last executing test programs: 1m11.712590927s ago: executing program 3 (id=271): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000000, 0x12, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x4, 0x402) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x6) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) r3 = socket$vsock_stream(0x28, 0x1, 0x0) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r3, 0x6) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) listen(r2, 0x5) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e000000000000002c7266646a6f3d", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x96d6a000) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r6, 0x93774000) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendfile(r0, r0, 0x0, 0x7ffff000) r9 = accept4$rose(0xffffffffffffffff, 0x0, 0x0, 0x400) ioctl$SIOCRSSCAUSE(r9, 0x89e1, 0x0) 1m7.847218172s ago: executing program 2 (id=297): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x1ac) bind$unix(r0, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x8002, 0x0) 1m7.684559605s ago: executing program 0 (id=298): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000300)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback, 0xfffffffe}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r1, &(0x7f0000000440)=ANY=[@ANYBLOB='unlock me'], 0xb) (async) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[], 0x28}, 0x40014) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0400000000000000000200000028000480240001800b0001007470726f7879000014000280080003400000000e08000140000000010900010073797a30000000000900020073797a32"], 0x7c}}, 0x40080) (rerun: 64) r3 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) (async) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) ioctl$SIOCAX25GETINFOOLD(r4, 0x8918, 0x0) (async) migrate_pages(0xffffffffffffffff, 0x1, 0x0, 0x0) (async) write$binfmt_script(r3, &(0x7f0000005e80)={'#! ', './file0'}, 0xb) (async) r5 = add_key$user(&(0x7f0000001540), &(0x7f0000001580)={'syz', 0x3}, &(0x7f00000015c0)="d8ba304a", 0x4, 0xfffffffffffffffd) (async) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000140)=@req3={0x100, 0xfffffffb, 0x7, 0x9, 0x3, 0x81, 0x3e5}, 0x1c) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) recvfrom(r6, &(0x7f0000000180)=""/75, 0x4b, 0x2, 0x0, 0x0) ioctl$VIDIOC_G_TUNER(r3, 0xc054561d, &(0x7f0000000080)={0x7, "5519c8cc114df59ac268480195adfd52af88ce79da8dc8f2a69141e0073952b0", 0x5, 0x1, 0xbb5, 0xe, 0x10, 0x0, 0x9, 0x3}) (async) keyctl$assume_authority(0x10, r5) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) keyctl$describe(0x6, r5, &(0x7f0000000100)=""/58, 0x3a) mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r8, 0x7dfff000) 1m7.634077158s ago: executing program 2 (id=299): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa471a000) 1m7.531534722s ago: executing program 0 (id=300): write$dsp(0xffffffffffffffff, &(0x7f0000000340)="48201a54a70ed8ac5ab6453337f5583a23024de2bc38e9a2dc7d9f2327f0e5fe499600d93cd3de8f27d193845ed8197fd6748cc65772dc40", 0x38) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0xeeee8000, 0x10000, 0x1}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x7000, 0x1}) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x6, 0x800000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x82, &(0x7f0000000340)={r7, 0xfffff7fd, 0xfffffff8, 0x8000d}, &(0x7f0000000480)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000000)={r7, 0x1, 0x9}, &(0x7f0000000080)=0x8) 1m7.36870232s ago: executing program 3 (id=301): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x80) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', r3, 0x29, 0x4, 0x8c, 0xeb, 0x2, @loopback, @local, 0x8, 0x80, 0xfffffff8, 0x4}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x22052, r1, 0x2000) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x2, 0x2, 0x80a0000, 0x1000, &(0x7f0000782000/0x1000)=nil}) ioctl$BLKRRPART(r2, 0x125f, 0x0) 1m7.121948463s ago: executing program 3 (id=302): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf648b000) mlock(&(0x7f0000ff6000/0x8000)=nil, 0x8000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x12) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000400)={0x1fe, 0x5, 0x2000, 0x2000, &(0x7f0000ffe000/0x2000)=nil, 0x2, r3}) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000003c0)={0x0, &(0x7f0000000000)=[@rdmsr={0x32, 0x18, {0xb80}}, @rdmsr={0x32, 0x18, {0x357}}, @wr_crn={0x46, 0x20, {0x3, 0x6}}, @cpuid={0x14, 0x18, {0x5, 0x3}}, @cpuid={0x14, 0x18, {0x1, 0x9}}, @cpuid={0x14, 0x18, {0x5, 0x800}}, @wrmsr={0x1e, 0x20, {0x802, 0xa}}, @rdmsr={0x32, 0x18, {0x402}}, @rdmsr={0x32, 0x18, {0xcd}}, @rdmsr={0x32, 0x18, {0xbd4}}, @rdmsr={0x32, 0x18, {0x82d}}, @uexit={0x0, 0x18, 0xffffffffffffff19}, @uexit={0x0, 0x18, 0x800}, @code={0xa, 0x6e, {"440f20c03502000000440f22c0c744240088000000c74424028e690000ff2c24650fc77e0066baf80cb86aae2a84ef66bafc0c66b800ff66ef420f07b9800000c00f3235010000000f30400f01c9440f01cb0f01c8b8010000000f01d9"}}, @rdmsr={0x32, 0x18, {0x963}}, @rdmsr={0x32, 0x18, {0x2b7}}, @uexit={0x0, 0x18, 0x70a1}, @uexit={0x0, 0x18, 0x9452}, @code={0xa, 0x5f, {"663ef3adc4427d1eb5d1000000f30f09c4c269391e66b812000f00d8c4227d3407c4e2658c9100800000c4e281961f48b852ffffffffffffff0f23d80f21f835c00000b00f23f8b95c0900000f32"}}, @code={0xa, 0x6c, {"0f2226b9800000c00f3235000400000f30f3436cb9301001c0b801000000ba000000000f30c40295b8c1c4e14560930200000066baf80cb83cfd3e84ef66bafc0cedb9800000c00f3235010000000f3026f3440f0866ba410066ed"}}, @cpuid={0x14, 0x18, {0x0, 0x9}}, @uexit={0x0, 0x18, 0x4}, @code={0xa, 0x85, {"c7442400347b0000c7442402203fbf8ec7442406000000000f0114243e3e3e450f07460f2086f3430f230366baf80cb80af66881ef66bafc0c66b800c066ef2ef30f1efec7442400d0000000c74424020b000000ff2c24f20fb9ecc744240070000000c7442402dcf40000ff1c24c422f91d7e00"}}, @cpuid={0x14, 0x18, {0xf, 0x7}}], 0x3ae}) mmap$KVM_VCPU(&(0x7f00007b7000/0x2000)=nil, r1, 0x3, 0x10, r4, 0x0) 1m6.885351933s ago: executing program 3 (id=303): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x62800) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x5, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) 1m6.69256603s ago: executing program 3 (id=305): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x30, r0, 0x7b8b000) sendfile(r0, r0, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) 1m6.496295535s ago: executing program 0 (id=306): mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x208002, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='comm\x00') mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xa) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002200)=ANY=[@ANYBLOB="e217575f8436c211695a1902c5f616cf6e900177c9e1750c66fb9c9a98a0b8df0fc46d890ba6d920f8dbc975b0990396124237fb2f6ec52ab51284d3309e9ad77ede56aaf85fd684a551ef1991d710cc5274a470e081f612ea66e25fe8550c03d8a66f07a8caa1ca66245f47508834f8718585b6359192587fcbaf6fdc496144bdd168806b46f6", @ANYRES16=0x0, @ANYBLOB="010028bd7000fbdbdf2567000000080001006a00000008000300", @ANYRES32=0x0, @ANYBLOB="0800c30001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x20044000) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000022c0)={0x0, 0x0, 0x0, 'queue0\x00', 0x1}) write$sndseq(r2, &(0x7f0000002180)=[{0x84, 0x77, 0x0, 0x0, @tick, {0xfd}, {0x7}, @raw32={[0x2, 0x0, 0x8000000]}}, {0x2, 0x0, 0x5, 0x83, @time={0x3, 0x7}, {0xfd, 0xff}, {}, @note={0x81}}, {0x6, 0x3, 0x9, 0xff, @time={0x0, 0xe392}, {0x10, 0x5}, {0xc, 0x2}, @control={0x3, 0xa, 0x7fff}}], 0x54) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000002380), 0x40, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r4 = socket$packet(0x11, 0x2, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x2a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r5, @ANYRES64=r4], 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) flock(0xffffffffffffffff, 0x2) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000002140)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x1, "50e557d286d626989ed07406beaa1012d33ba8f5e665043e4c7ec1e6376d5341", 0x7, 0x0, 0xc8, 0x7fffffff}, 0x3c) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f0000000240)={0x0, 0x9, 0x3, 0x4, 0x3, 0x6}) ioctl$TCXONC(r3, 0x540a, 0x0) unshare(0x60000400) ioctl$TCSETS(r3, 0x5402, &(0x7f00000024c0)={0x10001, 0x99, 0x1, 0x81, 0xe, "36f4f67709075ab4ef0d05000000000000001d"}) io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x1, r1, 0x0}]) read$FUSE(r1, &(0x7f0000000100)={0x2020}, 0x2020) 1m6.417806743s ago: executing program 1 (id=307): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1b, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a0300000000f5ffffff00010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a30000000000b"], 0x68}}, 0x0) pipe(0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x6) r2 = socket$netlink(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) pipe(0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x6) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) mmap(&(0x7f000024a000/0x4000)=nil, 0x4000, 0x3000001, 0x80010, r4, 0xbfc18000) r7 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect(r7, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r7, 0x400c6615, &(0x7f0000000080)={0x0, @aes128, 0x0, @desc3}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m5.712221986s ago: executing program 3 (id=308): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000018c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7b5, 0x312, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000640)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0xc, {[@global=@item_4={0x3, 0x1, 0x3, "7a515e17"}, @local=@item_4={0x3, 0x2, 0x1, "3a2146a0"}, @local=@item_012={0x1, 0x2, 0x7, "a8"}]}}, 0x0}, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x181000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'pimreg\x00', 0x4000}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) dup(r3) (async) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r1, 0xa471a000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r1, 0xa471a000) 1m5.496636976s ago: executing program 1 (id=309): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='tracefs\x00', 0x208000, 0x0) 1m5.148097562s ago: executing program 0 (id=310): write$dsp(0xffffffffffffffff, &(0x7f0000000340)="48201a54a70ed8ac5ab6453337f5583a23024de2bc38e9a2dc7d9f2327f0e5fe499600d93cd3de8f27d193845ed8197fd6748cc65772dc40", 0x38) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0xeeee8000, 0x10000, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x7000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x600) 1m4.688677777s ago: executing program 2 (id=311): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x800, 0x0) mmap(&(0x7f00005ce000/0x1000)=nil, 0x1000, 0x3000001, 0x20011, r0, 0xc3a51000) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x484000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f00009c2000/0x400000)=nil) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000000000000000000400000000006000192bb96a968ae00aaa0b52619922512c3d30000000000010000402000"]) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) r5 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000280)=0x1c, 0x80000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000002c0)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000002c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r8, @ANYBLOB="4400028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361dea373"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r9 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r10, 0x4610, &(0x7f0000000000)={0x3a, 0x1}) r11 = socket(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="080006008b0104000000030001fe81f7"], 0x14) sendmmsg(r11, &(0x7f0000000000), 0x0, 0x4000800) recvmsg$can_j1939(r9, 0x0, 0x10000) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r9) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a11080211000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4c890) 1m4.205266112s ago: executing program 0 (id=312): mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101480, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000080)=0x64a) ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000000)=0x3) bind$inet(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000780)=""/253, 0xfd}], 0x1}, 0x933f}], 0x2, 0x10120, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x1000, 0x2}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) statfs(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=""/103) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x44004}, 0x94) syz_usb_connect(0x3, 0x24, &(0x7f0000000340)=ANY=[@ANYRES64=0x0], 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000000)=[@increfs={0x40046304, 0xfffffffa}], 0x0, 0x0, 0x0}) accept4(r6, &(0x7f0000000500), &(0x7f00000004c0)=0x80, 0xfc83fdfe9c13ede0) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x6f, 0x4080) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x5, 0x12, r7, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, &(0x7f0000000380), &(0x7f00000001c0)=0x4) 1m4.049215704s ago: executing program 2 (id=313): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) (async) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000140)=""/246, 0xf6, 0xf6, 0x0, 0x0) (async) recvfrom$unix(r2, &(0x7f0000000140)=""/246, 0xf6, 0xf6, 0x0, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x200002, 0x0) 1m3.891523738s ago: executing program 1 (id=314): write$dsp(0xffffffffffffffff, &(0x7f0000000340)="48201a54a70ed8ac5ab6453337f5583a23024de2bc38e9a2dc7d9f2327f0e5fe499600d93cd3de8f27d193845ed8197fd6748cc65772dc40", 0x38) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7, 0x400}) ioctl$SIOCAX25NOUID(r2, 0x89e3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) connect$rose(r4, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x15, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r7, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x14, 0x2, 0x6, 0x801}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r7, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') ioctl$BTRFS_IOC_BALANCE(r9, 0x5000940c, 0x1000000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'geneve0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="10030600e0ff020002004788aa96a13b", 0x10, 0x0, &(0x7f0000000140)={0x11, 0x0, r10}, 0x14) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0xeeee8000, 0x10000, 0x1}) r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000, 0xb000, 0x1}) ioctl$KVM_RUN(r11, 0xae80, 0x0) 1m3.647480985s ago: executing program 2 (id=315): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_BUFINFO(r0, 0xc02c640e, &(0x7f0000000000)={0x10000, 0xa486, 0xfffffe01, 0x9, 0x8, 0x407, 0x6}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup2(r0, r1) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x2}, 0x8) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback, 0x8002}, 0x1c) sendto$inet6(r3, &(0x7f0000000180)="1a", 0x20000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000100)=0x1, 0x4) r4 = openat$cgroup_procs(r2, &(0x7f00000020c0)='tasks\x00', 0x2, 0x0) r5 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_DQEVENT(r7, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r7, 0xc0506107, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x8000007}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) creat(&(0x7f0000002000)='./file0\x00', 0xa) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000380)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r8, &(0x7f0000000380)=ANY=[@ANYBLOB="0e00010002"], 0x8) write$cgroup_pid(r4, &(0x7f00000000c0), 0x12) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x208002, 0x0) 1m3.070378122s ago: executing program 0 (id=316): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2c24, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x0, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, &(0x7f0000000040)={0x0, 0x3, 0x4, {0x4, 0x8, "3c1a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448c9, &(0x7f0000000140)) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) write$tun(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="000000008c5d673ef776aaaaaaaaaaaa88a84d008100660008004519001cfae3000008d79078ac1414297f000001c72975ea5f954511"], 0x36) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socket$packet(0x11, 0x2, 0x300) r7 = dup3(r6, r0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x10000000000) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r9, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r7}, @fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1}}, &(0x7f0000000600)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) 1m3.069286288s ago: executing program 1 (id=317): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8000}}, './file0\x00'}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x800, 0xc, 0x911, 0x3, 0xff, r1}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) wait4(r2, &(0x7f0000000140), 0x2, &(0x7f0000000180)) sendmsg$sock(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="701648f648536f82b33a4d857594ec676668ac294ab5fd21fbaf9a451301f19e53f6a970e31552d2b225f592bc7924a32d58ae286be164016665d4b1c95dfc11e7e685061ad8679e7e4f02a4a8507f35aebe62c9761e4b086af7ae2da8adf14e8c86e92ae77d98e0d7d62493ee58c02b9ff9c4f40b3278acec38560fd087a2ab694fdb931979b636255d54223243531cd99ab7f4c0bf27f1571862cb7a396719dbfd8233cebff7753499c636fa7a3abfcaf82ca464ed8d41afa5db0e996dad959e288f658623c2a21d198c7d2167c442266d46ab491b757bf154801c23f95d0ec2a872221e993b4297ff6556a9855dedee22420fb2", 0xf5}], 0x1, &(0x7f0000000380)=[@mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x2f3f60a3}}, @timestamping={{0x14, 0x1, 0x25, 0x215302aa}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @mark={{0x14, 0x1, 0x24, 0xffffffff}}, @mark={{0x14, 0x1, 0x24, 0x100}}], 0xf0}, 0x4041) waitid(0x1, r2, &(0x7f00000004c0), 0x1, 0x0) recvfrom$unix(r0, &(0x7f0000000540), 0x0, 0x12120, &(0x7f0000000580)=@file={0x1, './file0\x00'}, 0x6e) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000600)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000800)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x92, "4812c4ddf01065"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001800)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000001a00)={{0x0, 0x7fffffffffffffff, 0x7, 0x7, 0x6, 0x8, 0x0, 0x6, 0x1, 0xffff, 0x1, 0x85, 0x4, 0x4d7, 0x8}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001ac0)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001cc0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000001ec0)={{0x0, 0x1ff, 0x9, 0x7, 0x8000000000000001, 0x8, 0x1, 0xcc3b, 0xe9c, 0xf2cd, 0x2, 0x800, 0x1, 0x800, 0x7}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001f80)={0x0, 0x0, "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", "dcb4d5da1c7a57d28447350ce86bbbc63ea2262416d12dba19fd03eb755c800fe9fe6a02bc1f4b46ae55f1868c9e75c45279f70c9f31ce66b573aa48f9525ed1de6d8cca023dbc797563c05301dc969307623ddd3a918d6e5c8bfe5a6ab2b4b09986e6c837d75e1cecc26bb9738e13056bcb058629a04bbba11e33a356c18a74aaf6897d372bc25aa42d2533d929de26da98f9bc9a562c77ee2a91fe4593b06eb8bc301d4b98bffaa2984127421a83c97c37a102e1f0b27e5db2390b6f20564b309cbac20bc93f6d673f50e4c35132fb37bfcf86940eaa4173ea6803a940e30e4fbbef1d03dad293f33ceb57217e27865ea98c8bd0f57336c8a8a0e03fcb0687b8aad004562875157aecc6e969e525b0301c68f2ae34eae4c3802ac93a72f6764b802bf34e0e5341acba23ef66be6b8d3fa4ae9c14305dfa63816005a5239bbf60e89c72dce24c38c32052a4fda111a491c84fe1541b79f1eaa55b1ca8eb37c8763191afe9d789334edc7c694981dfcf5164f21c89f298a8c34bc93de4cd281f59fb644676f095543604b0f5d10e83d77bb6de48bbeee921ddd21165729605440f917facb069483f024f123c6e5bad8b9ec1f04ea17bcbe79f97cc6e6f1efab3ab88519c9bd50e2f6ccb362e690737e9ee0e9720dd5619c5dc349ab7980311349e29560a389a31a00fcabafd30d014298ed87dff2dd50deceefef83ac1497c1194606ef99606996720043a85dc07c6b88585d7be7fb7ca4026e6c9ce7e85d92fd07dc097e8311eaf41082fff6a0bf49c2e643cd616d2cd557f97099cbeb225ef9dd4f81c83bb0087a5645100c4a9b5e6e18074989b496344b1885aa65c14d6ee5966a36c5baceefd3820b2438863b1766b9c55a7811692a33151c8f1c5c991c9cebc67af3cd43947feb4d256dc59927a985107047745574bc8e14da9482fe062450781e18577685f849e251242092a0da74d6fba3e3dd8a5cb01aa7cee230c471184892826ff97b8a90a5140fd8224657fb00e7a3de790af4d9f6f8ceff37ce1df788cce4ba0b1bef2016774e07729eccc98e5f060651220cba0c8ff91e13ecde5bef6c898edd0b0842f253a544513f949356350ea4885f7195a0fa9a63353f6554048e387be24327f76cb8d20b18111ee9f0354a59372919aa90bd9404e1944581e823fb1e865c1916bee2a1ae63883982a5fc812f7f1c830464591ccca306d91b185cac1105fde307771c48c81c4070bc15952a04590b27d63eaecb57edafdf6968fa3b6d4583f5d55412eaf3157d06d7c587bdf99cf9cc95fba77797719f26234c4e4e6c47d1b6b1b854a4b5ad4712b94e8d6fdfe685304dfbacefd79d2a03e38fc5891c7712681476af3fdcef35eab04a1131bbfa85b037347350d25a17e61e4f6856bd33cc7b4fe95409b73cbf798bec048bc34c18e910366da0ae5bc397e4b44955aa9a41470dddd375a3f6cdd8ed50d984364d56f48519e94594ff8be829bd2ff25f877f1c3508979b0de1c4205ec61253aa1840067192e649032e51f3a45a93cefd734815c54a73caa5477a81cd61eaf15bfd454bf8aa5af7497f8cce30723f6cfab5e12cd6acb21999283b6f2696f04828c5086c5fa46f04a66b09584cb584183bff5d1baad6354f8aa1b0961336da576842ad8d666f100e0d520f4a46698dc37df2174011b5f7f212e5efa72d7cd602d4a082ea3c6c2e25e21482dd7ce004482ebfca174b6224232aff03d3c94e07d6f246aa378493830bd8f98c11a13b3dde75406a610d6ca248f9f9f3ad069e86ecbc21e04a801a8dd6f7bd511ff199f46bf2593452cb615a9e435f36386ed0582d3334e6f151a5acc5b67867e6218fe3397db1c7f799a919b177eb4786e90160fe6b6a8c59032dd796d2dbffbba92baacc6eb5f7602ce8d0edbba1eb2b720360aa102f8ff222453381ee8225c67139eb69de56f5984e5c4f9f48791410147580d3e54a2776cdd137254ec89d8f73b4cf7c2a7bfd0fd908767a1cb779f348820fed5f550907bc686a3a212ee7427e3721e8ddc46bb43c4910ce61958b91e042eaad328a851ba47ac2b49519cefabf8a18e708d2839a6158a4e63232953ef3021a18a139d7a055ea3d8c10dace6d4cc389752c763c8f8ba78e861155f053d728f9376b6f1cf05ca4d449ba892026f944dce3249dd8a202d4bf33744ed00a5e8f09c4428799825e7851322b6d5329b8245974a4459d0b6800e579b4ec53282032b19f2403620f2c1cf9ec0b9fc165c651681e3227d5cc4267278ec392458b97bda77e1887af07a69a998f497f39cfefcb691b3451668ddff5cae778bc5b13274abe21a7254b8aa237a1e49ed4513dcd3467e06b64665c7f656c450712e8ec45861869847a826e92bf4189987ebb2e5dec410d60a77ace4220331f819ba0b4a459387dd62310545e87405a3dee53cc042fafe56313b75bb866845becd088f591bfc241bc113ee34ed05d5b414b8ad1f4772a46180e5582768b29b82dd160e194171ae1b7c9f3a2eeaba59bd810a046bd64fc672972bf2eb65496e73faa205d93cf47b183b788150e20faa158071c4cfa62c738841caed4e4829b7c213f412c67c00b4bcb4e8d21aefb0cbe7330fdf4535e0136df9e646f6bde55e3e60f3cc7f44d3e1440227255d6c03e2f4c24a247259c19a9c75cea6a790128dcde7fa7989047e89c402b42c8237cbb716fd0928c930a843bd37f1ce523bbe919cfe65b4a4f3e32d35ae7cd797a46fc4f10f6de9207f052772f8bdaaf47739cfd2b83aa2d21be86612ce0a99d1385b21191a75221ee9fc306d4dbcb5eb0ae2698d3520e783194f3953f8a8a853cff8bd3247a5ffcaa613bfcbda91107ebc54a7a02cb3ed364046489ab110601fae0c55ad70523ef18c60ff8b6138e2fec0f6a072163a28089a8122ef1be9e639979193c00fea4efd7bcb650841751e96db3173ce3fd460f5f148b78625bbcf4bf220ebc46ef9c8deff13537c1f7ce08c93d811e146384d52d4c857ca5fc9ec1143018007d0636261cc12062b228c4753a9603b26e1c3f00c62f606c2150df38e2ca33543a31996fccf9cc8ce1ed26bac908f6706db2f8c2bf44a9a83f457e48f22da7f4a9814c119ba74c64fb20a40fd0a1c5bfd16682764fbf6e7b0ece938139e102d66c654389f89ac9cab2937e7992ee7d2addfcba896c9cb17a2c10666d865282c56d348fdbaca9856f0995d709eaa94482f60d66a582b2dab0673007b3b73d4ee2f8bdf98ccfb511d52125ef58322df046e687b9c8485133e61bc677ecb72c59a7f5852fb6b0399d7532a91a56ca2dd4f60c89e436af99fe6271c2fa90c9cb0e68787ecf4a86896a9376c7de238fd8ea2c8db7d130a50ae2fd01b59abca46ec9593eb4aa424a19a3beff551b4515ab2757baad63c9f55482b41a3a3dd2a635476bb98a6939639d57e478c025c3bb7e4664837b6e012fd84587db6f0ed5a5d5c769a15bb74c10b08b8946a3b4da1748118e03e659306ed9cb9c977d868ac01ec111e483bda802595925c7e9390c8262bdd156140de3d1e12709e6055b91e65e5fdd0b60794d83f0c894e949058a297f6c42abc87ecf09ef7cd046c71f5140d6e86589c4af7e95e529fa4c41df5f27543a7a6692eb1b4b56163eb5cab302ede44f91ee48a9a8580b6808c1e725288aedc53cf9f3fd615bb3ceccffcd3e47565600f9706c868e97db96ac1b82cae65614451123b742334efb1305b48cd9d9144523c131a196fa06b4f399008fe586bc1e75eaccd14533ea5c48957d8dc8b4ce2ee738465f8d3b86abb506db7c23ab95cd722b590f99c84dff05ca3025c4e4f5ca2a8d5420095df25500078fa977c80336e3dbdd3630d488a62d2175d564c91a3f588e943a0c66019f3c7db56bf2c120d3c13f2e138473c762c58a86a7221bd6c5b6f812ef73daed9e7e18e71cc024aaeccebd80042338923d9907da5781f7b7c17415d3e7ea1a6646547800fac6eff31696c9dc1c3aef2df45038c8dfc319402a3aa6efba2cd3b60510c8c2344455e15b1f1d9e98c21635198594292844ab8b0da3226179cfaa1ad112c862d6c718e09ae90706d7121931628bfdec13468223a4f73dcf1d4411e850c0343ba3d50bf7048c1a48fb79df4b4a9b1f6f887cacb315b67b6ffc97f56d87c17b4e87d482e29324f3c23a862cd5751e26c9d60ced769425ea9a284a1041a8927c821e5944bddfe6b8352560be58e54201bd1a662c36cc80229077787afe3c651c86911a8a744187032bf80401ca844356a7f33e9906683f8ac9874cf8112f573e5aac7aed9a1d2a3a7380e0a3a323164987f5f275fa72466019474043e91db6efab8f31a94fc95f77fc2d2848f431d2ebe5877596fec4288b4d89b43d48872a1811f1ec557bfe0b80baedadfeb4dd1f06de2dc62aa441281a8e17e656070dae7edd3eb27e2af7505efae038c98997a1598f722817ffd90072cba655b7fe6b6cd83fcb727de65e1f6dc0aa388f67fe9f860eeea6b2f046a66a62f293d1eaa3536cf684b0f79a7842b07f5d6de3a92c54c1487cdf3ae8f38c955058c92df86c2129b994cc62f1bba549a1ec5b891b54be46f95be77d89e1912859dc1f67735c8e5291a2a1123abcb75d03d5bb62d736c1d2aa4f55d8a95b79dd62b9338abd7f9b2ec2cbaed4667883888a534f9ae716e997641f8160a7c4aa7e5a8cdee308a32a95f2ffcdf5acee4e13965a1bd8fa164f2cb500584bd8a847f3a2089339d820bf9847d858966ac00356aec20d8ba01e11a0cf441db31b32f62e603eb88b8d22f606239e427107630eb81ea1408883a00588d65f266a4f9f0d2446d50aaf1fde0fa24456622b3e9692dc8ef69583bc4e9425a802d4b29810f4ff27ed8dee9488c751ba4334981e0f5435032508c8eb60377c854b303c053daab42a4ef778b4bbf4b7981f85cfc5c1fa837c72620a80845a0d4cf026e007f8e97466e5fe43e9db98e9fade57ee82060bea13c3ab5aa21e7bedeb0e4f5437f12827499bcb28ea98b2106a8ed2487bde4f4c17f8d6090fcba66504dfb915688c632db0d473913379936bb5cd544f409e7cdf93bb4b37d85ab4e7b0591c04c23d00de9b1ec51a156f32c5bddf8acc8d6fbb73fbb60a5dce2b87578b86715efeaa5accddfbba1eaaf74c6c5d3a21a7d0356d69af50d25bbea37c7e0c16143ce35dd3280f6ef539a64a8fa10808087623af1709516f2dfee0f2c9f539c9ed60ff5711d0564333ee0ae666b627945850b0a391afecc5ec32cbb39fa57f807de8d94629d25cf98b1fd699df14ab47c95b33559c95a46318810066157439c0278598d644b639d23a6065ed6c99c8cf6e0d3e2766ba2e9f756632796197c89191582528706edca795860df57b72629c05d9cc8aa1a784a77f7"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000002f80)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "ed446c66f8328c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000003f80)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000004180)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000004380)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x40, "3f25d0d581d45d"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000005380)={0x5b3e, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x7e, "4ce0f647419815"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000006380)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000007380)={{0x0, 0xe, 0x5, 0x7, 0x6, 0x5, 0x100, 0x7, 0x1, 0x8, 0x70f1, 0xffffffffffffff31, 0x400, 0x5, 0x1}, 0x8, [0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000007400)={0x152, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x8, "2176fc23a59b97"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000008400)={0x0, 0x0, "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", "afe87be158c3c679d2f20f36991a83a9d36bfbc64e473c9e14655a47044af704a53acca0b7c0f3587520986d5b7767af5c7786f120e105374d9f8ce73c3539484f39a560bd84a77abf4715e0f01f2ef7b798c9cdbe87ac73dc17e55b3dd786ef1a4ad28e2ed1b21c169e06409836bee311738f6f017db235e3c3ccca15a98b80e3b55ceb7aaae41a9ecdd75970f1723903d27aa3802da1fa037c0728758e459d703777163284552c654ab664d8b8b6681c00352bb25bf8166f927af08ecf39289eb7a5a95d6337dd872fa3cd6787811993233d74f22bfd79f3db74e876c4c62399e77d6c4793216ae80c8b6e2e6ef6d08a4248c5f91cd0fcc29899177242456b41a6f9aebbd8ffc7b298b9168584c657cc6f920a0741bde4ff17f6ae71bfe8528c91faa94aba602aea34aa0249f42b151a745c439cdb668fef47f2ec6f7e1ea31a24684a3aa60ab86ad2d7dfb0008d523e0c3d653f599a9ec4e6ef3f20a21c8f20ebb7f193a924002e44d0c3c3190c6878b0df044da82249eb6b2d9dc3c1e86fdd9e08fd886d4a9d521fcf428ec70fdd5276daa059e3fdda6f840e985036ae2c3c25181eed613beb7b15a26b18695e69ea95055baf7a7ef3334244f0d8106bb62a2da084e722e2e374617cb4fd9e27bac1c6a96caaf7ff03a0e4af362b0b25c88d2a56ffb4276554b1eb8875640e4035a3af87be877ff5dc530353846ecc9f62e3f916450f38c0b8931c327284270742613e609351475b19223c2ee76b2d79b8419e704de61d7b90088add40b12b9be3724c8b86b8af0552261ce5a27004755e5894a41609ed7b72172de35ec4a1a903771b89243712855d72881d589febf83d3bbaee962806d36c91d41c8959a34bf0fb1cb10638d0473865898cd40dba1eb2a3455097c44000976983d889152a7045e7649029de8ea5973ddf070b78c8105e16f8d69724005dbc228564feb87f2e66c506f2d6a59ad518026170e0439e5878b3bd24342c619795923983dd2797f37d29ba9ca1019958c5a7402c925e891e0a701eb224178e129ed1783d20279e44289b07cdd72c552169d0b913fe03a9abb06d1ac6ba43ddac5b2609672b3c2534bb621924c9a1074f304a0d0cc042bd4fa5f906e8bef68824e248c509956eec470ddc7e126279e4976f6c7d735404774e34caf0b9d319da1aee5fb18a131067d5ffa0a1599e32dae93e0bb14555a1090deba970c944fc37da38f62b9ea2dc6642c5adcec5f6d7e6ead38488828e4841f6d782f5c6fcc099fa326c108cd6c838d03927ff88ed722bcff0df5b70480733ce8a694fafcad0e9460f6915beb70c061a4e6b535e16f1be9f22a311c484a0d50f4e517cf78680ca9a045cd32433f95007d02992c171dc4faa8200c0d6469e0f06d11b32b7250f4b37aae57683bb5a6d6671814abe0b0714688222df118e57d6cb814db426bb3968419d7e73252b676212964673757535c2d0df9e6bfa403ca8db5fe9029d0beb83ebc392c7c20a5f6978116ca27392b6f68bc5c7f8fc35a094b5d438327ec689df38495af4f2d76245adf1e452af41520fb66df1b335f9dfafc9b9f8b7e669d6f3927c5a3e24c97da84c6e2a0a041b8c5750fc7424120ad0561e83631e1cab135277f35d62c833bae32569240d7c7eabc6ec214f51b2fcdb3d9629cdcc1691daed9ee71dc2ba34eab13746a5f273e7dd5546b898876e5ea20543560959ea861dc42b30f6c09a1e28ecc50a6a02823056c802008de9a731ee1702ab157a2a85b2dce61405d949eb710f55ee36ab5c96b3b4e37589ec82fb836acb7c6958e2e30c65d18a0786ddc90d853c90873f8bcc550e8043feef5368cabfdbc6536aa7a2d7cd576319214921d73025051986a49ea543489204be5920937e73e8301ec78a21c9955d3e051924d4e5bc51db050aaa1cab4809026df2f6810ef51a0caa0cf21efe6add7759de711f146b2cd21d8088702623dc8967ff6687cd4e457512c8fba3b13a99c27eba81f61764fa0275809590aac2e470d0b6cdab0817ef5adde19658c6b44cd2d965c364b13c37cb266a486bc32ca99962185b3df79de0b76f36701eb78d3ce4362a4ac4e5caf024ce50c16d0897afb8784ee35f1fc3480030ff42ca51fa6f1019bf6f6abf512aaa9d679cb182ccc6707521511f409abe3de5762c80f9c44d8a48a38e029eb936d0c76ed3a1ab87749ccc0b7e9e1cd48e0d7fc60b96ef13dd1622234db8d28f045914dc84f182505723ef67e831de014038d0abb4eaddee2e098779b48ef9f0f533ee29ce9f8a4bb73c4f9370fa9f66090501c144135d48c77d27995a5994a43c8d812042b4efde094971991b19fa73542f6f296b0b5ce9b5a44c725ed0ffdfbae8e8a57ff12f760292beb45a15acec9c2d803c0a74c9f31cd863a8191258fafc41091f33a50e33a5ff08d345732e6a35efb28f403cfe3f86e8bd2c95048a66c7ebbc8bc2c76fb40261f740faa1e3692d0e407a6314e5fbf51181ac09c68589e7567cafab08b67249c1c3169bad01e91ef6c02f428a4f6aea882aaa0c02568640b0b0cd5382c6b25cd4f8a7469445f4c290ba4e8c98cddc7e3536ea346a64273f9190b01cd399f0a0c6be541265bb7da57e839a8e60d89656306ddbd8f786cc38ec95675e68cd52781a8b83fc1e5a76594d15d136337014533e1a18a1f63730ee4990cd165394a147b6d1906419345af8a63524f70f0c53f72a9292704b3f008cdad30ecfaf54efee74fe6d05dd44e80fd9af73c648868db507ace28840d1fdc7a1382a59b6bdd3f68acb5a2928087306a64efc3d3210ecabfede79f259df5a3c536f3a006760dbc9eee724b36252cfdcdab3b72f74020876811b78371205de6ba38fd60a0ed6c96cc6c84f5711de74e3c537120771bd02442327867a4cea38b44461099b06b6f9034da085e703a0373eb0e720eb0b10039693fe436b2c5e361991e07cbc942f7c95f783194a532eac277090d27a6dce0800ba862ebed1b6e62743e61f4b102d9e06cc52befb199244091d62c1e7582d1addc0be1a859ad8914621bbe973e1bbe5b11f4a98b7becac53e6d0f9c63066671b869d91e4836a938b30c82b91579606377e7927ac34f4d80395d8587f8ac9d82f875edb2fbffcd391cfd037e1250943ec9049b1cdd28a6db03c9637c3eb6ff84501e2326b3bdcc440188c691b12d1119351c98f993edcd3389ac7cdb455c50167f166046f5b3410db8c47f33a85eea049b3435768ee4fea10cebdf9a4bd302f3a2cf6ee262b00cdab6ece46bb716a563014cf66cfaa9b6202766d4a24699463de1c17a3689726a6722fa3baae85abf13648dd4f9e44e958b455a0b4491a190258e17a38de0cfdc1603a31f3bdb30e017cac4d021dbc0bbd4dde87328a99b7a182630765ec1519fd2f5baeab644ae0a89eed56805aecb8f9b210170488140be3a1ae80a7f031ce50a56ce1e2c70fdf6063876bdec8404b34eb736a7111aee0fb694e4c26b714a1b856ccec5e4f0c5ff159d83f9ead15576278631cf39b28365e77de31d3c1314599525939779cfd258463b22ae883fe717c5eb37adbea1bd800844c7af0945d3ee590e5dba4b8a9a4c3f8a7d836623399c51e66837467b2fec9f0c4717bdb660e1c6434416395108a7f87d6e29980a6a24128105e9229dc8025061dfc6e9c5d903f37397a0d409a6740f2bc9e52d99dc414642d6b16a1eeb6335947f060c0bea2d012fd5301552676bfceb5766fa9ebf44c0db3ab627ac9933243bf14b4b6dc5f96f193ef20e2e60947e66c7b65e626189de82dcdad6c154b1a11ded19d3310c01a92c027e2ddcb1bd53319e0154d331c90d7ae6a1989a3e05f7c0bfa47cbd3beadb929d56f321488c1682e6a2bd84048e24a3cf90ac3c1de0dcd65c9e7e85aae7bc49421b431a6e691607c77cd5faded997023530fb7f354411b01541f7bee820cbd16ef0c2370120f7efd6417358925327b794e5b2f8271d44b578307f66f072b84ee9e64a960f6eb5a4a764f4e65c3ce48fa6c155f0518df716a194dd55d7af259b47979a50afe1376dfad95ad6920d8c9ff072e6315abcf3268c0fdae0dbe9fa0ac1095ac909f0ff6ac9f594f0098c39ec0f707be9555b0dcc5a39c8abaa99faadc0a56e3d51fc3571315e45f424e621d5ede038a7749d753fe0fe40d0ccc9abd9be87c3318167152ef1e6fd22c798470338460fcf6cd64c6ad42be223b047ccb09a217dc97a55d0bb91e1803d780fc7c405c6008e9c60b347f845640f24d684df8e85d45a47a7ceb23e614c4a154508beb98a9c83d9a884fe11467ff1dfe830652161a0f8763c7d876d01c5fb7237d702797f0ab147b7b5dcb241b3bd7318bff57c79d578f73cbbc8ae6201d5dc17f9e91e2399cdfcf7eb99c1e377083ff16178272091274897c81ac529d3c46d9c9a5d48063858d1b726ff1c031e2dc4ec1ce9593bfd807e994771a9f233147c2cd0634207858ab5a9fc468187abf4d2d0cf7d0348c284914ed87bf6f24333cfbd1b0096e3433640a25e14381b231ff71759b876c2e9df1b84c93e250d971c11120b828a28a6ae95b6fc9435fef1e84fc8c71d334d99773a69c2a3d1cfcaa16770230767c1ce16fc9e90c206dc4f4636e82906b713f460221ac77bfd56a7c599025961ba6547290ce8c4bccb1193584cbe720b3de7674e412cd922006519b1bbec631607b9fcdefe6efd3c2ceabf00e64eca75586ca1533d5e399b7e70c6b74b98bc8e8529b6f358d31217662de8acbc99603b04613d073613feb21597de55e2d6f497a822a0c76c5947dd5bbce8bce5396e084d0b3e3a78c9a7fc418f5bb180eca4b1ce0c34249dc24ebfa129582387347aba4a8c9e95f86b4da4ab756e0830b75f763f583813118965790fd3471be2f55962973133f218780f58ee93f2b62d84b6492b5cf4439c0faa564e00ee72060c1dcd8ce5f2af9e9421c68acaeefb7489b5d78daf37efd248351cdc997a753b621de4acd5ff20123110c2204cd0732c57bd17e6f0bb69fd9859a7793e26748f45dc17e87d96c9912117b6a2c9345af193c1aa514cb6d4258d97ae4ee389c9f9879dfd3884827634ce298e1ead273710ad13cf3b58fa3db3f1a532e1e380ea8ed0774a145984fd9a27855079b377fdf2c5571ac6a1e517afba1210f99588bd3e123c15f8481a1603e9e1b5df20b75bf3bd3be78758bc86f12da55a3ef44ccfc940e1202aa4842b61598bfd22a3fe353b801e98dde35a9a8ce3040f87227eadfa92308696d08081aadaa32aa3e398b5b77c52a269cf8904aa3e772c5b0cc0b6a3496e0f8528dd72dde381544981146b9ed76f60d5116fa7599bdba24e36bec1cb4306b81f4f34c93dabc32b0e20cd49335662b3c7f00b3fc3704649dd436bc88a851034"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000009400)={0x2ac9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xda, "009c0d1222c504"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f000000a400)={0x0, 0x0, "4ed506d3bda66e4fc6eeb4fd2d1fb761accd90deea0d27f4a92683f2ab6521262ef5253e8b5c518c3cde73005aff0da55ec5728980254a0c804061bf3f59cb58fb3fcf42eebb451ddb3739d1296123baab0250ee722bc0e9347ca71463d78c2319ef2c746f560bbffdc0917ac49b218cc7e18aa83021d028361c900f608021f6d1f00f2f47231c67f505b8b3962967a8fd87b2f6592bc133a058efe19c433c9aea9526e400d1a77615cdd323c9d7b54aabe46e909450bab36884ee580864ec914333eed060dcddb20daabf5647148a23b3666df288fc1d78f63fb119108e8aca475fae5d76a64a81c51a02ab155b3ec38bda945b27dbe7334b978f62384896dd", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000000b400)={{0x0, 0x5000000000000000, 0x5, 0x1, 0xd, 0x3, 0x401, 0x401, 0x400, 0x40, 0x3, 0x8, 0x0, 0xa0000, 0x5}, 0x8, [0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000000b480)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000100440)={0x9, [{0x0, r3}, {r4, r5}, {r6}, {r7, r8}, {r9, r10}, {r11}, {r12, r13}, {r14, r15}, {0x0, r16}, {r17, r18}, {r19, r20}, {0x0, r21}, {r22, r23}], 0x4, "33009a162f2700"}) 1m2.833322676s ago: executing program 1 (id=318): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) mknod$loop(&(0x7f00000005c0)='./file0\x00', 0x2, 0x0) (async) mount$9p_fd(0x0, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c7766146e923d", @ANYRESHEX, @ANYBLOB=',msize=0xfffffffffffffffd,\x00']) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) (async) connect$can_bcm(r1, &(0x7f0000000000), 0x10) (async) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x4, @mcast1, 0x6}]}, &(0x7f0000000440)=0x10) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x5, &(0x7f0000000040)=0x6, 0x4) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000240)={r2, 0x7, 0x0, 0x7, 0xf, 0x100}, &(0x7f0000000280)=0x14) 1m2.508977731s ago: executing program 1 (id=319): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x48) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000000, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x96d6a000) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r2, 0x93774000) sendfile(r1, r1, 0x0, 0x7ffff000) r3 = socket$inet6(0x10, 0x80002, 0x6) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xffeffffe}, {0x16, 0x0, 0x2}]}, 0x10) sendto$inet6(r3, &(0x7f00000002c0)="100000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) r4 = accept4$rose(0xffffffffffffffff, 0x0, 0x0, 0x400) ioctl$SIOCRSSCAUSE(r4, 0x89e1, 0x0) 1m1.963317248s ago: executing program 2 (id=320): r0 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000140)=""/254, 0xfe}, {&(0x7f0000002180)=""/4071, 0xfe7}, {&(0x7f0000000240)=""/220, 0xdc}, {&(0x7f0000000940)=""/187, 0xbb}, {&(0x7f0000000a00)=""/233, 0xe9}, {&(0x7f0000005100)=""/4066, 0xfe2}], 0x6}, 0x12100) recvmsg$kcm(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0) 0s ago: executing program 32 (id=308): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000018c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7b5, 0x312, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000640)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0xc, {[@global=@item_4={0x3, 0x1, 0x3, "7a515e17"}, @local=@item_4={0x3, 0x2, 0x1, "3a2146a0"}, @local=@item_012={0x1, 0x2, 0x7, "a8"}]}}, 0x0}, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x181000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'pimreg\x00', 0x4000}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) dup(r3) (async) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r1, 0xa471a000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r1, 0xa471a000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.39' (ED25519) to the list of known hosts. [ 83.098021][ T5835] cgroup: Unknown subsys name 'net' [ 83.208689][ T5835] cgroup: Unknown subsys name 'cpuset' [ 83.218114][ T5835] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.004485][ T5835] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.879101][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.895194][ T5168] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.905705][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.913366][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.921169][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.930355][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.938134][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.946526][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.955929][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.964403][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.014780][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.032813][ T5857] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.045306][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.048195][ T5859] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.060521][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.061127][ T5859] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.075102][ T5857] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.083684][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.098468][ T5859] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.117156][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.642206][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 88.658454][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 88.829790][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 88.948079][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.956327][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.963800][ T5853] bridge_slave_0: entered allmulticast mode [ 88.972555][ T5853] bridge_slave_0: entered promiscuous mode [ 88.998802][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.006094][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.013230][ T5848] bridge_slave_0: entered allmulticast mode [ 89.021087][ T5848] bridge_slave_0: entered promiscuous mode [ 89.029099][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.036449][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.043739][ T5853] bridge_slave_1: entered allmulticast mode [ 89.051237][ T5853] bridge_slave_1: entered promiscuous mode [ 89.063575][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 89.075019][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.082172][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.090437][ T5848] bridge_slave_1: entered allmulticast mode [ 89.097768][ T5848] bridge_slave_1: entered promiscuous mode [ 89.162112][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.221152][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.250911][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.303266][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.319604][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.327229][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.334955][ T5852] bridge_slave_0: entered allmulticast mode [ 89.342083][ T5852] bridge_slave_0: entered promiscuous mode [ 89.351842][ T5848] team0: Port device team_slave_0 added [ 89.361333][ T5848] team0: Port device team_slave_1 added [ 89.387154][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.394330][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.402080][ T5852] bridge_slave_1: entered allmulticast mode [ 89.409511][ T5852] bridge_slave_1: entered promiscuous mode [ 89.477608][ T5853] team0: Port device team_slave_0 added [ 89.485949][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.493023][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.519888][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.567016][ T5853] team0: Port device team_slave_1 added [ 89.573586][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.580741][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.607853][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.643843][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.685693][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.692869][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.700611][ T5844] bridge_slave_0: entered allmulticast mode [ 89.708747][ T5844] bridge_slave_0: entered promiscuous mode [ 89.720516][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.730934][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.738687][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.765191][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.778258][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.785877][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.793046][ T5844] bridge_slave_1: entered allmulticast mode [ 89.801713][ T5844] bridge_slave_1: entered promiscuous mode [ 89.821863][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.829189][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.855292][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.945574][ T5852] team0: Port device team_slave_0 added [ 89.955351][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.968584][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.985986][ T5848] hsr_slave_0: entered promiscuous mode [ 89.992458][ T5848] hsr_slave_1: entered promiscuous mode [ 90.002990][ T5852] team0: Port device team_slave_1 added [ 90.035659][ T51] Bluetooth: hci2: command tx timeout [ 90.088738][ T5844] team0: Port device team_slave_0 added [ 90.115267][ T51] Bluetooth: hci0: command tx timeout [ 90.115274][ T5850] Bluetooth: hci1: command tx timeout [ 90.117133][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.133967][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.160890][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.187505][ T5844] team0: Port device team_slave_1 added [ 90.194871][ T51] Bluetooth: hci3: command tx timeout [ 90.203133][ T5853] hsr_slave_0: entered promiscuous mode [ 90.209620][ T5853] hsr_slave_1: entered promiscuous mode [ 90.216802][ T5853] debugfs: 'hsr0' already exists in 'hsr' [ 90.222624][ T5853] Cannot create hsr debugfs directory [ 90.243263][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.250342][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.277200][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.335151][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.342239][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.368367][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.417305][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.424281][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.451484][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.558850][ T5852] hsr_slave_0: entered promiscuous mode [ 90.566622][ T5852] hsr_slave_1: entered promiscuous mode [ 90.573185][ T5852] debugfs: 'hsr0' already exists in 'hsr' [ 90.579090][ T5852] Cannot create hsr debugfs directory [ 90.655232][ T5844] hsr_slave_0: entered promiscuous mode [ 90.661702][ T5844] hsr_slave_1: entered promiscuous mode [ 90.668525][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 90.675321][ T5844] Cannot create hsr debugfs directory [ 91.001443][ T5848] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.013956][ T5848] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.041722][ T5848] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.061659][ T5848] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.170595][ T5853] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.181755][ T5853] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.199986][ T5853] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.211911][ T5853] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.328204][ T5852] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.347395][ T5852] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.361715][ T5852] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.373888][ T5852] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.493286][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.508852][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.523150][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.548702][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.563230][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.608766][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.636375][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.643724][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.660628][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.667844][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.740874][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.801053][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.847068][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.854399][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.891131][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.902274][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.909630][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.984041][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.042825][ T2985] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.050165][ T2985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.101691][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.108977][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.117426][ T51] Bluetooth: hci2: command tx timeout [ 92.138104][ T5853] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.151545][ T1215] cfg80211: failed to load regulatory.db [ 92.167108][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.198798][ T51] Bluetooth: hci1: command tx timeout [ 92.198830][ T5850] Bluetooth: hci0: command tx timeout [ 92.276325][ T5850] Bluetooth: hci3: command tx timeout [ 92.309665][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.357717][ T1046] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.365055][ T1046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.409113][ T1046] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.416474][ T1046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.463850][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.663652][ T5848] veth0_vlan: entered promiscuous mode [ 92.758560][ T5848] veth1_vlan: entered promiscuous mode [ 92.831224][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.874011][ T5848] veth0_macvtap: entered promiscuous mode [ 92.900902][ T5848] veth1_macvtap: entered promiscuous mode [ 92.999853][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.038444][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.053729][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.089984][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.099828][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.130601][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.140516][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.187228][ T5853] veth0_vlan: entered promiscuous mode [ 93.229803][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.262359][ T5853] veth1_vlan: entered promiscuous mode [ 93.293761][ T5852] veth0_vlan: entered promiscuous mode [ 93.344325][ T5852] veth1_vlan: entered promiscuous mode [ 93.392715][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.394440][ T5853] veth0_macvtap: entered promiscuous mode [ 93.402553][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.437976][ T5853] veth1_macvtap: entered promiscuous mode [ 93.472614][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.499470][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.516159][ T5844] veth0_vlan: entered promiscuous mode [ 93.546484][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.586455][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.599581][ T5852] veth0_macvtap: entered promiscuous mode [ 93.616011][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.618227][ T5844] veth1_vlan: entered promiscuous mode [ 93.643522][ T1166] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.656163][ T1323] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.667439][ T5852] veth1_macvtap: entered promiscuous mode [ 93.689943][ T1323] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.699773][ T1323] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.776486][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.820075][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.911962][ T1158] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.926972][ T1158] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.941969][ T5844] veth0_macvtap: entered promiscuous mode [ 93.969543][ T1158] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.987457][ T5844] veth1_macvtap: entered promiscuous mode [ 93.997154][ T1158] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.010602][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.022433][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.098480][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.122984][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.125787][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.148441][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.184853][ T5849] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 94.195386][ T5850] Bluetooth: hci2: command tx timeout [ 94.208507][ T1166] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.223048][ T1166] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.266869][ T1166] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.275093][ T5850] Bluetooth: hci0: command tx timeout [ 94.277339][ T51] Bluetooth: hci1: command tx timeout [ 94.294506][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.306872][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.327793][ T1166] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.354697][ T51] Bluetooth: hci3: command tx timeout [ 94.376427][ T5849] usb 3-1: Using ep0 maxpacket: 32 [ 94.414295][ T5849] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 94.448560][ T5849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.469987][ T5849] usb 3-1: Product: syz [ 94.475584][ T5849] usb 3-1: Manufacturer: syz [ 94.480321][ T5849] usb 3-1: SerialNumber: syz [ 94.500163][ T5849] usb 3-1: config 0 descriptor?? [ 94.539030][ T1046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.567439][ T1046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.681602][ T1046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.700998][ T1046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.842690][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.891689][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.916237][ T5849] airspy 3-1:0.0: Board ID: 00 [ 94.923167][ T5849] airspy 3-1:0.0: Firmware version: [ 95.447511][ T5957] /dev/rnullb0: Can't open blockdev [ 95.519771][ T5963] /dev/rnullb0: Can't open blockdev [ 95.576276][ T5940] process 'syz.2.5' launched './file2' with NULL argv: empty string added [ 95.643444][ T5965] /dev/rnullb0: Can't open blockdev [ 95.664152][ T5967] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.023710][ T5849] airspy 3-1:0.0: Registered as swradio24 [ 96.042326][ T5849] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 96.275378][ T5850] Bluetooth: hci2: command tx timeout [ 96.355008][ T5850] Bluetooth: hci0: command tx timeout [ 96.365715][ T5850] Bluetooth: hci1: command tx timeout [ 96.436695][ T5850] Bluetooth: hci3: command tx timeout [ 97.080348][ T5993] Zero length message leads to an empty skb [ 98.037188][ T5850] Bluetooth: hci4: command 0x1003 tx timeout [ 98.044259][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 98.163374][ T5849] usb 3-1: USB disconnect, device number 2 [ 98.261292][ T6019] /dev/rnullb0: Can't open blockdev [ 99.195907][ T6042] fuse: Unknown parameter 'ÿÿ0x0000000000000005' [ 99.933894][ T6067] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.264471][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 100.279047][ T6077] syz.1.44 uses obsolete (PF_INET,SOCK_PACKET) [ 100.456490][ T10] usb 1-1: config 39 has an invalid interface number: 2 but max is 1 [ 100.474865][ T10] usb 1-1: config 39 has an invalid interface number: 208 but max is 1 [ 100.507528][ T10] usb 1-1: config 39 has no interface number 0 [ 100.525168][ T10] usb 1-1: config 39 has no interface number 1 [ 100.545279][ T10] usb 1-1: config 39 interface 2 has no altsetting 0 [ 100.562359][ T10] usb 1-1: config 39 interface 208 has no altsetting 0 [ 100.580178][ T10] usb 1-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=c4.36 [ 100.600342][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.619774][ T10] usb 1-1: Product: syz [ 100.634242][ T10] usb 1-1: Manufacturer: syz [ 100.646933][ T10] usb 1-1: SerialNumber: syz [ 100.906235][ T10] mdc800 1-1:39.2: probe fails -> wrong Interface [ 100.920969][ T10] mdc800 1-1:39.208: probe fails -> wrong Interface [ 100.978424][ T10] usb 1-1: USB disconnect, device number 2 [ 101.229100][ T6110] netlink: 16 bytes leftover after parsing attributes in process `syz.1.50'. [ 101.794637][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 101.974499][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 102.011779][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.026133][ T10] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 102.037461][ T10] usb 1-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xCC, changing to 0x8C [ 102.092972][ T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 102.123235][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 102.134501][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.154576][ T10] usb 1-1: Product: syz [ 102.163173][ T10] usb 1-1: Manufacturer: syz [ 102.173735][ T10] usb 1-1: SerialNumber: syz [ 102.405191][ T6118] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 102.594572][ T5850] Bluetooth: hci3: command 0x0405 tx timeout [ 102.641487][ T10] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 102.657590][ T10] cdc_ncm 1-1:1.0: bind() failure [ 102.708622][ T10] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 102.727600][ T10] cdc_ncm 1-1:1.1: bind() failure [ 103.316831][ T6137] Malformed UNC in devname [ 103.316831][ T6137] [ 103.364801][ T6137] CIFS: VFS: Malformed UNC in devname [ 103.432905][ T5849] usb 1-1: USB disconnect, device number 3 [ 104.089281][ T6160] ======================================================= [ 104.089281][ T6160] WARNING: The mand mount option has been deprecated and [ 104.089281][ T6160] and is ignored by this kernel. Remove the mand [ 104.089281][ T6160] option from the mount to silence this warning. [ 104.089281][ T6160] ======================================================= [ 104.127507][ T6160] /dev/rnullb0: Can't open blockdev [ 105.304565][ T5891] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 105.404607][ T5849] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 105.468605][ T5891] usb 2-1: Using ep0 maxpacket: 8 [ 105.507927][ T5891] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 105.543977][ T5891] usb 2-1: config 179 has no interface number 0 [ 105.554308][ T30] audit: type=1326 audit(1754108294.262:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6194 comm="syz.0.79" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f837a18eb69 code=0x0 [ 105.570572][ T5891] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 105.671518][ T5849] usb 4-1: config 102 has an invalid interface number: 120 but max is 0 [ 105.681661][ T5849] usb 4-1: config 102 has no interface number 0 [ 105.694440][ T5849] usb 4-1: config 102 interface 120 has no altsetting 0 [ 105.701688][ T5891] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 105.713472][ T5891] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 105.726909][ T5891] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 105.740121][ T5891] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 105.754434][ T5849] usb 4-1: New USB device found, idVendor=10fd, idProduct=de00, bcdDevice= 0.01 [ 105.763513][ T5849] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.771847][ T5891] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 105.789035][ T5849] usb 4-1: Product: syz [ 105.793709][ T5849] usb 4-1: Manufacturer: syz [ 105.798437][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.811170][ T5849] usb 4-1: SerialNumber: syz [ 105.841136][ T6190] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 106.078946][ T5849] go7007 4-1:102.120: The Lifeview TV Walker Ultra is not supported. Sorry! [ 106.106562][ T5849] usb 4-1: USB disconnect, device number 2 [ 106.307190][ T6190] syz.1.77: attempt to access beyond end of device [ 106.307190][ T6190] nbd1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 106.320592][ T6190] EXT4-fs (nbd1): unable to read superblock [ 106.346949][ T5913] usb 2-1: USB disconnect, device number 2 [ 106.347045][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 106.361371][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 106.396866][ T10] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 106.559656][ T10] usb 3-1: config index 0 descriptor too short (expected 14996, got 120) [ 106.569477][ T10] usb 3-1: config 29 has too many interfaces: 211, using maximum allowed: 32 [ 106.591245][ T10] usb 3-1: config 29 has an invalid descriptor of length 0, skipping remainder of the config [ 106.612427][ T10] usb 3-1: config 29 has 3 interfaces, different from the descriptor's value: 211 [ 106.644638][ T10] usb 3-1: config 29 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 106.678453][ T10] usb 3-1: config 29 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 30, changing to 4 [ 106.719002][ T10] usb 3-1: config 29 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 24576, setting to 1023 [ 106.751064][ T10] usb 3-1: config 29 interface 1 has no altsetting 0 [ 106.769335][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 106.790328][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.798560][ T10] usb 3-1: Product: syz [ 106.802942][ T10] usb 3-1: Manufacturer: syz [ 106.811854][ T10] usb 3-1: SerialNumber: syz [ 107.036478][ T6201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.069253][ T6201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.115784][ T10] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 107.193602][ T6224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.88'. [ 107.201029][ T10] usb 3-1: USB disconnect, device number 3 [ 107.227717][ T6225] /dev/rnullb0: Can't open blockdev [ 107.903356][ T2985] Bluetooth: hci4: Frame reassembly failed (-84) [ 107.928880][ T6236] Bluetooth: hci4: Frame reassembly failed (-84) [ 108.002074][ T6238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.016316][ T6238] bond0: (slave rose0): Enslaving as an active interface with an up link [ 108.084761][ T5849] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 108.169136][ T6244] /dev/sg0: Can't lookup blockdev [ 108.246482][ T5849] usb 2-1: config 0 interface 0 has no altsetting 0 [ 108.253261][ T5849] usb 2-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.00 [ 108.293783][ T5849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.311581][ T5849] usb 2-1: config 0 descriptor?? [ 108.734080][ T6234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.742795][ T5891] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 108.754985][ T6234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.773538][ T6234] /dev/rnullb0: Can't open blockdev [ 108.790466][ T5849] usbhid 2-1:0.0: can't add hid device: -71 [ 108.797370][ T5849] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 108.822968][ T5849] usb 2-1: USB disconnect, device number 3 [ 108.920671][ T5891] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 108.930373][ T5891] usb 4-1: config 0 has no interface number 0 [ 108.940943][ T5891] usb 4-1: config 0 interface 41 has no altsetting 0 [ 108.953196][ T5891] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 108.969490][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.978450][ T5891] usb 4-1: Product: syz [ 108.982877][ T5891] usb 4-1: Manufacturer: syz [ 108.991464][ T5891] usb 4-1: SerialNumber: syz [ 109.010632][ T5891] usb 4-1: config 0 descriptor?? [ 109.439738][ T6277] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 109.954809][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 110.113843][ T6296] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 110.256342][ T5891] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 110.269581][ T5898] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 110.286695][ T5891] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 110.315130][ T5891] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 110.375296][ T5891] usb 4-1: USB disconnect, device number 3 [ 110.437378][ T5898] usb 2-1: device descriptor read/64, error -71 [ 110.456282][ T6305] capability: warning: `syz.0.104' uses 32-bit capabilities (legacy support in use) [ 110.624640][ T5849] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 110.681483][ T5898] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 110.716320][ T5913] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 110.788833][ T5849] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 110.798079][ T5849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.806212][ T5849] usb 3-1: Product: syz [ 110.810480][ T5849] usb 3-1: Manufacturer: syz [ 110.815200][ T5898] usb 2-1: device descriptor read/64, error -71 [ 110.821585][ T5849] usb 3-1: SerialNumber: syz [ 110.833828][ T5849] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 110.863880][ T5891] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 110.883527][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.898423][ T5913] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 110.908371][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.923233][ T5913] usb 1-1: config 0 descriptor?? [ 110.935121][ T5898] usb usb2-port1: attempt power cycle [ 111.284627][ T5898] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 111.326208][ T5898] usb 2-1: device descriptor read/8, error -71 [ 111.452448][ T5913] usbhid 1-1:0.0: can't add hid device: -71 [ 111.461119][ T5913] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 111.481516][ T5913] usb 1-1: USB disconnect, device number 4 [ 111.585312][ T5898] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 111.613277][ T5898] usb 2-1: device descriptor read/8, error -71 [ 111.728491][ T5898] usb usb2-port1: unable to enumerate USB device [ 111.954631][ T5891] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 111.983068][ T5891] ath9k_htc: Failed to initialize the device [ 112.040974][ T5891] usb 3-1: ath9k_htc: USB layer deinitialized [ 112.288540][ T5913] usb 3-1: USB disconnect, device number 4 [ 112.413258][ T6328] trusted_key: encrypted_key: master key parameter '' is invalid [ 112.424932][ T5849] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 112.596051][ T5849] usb 1-1: Using ep0 maxpacket: 16 [ 112.604275][ T5849] usb 1-1: config 2 has an invalid interface number: 123 but max is 0 [ 112.613096][ T5849] usb 1-1: config 2 has no interface number 0 [ 112.624056][ T5849] usb 1-1: config 2 interface 123 has no altsetting 0 [ 112.634224][ T5849] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=17.2e [ 112.644191][ T5849] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.652365][ T5849] usb 1-1: Product: syz [ 112.656862][ T5849] usb 1-1: Manufacturer: syz [ 112.661574][ T5849] usb 1-1: SerialNumber: syz [ 112.869786][ T6339] /dev/rnullb0: Can't open blockdev [ 113.189540][ T6342] syzkaller1: entered promiscuous mode [ 113.204768][ T6342] syzkaller1: entered allmulticast mode [ 113.288176][ T5849] (null): radio-mr800 - initialization failed [ 113.310352][ T5849] radio-mr800 1-1:2.123: probe with driver radio-mr800 failed with error -22 [ 113.335068][ T5849] usbhid 1-1:2.123: couldn't find an input interrupt endpoint [ 113.363238][ T5849] usb 1-1: USB disconnect, device number 5 [ 113.552635][ T6348] tmpfs: Unknown parameter 'grpquota_inode_hardlimittotal' [ 113.566156][ T6348] /dev/rnullb0: Can't open blockdev [ 114.280361][ T6363] syz.0.121: attempt to access beyond end of device [ 114.280361][ T6363] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 114.282845][ T6362] hfs: can't find a HFS filesystem on dev rnullb0 [ 114.793873][ T6378] hfs: can't find a HFS filesystem on dev rnullb0 [ 114.943482][ T6382] binder: 6381:6382 ioctl c0306201 200000000280 returned -11 [ 115.100173][ T30] audit: type=1326 audit(1754108303.822:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6388 comm="syz.3.132" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fda6ab8eb69 code=0x0 [ 115.160322][ T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 115.170939][ T51] CPU: 0 UID: 0 PID: 51 Comm: kworker/u9:0 Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) [ 115.170970][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 115.170984][ T51] Workqueue: hci0 hci_rx_work [ 115.171016][ T51] Call Trace: [ 115.171025][ T51] [ 115.171033][ T51] dump_stack_lvl+0x189/0x250 [ 115.171066][ T51] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.171094][ T51] ? __pfx__printk+0x10/0x10 [ 115.171124][ T51] ? kernfs_path_from_node+0x250/0x290 [ 115.171149][ T51] ? kernfs_path_from_node+0x2f/0x290 [ 115.171178][ T51] sysfs_create_dir_ns+0x259/0x280 [ 115.171206][ T51] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 115.171235][ T51] ? do_raw_spin_unlock+0x122/0x240 [ 115.171265][ T51] kobject_add_internal+0x59f/0xb40 [ 115.171296][ T51] kobject_add+0x155/0x220 [ 115.171320][ T51] ? __pfx_kobject_add+0x10/0x10 [ 115.171340][ T51] ? _raw_spin_unlock+0x28/0x50 [ 115.171369][ T51] ? get_device_parent+0x366/0x3a0 [ 115.171405][ T51] device_add+0x408/0xb50 [ 115.171440][ T51] hci_conn_add_sysfs+0xd5/0x1e0 [ 115.171484][ T51] le_conn_complete_evt+0xc3a/0x1220 [ 115.171533][ T51] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 115.171565][ T51] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 115.171602][ T51] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 115.171630][ T51] ? skb_pull_data+0xfb/0x200 [ 115.171662][ T51] hci_le_enh_conn_complete_evt+0x189/0x470 [ 115.171694][ T51] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 115.171729][ T51] hci_event_packet+0x78f/0x1200 [ 115.171758][ T51] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 115.171786][ T51] ? __pfx_hci_event_packet+0x10/0x10 [ 115.171812][ T51] ? kcov_remote_start+0x4d3/0x7f0 [ 115.171838][ T51] ? warn_bogus_irq_restore+0x20/0x40 [ 115.171871][ T51] ? hci_send_to_monitor+0xe2/0x570 [ 115.171909][ T51] hci_rx_work+0x46a/0xe80 [ 115.171943][ T51] ? process_scheduled_works+0x9ef/0x17b0 [ 115.171969][ T51] process_scheduled_works+0xade/0x17b0 [ 115.172026][ T51] ? __pfx_process_scheduled_works+0x10/0x10 [ 115.172066][ T51] worker_thread+0x8a0/0xda0 [ 115.172117][ T51] kthread+0x70e/0x8a0 [ 115.172148][ T51] ? __pfx_worker_thread+0x10/0x10 [ 115.172170][ T51] ? __pfx_kthread+0x10/0x10 [ 115.172197][ T51] ? _raw_spin_unlock_irq+0x23/0x50 [ 115.172221][ T51] ? lockdep_hardirqs_on+0x9c/0x150 [ 115.172244][ T51] ? __pfx_kthread+0x10/0x10 [ 115.172269][ T51] ret_from_fork+0x3fc/0x770 [ 115.172295][ T51] ? __pfx_ret_from_fork+0x10/0x10 [ 115.172324][ T51] ? __switch_to_asm+0x39/0x70 [ 115.172351][ T51] ? __switch_to_asm+0x33/0x70 [ 115.172383][ T51] ? __pfx_kthread+0x10/0x10 [ 115.172411][ T51] ret_from_fork_asm+0x1a/0x30 [ 115.172458][ T51] [ 115.187271][ T6392] binder: 6388:6392 ioctl c0306201 200000000280 returned -11 [ 115.201956][ T51] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 115.229153][ T5849] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 115.232963][ T51] Bluetooth: hci0: failed to register connection device [ 115.252380][ T6391] /dev/rnullb0: Can't open blockdev [ 115.614605][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 115.637076][ T5849] usb 3-1: config 0 has an invalid interface number: 219 but max is 0 [ 115.645508][ T5849] usb 3-1: config 0 has no interface number 0 [ 115.655287][ T5849] usb 3-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=56.19 [ 115.665009][ T5849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.673059][ T5849] usb 3-1: Product: syz [ 115.677758][ T5849] usb 3-1: Manufacturer: syz [ 115.682353][ T5849] usb 3-1: SerialNumber: syz [ 115.690090][ T5849] usb 3-1: config 0 descriptor?? [ 115.699243][ T5849] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 115.709497][ T5849] dvb-usb: bulk message failed: -22 (2/0) [ 115.717859][ T5849] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 115.728361][ T5849] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353)) [ 115.739298][ T5849] usb 3-1: media controller created [ 115.747153][ T5849] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 115.763315][ T5849] usb 3-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 115.772487][ T5849] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 115.793513][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.810019][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 115.819834][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.837487][ T9] usb 2-1: config 0 descriptor?? [ 115.858873][ T5849] rc_core: IR keymap rc-dtt200u not found [ 115.866083][ T5849] Registered IR keymap rc-empty [ 115.873063][ T5849] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 115.887757][ T5849] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input6 [ 115.905869][ T6384] vivid-000: ================= START STATUS ================= [ 115.913942][ T5849] dvb-usb: schedule remote query interval to 300 msecs. [ 115.921162][ T6384] vivid-000: Radio HW Seek Mode: Bounded [ 115.928384][ T6384] vivid-000: Radio Programmable HW Seek: false [ 115.934843][ T5849] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected. [ 115.992687][ T6396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.019772][ T6384] vivid-000: RDS Rx I/O Mode: Block I/O [ 116.021197][ T6396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.064524][ T6384] vivid-000: Generate RBDS Instead of RDS: false [ 116.070945][ T6384] vivid-000: RDS Reception: true [ 116.153026][ T6384] vivid-000: RDS Program Type: 0 inactive [ 116.194894][ T6384] vivid-000: RDS PS Name: inactive [ 116.219028][ T5849] IPVS: starting estimator thread 0... [ 116.244617][ T6384] vivid-000: RDS Radio Text: inactive [ 116.245184][ T5849] dvb-usb: bulk message failed: -22 (1/0) [ 116.250238][ T6384] vivid-000: RDS Traffic Announcement: [ 116.290311][ T5849] dvb-usb: error -22 while querying for an remote control event. [ 116.323600][ T9] magicmouse 0003:05AC:0265.0001: unknown main item tag 0x5 [ 116.345434][ T6405] IPVS: using max 27 ests per chain, 64800 per kthread [ 116.368707][ T6384] false inactive [ 116.378124][ T9] magicmouse 0003:05AC:0265.0001: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.1-1/input0 [ 116.386274][ T6384] vivid-000: RDS Traffic Program: false inactive [ 116.423280][ T6384] vivid-000: RDS Music: false inactive [ 116.440999][ T6384] vivid-000: ================== END STATUS ================== [ 116.597278][ T5849] usb 2-1: USB disconnect, device number 8 [ 116.660762][ T5891] dvb-usb: bulk message failed: -22 (1/0) [ 116.669998][ T5891] dvb-usb: error -22 while querying for an remote control event. [ 116.715791][ T5891] usb 3-1: USB disconnect, device number 5 [ 116.732331][ T6407] fido_id[6407]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 116.851265][ T5891] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected. [ 117.156509][ T6416] /dev/sg0: Can't lookup blockdev [ 117.274531][ T5849] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 117.283603][ T6418] binder: 6417:6418 ioctl c0306201 200000000280 returned -11 [ 117.392268][ T6423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.141'. [ 117.414477][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 117.449785][ T5849] usb 4-1: Using ep0 maxpacket: 32 [ 117.459108][ T5849] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 117.482096][ T5849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.525937][ T5849] usb 4-1: config 0 descriptor?? [ 117.539793][ T5849] gspca_main: sq930x-2.14.0 probing 041e:403c [ 117.585268][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 117.612190][ T9] usb 1-1: config 4 has an invalid interface number: 51 but max is 0 [ 117.634507][ T9] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 117.655669][ T9] usb 1-1: config 4 has no interface number 0 [ 117.661839][ T9] usb 1-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 117.695008][ T9] usb 1-1: config 4 interface 51 has no altsetting 0 [ 117.709507][ T9] usb 1-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 117.726557][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.745646][ T9] usb 1-1: Product: syz [ 117.749928][ T9] usb 1-1: Manufacturer: syz [ 117.759566][ T9] usb 1-1: SerialNumber: syz [ 117.778861][ T9] cdc_eem 1-1:4.51: probe with driver cdc_eem failed with error -22 [ 117.926872][ T6435] hfs: can't find a HFS filesystem on dev rnullb0 [ 117.958974][ T6433] tmpfs: Unknown parameter 'usrquoå¬á [ 117.958974][ T6433] ÷' [ 118.314566][ T5898] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 118.384901][ T5849] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 118.434682][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 118.444935][ T5849] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 118.455026][ T5849] usb 4-1: USB disconnect, device number 4 [ 118.464436][ T5898] usb 2-1: Using ep0 maxpacket: 8 [ 118.472842][ T5898] usb 2-1: unable to get BOS descriptor or descriptor too short [ 118.482502][ T5898] usb 2-1: config 82 has an invalid interface number: 96 but max is 0 [ 118.490760][ T5898] usb 2-1: config 82 has no interface number 0 [ 118.498777][ T5898] usb 2-1: config 82 interface 96 altsetting 225 has an endpoint descriptor with address 0x11, changing to 0x1 [ 118.511378][ T5898] usb 2-1: config 82 interface 96 altsetting 225 endpoint 0x1 has invalid wMaxPacketSize 0 [ 118.523059][ T5898] usb 2-1: config 82 interface 96 has no altsetting 0 [ 118.532190][ T5898] usb 2-1: New USB device found, idVendor=16ab, idProduct=7802, bcdDevice=ce.24 [ 118.541307][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.549626][ T5898] usb 2-1: Product: syz [ 118.553836][ T5898] usb 2-1: Manufacturer: syz [ 118.558744][ T5898] usb 2-1: SerialNumber: syz [ 118.584759][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 118.607943][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 118.631762][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 118.634944][ T6444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.658118][ T24] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 118.659134][ T6444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.670481][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.683905][ T24] usb 3-1: Product: syz [ 118.688969][ T24] usb 3-1: Manufacturer: syz [ 118.693886][ T24] usb 3-1: SerialNumber: syz [ 118.723722][ T24] usb 3-1: config 0 descriptor?? [ 118.762928][ T24] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 118.782977][ T6439] binder: 6438:6439 ioctl c0306201 200000000280 returned -11 [ 118.800092][ T5898] usb 2-1: Could not find all expected endpoints [ 118.824853][ T5898] usb 2-1: USB disconnect, device number 9 [ 118.938003][ T2985] usb 3-1: Failed to submit usb control message: -71 [ 118.938347][ T24] usb 3-1: USB disconnect, device number 6 [ 118.957677][ T2985] usb 3-1: unable to send the bmi data to the device: -71 [ 118.965798][ T2985] usb 3-1: unable to get target info from device [ 118.978205][ T2985] usb 3-1: could not get target info (-71) [ 118.984310][ T2985] usb 3-1: could not probe fw (-71) [ 119.068797][ T6453] nfs: Unknown parameter '/dev/rnullb0' [ 119.344008][ T6456] netlink: 40 bytes leftover after parsing attributes in process `syz.3.149'. [ 119.364698][ T6456] hfs: can't find a HFS filesystem on dev rnullb0 [ 120.467482][ T5849] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 120.625993][ T5849] usb 2-1: Using ep0 maxpacket: 32 [ 120.640245][ T5849] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 120.661957][ T5849] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 120.697453][ T5849] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 120.714888][ T5849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.729086][ T5849] usb 2-1: Product: syz [ 120.733395][ T5849] usb 2-1: Manufacturer: syz [ 120.751291][ T5849] usb 2-1: SerialNumber: syz [ 120.767933][ T5849] usb 2-1: config 0 descriptor?? [ 120.849055][ T5849] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 121.054649][ T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 121.207721][ T6477] /dev/rnullb0: Can't open blockdev [ 121.224517][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 121.239512][ T24] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 121.265639][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.299504][ T24] usb 3-1: config 0 descriptor?? [ 121.348325][ T24] gspca_main: sunplus-2.14.0 probing 041e:400b [ 121.433390][ T6479] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 121.444874][ T6479] overlayfs: missing 'lowerdir' [ 121.684593][ T5849] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 121.857502][ T5849] usb 4-1: config 39 has an invalid interface number: 2 but max is 1 [ 121.875219][ T1158] usb 2-1: Failed to submit usb control message: -110 [ 121.882428][ T5849] usb 4-1: config 39 has an invalid interface number: 208 but max is 1 [ 121.892561][ T1158] usb 2-1: unable to send the bmi data to the device: -110 [ 121.912665][ T1158] usb 2-1: unable to get target info from device [ 121.919375][ T5849] usb 4-1: config 39 has no interface number 0 [ 121.934463][ T1158] usb 2-1: could not get target info (-110) [ 121.940498][ T1158] usb 2-1: could not probe fw (-110) [ 121.946038][ T5849] usb 4-1: config 39 has no interface number 1 [ 121.952309][ T5849] usb 4-1: config 39 interface 2 has no altsetting 0 [ 121.975340][ T5849] usb 4-1: config 39 interface 208 has no altsetting 0 [ 121.998177][ T5849] usb 4-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=c4.36 [ 122.014622][ T5849] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.022722][ T5849] usb 4-1: Product: syz [ 122.041299][ T5849] usb 4-1: Manufacturer: syz [ 122.054668][ T5849] usb 4-1: SerialNumber: syz [ 122.293442][ T5849] mdc800 4-1:39.2: probe fails -> wrong Interface [ 122.320167][ T5849] mdc800 4-1:39.208: probe fails -> wrong Interface [ 122.348412][ T5849] usb 4-1: USB disconnect, device number 5 [ 122.578631][ T6475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.587823][ T6475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.018461][ T6475] syz.2.153: attempt to access beyond end of device [ 123.018461][ T6475] loop2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 123.046532][ T6475] MINIX-fs: unable to read superblock [ 123.096329][ T24] gspca_sunplus: reg_w_riv err -71 [ 123.101625][ T24] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 123.132974][ T24] usb 3-1: USB disconnect, device number 7 [ 123.178343][ T5913] usb 2-1: USB disconnect, device number 10 [ 123.497906][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 123.695135][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 123.725024][ T9] usb 4-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.752755][ T9] usb 4-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 123.806293][ T9] usb 4-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8 [ 123.824133][ T9] usb 4-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 123.833319][ T6509] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 123.863175][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 123.875365][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 123.889485][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 123.900828][ T9] usb 4-1: SerialNumber: syz [ 123.928810][ T6496] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 123.936930][ T6496] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 124.173494][ T6496] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 124.214813][ T6496] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 124.716639][ T9] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 124.918948][ T6538] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 126.005826][ T6562] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 126.104530][ C1] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 68! [ 126.115334][ C1] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 0f! [ 126.122833][ C1] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 03! [ 126.131078][ C1] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 03! [ 126.139208][ C1] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 0a! [ 126.146914][ C1] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 03! [ 126.154670][ C1] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 01! [ 126.162516][ C1] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 03! [ 126.170078][ C1] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 0e! [ 126.177833][ C1] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 14! [ 126.185323][ C1] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 0a! [ 126.192961][ C1] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 08! [ 126.202180][ C1] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 08! [ 126.209628][ C1] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification be! [ 126.217068][ C1] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 01! [ 126.480097][ T6571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.522415][ T6571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.578859][ T5849] usb 4-1: USB disconnect, device number 6 [ 126.644815][ T5849] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 126.759463][ T6571] virtio-fs: tag not found [ 126.818850][ T6579] FAULT_INJECTION: forcing a failure. [ 126.818850][ T6579] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 126.852364][ T6579] CPU: 0 UID: 0 PID: 6579 Comm: syz.3.176 Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) [ 126.852403][ T6579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 126.852414][ T6579] Call Trace: [ 126.852422][ T6579] [ 126.852429][ T6579] dump_stack_lvl+0x189/0x250 [ 126.852459][ T6579] ? __pfx____ratelimit+0x10/0x10 [ 126.852485][ T6579] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.852508][ T6579] ? __pfx__printk+0x10/0x10 [ 126.852546][ T6579] should_fail_ex+0x414/0x560 [ 126.852572][ T6579] __kvm_read_guest_page+0x18d/0x240 [ 126.852601][ T6579] kvm_vcpu_read_guest+0x75/0x150 [ 126.852629][ T6579] read_emulate+0x2c/0x50 [ 126.852654][ T6579] emulator_read_write_onepage+0x6a3/0xa10 [ 126.852693][ T6579] emulator_read_write+0x1c9/0x560 [ 126.852723][ T6579] ? __pfx_emulator_read_emulated+0x10/0x10 [ 126.852743][ T6579] segmented_read+0x1b7/0x3f0 [ 126.852776][ T6579] x86_emulate_insn+0x315/0x3bf0 [ 126.852810][ T6579] ? rcu_is_watching+0x15/0xb0 [ 126.852836][ T6579] x86_emulate_instruction+0xd1a/0x1ef0 [ 126.852879][ T6579] ? __pfx_x86_emulate_instruction+0x10/0x10 [ 126.852904][ T6579] ? vmx_handle_exit_irqoff+0x29e/0xad0 [ 126.852926][ T6579] ? __pfx_current_save_fsgs+0x10/0x10 [ 126.852950][ T6579] ? __lock_acquire+0xab9/0xd20 [ 126.852970][ T6579] ? handle_io+0x1e3/0x270 [ 126.852998][ T6579] ? __pfx_handle_io+0x10/0x10 [ 126.853023][ T6579] vmx_handle_exit+0x1090/0x18a0 [ 126.853047][ T6579] ? vcpu_run+0x35f2/0x6fa0 [ 126.853089][ T6579] vcpu_run+0x434f/0x6fa0 [ 126.853137][ T6579] ? vcpu_run+0x35f2/0x6fa0 [ 126.853218][ T6579] ? __pfx_vcpu_run+0x10/0x10 [ 126.853253][ T6579] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 126.853295][ T6579] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 126.853328][ T6579] ? __mutex_trylock_common+0x153/0x260 [ 126.853357][ T6579] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 126.853398][ T6579] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 126.853426][ T6579] ? rcu_is_watching+0x15/0xb0 [ 126.853447][ T6579] ? trace_contention_end+0x39/0x120 [ 126.853471][ T6579] ? __mutex_lock+0x335/0x1360 [ 126.853508][ T6579] ? kasan_quarantine_put+0xdd/0x220 [ 126.853539][ T6579] ? kvm_vcpu_ioctl+0x22e/0xe90 [ 126.853570][ T6579] ? __pfx___mutex_lock+0x10/0x10 [ 126.853601][ T6579] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 126.853625][ T6579] ? do_vfs_ioctl+0xbe8/0x1430 [ 126.853648][ T6579] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 126.853671][ T6579] kvm_vcpu_ioctl+0x95c/0xe90 [ 126.853705][ T6579] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 126.853729][ T6579] ? __lock_acquire+0xab9/0xd20 [ 126.853773][ T6579] ? __fget_files+0x2a/0x420 [ 126.853799][ T6579] ? __fget_files+0x2a/0x420 [ 126.853820][ T6579] ? __fget_files+0x3a0/0x420 [ 126.853842][ T6579] ? __fget_files+0x2a/0x420 [ 126.853868][ T6579] ? bpf_lsm_file_ioctl+0x9/0x20 [ 126.853895][ T6579] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 126.853920][ T6579] __se_sys_ioctl+0xfc/0x170 [ 126.853952][ T6579] do_syscall_64+0xfa/0x3b0 [ 126.853969][ T6579] ? lockdep_hardirqs_on+0x9c/0x150 [ 126.853995][ T6579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.854013][ T6579] ? clear_bhb_loop+0x60/0xb0 [ 126.854037][ T6579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.854054][ T6579] RIP: 0033:0x7fda6ab8eb69 [ 126.854074][ T6579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.854090][ T6579] RSP: 002b:00007fda689f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.854111][ T6579] RAX: ffffffffffffffda RBX: 00007fda6adb5fa0 RCX: 00007fda6ab8eb69 [ 126.854126][ T6579] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 126.854137][ T6579] RBP: 00007fda689f6090 R08: 0000000000000000 R09: 0000000000000000 [ 126.854149][ T6579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 126.854160][ T6579] R13: 0000000000000000 R14: 00007fda6adb5fa0 R15: 00007ffc925a8a08 [ 126.854192][ T6579] [ 127.813379][ T6606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.182'. [ 128.147030][ T6601] syzkaller1: entered promiscuous mode [ 128.160188][ T6601] syzkaller1: entered allmulticast mode [ 128.320354][ T6601] syzkaller1: left promiscuous mode [ 128.365981][ T6601] syzkaller1: left allmulticast mode [ 128.636089][ T6628] FAULT_INJECTION: forcing a failure. [ 128.636089][ T6628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.675612][ T6628] CPU: 0 UID: 0 PID: 6628 Comm: syz.0.188 Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) [ 128.675651][ T6628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 128.675662][ T6628] Call Trace: [ 128.675671][ T6628] [ 128.675679][ T6628] dump_stack_lvl+0x189/0x250 [ 128.675711][ T6628] ? __pfx____ratelimit+0x10/0x10 [ 128.675742][ T6628] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.675769][ T6628] ? __pfx__printk+0x10/0x10 [ 128.675812][ T6628] should_fail_ex+0x414/0x560 [ 128.675841][ T6628] __kvm_read_guest_page+0x18d/0x240 [ 128.675875][ T6628] kvm_vcpu_read_guest+0x75/0x150 [ 128.675908][ T6628] read_emulate+0x2c/0x50 [ 128.675936][ T6628] emulator_read_write_onepage+0x6a3/0xa10 [ 128.675976][ T6628] emulator_read_write+0x1c9/0x560 [ 128.676008][ T6628] ? __pfx_emulator_read_emulated+0x10/0x10 [ 128.676030][ T6628] segmented_read+0x1b7/0x3f0 [ 128.676068][ T6628] x86_emulate_insn+0x315/0x3bf0 [ 128.676107][ T6628] ? rcu_is_watching+0x15/0xb0 [ 128.676136][ T6628] x86_emulate_instruction+0xd1a/0x1ef0 [ 128.676182][ T6628] ? __pfx_x86_emulate_instruction+0x10/0x10 [ 128.676210][ T6628] ? vmx_handle_exit_irqoff+0x29e/0xad0 [ 128.676234][ T6628] ? __pfx_current_save_fsgs+0x10/0x10 [ 128.676262][ T6628] ? __lock_acquire+0xab9/0xd20 [ 128.676283][ T6628] ? handle_io+0x1e3/0x270 [ 128.676312][ T6628] ? __pfx_handle_io+0x10/0x10 [ 128.676340][ T6628] vmx_handle_exit+0x1090/0x18a0 [ 128.676367][ T6628] ? vcpu_run+0x35f2/0x6fa0 [ 128.676409][ T6628] vcpu_run+0x434f/0x6fa0 [ 128.676457][ T6628] ? vcpu_run+0x35f2/0x6fa0 [ 128.676534][ T6628] ? __pfx_vcpu_run+0x10/0x10 [ 128.676568][ T6628] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 128.676601][ T6628] ? rcu_is_watching+0x15/0xb0 [ 128.676636][ T6628] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 128.676665][ T6628] ? __mutex_trylock_common+0x153/0x260 [ 128.676690][ T6628] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 128.676718][ T6628] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 128.676745][ T6628] ? rcu_is_watching+0x15/0xb0 [ 128.676766][ T6628] ? trace_contention_end+0x39/0x120 [ 128.676791][ T6628] ? __mutex_lock+0x335/0x1360 [ 128.676827][ T6628] ? kasan_quarantine_put+0xdd/0x220 [ 128.676857][ T6628] ? kvm_vcpu_ioctl+0x22e/0xe90 [ 128.676892][ T6628] ? __pfx___mutex_lock+0x10/0x10 [ 128.676922][ T6628] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 128.676947][ T6628] ? do_vfs_ioctl+0xbe8/0x1430 [ 128.676969][ T6628] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 128.676992][ T6628] kvm_vcpu_ioctl+0x95c/0xe90 [ 128.677028][ T6628] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 128.677050][ T6628] ? __lock_acquire+0xab9/0xd20 [ 128.677095][ T6628] ? __fget_files+0x2a/0x420 [ 128.677121][ T6628] ? __fget_files+0x2a/0x420 [ 128.677143][ T6628] ? __fget_files+0x3a0/0x420 [ 128.677163][ T6628] ? __fget_files+0x2a/0x420 [ 128.677188][ T6628] ? bpf_lsm_file_ioctl+0x9/0x20 [ 128.677215][ T6628] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 128.677241][ T6628] __se_sys_ioctl+0xfc/0x170 [ 128.677273][ T6628] do_syscall_64+0xfa/0x3b0 [ 128.677290][ T6628] ? lockdep_hardirqs_on+0x9c/0x150 [ 128.677316][ T6628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.677335][ T6628] ? clear_bhb_loop+0x60/0xb0 [ 128.677359][ T6628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.677377][ T6628] RIP: 0033:0x7f837a18eb69 [ 128.677396][ T6628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.677412][ T6628] RSP: 002b:00007f837af60038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 128.677434][ T6628] RAX: ffffffffffffffda RBX: 00007f837a3b5fa0 RCX: 00007f837a18eb69 [ 128.677448][ T6628] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 128.677459][ T6628] RBP: 00007f837af60090 R08: 0000000000000000 R09: 0000000000000000 [ 128.677471][ T6628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 128.677482][ T6628] R13: 0000000000000000 R14: 00007f837a3b5fa0 R15: 00007ffc01b18ac8 [ 128.677515][ T6628] [ 129.071069][ C0] vkms_vblank_simulate: vblank timer overrun [ 129.761009][ T6652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.192'. [ 129.763576][ T6654] netlink: 188 bytes leftover after parsing attributes in process `syz.2.193'. [ 129.815502][ T6652] netlink: 24 bytes leftover after parsing attributes in process `syz.0.192'. [ 129.892463][ T6655] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.193'. [ 131.015052][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 131.175057][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 131.183623][ T6692] /dev/rnullb0: Can't open blockdev [ 131.185274][ T9] usb 2-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 131.214422][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.224414][ T9] usb 2-1: Product: syz [ 131.232513][ T9] usb 2-1: Manufacturer: syz [ 131.245348][ T9] usb 2-1: SerialNumber: syz [ 131.953580][ T6708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.987807][ T6708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.035912][ T6708] /dev/rnullb0: Can't open blockdev [ 132.324011][ T6715] /dev/rnullb0: Can't open blockdev [ 132.349078][ T6717] /dev/rnullb0: Can't open blockdev [ 132.453607][ T6720] loop6: detected capacity change from 0 to 2560 [ 132.472972][ T6398] Buffer I/O error on dev loop6, logical block 0, async page read [ 132.482072][ T6398] Buffer I/O error on dev loop6, logical block 0, async page read [ 132.491253][ T6398] Buffer I/O error on dev loop6, logical block 0, async page read [ 132.499950][ T6398] Buffer I/O error on dev loop6, logical block 0, async page read [ 132.510010][ T6398] Buffer I/O error on dev loop6, logical block 0, async page read [ 132.526555][ T6398] Buffer I/O error on dev loop6, logical block 0, async page read [ 132.535954][ T6398] Buffer I/O error on dev loop6, logical block 0, async page read [ 132.573953][ T6398] Buffer I/O error on dev loop6, logical block 0, async page read [ 132.603409][ T6398] ldm_validate_partition_table(): Disk read failed. [ 132.626801][ T6398] Buffer I/O error on dev loop6, logical block 0, async page read [ 132.654573][ T6398] Buffer I/O error on dev loop6, logical block 0, async page read [ 132.708672][ T6398] Dev loop6: unable to read RDB block 0 [ 132.734986][ T6398] loop6: unable to read partition table [ 132.750440][ T6720] ldm_validate_partition_table(): Disk read failed. [ 132.768871][ T6720] Dev loop6: unable to read RDB block 0 [ 132.788981][ T6720] loop6: unable to read partition table [ 132.806343][ T6720] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 133.069506][ T6733] netlink: 12 bytes leftover after parsing attributes in process `syz.2.211'. [ 133.085723][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.092415][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.174190][ T6735] /dev/rnullb0: Can't open blockdev [ 133.889707][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 134.027304][ T9] snd-usb-audio 2-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 134.058434][ T6748] netlink: 'syz.1.216': attribute type 5 has an invalid length. [ 134.070249][ T9] usb 2-1: USB disconnect, device number 11 [ 134.075702][ T6748] netlink: 176 bytes leftover after parsing attributes in process `syz.1.216'. [ 134.131404][ T5860] udevd[5860]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 134.678749][ T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 134.848106][ T24] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 134.868410][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.887689][ T24] usb 3-1: config 0 descriptor?? [ 134.906936][ T24] cp210x 3-1:0.0: cp210x converter detected [ 135.307381][ T6761] /dev/rnullb0: Can't open blockdev [ 135.314711][ T24] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 135.550438][ T24] cp210x 3-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 135.583546][ T24] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 135.639133][ T24] usb 3-1: cp210x converter now attached to ttyUSB0 [ 135.699617][ T24] usb 3-1: USB disconnect, device number 8 [ 135.762497][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 135.803141][ T24] cp210x 3-1:0.0: device disconnected [ 135.879338][ T6768] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 136.192320][ T6782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.233956][ T6782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.303796][ T6781] /dev/rnullb0: Can't open blockdev [ 136.321211][ T30] audit: type=1326 audit(1754108325.042:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6784 comm="syz.2.226" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4507b8eb69 code=0x0 [ 136.423464][ T6791] /dev/rnullb0: Can't open blockdev [ 136.586897][ T6793] /dev/rnullb0: Can't open blockdev [ 136.808861][ T6799] trusted_key: syz.1.230 sent an empty control message without MSG_MORE. [ 136.822260][ T6799] Mount JFS Failure: -22 [ 136.939658][ T6807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.961472][ T6807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.980611][ T6809] vxfs: WRONG superblock magic 00000000 at 1 [ 136.997441][ T6808] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 136.998537][ T6809] vxfs: WRONG superblock magic 00000000 at 8 [ 137.027738][ T6809] vxfs: can't find superblock. [ 137.585347][ T927] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 137.592703][ T6825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.611057][ T6825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.644436][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 137.769088][ T927] usb 2-1: Using ep0 maxpacket: 32 [ 137.780627][ T927] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 137.792546][ T927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.804901][ T927] usb 2-1: Product: syz [ 137.809114][ T927] usb 2-1: Manufacturer: syz [ 137.813974][ T927] usb 2-1: SerialNumber: syz [ 137.818763][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 137.832575][ T9] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 137.843256][ T9] usb 3-1: config 0 has no interface number 0 [ 137.854098][ T927] usb 2-1: config 0 descriptor?? [ 137.859975][ T9] usb 3-1: config 0 interface 12 has no altsetting 0 [ 137.878146][ T9] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 137.898782][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.915783][ T9] usb 3-1: Product: syz [ 137.920142][ T9] usb 3-1: Manufacturer: syz [ 137.926378][ T9] usb 3-1: SerialNumber: syz [ 137.942847][ T9] usb 3-1: config 0 descriptor?? [ 138.262083][ T9] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 138.274694][ T927] airspy 2-1:0.0: Board ID: 00 [ 138.281416][ T927] airspy 2-1:0.0: Firmware version: [ 138.302348][ T9] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 138.312231][ T9] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 138.321695][ T9] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 138.363277][ T6850] FAULT_INJECTION: forcing a failure. [ 138.363277][ T6850] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.393538][ T6850] CPU: 0 UID: 0 PID: 6850 Comm: syz.3.243 Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) [ 138.393572][ T6850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 138.393583][ T6850] Call Trace: [ 138.393592][ T6850] [ 138.393599][ T6850] dump_stack_lvl+0x189/0x250 [ 138.393631][ T6850] ? __pfx____ratelimit+0x10/0x10 [ 138.393660][ T6850] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.393685][ T6850] ? __pfx__printk+0x10/0x10 [ 138.393728][ T6850] should_fail_ex+0x414/0x560 [ 138.393757][ T6850] __kvm_read_guest_page+0x18d/0x240 [ 138.393791][ T6850] kvm_vcpu_read_guest+0x75/0x150 [ 138.393825][ T6850] read_emulate+0x2c/0x50 [ 138.393853][ T6850] emulator_read_write_onepage+0x6a3/0xa10 [ 138.393893][ T6850] emulator_read_write+0x1c9/0x560 [ 138.393924][ T6850] ? __pfx_emulator_read_emulated+0x10/0x10 [ 138.393944][ T6850] segmented_read+0x1b7/0x3f0 [ 138.393981][ T6850] x86_emulate_insn+0x315/0x3bf0 [ 138.394018][ T6850] ? rcu_is_watching+0x15/0xb0 [ 138.394047][ T6850] x86_emulate_instruction+0xd1a/0x1ef0 [ 138.394092][ T6850] ? __pfx_x86_emulate_instruction+0x10/0x10 [ 138.394121][ T6850] ? vmx_handle_exit_irqoff+0x29e/0xad0 [ 138.394145][ T6850] ? __pfx_current_save_fsgs+0x10/0x10 [ 138.394172][ T6850] ? __lock_acquire+0xab9/0xd20 [ 138.394193][ T6850] ? handle_io+0x1e3/0x270 [ 138.394220][ T6850] ? __pfx_handle_io+0x10/0x10 [ 138.394248][ T6850] vmx_handle_exit+0x1090/0x18a0 [ 138.394274][ T6850] ? vcpu_run+0x35f2/0x6fa0 [ 138.394317][ T6850] vcpu_run+0x434f/0x6fa0 [ 138.394365][ T6850] ? vcpu_run+0x35f2/0x6fa0 [ 138.394445][ T6850] ? __pfx_vcpu_run+0x10/0x10 [ 138.394482][ T6850] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 138.394528][ T6850] ? rcu_is_watching+0x15/0xb0 [ 138.394556][ T6850] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 138.394591][ T6850] ? __mutex_trylock_common+0x153/0x260 [ 138.394621][ T6850] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 138.394651][ T6850] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 138.394682][ T6850] ? rcu_is_watching+0x15/0xb0 [ 138.394705][ T6850] ? trace_contention_end+0x39/0x120 [ 138.394730][ T6850] ? __mutex_lock+0x335/0x1360 [ 138.394767][ T6850] ? kasan_quarantine_put+0xdd/0x220 [ 138.394799][ T6850] ? kvm_vcpu_ioctl+0x22e/0xe90 [ 138.394831][ T6850] ? __pfx___mutex_lock+0x10/0x10 [ 138.394862][ T6850] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 138.394887][ T6850] ? do_vfs_ioctl+0xbe8/0x1430 [ 138.394910][ T6850] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 138.394933][ T6850] kvm_vcpu_ioctl+0x95c/0xe90 [ 138.394969][ T6850] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 138.394994][ T6850] ? __lock_acquire+0xab9/0xd20 [ 138.395037][ T6850] ? __fget_files+0x2a/0x420 [ 138.395063][ T6850] ? __fget_files+0x2a/0x420 [ 138.395082][ T6850] ? __fget_files+0x3a0/0x420 [ 138.395104][ T6850] ? __fget_files+0x2a/0x420 [ 138.395131][ T6850] ? bpf_lsm_file_ioctl+0x9/0x20 [ 138.395159][ T6850] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 138.395186][ T6850] __se_sys_ioctl+0xfc/0x170 [ 138.395219][ T6850] do_syscall_64+0xfa/0x3b0 [ 138.395235][ T6850] ? lockdep_hardirqs_on+0x9c/0x150 [ 138.395262][ T6850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.395280][ T6850] ? clear_bhb_loop+0x60/0xb0 [ 138.395306][ T6850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.395323][ T6850] RIP: 0033:0x7fda6ab8eb69 [ 138.395351][ T6850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.395368][ T6850] RSP: 002b:00007fda689f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 138.395391][ T6850] RAX: ffffffffffffffda RBX: 00007fda6adb5fa0 RCX: 00007fda6ab8eb69 [ 138.395406][ T6850] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 138.395417][ T6850] RBP: 00007fda689f6090 R08: 0000000000000000 R09: 0000000000000000 [ 138.395429][ T6850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 138.395440][ T6850] R13: 0000000000000000 R14: 00007fda6adb5fa0 R15: 00007ffc925a8a08 [ 138.395472][ T6850] [ 138.820621][ T9] usb 3-1: USB disconnect, device number 9 [ 138.841661][ T6860] netlink: 'syz.0.246': attribute type 33 has an invalid length. [ 138.850317][ T6860] netlink: 160 bytes leftover after parsing attributes in process `syz.0.246'. [ 138.920938][ T6853] /dev/rnullb0: Can't open blockdev [ 139.075903][ T927] airspy 2-1:0.0: usb_control_msg() failed -32 request 12 [ 139.115718][ T927] airspy 2-1:0.0: Registered as swradio24 [ 139.122286][ T927] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 139.168802][ T6868] /dev/rnullb0: Can't open blockdev [ 139.320217][ T6871] netlink: 'syz.2.249': attribute type 10 has an invalid length. [ 139.343059][ T6875] nfs: Unknown parameter 'intrÿ' [ 139.367407][ T6871] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.384846][ T6871] bridge_slave_1: left allmulticast mode [ 139.390593][ T6871] bridge_slave_1: left promiscuous mode [ 139.417866][ T6878] /dev/rnullb0: Can't open blockdev [ 139.428026][ T6871] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.521693][ T6871] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 139.678951][ T6886] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 139.692526][ T6886] /dev/rnullb0: Can't open blockdev [ 139.810097][ T10] usb 2-1: USB disconnect, device number 12 [ 139.859094][ T6893] FAULT_INJECTION: forcing a failure. [ 139.859094][ T6893] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.911768][ T6893] CPU: 1 UID: 0 PID: 6893 Comm: syz.3.256 Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) [ 139.911798][ T6893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 139.911809][ T6893] Call Trace: [ 139.911818][ T6893] [ 139.911827][ T6893] dump_stack_lvl+0x189/0x250 [ 139.911861][ T6893] ? __pfx____ratelimit+0x10/0x10 [ 139.911890][ T6893] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.911917][ T6893] ? __pfx__printk+0x10/0x10 [ 139.911961][ T6893] should_fail_ex+0x414/0x560 [ 139.911991][ T6893] __kvm_read_guest_page+0x18d/0x240 [ 139.912027][ T6893] kvm_fetch_guest_virt+0x12b/0x170 [ 139.912054][ T6893] ? __pfx_kvm_fetch_guest_virt+0x10/0x10 [ 139.912086][ T6893] __do_insn_fetch_bytes+0x2f9/0x6d0 [ 139.912120][ T6893] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 139.912146][ T6893] ? _raw_spin_unlock+0x28/0x50 [ 139.912172][ T6893] ? kvm_assign_ioeventfd_idx+0x10/0xa20 [ 139.912205][ T6893] x86_decode_insn+0x33c/0x5310 [ 139.912288][ T6893] ? __pfx_x86_decode_insn+0x10/0x10 [ 139.912330][ T6893] ? __asan_memset+0x22/0x50 [ 139.912354][ T6893] ? init_decode_cache+0x78/0x90 [ 139.912380][ T6893] ? init_emulate_ctxt+0x4d6/0x660 [ 139.912409][ T6893] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 139.912435][ T6893] ? __phys_addr+0xd3/0x180 [ 139.912463][ T6893] ? __pfx_rcu_note_context_switch+0x10/0x10 [ 139.912490][ T6893] ? __get_current_cr3_fast+0x90/0x150 [ 139.912513][ T6893] x86_emulate_instruction+0x60a/0x1ef0 [ 139.912548][ T6893] ? vmx_vcpu_run+0x1743/0x2900 [ 139.912582][ T6893] ? __pfx_x86_emulate_instruction+0x10/0x10 [ 139.912610][ T6893] ? vmx_handle_exit_irqoff+0x29e/0xad0 [ 139.912635][ T6893] ? __pfx_current_save_fsgs+0x10/0x10 [ 139.912663][ T6893] ? __lock_acquire+0xab9/0xd20 [ 139.912685][ T6893] ? handle_io+0x1e3/0x270 [ 139.912713][ T6893] ? __pfx_handle_io+0x10/0x10 [ 139.912741][ T6893] vmx_handle_exit+0x1090/0x18a0 [ 139.912768][ T6893] ? vcpu_run+0x35f2/0x6fa0 [ 139.912815][ T6893] vcpu_run+0x434f/0x6fa0 [ 139.912870][ T6893] ? vcpu_run+0x35f2/0x6fa0 [ 139.912951][ T6893] ? __pfx_vcpu_run+0x10/0x10 [ 139.912987][ T6893] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 139.913025][ T6893] ? rcu_is_watching+0x15/0xb0 [ 139.913054][ T6893] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 139.913088][ T6893] ? __mutex_trylock_common+0x153/0x260 [ 139.913117][ T6893] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 139.913147][ T6893] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 139.913177][ T6893] ? rcu_is_watching+0x15/0xb0 [ 139.913200][ T6893] ? trace_contention_end+0x39/0x120 [ 139.913225][ T6893] ? __mutex_lock+0x335/0x1360 [ 139.913272][ T6893] ? kasan_quarantine_put+0xdd/0x220 [ 139.913304][ T6893] ? kvm_vcpu_ioctl+0x22e/0xe90 [ 139.913336][ T6893] ? __pfx___mutex_lock+0x10/0x10 [ 139.913367][ T6893] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 139.913393][ T6893] ? do_vfs_ioctl+0xbe8/0x1430 [ 139.913416][ T6893] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 139.913441][ T6893] kvm_vcpu_ioctl+0x95c/0xe90 [ 139.913477][ T6893] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 139.913500][ T6893] ? __lock_acquire+0xab9/0xd20 [ 139.913538][ T6893] ? __fget_files+0x2a/0x420 [ 139.913565][ T6893] ? __fget_files+0x2a/0x420 [ 139.913587][ T6893] ? __fget_files+0x3a0/0x420 [ 139.913609][ T6893] ? __fget_files+0x2a/0x420 [ 139.913637][ T6893] ? bpf_lsm_file_ioctl+0x9/0x20 [ 139.913665][ T6893] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 139.913694][ T6893] __se_sys_ioctl+0xfc/0x170 [ 139.913728][ T6893] do_syscall_64+0xfa/0x3b0 [ 139.913745][ T6893] ? lockdep_hardirqs_on+0x9c/0x150 [ 139.913772][ T6893] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.913792][ T6893] ? clear_bhb_loop+0x60/0xb0 [ 139.913818][ T6893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.913837][ T6893] RIP: 0033:0x7fda6ab8eb69 [ 139.913855][ T6893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.913871][ T6893] RSP: 002b:00007fda689f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 139.913894][ T6893] RAX: ffffffffffffffda RBX: 00007fda6adb5fa0 RCX: 00007fda6ab8eb69 [ 139.913908][ T6893] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 139.913919][ T6893] RBP: 00007fda689f6090 R08: 0000000000000000 R09: 0000000000000000 [ 139.913931][ T6893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 139.913943][ T6893] R13: 0000000000000000 R14: 00007fda6adb5fa0 R15: 00007ffc925a8a08 [ 139.913977][ T6893] [ 140.344091][ C1] vkms_vblank_simulate: vblank timer overrun [ 140.547273][ T6901] netlink: 20 bytes leftover after parsing attributes in process `syz.3.258'. [ 140.557523][ T6901] netlink: 830 bytes leftover after parsing attributes in process `syz.3.258'. [ 140.568154][ T6901] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 140.579290][ T6901] /dev/rnullb0: Can't open blockdev [ 140.704771][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 140.872664][ T6908] FAT-fs (rnullb0): bogus number of FAT structure [ 140.880233][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 140.893122][ T10] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 140.904517][ T6908] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 140.922534][ T10] usb 2-1: config 0 has no interface number 0 [ 140.931760][ T10] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 140.973601][ T10] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 140.984066][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.006168][ T10] usb 2-1: Product: syz [ 141.010389][ T10] usb 2-1: Manufacturer: syz [ 141.017464][ T10] usb 2-1: SerialNumber: syz [ 141.054617][ T10] usb 2-1: config 0 descriptor?? [ 141.564516][ T6925] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 141.575216][ T6925] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 141.639833][ T6925] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 141.712925][ T6925] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 141.802449][ T6925] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 141.812588][ T6925] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 141.842930][ T6925] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 141.887411][ T6925] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 141.903937][ T6925] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 141.919467][ T6925] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 141.938081][ T6925] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 141.945736][ T6925] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 141.956337][ T6925] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 142.120676][ T6938] /dev/rnullb0: Can't open blockdev [ 142.146501][ T10] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 142.188993][ T10] usb 2-1: USB disconnect, device number 13 [ 142.394428][ T30] audit: type=1326 audit(1754108331.092:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6940 comm="syz.1.270" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb4e298eb69 code=0x0 [ 142.966097][ T6969] /dev/rnullb0: Can't open blockdev [ 143.372426][ T6975] syz.2.280: attempt to access beyond end of device [ 143.372426][ T6975] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 143.401161][ T6975] FAT-fs (loop2): unable to read boot sector [ 143.634740][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 143.876996][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 143.954627][ T51] Bluetooth: hci3: command 0x0405 tx timeout [ 143.960709][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 144.212220][ T6992] capability: warning: `syz.2.284' uses deprecated v2 capabilities in a way that may be insecure [ 144.243232][ T6983] bridge0: port 3(veth0_to_bridge) entered blocking state [ 144.257792][ T6983] bridge0: port 3(veth0_to_bridge) entered disabled state [ 144.285067][ T6983] veth0_to_bridge: entered allmulticast mode [ 144.294087][ T6987] /dev/rnullb0: Can't open blockdev [ 144.305584][ T6981] /dev/rnullb0: Can't open blockdev [ 144.307065][ T6983] veth0_to_bridge: entered promiscuous mode [ 144.381591][ T6983] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 144.461334][ T6983] bridge0: port 3(veth0_to_bridge) entered blocking state [ 144.469655][ T6983] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 144.504573][ T1215] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 144.686724][ T1215] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.713802][ T1215] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 144.725794][ T7004] /dev/rnullb0: Can't open blockdev [ 144.730749][ T1215] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.745411][ T1215] usb 2-1: config 0 descriptor?? [ 144.758494][ T1215] pwc: Askey VC010 type 2 USB webcam detected. [ 144.926119][ T7008] /dev/rnullb0: Can't open blockdev [ 144.990374][ T1215] pwc: recv_control_msg error -71 req 02 val 2b00 [ 145.006249][ T1215] pwc: recv_control_msg error -71 req 02 val 2700 [ 145.035073][ T1215] pwc: recv_control_msg error -71 req 02 val 2c00 [ 145.075314][ T1215] pwc: recv_control_msg error -71 req 04 val 1000 [ 145.088725][ T1215] pwc: recv_control_msg error -71 req 04 val 1300 [ 145.124769][ T1215] pwc: recv_control_msg error -71 req 04 val 1400 [ 145.144575][ T7014] JFS: discard option not supported on device [ 145.164550][ T1215] pwc: recv_control_msg error -71 req 02 val 2000 [ 145.185881][ T7014] Mount JFS Failure: -22 [ 145.190201][ T7014] jfs_mount failed w/return code = -22 [ 145.204513][ T1215] pwc: recv_control_msg error -71 req 02 val 2100 [ 145.219166][ T1215] pwc: recv_control_msg error -71 req 04 val 1500 [ 145.254556][ T1215] pwc: recv_control_msg error -71 req 02 val 2500 [ 145.283367][ T1215] pwc: recv_control_msg error -71 req 02 val 2400 [ 145.304756][ T7016] /dev/rnullb0: Can't open blockdev [ 145.310600][ T1215] pwc: recv_control_msg error -71 req 02 val 2600 [ 145.334531][ T1215] pwc: recv_control_msg error -71 req 02 val 2900 [ 145.353841][ T1215] pwc: recv_control_msg error -71 req 02 val 2800 [ 145.363877][ T30] audit: type=1326 audit(1754108334.092:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7012 comm="syz.2.289" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4507b8eb69 code=0x0 [ 145.403053][ T1215] pwc: recv_control_msg error -71 req 04 val 1100 [ 145.415133][ T1215] pwc: recv_control_msg error -71 req 04 val 1200 [ 145.432950][ T1215] pwc: Registered as video103. [ 145.455703][ T1215] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 145.456072][ T7021] /dev/rnullb0: Can't open blockdev [ 145.508005][ T1215] usb 2-1: USB disconnect, device number 14 [ 145.622313][ T7024] /dev/rnullb0: Can't open blockdev [ 145.714652][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 145.954525][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 146.034558][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 146.034765][ T5850] Bluetooth: hci3: command 0x0405 tx timeout [ 147.636659][ T7070] /dev/rnullb0: Can't open blockdev [ 147.703598][ T7070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.729623][ T7070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.804279][ T5850] Bluetooth: hci0: command 0x0c1a tx timeout [ 147.994691][ T7073] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 148.046173][ T5850] Bluetooth: hci1: command 0x0c1a tx timeout [ 148.066566][ T7073] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 148.118819][ T5850] Bluetooth: hci3: command 0x0405 tx timeout [ 148.125270][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 148.614566][ T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 148.774393][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 148.786424][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.804483][ T24] usb 4-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 148.827842][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.870336][ T24] usb 4-1: config 0 descriptor?? [ 149.308482][ T24] megaworld 0003:07B5:0312.0002: item fetching failed at offset 10/11 [ 149.404637][ T24] megaworld 0003:07B5:0312.0002: parse failed [ 149.444004][ T24] megaworld 0003:07B5:0312.0002: probe with driver megaworld failed with error -22 [ 149.606226][ T7090] netlink: 132 bytes leftover after parsing attributes in process `syz.2.311'. [ 149.892280][ T5850] Bluetooth: hci0: command 0x0c1a tx timeout [ 150.087507][ T7092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.137231][ T7092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.108891][ T7105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.145070][ T7105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.211236][ T7116] netlink: 60 bytes leftover after parsing attributes in process `syz.2.320'. [ 152.248763][ T7116] netlink: 60 bytes leftover after parsing attributes in process `syz.2.320'. [ 152.279598][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.292207][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.305072][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.317667][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.330286][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.343000][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.355597][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.368200][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.380856][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.393470][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.740030][ T7118] /dev/rnullb0: Can't open blockdev [ 155.253369][ T7117] netlink: 60 bytes leftover after parsing attributes in process `syz.2.320'. [ 155.353579][ T5218] sched: DL replenish lagged too much [ 157.284687][ C1] net_ratelimit: 8390 callbacks suppressed [ 157.284712][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.303968][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.316569][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:30:78:90:8e:53, vlan:0) [ 157.329266][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.342112][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.355021][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:30:78:90:8e:53, vlan:0) [ 157.367561][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.380434][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.393121][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:30:78:90:8e:53, vlan:0) [ 157.405698][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.294634][ C1] net_ratelimit: 9158 callbacks suppressed [ 162.294658][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.295524][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 162.301086][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.314053][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 162.324978][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:30:78:90:8e:53, vlan:0) [ 162.338131][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 162.349004][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.362130][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 162.373038][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.386112][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 167.304502][ C0] net_ratelimit: 10081 callbacks suppressed [ 167.304527][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 167.304737][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.312135][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 167.323199][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:30:78:90:8e:53, vlan:0) [ 167.336095][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 167.347113][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.360083][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 167.371296][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.384243][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 167.395279][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:30:78:90:8e:53, vlan:0) [ 172.314478][ C0] net_ratelimit: 9853 callbacks suppressed [ 172.314503][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 172.314586][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:30:78:90:8e:53, vlan:0) [ 172.321938][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 172.332743][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.345999][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 172.356998][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.370438][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 172.380859][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:30:78:90:8e:53, vlan:0) [ 172.393891][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 172.404766][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.324678][ C1] net_ratelimit: 10653 callbacks suppressed [ 177.324690][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 177.324701][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.325180][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:30:78:90:8e:53, vlan:0) [ 177.332189][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 177.343074][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.356215][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 177.367164][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.380114][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 177.391226][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:30:78:90:8e:53, vlan:0) [ 177.404605][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 182.334611][ C1] net_ratelimit: 10824 callbacks suppressed [ 182.334634][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:30:78:90:8e:53, vlan:0) [ 182.336105][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 182.341035][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.354243][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 182.365097][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.379181][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 182.389190][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:30:78:90:8e:53, vlan:0) [ 182.402354][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 182.413080][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.426324][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 187.344507][ C0] net_ratelimit: 10816 callbacks suppressed [ 187.344531][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 187.344763][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.352374][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 187.363480][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.376522][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 187.387463][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:30:78:90:8e:53, vlan:0) [ 187.400546][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 187.411296][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.424811][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 187.436495][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.354380][ C1] net_ratelimit: 10434 callbacks suppressed [ 192.354405][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.354947][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 192.360883][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:30:78:90:8e:53, vlan:0) [ 192.374080][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 192.384932][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.398243][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 192.409015][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.422046][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 192.433236][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:30:78:90:8e:53, vlan:0) [ 192.446461][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 195.664475][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.688039][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.364463][ C1] net_ratelimit: 10424 callbacks suppressed [ 197.364487][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.364705][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 197.371226][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:30:78:90:8e:53, vlan:0) [ 197.384194][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 197.394822][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.408043][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 197.418846][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.432268][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 197.443027][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:30:78:90:8e:53, vlan:0) [ 197.456379][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 202.374829][ C1] net_ratelimit: 11057 callbacks suppressed [ 202.374854][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:30:78:90:8e:53, vlan:0) [ 202.376110][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 202.381295][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.394699][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 202.405435][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.418558][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 202.429505][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:30:78:90:8e:53, vlan:0) [ 202.442734][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 202.453539][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.466915][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 207.384415][ C1] net_ratelimit: 10979 callbacks suppressed [ 207.384440][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:30:78:90:8e:53, vlan:0) [ 207.384452][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 207.386158][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 207.390922][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.404676][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 207.415527][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.428659][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 207.439478][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:30:78:90:8e:53, vlan:0) [ 207.452756][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 207.463685][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.394938][ C1] net_ratelimit: 10362 callbacks suppressed [ 212.394963][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.395758][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 212.401543][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:30:78:90:8e:53, vlan:0) [ 212.416154][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 212.426132][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.440462][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 212.451320][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.466998][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 212.476786][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:30:78:90:8e:53, vlan:0) [ 212.492632][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 217.404479][ C1] net_ratelimit: 9719 callbacks suppressed [ 217.404502][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.406436][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 217.410911][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:30:78:90:8e:53, vlan:0) [ 217.425350][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 217.434790][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.449474][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 217.459209][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.473659][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 217.483482][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:30:78:90:8e:53, vlan:0) [ 217.498068][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 222.414473][ C1] net_ratelimit: 9918 callbacks suppressed [ 222.414498][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:30:78:90:8e:53, vlan:0) [ 222.415007][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 222.420775][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.435386][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 222.444845][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.459238][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 222.468829][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:30:78:90:8e:53, vlan:0) [ 222.483265][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 222.492935][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.507618][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 227.424342][ C1] net_ratelimit: 9935 callbacks suppressed [ 227.424367][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.426704][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 227.430765][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.445406][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 227.455112][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:30:78:90:8e:53, vlan:0) [ 227.469643][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 227.479450][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.493960][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 227.503852][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.518078][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 232.434629][ C1] net_ratelimit: 10502 callbacks suppressed [ 232.434663][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.436245][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 232.441201][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.454216][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 232.465805][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:30:78:90:8e:53, vlan:0) [ 232.479707][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 232.489816][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.502662][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 232.513989][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.527972][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 237.444708][ C1] net_ratelimit: 11271 callbacks suppressed [ 237.444731][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:30:78:90:8e:53, vlan:0) [ 237.446393][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 237.451130][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.464088][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 237.475483][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.490642][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 237.500058][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:30:78:90:8e:53, vlan:0) [ 237.512801][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 237.524152][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.537952][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 242.454687][ C1] net_ratelimit: 11200 callbacks suppressed [ 242.454712][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.455100][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 242.461278][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.473775][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 242.485154][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:30:78:90:8e:53, vlan:0) [ 242.498936][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 242.509063][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.521784][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 242.533298][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.546975][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 247.464392][ C1] net_ratelimit: 10974 callbacks suppressed [ 247.464416][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:30:78:90:8e:53, vlan:0) [ 247.466985][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 247.470838][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.483500][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 247.494972][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.508442][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 247.518770][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:30:78:90:8e:53, vlan:0) [ 247.531279][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 247.542759][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.556638][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 252.474449][ C0] net_ratelimit: 11018 callbacks suppressed [ 252.474472][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 252.474596][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.481591][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 252.492950][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:30:78:90:8e:53, vlan:0) [ 252.506733][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 252.516957][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.529621][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 252.541002][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.554893][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 252.564898][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:30:78:90:8e:53, vlan:0) [ 256.189650][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.214198][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.274276][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 257.281498][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7077/1:b..l [ 257.289920][ C0] rcu: (detected by 0, t=10503 jiffies, g=21461, q=6560 ncpus=2) [ 257.297751][ C0] task:syz.3.308 state:R running task stack:23928 pid:7077 tgid:7076 ppid:5853 task_flags:0x2040054c flags:0x00004006 [ 257.312352][ C0] Call Trace: [ 257.315680][ C0] [ 257.318648][ C0] __schedule+0x1798/0x4cc0 [ 257.323217][ C0] ? __pfx___schedule+0x10/0x10 [ 257.328106][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 257.333331][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 257.338638][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 257.343953][ C0] preempt_schedule_irq+0xb5/0x150 [ 257.349179][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 257.355373][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 257.361228][ C0] irqentry_exit+0x6f/0x90 [ 257.365672][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 257.371684][ C0] RIP: 0010:kasan_save_stack+0x48/0x60 [ 257.377569][ C0] Code: 89 e7 ba 00 02 00 00 4c 89 ff 31 f6 e8 71 90 5b 09 4c 89 ff be 40 00 00 00 31 d2 e8 62 66 89 ff 4c 89 ff 89 c6 44 89 f2 89 d9 73 4c e3 02 48 8d 65 e8 5b 41 5e 41 5f 5d c3 cc cc cc cc cc 0f [ 257.397371][ C0] RSP: 0018:ffffc90003896910 EFLAGS: 00000246 [ 257.403482][ C0] RAX: 000000000000001d RBX: 0000000000000000 RCX: 0000000000000000 [ 257.411529][ C0] RDX: 0000000000000000 RSI: 000000000000001d RDI: ffffc90003896910 [ 257.419532][ C0] RBP: ffffc90003896b38 R08: 0000000000000000 R09: ffffffff81cee2f6 [ 257.427534][ C0] R10: ffffc90003896818 R11: ffffffff81ac8020 R12: dffffc0000000000 [ 257.435536][ C0] R13: 1ffff92000712d7c R14: 0000000000000000 R15: ffffc90003896910 [ 257.443541][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 257.449726][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 257.455042][ C0] ? kasan_save_stack+0x3e/0x60 [ 257.460006][ C0] ? kasan_record_aux_stack+0xbd/0xd0 [ 257.465399][ C0] ? call_rcu+0x157/0x9c0 [ 257.469758][ C0] ? kmem_cache_free+0x309/0x400 [ 257.474743][ C0] ? blk_update_request+0x57e/0xe60 [ 257.480077][ C0] ? blk_mq_end_request+0x3e/0x70 [ 257.484370][ C1] net_ratelimit: 11240 callbacks suppressed [ 257.484387][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.485123][ C0] ? null_queue_rq+0xbfe/0xe30 [ 257.491672][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:30:78:90:8e:53, vlan:0) [ 257.503085][ C0] ? null_queue_rqs+0x123/0x270 [ 257.503111][ C0] ? blk_mq_dispatch_queue_requests+0x414/0x800 [ 257.503131][ C0] ? blk_mq_flush_plug_list+0x432/0x550 [ 257.503152][ C0] ? blk_add_rq_to_plug+0x175/0x450 [ 257.508356][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.520395][ C0] ? blk_mq_submit_bio+0xbcb/0x2520 [ 257.520419][ C0] ? __submit_bio+0x207/0x5a0 [ 257.525975][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.531540][ C0] ? submit_bio_noacct_nocheck+0x4ab/0xb50 [ 257.537897][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:30:78:90:8e:53, vlan:0) [ 257.542452][ C0] ? __block_write_full_folio+0x810/0xe10 [ 257.554839][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.559535][ C0] ? blkdev_writepages+0xd1/0x170 [ 257.564774][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.576163][ C0] ? do_writepages+0x32b/0x550 [ 257.576192][ C0] ? filemap_write_and_wait_range+0x21f/0x320 [ 257.582507][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:30:78:90:8e:53, vlan:0) [ 257.593962][ C0] ? bdev_release+0x192/0x650 [ 257.593986][ C0] ? blkdev_release+0x15/0x20 [ 257.594007][ C0] ? __fput+0x44c/0xa70 [ 257.600166][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.611681][ C0] ? task_work_run+0x1d4/0x260 [ 257.611711][ C0] ? do_exit+0x6b5/0x2300 [ 257.617302][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.628685][ C0] ? do_group_exit+0x21c/0x2d0 [ 257.628713][ C0] ? get_signal+0x1286/0x1340 [ 257.707903][ C0] ? arch_do_signal_or_restart+0x9a/0x750 [ 257.713769][ C0] ? exit_to_user_mode_loop+0x75/0x110 [ 257.719351][ C0] ? do_syscall_64+0x2bd/0x3b0 [ 257.724158][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.730292][ C0] kasan_record_aux_stack+0xbd/0xd0 [ 257.735520][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 257.741698][ C0] call_rcu+0x157/0x9c0 [ 257.745899][ C0] ? __pfx_call_rcu+0x10/0x10 [ 257.750704][ C0] ? blk_update_request+0x57e/0xe60 [ 257.755948][ C0] kmem_cache_free+0x309/0x400 [ 257.760769][ C0] blk_update_request+0x57e/0xe60 [ 257.765924][ C0] blk_mq_end_request+0x3e/0x70 [ 257.770814][ C0] null_queue_rq+0xbfe/0xe30 [ 257.775534][ C0] null_queue_rqs+0x123/0x270 [ 257.780341][ C0] ? blk_mq_dispatch_queue_requests+0x11a/0x800 [ 257.786709][ C0] blk_mq_dispatch_queue_requests+0x414/0x800 [ 257.792812][ C0] blk_mq_flush_plug_list+0x432/0x550 [ 257.798220][ C0] ? update_io_ticks+0x21f/0x260 [ 257.803271][ C0] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 257.809205][ C0] blk_add_rq_to_plug+0x175/0x450 [ 257.814272][ C0] blk_mq_submit_bio+0xbcb/0x2520 [ 257.819418][ C0] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 257.825012][ C0] __submit_bio+0x207/0x5a0 [ 257.829584][ C0] ? __pfx___submit_bio+0x10/0x10 [ 257.834709][ C0] ? blk_cgroup_bio_start+0x59d/0x640 [ 257.840117][ C0] ? bio_associate_blkg+0x6d/0x230 [ 257.845260][ C0] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 257.850913][ C0] ? bio_associate_blkg+0x6d/0x230 [ 257.856055][ C0] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 257.862843][ C0] ? submit_bio_noacct+0xd65/0x1a70 [ 257.868090][ C0] __block_write_full_folio+0x810/0xe10 [ 257.873673][ C0] ? __pfx_blkdev_get_block+0x10/0x10 [ 257.879079][ C0] blkdev_writepages+0xd1/0x170 [ 257.883955][ C0] ? __pfx_blkdev_writepages+0x10/0x10 [ 257.889473][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 257.894730][ C0] ? __pfx_blkdev_writepages+0x10/0x10 [ 257.900435][ C0] do_writepages+0x32b/0x550 [ 257.905089][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 257.910321][ C0] filemap_write_and_wait_range+0x21f/0x320 [ 257.916517][ C0] ? __pfx_filemap_write_and_wait_range+0x10/0x10 [ 257.922999][ C0] ? __fsnotify_parent+0x242/0x540 [ 257.928147][ C0] ? __pfx___fsnotify_parent+0x10/0x10 [ 257.933632][ C0] ? do_raw_spin_lock+0x121/0x290 [ 257.938708][ C0] bdev_release+0x192/0x650 [ 257.943342][ C0] ? __pfx_blkdev_release+0x10/0x10 [ 257.948621][ C0] blkdev_release+0x15/0x20 [ 257.953158][ C0] __fput+0x44c/0xa70 [ 257.957185][ C0] task_work_run+0x1d4/0x260 [ 257.961825][ C0] ? __pfx_task_work_run+0x10/0x10 [ 257.966993][ C0] do_exit+0x6b5/0x2300 [ 257.971196][ C0] ? do_raw_spin_lock+0x121/0x290 [ 257.976252][ C0] ? __pfx_do_exit+0x10/0x10 [ 257.980901][ C0] do_group_exit+0x21c/0x2d0 [ 257.985520][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 257.990755][ C0] get_signal+0x1286/0x1340 [ 257.995399][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 258.000967][ C0] ? __fget_files+0x2a/0x420 [ 258.005599][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 258.011799][ C0] ? exit_to_user_mode_loop+0x40/0x110 [ 258.017287][ C0] exit_to_user_mode_loop+0x75/0x110 [ 258.022598][ C0] do_syscall_64+0x2bd/0x3b0 [ 258.027217][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 258.032445][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.038531][ C0] ? clear_bhb_loop+0x60/0xb0 [ 258.043235][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.049148][ C0] RIP: 0033:0x7fda6ab8eb69 [ 258.053592][ C0] RSP: 002b:00007fda689f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 258.062029][ C0] RAX: 0000000000f00000 RBX: 00007fda6adb5fa0 RCX: 00007fda6ab8eb69 [ 258.070021][ C0] RDX: 00000000fffffd2c RSI: 0000200000000000 RDI: 0000000000000008 [ 258.078026][ C0] RBP: 00007fda6ac11df1 R08: 0000000000000000 R09: 0000000000000000 [ 258.086019][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.094062][ C0] R13: 0000000000000000 R14: 00007fda6adb5fa0 R15: 00007ffc925a8a08 [ 258.102079][ C0] [ 262.494524][ C1] net_ratelimit: 10624 callbacks suppressed [ 262.494549][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.495200][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 262.501210][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.514515][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 262.524996][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:30:78:90:8e:53, vlan:0) [ 262.537248][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 262.548841][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.562532][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 262.572996][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.585086][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)