf34597b8865c78be55547a3b21eb67fd1c16a691248f45fc7ed068f3398ee481c718b99dcbadf82ab316fbba8c121d1ef785dfc82793106fb4c0a3b8308537365041f62f2a3a3d4efbbc0327e54e8db5aee37dce041f82a3bd5bbcefa6b512576452a6720450f7d08da0cff3000008001600940a00000a00100000000000005ae40e6268d416400100000000000000000000000000000a010101000000000000000000000000000000000000000054e5ec153cb05f471cef652ef60dabf0e49ab45ec8cff666ac50988f8aacfa13aa3d1920e9850eaa9e1ff46a49155e0d282a9aee328f1cbee0b1af672660053aae4593b43f6ed9e3a704d6347eeb9d3e6ed20de4814faf5eb1cf33bd3779ccac1bcb63b847f436522f41adc37776c6b49a45b9f46f33c033497c65a4e338865d501c0a4de655eccdae0a2100a8874463bf967c96"], 0x24c}, 0x1, 0x0, 0x0, 0x2000c004}, 0x4000) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3f5, 0x0, 0x70bd29, 0x25dfdbfe, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x181}, 0x40000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) r5 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x1c9a82, 0x0) sendfile(r5, r4, 0x0, 0xbc44) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000700)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r7 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000440)={r6, 0xffffffff, 0x10}, &(0x7f0000000480)=0xc) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) 56.602086371s ago: executing program 4 (id=5139): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000002c0)=0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x58, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x20000010) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x66df5cfbe53006d1}, 0x0) unshare(0x58000100) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) fsetxattr(r2, &(0x7f0000000240)=@known='com.apple.system.Security\x00', &(0x7f0000000280)='\x00', 0x1, 0x2) pipe2(0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[], 0x884}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) unshare(0x980) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000000206050000000000000000000000000005000400000012000900020073797a31000000000500010007000b00050005000a00000015000300686173683a69702c706f72742c6e657400000000"], 0x50}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="940000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000005400010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000400000000000000aa0c00028005000100000000000500074000000000"], 0x94}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) 56.572249984s ago: executing program 3 (id=5140): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$userio(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0e00, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000004c00)=""/4090, 0xffa}, {0x0}, {&(0x7f0000000040)=""/169, 0xa9}], 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="00001900000000", @ANYRES32=0x0], 0x18}, 0x1, 0xba01, 0x0, 0x20044044}, 0x400cc14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x0, 0x6080) recvmmsg(r2, &(0x7f0000002c80)=[{{&(0x7f0000000440)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000500)=""/66, 0x42}, {&(0x7f0000000100)=""/40, 0x28}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/180, 0xb4}], 0x4, &(0x7f0000000840)=""/218, 0xda}, 0x4}, {{&(0x7f00000007c0)=@can, 0x80, &(0x7f0000000b00)=[{&(0x7f0000002500)=""/223, 0xdf}, {&(0x7f0000003100)=""/195, 0xc3}, {&(0x7f0000000a40)=""/6, 0x6}, {&(0x7f0000000a80)=""/85, 0x55}], 0x4, &(0x7f0000000b40)=""/221, 0xdd}, 0x4}, {{&(0x7f0000000c40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f0000002300)=[{&(0x7f0000001d40)=""/21, 0x15}, {&(0x7f00000006c0)=""/102, 0x66}, {&(0x7f0000002b80)=""/161, 0xa1}, {&(0x7f0000001ec0)=""/199, 0xc7}, {&(0x7f0000001fc0)=""/163, 0xa3}, {&(0x7f0000002080)=""/34, 0x22}, {&(0x7f00000020c0)=""/112, 0x70}, {&(0x7f0000002140)=""/247, 0xf7}, {&(0x7f0000001e00)=""/138, 0x8a}], 0x9, &(0x7f00000023c0)=""/147, 0x93}}, {{&(0x7f0000002480)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x80, &(0x7f0000002280)=[{&(0x7f0000000340)=""/248, 0xf8}, {&(0x7f0000003000)=""/249, 0xf9}, {&(0x7f0000000cc0)=""/73, 0x49}, {&(0x7f0000002600)=""/197, 0xc5}, {&(0x7f0000002700)=""/194, 0xc2}, {&(0x7f0000002f00)=""/204, 0xcc}], 0x6, &(0x7f0000002880)=""/29, 0x1d}, 0xb}, {{&(0x7f00000028c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002940)=""/140, 0x8c}], 0x1}, 0x10001}, {{&(0x7f0000002a40)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000002ac0)=""/118, 0x76}], 0x1, &(0x7f0000002e00)=""/213, 0xd5}, 0x3}], 0x6, 0xa000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) memfd_create(&(0x7f0000000140)='nl80211\x00', 0x3) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000041c0), 0x40000, 0x0) ioctl$TIOCGPKT(r4, 0x80045438, &(0x7f0000004200)) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x2d, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x4ff, 0xffffffff}, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, 0x0, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) recvmmsg(r5, &(0x7f0000000cc0), 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0xc, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x20, 0x0, @remote}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r6, 0x40045010, &(0x7f0000000040)=0x9) socket$alg(0x26, 0x5, 0x0) 55.319481336s ago: executing program 1 (id=5141): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x24000, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r0 = syz_io_uring_setup(0x9eb, 0x0, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x918) 55.177973326s ago: executing program 1 (id=5142): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x29, 0x42, 0x0, &(0x7f0000000200)=0x4c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000003340)=0x9, 0x4) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, 0x0, 0x24010819) socket$kcm(0x10, 0x3, 0x10) io_setup(0x4, &(0x7f0000000280)) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x0, 0x400, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed300000000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="8801000014"], 0x188}}, 0x0) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) pidfd_getfd(r7, 0xffffffffffffffff, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000063c0)={'vlan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x12d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}]}, 0x50}}, 0x8000002) 55.120346344s ago: executing program 4 (id=5143): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="02"], 0x33fe0}}, 0x40010) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="6c6f636b206e6f6e916500"], 0xa) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, 0x0) r7 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r8, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe3, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb776f6, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7357c35c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x5, 0x4, 0x40000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1cd5a44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r8, 0x7b0, &(0x7f00000000c0)={@hyper, 0x1}) r9 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r10 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000006900)="3e12", 0x2, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r7, r9, r10}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000180)=[@increfs_done], 0x4, 0x0, &(0x7f0000000240)="2294a696"}) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f00000000c0)='.\x00', 0x0, &(0x7f0000000280)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[], [{@obj_user={'obj_user', 0x3d, '/dev/cec#\x00'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x31, 0x5d, 0x39, 0x39, 0x37, 0x32, 0x30], 0x2d, [0x61, 0x64, 0x36, 0x61], 0x2d, [0x66, 0x65, 0x53, 0x39], 0x2d, [0x37, 0x30, 0x37, 0x64], 0x2d, [0x37, 0x34, 0x34, 0x0, 0x30, 0x66, 0x31, 0x33]}}}, {@audit}]}}, 0x1, 0x0, &(0x7f0000000380)="1503f47fcee8af5def8b900588653365fe9bef5529b7edb0d930d7b95f5a8b1812a532648a000f6dae612f70ab4449a944b8a2b7013c68d5a1ef8ae00fa0a3ea6bc3535c54ca942ec52db3d606e6eff38780ae28ea16ff34e775dc1508e3013f38de584f21de10dd9f6d71029e897fd4bcd21c44c2aa7f3587601a0c13846ffdf368d6ede017d83e5f81757daf700c2cb5bf53c4229d758b5cf0d8ac2211780d504ff1eccb2d2adbd076a446ee46881113265a38e6c1c42840ea4688667a0c9191f3b794ffd2b717288c155b81f5fb58f8048df014dbdff73b107e0febf4833e73ccb9df8acb0f090c5203038d32a09e6857216028beeae59e") 53.946314064s ago: executing program 4 (id=5144): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00'}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x90, 0xfffffffffffffff5, 0x8, {0x5, 0x1, 0x3, 0x0, 0xfffffffd, 0x6e, {0x3, 0xfffffffffffffffb, 0x1, 0x100000000004, 0x4000000007, 0x8, 0x8, 0x1002, 0x8, 0x1000, 0x28002, 0x0, 0x0, 0x5, 0x7f}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) ioctl$FS_IOC_SETFLAGS(r1, 0xc0606610, &(0x7f0000000040)=0x60) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x9}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00'}) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x90, 0xfffffffffffffff5, 0x8, {0x5, 0x1, 0x3, 0x0, 0xfffffffd, 0x6e, {0x3, 0xfffffffffffffffb, 0x1, 0x100000000004, 0x4000000007, 0x8, 0x8, 0x1002, 0x8, 0x1000, 0x28002, 0x0, 0x0, 0x5, 0x7f}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) (async) ioctl$FS_IOC_SETFLAGS(r1, 0xc0606610, &(0x7f0000000040)=0x60) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x9}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00"], 0x3c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet(0xa, 0x1, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) (async) 53.715029725s ago: executing program 4 (id=5145): syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gretap0\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x8, 0x7, 0x3, 0xa11, {{0x5, 0x4, 0x0, 0x7, 0x14, 0x67, 0x0, 0x5, 0x2d, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @multicast2}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000480), &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x10000f7, &(0x7f0000000700)=[{}, {}], 0x10, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x59, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB="1e000000", @ANYRES16=r3, @ANYBLOB="495303000000fcfffffd67000000d9b3cda938497752fe08100300", @ANYRES32=0x0, @ANYBLOB="0c0099000700000029000000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343e", 0xc4}], 0x3}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, &(0x7f0000000080)={0x1, @win={{0x0, 0x3004, 0x59091fc, 0x2}, 0x0, 0x7, 0x0, 0xffffffff, 0x0}}) ustat(0x11, &(0x7f0000000600)) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0xa, 0x3, 0xff) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x2, @empty, 0xa098}, {0xa, 0x4e21, 0x8000009, @mcast1, 0xffffffff}, r8, 0x4040099d}}, 0xffffffffffffffc1) 53.470969022s ago: executing program 3 (id=5146): openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0xd, 0x6, 0x601, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x4000) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYRESOCT], 0x3c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x2}}, 0xfffffffffffffea2) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r4, 0xc10c5541, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r5, &(0x7f0000009780)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="5001000000000000", @ANYRES64=0x3, @ANYBLOB="00000000000000000000000000000000ffffffffffffff7f0e00000000000000f8ffffff0800000003000000000000000000000000000080080000000000000000fefffffffffffff0ffffffffffffffe500000000000000080000000c0000000700000000200000050000", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="03000000090000000000000003000000000000000100000000007d5d212b5b00010000000000000000c124eb308ace758e000000000000000900000000000000feffffffffffffff0500000007000000040000000000000002000000000000000800000000000000240f886600000000050000000080400000000900000000a00000ff0300"/146, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="fcffffff07000000000000000400002000000000ffffff7f00000000010000003700"/44], 0x150) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4040000) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_uring_setup(0x5be0, &(0x7f0000000000)={0x0, 0x400067c1, 0x2, 0x4000000, 0x20c}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0xcc) epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private}}}}) 52.907350304s ago: executing program 0 (id=5147): unshare(0x26060400) socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x49, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)=@newqdisc={0x94, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xffff, 0xffff}, {0x2, 0x7}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xe, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0xfff9], [0xfff1, 0xfd44, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0x10c, 0x40, 0xfffc, 0x3, 0x1]}}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x2}}]}, 0x94}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 52.645854852s ago: executing program 5 (id=5148): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$TCGETA(r0, 0x5405, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002c80)=ANY=[@ANYBLOB="401400003f000701feffffff00000000017c0000040042800c00018006000600800a000019140280141414800d1419"], 0x1440}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_usb_connect(0x0, 0x4f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005cdd2e106307151088560000000109023d00010000d00009047e0004ffd234000905b74318860809050725018705ee7b09050a000002810bac090504be93"], 0x0) 52.599332355s ago: executing program 0 (id=5149): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa006}, 0x4) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f00000002c0)=0x0, &(0x7f0000000040)=0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000080)) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x800000000, 0x0, 0x0, 0x10, 0x1}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x288, 0x10, 0x1, 0x20, 0x0, {0x0, 0x0, 0x0, 0x0, 0x184}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0x7}, @IFLA_VF_PORTS={0x234, 0x18, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "955b693cfcf644d40996c335c20ac246"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}, @IFLA_PORT_PROFILE={0xf, 0x2, '/proc/stat\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x1}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "6cfe47c977ae4016c4c2e0caf6fe27c9"}]}, {0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x9}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4c575ea2b42fc152c0f0caa13ddb07aa"}, @IFLA_PORT_VF={0x8, 0x1, 0x62}]}, {0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4002b3759f65a2d8f7d91228a2f09082"}, @IFLA_PORT_PROFILE={0xf, 0x2, '/proc/stat\x00'}]}, {0x5c, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "43993d6a130056600b1f2d633b5ec3d6"}, @IFLA_PORT_VF={0x8, 0x1, 0xdd53}, @IFLA_PORT_PROFILE={0xf, 0x2, '/proc/stat\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x6a}, @IFLA_PORT_VF={0x8, 0x1, 0x63}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "3124c2baf475dbbedc410006f44944d3"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x6, 0x2, '@\x00'}, @IFLA_PORT_PROFILE={0xf, 0x2, '/proc/stat\x00'}, @IFLA_PORT_PROFILE={0x9, 0x2, '\xea@@{\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x1}, @IFLA_PORT_PROFILE={0x0, 0x2, '!\x00'}]}, {0x70, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0xe}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "7e9e677857337b5121f9791735b882c5"}, @IFLA_PORT_VF={0x8, 0x1, 0x1}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "9824b90ca0f2e2822fa3a2af524885d5"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "98bff267630c595bc22666ce7fd54f0a"}, @IFLA_PORT_VF={0x8, 0x1, 0x5}, @IFLA_PORT_PROFILE={0xf, 0x2, '/proc/stat\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x0, 0x2, '\\:\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x3f9}]}, {0x40, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/proc/stat\x00'}, @IFLA_PORT_VF={0xfffffffffffffe4e, 0x1, 0xb3c0}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}, @IFLA_PORT_PROFILE={0x6, 0x2, '!\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "4ecc8e03cfdc966cf0ade507451ad128"}]}, {0x30, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "f0b8425a6112a82856ed6f48955dd521"}, @IFLA_PORT_VF={0x8, 0x1, 0x96}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xb}]}]}, @IFLA_MAP={0x24, 0xe, {0x5, 0x1ff, 0x30fc, 0xca, 0xf4, 0xa}}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfeed}]}, 0x288}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 52.467327745s ago: executing program 0 (id=5150): r0 = socket(0x10, 0x80002, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (rerun: 32) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) (async) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000002c0)="ae", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) (async) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) (async, rerun: 32) sched_setattr(r4, &(0x7f00000000c0)={0x38, 0x0, 0x40, 0xeffffffe, 0xc, 0x5, 0x0, 0x3fe, 0x88d, 0x4}, 0x0) (rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/254) (async, rerun: 32) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$nl_netfilter(r6, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000002500)={0x14, 0x0, 0x3, 0x301, 0x70bd25, 0x25dfdbfb, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20008002}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x18, 0x2d, 0x9, 0x70bd27, 0x0, {0x17}, [@typed={0x4, 0x18, 0x0, 0x0, @binary}]}, 0x18}}, 0x4895) msgsnd(0x0, &(0x7f0000000480)={0x1, "d4998204c8be3a1ea0fc7b3a06d189298d951a4bdc79cd5d691ed71674ecf277e3b72f2b7cca204485352181d4f09ff887dad08fab2ad6a24a0bfd8f2afaf746d15265777f1505f837"}, 0x51, 0x0) (async) io_setup(0x9, &(0x7f0000000100)) (async) write(r0, &(0x7f0000000400)="dacaf98ea212a2ab6b4a12775ae0c389cf331655ef950c7ecdc5e1467a9f28312cb816ed2d1297d6e765317a1807402625fb", 0x32) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000040)=@sg0, 0xee00, 0x0) 51.943441449s ago: executing program 4 (id=5151): mkdir(&(0x7f0000000340)='./file0\x00', 0x180) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xaece, 0x2) preadv(r2, &(0x7f00000000c0)=[{&(0x7f00000031c0)=""/166, 0xa6}], 0x1, 0x43a, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) pread64(r4, &(0x7f00000003c0)=""/142, 0x8e, 0x40009) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x23}], 0x1, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="300000000000000084000000010000000000ffff0c"], 0x30}], 0x1, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000880)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)="cb12a33273c97f153f2ba39a", 0xc}], 0x1, 0x0, 0x0, 0x40}], 0x1, 0x20014082) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000240)=[@wr_crn={0x46, 0x20, {0x8, 0x828}}, @wr_crn={0x46, 0x20, {0xb, 0x1}}], 0x40}) ioctl$KVM_SET_CPUID(r9, 0x4008ae8a, &(0x7f0000000240)=ANY=[]) openat$snapshot(0xffffffffffffff9c, &(0x7f0000001180), 0x88003, 0x0) 51.940604515s ago: executing program 3 (id=5152): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x24000, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r0 = syz_io_uring_setup(0x9eb, 0x0, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x918) 51.783442058s ago: executing program 3 (id=5153): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406441, &(0x7f0000000280)={0x34, 0x0, 0x3, 0xffffffffffffff91, 0x0, 0x0, 0x0, 0xfffffffffffffcb3, 0x0}) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000040)={0x0}) 51.733862063s ago: executing program 1 (id=5154): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="02"], 0x33fe0}}, 0x40010) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="6c6f636b206e6f6e916500"], 0xa) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, 0x0) r7 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r8, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe3, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb776f6, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7357c35c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x5, 0x4, 0x40000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1cd5a44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r8, 0x7b0, &(0x7f00000000c0)={@hyper, 0x1}) r9 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r10 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000006900)="3e12", 0x2, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r7, r9, r10}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000180)=[@increfs_done], 0x4, 0x0, &(0x7f0000000240)="2294a696"}) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f00000000c0)='.\x00', 0x0, &(0x7f0000000280)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[], [{@obj_user={'obj_user', 0x3d, '/dev/cec#\x00'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x31, 0x5d, 0x39, 0x39, 0x37, 0x32, 0x30], 0x2d, [0x61, 0x64, 0x36, 0x61], 0x2d, [0x66, 0x65, 0x53, 0x39], 0x2d, [0x37, 0x30, 0x37, 0x64], 0x2d, [0x37, 0x34, 0x34, 0x0, 0x30, 0x66, 0x31, 0x33]}}}, {@audit}]}}, 0x1, 0x0, &(0x7f0000000380)="1503f47fcee8af5def8b900588653365fe9bef5529b7edb0d930d7b95f5a8b1812a532648a000f6dae612f70ab4449a944b8a2b7013c68d5a1ef8ae00fa0a3ea6bc3535c54ca942ec52db3d606e6eff38780ae28ea16ff34e775dc1508e3013f38de584f21de10dd9f6d71029e897fd4bcd21c44c2aa7f3587601a0c13846ffdf368d6ede017d83e5f81757daf700c2cb5bf53c4229d758b5cf0d8ac2211780d504ff1eccb2d2adbd076a446ee46881113265a38e6c1c42840ea4688667a0c9191f3b794ffd2b717288c155b81f5fb58f8048df014dbdff73b107e0febf4833e73ccb9df8acb0f090c5203038d32a09e6857216028beeae59e") 51.566100853s ago: executing program 3 (id=5155): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x9, &(0x7f00000007c0)=ANY=[@ANYBLOB="7fc172232b9dab418e2b5f56d966643da9946def04dc1d978a481c03ae2d1e8859127ad72e1af262f474c3a2e8aa4f4d80c344272116d634f62edeb091b724e2bd8ebef7ff406f2720e33322d37428b580b0c0c8f4823d2c10eeccd69d082e8ec8f869463aeb0093012b58810f00591739faf6d6be0d33ec7a2133a83016187b681ee55ae366c152c3466cdebeeab7e8d48eeeeffc451ef11cbdcfa80b20056342d7cd5023225515122b43b89d93e81f28ba26e7ba53838a5a60dc34bbb4e15650c85d81ed00000000000000", @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mount$fuseblk(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2810e8, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r3 = socket(0x1d, 0x2, 0x6) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x20, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) r5 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x1701) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000bc0)=@urb_type_iso={0x0, {0xe}, 0x5, 0xa6, &(0x7f0000000600)="573262c471707d926a8f5256b0e6271184b0c547d3428052eae1017d5588646174d437528a816de9dbaeaa96dc7e82c622da3041a0b46193ca5939f259feb591374feb0b4c73d0262717d39c37eedceac160ff5fddc0980bc250254cd59c90002c22c8c7349362572c0a89dc8d458cfe59c0b52cddeec1fc0bb796f389", 0x7d, 0x5f, 0xf7, 0x68, 0x10001, 0x2, &(0x7f0000000900)="a45b02af56211e9ee3cd9cd941b5c654838ebdc00fb9dcb03897232b1370b4b6b5152d93f913aa3e2a0a134f184a6a6de3b512f16054a521cf6906e2515f15b7ac55db8443bee43e1ec3dd091ebc070abd6f15ce2c623d8ad21a72e2e704ab3dcbc4c089d48fccd5e5990242d50720cba784b6a53296d18c8750500ebced76a7e192bd102273851e4d18bc450fcc0a3739444a4b92cee2d549d6759f", [{0x5358, 0x800, 0x56d}, {0x4, 0x7, 0x7}, {0x400, 0x9, 0x1000}, {0x9, 0xc, 0x36f}, {0x7, 0xf3}, {0x6, 0xb, 0x2}, {0x4, 0x5, 0x1}, {0x7, 0x0, 0x9}, {0x4, 0x3, 0x5}, {0x8, 0x47, 0x3}, {0xfffffffe, 0xffff, 0x200}, {0x6, 0x4, 0x58}, {0x3ff, 0x3, 0x6}, {0x36fb, 0x7, 0x8}, {0x2, 0x8, 0x6}, {0x2, 0x9, 0x1}, {0x0, 0x488, 0x8}, {0x5, 0x7, 0x9d}, {0x9, 0x8001, 0xffff}, {0x8, 0xa1ce, 0x9}, {0x8, 0x9, 0x3}, {0x10001, 0x6, 0x3}, {0x4, 0x200, 0x9}, {0x6, 0xacd4, 0xffffff80}, {0x1000, 0x8, 0x200}, {0x8c67, 0x9, 0x9a3}, {0xed, 0x2, 0x4}, {0x2, 0x7, 0x50}, {0x2, 0x3, 0x101}, {0xf, 0xfffffffe, 0x678a}, {0x80000000, 0x7, 0x1}, {0x8, 0x800, 0x4}, {0x1, 0x7}, {0x99c, 0x4d, 0xb}, {0xb, 0x8, 0x9}, {0x9, 0x8, 0x1000}, {0x6, 0x16c00000, 0x6}, {0x35e, 0x1, 0x40}, {0x1, 0x8a, 0x6}, {0xff, 0x8}, {0x6, 0x0, 0xffffff13}, {0x3, 0xce49, 0x4}, {0xfffffff9, 0xb3, 0x10}, {0x4, 0x8, 0xfffffff9}, {0x0, 0x3, 0xa65}, {0x6, 0x1, 0x4c}, {0x1, 0xf, 0xfffffffb}, {0x76f, 0x2, 0x6}, {0x1, 0x3, 0xfffeffff}, {0xb1b, 0x1, 0x2}, {0x3, 0xf, 0x6}, {0x401, 0x2, 0xa59e}, {0xe, 0x3, 0xfffffffd}, {0x100, 0x7b9f, 0xffc}, {0x7, 0x8, 0x1}, {0x3, 0x6, 0x1213}, {0x8001, 0x6, 0x2c}, {0xacf, 0x3, 0x564}, {0x0, 0x39, 0xa}, {0x0, 0xe8a, 0x8}, {0x7fffffff, 0x2, 0x9}, {0x5, 0x6, 0x3}, {0xbc2f, 0x4, 0x7}, {0x0, 0x7, 0x40100000}, {0x2, 0x9, 0xe}, {0x0, 0x9, 0x1}, {0xda, 0x5, 0x5}, {0x8001, 0x6, 0x12}, {0x5, 0x838, 0x1}, {0x81, 0x0, 0x4}, {0xffffffff, 0xd84, 0x3}, {0xa9, 0x3, 0x6}, {0xfffffffb, 0x7f, 0x1ff}, {0xfffffffe, 0xff, 0x8e6}, {0x6, 0xffffffd7, 0x7890}, {0x9, 0xc, 0x6}, {0x0, 0x9, 0x6}, {0x3, 0x1, 0x5}, {0x9, 0x7, 0x6}, {0x3, 0x80000000}, {0x0, 0x3, 0x7}, {0x8, 0x6, 0x1f}, {0x3ff, 0xfffffffa, 0xb8e}, {0x2, 0xf4, 0x467}, {0xfffffff7, 0x401, 0x5}, {0x9dc00000, 0x67, 0x1ff}, {0xf59, 0x0, 0x8}, {0x9, 0x2, 0x2}, {0x7fffffff, 0x79, 0x6}, {0x10, 0x8001, 0x5}, {0x8000, 0x10001, 0xffffff81}, {0x8, 0x1}, {0x9, 0x7, 0x61}, {0x8000, 0x4, 0x40}, {0x80000001, 0x3, 0x5}, {0x0, 0x9, 0x627d8a8b}, {0xb7, 0xfca, 0x1}, {0x6, 0x290, 0x1}, {0x10, 0x400, 0xffffffff}, {0x7, 0x1, 0xa7}, {0x1, 0x4, 0x294}, {0x1, 0x6, 0xffffffff}, {0xfffffff9, 0x8, 0xfffffff7}, {0x10001, 0x1c2, 0x75a197}]}) r6 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r6, &(0x7f0000000240)=[{0x0}], 0x1, 0x7000, 0x0, 0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') syz_emit_ethernet(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x2a382) r8 = memfd_create(&(0x7f0000000180)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6*t\xc8\xf4>q%\xa4\x81\xe2\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\x1cf\xf0\xf2xW?\x8e\xd9\x06\xc7\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<+l\xfdG\x8e\t\x96rT|\xe3\x13\x19\xe3%g\xa7n\xa93\xf5>\x81R\xe7`\x83N\xf4\xa7\xc8:\x8eY\x0e@\x1b\x17Y>b\x85\xd3\x12I\xbf\xac\x9eM\x884Z\xaf\xf3\'\x8aj\"\xd1~k\x7f%\x96\xf95&\x84A%\x97\xb8\x18\xa7\x88\xe3w', 0x1) writev(r8, &(0x7f0000000500)=[{&(0x7f0000000480)="f6bbd6eec7a4453b579834bb605b0f57a83a0d53ce7ac78e1f72a6c4edb3ab954973ddfc8887287b21c3a4b789e322649844bd8432a081e96fbb1e40ddac7e345182e87252a085982e99b2d70e4256b4b2196d8d9e3dcb32fd04b7da1e9d00", 0x5f}, {&(0x7f0000000ac0)="4467cce80fb74fb59f11cabb44599d603b12d81ce8f472453833bf396805511c05bef6e77711c56f5b09060000000000000062f2ee3b259d6a5bef5276fb7b3add780f954382c2fa74cbaa74eda99f59f4a1e11e8c5d37dd03e732cf6c87548e839aaeaa70a50904cf7ccea421a2833d9922dfdea4f39077291b9b6fc343b9f052835fe7cb7fad6d21393d70a63f2c48f1038261fec3d273cb476ed582984b244a67a8240714e173f4cb8a40d34c7375417910e2023ca94390fbbef81340690ea8b34ce799f36b84a5c827840f181bcb0bc3ef1b642c4f8519a5131199f4e4a714e33f73b21f6010324296", 0xeb}, {&(0x7f0000000700)="bb0468960f2e53261fa9ca5cf873d344613dd61f309869a64e6f891bc5cfca8eadd70239d7d36b701bf1e603a2c4171ffebc635dd880c380ba8760cefe8c1f827af9b1efa65cf75a04005d957d891db5c3bc7e000f6b6b453de044c14fc8f866d81095efbf56fde3f2babe4886ede8b7f93ebac8fdf2484a85910056dd52f15c72edf8e882d128a7e956cf2d4d1dd17d4f6475af0f8afb8be1668e12c83ed66c62c103900d2c55f72a00a73d5aea7e05fd96946db735", 0xb6}], 0x3) ioctl$LOOP_CHANGE_FD(r7, 0x4c00, r8) ioctl$LOOP_SET_STATUS(r7, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x25, 0xd, "eeddb7c25540993ad642248c7b01570000000000000066cdddf2e9ce8bb87ae03e87a61fb648d5c6a3e9977956be87176a30a900", "a863a5170a11d26a730cb3d1e9fb18cb0e58986d58e881bbe5e4230de84eea7a", [0x3, 0x800]}) ioctl$VIDIOC_S_CROP(r4, 0x4014563c, &(0x7f00000000c0)={0x1, {0x7ff, 0x4ba, 0xc48, 0x4}}) io_uring_setup(0x598, &(0x7f0000000300)={0x0, 0x77ae, 0x400, 0x8000002, 0x3d7}) syz_open_dev$vbi(0x0, 0x1, 0x2) 51.469837482s ago: executing program 0 (id=5156): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) ioctl$SG_SET_DEBUG(r0, 0x227e, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x12) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) 50.464287586s ago: executing program 5 (id=5157): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x2000, {0x0, 0x0, 0x74, 0x0, {0xfffd, 0xfff0}, {0xffe0, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x200088c0) 48.302619176s ago: executing program 5 (id=5158): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x202, 0x0) dup3(0xffffffffffffffff, r0, 0x0) gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r1, &(0x7f0000000200)=""/202, 0xca) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r3, &(0x7f0000000440)=[{&(0x7f0000000340)="e3", 0x1}], 0x1) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async, rerun: 32) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async, rerun: 32) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r2, 0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) brk(0x400000ffc000) (async) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 32) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="73656375726974792e2f6465762f66757365009dc109c9138a7fb253514c71b5d38627b95e98af161dfd00000000000000"]) r6 = socket$igmp(0x2, 0x3, 0x2) socket$unix(0x1, 0x5, 0x0) (async, rerun: 64) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (rerun: 64) 46.775994368s ago: executing program 4 (id=5159): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f0c81087f180002ad6b37ed030109022400010000000009040000023c7f98000905ee000000000000090502"], 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @rand_addr=' \x01\x00', 0x9}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x786c0, 0x0) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0) syz_usb_connect$cdc_ncm(0x6, 0x70, &(0x7f0000000540)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x2, 0x1, 0x0, 0x20, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, 'L\\'}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x40, 0x8000, 0x9, 0x80}, {0x6, 0x24, 0x1a, 0xcf, 0x20}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0x7, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x1, 0x2, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x9, 0x5, 0x2}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x0, 0x8, 0x5f, 0x5, 0x8, 0x1}, 0x72, &(0x7f0000000680)={0x5, 0xf, 0x72, 0x2, [@generic={0x5d, 0x10, 0x874a2279af02f249, "11bc1c320bee463c52b025d6a128fef4c029afd22ec5817440bf5e7a48d7909d83010eaffd547a6f4613be6a888d4e49fe0c4ec8bc0d1eba7b03ed9fe2c98c965dcd88a61f131346375cee40ec485a868b9bbd6aefeae244f624"}, @ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0x40, 0xf00, 0xe0, [0xc0]}]}, 0x1, [{0xb9, &(0x7f0000000500)=ANY=[@ANYRES16=0x0]}]}) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000040)={0x1}, 0x8, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000080)={0x7, 0x1, 0x1, "9adf66552fb8af2b9f10f35681de96a590d25f2744e043cc1e70c317fd815cee", 0x32314d4e}) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000280)={0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="000a030900"], 0x0, 0x0, 0x0, 0x0, 0x0}) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000340)={0x14, &(0x7f00000001c0)={0x0, 0x18, 0x11, {0x11, 0x24, "aad526d225a7ffa0c82d71ebbc4f93"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000640)={0x1c, &(0x7f0000000440)=ANY=[@ANYBLOB="200d32000100000009ac41cbbd6ff2de43e1b4e74b69b6fdb6d5324f39a4dd6931ea946f8f0b5f336a044bf7e4605050d95a57dc38981e5bcd66d1f817d2284b6d218fb6aa89697aacb6b7"], &(0x7f0000000380)={0x0, 0xa, 0x1, 0xd}, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44084}, 0x0) syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) 46.437649465s ago: executing program 5 (id=5160): r0 = socket(0x10, 0x80002, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000100)}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000340)={'syztnl1\x00', 0x0}) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000380)={@multicast1, @private}, &(0x7f00000003c0)=0xc) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000480)={@private0}, &(0x7f00000004c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f0000000500)={'sit0\x00', 0x0, 0x80, 0x8000, 0x7, 0x400, {{0x13, 0x4, 0x3, 0x21, 0x4c, 0x65, 0x0, 0x3, 0x29, 0x0, @local, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x14, 0x76, 0x1, 0x8, [{@multicast2, 0x9}, {@broadcast, 0x200}]}, @timestamp={0x44, 0x20, 0xe3, 0x0, 0x3, [0x400, 0xffff, 0x0, 0x1ff, 0x4, 0x10000, 0x24]}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00'}) 0s ago: executing program 33 (id=5156): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) ioctl$SG_SET_DEBUG(r0, 0x227e, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x12) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): adget.3: fail, usb_ep_enable returned -22 [ 1117.577646][T31723] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1117.835664][T16108] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1118.009959][T31743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4797'. [ 1118.080208][T16108] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1118.091418][T16108] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1118.105030][T16108] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1118.116529][T16108] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1118.130211][T16108] usb 2-1: config 1 interface 1 has no altsetting 0 [ 1118.190605][T16108] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1118.202288][T16108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.213591][T16108] usb 2-1: Product: syz [ 1118.218413][T16108] usb 2-1: Manufacturer: syz [ 1118.223267][T16108] usb 2-1: SerialNumber: syz [ 1118.241618][T31744] sctp: [Deprecated]: syz.3.4790 (pid 31744) Use of int in maxseg socket option. [ 1118.241618][T31744] Use struct sctp_assoc_value instead [ 1118.328916][T16108] cdc_ncm 2-1:1.0: skipping garbage [ 1118.335863][T16108] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing [ 1118.343471][T16108] cdc_ncm 2-1:1.0: bind() failure [ 1119.084115][ T10] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1119.166141][ T10] usb 6-1: USB disconnect, device number 9 [ 1119.327781][T31755] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4800'. [ 1119.783021][T31772] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4807'. [ 1119.977950][T31772] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4807'. [ 1120.436493][T11076] rtl8150 4-1:1.0: couldn't reset the device [ 1120.465026][T31783] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4808'. [ 1120.488998][T11076] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 1120.585176][T11076] usb 4-1: USB disconnect, device number 120 [ 1120.895160][T16108] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1120.914093][T16108] usb 2-1: USB disconnect, device number 19 [ 1121.116438][T31797] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1122.129493][T31810] Invalid logical block size (2049) [ 1122.302697][T31814] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4819'. [ 1122.528225][ T10] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1122.686809][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1122.699496][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1122.733394][ T10] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1122.750037][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.775253][ T10] usb 4-1: Product: syz [ 1122.780536][ T10] usb 4-1: Manufacturer: syz [ 1122.796371][ T10] usb 4-1: SerialNumber: syz [ 1122.842197][ T10] usb 4-1: config 0 descriptor?? [ 1122.879728][ T10] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1122.929683][ T10] usb 4-1: Detected FT232R [ 1123.110220][ T10] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1123.124956][ T10] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1123.136887][ T10] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 1123.149782][ T10] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1123.169267][ T10] usb 4-1: USB disconnect, device number 121 [ 1123.183452][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1123.197856][ T10] ftdi_sio 4-1:0.0: device disconnected [ 1124.145486][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1124.414328][ T10] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 1124.435888][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1124.497297][ T10] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1124.525112][ T10] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1124.563826][ T10] usb 6-1: Manufacturer: syz [ 1124.730419][ T10] usb 6-1: config 0 descriptor?? [ 1124.848262][ T10] rc_core: IR keymap rc-hauppauge not found [ 1124.871994][ T10] Registered IR keymap rc-empty [ 1124.881392][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1124.900197][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input160 [ 1124.985253][ C0] igorplugusb 6-1:0.0: Error: urb status = -32 [ 1125.091244][T31850] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1125.144050][T16601] usb 6-1: USB disconnect, device number 10 [ 1125.675480][T31892] FAULT_INJECTION: forcing a failure. [ 1125.675480][T31892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1125.712383][T31892] CPU: 1 UID: 0 PID: 31892 Comm: syz.1.4848 Not tainted syzkaller #0 PREEMPT(full) [ 1125.712410][T31892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1125.712422][T31892] Call Trace: [ 1125.712430][T31892] [ 1125.712440][T31892] dump_stack_lvl+0x189/0x250 [ 1125.712465][T31892] ? __pfx____ratelimit+0x10/0x10 [ 1125.712490][T31892] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1125.712509][T31892] ? __pfx__printk+0x10/0x10 [ 1125.712538][T31892] should_fail_ex+0x414/0x560 [ 1125.712567][T31892] _copy_to_user+0x31/0xb0 [ 1125.712590][T31892] simple_read_from_buffer+0xe1/0x170 [ 1125.712615][T31892] proc_fail_nth_read+0x1b3/0x220 [ 1125.712642][T31892] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1125.712669][T31892] ? rw_verify_area+0x2a6/0x4d0 [ 1125.712687][T31892] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1125.712712][T31892] vfs_read+0x200/0xa30 [ 1125.712743][T31892] ? __pfx_rawv6_getsockopt+0x10/0x10 [ 1125.712764][T31892] ? __pfx_vfs_read+0x10/0x10 [ 1125.712783][T31892] ? sock_common_getsockopt+0x2d/0xb0 [ 1125.712802][T31892] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1125.712824][T31892] ? do_sock_getsockopt+0x372/0x450 [ 1125.712850][T31892] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1125.712882][T31892] ksys_read+0x145/0x250 [ 1125.712903][T31892] ? __pfx_ksys_read+0x10/0x10 [ 1125.712924][T31892] ? do_syscall_64+0xbe/0xfa0 [ 1125.712945][T31892] do_syscall_64+0xfa/0xfa0 [ 1125.712960][T31892] ? lockdep_hardirqs_on+0x9c/0x150 [ 1125.712976][T31892] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.712993][T31892] ? clear_bhb_loop+0x60/0xb0 [ 1125.713015][T31892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.713032][T31892] RIP: 0033:0x7f64acd8d9dc [ 1125.713049][T31892] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1125.713065][T31892] RSP: 002b:00007f64adbe5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1125.713086][T31892] RAX: ffffffffffffffda RBX: 00007f64acfe5fa0 RCX: 00007f64acd8d9dc [ 1125.713099][T31892] RDX: 000000000000000f RSI: 00007f64adbe50a0 RDI: 0000000000000004 [ 1125.713111][T31892] RBP: 00007f64adbe5090 R08: 0000000000000000 R09: 0000000000000000 [ 1125.713122][T31892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1125.713133][T31892] R13: 00007f64acfe6038 R14: 00007f64acfe5fa0 R15: 00007f64ad10fa28 [ 1125.713163][T31892] [ 1126.010309][T31896] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1126.017726][T31896] IPv6: NLM_F_CREATE should be set when creating new route [ 1126.045992][ T10] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1126.206150][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 1126.213793][ T10] usb 4-1: config 0 has an invalid interface number: 244 but max is 2 [ 1126.226516][ T10] usb 4-1: config 0 has an invalid interface number: 220 but max is 2 [ 1126.266046][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1126.308519][ T10] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 1126.335565][ T10] usb 4-1: config 0 has no interface number 0 [ 1126.351923][ T10] usb 4-1: config 0 has no interface number 1 [ 1126.362057][ T10] usb 4-1: config 0 interface 244 has no altsetting 0 [ 1126.385595][ T10] usb 4-1: New USB device found, idVendor=0411, idProduct=0050, bcdDevice=8c.e6 [ 1126.415680][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.479503][ T10] usb 4-1: config 0 descriptor?? [ 1126.716480][ T9] usb 4-1: USB disconnect, device number 122 [ 1126.739939][ T5936] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 1126.914452][ T5936] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1126.924915][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.933553][ T5936] usb 5-1: Product: syz [ 1126.939353][ T5936] usb 5-1: Manufacturer: syz [ 1126.944020][ T5936] usb 5-1: SerialNumber: syz [ 1126.951925][ T5936] usb 5-1: config 0 descriptor?? [ 1127.186917][ T5936] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1127.251844][T31919] usb usb8: usbfs: process 31919 (syz.5.4859) did not claim interface 0 before use [ 1127.459854][T31929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4862'. [ 1127.565431][ T10] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1127.737378][ T10] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1127.753749][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1127.771593][ T10] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1127.782397][ T10] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1127.791122][ T10] usb 4-1: Manufacturer: syz [ 1127.800343][ T10] usb 4-1: config 0 descriptor?? [ 1127.947574][ T10] rc_core: IR keymap rc-hauppauge not found [ 1127.953540][ T10] Registered IR keymap rc-empty [ 1127.962617][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1128.012417][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input161 [ 1128.047143][ C0] igorplugusb 4-1:0.0: Error: urb status = -32 [ 1128.227704][ T10] usb 4-1: USB disconnect, device number 123 [ 1128.805386][T16601] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1129.013054][T16601] usb 6-1: no configurations [ 1129.021744][T16601] usb 6-1: can't read configurations, error -22 [ 1129.156114][T16601] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1129.201388][ T5936] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1129.259868][ T5936] usb 5-1: USB disconnect, device number 36 [ 1129.412531][T16601] usb 6-1: no configurations [ 1129.429532][T16601] usb 6-1: can't read configurations, error -22 [ 1129.437126][T16601] usb usb6-port1: attempt power cycle [ 1129.775521][T16601] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1129.840202][T16601] usb 6-1: no configurations [ 1129.845246][T16601] usb 6-1: can't read configurations, error -22 [ 1129.932639][T31976] netlink: 'syz.1.4877': attribute type 10 has an invalid length. [ 1129.941211][T31976] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4877'. [ 1129.961458][T31976] bridge0: port 1(dummy0) entered blocking state [ 1129.969399][T31976] bridge0: port 1(dummy0) entered disabled state [ 1129.979464][T31976] dummy0: entered allmulticast mode [ 1129.990244][T16601] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1130.011171][T31976] dummy0: entered promiscuous mode [ 1130.048993][T16601] usb 6-1: no configurations [ 1130.053948][T16601] usb 6-1: can't read configurations, error -22 [ 1130.063324][T16601] usb usb6-port1: unable to enumerate USB device [ 1130.545417][ T9] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1130.583723][T31993] FAULT_INJECTION: forcing a failure. [ 1130.583723][T31993] name failslab, interval 1, probability 0, space 0, times 0 [ 1130.604685][T31991] trusted_key: encrypted_key: insufficient parameters specified [ 1130.617629][T31991] netlink: 'syz.3.4881': attribute type 1 has an invalid length. [ 1130.626411][T31991] trusted_key: encrypted_key: insufficient parameters specified [ 1130.659284][T31993] CPU: 1 UID: 0 PID: 31993 Comm: syz.1.4883 Not tainted syzkaller #0 PREEMPT(full) [ 1130.659310][T31993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1130.659322][T31993] Call Trace: [ 1130.659330][T31993] [ 1130.659339][T31993] dump_stack_lvl+0x189/0x250 [ 1130.659365][T31993] ? __pfx____ratelimit+0x10/0x10 [ 1130.659401][T31993] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1130.659420][T31993] ? __pfx__printk+0x10/0x10 [ 1130.659454][T31993] should_fail_ex+0x414/0x560 [ 1130.659488][T31993] should_failslab+0xa8/0x100 [ 1130.659513][T31993] __kmalloc_cache_noprof+0x6f/0x6f0 [ 1130.659533][T31993] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1130.659551][T31993] ? sctp_add_bind_addr+0x8c/0x370 [ 1130.659567][T31993] ? sctp_add_bind_addr+0xb0/0x370 [ 1130.659590][T31993] sctp_add_bind_addr+0x8c/0x370 [ 1130.659613][T31993] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1130.659635][T31993] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1130.659654][T31993] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1130.659675][T31993] ? sctp_v6_is_any+0x64/0x80 [ 1130.659701][T31993] ? sctp_copy_one_addr+0x93/0x360 [ 1130.659723][T31993] sctp_bind_addr_copy+0xb3/0x3c0 [ 1130.659746][T31993] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1130.659776][T31993] sctp_connect_new_asoc+0x2e0/0x690 [ 1130.659801][T31993] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1130.659821][T31993] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1130.659854][T31993] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1130.659877][T31993] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1130.659906][T31993] sctp_sendmsg+0x155c/0x2810 [ 1130.659940][T31993] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1130.659966][T31993] ? aa_sk_perm+0x81e/0x950 [ 1130.659990][T31993] ? __pfx_aa_sk_perm+0x10/0x10 [ 1130.660019][T31993] ? sock_rps_record_flow+0x19/0x410 [ 1130.660046][T31993] ? inet_sendmsg+0x2f4/0x370 [ 1130.660072][T31993] __sock_sendmsg+0x19c/0x270 [ 1130.660096][T31993] __sys_sendto+0x3bd/0x520 [ 1130.660121][T31993] ? __pfx___sys_sendto+0x10/0x10 [ 1130.660144][T31993] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1130.660172][T31993] ? __fget_files+0x3a0/0x420 [ 1130.660203][T31993] ? ksys_write+0x22a/0x250 [ 1130.660225][T31993] ? __pfx_ksys_write+0x10/0x10 [ 1130.660249][T31993] __x64_sys_sendto+0xde/0x100 [ 1130.660277][T31993] do_syscall_64+0xfa/0xfa0 [ 1130.660299][T31993] ? lockdep_hardirqs_on+0x9c/0x150 [ 1130.660318][T31993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.660336][T31993] ? clear_bhb_loop+0x60/0xb0 [ 1130.660359][T31993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.660377][T31993] RIP: 0033:0x7f64acd8efc9 [ 1130.660394][T31993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1130.660410][T31993] RSP: 002b:00007f64adbe5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1130.660431][T31993] RAX: ffffffffffffffda RBX: 00007f64acfe5fa0 RCX: 00007f64acd8efc9 [ 1130.660444][T31993] RDX: 0000000000034000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1130.660456][T31993] RBP: 00007f64adbe5090 R08: 0000200000000140 R09: 000000000000001c [ 1130.660469][T31993] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 1130.660481][T31993] R13: 00007f64acfe6038 R14: 00007f64acfe5fa0 R15: 00007f64ad10fa28 [ 1130.660514][T31993] [ 1130.985547][ C1] vkms_vblank_simulate: vblank timer overrun [ 1131.017643][ T9] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 1131.026553][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1131.439050][ T9] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1131.458799][ T9] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1131.493307][ T9] usb 5-1: Manufacturer: syz [ 1131.551355][ T9] usb 5-1: config 0 descriptor?? [ 1131.616288][ T9] rc_core: IR keymap rc-hauppauge not found [ 1131.622443][ T9] Registered IR keymap rc-empty [ 1131.636603][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1131.668505][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input162 [ 1131.786617][ C0] igorplugusb 5-1:0.0: Error: urb status = -32 [ 1131.972813][T11085] usb 5-1: USB disconnect, device number 37 [ 1133.235084][T32044] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4899'. [ 1133.272635][T32044] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4899'. [ 1133.508012][T32053] syz_tun: entered allmulticast mode [ 1133.756009][T11085] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1133.759582][T32068] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1133.784727][T32068] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1133.926698][T32071] binder: 32057:32071 ioctl c0306201 200000000100 returned -11 [ 1133.935049][T32071] fuse: Bad value for 'fd' [ 1133.957177][T11085] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 1133.967278][T11085] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1133.983498][T11085] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1133.994111][T11085] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1134.003094][T11085] usb 6-1: Manufacturer: syz [ 1134.020263][T11085] usb 6-1: config 0 descriptor?? [ 1134.075412][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1134.125456][T11085] rc_core: IR keymap rc-hauppauge not found [ 1134.133817][T11085] Registered IR keymap rc-empty [ 1134.143621][T11085] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1134.163531][T11085] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input163 [ 1134.225477][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1134.234684][ T9] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1134.244993][ T9] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1134.259227][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1134.269247][ C0] igorplugusb 6-1:0.0: Error: urb status = -32 [ 1134.287484][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1134.324809][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.347818][ T9] usb 2-1: Product: syz [ 1134.352796][ T9] usb 2-1: Manufacturer: syz [ 1134.362815][ T9] usb 2-1: SerialNumber: syz [ 1134.382692][T32076] FAULT_INJECTION: forcing a failure. [ 1134.382692][T32076] name failslab, interval 1, probability 0, space 0, times 0 [ 1134.464503][T32076] CPU: 1 UID: 0 PID: 32076 Comm: syz.3.4911 Not tainted syzkaller #0 PREEMPT(full) [ 1134.464528][T32076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1134.464538][T32076] Call Trace: [ 1134.464597][T32076] [ 1134.464606][T32076] dump_stack_lvl+0x189/0x250 [ 1134.464623][T32076] ? __pfx____ratelimit+0x10/0x10 [ 1134.464644][T32076] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1134.464667][T32076] ? __pfx__printk+0x10/0x10 [ 1134.464689][T32076] ? __pfx___might_resched+0x10/0x10 [ 1134.464721][T32076] ? fs_reclaim_acquire+0x7d/0x100 [ 1134.464746][T32076] should_fail_ex+0x414/0x560 [ 1134.464780][T32076] should_failslab+0xa8/0x100 [ 1134.464804][T32076] __kvmalloc_node_noprof+0x158/0x910 [ 1134.464824][T32076] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 1134.464843][T32076] ? alloc_netdev_mqs+0xc89/0x11b0 [ 1134.464862][T32076] ? alloc_netdev_mqs+0xbf8/0x11b0 [ 1134.464887][T32076] alloc_netdev_mqs+0xc89/0x11b0 [ 1134.464912][T32076] rtnl_create_link+0x31f/0xd10 [ 1134.464937][T32076] rtnl_newlink_create+0x25c/0xb00 [ 1134.464975][T32076] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1134.465004][T32076] ? __pfx___mutex_lock+0x10/0x10 [ 1134.465032][T32076] ? ns_capable+0x8a/0xf0 [ 1134.465059][T32076] rtnl_newlink+0x16e4/0x1c80 [ 1134.465097][T32076] ? __pfx_rtnl_newlink+0x10/0x10 [ 1134.465124][T32076] ? __pfx___schedule+0x10/0x10 [ 1134.465171][T32076] ? preempt_schedule+0xae/0xc0 [ 1134.465186][T32076] ? __dev_queue_xmit+0x27b/0x3b50 [ 1134.465206][T32076] ? preempt_schedule_common+0x83/0xd0 [ 1134.465224][T32076] ? preempt_schedule+0xae/0xc0 [ 1134.465244][T32076] ? __pfx_preempt_schedule+0x10/0x10 [ 1134.465271][T32076] ? nlmon_xmit+0xb0/0x100 [ 1134.465293][T32076] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 1134.465320][T32076] ? preempt_schedule_thunk+0x16/0x30 [ 1134.465349][T32076] ? __local_bh_enable_ip+0x13e/0x1c0 [ 1134.465372][T32076] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1134.465399][T32076] ? __dev_queue_xmit+0x27b/0x3b50 [ 1134.465417][T32076] ? __dev_queue_xmit+0x27b/0x3b50 [ 1134.465432][T32076] ? __dev_queue_xmit+0x27b/0x3b50 [ 1134.465450][T32076] ? __dev_queue_xmit+0x1d79/0x3b50 [ 1134.465473][T32076] ? __lock_acquire+0xab9/0xd20 [ 1134.465514][T32076] ? __pfx_rtnl_newlink+0x10/0x10 [ 1134.465536][T32076] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1134.465613][T32076] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1134.465634][T32076] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1134.465663][T32076] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 1134.465695][T32076] netlink_rcv_skb+0x208/0x470 [ 1134.465718][T32076] ? rcu_is_watching+0x15/0xb0 [ 1134.465743][T32076] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1134.465768][T32076] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1134.465804][T32076] ? netlink_deliver_tap+0x2e/0x1b0 [ 1134.465833][T32076] netlink_unicast+0x82f/0x9e0 [ 1134.465865][T32076] ? __pfx_netlink_unicast+0x10/0x10 [ 1134.465887][T32076] ? netlink_sendmsg+0x642/0xb30 [ 1134.465909][T32076] ? skb_put+0x11b/0x210 [ 1134.465935][T32076] netlink_sendmsg+0x805/0xb30 [ 1134.465969][T32076] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1134.465997][T32076] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1134.466020][T32076] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1134.466042][T32076] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1134.466067][T32076] __sock_sendmsg+0x21c/0x270 [ 1134.466092][T32076] ____sys_sendmsg+0x505/0x830 [ 1134.466115][T32076] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1134.466151][T32076] ? import_iovec+0x74/0xa0 [ 1134.466177][T32076] ___sys_sendmsg+0x21f/0x2a0 [ 1134.466198][T32076] ? __pfx____sys_sendmsg+0x10/0x10 [ 1134.466251][T32076] ? __fget_files+0x2a/0x420 [ 1134.466274][T32076] ? __fget_files+0x3a0/0x420 [ 1134.466305][T32076] __x64_sys_sendmsg+0x19b/0x260 [ 1134.466325][T32076] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1134.466354][T32076] ? __pfx_ksys_write+0x10/0x10 [ 1134.466376][T32076] ? do_syscall_64+0xbe/0xfa0 [ 1134.466399][T32076] do_syscall_64+0xfa/0xfa0 [ 1134.466416][T32076] ? lockdep_hardirqs_on+0x9c/0x150 [ 1134.466433][T32076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.466452][T32076] ? clear_bhb_loop+0x60/0xb0 [ 1134.466474][T32076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.466492][T32076] RIP: 0033:0x7f135a78efc9 [ 1134.466510][T32076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1134.466526][T32076] RSP: 002b:00007f13589f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1134.466545][T32076] RAX: ffffffffffffffda RBX: 00007f135a9e5fa0 RCX: 00007f135a78efc9 [ 1134.466570][T32076] RDX: 0000000000040000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1134.466582][T32076] RBP: 00007f13589f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1134.466594][T32076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1134.466605][T32076] R13: 00007f135a9e6038 R14: 00007f135a9e5fa0 R15: 00007f135ab0fa28 [ 1134.466637][T32076] [ 1135.107120][ T9] usb 2-1: 0:2 : does not exist [ 1135.127361][T11085] usb 6-1: USB disconnect, device number 15 [ 1135.209279][T32080] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4913'. [ 1135.218502][T32080] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4913'. [ 1135.221506][ T9] usb 2-1: USB disconnect, device number 20 [ 1135.616270][T11085] usb 4-1: new full-speed USB device number 124 using dummy_hcd [ 1135.778889][T11085] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1135.790365][ T9] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1135.882346][T11085] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1135.914576][T11085] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 1135.970603][T11085] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.056652][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1136.076714][T11085] usb 4-1: config 0 descriptor?? [ 1136.084236][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1136.145518][ T5936] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1136.166173][ T9] usb 5-1: New USB device found, idVendor=06cb, idProduct=2968, bcdDevice= 0.00 [ 1136.182584][T32086] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1136.193016][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.198851][ T316] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4921'. [ 1136.228255][ T9] usb 5-1: config 0 descriptor?? [ 1136.336407][ T5936] usb 6-1: Using ep0 maxpacket: 16 [ 1136.344541][ T5936] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1136.388571][ T5936] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1136.455159][ T5936] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1136.483103][ T5936] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.509497][ T5936] usb 6-1: Product: syz [ 1136.540687][ T5936] usb 6-1: Manufacturer: syz [ 1136.561356][ T5936] usb 6-1: SerialNumber: syz [ 1136.605448][ T5936] usb 6-1: config 0 descriptor?? [ 1136.611550][T11085] konepure 0003:1E7D:2DBE.002E: unknown main item tag 0x0 [ 1136.647654][ T5936] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1136.670017][T11085] konepure 0003:1E7D:2DBE.002E: unknown main item tag 0x0 [ 1136.703111][T11085] konepure 0003:1E7D:2DBE.002E: hidraw0: USB HID v80.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.3-1/input0 [ 1136.731052][ T5936] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1136.732944][ T9] itetech 0003:06CB:2968.002F: hidraw1: USB HID v0.00 Device [HID 06cb:2968] on usb-dummy_hcd.4-1/input0 [ 1136.811115][T11085] usb 4-1: USB disconnect, device number 124 [ 1136.931996][ T326] fido_id[326]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1137.084662][T11085] usb 5-1: USB disconnect, device number 38 [ 1137.152963][ T327] fido_id[327]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1137.273601][ T5936] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1137.294290][ T5936] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1137.830080][ T341] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4926'. [ 1137.896954][ T341] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4926'. [ 1137.906248][ T334] binder: 331:334 ioctl c0306201 200000000100 returned -11 [ 1138.006952][ T5936] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 1138.033231][ T342] fuse: Bad value for 'fd' [ 1138.116605][ T347] lo: entered allmulticast mode [ 1138.235226][ T5936] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 1138.242436][ T5936] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 1138.305056][ T5936] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 1138.335873][ T5936] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 1138.358554][ T5936] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 1138.392464][ T5936] usb 6-1: USB disconnect, device number 16 [ 1138.485669][T11071] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1138.648154][T11071] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 1138.661876][T11071] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1138.696397][T11071] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1138.707836][T11071] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1138.719462][T11071] usb 2-1: Manufacturer: syz [ 1138.732593][T11071] usb 2-1: config 0 descriptor?? [ 1138.848182][T11071] rc_core: IR keymap rc-hauppauge not found [ 1138.869008][T11071] Registered IR keymap rc-empty [ 1138.894347][T11071] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1138.938765][T11071] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input164 [ 1138.976175][ C0] igorplugusb 2-1:0.0: Error: urb status = -32 [ 1139.097252][ T367] netdevsim netdevsim3: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 1139.126989][T11071] usb 2-1: USB disconnect, device number 21 [ 1139.276647][ T380] usb usb8: usbfs: process 380 (syz.0.4932) did not claim interface 0 before use [ 1139.560985][ T385] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4938'. [ 1139.585529][ T385] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4938'. [ 1140.438930][ T397] Cannot find set identified by id 65534 to match [ 1140.614788][ T391] binder: 386:391 ioctl c0306201 200000000100 returned -11 [ 1140.627113][ T391] fuse: Bad value for 'fd' [ 1141.120499][ T406] binder: 405:406 unknown command 0 [ 1141.140381][ T406] binder: 405:406 ioctl c0306201 200000000080 returned -22 [ 1141.275030][ T417] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4949'. [ 1141.288958][ T417] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4949'. [ 1141.398402][ T5936] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 1141.616657][ T5936] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1141.626916][T16601] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1141.635000][ T5936] usb 6-1: config 0 has no interfaces? [ 1141.662897][ T5936] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1141.675160][ T5936] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.698248][ T5936] usb 6-1: Product: syz [ 1141.723566][ T5936] usb 6-1: Manufacturer: syz [ 1141.749529][ T5936] usb 6-1: SerialNumber: syz [ 1141.751622][ T423] syzkaller0: entered promiscuous mode [ 1141.763668][ T423] syzkaller0: entered allmulticast mode [ 1141.787050][ T5936] usb 6-1: config 0 descriptor?? [ 1141.807652][T16601] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1141.816634][T16601] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1141.879965][T16601] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1141.903804][T16601] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1141.926698][T16601] usb 4-1: Manufacturer: syz [ 1141.979391][T16601] usb 4-1: config 0 descriptor?? [ 1142.054590][ T5936] usb 6-1: USB disconnect, device number 17 [ 1142.169099][T16601] rc_core: IR keymap rc-hauppauge not found [ 1142.175033][T16601] Registered IR keymap rc-empty [ 1142.183737][T16601] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1142.218381][T16601] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input166 [ 1142.260415][ C1] igorplugusb 4-1:0.0: Error: urb status = -32 [ 1142.292103][ T430] fuse: Unknown parameter 'æd' [ 1142.550878][T16601] usb 4-1: USB disconnect, device number 125 [ 1142.747800][ T436] syz_tun: entered allmulticast mode [ 1143.236438][ T446] bond3: option tlb_dynamic_lb: invalid value (2) [ 1143.258062][ T446] bond3 (unregistering): Released all slaves [ 1143.315392][ T5936] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1143.379668][ T451] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4956'. [ 1143.465363][ T5936] usb 6-1: Using ep0 maxpacket: 8 [ 1143.483749][ T5936] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1143.484670][ T456] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4960'. [ 1143.504059][ T456] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4960'. [ 1143.520523][ T5936] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1143.530483][ T5936] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1143.558673][ T5936] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1143.581890][ T5936] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1143.611915][ T5936] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1143.633270][ T5936] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.808688][ T460] bond2: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 1143.828230][ T460] bond2 (unregistering): Released all slaves [ 1144.004474][ T472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4964'. [ 1144.266788][ T5936] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1144.425966][ T5936] usb 4-1: Using ep0 maxpacket: 8 [ 1144.433952][ T5936] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1144.446354][ T5936] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1144.458444][ T5936] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1144.471465][ T475] usbtmc 6-1:16.0: simple usb_control_msg failed -32 [ 1144.480693][ T5936] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1144.480931][ T441] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1144.494823][ T5936] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1144.512653][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.542258][ T441] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1144.565166][ T441] veth0_to_bridge: entered allmulticast mode [ 1144.590768][ T441] veth0_to_bridge: entered promiscuous mode [ 1144.597433][ T441] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1144.611363][ T441] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1144.618658][ T441] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 1144.678603][T11085] usb 6-1: USB disconnect, device number 18 [ 1144.732030][ T5936] usb 4-1: usb_control_msg returned -71 [ 1144.743284][ T5936] usbtmc 4-1:16.0: can't read capabilities [ 1144.764271][ T5936] usb 4-1: USB disconnect, device number 126 [ 1145.606483][ T491] random: crng reseeded on system resumption [ 1145.905658][T16601] usb 4-1: new full-speed USB device number 127 using dummy_hcd [ 1146.078688][T16601] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1146.103779][T16601] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1146.121542][T16601] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.131813][T16601] usb 4-1: Product: syz [ 1146.137346][T16601] usb 4-1: Manufacturer: syz [ 1146.142829][T16601] usb 4-1: SerialNumber: syz [ 1146.201339][T16601] usb 4-1: config 0 descriptor?? [ 1146.231316][T16601] usb 4-1: ucan: probing device on interface #0 [ 1146.252475][T16601] usb 4-1: ucan: invalid EP count (0) [ 1146.263142][T16601] usb 4-1: ucan: probe failed; try to update the device firmware [ 1146.431940][T16601] usb 4-1: USB disconnect, device number 127 [ 1146.494169][ T500] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4973'. [ 1146.504257][ T500] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4973'. [ 1146.703156][ T504] netlink: 'syz.4.4974': attribute type 1 has an invalid length. [ 1147.275926][T11085] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 1147.468966][T11085] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 1147.514769][T11085] usb 4-1: config 0 has no interface number 0 [ 1147.524932][T11085] usb 4-1: config 0 interface 29 has no altsetting 0 [ 1147.570642][T11085] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 1147.599985][T11085] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.650001][T11085] usb 4-1: Product: syz [ 1147.660670][T11085] usb 4-1: Manufacturer: syz [ 1147.672089][T11085] usb 4-1: SerialNumber: syz [ 1147.696153][T11085] usb 4-1: config 0 descriptor?? [ 1147.909077][T11085] peak_usb 4-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 1148.111848][T11085] peak_usb 4-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 1148.133772][T11085] peak_usb 4-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 1148.147743][ T1689] veth1_to_bond: entered allmulticast mode [ 1148.179233][ T1689] bond_slave_1: entered promiscuous mode [ 1148.208476][T11085] peak_usb 4-1:0.29: probe with driver peak_usb failed with error -71 [ 1148.231319][T11085] usb 4-1: USB disconnect, device number 2 [ 1148.791640][ T1702] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4983'. [ 1149.076415][ T1687] bond_slave_1: left promiscuous mode [ 1149.089299][ T1687] veth1_to_bond: left allmulticast mode [ 1150.509499][ T1886] netlink: 92 bytes leftover after parsing attributes in process `syz.5.4992'. [ 1151.362026][ T2376] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4995'. [ 1151.551587][ T2377] fuse: Unknown parameter 'nTracerPid: 0 [ 1151.551587][ T2377] Uid: 0 0 0 0 [ 1151.551587][ T2377] Gid: 0 0 0 0 [ 1151.551587][ T2377] FDSize: 256 [ 1151.551587][ T2377] Groups: 0 65534 [ 1151.551587][ T2377] NStgid: 1729 [ 1151.551587][ T2377] NSpid: 1733 [ 1151.551587][ T2377] NSpgid: 1729 [ 1151.551587][ T2377] NSsid: 0 [ 1151.551587][ T2377] Kthread: 0 [ 1151.551587][ T2377] VmPeak: 112804 kB [ 1151.551587][ T2377] VmSize: 112804 kB [ 1151.551587][ T2377] VmLck: 0 kB [ 1151.551587][ T2377] VmPin: 0 kB [ 1151.551587][ T2377] VmHWM: 32740 kB [ 1151.551587][ T2377] VmRSS: 32740 kB [ 1151.551587][ T2377] RssAnon: 1548 kB [ 1151.551587][ T2377] RssFile: 31192 kB [ 1151.551587][ T2377] RssShmem: 0 kB [ 1151.551587][ T2377] VmData: 37096 kB [ 1151.551587][ T2377] VmStk: 132 kB [ 1151.551587][ T2377] VmExe: 1676 kB [ 1151.551587][ T2377] VmLib: 8 kB [ 1151.551587][ T2377] VmPTE: 160 kB [ 1151.551587][ T2377] VmSwap: 0 kB [ 1151.551587][ T2377] HugetlbPages: 0 kB [ 1151.551587][ T2377] CoreDumping: 0 [ 1151.551587][ T2377] THP_enabled: 1 [ 1151.551587][ T2377] untag_mask: 0xffffffffffffffff [ 1151.551587][ T2377] Threads: 6 [ 1151.551587][ T2377] SigQ: 0/13009 [ 1151.551587][ T2377] SigPnd: 0000000000000000 [ 1151.551587][ T2377] ShdPnd: 0000000000000000 [ 1151.551587][ T2377] SigBlk: 0000000000000000 [ 1151.551587][ T2377] SigIgn: fffffffefffaba35 [ 1151.551587][ T2377] SigCgt: 0000000100010440 [ 1151.551587][ T2377] CapInh: 0000000000000000 [ 1151.551587][ T2377] CapPrm: 000001ffff77ffff [ 1151.551587][ T2377] CapEff: 000001ffff77ffff [ 1151.551587][ T2377] CapBnd: 000001ffffffffff [ 1151.551587][ T2377] CapAmb: 0000000000000000 [ 1151.551587][ T2377] NoNewPrivs: 0 [ 1151.551587][ T2377] Seccomp: 0 [ 1151.551587][ T2377] Seccomp_filters: 0 [ 1151.551587][ T2377] Speculation_Store_Bypass: thread vulnerable [ 1151.551587][ T2377] SpeculationIndirectBranch: conditional enabled [ 1151.551587][ T2377] Cpus_allowed: 3 [ 1151.802169][ T2384] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4996'. [ 1152.565571][ T2398] FAULT_INJECTION: forcing a failure. [ 1152.565571][ T2398] name failslab, interval 1, probability 0, space 0, times 0 [ 1152.579446][ T2398] CPU: 1 UID: 0 PID: 2398 Comm: syz.4.4999 Not tainted syzkaller #0 PREEMPT(full) [ 1152.579469][ T2398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1152.579481][ T2398] Call Trace: [ 1152.579489][ T2398] [ 1152.579498][ T2398] dump_stack_lvl+0x189/0x250 [ 1152.579523][ T2398] ? __pfx____ratelimit+0x10/0x10 [ 1152.579552][ T2398] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1152.579571][ T2398] ? __pfx__printk+0x10/0x10 [ 1152.579596][ T2398] ? __pfx___might_resched+0x10/0x10 [ 1152.579619][ T2398] ? fs_reclaim_acquire+0x7d/0x100 [ 1152.579647][ T2398] should_fail_ex+0x414/0x560 [ 1152.579679][ T2398] should_failslab+0xa8/0x100 [ 1152.579704][ T2398] __kvmalloc_node_noprof+0x158/0x910 [ 1152.579728][ T2398] ? seq_read_iter+0x202/0xe20 [ 1152.579753][ T2398] seq_read_iter+0x202/0xe20 [ 1152.579789][ T2398] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 1152.579812][ T2398] __io_read+0x70a/0x1500 [ 1152.579861][ T2398] ? __pfx___io_read+0x10/0x10 [ 1152.579890][ T2398] io_read+0x4a/0x1c0 [ 1152.579916][ T2398] __io_issue_sqe+0x181/0x4b0 [ 1152.579935][ T2398] ? io_file_get_normal+0x101/0x2f0 [ 1152.579956][ T2398] io_issue_sqe+0x165/0x1060 [ 1152.579975][ T2398] ? __asan_memset+0x22/0x50 [ 1152.579999][ T2398] io_submit_sqes+0xa54/0x1e60 [ 1152.580049][ T2398] __se_sys_io_uring_enter+0x2df/0x2b20 [ 1152.580089][ T2398] ? ksys_write+0x1cb/0x250 [ 1152.580113][ T2398] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1152.580130][ T2398] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1152.580150][ T2398] ? __pfx_vfs_write+0x10/0x10 [ 1152.580173][ T2398] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1152.580197][ T2398] ? __fget_files+0x3a0/0x420 [ 1152.580227][ T2398] ? fput+0xa0/0xd0 [ 1152.580251][ T2398] ? ksys_write+0x22a/0x250 [ 1152.580271][ T2398] ? __pfx_ksys_write+0x10/0x10 [ 1152.580293][ T2398] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1152.580315][ T2398] do_syscall_64+0xfa/0xfa0 [ 1152.580330][ T2398] ? lockdep_hardirqs_on+0x9c/0x150 [ 1152.580348][ T2398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1152.580367][ T2398] ? clear_bhb_loop+0x60/0xb0 [ 1152.580389][ T2398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1152.580407][ T2398] RIP: 0033:0x7f18aad8efc9 [ 1152.580425][ T2398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1152.580441][ T2398] RSP: 002b:00007f18abbe2038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1152.580461][ T2398] RAX: ffffffffffffffda RBX: 00007f18aafe6180 RCX: 00007f18aad8efc9 [ 1152.580475][ T2398] RDX: 0000000000000000 RSI: 00000000000847ba RDI: 0000000000000007 [ 1152.580487][ T2398] RBP: 00007f18abbe2090 R08: 0000000000000000 R09: 0000000000000000 [ 1152.580498][ T2398] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000001 [ 1152.580510][ T2398] R13: 00007f18aafe6218 R14: 00007f18aafe6180 R15: 00007f18ab10fa28 [ 1152.580542][ T2398] [ 1152.861706][ C1] vkms_vblank_simulate: vblank timer overrun [ 1153.464756][ T2414] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5002'. [ 1153.854111][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 1153.854129][ T30] audit: type=1326 audit(1760735206.244:7238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2419 comm="syz.1.5004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64acd8efc9 code=0x7ffc0000 [ 1153.900562][ T30] audit: type=1326 audit(1760735206.244:7239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2419 comm="syz.1.5004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64acd8efc9 code=0x7ffc0000 [ 1153.923988][ T30] audit: type=1326 audit(1760735206.264:7240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2419 comm="syz.1.5004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f64acd45bc7 code=0x7ffc0000 [ 1153.960943][ T30] audit: type=1326 audit(1760735206.264:7241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2419 comm="syz.1.5004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f64acd45c26 code=0x7ffc0000 [ 1153.985071][ T30] audit: type=1326 audit(1760735206.264:7242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2419 comm="syz.1.5004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f64acd8ebcb code=0x7ffc0000 [ 1154.009463][ T30] audit: type=1326 audit(1760735206.264:7243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2419 comm="syz.1.5004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f64acd8efc9 code=0x7ffc0000 [ 1154.040157][ T30] audit: type=1326 audit(1760735206.344:7244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2419 comm="syz.1.5004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64acd8efc9 code=0x7ffc0000 [ 1154.064636][ T30] audit: type=1326 audit(1760735206.344:7245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2419 comm="syz.1.5004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64acd8efc9 code=0x7ffc0000 [ 1154.240922][ T30] audit: type=1326 audit(1760735206.344:7246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2419 comm="syz.1.5004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f64acd8efc9 code=0x7ffc0000 [ 1154.278933][ T30] audit: type=1326 audit(1760735206.344:7247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2419 comm="syz.1.5004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64acd8efc9 code=0x7ffc0000 [ 1154.855593][T11071] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 1154.995951][T11071] usb 2-1: device descriptor read/64, error -71 [ 1155.235405][T11071] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 1155.376715][T11071] usb 2-1: device descriptor read/64, error -71 [ 1155.488404][T11071] usb usb2-port1: attempt power cycle [ 1155.845387][T11071] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 1155.905124][T11071] usb 2-1: device descriptor read/8, error -71 [ 1156.156287][T11071] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 1156.206418][T11071] usb 2-1: device descriptor read/8, error -71 [ 1156.308634][ T2468] ip6tnl1: entered allmulticast mode [ 1156.340069][T11071] usb usb2-port1: unable to enumerate USB device [ 1157.478148][ T2500] netlink: 'syz.4.5022': attribute type 1 has an invalid length. [ 1158.185836][T11071] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1158.394032][T11071] usb 4-1: Using ep0 maxpacket: 16 [ 1158.418204][T11071] usb 4-1: config index 0 descriptor too short (expected 36114, got 18) [ 1158.440880][ T2519] fuse: Bad value for 'fd' [ 1158.468595][T11071] usb 4-1: config 0 has too many interfaces: 48, using maximum allowed: 32 [ 1158.498614][ T2519] binder: 2518:2519 ioctl c0306201 200000000080 returned -14 [ 1158.506636][T11071] usb 4-1: config 0 has an invalid interface number: 53 but max is 47 [ 1158.557917][T11071] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 48 [ 1158.622815][T11071] usb 4-1: config 0 has no interface number 0 [ 1158.654363][T11071] usb 4-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=ed.e2 [ 1158.676730][T11071] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.684763][T11071] usb 4-1: Product: syz [ 1158.746166][T11071] usb 4-1: Manufacturer: syz [ 1158.765153][T11071] usb 4-1: SerialNumber: syz [ 1158.815908][T11071] usb 4-1: config 0 descriptor?? [ 1158.966433][ T2528] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1159.085077][ T2530] netlink: 92 bytes leftover after parsing attributes in process `syz.4.5030'. [ 1159.119278][ T2532] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5032'. [ 1159.222571][ T2535] fuse: Unknown parameter 'yji­žk+ý¸W µE?<7öT¹iÒ ' [ 1159.625562][T16601] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1159.752538][T11071] usb 4-1: USB disconnect, device number 3 [ 1159.795756][T16601] usb 2-1: Using ep0 maxpacket: 8 [ 1159.808565][T16601] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1159.840177][T16601] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1159.873807][T16601] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.903116][T16601] usb 2-1: Product: syz [ 1159.913493][T16601] usb 2-1: Manufacturer: syz [ 1159.924501][T16601] usb 2-1: SerialNumber: syz [ 1159.940864][T16601] usb 2-1: config 0 descriptor?? [ 1159.961356][T16601] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 1160.582872][ T2567] netlink: 312 bytes leftover after parsing attributes in process `syz.5.5039'. [ 1161.050240][ T2565] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1161.074156][ T2565] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1161.510119][ T2565] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 1161.614881][T15190] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1161.692633][T15190] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.743564][ T2610] FAULT_INJECTION: forcing a failure. [ 1161.743564][ T2610] name failslab, interval 1, probability 0, space 0, times 0 [ 1161.757192][T15190] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1161.766983][T15190] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.779252][ T2610] CPU: 0 UID: 0 PID: 2610 Comm: syz.3.5042 Not tainted syzkaller #0 PREEMPT(full) [ 1161.779275][ T2610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1161.779285][ T2610] Call Trace: [ 1161.779293][ T2610] [ 1161.779302][ T2610] dump_stack_lvl+0x189/0x250 [ 1161.779326][ T2610] ? __pfx____ratelimit+0x10/0x10 [ 1161.779351][ T2610] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1161.779370][ T2610] ? __pfx__printk+0x10/0x10 [ 1161.779395][ T2610] ? __pfx___might_resched+0x10/0x10 [ 1161.779419][ T2610] ? fs_reclaim_acquire+0x7d/0x100 [ 1161.779442][ T2610] should_fail_ex+0x414/0x560 [ 1161.779461][ T2610] should_failslab+0xa8/0x100 [ 1161.779475][ T2610] kmem_cache_alloc_noprof+0x74/0x6e0 [ 1161.779486][ T2610] ? getname_flags+0xb8/0x540 [ 1161.779510][ T2610] getname_flags+0xb8/0x540 [ 1161.779536][ T2610] do_sys_openat2+0xbc/0x1c0 [ 1161.779578][ T2610] ? __pfx_do_sys_openat2+0x10/0x10 [ 1161.779600][ T2610] ? ksys_write+0x22a/0x250 [ 1161.779612][ T2610] ? __pfx_ksys_write+0x10/0x10 [ 1161.779623][ T2610] __x64_sys_open+0x11e/0x150 [ 1161.779638][ T2610] do_syscall_64+0xfa/0xfa0 [ 1161.779649][ T2610] ? lockdep_hardirqs_on+0x9c/0x150 [ 1161.779671][ T2610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1161.779689][ T2610] ? clear_bhb_loop+0x60/0xb0 [ 1161.779712][ T2610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1161.779730][ T2610] RIP: 0033:0x7f135a78efc9 [ 1161.779747][ T2610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1161.779756][ T2610] RSP: 002b:00007f13589f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1161.779768][ T2610] RAX: ffffffffffffffda RBX: 00007f135a9e5fa0 RCX: 00007f135a78efc9 [ 1161.779776][ T2610] RDX: 00000000000001a3 RSI: 0000000000000040 RDI: 0000200000000640 [ 1161.779782][ T2610] RBP: 00007f13589f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1161.779790][ T2610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1161.779797][ T2610] R13: 00007f135a9e6038 R14: 00007f135a9e5fa0 R15: 00007f135ab0fa28 [ 1161.779820][ T2610] [ 1161.990677][ C0] vkms_vblank_simulate: vblank timer overrun [ 1162.057120][ T2608] netlink: 92 bytes leftover after parsing attributes in process `syz.4.5043'. [ 1162.112724][T15190] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1162.123681][T15190] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.169109][T15190] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1162.237654][T16601] snd_usb_toneport 2-1:0.0: set_interface failed [ 1162.349976][T15190] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.357408][T16601] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 1162.385824][T16601] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -71 [ 1162.413010][T16601] usb 2-1: USB disconnect, device number 26 [ 1162.702751][ T2628] bridge0: port 2(bridge_slave_1) entered disabled state [ 1162.710248][ T2628] bridge0: port 1(bridge_slave_0) entered disabled state [ 1163.235834][ T2593] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1163.473534][ T5915] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1163.485376][ T2593] usb 4-1: device descriptor read/64, error -71 [ 1163.611064][ T5915] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.677322][ T5915] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1163.695694][ T5915] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.725547][ T2593] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1163.765475][ T5915] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1163.883427][ T5915] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.903270][ T2661] tipc: Enabled bearer , priority 0 [ 1163.911827][ T5915] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1163.916159][ T2593] usb 4-1: device descriptor read/64, error -71 [ 1163.941204][ T5915] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.964886][ T2657] syzkaller0: entered promiscuous mode [ 1163.976075][ T2657] syzkaller0: entered allmulticast mode [ 1164.055690][ T2593] usb usb4-port1: attempt power cycle [ 1164.082889][ T2657] tipc: Resetting bearer [ 1164.168945][ T2656] tipc: Resetting bearer [ 1164.281090][ T2656] tipc: Disabling bearer [ 1164.486000][ T2593] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1164.525401][ T2593] usb 4-1: device descriptor read/8, error -71 [ 1164.845375][ T2593] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1165.007057][ T2593] usb 4-1: device descriptor read/8, error -71 [ 1165.035358][ T2591] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 1165.130494][ T2593] usb usb4-port1: unable to enumerate USB device [ 1165.196173][ T2591] usb 6-1: device descriptor read/64, error -71 [ 1165.445353][ T2591] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 1165.617534][ T2591] usb 6-1: device descriptor read/64, error -71 [ 1165.736391][ T2591] usb usb6-port1: attempt power cycle [ 1166.096447][ T2591] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 1166.116076][ T2591] usb 6-1: device descriptor read/8, error -71 [ 1166.362096][ T2591] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 1166.445935][ T2591] usb 6-1: device descriptor read/8, error -71 [ 1166.681577][ T2591] usb usb6-port1: unable to enumerate USB device [ 1166.800567][ T2751] binder: 2743:2751 ioctl c0306201 200000000100 returned -11 [ 1166.811203][ T2756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5076'. [ 1166.870019][ T2751] fuse: Bad value for 'fd' [ 1167.095361][ T2591] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 1167.274542][ T2591] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1167.285901][ T2591] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.294362][ T2591] usb 2-1: Product: syz [ 1167.299905][ T2591] usb 2-1: Manufacturer: syz [ 1167.304820][ T2591] usb 2-1: SerialNumber: syz [ 1167.318893][ T2591] usb 2-1: config 0 descriptor?? [ 1167.532169][ T2591] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1167.546416][ T2575] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1167.718819][ T2575] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1167.730431][ T2575] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1167.741621][ T2575] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1167.751724][ T2575] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1167.764760][ T2575] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1167.774189][ T2575] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.794581][ T2575] usb 4-1: config 0 descriptor?? [ 1168.110212][ T2769] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5080'. [ 1168.176967][ T2769] batadv0: entered promiscuous mode [ 1168.183909][ T2769] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1168.193958][ T2769] batadv0: left promiscuous mode [ 1168.222423][ T2575] plantronics 0003:047F:FFFF.0030: ignoring exceeding usage max [ 1168.245094][ T2575] plantronics 0003:047F:FFFF.0030: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1168.471485][ T2761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1168.484882][ T2761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1169.391270][ T2818] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 1169.528980][ T2591] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1169.622453][ T2591] usb 2-1: USB disconnect, device number 27 [ 1169.676768][ T2589] usb 4-1: reset high-speed USB device number 8 using dummy_hcd [ 1170.024799][ T2828] netlink: 312 bytes leftover after parsing attributes in process `syz.4.5089'. [ 1170.113035][ T2830] veth1_macvtap: left promiscuous mode [ 1170.121236][ T2830] macsec0: entered promiscuous mode [ 1170.127301][ T2830] macsec0: entered allmulticast mode [ 1170.142240][ T2830] macsec0: left promiscuous mode [ 1170.147678][ T2830] macsec0: left allmulticast mode [ 1170.456112][ T2575] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1170.466963][ T2593] usb 4-1: USB disconnect, device number 8 [ 1170.655646][ T2575] usb 6-1: Using ep0 maxpacket: 32 [ 1170.680608][ T2575] usb 6-1: New USB device found, idVendor=0bc7, idProduct=0004, bcdDevice= e.74 [ 1170.698214][ T2575] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.763537][ T2575] usb 6-1: Product: syz [ 1170.774748][ T2575] usb 6-1: Manufacturer: syz [ 1170.785400][ T2575] usb 6-1: SerialNumber: syz [ 1170.806118][ T2575] usb 6-1: config 0 descriptor?? [ 1170.814835][ T2854] veth1_to_bond: entered allmulticast mode [ 1170.851629][ T2575] ati_remote 6-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 1170.918508][ T2853] veth1_to_bond: left allmulticast mode [ 1171.088373][ T2832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1171.118121][ T2832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1171.138821][ T2593] usb 6-1: USB disconnect, device number 23 [ 1171.301337][ T2575] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 1171.510056][ T2872] netlink: 'syz.3.5101': attribute type 6 has an invalid length. [ 1171.552857][ T2575] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1171.634774][ T2575] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.737026][ T2575] usb 2-1: Product: syz [ 1171.837158][ T2575] usb 2-1: Manufacturer: syz [ 1171.841826][ T2575] usb 2-1: SerialNumber: syz [ 1171.888166][ T2575] usb 2-1: config 0 descriptor?? [ 1172.105649][ T2593] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 1172.151212][ T2575] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1172.245411][ T2593] usb 4-1: device descriptor read/64, error -71 [ 1172.507167][ T2593] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 1172.668151][ T2593] usb 4-1: device descriptor read/64, error -71 [ 1172.805600][ T2593] usb usb4-port1: attempt power cycle [ 1173.197179][ T2593] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 1173.228594][ T2593] usb 4-1: device descriptor read/8, error -71 [ 1173.485817][ T2593] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 1173.546087][ T2593] usb 4-1: device descriptor read/8, error -71 [ 1173.656530][ T2593] usb usb4-port1: unable to enumerate USB device [ 1173.969304][ T2901] fuse: Bad value for 'fd' [ 1174.164596][ T2575] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1174.204090][ T2575] usb 2-1: USB disconnect, device number 28 [ 1174.523258][ T2914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5114'. [ 1174.609286][ T2918] veth1_to_bond: entered allmulticast mode [ 1174.632606][ T2918] bond_slave_1: entered promiscuous mode [ 1174.649083][ T2917] bond_slave_1: left promiscuous mode [ 1174.654693][ T2917] veth1_to_bond: left allmulticast mode [ 1174.797946][ T2922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5118'. [ 1175.376193][ T2948] fuse: Bad value for 'fd' [ 1175.464768][ T2953] fuse: Bad value for 'fd' [ 1175.551950][ T2950] netlink: 'syz.0.5128': attribute type 7 has an invalid length. [ 1175.841445][ T2960] veth1_to_bond: entered allmulticast mode [ 1175.881842][ T2960] bond_slave_1: entered promiscuous mode [ 1175.926267][ T2959] bond_slave_1: left promiscuous mode [ 1175.934260][ T2959] veth1_to_bond: left allmulticast mode [ 1176.102804][ T2962] FAULT_INJECTION: forcing a failure. [ 1176.102804][ T2962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1176.104013][ T2965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5132'. [ 1176.244869][ T2962] CPU: 0 UID: 0 PID: 2962 Comm: syz.0.5131 Not tainted syzkaller #0 PREEMPT(full) [ 1176.244895][ T2962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1176.244908][ T2962] Call Trace: [ 1176.244916][ T2962] [ 1176.244927][ T2962] dump_stack_lvl+0x189/0x250 [ 1176.244953][ T2962] ? __pfx____ratelimit+0x10/0x10 [ 1176.244980][ T2962] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1176.245007][ T2962] ? __pfx__printk+0x10/0x10 [ 1176.245025][ T2962] ? __might_fault+0xb0/0x130 [ 1176.245054][ T2962] should_fail_ex+0x414/0x560 [ 1176.245084][ T2962] _copy_from_iter+0x1de/0x1790 [ 1176.245109][ T2962] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1176.245140][ T2962] ? policy_nodemask+0x27c/0x720 [ 1176.245161][ T2962] ? __pfx__copy_from_iter+0x10/0x10 [ 1176.245190][ T2962] ? set_page_refcounted+0xa0/0x1e0 [ 1176.245212][ T2962] ? page_copy_sane+0x4e/0x280 [ 1176.245235][ T2962] copy_page_from_iter+0xdd/0x170 [ 1176.245263][ T2962] tun_get_user+0x1d7b/0x3e90 [ 1176.245289][ T2962] ? tun_get_user+0x6f6/0x3e90 [ 1176.245316][ T2962] ? aa_file_perm+0x44d/0x1550 [ 1176.245335][ T2962] ? __pfx_tun_get_user+0x10/0x10 [ 1176.245355][ T2962] ? _parse_integer_limit+0x1ae/0x1f0 [ 1176.245382][ T2962] ? __lock_acquire+0xab9/0xd20 [ 1176.245411][ T2962] ? ref_tracker_alloc+0x318/0x460 [ 1176.245428][ T2962] ? __lock_acquire+0xab9/0xd20 [ 1176.245452][ T2962] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1176.245476][ T2962] ? tun_get+0x1c/0x2f0 [ 1176.245502][ T2962] ? tun_get+0x1c/0x2f0 [ 1176.245522][ T2962] ? tun_get+0x1c/0x2f0 [ 1176.245545][ T2962] tun_chr_write_iter+0x113/0x200 [ 1176.245569][ T2962] vfs_write+0x5c9/0xb30 [ 1176.245594][ T2962] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1176.245616][ T2962] ? __pfx_vfs_write+0x10/0x10 [ 1176.245645][ T2962] ? __fget_files+0x2a/0x420 [ 1176.245673][ T2962] ksys_write+0x145/0x250 [ 1176.245695][ T2962] ? __pfx_ksys_write+0x10/0x10 [ 1176.245718][ T2962] ? do_syscall_64+0xbe/0xfa0 [ 1176.245740][ T2962] do_syscall_64+0xfa/0xfa0 [ 1176.245757][ T2962] ? lockdep_hardirqs_on+0x9c/0x150 [ 1176.245775][ T2962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1176.245794][ T2962] ? clear_bhb_loop+0x60/0xb0 [ 1176.245816][ T2962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1176.245834][ T2962] RIP: 0033:0x7fc59038da7f [ 1176.245852][ T2962] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1176.245868][ T2962] RSP: 002b:00007fc58e5f6000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1176.245889][ T2962] RAX: ffffffffffffffda RBX: 00007fc5905e5fa0 RCX: 00007fc59038da7f [ 1176.245903][ T2962] RDX: 000000000000004a RSI: 0000200000000000 RDI: 00000000000000c8 [ 1176.245914][ T2962] RBP: 00007fc58e5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1176.245926][ T2962] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001 [ 1176.245937][ T2962] R13: 00007fc5905e6038 R14: 00007fc5905e5fa0 R15: 00007fc59070fa28 [ 1176.245966][ T2962] [ 1177.005425][ T2575] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1177.059393][ T2981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5135'. [ 1177.165622][ T2575] usb 2-1: Using ep0 maxpacket: 32 [ 1177.180466][ T2575] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1177.189967][ T2575] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.238176][ T2575] usb 2-1: config 0 descriptor?? [ 1177.314209][ T2988] netlink: 'syz.4.5139': attribute type 7 has an invalid length. [ 1177.330660][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.339463][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.399549][ T5911] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1177.454555][ T2969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1177.463575][ T2575] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1177.479060][ T2969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1177.511454][ T2575] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1177.572768][ T5911] usb 6-1: Using ep0 maxpacket: 8 [ 1177.582399][ T2575] dib0700: firmware download failed at 7 with -22 [ 1177.590819][ T2969] random: crng reseeded on system resumption [ 1177.611580][ T5911] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1177.629978][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.659466][ T5911] usb 6-1: Product: syz [ 1177.665132][ T5911] usb 6-1: Manufacturer: syz [ 1177.680221][ T5911] usb 6-1: SerialNumber: syz [ 1177.699895][ T2589] usb 2-1: USB disconnect, device number 29 [ 1177.756165][ T5911] usb 6-1: config 0 descriptor?? [ 1177.834819][ T5911] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1178.710181][ T2999] netlink: 312 bytes leftover after parsing attributes in process `syz.1.5142'. [ 1179.271364][ T3000] binder: 2995:3000 ioctl 4018620d 0 returned -22 [ 1179.282839][ T3000] binder: 2995:3000 ioctl c0306201 200000000100 returned -11 [ 1179.292064][ T3000] fuse: Bad value for 'fd' [ 1179.409310][T11288] Bluetooth: hci3: command 0x0406 tx timeout [ 1179.799981][ T3003] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1179.816540][ T3003] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1179.849734][ T3003] macvlan0: entered promiscuous mode [ 1179.855740][ T3003] macvlan0: entered allmulticast mode [ 1179.865237][ T3003] bond3: entered promiscuous mode [ 1179.873373][ T3003] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1179.891417][ T3003] bond3: left promiscuous mode [ 1180.143113][ T3011] netlink: 10 bytes leftover after parsing attributes in process `syz.4.5145'. [ 1180.377879][ T30] kauditd_printk_skb: 167 callbacks suppressed [ 1180.377897][ T30] audit: type=1326 audit(1760735232.774:7415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3012 comm="syz.3.5146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135a78efc9 code=0x7ffc0000 [ 1180.419824][ T30] audit: type=1326 audit(1760735232.814:7416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3012 comm="syz.3.5146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135a78efc9 code=0x7ffc0000 [ 1180.444384][ T30] audit: type=1326 audit(1760735232.814:7417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3012 comm="syz.3.5146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f135a78efc9 code=0x7ffc0000 [ 1180.471056][ T5911] gspca_sonixj: reg_w1 err -71 [ 1180.481910][ T5911] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 1180.498957][ T5911] usb 6-1: USB disconnect, device number 24 [ 1180.519026][ T30] audit: type=1326 audit(1760735232.814:7418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3012 comm="syz.3.5146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135a78efc9 code=0x7ffc0000 [ 1180.543696][ T30] audit: type=1326 audit(1760735232.814:7419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3012 comm="syz.3.5146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135a78efc9 code=0x7ffc0000 [ 1180.567410][ T30] audit: type=1326 audit(1760735232.814:7420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3012 comm="syz.3.5146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f135a78efc9 code=0x7ffc0000 [ 1180.597084][ T30] audit: type=1326 audit(1760735232.814:7421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3012 comm="syz.3.5146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135a78efc9 code=0x7ffc0000 [ 1180.621571][ T30] audit: type=1326 audit(1760735232.814:7422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3012 comm="syz.3.5146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135a78efc9 code=0x7ffc0000 [ 1180.648584][ T30] audit: type=1326 audit(1760735232.814:7423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3012 comm="syz.3.5146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f135a78efc9 code=0x7ffc0000 [ 1180.672576][ T30] audit: type=1326 audit(1760735232.814:7424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3012 comm="syz.3.5146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135a78efc9 code=0x7ffc0000 [ 1181.072588][ T3022] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1181.165449][ T3024] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5149'. [ 1181.345589][ T5911] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1181.515549][ T5911] usb 6-1: Using ep0 maxpacket: 16 [ 1181.522297][ T5911] usb 6-1: config 0 has an invalid interface number: 126 but max is 0 [ 1181.553457][ T5911] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1181.598629][ T5911] usb 6-1: config 0 has no interface number 0 [ 1181.625769][ T5911] usb 6-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1181.675915][ T5911] usb 6-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 1181.734634][ T5911] usb 6-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1181.805729][ T5911] usb 6-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 147 [ 1181.818105][ T5911] usb 6-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1181.833630][ T5911] usb 6-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 1181.846180][ T5911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.864023][ T5911] usb 6-1: config 0 descriptor?? [ 1181.870105][ T3022] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1181.886581][ T3022] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1181.941374][ T5911] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1182.045917][ T2593] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1182.141475][ T5911] usb 6-1: USB disconnect, device number 25 [ 1182.247124][ T2593] usb 5-1: Using ep0 maxpacket: 32 [ 1182.262303][ T2593] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1182.335534][ T2593] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.352391][ T3046] fuse: Unknown parameter 'Ár#+«AŽ+_VÙfd' [ 1182.366337][ T2593] usb 5-1: config 0 descriptor?? [ 1182.451770][ T3046] loop7: detected capacity change from 0 to 1 [ 1182.583407][T25564] Dev loop7: unable to read RDB block 1 [ 1182.648892][T25564] loop7: unable to read partition table [ 1182.690155][T25564] loop7: partition table beyond EOD, truncated [ 1183.111445][ T3031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1183.116929][ T2593] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1183.142939][ T3031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1183.751763][ T2593] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1183.834048][ T3051] binder: 3037:3051 ioctl 4018620d 0 returned -22 [ 1183.843620][ T3051] binder: 3037:3051 ioctl c0306201 200000000100 returned -11 [ 1184.212574][ T2593] dib0700: firmware download failed at 7 with -22 [ 1184.243249][ T3048] random: crng reseeded on system resumption [ 1184.297974][ T3054] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5157'. [ 1184.883397][ T3051] fuse: Bad value for 'fd' [ 1185.533636][ T2591] usb 5-1: USB disconnect, device number 39 [ 1187.475551][ T2575] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1187.565041][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1187.577498][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1187.590023][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1187.602439][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1187.614845][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1187.627444][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1187.639863][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1187.652310][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1187.664712][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1187.677120][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1190.902947][ C0] sched: DL replenish lagged too much [ 1190.960557][ T2575] usb 5-1: Using ep0 maxpacket: 8 [ 1191.405729][ T2575] usb 5-1: device descriptor read/all, error -71 [ 1192.565604][ C1] net_ratelimit: 12784 callbacks suppressed [ 1192.565626][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1192.583951][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1192.596378][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1192.608797][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1192.621203][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1192.634135][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1192.646521][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1192.658914][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1192.671295][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1192.683675][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1197.575582][ C1] net_ratelimit: 12489 callbacks suppressed [ 1197.575603][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1197.593978][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1197.606378][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1197.618771][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1197.631203][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1197.643686][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1197.656097][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1197.668521][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1197.681008][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1197.693500][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1202.585414][ C1] net_ratelimit: 15712 callbacks suppressed [ 1202.585437][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1202.586365][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1202.592208][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1202.604988][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1202.616141][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1202.629874][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1202.641058][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1202.653778][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1202.665050][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1202.678360][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1207.595454][ C1] net_ratelimit: 13932 callbacks suppressed [ 1207.595475][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1207.596022][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1207.601755][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1207.614607][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1207.625661][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1207.639433][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1207.649900][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1207.662606][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1207.673921][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1207.686800][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1212.605550][ C1] net_ratelimit: 13449 callbacks suppressed [ 1212.605572][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1212.606196][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1212.612136][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1212.624752][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1212.635894][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1212.648771][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1212.659800][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1212.672634][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1212.684257][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1212.696505][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1217.615438][ C1] net_ratelimit: 15850 callbacks suppressed [ 1217.615458][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1217.615652][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1217.621725][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1217.634581][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1217.645699][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1217.658409][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1217.669436][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1217.682258][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1217.693258][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1217.706126][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1222.625400][ C1] net_ratelimit: 15939 callbacks suppressed [ 1222.625422][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1222.626099][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1222.631844][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1222.644752][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1222.655788][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1222.668627][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1222.679855][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1222.692438][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1222.703514][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1222.717553][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1227.635664][ C1] net_ratelimit: 15549 callbacks suppressed [ 1227.635685][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1227.636151][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1227.641924][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1227.655454][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1227.666375][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1227.679266][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1227.690271][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1227.703294][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1227.714229][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1227.727266][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1232.645340][ C1] net_ratelimit: 16424 callbacks suppressed [ 1232.645361][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1232.645505][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1232.651612][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1232.664583][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1232.675604][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1232.688528][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1232.699530][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1232.712442][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1232.723337][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1232.736370][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1237.655627][ C0] net_ratelimit: 16498 callbacks suppressed [ 1237.655643][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1237.655653][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1237.656845][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1237.661914][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1237.674945][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1237.686046][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1237.698771][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1237.709850][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1237.723882][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1237.733790][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1240.344971][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.362603][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1242.665268][ C0] net_ratelimit: 15492 callbacks suppressed [ 1242.665288][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1242.665373][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1242.672547][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1242.683711][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1242.696430][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1242.707389][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1242.720296][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1242.731254][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1242.744276][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1242.755317][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1247.675931][ C0] net_ratelimit: 16233 callbacks suppressed [ 1247.675952][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1247.676086][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1247.683091][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1247.694168][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1247.706970][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1247.717989][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1247.730961][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1247.742054][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1247.754817][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1247.765935][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1252.685634][ C1] net_ratelimit: 16733 callbacks suppressed [ 1252.685655][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1252.686212][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1252.692025][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1252.704927][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1252.715954][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1252.728916][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1252.739893][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1252.752696][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1252.763619][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1252.776666][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1257.695538][ C1] net_ratelimit: 16162 callbacks suppressed [ 1257.695560][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1257.695573][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1257.696697][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1257.701796][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1257.714729][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1257.725830][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1257.738607][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1257.750126][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1257.762465][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1257.773610][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1262.705584][ C1] net_ratelimit: 16754 callbacks suppressed [ 1262.705604][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1262.706395][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1262.711845][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1262.724878][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1262.735881][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1262.748740][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1262.759643][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1262.773088][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1262.784033][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1262.797021][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1267.715395][ C1] net_ratelimit: 17084 callbacks suppressed [ 1267.715416][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1267.715734][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1267.721743][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1267.734594][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1267.745594][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1267.759645][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1267.769497][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1267.782424][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1267.793505][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1267.806363][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1272.725465][ C1] net_ratelimit: 16290 callbacks suppressed [ 1272.725487][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1272.725658][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1272.731877][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1272.744916][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1272.755791][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1272.768711][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1272.779921][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1272.792559][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1272.803576][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1272.816475][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1277.735356][ C1] net_ratelimit: 16717 callbacks suppressed [ 1277.735378][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1277.736402][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1277.741673][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1277.754656][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1277.765864][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1277.778679][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1277.789615][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1277.802691][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1277.813577][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1277.826570][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1282.745668][ C1] net_ratelimit: 16227 callbacks suppressed [ 1282.745689][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1282.745967][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1282.752052][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1282.764942][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1282.775864][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1282.788975][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1282.799987][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1282.812765][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1282.823905][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1282.836794][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1284.840932][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1287.755412][ C1] net_ratelimit: 16415 callbacks suppressed [ 1287.755434][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1287.755934][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1287.761798][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1287.775577][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1287.785791][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1287.798610][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1287.809790][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1287.822438][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1287.833608][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1287.846393][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1292.765398][ C1] net_ratelimit: 16434 callbacks suppressed [ 1292.765422][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1292.766347][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1292.771820][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1292.785661][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1292.795752][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1292.808417][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1292.819415][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1292.832256][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1292.843381][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1292.856093][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1297.775309][ C1] net_ratelimit: 16417 callbacks suppressed [ 1297.775330][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1297.775962][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1297.781626][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1297.794498][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1297.805662][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1297.819585][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1297.829466][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1297.842321][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1297.853351][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1297.866222][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1300.419376][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.448582][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1302.785587][ C1] net_ratelimit: 15153 callbacks suppressed [ 1302.785610][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1302.786340][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1302.791889][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1302.804797][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1302.815796][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1302.828677][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1302.839764][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1302.852466][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1302.863521][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1302.877444][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1307.795284][ C1] net_ratelimit: 12321 callbacks suppressed [ 1307.795304][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1307.795410][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1307.801593][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1307.815096][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1307.825476][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1307.838994][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1307.849446][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1307.864046][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1307.873320][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1307.886822][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1312.805670][ C1] net_ratelimit: 11955 callbacks suppressed [ 1312.805690][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1312.805791][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1312.812007][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1312.825461][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1312.835837][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1312.849396][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1312.859900][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1312.874318][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1312.883725][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1312.897212][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1317.815349][ C1] net_ratelimit: 11704 callbacks suppressed [ 1317.815370][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1317.815823][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1317.821747][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1317.835460][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1317.845639][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1317.859317][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1317.869676][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1317.884275][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1317.895898][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1317.907101][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1322.825462][ C0] net_ratelimit: 12170 callbacks suppressed [ 1322.825495][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1322.825549][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1322.833323][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1322.843699][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1322.857205][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1322.867603][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1322.881119][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1322.891426][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1322.904960][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1322.925886][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1327.835290][ C0] net_ratelimit: 11910 callbacks suppressed [ 1327.835311][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1327.835390][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1327.843038][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1327.853509][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1327.867034][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1327.877507][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1327.891997][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1327.901443][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1327.914904][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1327.936087][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1332.845445][ C1] net_ratelimit: 11417 callbacks suppressed [ 1332.845467][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1332.845957][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1332.851698][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1332.865291][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1332.875714][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1332.889044][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1332.899561][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1332.913073][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1332.923413][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1332.936946][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1337.855508][ C1] net_ratelimit: 12318 callbacks suppressed [ 1337.855528][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1337.856303][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1337.861899][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1337.873757][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1337.885883][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1337.900511][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1337.909781][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1337.921755][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1337.933589][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1337.947173][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1342.865424][ C1] net_ratelimit: 13816 callbacks suppressed [ 1342.865445][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1342.865610][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1342.871764][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1342.883777][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1342.895621][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1342.909266][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1342.919676][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1342.931528][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1342.943471][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1342.957062][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1347.875293][ C1] net_ratelimit: 13731 callbacks suppressed [ 1347.875316][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1347.876524][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1347.881706][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1347.893743][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1347.905698][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1347.920090][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1347.929558][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1347.941583][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1347.953568][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1347.966951][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1352.885333][ C1] net_ratelimit: 13765 callbacks suppressed [ 1352.885354][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1352.886552][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1352.891693][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1352.903728][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1352.915550][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1352.929174][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1352.939585][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1352.952393][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1352.963280][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1352.976802][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1357.895419][ C1] net_ratelimit: 13775 callbacks suppressed [ 1357.895440][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1357.895925][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1357.901721][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1357.913840][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1357.925836][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1357.939114][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1357.949534][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1357.961474][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1357.973421][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1357.986871][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1362.905415][ C1] net_ratelimit: 13746 callbacks suppressed [ 1362.905437][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1362.905463][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1362.911843][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1362.925321][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1362.935592][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1362.947604][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1362.959562][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1362.973980][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1362.983285][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1362.995331][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1367.915330][ C1] net_ratelimit: 13782 callbacks suppressed [ 1367.915350][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1367.916957][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1367.921586][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1367.933645][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1367.945655][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1367.959938][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1367.969316][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1367.981334][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1367.993313][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1368.006743][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1372.925546][ C1] net_ratelimit: 13786 callbacks suppressed [ 1372.925568][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1372.925688][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1372.931848][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1372.943878][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1372.955833][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1372.969328][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1372.979623][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1372.991700][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1373.003657][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1373.016976][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1373.295204][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1373.302189][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5491/1:b..l [ 1373.310567][ C0] rcu: (detected by 0, t=10503 jiffies, g=159061, q=206 ncpus=2) [ 1373.318395][ C0] task:dhcpcd state:R running task stack:22776 pid:5491 tgid:5491 ppid:1 task_flags:0x400140 flags:0x00080001 [ 1373.333178][ C0] Call Trace: [ 1373.336479][ C0] [ 1373.339400][ C0] __schedule+0x1798/0x4cc0 [ 1373.343890][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1373.349784][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1373.356140][ C0] ? __pfx___schedule+0x10/0x10 [ 1373.360999][ C0] ? rcu_preempt_deferred_qs_irqrestore+0xa11/0xce0 [ 1373.367615][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 1373.372910][ C0] preempt_schedule_irq+0xb5/0x150 [ 1373.378051][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1373.383789][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1373.389590][ C0] irqentry_exit+0x6f/0x90 [ 1373.394013][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1373.399998][ C0] RIP: 0010:unwind_next_frame+0xa9f/0x2390 [ 1373.405800][ C0] Code: c0 0f 85 78 13 00 00 49 89 df 49 c1 ef 03 41 0f b6 04 2f 84 c0 0f 85 88 13 00 00 0f b6 76 01 83 e6 07 83 fe 04 4c 89 64 24 10 <0f> 84 49 04 00 00 83 fe 03 0f 84 f3 01 00 00 83 fe 02 0f 85 a1 07 [ 1373.425430][ C0] RSP: 0018:ffffc90003486eb8 EFLAGS: 00000293 [ 1373.431522][ C0] RAX: 0000000000000000 RBX: ffffffff9039e21b RCX: ffffffff8fba8368 [ 1373.439516][ C0] RDX: ffffffff9039e216 RSI: 0000000000000002 RDI: ffffffff8bc07d80 [ 1373.447491][ C0] RBP: dffffc0000000000 R08: 000000000000000b R09: ffffffff8173cd25 [ 1373.455478][ C0] R10: ffffc90003486fd8 R11: ffffffff81ac6cd0 R12: ffffc90003487460 [ 1373.463460][ C0] R13: ffffc90003486fd8 R14: ffffc90003486f88 R15: 1ffffffff2073c43 [ 1373.471434][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1373.477601][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1373.482707][ C0] ? unwind_next_frame+0xd4/0x2390 [ 1373.487811][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1373.492949][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 1373.497979][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1373.504116][ C0] arch_stack_walk+0x11c/0x150 [ 1373.508888][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 1373.513926][ C0] stack_trace_save+0x9c/0xe0 [ 1373.518607][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1373.523963][ C0] save_stack+0xf5/0x1f0 [ 1373.528194][ C0] ? __pfx_save_stack+0x10/0x10 [ 1373.533054][ C0] ? __free_frozen_pages+0xbc4/0xd30 [ 1373.538347][ C0] ? __put_partials+0x146/0x170 [ 1373.543205][ C0] ? put_cpu_partial+0x1f2/0x2e0 [ 1373.548242][ C0] ? __slab_free+0x2b9/0x390 [ 1373.552843][ C0] ? qlist_free_all+0x97/0x140 [ 1373.557602][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 1373.563240][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 1373.568307][ C0] ? page_ext_put+0x97/0xc0 [ 1373.572810][ C0] __reset_page_owner+0x71/0x1f0 [ 1373.577767][ C0] __free_frozen_pages+0xbc4/0xd30 [ 1373.582898][ C0] __put_partials+0x146/0x170 [ 1373.587593][ C0] put_cpu_partial+0x1f2/0x2e0 [ 1373.592344][ C0] __slab_free+0x2b9/0x390 [ 1373.596750][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1373.603191][ C0] ? __phys_addr+0xd3/0x180 [ 1373.607710][ C0] qlist_free_all+0x97/0x140 [ 1373.612302][ C0] kasan_quarantine_reduce+0x148/0x160 [ 1373.617760][ C0] __kasan_slab_alloc+0x22/0x80 [ 1373.622628][ C0] __kmalloc_node_track_caller_noprof+0x519/0x800 [ 1373.629052][ C0] ? __alloc_skb+0x142/0x2d0 [ 1373.633632][ C0] ? rcu_is_watching+0x15/0xb0 [ 1373.638392][ C0] ? __alloc_skb+0x142/0x2d0 [ 1373.642998][ C0] kmalloc_reserve+0x136/0x290 [ 1373.647773][ C0] __alloc_skb+0x142/0x2d0 [ 1373.652176][ C0] alloc_skb_with_frags+0xca/0x890 [ 1373.657282][ C0] ? __lock_acquire+0xab9/0xd20 [ 1373.662152][ C0] sock_alloc_send_pskb+0x84d/0x980 [ 1373.667368][ C0] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1373.673097][ C0] ? sock_def_readable+0xbe/0x550 [ 1373.678128][ C0] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 1373.684214][ C0] unix_dgram_sendmsg+0x461/0x1850 [ 1373.689341][ C0] ? __kernel_text_address+0xd/0x40 [ 1373.694564][ C0] ? __lock_acquire+0xab9/0xd20 [ 1373.699439][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1373.705021][ C0] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 1373.711506][ C0] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 1373.717045][ C0] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 1373.722949][ C0] __sock_sendmsg+0x21c/0x270 [ 1373.727636][ C0] sock_write_iter+0x279/0x360 [ 1373.732386][ C0] ? __pfx_sock_write_iter+0x10/0x10 [ 1373.737683][ C0] do_iter_readv_writev+0x623/0x8c0 [ 1373.742895][ C0] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1373.748614][ C0] ? common_file_perm+0x1b5/0x230 [ 1373.753623][ C0] ? bpf_lsm_file_permission+0x9/0x20 [ 1373.758978][ C0] ? security_file_permission+0x75/0x290 [ 1373.764624][ C0] ? rw_verify_area+0x255/0x4d0 [ 1373.769477][ C0] vfs_writev+0x31a/0x960 [ 1373.773795][ C0] ? __pfx_vfs_writev+0x10/0x10 [ 1373.778649][ C0] ? rcu_is_watching+0x15/0xb0 [ 1373.783441][ C0] do_writev+0x14d/0x2d0 [ 1373.787697][ C0] ? __pfx_do_writev+0x10/0x10 [ 1373.792446][ C0] ? __secure_computing+0xe2/0x2a0 [ 1373.797552][ C0] do_syscall_64+0xfa/0xfa0 [ 1373.802069][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1373.808131][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1373.813743][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1373.818407][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1373.824305][ C0] RIP: 0033:0x7f303053e407 [ 1373.828718][ C0] RSP: 002b:00007ffe41454d00 EFLAGS: 00000202 ORIG_RAX: 0000000000000014 [ 1373.837113][ C0] RAX: ffffffffffffffda RBX: 00007f30304b4740 RCX: 00007f303053e407 [ 1373.845151][ C0] RDX: 0000000000000005 RSI: 00007ffe41454d60 RDI: 000000000000000a [ 1373.853098][ C0] RBP: 0000555c723ed870 R08: 0000000000000000 R09: 0000000000000000 [ 1373.861049][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000555c9f1c7d70 [ 1373.869000][ C0] R13: 000000000000012c R14: 0000000000004801 R15: 0000555c9f1c6a34 [ 1373.876959][ C0] [ 1373.879964][ C0] rcu: rcu_preempt kthread starved for 5651 jiffies! g159061 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1373.891149][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1373.901136][ C0] rcu: RCU grace-period kthread stack dump: [ 1373.907041][ C0] task:rcu_preempt state:R running task stack:27352 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1373.920552][ C0] Call Trace: [ 1373.923849][ C0] [ 1373.926788][ C0] __schedule+0x1798/0x4cc0 [ 1373.931330][ C0] ? __lock_acquire+0xab9/0xd20 [ 1373.936190][ C0] ? __pfx___schedule+0x10/0x10 [ 1373.941068][ C0] ? schedule+0x91/0x360 [ 1373.945325][ C0] schedule+0x165/0x360 [ 1373.949590][ C0] schedule_timeout+0x12b/0x270 [ 1373.954450][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1373.959826][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1373.965731][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1373.971036][ C0] ? prepare_to_swait_event+0x341/0x380 [ 1373.976596][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 1373.981478][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1373.986687][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1373.992858][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1373.998156][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1374.003374][ C0] ? finish_swait+0xcd/0x1f0 [ 1374.007976][ C0] rcu_gp_kthread+0x99/0x390 [ 1374.012585][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1374.017795][ C0] ? __kthread_parkme+0x7b/0x200 [ 1374.022747][ C0] ? __kthread_parkme+0x1a1/0x200 [ 1374.027787][ C0] kthread+0x711/0x8a0 [ 1374.031861][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1374.037061][ C0] ? __pfx_kthread+0x10/0x10 [ 1374.041669][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1374.046886][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1374.052085][ C0] ? __pfx_kthread+0x10/0x10 [ 1374.056680][ C0] ret_from_fork+0x4bc/0x870 [ 1374.061452][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1374.066580][ C0] ? __switch_to_asm+0x39/0x70 [ 1374.071350][ C0] ? __switch_to_asm+0x33/0x70 [ 1374.076118][ C0] ? __pfx_kthread+0x10/0x10 [ 1374.080717][ C0] ret_from_fork_asm+0x1a/0x30 [ 1374.085506][ C0] [ 1374.088522][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1374.094857][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1374.100071][ C1] NMI backtrace for cpu 1 [ 1374.100089][ C1] CPU: 1 UID: 0 PID: 5827 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 1374.100127][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1374.100149][ C1] Workqueue: krxrpcd rxrpc_peer_keepalive_worker [ 1374.100177][ C1] RIP: 0010:lock_release+0x152/0x3e0 [ 1374.100198][ C1] Code: 89 64 24 14 45 89 e5 85 c0 0f 84 dd 00 00 00 48 85 ed 0f 84 19 01 00 00 83 7d 24 00 0f 85 ea 01 00 00 8b 45 20 3d 00 00 20 00 <48> 8b 5c 24 08 8b 54 24 14 72 25 89 c1 81 e1 00 00 e0 ff 25 ff ff [ 1374.100211][ C1] RSP: 0018:ffffc90000a07330 EFLAGS: 00000083 [ 1374.100225][ C1] RAX: 0000000000022007 RBX: 0000000000000019 RCX: bd5aaf86a160bd00 [ 1374.100237][ C1] RDX: ffffc90000a07401 RSI: ffffffff8e13d2e0 RDI: ffff888032a30bf8 [ 1374.100250][ C1] RBP: ffff888032a30bf8 R08: ffffc90000a075a0 R09: 0000000000000000 [ 1374.100262][ C1] R10: ffffc90000a074b8 R11: fffff52000140e99 R12: 0000000000000005 [ 1374.100274][ C1] R13: 0000000000000005 R14: ffffffff8e13d2e0 R15: ffff888032a30000 [ 1374.100286][ C1] FS: 0000000000000000(0000) GS:ffff888125e0b000(0000) knlGS:0000000000000000 [ 1374.100300][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1374.100311][ C1] CR2: 00007f64ad10eccc CR3: 000000002803e000 CR4: 00000000003526f0 [ 1374.100326][ C1] Call Trace: [ 1374.100333][ C1] [ 1374.100341][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1374.100364][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1374.100384][ C1] unwind_next_frame+0x19a9/0x2390 [ 1374.100407][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1374.100428][ C1] ? stack_trace_save+0x9c/0xe0 [ 1374.100445][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1374.100461][ C1] arch_stack_walk+0x11c/0x150 [ 1374.100485][ C1] ? kasan_save_track+0x3e/0x80 [ 1374.100503][ C1] stack_trace_save+0x9c/0xe0 [ 1374.100518][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1374.100534][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1374.100555][ C1] ? __lock_acquire+0xab9/0xd20 [ 1374.100571][ C1] kasan_save_track+0x3e/0x80 [ 1374.100662][ C1] ? br_nf_dev_queue_xmit+0x4ec/0x2580 [ 1374.100680][ C1] __kasan_save_free_info+0x46/0x50 [ 1374.100702][ C1] __kasan_slab_free+0x5c/0x80 [ 1374.100720][ C1] kmem_cache_free+0x19b/0x690 [ 1374.100738][ C1] ? __skb_ext_put+0x218/0x2e0 [ 1374.100761][ C1] br_nf_dev_queue_xmit+0x4ec/0x2580 [ 1374.100791][ C1] ? NF_HOOK+0x9e/0x6b0 [ 1374.100806][ C1] ? NF_HOOK+0x9e/0x6b0 [ 1374.100820][ C1] NF_HOOK+0x61b/0x6b0 [ 1374.100836][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1374.100851][ C1] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 1374.100868][ C1] ? net_generic+0x1e/0x240 [ 1374.100881][ C1] ? net_generic+0x1e/0x240 [ 1374.100894][ C1] ? net_generic+0x1e/0x240 [ 1374.100908][ C1] ? skb_pull+0xc1/0x1d0 [ 1374.100924][ C1] br_nf_post_routing+0xb66/0xfe0 [ 1374.100940][ C1] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 1374.100958][ C1] ? __pfx_br_nf_post_routing+0x10/0x10 [ 1374.100974][ C1] nf_hook_slow+0xc5/0x220 [ 1374.101000][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1374.101021][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1374.101042][ C1] NF_HOOK+0x215/0x3c0 [ 1374.101063][ C1] ? NF_HOOK+0x9e/0x3c0 [ 1374.101082][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1374.101101][ C1] ? net_generic+0x1e/0x240 [ 1374.101116][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1374.101140][ C1] ? net_generic+0x1e/0x240 [ 1374.101155][ C1] br_forward_finish+0xd3/0x130 [ 1374.101174][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1374.101196][ C1] br_nf_forward_finish+0xa40/0xe60 [ 1374.101216][ C1] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 1374.101233][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 1374.101255][ C1] ? NF_HOOK+0x9e/0x6b0 [ 1374.101270][ C1] ? NF_HOOK+0x9e/0x6b0 [ 1374.101284][ C1] NF_HOOK+0x61b/0x6b0 [ 1374.101301][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1374.101316][ C1] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 1374.101336][ C1] br_nf_forward_ip+0x647/0x7e0 [ 1374.101351][ C1] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 1374.101369][ C1] ? __pfx_br_nf_forward+0x10/0x10 [ 1374.101384][ C1] nf_hook_slow+0xc5/0x220 [ 1374.101405][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 1374.101425][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 1374.101445][ C1] NF_HOOK+0x215/0x3c0 [ 1374.101466][ C1] ? NF_HOOK+0x9e/0x3c0 [ 1374.101485][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1374.101506][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 1374.101530][ C1] __br_forward+0x41e/0x600 [ 1374.101547][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 1374.101570][ C1] ? __pfx___br_forward+0x10/0x10 [ 1374.101592][ C1] ? skb_clone+0x246/0x3a0 [ 1374.101608][ C1] maybe_deliver+0xb5/0x160 [ 1374.101630][ C1] br_flood+0x31a/0x6a0 [ 1374.101654][ C1] br_handle_frame_finish+0x15a3/0x1c50 [ 1374.101675][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1374.101695][ C1] ? ip6t_do_table+0x1db/0x1560 [ 1374.101714][ C1] ? nf_hook_slow+0x176/0x220 [ 1374.101735][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1374.101751][ C1] br_nf_hook_thresh+0x3c6/0x4a0 [ 1374.101769][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 1374.101790][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1374.101805][ C1] ? nf_nat_ipv6_in+0x1fc/0x2b0 [ 1374.101829][ C1] br_nf_pre_routing_finish_ipv6+0x999/0xd60 [ 1374.101846][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1374.101865][ C1] ? br_nf_pre_routing_ipv6+0x42f/0x6b0 [ 1374.101882][ C1] br_nf_pre_routing_ipv6+0x37e/0x6b0 [ 1374.101900][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 1374.101918][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 1374.101935][ C1] ? br_nf_pre_routing+0x720/0x1470 [ 1374.101953][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 1374.101968][ C1] br_handle_frame+0x982/0x14c0 [ 1374.101987][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 1374.102003][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1374.102022][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 1374.102038][ C1] __netif_receive_skb_core+0x10b9/0x4380 [ 1374.102057][ C1] ? ip6_mc_input+0x8de/0xb70 [ 1374.102076][ C1] ? kmem_cache_free+0x19b/0x690 [ 1374.102095][ C1] ? ip6_mc_input+0x8de/0xb70 [ 1374.102114][ C1] ? __pfx_ip6_mc_input+0x10/0x10 [ 1374.102134][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 1374.102152][ C1] ? ip6_rcv_finish+0x29e/0x2e0 [ 1374.102171][ C1] ? NF_HOOK+0x30c/0x3a0 [ 1374.102186][ C1] ? skb_orphan+0xaf/0xd0 [ 1374.102205][ C1] ? __lock_acquire+0xab9/0xd20 [ 1374.102226][ C1] ? process_backlog+0x2d5/0x14f0 [ 1374.102246][ C1] ? process_backlog+0x2d5/0x14f0 [ 1374.102266][ C1] __netif_receive_skb+0x72/0x380 [ 1374.102285][ C1] ? process_backlog+0x2d5/0x14f0 [ 1374.102305][ C1] process_backlog+0x60e/0x14f0 [ 1374.102324][ C1] ? rcu_is_watching+0x15/0xb0 [ 1374.102350][ C1] ? __pfx_process_backlog+0x10/0x10 [ 1374.102368][ C1] ? do_raw_spin_lock+0x121/0x290 [ 1374.102385][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1374.102403][ C1] __napi_poll+0xc7/0x360 [ 1374.102419][ C1] ? skb_defer_free_flush+0x229/0x250 [ 1374.102439][ C1] net_rx_action+0x5f7/0xdf0 [ 1374.102463][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1374.102495][ C1] handle_softirqs+0x286/0x870 [ 1374.102516][ C1] ? do_softirq+0xec/0x180 [ 1374.102538][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1374.102559][ C1] ? rxrpc_peer_keepalive_worker+0x45a/0xde0 [ 1374.102582][ C1] do_softirq+0xec/0x180 [ 1374.102601][ C1] [ 1374.102608][ C1] [ 1374.102615][ C1] ? __pfx_do_softirq+0x10/0x10 [ 1374.102637][ C1] ? lockdep_softirqs_on+0x13b/0x1c0 [ 1374.102656][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 1374.102676][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1374.102699][ C1] ? rxrpc_peer_keepalive_worker+0x45a/0xde0 [ 1374.102721][ C1] rxrpc_peer_keepalive_worker+0x45a/0xde0 [ 1374.102747][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1374.102769][ C1] ? __pfx_rxrpc_peer_keepalive_worker+0x10/0x10 [ 1374.102796][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1374.102818][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1374.102838][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1374.102858][ C1] process_scheduled_works+0xae1/0x17b0 [ 1374.102889][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1374.102914][ C1] worker_thread+0x8a0/0xda0 [ 1374.102943][ C1] kthread+0x711/0x8a0 [ 1374.102959][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1374.102979][ C1] ? __pfx_kthread+0x10/0x10 [ 1374.102994][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1374.103016][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1374.103031][ C1] ? __pfx_kthread+0x10/0x10 [ 1374.103047][ C1] ret_from_fork+0x4bc/0x870 [ 1374.103067][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1374.103089][ C1] ? __switch_to_asm+0x39/0x70 [ 1374.103107][ C1] ? __switch_to_asm+0x33/0x70 [ 1374.103123][ C1] ? __pfx_kthread+0x10/0x10 [ 1374.103138][ C1] ret_from_fork_asm+0x1a/0x30 [ 1374.103162][ C1] [ 1376.563014][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1376.580284][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1377.935368][ C1] net_ratelimit: 14696 callbacks suppressed [ 1377.935388][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1377.935418][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1377.941715][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1377.955289][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1377.965619][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1377.977643][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1377.989601][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1378.002864][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1378.013317][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1378.025309][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1382.945208][ C1] net_ratelimit: 16665 callbacks suppressed [ 1382.945230][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1382.945509][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1382.951555][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1382.965108][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1382.975622][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1382.987454][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1382.999343][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1383.012832][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1383.023236][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:28:2f:50:19:1a, vlan:0) [ 1383.035265][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)