last executing test programs: 1m24.848796096s ago: executing program 3 (id=2890): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x6, 0x9, 0xc2, 0x0, 0x2d83, 0x9, 0x100, 0x0, 0x7}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000240)=ANY=[], 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000ff00000000000000fbffffff18110000", @ANYRES32=r4, @ANYBLOB="f9ffffffffffffffb702000014000000b70300000300000085000000052dffccc50694c2f800000000b7020000000800000000000000000000d609080008000000db9af0ff41000000bf860000000000c5a2e782912db73ccf4075a2dbe078b70007080000f8ffffffbfa40000000088ff5e3e51bb00"/132, @ANYRES8=r4, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf9800000000000056080000020000008500000007000000b7000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x69, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r5, r3}, 0xc) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) epoll_create1(0x80000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010010000000000000000500000a140000001100010000000000000000000300000a"], 0x28}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x402, 0x0) socket$inet(0x2, 0x3, 0x3) syz_io_uring_setup(0x1744, &(0x7f0000000540)={0x0, 0x3416, 0x8000, 0x1, 0x10}, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100000000000000000000003000000011"], 0x3c}}, 0x8000) 1m23.262627182s ago: executing program 3 (id=2895): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dvmrp1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000011c0)={'ip_vti0\x00', &(0x7f0000000440)={'gre0\x00', 0x0, 0x8, 0x80, 0x1000, 0x9, {{0x33, 0x4, 0x0, 0xe, 0xcc, 0x63, 0x0, 0x12, 0x695b1e4d40aa0fa3, 0x0, @multicast2, @multicast2, {[@timestamp_addr={0x44, 0x24, 0x39, 0x1, 0x9, [{@multicast2, 0xf0e1}, {@empty, 0xff}, {@loopback, 0x401}, {@multicast1, 0x10000}]}, @cipso={0x86, 0x6}, @rr={0x7, 0x7, 0x5c, [@multicast2]}, @rr={0x7, 0xf, 0xcd, [@multicast2, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0xc, 0xc0, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x3e}, 0x9}]}, @lsrr={0x83, 0xfffffffffffffd78, 0x2f, [@multicast2, @private=0xa010102, @loopback, @dev={0xac, 0x14, 0x14, 0x41}]}, @timestamp_addr={0x44, 0x34, 0xc9, 0x1, 0x9, [{@multicast2, 0x8}, {@dev={0xac, 0x14, 0x14, 0x28}, 0xe9e}, {@empty, 0x9}, {@remote, 0x1ff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@local, 0x10001}]}, @timestamp={0x44, 0x24, 0x10, 0x0, 0x2, [0x3, 0xffffffff, 0x0, 0x30e3, 0x0, 0x0, 0x8, 0xca7e]}]}}}}}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040), 0x0, 0x40810) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000040)={'netdevsim0\x00', 0x4}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f0000000040)={0x2, 0x3, 0xd748, 0x4247, 0x4, 0x2}) r4 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000200)=0x1) ioctl$VIDIOC_S_CROP(r4, 0x4014563c, &(0x7f0000000040)={0x9, {0xf8001004, 0x9, 0x6, 0x80b}}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_buf(r5, 0x6, 0x21, &(0x7f0000000000)="adbcc72ca6d732549f13db1a", 0xc) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000080)={0x8, @raw_data="4e93eac7e957bfbcdaf4e758acf5e6afdd20398cd745ea44d17f2c78cf959f558e71ddce06383095ad262848e9010bc6fe3ece518619e9e2ba74f11691c411384f9ec9aba8060478534d9e0cd0e19ff3fb88614c0a1de5aef2be0a215c6440119b96b0ed5b06da9a9edcaab9911bfb4c5891e067b587f931c53f9ad177e9b486f5e9770e943feb8425821b53e77e8994557adc9fce3fe7acb9eb1e46b449b314b2542702d7cd94c7e2f251dec554f9dcba88c73c9487c396ab0b77cee0d9e3a521567e228aead0c1"}) close_range(r3, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r6, 0x5414, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x84080, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r9, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000600)=""/236, 0xec}], 0x1, 0xfffffffe, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) 1m21.70069386s ago: executing program 1 (id=2898): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) socket(0x840000000002, 0x3, 0xfa) socket$packet(0x11, 0xa, 0x300) socket(0x2a, 0x2, 0x0) syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x7, 0x288}, 0x0, 0x0) syz_io_uring_setup(0x235, &(0x7f00000000c0)={0x0, 0x4533, 0x10100, 0x0, 0x24c}, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2, 0x2f000000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 1m21.317691155s ago: executing program 1 (id=2900): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x333}, 0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x28, 0x5, 0x0) syz_io_uring_setup(0x4f6, 0x0, &(0x7f0000000300)=0x0, &(0x7f00000002c0)) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0xfe4b}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r7 = syz_open_procfs(0x0, &(0x7f0000002440)='statm\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) read$FUSE(r7, &(0x7f0000000400)={0x2020}, 0x2020) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0x0) 1m19.579981744s ago: executing program 1 (id=2906): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f00009ec000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9, &(0x7f00000021c0)=[{0x2000000000000009, 0xffffffff, 0x1}], 0x1, 0xc2fe, 0x0, 0x10, 0x0, 0x57}) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000013c0)=@newtfilter={0xd38, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {}, {0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0xd0c, 0x2, [@TCA_U32_SEL={0x54, 0x5, {0xe, 0x9, 0x5, 0x5, 0x7de, 0x74, 0xe, 0x8000, [{0x80000001, 0x2, 0x9, 0x1ff}, {0x38, 0x1, 0x4}, {0x9, 0xf12, 0x7f, 0xa}, {0x3, 0x1, 0x3, 0x3e}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xffe0}}, @TCA_U32_POLICE={0xcac, 0x6, [@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xdba}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x2, 0x0, 0x6, 0x8, 0x1, 0x1, 0x4, 0x9, 0x3, 0x0, 0x8, 0x8, 0x7, 0xfff, 0x5, 0x9, 0x8d, 0x96, 0x9, 0x8, 0x2, 0x0, 0x5, 0xffffffff, 0x6, 0xfffff682, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x4, 0xbae, 0x40b, 0x4, 0x8, 0x92d, 0x9000000, 0x3, 0x81, 0x100, 0x75, 0xfffffffc, 0x7ff, 0xff, 0xed1, 0x1, 0x8, 0x28e, 0xc82, 0x3, 0x4, 0x510, 0xffffffff, 0x3edc, 0x1, 0xffffffff, 0x3, 0xfffffffe, 0xed5, 0xa452, 0x800000, 0x6, 0x80000001, 0x2, 0x81, 0x10001, 0x3, 0x8, 0xfffffffc, 0x101, 0xfff, 0xd60, 0xfffffe00, 0x8, 0x8, 0xb8, 0xffffff00, 0x27, 0x80000000, 0x7ff, 0xff, 0x8, 0x6, 0x800, 0x7fffffff, 0x3, 0x3, 0x7fffffff, 0x3, 0x80, 0x409, 0xffff, 0x5, 0x2, 0x6, 0x4, 0x5, 0x800, 0xc7, 0xffffffff, 0x7f, 0x6, 0xffff, 0x8, 0x9, 0x8, 0x100, 0x4, 0x4, 0x5, 0xa, 0xd0, 0x7fff, 0x1, 0x4, 0x8, 0x8, 0xfffffffe, 0x6, 0xfff, 0x5, 0x1, 0x1, 0x4, 0x90f, 0x5, 0x0, 0x8, 0x48c4, 0x8, 0x9, 0x0, 0x8, 0x8, 0x7, 0x0, 0xffff, 0x3, 0x3800, 0x80000001, 0x6, 0xf3c, 0x0, 0x1fffe0, 0xffffffff, 0x8, 0x61, 0x9, 0x5, 0x100, 0x80000000, 0x0, 0x10, 0x2, 0x0, 0x5, 0xfffffff3, 0xffffffc0, 0x5, 0xfffffe01, 0x7fffffff, 0x10, 0x9, 0x1, 0x7, 0x5, 0xbef, 0x8, 0x4, 0x5, 0xb, 0x9, 0x0, 0x7, 0x9, 0xd915, 0x36, 0x7, 0x10, 0xe83, 0x2, 0x1, 0xfffeffff, 0xfff, 0xfffffffa, 0x7, 0x81, 0x2, 0x991, 0x8, 0x72926fa4, 0x5, 0x1000, 0xc6e, 0xa, 0x4d6b, 0x3000, 0x1, 0x2, 0x7ff, 0x8, 0xffffffff, 0xc7, 0xfffffd1e, 0x6ae1, 0x7e2becd8, 0x1, 0x8, 0x6, 0x95c6, 0x6, 0x1, 0x2, 0x7, 0x3, 0x6, 0xd, 0x4f, 0xf2a, 0x400, 0x7e, 0x80, 0xb3f4, 0x8f, 0x1242, 0x8, 0x7, 0x8001, 0x40, 0x5, 0x69b, 0x8, 0x3, 0x9, 0xb5, 0x364, 0x7, 0x2, 0xd, 0x39, 0xfff, 0x8, 0x8, 0x3, 0x0, 0x7, 0x4, 0x6, 0x3, 0x8, 0xd, 0x362, 0x1000, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x5, 0x9, 0x8, 0x3, 0x2, 0x6, 0x0, 0xfffffffa, 0x7, 0x1, 0x6, 0x7, 0x7, 0x3, 0x6, 0x80, 0xffff, 0x3, 0x9, 0x7, 0x7f, 0x4, 0x3, 0x400, 0x8000, 0x9, 0x13b, 0x0, 0x612b, 0x4, 0x40, 0x94e, 0x524, 0x8, 0x10001, 0xcc79, 0x1ff, 0xffff0000, 0xfffffffb, 0x400, 0xfd, 0x6, 0x7ff, 0x7, 0x200, 0x8, 0x7, 0xf35, 0x7fff, 0xfdf, 0x2, 0x1, 0x6, 0x2dd, 0xffffffff, 0x681, 0x401, 0xa1, 0x5, 0x0, 0x3, 0xd, 0x7f, 0x2, 0x8, 0x2, 0x9, 0x7, 0x4, 0x9, 0x7, 0x10000, 0x80, 0x1, 0x2, 0x57, 0x473, 0x5, 0xa4da, 0x0, 0x80000001, 0x2, 0x2, 0x5, 0x0, 0xf03, 0x100, 0xc, 0x2, 0x37, 0x7f, 0xd22, 0xff, 0x2, 0xfffffff9, 0x1, 0x7, 0x3f6, 0x0, 0x80000000, 0xce, 0x1a, 0xa641, 0x9, 0x4, 0x4, 0x4, 0x9, 0x8, 0x8, 0x400, 0x5, 0x5, 0x6, 0xfffffff8, 0x712, 0x6, 0xfffffffd, 0x343, 0x401, 0xffff8000, 0x3, 0x9, 0x71d4, 0x6, 0x7ff, 0x3e924ee6, 0xae29, 0x3, 0x9, 0xff, 0x3, 0xfffffffa, 0x7, 0x7fff, 0x5, 0x1, 0x0, 0x7a6, 0x7, 0x6, 0x401, 0x4, 0x2, 0x0, 0x7414, 0x6, 0x2, 0x1, 0x1, 0x1, 0x4, 0x3, 0x9, 0x9, 0x2, 0xfffffff7, 0x2, 0xffffdb61, 0x2, 0xf15c, 0x1000, 0x10, 0x8, 0x6, 0x60c, 0x600000, 0x9, 0x2, 0x7fffffff, 0x2, 0x5, 0x7, 0x1, 0x3, 0x4, 0x0, 0x8, 0x6, 0x5, 0x8, 0x401, 0x4, 0x3, 0x3, 0x0, 0x3163b48, 0x5, 0x79, 0x1, 0x0, 0x7, 0x1, 0xc0000000, 0x9, 0xdac, 0xa46, 0x7, 0x6, 0x6, 0x81, 0x200, 0x1000, 0x6, 0x7f, 0xea721500, 0x7, 0x1, 0xc, 0x2, 0x3e66, 0xd420, 0x7, 0x120, 0x9, 0x1, 0x81, 0x255, 0x5, 0x5, 0x0, 0x76, 0x400, 0x6, 0x4, 0x7, 0x5, 0xa53, 0x9, 0x3, 0x4, 0x91a6, 0x7b0, 0x7, 0x2, 0x1, 0x8, 0x6, 0x100, 0x8, 0x9, 0x8, 0x2, 0x7, 0x6, 0x3, 0x0, 0xfffffff9, 0x9, 0x9, 0x80000001, 0x5, 0x79, 0x5bf, 0x15c]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x3, 0x643, 0x9, 0xff, {0x2, 0x1, 0x8, 0x1, 0xfff9, 0x6}, {0x4e, 0x0, 0x0, 0x2, 0x40, 0x3}, 0x7f, 0xfffffff8, 0x80000000}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8001, 0x8, 0xe6f0, 0x9, 0x2f5, {0x4, 0x0, 0xfff9, 0x8deb, 0xf, 0x401}, {0x2, 0x1, 0x1, 0x200, 0x7, 0x2}, 0x8, 0x12, 0x90000}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x7, 0x2, 0x5, 0x200, 0x8001, 0x1, 0x8, 0x8, 0xe, 0x800, 0x3, 0x9aa, 0x7fff, 0x3, 0x1000, 0x4, 0x2, 0x10000, 0xfffffffa, 0x3, 0x9, 0x3, 0x8, 0x9, 0x2, 0x55e, 0x6, 0x91, 0x4, 0xec5, 0xa6b3, 0x10000, 0x4, 0xffffffff, 0x19bfb7d1, 0x4, 0x1, 0x7, 0x2, 0x0, 0xae25, 0x6, 0x6, 0x5, 0x7, 0xa0, 0x100, 0x8, 0xffffff81, 0x8000, 0x5, 0xe, 0x9, 0x3, 0x2, 0x7, 0x2, 0xad96, 0x6, 0x8, 0x5, 0xf1, 0x101, 0x3, 0x9, 0xe4b9, 0xe, 0x9, 0x3, 0x3, 0x4a, 0x1, 0x0, 0x5, 0x7, 0xfffffffc, 0x0, 0x0, 0x9, 0x40, 0x1, 0x2135, 0x0, 0x4, 0x5, 0x66a, 0xd63a, 0xf6b0, 0x30000000, 0x0, 0x6, 0x9, 0x5, 0x0, 0x5, 0x6, 0x9, 0x5, 0x9, 0x1, 0x5, 0x5, 0x7, 0xf6b0, 0x40, 0x40, 0x3b, 0x0, 0x1, 0x9, 0x7fffffff, 0xe3cf, 0x7, 0x664b, 0x7, 0x8, 0x0, 0x2, 0x71e, 0x0, 0x2, 0x7, 0x4, 0xd6ad, 0x8000, 0x5, 0x8001, 0x2, 0x9, 0x2, 0x80, 0x0, 0xf174, 0x1, 0xa3a6, 0xffffffff, 0x8000, 0x7, 0xf, 0x3, 0x7, 0x80000000, 0x4930, 0x9, 0x2e3c2607, 0x80000000, 0xffffffff, 0x4c, 0xf, 0x800, 0x4, 0x8ded, 0x26f4, 0x6, 0xacdc, 0x5, 0x80, 0x4, 0x7, 0x1, 0x0, 0x686b, 0x8001, 0x7, 0xffffffff, 0x10000, 0x0, 0x3, 0xffffffff, 0x157, 0x40, 0xa, 0x1, 0xd, 0x9, 0xc, 0x6e8, 0x7fffffff, 0x200, 0x6, 0x3, 0x8, 0x7, 0x5, 0x9, 0x5, 0x1, 0x1, 0x80000000, 0x7, 0x7c9, 0xd059, 0xc, 0xffff, 0x10, 0x2, 0x4, 0x8, 0x2, 0x3, 0x5, 0xc, 0x6, 0x80000001, 0x1, 0x5365, 0x7, 0x7, 0x3, 0x2, 0x2, 0x3, 0x4, 0x7, 0xc, 0xe, 0x2, 0x43f6a2be, 0x1, 0x2, 0xfffffff8, 0x0, 0x1, 0x4, 0x9, 0x1000, 0x401, 0x4, 0x5, 0x79d, 0x5, 0x7, 0x3, 0x6, 0x7, 0xe, 0x7, 0x9, 0x80000000, 0x77f48f1c, 0x1000, 0x3, 0x1, 0x4, 0x5, 0xffffffff, 0xffff4f3b, 0x2, 0xbe02, 0x1a, 0x2, 0xa8, 0x80, 0x0, 0x4]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}]}]}}]}, 0xd38}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x9, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0xb, [{0x80000004, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r8 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd0009058202"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r9, &(0x7f0000000280)=ANY=[], 0xff2e) ioctl$TCFLSH(r9, 0x540b, 0x1) syz_usb_ep_write$ath9k_ep1(r8, 0x82, 0xa8, &(0x7f0000000400)=ANY=[]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) 1m19.496249877s ago: executing program 2 (id=2907): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x7, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x11) (async) syz_emit_ethernet(0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000140)="660f3830f566b9800000c00f326635001000000f3024650f01c8c87806b10066b9800000c00f326635004000000f300f01ef66b980f13bc00f326635002000000f300f78f96767660f38f6a318000000baf80c66b82fe6b68366efbafc0cb000ee", 0x61}], 0x1, 0x6b, 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) (async) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) (async) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r8}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000100), 0xcc5c1, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018008000100666962001c00028008000340000000060800024000ecff01080001400000000920000180070001006374000014000280080002400000001108000140000000100900010073797a30000000000900020073797a32"], 0xa0}}, 0x0) 1m19.055403311s ago: executing program 2 (id=2908): sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x4) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0xfffff000) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000004240)=0xc3, 0x4) recvmmsg(r2, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/243, 0xf3}, 0xf338}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0xd}], 0x3fffe16, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) r3 = signalfd(r1, &(0x7f0000000040)={[0x947c]}, 0x8) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000a00)={r6}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000180)={0x9, 0x6, 0x1, 0x80000001, 0x2, 0x0, 0x8fbf, 0x5, r6}, 0x20) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfff7ffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xfff3}, {0xf, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) 1m16.128512198s ago: executing program 2 (id=2913): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6}]}, 0x10) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2102, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r6, 0x40184810, &(0x7f00000002c0)={0x3, 0x200, 0xfffffffe, 0xffff01c2, 0x2, 0xa05}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40042, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000100)={0x5, 0x10, 0xfa00, {&(0x7f00000003c0), r7, 0x1}}, 0x18) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in=@remote, 0x10, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) 1m15.320529838s ago: executing program 4 (id=2915): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="d4050000200020007135550000000008bc202900000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 1m15.137395704s ago: executing program 4 (id=2916): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x100000, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_GROUP={0x8, 0x1b, 0x3}]}, 0x40}}, 0x0) 1m12.52969939s ago: executing program 1 (id=2917): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) socketpair$unix(0x1, 0x2, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, &(0x7f0000001f00)=""/4096, &(0x7f0000000000)=0x1000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x800, 0x20003) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, 0x0) getsockopt$bt_hci(r3, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) syz_usb_connect(0x2, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100003441eb4023398a716a76070203010902240001000040000904ee00029490a00009"], 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x125}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x48}}, 0x0) syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000143edd08b82225646cd3010203010902440001000000000904000000020a0000052406000105240000000d240f0105000000000000000006a41a000000102412"], 0x0) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000180)="79a1a6ad041d228e46eacd78690f31f6084069e99cc37ce896b9300918ae2bd83817659c58d7c7a7a0121ec41a05b5133f6ae318961567e3193f7cf1e97e4a7c590792d159", 0x45}, {&(0x7f0000000240)="521625a0", 0x4}, {&(0x7f00000002c0)="1e0354c7457429780f9ef6b971c5d430f80f943a1c9531961eb785683956e18e41da0387757204d4d7847fd81a0db49724411a4cb4c97f06ea5a9207dabfcd744b43bbc78dfac8f8a543f0ceea378ee5461b553c8d9e513544067ec22116379445", 0x61}, {&(0x7f0000000340)="22a6c4e2ad98741f45c3e53209ee0585313177eb3218193595e253310f63003a06d9ee1840e767d6a30df39799a739f5efe4963f69047196c5f93f03e6828767f518d8b6c090d20dc19b6344586692266b4f2ad07111d9afcfea85904cf3a006e1cd5eeaf4cf2b0442f5d70e2610059c095491b953b69dbb5cdbff9bd28a1072036e5b53318f9e0f7f6e28480360e2719d61e734d5c05a693507019e0293e7a4cd74a4eb9dddf713c4b77e013f70ec370a18ea90c8db901eb1d85d0e733ea1b425e83c214609da9d60c90d97c5e67f7d6a3e7c49c1c3b375f0cd308dd0c623d05ac96744", 0xe4}, {0x0}, {&(0x7f0000000540)="90f82be166a1", 0x6}, {0x0}, {&(0x7f00000005c0)="48626b97db838304d5be9e9dc181131f8407e761e2985933b7fb4d5e2e0bd69c3741403577ccf77c15d83077051b4b1f7814ada29ae0227fa9b0fe5fde3979b5a2a47a490434c99678", 0x49}, {&(0x7f0000000640)="d493bbafb991aa99668f8bd1387d9d601f005bbcccd6fe295a4d827bd6f097631bca129b3c09add4d7d04b7be9196b988dfc2612e556b59c399d60457ca2a19795a41c083ce4dbbebbdba42f001bf867e5de7cd2c902ee9f4498a76f3477271e7b1048d1ebcc4db14144064db12eaaa7713f3215b5ac4fe9f704dac148cce5c698370ec0fb24cc8fbccbde9a5786721805b8645e09068ec5c6cb893768f84f92a16b2f4fc1f58834e92712c8acaffe25a743525fcf4c7f90ebfcc5377d5d23f58ce2f12ded3300498fef483a82d7fd0f89f98c2c09", 0xd5}], 0x9, &(0x7f0000000800)=[@ip_ttl={{0x14, 0x0, 0x2, 0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf}}], 0x30}, 0x24000011) ioctl$VIDIOC_G_MODULATOR(r5, 0xc0445636, &(0x7f0000000100)={0x6, "9d6b5f7685fbd6bd75ad1f4de7bdc9b4b6922b675d80b931d3f44951312b26e4", 0x4, 0x7, 0x200, 0x2, 0x1}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x3f}]}}}]}, 0x3c}}, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x9f7, &(0x7f0000000180)={0x0, 0x992a, 0x10, 0x4, 0x1a6}, &(0x7f0000000040)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$inet_sctp(0x2, 0x5, 0x84) 1m12.529368314s ago: executing program 4 (id=2918): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x135, 0x41000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x8}]}}}]}, 0x3c}}, 0x40800) 1m12.023110571s ago: executing program 2 (id=2919): landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2, 0x3}, 0x18, 0x0) landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$vimc1(0xffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0cc5640, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@gettaction={0x28, 0x32, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$qrtr(0x2a, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) close(r2) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r6, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e14060200a888000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 1m11.945432677s ago: executing program 4 (id=2920): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000001000)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44011}], 0x1, 0x40) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r2, 0x2000000000000225, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0xfffb, r1, &(0x7f0000000340), 0x2d, 0xfdff}]) 1m11.780080738s ago: executing program 0 (id=2921): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0x8a2929b6}}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="feffd98634", 0x5}], 0x1, 0x0, 0x0, 0x900}, 0x60) 1m11.775310974s ago: executing program 4 (id=2922): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="cb0000010101000071100a000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 1m11.46840037s ago: executing program 0 (id=2923): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x2e, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @loopback, 0x11}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2, 0x3ff}, 0x1c) r3 = socket(0x40000000015, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000540), &(0x7f0000000100)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, 0x0, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x4010, r5, 0x0) syz_io_uring_submit(r9, r6, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x6, 0x7, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) 1m11.454525435s ago: executing program 4 (id=2924): socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) select(0x40, &(0x7f00000002c0)={0xfffffffffffffffb, 0x80, 0x6, 0xf, 0x60, 0x7, 0xfffffffffffff8c9, 0xfffffffffffffffc}, &(0x7f0000000340)={0x13, 0x8000, 0x100000001, 0x6, 0x9d, 0x1, 0xc0000000000, 0x7}, &(0x7f00000004c0)={0x0, 0x3, 0x0, 0x4, 0x9, 0x10001, 0x2, 0x4}, &(0x7f0000000880)={0x77359400}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x261880, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000040)={0x8, 0x9, 0x4, {0x2, @vbi={0x9, 0x1, 0x7, 0x34565559, [0x34565348, 0xb22], [0x7], 0x1}}, 0x8}) socket(0x1d, 0x2, 0x6) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r5, 0x40505331, 0x0) syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0x80000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0x2, &(0x7f0000000040)=0x12, 0x4) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1, 0x50) io_setup(0x4fe, &(0x7f00000009c0)=0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r7, 0xf, &(0x7f0000000840)={0x4, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/49, 0x31}, {&(0x7f0000000500)=""/136, 0x88}, {&(0x7f00000005c0)=""/87, 0x57}, {&(0x7f00000006c0)=""/179, 0xb3}], &(0x7f0000000800)=[0x5, 0x8, 0x0, 0x1, 0x6, 0x0, 0x7fffffff]}, 0x20) io_submit(r8, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x40, r7, &(0x7f0000000200)='8', 0x1, 0x10000000005971}]) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001c00010a00000000fbc2"], 0x14}}, 0x20008000) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) 1m10.522720843s ago: executing program 0 (id=2925): r0 = syz_open_dev$dri(&(0x7f0000002d40), 0x0, 0x40) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000002e80)={0x0, 0x0, 0x4, 0xfff, 0x8000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0xfe33) r3 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000140)={0x0, 0x6, 0x4, {0x9, @win={{0xe, 0xfffffffa, 0xe, 0x975}, 0x7, 0xc53, 0x0, 0x5, 0x0, 0xff}}}) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc25c4110, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r7 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x2, 0x80000) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r7, 0xc008551b, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x38, 0x2, [@TCA_FLOW_ACT={0x34, 0x9, 0x0, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x68}}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x2000c88c) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc040}, 0x90) timer_create(0x3, 0x0, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_DELETE(r8, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x2000000000f4, 0x1, 0x2, '\x00', 0x8}}, 0x2a) 1m10.200660826s ago: executing program 2 (id=2926): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xfffffffffffffff4}, @exit], &(0x7f00000003c0)='syzkaller\x00'}, 0x94) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x3}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000034004000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516377ce0ebbadf8017cbec4c2ee5a7ce479acd5e860bf4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dccf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a", 0xd8}], 0x1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x789d2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xb, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0xfffffffd, 0x73, 0x9, 0xf, 0x1a, 0x20, 0x6}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) 1m9.39747591s ago: executing program 1 (id=2927): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x3, 0x3, 0x8006361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x2, 0x8}}]}}}]}, 0x5c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000ff", @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 1m9.354195168s ago: executing program 3 (id=2897): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x3d4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 1m8.844875264s ago: executing program 1 (id=2928): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6}]}, 0x10) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2102, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r6, 0x40184810, &(0x7f00000002c0)={0x3, 0x200, 0xfffffffe, 0xffff01c2, 0x2, 0xa05}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40042, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000100)={0x5, 0x10, 0xfa00, {&(0x7f00000003c0), r7, 0x1}}, 0x18) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r8, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in=@remote, 0x10, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) 1m8.80311065s ago: executing program 0 (id=2929): fsopen(&(0x7f0000000580)='jfs\x00', 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x25a403, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000200)={0xd8a, 0x20000800, 0x2000, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000a00)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0x1d0, 0x1d0, 0x1d0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xe8, 0x110, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}, @common=@unspec=@ipvs={{0x48}, {@ipv4=@empty, [0xff, 0xff000000, 0x0, 0xffffff00], 0x4e21, 0x4, 0x3, 0x4e20, 0x4, 0x1}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xf, 0x2}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000440)=ANY=[@ANYRES8=r2], 0x110) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r5, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(r5, 0x40044620, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = dup(r6) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0x19, 0x1) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0xff, "f56718d953f4b9ca0600"}) write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x19) r9 = fsopen(&(0x7f0000000200)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r9, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r7, 0x8002f515, &(0x7f0000000240)) 1m7.52182899s ago: executing program 3 (id=2931): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random="1c00"}) 1m7.008271483s ago: executing program 2 (id=2932): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() pipe(0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aa"], 0x44}, 0x1, 0x4000000000000, 0x0, 0x8000}, 0x44000) 1m6.821159592s ago: executing program 3 (id=2933): r0 = socket$tipc(0x1e, 0x4, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x83f}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r5) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xc2, 0x80000001, 0x30324c4a, 0x8, 0xff, 0x8, 0x0, 0x6}}) r10 = socket$igmp(0x2, 0x3, 0x2) r11 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_DQBUF(r11, 0xc0585611, &(0x7f00000003c0)=@fd={0xfffffff7, 0x6, 0x4, 0x0, 0x4, {}, {0x3, 0x0, 0x4, 0x1, 0x9, 0x8f, "674cd544"}, 0x0, 0x4, {}, 0x3}) setsockopt$MRT_INIT(r10, 0x0, 0xc8, &(0x7f0000003d40), 0x4) 1m6.319708863s ago: executing program 0 (id=2934): openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x2e, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @loopback, 0x11}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2, 0x3ff}, 0x1c) r3 = socket(0x40000000015, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000540), &(0x7f0000000100)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, 0x0, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x4010, r5, 0x0) syz_io_uring_submit(r9, r6, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x6, 0x7, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) 59.685060227s ago: executing program 0 (id=2935): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x23, 0x5, 0x5) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0x8000000000000001, 0x0, 0x3}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001280)=ANY=[@ANYBLOB="3c0200001900010000000000fbdbdf25e0000001000000000000000000000000fc0100000000000000000000000000004e22000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYRESOCT], 0x23c}}, 0x20000091) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000380)={0x1, r8, r7}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r9 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4, 0x3, 0x1, 0x4de2, 0x1}) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) 49.657490607s ago: executing program 32 (id=2928): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6}]}, 0x10) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2102, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r6, 0x40184810, &(0x7f00000002c0)={0x3, 0x200, 0xfffffffe, 0xffff01c2, 0x2, 0xa05}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40042, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000100)={0x5, 0x10, 0xfa00, {&(0x7f00000003c0), r7, 0x1}}, 0x18) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r8, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in=@remote, 0x10, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) 45.929426584s ago: executing program 3 (id=2937): ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x0, 0x0}) write$ppp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, 0x0}}], 0x2, 0x68840) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009e173610ef171e7206de01020301090212000000040904000000020600000000"], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) (async) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000002c0)={0x20, 0x74b972114d6e661d, 0x1, ']'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000002c0)={0x20, 0x74b972114d6e661d, 0x1, ']'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x40001) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000200)=""/241, 0xf1}], 0x1, 0xd9, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) (async) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x400400, 0x0) (async) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x400400, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc018937e, &(0x7f0000000400)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0\x00'}) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000640)=0x10) (async) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000640)=0x10) write$dsp(r6, &(0x7f0000000000)="00dc58828185f194fcae55fa3af172c6a2919d352671f488b4f9f7d82e243bf1c29289138a84ee26b3d7f2b430adb9f6", 0x30) close(r6) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000140)}, 0x0) 23.585615518s ago: executing program 33 (id=2932): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() pipe(0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aa"], 0x44}, 0x1, 0x4000000000000, 0x0, 0x8000}, 0x44000) 11.499180442s ago: executing program 34 (id=2935): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x23, 0x5, 0x5) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0x8000000000000001, 0x0, 0x3}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001280)=ANY=[@ANYBLOB="3c0200001900010000000000fbdbdf25e0000001000000000000000000000000fc0100000000000000000000000000004e22000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYRESOCT], 0x23c}}, 0x20000091) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000380)={0x1, r8, r7}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r9 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4, 0x3, 0x1, 0x4de2, 0x1}) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) 0s ago: executing program 35 (id=2937): ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x0, 0x0}) write$ppp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, 0x0}}], 0x2, 0x68840) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009e173610ef171e7206de01020301090212000000040904000000020600000000"], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) (async) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000002c0)={0x20, 0x74b972114d6e661d, 0x1, ']'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000002c0)={0x20, 0x74b972114d6e661d, 0x1, ']'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x40001) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000200)=""/241, 0xf1}], 0x1, 0xd9, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) (async) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x400400, 0x0) (async) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x400400, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc018937e, &(0x7f0000000400)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0\x00'}) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000640)=0x10) (async) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000640)=0x10) write$dsp(r6, &(0x7f0000000000)="00dc58828185f194fcae55fa3af172c6a2919d352671f488b4f9f7d82e243bf1c29289138a84ee26b3d7f2b430adb9f6", 0x30) close(r6) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000140)}, 0x0) kernel console output (not intermixed with test programs): 52][ T5956] usb 2-1: config 0 descriptor?? [ 702.821360][T14985] usb 5-1: USB disconnect, device number 75 [ 704.323992][T15259] syzkaller0: entered promiscuous mode [ 704.364705][T15259] syzkaller0: entered allmulticast mode [ 704.770248][T15268] vlan2: entered promiscuous mode [ 704.965546][T15270] program syz.3.2667 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 705.047814][ T5956] usb 2-1: USB disconnect, device number 83 [ 705.548323][T15281] netlink: 'syz.4.2670': attribute type 4 has an invalid length. [ 705.633949][T15277] pimreg: entered allmulticast mode [ 705.675279][ T5920] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 705.819440][T15269] pimreg: left allmulticast mode [ 705.879506][ T5920] usb 2-1: Using ep0 maxpacket: 32 [ 705.897957][ T5920] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 705.956144][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.058673][ T5920] usb 2-1: config 0 descriptor?? [ 706.190945][ T5920] as10x_usb: device has been detected [ 706.228836][ T5920] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 706.299441][ T5920] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 706.368744][ T5920] as10x_usb: error during firmware upload part1 [ 706.406820][ T5920] Registered device nBox DVB-T Dongle [ 706.445248][ T5956] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 706.735216][ T5956] usb 5-1: Using ep0 maxpacket: 32 [ 706.855507][ T5956] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 706.875129][ T5956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.883164][ T5956] usb 5-1: Product: syz [ 706.895096][ T5956] usb 5-1: Manufacturer: syz [ 706.904466][ T5956] usb 5-1: SerialNumber: syz [ 706.918824][ T5956] usb 5-1: config 0 descriptor?? [ 707.170577][T15294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 707.190715][T15294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 707.262866][ T5956] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 707.297964][ T5956] peak_usb 5-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 707.378415][ T5920] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 707.440727][ T5920] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.00 Device [syz1] on syz0 [ 707.572891][ T5956] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 707.632226][ T5956] usb 5-1: USB disconnect, device number 76 [ 709.020708][ T5956] usb 2-1: USB disconnect, device number 84 [ 709.148752][ T5956] Unregistered device nBox DVB-T Dongle [ 709.154092][ T5956] as10x_usb: device has been disconnected [ 710.593003][ T5920] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 710.634662][ T5920] hid-generic 0000:0000:0000.0027: hidraw0: HID v0.00 Device [syz1] on syz0 [ 710.773964][T15340] Set syz0 is full, maxelem 0 reached [ 712.055537][ T1130] wlan0: Trigger new scan to find an IBSS to join [ 713.305192][ T5920] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 713.506112][ T5920] usb 5-1: Using ep0 maxpacket: 32 [ 713.528218][ T5920] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 713.567882][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.608474][ T5920] usb 5-1: config 0 descriptor?? [ 713.685460][ T5920] as10x_usb: device has been detected [ 713.691342][ T5920] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 713.760341][ T5920] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 713.803924][ T5920] as10x_usb: error during firmware upload part1 [ 713.845570][ T5920] Registered device nBox DVB-T Dongle [ 714.132049][T15409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2703'. [ 714.234206][T15409] veth0_to_bridge: left allmulticast mode [ 714.240926][T15409] veth0_to_bridge: left promiscuous mode [ 714.251312][T15409] bridge0: port 1(veth0_to_bridge) entered disabled state [ 714.501267][T15413] vlan3: entered promiscuous mode [ 714.874797][T15420] netlink: 'syz.2.2708': attribute type 10 has an invalid length. [ 715.700988][ T5956] usb 5-1: USB disconnect, device number 77 [ 715.719846][ T5956] Unregistered device nBox DVB-T Dongle [ 715.721102][ T5956] as10x_usb: device has been disconnected [ 717.015140][ T36] wlan0: Trigger new scan to find an IBSS to join [ 717.254409][T15456] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2722'. [ 717.829269][ T5956] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 718.095295][ T5923] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 718.103056][ T5956] usb 2-1: Using ep0 maxpacket: 32 [ 718.155871][ T5956] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 718.164984][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.174899][ T5956] usb 2-1: config 0 descriptor?? [ 718.183680][ T5956] as10x_usb: device has been detected [ 718.191043][ T5956] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 718.204734][ T5956] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 718.232345][ T3837] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 718.270407][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 718.293256][ T5923] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 718.311476][ T5956] as10x_usb: error during firmware upload part1 [ 718.318024][ T5923] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 718.329152][ T5956] Registered device nBox DVB-T Dongle [ 718.350760][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.671708][ T5923] usb 3-1: config 0 descriptor?? [ 718.754528][ T5923] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 719.920263][T15485] program syz.4.2730 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 719.932431][T15485] __vm_enough_memory: pid: 15485, comm: syz.4.2730, bytes: 4503599627366400 not enough memory for the allocation [ 720.422198][ T5920] usb 2-1: USB disconnect, device number 85 [ 720.629786][ T5920] Unregistered device nBox DVB-T Dongle [ 720.631113][ T5920] as10x_usb: device has been disconnected [ 720.671353][T15491] FAULT_INJECTION: forcing a failure. [ 720.671353][T15491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 720.709292][T15491] CPU: 0 UID: 0 PID: 15491 Comm: syz.1.2733 Tainted: G L syzkaller #0 PREEMPT(full) [ 720.709324][T15491] Tainted: [L]=SOFTLOCKUP [ 720.709331][T15491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 720.709341][T15491] Call Trace: [ 720.709348][T15491] [ 720.709355][T15491] dump_stack_lvl+0xe8/0x150 [ 720.709374][T15491] should_fail_ex+0x414/0x560 [ 720.709387][T15491] _copy_from_user+0x2d/0xb0 [ 720.709401][T15491] copy_folio_from_user+0x1e4/0x320 [ 720.709419][T15491] mfill_atomic_copy+0xfe1/0x13f0 [ 720.709437][T15491] ? __pfx_mfill_atomic_copy+0x10/0x10 [ 720.709454][T15491] userfaultfd_ioctl+0x2a01/0x4c80 [ 720.709474][T15491] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.709487][T15491] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 720.709512][T15491] ? kasan_quarantine_put+0xbb/0x1f0 [ 720.709526][T15491] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 720.709539][T15491] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 720.709551][T15491] ? do_vfs_ioctl+0xbe8/0x1430 [ 720.709562][T15491] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 720.709581][T15491] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 720.709603][T15491] ? __fget_files+0x2a/0x420 [ 720.709616][T15491] ? __fget_files+0x2a/0x420 [ 720.709626][T15491] ? __fget_files+0x3a0/0x420 [ 720.709637][T15491] ? __fget_files+0x2a/0x420 [ 720.709650][T15491] ? bpf_lsm_file_ioctl+0x9/0x20 [ 720.709661][T15491] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 720.709673][T15491] __se_sys_ioctl+0xfc/0x170 [ 720.709689][T15491] do_syscall_64+0xec/0xf80 [ 720.709700][T15491] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.709709][T15491] ? trace_irq_disable+0x37/0x100 [ 720.709722][T15491] ? clear_bhb_loop+0x60/0xb0 [ 720.709734][T15491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.709744][T15491] RIP: 0033:0x7fe34758f749 [ 720.709755][T15491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 720.709763][T15491] RSP: 002b:00007fe34837e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 720.709776][T15491] RAX: ffffffffffffffda RBX: 00007fe3477e5fa0 RCX: 00007fe34758f749 [ 720.709784][T15491] RDX: 0000200000000000 RSI: 00000000c028aa03 RDI: 0000000000000006 [ 720.709790][T15491] RBP: 00007fe34837e090 R08: 0000000000000000 R09: 0000000000000000 [ 720.709797][T15491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 720.709803][T15491] R13: 00007fe3477e6038 R14: 00007fe3477e5fa0 R15: 00007fe34790fa28 [ 720.709818][T15491] [ 721.045413][ T5923] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 721.055876][ T5939] usb 3-1: USB disconnect, device number 98 [ 721.217796][T15498] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2734'. [ 721.237616][ T5923] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 721.263320][ T5923] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 721.341620][ T5923] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 721.359249][ T5923] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 721.398366][ T5923] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 721.431013][ T5923] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 721.446980][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 721.465959][ T5923] usb 1-1: Product: syz [ 721.470175][ T5923] usb 1-1: Manufacturer: syz [ 721.494413][ T5923] cdc_wdm 1-1:1.0: skipping garbage [ 721.505201][ T5923] cdc_wdm 1-1:1.0: skipping garbage [ 721.525525][ T5923] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 721.531994][ T5923] cdc_wdm 1-1:1.0: Unknown control protocol [ 721.595150][ T5956] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 721.745490][ T5939] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 721.760563][T15489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 721.787083][ T5956] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 721.818693][T15489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 721.835365][ T5956] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 721.876528][T15489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 721.912770][ T5939] usb 5-1: Using ep0 maxpacket: 16 [ 721.919561][ T5956] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 721.921943][ T5939] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 721.931105][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 721.938949][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.952372][T15489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 721.964258][ T5939] usb 5-1: Product: syz [ 721.985104][ T5939] usb 5-1: Manufacturer: syz [ 721.994991][ T5939] usb 5-1: SerialNumber: syz [ 722.007545][ T5956] usb 2-1: SerialNumber: syz [ 722.017125][ T5923] usb 1-1: USB disconnect, device number 71 [ 722.216002][ T5939] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 722.242297][ T5939] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 722.314020][ T5956] usb 2-1: 0:2 : does not exist [ 722.320531][ T5939] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 722.322474][ T5956] usb 2-1: unit 5: unexpected type 0x0a [ 722.341171][ T5939] usb 5-1: media controller created [ 722.397032][ T5939] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 722.434266][ T5956] usb 2-1: USB disconnect, device number 86 [ 722.486783][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 722.626414][ T5939] zl10353_read_register: readreg error (reg=127, ret==-32) [ 722.685624][T15522] netlink: 'syz.3.2744': attribute type 10 has an invalid length. [ 722.748758][T15523] netlink: 'syz.3.2744': attribute type 10 has an invalid length. [ 722.749511][ T5939] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 722.815351][ T5939] usb 5-1: USB disconnect, device number 78 [ 722.992814][T15534] Cannot find add_set index 2 as target [ 723.002696][T15535] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2749'. [ 723.165773][T15542] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2752'. [ 723.195307][ T5956] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 723.347066][ T5956] usb 4-1: Using ep0 maxpacket: 8 [ 723.356438][ T5956] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 723.374274][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.391843][ T5956] usb 4-1: Product: syz [ 723.408208][ T5956] usb 4-1: Manufacturer: syz [ 723.415129][ T5956] usb 4-1: SerialNumber: syz [ 723.428667][ T5956] usb 4-1: config 0 descriptor?? [ 723.482726][ T5956] radio-usb-si4713 4-1:0.0: Si4713 development board discovered: (10C4:8244) [ 724.355233][ T5921] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 724.424141][ T5956] radio-usb-si4713 4-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 724.444544][ T5956] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 724.466284][ T5956] usb 4-1: USB disconnect, device number 64 [ 724.505222][ T5921] usb 1-1: Using ep0 maxpacket: 16 [ 724.512186][ T5921] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 724.541661][ T5921] usb 1-1: config 1 has no interface number 1 [ 724.592589][ T5921] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 724.677987][ T5921] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 724.696305][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.714815][ T5921] usb 1-1: Product: syz [ 724.756071][ T5921] usb 1-1: Manufacturer: syz [ 724.767162][ T5921] usb 1-1: SerialNumber: syz [ 725.018384][ T5921] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 725.055365][ T9] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 725.088004][ T5921] usb 1-1: USB disconnect, device number 72 [ 725.235316][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 725.246292][ T9] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 725.276274][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.289379][ T9] usb 5-1: Product: syz [ 725.299679][ T9] usb 5-1: Manufacturer: syz [ 725.310819][ T9] usb 5-1: SerialNumber: syz [ 725.543880][ T9] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 725.567245][ T9] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 725.593273][ T9] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 725.615501][ T9] usb 5-1: media controller created [ 725.634197][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 725.887360][ T9] zl10353_read_register: readreg error (reg=127, ret==-110) [ 725.901520][T15581] netlink: 'syz.0.2763': attribute type 23 has an invalid length. [ 725.940118][T15581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2763'. [ 725.972634][ T9] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 726.043820][ T9] usb 5-1: USB disconnect, device number 79 [ 728.455716][T15613] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2770'. [ 728.589588][T15619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2773'. [ 731.272116][T15649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2781'. [ 731.320160][T15649] netlink: 'syz.1.2781': attribute type 21 has an invalid length. [ 731.333393][T15649] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2781'. [ 731.639666][T15649] tipc: Enabling of bearer rejected, already enabled [ 733.900383][T15687] netlink: 'syz.2.2787': attribute type 4 has an invalid length. [ 734.193207][T15685] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2788'. [ 734.369159][T15684] loop6: detected capacity change from 0 to 524288000 [ 734.452713][T15686] netlink: 388 bytes leftover after parsing attributes in process `syz.3.2786'. [ 735.350369][ T5939] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 735.361420][ T5939] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [syz1] on syz0 [ 736.116217][T15710] netlink: 'syz.1.2796': attribute type 4 has an invalid length. [ 737.975527][ T5921] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 738.145256][ T5921] usb 1-1: Using ep0 maxpacket: 32 [ 738.153348][ T5921] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 738.264816][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.309848][ T5921] usb 1-1: config 0 descriptor?? [ 738.436855][ T5921] as10x_usb: device has been detected [ 738.457697][ T5921] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 739.377158][T15744] FAULT_INJECTION: forcing a failure. [ 739.377158][T15744] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 739.449079][T15744] CPU: 1 UID: 0 PID: 15744 Comm: syz.4.2804 Tainted: G L syzkaller #0 PREEMPT(full) [ 739.449107][T15744] Tainted: [L]=SOFTLOCKUP [ 739.449114][T15744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 739.449123][T15744] Call Trace: [ 739.449130][T15744] [ 739.449137][T15744] dump_stack_lvl+0xe8/0x150 [ 739.449165][T15744] should_fail_ex+0x414/0x560 [ 739.449187][T15744] _copy_from_user+0x2d/0xb0 [ 739.449209][T15744] copy_folio_from_user+0x1e4/0x320 [ 739.449238][T15744] mfill_atomic_copy+0xfe1/0x13f0 [ 739.449271][T15744] ? __pfx_mfill_atomic_copy+0x10/0x10 [ 739.449303][T15744] userfaultfd_ioctl+0x2a01/0x4c80 [ 739.449330][T15744] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.449357][T15744] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 739.449405][T15744] ? kasan_quarantine_put+0xbb/0x1f0 [ 739.449429][T15744] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 739.449449][T15744] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 739.449471][T15744] ? do_vfs_ioctl+0xbe8/0x1430 [ 739.449489][T15744] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 739.449513][T15744] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 739.449550][T15744] ? __fget_files+0x2a/0x420 [ 739.449570][T15744] ? __fget_files+0x2a/0x420 [ 739.449587][T15744] ? __fget_files+0x3a0/0x420 [ 739.449604][T15744] ? __fget_files+0x2a/0x420 [ 739.449625][T15744] ? bpf_lsm_file_ioctl+0x9/0x20 [ 739.449642][T15744] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 739.449663][T15744] __se_sys_ioctl+0xfc/0x170 [ 739.449688][T15744] do_syscall_64+0xec/0xf80 [ 739.449705][T15744] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.449721][T15744] ? trace_irq_disable+0x37/0x100 [ 739.449742][T15744] ? clear_bhb_loop+0x60/0xb0 [ 739.449763][T15744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.449779][T15744] RIP: 0033:0x7f13fb98f749 [ 739.449796][T15744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 739.449811][T15744] RSP: 002b:00007f13fc8d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 739.449830][T15744] RAX: ffffffffffffffda RBX: 00007f13fbbe5fa0 RCX: 00007f13fb98f749 [ 739.449844][T15744] RDX: 0000200000000000 RSI: 00000000c028aa03 RDI: 0000000000000006 [ 739.449856][T15744] RBP: 00007f13fc8d7090 R08: 0000000000000000 R09: 0000000000000000 [ 739.449868][T15744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 739.449878][T15744] R13: 00007f13fbbe6038 R14: 00007f13fbbe5fa0 R15: 00007f13fbd0fa28 [ 739.449905][T15744] [ 739.966171][ T5921] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 739.980988][ T5921] as10x_usb: error during firmware upload part1 [ 740.146385][ T5921] Registered device nBox DVB-T Dongle [ 740.668213][T15758] fuse: Unknown parameter 'grˆ Rp_çSiid' [ 740.786990][T15730] netlink: 'syz.2.2802': attribute type 16 has an invalid length. [ 740.807028][T15730] netlink: 'syz.2.2802': attribute type 17 has an invalid length. [ 740.844013][T15730] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 741.107568][ T5921] usb 1-1: USB disconnect, device number 73 [ 741.191855][ T5921] Unregistered device nBox DVB-T Dongle [ 741.196863][ T5921] as10x_usb: device has been disconnected [ 744.700695][T15818] bridge0: entered allmulticast mode [ 744.708992][T15818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2823'. [ 744.725414][ T5921] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 744.806550][T15818] bridge0 (unregistering): left allmulticast mode [ 744.895182][ T5921] usb 2-1: Using ep0 maxpacket: 32 [ 744.902798][ T5921] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 744.923266][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.980201][ T5921] usb 2-1: config 0 descriptor?? [ 745.012133][ T5921] as10x_usb: device has been detected [ 745.034922][ T5921] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 745.088907][ T5921] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 745.124586][ T5921] as10x_usb: error during firmware upload part1 [ 745.150256][ T5921] Registered device nBox DVB-T Dongle [ 745.242455][T15825] netlink: 'syz.4.2825': attribute type 32 has an invalid length. [ 745.294910][T15825] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2825'. [ 745.358290][T15823] Set syz0 is full, maxelem 0 reached [ 747.023603][T15850] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2830'. [ 747.440977][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.448529][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.781332][T15865] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2834'. [ 747.853808][T15867] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2835'. [ 747.878375][ T5921] usb 2-1: USB disconnect, device number 87 [ 748.141444][ T5921] Unregistered device nBox DVB-T Dongle [ 748.149378][ T5921] as10x_usb: device has been disconnected [ 748.285351][ T5956] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 748.445166][ T5956] usb 1-1: Using ep0 maxpacket: 16 [ 748.551341][ T5956] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 748.584563][ T5956] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.602837][ T5956] usb 1-1: Product: syz [ 748.613866][ T5956] usb 1-1: Manufacturer: syz [ 748.625343][ T5956] usb 1-1: SerialNumber: syz [ 748.848737][ T5956] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 748.892552][T15886] netlink: 'syz.2.2841': attribute type 23 has an invalid length. [ 748.900693][T15886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2841'. [ 748.946683][ T5956] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 748.969832][ T5956] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 748.987366][ T5956] usb 1-1: media controller created [ 748.996381][ T5921] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 749.091761][ T5956] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 749.157791][ T5921] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 749.171712][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 749.193434][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 749.213742][ T5921] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 749.271570][ T5956] zl10353_read_register: readreg error (reg=127, ret==-32) [ 749.291054][ T5921] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 749.463383][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.518138][T15892] FAULT_INJECTION: forcing a failure. [ 749.518138][T15892] name failslab, interval 1, probability 0, space 0, times 0 [ 749.531608][ T5921] usb 4-1: config 0 descriptor?? [ 749.559869][ T5956] dvb_usb_gl861 1-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 749.595142][ T5956] usb 1-1: USB disconnect, device number 74 [ 749.707120][T15892] CPU: 1 UID: 0 PID: 15892 Comm: syz.4.2842 Tainted: G L syzkaller #0 PREEMPT(full) [ 749.707150][T15892] Tainted: [L]=SOFTLOCKUP [ 749.707157][T15892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 749.707168][T15892] Call Trace: [ 749.707176][T15892] [ 749.707186][T15892] dump_stack_lvl+0xe8/0x150 [ 749.707216][T15892] should_fail_ex+0x414/0x560 [ 749.707239][T15892] should_failslab+0xa8/0x100 [ 749.707262][T15892] kmem_cache_alloc_noprof+0x88/0x710 [ 749.707288][T15892] ? io_submit_one+0x11f/0x1430 [ 749.707309][T15892] io_submit_one+0x11f/0x1430 [ 749.707328][T15892] ? irqentry_exit+0x5e8/0x670 [ 749.707348][T15892] ? lockdep_hardirqs_on+0x7b/0x110 [ 749.707365][T15892] ? irqentry_exit+0x5e8/0x670 [ 749.707386][T15892] ? __pfx_io_submit_one+0x10/0x10 [ 749.707404][T15892] ? __might_fault+0xb0/0x130 [ 749.707437][T15892] ? __might_fault+0xb0/0x130 [ 749.707464][T15892] __se_sys_io_submit+0x185/0x320 [ 749.707490][T15892] ? __pfx___se_sys_io_submit+0x10/0x10 [ 749.707510][T15892] ? ksys_write+0x22a/0x250 [ 749.707542][T15892] do_syscall_64+0xec/0xf80 [ 749.707560][T15892] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.707576][T15892] ? trace_irq_disable+0x37/0x100 [ 749.707596][T15892] ? clear_bhb_loop+0x60/0xb0 [ 749.707616][T15892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.707633][T15892] RIP: 0033:0x7f13fb98f749 [ 749.707649][T15892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 749.707665][T15892] RSP: 002b:00007f13fc8d7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 749.707685][T15892] RAX: ffffffffffffffda RBX: 00007f13fbbe5fa0 RCX: 00007f13fb98f749 [ 749.707699][T15892] RDX: 0000200000000640 RSI: 0000000000000001 RDI: 00007f13fc8b6000 [ 749.707712][T15892] RBP: 00007f13fc8d7090 R08: 0000000000000000 R09: 0000000000000000 [ 749.707723][T15892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 749.707735][T15892] R13: 00007f13fbbe6038 R14: 00007f13fbbe5fa0 R15: 00007f13fbd0fa28 [ 749.707763][T15892] [ 750.171874][ T5921] plantronics 0003:047F:FFFF.0029: ignoring exceeding usage max [ 750.213228][ T5921] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 751.256167][ T1152] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 751.465178][ T5956] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 751.480099][T15917] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2849'. [ 751.619405][ T5956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 751.638101][ T5921] usb 4-1: reset high-speed USB device number 65 using dummy_hcd [ 751.639219][T15921] xt_CT: You must specify a L4 protocol and not use inversions on it [ 751.671237][ T5956] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 751.720176][ T5956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 751.759332][ T5956] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 751.795120][ T5921] usb 4-1: device descriptor read/64, error -32 [ 751.805725][ T5956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.835142][ T5939] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 751.847226][ T5956] usb 3-1: config 0 descriptor?? [ 751.882409][ T5956] em28xx 3-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 752.006144][ T5939] usb 1-1: Using ep0 maxpacket: 32 [ 752.017596][ T5939] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 752.034556][ T5939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.049150][T15923] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2851'. [ 752.057528][ T5921] usb 4-1: reset high-speed USB device number 65 using dummy_hcd [ 752.066935][ T5939] usb 1-1: config 0 descriptor?? [ 752.173177][ T5939] as10x_usb: device has been detected [ 752.190614][ T5939] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 752.272000][ T5939] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 752.275332][ T5921] usb 4-1: device descriptor read/64, error -32 [ 752.314174][ T5939] as10x_usb: error during firmware upload part1 [ 752.339594][ T5939] Registered device nBox DVB-T Dongle [ 752.569310][ T5921] usb 4-1: reset high-speed USB device number 65 using dummy_hcd [ 752.695943][ T5939] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 752.865210][ T5939] usb 2-1: Using ep0 maxpacket: 16 [ 752.875123][ T5921] usb 4-1: device not accepting address 65, error -71 [ 752.875432][ T5939] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 752.892975][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.903700][ T5939] usb 2-1: Product: syz [ 752.926981][ T5939] usb 2-1: Manufacturer: syz [ 752.942209][ T5939] usb 2-1: SerialNumber: syz [ 753.195696][ T5939] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 753.214216][ T5939] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 753.250712][ T5939] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 753.274942][ T5939] usb 2-1: media controller created [ 753.344400][ T5939] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 753.595875][ T5939] zl10353_read_register: readreg error (reg=127, ret==-32) [ 753.658706][ T5923] usb 4-1: USB disconnect, device number 65 [ 753.768301][ T5939] dvb_usb_gl861 2-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 753.821623][ T5939] usb 2-1: USB disconnect, device number 88 [ 753.984924][T15943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2857'. [ 754.073712][ T5921] usb 3-1: USB disconnect, device number 99 [ 754.086325][T15943] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2857'. [ 754.189028][T15943] vlan2: entered allmulticast mode [ 754.210351][T15946] netlink: 'syz.2.2858': attribute type 4 has an invalid length. [ 754.380762][ T5939] usb 1-1: USB disconnect, device number 75 [ 754.457240][ T6170] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 754.563526][ T5939] Unregistered device nBox DVB-T Dongle [ 754.578697][ T5939] as10x_usb: device has been disconnected [ 754.825363][ T5921] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 755.001656][ T5921] usb 3-1: config 64 has an invalid interface number: 146 but max is 0 [ 755.017531][ T5921] usb 3-1: config 64 has no interface number 0 [ 755.075255][ T5921] usb 3-1: config 64 interface 146 has no altsetting 0 [ 755.216237][ T5921] usb 3-1: New USB device found, idVendor=05d1, idProduct=7001, bcdDevice=53.43 [ 755.232129][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.240672][ T5921] usb 3-1: Product: syz [ 755.244874][ T5921] usb 3-1: Manufacturer: syz [ 755.323408][ T5921] usb 3-1: SerialNumber: syz [ 755.672294][T15957] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 755.745173][T15957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2862'. [ 755.873690][ T5921] ftdi_sio 3-1:64.146: FTDI USB Serial Device converter detected [ 755.893652][ T5921] ftdi_sio ttyUSB0: unknown device type: 0x5343 [ 755.912253][ T5921] usb 3-1: USB disconnect, device number 100 [ 755.924009][ T5921] ftdi_sio 3-1:64.146: device disconnected [ 756.506064][T15980] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2867'. [ 756.855526][ T5939] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 757.072499][ T5939] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 757.080285][ T5939] usb 2-1: can't read configurations, error -61 [ 757.245207][ T5939] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 757.461970][ T5939] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 757.491458][ T5939] usb 2-1: can't read configurations, error -61 [ 757.539050][ T5939] usb usb2-port1: attempt power cycle [ 757.904192][ T9] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 758.124374][ T5939] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 758.198655][ T5939] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 758.206814][ T5939] usb 2-1: can't read configurations, error -61 [ 758.275127][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 758.433692][ T5939] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 758.507018][ T5939] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 758.514843][ T5939] usb 2-1: can't read configurations, error -61 [ 758.525794][ T9] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 758.576171][ T5939] usb usb2-port1: unable to enumerate USB device [ 758.597437][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.706829][ T9] usb 3-1: config 0 descriptor?? [ 758.735132][ T5920] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 758.777294][ T9] as10x_usb: device has been detected [ 758.783158][ T9] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 758.878843][ T9] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 758.892292][ T9] as10x_usb: error during firmware upload part1 [ 758.901982][ T5920] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 758.956118][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 758.998627][ T9] Registered device nBox DVB-T Dongle [ 759.032598][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 759.183234][ T5920] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 759.377236][ T5920] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 759.451690][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.548822][ T5920] usb 4-1: config 0 descriptor?? [ 759.984073][ T5920] plantronics 0003:047F:FFFF.002A: ignoring exceeding usage max [ 760.062704][ T5920] plantronics 0003:047F:FFFF.002A: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 760.456346][ T5923] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 760.636148][ T5923] usb 5-1: device descriptor read/64, error -71 [ 760.875191][ T5923] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 760.999840][ T5921] usb 3-1: USB disconnect, device number 101 [ 761.006128][ T5923] usb 5-1: device descriptor read/64, error -71 [ 761.084911][ T5921] Unregistered device nBox DVB-T Dongle [ 761.091897][ T5921] as10x_usb: device has been disconnected [ 761.116602][ T5923] usb usb5-port1: attempt power cycle [ 761.223832][T16032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2881'. [ 761.276981][T16034] FAULT_INJECTION: forcing a failure. [ 761.276981][T16034] name failslab, interval 1, probability 0, space 0, times 0 [ 761.428294][T16034] CPU: 0 UID: 0 PID: 16034 Comm: syz.2.2881 Tainted: G L syzkaller #0 PREEMPT(full) [ 761.428321][T16034] Tainted: [L]=SOFTLOCKUP [ 761.428328][T16034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 761.428337][T16034] Call Trace: [ 761.428344][T16034] [ 761.428352][T16034] dump_stack_lvl+0xe8/0x150 [ 761.428381][T16034] should_fail_ex+0x414/0x560 [ 761.428401][T16034] should_failslab+0xa8/0x100 [ 761.428423][T16034] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 761.428448][T16034] ? __alloc_skb+0x198/0x3a0 [ 761.428467][T16034] ? __alloc_skb+0x1dc/0x3a0 [ 761.428484][T16034] ? __local_bh_enable_ip+0xd0/0x130 [ 761.428502][T16034] ? __alloc_skb+0x198/0x3a0 [ 761.428520][T16034] __alloc_skb+0x1dc/0x3a0 [ 761.428543][T16034] netlink_sendmsg+0x5c6/0xb30 [ 761.428573][T16034] ? __pfx_netlink_sendmsg+0x10/0x10 [ 761.428599][T16034] ? aa_sock_msg_perm+0xf1/0x1b0 [ 761.428622][T16034] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 761.428636][T16034] ? __pfx_netlink_sendmsg+0x10/0x10 [ 761.428669][T16034] __sock_sendmsg+0x21c/0x270 [ 761.428697][T16034] ____sys_sendmsg+0x505/0x820 [ 761.428722][T16034] ? __pfx_____sys_sendmsg+0x10/0x10 [ 761.428750][T16034] ? import_iovec+0x74/0xa0 [ 761.428774][T16034] ___sys_sendmsg+0x21f/0x2a0 [ 761.428796][T16034] ? __pfx____sys_sendmsg+0x10/0x10 [ 761.428847][T16034] ? __fget_files+0x2a/0x420 [ 761.428866][T16034] ? __fget_files+0x3a0/0x420 [ 761.428895][T16034] __x64_sys_sendmsg+0x19b/0x260 [ 761.428919][T16034] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 761.428948][T16034] ? __pfx_ksys_write+0x10/0x10 [ 761.428976][T16034] do_syscall_64+0xec/0xf80 [ 761.428997][T16034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.429013][T16034] ? trace_irq_disable+0x37/0x100 [ 761.429034][T16034] ? clear_bhb_loop+0x60/0xb0 [ 761.429055][T16034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.429070][T16034] RIP: 0033:0x7f06c1b8f749 [ 761.429086][T16034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 761.429101][T16034] RSP: 002b:00007f06c2a81038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 761.429120][T16034] RAX: ffffffffffffffda RBX: 00007f06c1de6090 RCX: 00007f06c1b8f749 [ 761.429134][T16034] RDX: 0000000000000004 RSI: 0000200000000580 RDI: 0000000000000007 [ 761.429146][T16034] RBP: 00007f06c2a81090 R08: 0000000000000000 R09: 0000000000000000 [ 761.429156][T16034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 761.429166][T16034] R13: 00007f06c1de6128 R14: 00007f06c1de6090 R15: 00007f06c1f0fa28 [ 761.429194][T16034] [ 761.695105][ T5923] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 761.740870][ T5923] usb 5-1: device descriptor read/8, error -71 [ 761.995208][ T5923] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 762.023994][ T5923] usb 5-1: device descriptor read/8, error -71 [ 762.163726][ T5921] usb 4-1: USB disconnect, device number 66 [ 762.269186][ T5923] usb usb5-port1: unable to enumerate USB device [ 763.791628][T16054] Set syz0 is full, maxelem 0 reached [ 763.925169][ T5920] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 764.115131][ T5920] usb 5-1: Using ep0 maxpacket: 32 [ 764.129741][ T5920] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 764.193300][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.274671][ T5920] usb 5-1: config 0 descriptor?? [ 764.367133][ T5920] as10x_usb: device has been detected [ 764.427476][ T5920] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 764.592636][ T5920] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 764.672728][ T5920] as10x_usb: error during firmware upload part1 [ 764.699773][ T5920] Registered device nBox DVB-T Dongle [ 764.718199][T16076] vivid-000: disconnect [ 765.402825][T16070] vivid-000: reconnect [ 765.545317][ T5923] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 765.673872][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 765.698175][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 765.715284][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 765.724428][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 765.748104][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 765.819785][ T5923] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 765.848349][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 765.867580][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 765.904062][ T5923] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 765.980440][ T5923] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 766.045432][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.130358][ T5923] usb 3-1: config 0 descriptor?? [ 766.571968][ T5923] plantronics 0003:047F:FFFF.002B: ignoring exceeding usage max [ 766.599425][ T5923] plantronics 0003:047F:FFFF.002B: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 766.629213][T16095] chnl_net:caif_netlink_parms(): no params data found [ 766.805389][ T5920] usb 5-1: USB disconnect, device number 84 [ 766.861662][ T5920] Unregistered device nBox DVB-T Dongle [ 766.893155][ T5920] as10x_usb: device has been disconnected [ 766.945205][ T5923] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 767.064954][T16095] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.081132][T16095] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.101639][T16095] bridge_slave_0: entered allmulticast mode [ 767.107862][ T5923] usb 1-1: Using ep0 maxpacket: 32 [ 767.143558][ T5923] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 767.153154][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.172700][ T5923] usb 1-1: Product: syz [ 767.186749][T16095] bridge_slave_0: entered promiscuous mode [ 767.200430][ T5923] usb 1-1: Manufacturer: syz [ 767.214108][ T5923] usb 1-1: SerialNumber: syz [ 767.251577][ T5923] usb 1-1: config 0 descriptor?? [ 767.272757][T16095] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.290672][T16095] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.312440][T16095] bridge_slave_1: entered allmulticast mode [ 767.344478][T16095] bridge_slave_1: entered promiscuous mode [ 767.469782][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.485232][T16102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 767.517641][T16102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 767.589151][ T5923] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 767.712695][ T5923] peak_usb 1-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 767.820180][ T5833] Bluetooth: hci5: command tx timeout [ 767.866508][ T5923] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 767.938735][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.949786][ T5923] usb 1-1: USB disconnect, device number 76 [ 768.038214][T16095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 768.095355][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.181045][T16095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 768.191677][ T5921] usb 3-1: USB disconnect, device number 102 [ 768.307023][ T12] $Hÿ: (slave netdevsim0): Releasing backup interface [ 768.314317][ T12] $Hÿ: (slave netdevsim0): the permanent HWaddr of slave - 6e:78:f7:2e:29:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 768.369581][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.511124][T16095] team0: Port device team_slave_0 added [ 768.530334][T16095] team0: Port device team_slave_1 added [ 768.646318][ T5920] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 768.668326][T16095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 768.696497][T16095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 768.738604][T16095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 768.814008][T16095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 768.815167][ T5920] usb 5-1: Using ep0 maxpacket: 32 [ 768.821352][T16095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 768.853773][T16095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 768.871947][ T5920] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 768.895171][ T5920] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 768.925795][ T5920] usb 5-1: config 0 interface 0 has no altsetting 0 [ 768.962338][T16095] hsr_slave_0: entered promiscuous mode [ 768.965145][ T5920] usb 5-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 768.980680][T16095] hsr_slave_1: entered promiscuous mode [ 768.993585][T16095] debugfs: 'hsr0' already exists in 'hsr' [ 769.021392][T16095] Cannot create hsr debugfs directory [ 769.027330][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.048955][ T5921] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 769.064070][ T5920] usb 5-1: config 0 descriptor?? [ 769.143067][ T12] veth0_to_bridge: left allmulticast mode [ 769.155287][ T12] veth0_to_bridge: left promiscuous mode [ 769.175249][ T12] bridge0: port 2(veth0_to_bridge) entered disabled state [ 769.198278][ T12] vlan0: left promiscuous mode [ 769.216013][ T5921] usb 2-1: Using ep0 maxpacket: 32 [ 769.223945][ T12] bridge_slave_0: left promiscuous mode [ 769.249321][ T5921] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 769.258064][ T12] vlan0: left allmulticast mode [ 769.270551][ T5921] usb 2-1: config 0 has no interface number 0 [ 769.277893][ T12] bridge_slave_0: left allmulticast mode [ 769.295352][ T12] bridge0: port 1(vlan0) entered disabled state [ 769.296496][T16121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 769.310832][T16121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 769.318896][ T5921] usb 2-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 769.360491][ T5921] usb 2-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 769.400090][ T5920] usbhid 5-1:0.0: can't add hid device: -71 [ 769.418536][ T5921] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 769.427687][ T5920] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 769.436199][ T5920] usb 5-1: USB disconnect, device number 85 [ 769.475222][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.505218][ T5921] usb 2-1: Product: syz [ 769.516086][ T5921] usb 2-1: Manufacturer: syz [ 769.520752][ T5921] usb 2-1: SerialNumber: syz [ 769.565128][ T5921] usb 2-1: config 0 descriptor?? [ 769.593745][ T5921] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 769.831142][ T5921] usb 2-1: qt2_setup_urbs - submit read urb failed -90 [ 769.840751][T16146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2911'. [ 769.850006][ T5921] quatech2 2-1:0.51: probe with driver quatech2 failed with error -90 [ 769.867643][T16146] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2911'. [ 769.896722][ T5833] Bluetooth: hci5: command tx timeout [ 770.175138][ T5921] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 770.337293][ T5921] usb 5-1: Using ep0 maxpacket: 32 [ 770.373397][ T5921] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 770.398711][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.461358][ T5921] usb 5-1: config 0 descriptor?? [ 770.485809][ T5921] as10x_usb: device has been detected [ 770.493446][ T5921] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 770.550793][ T5921] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 770.582762][ T5921] as10x_usb: error during firmware upload part1 [ 770.603870][ T5921] Registered device nBox DVB-T Dongle [ 770.857149][ T12] $Hÿ (unregistering): (slave wlan1): Releasing backup interface [ 770.878219][ T12] $Hÿ (unregistering): Released all slaves [ 771.144515][ T12] bond1 (unregistering): Released all slaves [ 771.407522][ T12] bond2 (unregistering): Released all slaves [ 771.572624][ T12] bond0 (unregistering): Released all slaves [ 771.732284][ T12] tipc: Left network mode [ 771.975204][ T5833] Bluetooth: hci5: command tx timeout [ 772.350489][ T5920] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 772.387542][ T12] hsr_slave_0: left promiscuous mode [ 772.398096][ T12] hsr_slave_1: left promiscuous mode [ 772.421924][ T5956] usb 2-1: USB disconnect, device number 93 [ 772.521388][ T5920] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 772.543254][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 772.554940][ T12] batadv1 (unregistering): left promiscuous mode [ 772.573397][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 772.584308][ T12] team0 (unregistering): Port device batadv1 removed [ 772.611785][ T5920] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 772.651881][ T5920] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 772.721821][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.730811][ T5921] usb 5-1: USB disconnect, device number 86 [ 772.733833][ T5920] usb 3-1: config 0 descriptor?? [ 772.783773][ T5921] Unregistered device nBox DVB-T Dongle [ 772.810714][ T5921] as10x_usb: device has been disconnected [ 773.211976][ T5920] plantronics 0003:047F:FFFF.002C: ignoring exceeding usage max [ 773.242557][ T5920] plantronics 0003:047F:FFFF.002C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 774.066155][ T5833] Bluetooth: hci5: command tx timeout [ 774.645228][ T5920] usb 3-1: reset high-speed USB device number 103 using dummy_hcd [ 774.785228][ T5920] usb 3-1: device descriptor read/64, error -32 [ 775.025331][ T5920] usb 3-1: reset high-speed USB device number 103 using dummy_hcd [ 775.165282][ T5920] usb 3-1: device descriptor read/64, error -32 [ 775.405143][ T5920] usb 3-1: reset high-speed USB device number 103 using dummy_hcd [ 775.435386][ T5920] usb 3-1: device descriptor read/8, error -32 [ 775.470676][T16164] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 775.695904][ T5920] usb 3-1: reset high-speed USB device number 103 using dummy_hcd [ 775.744564][T16175] bond10: Unable to set down delay as MII monitoring is disabled [ 775.756547][ T5920] usb 3-1: device descriptor read/8, error -32 [ 775.764860][T16175] bond10 (unregistering): Released all slaves [ 775.845625][T16157] raw-gadget.1 gadget.2: failed to queue suspend event [ 775.902260][T16157] raw-gadget.1 gadget.2: failed to queue disconnect event [ 775.910995][ T9] usb 3-1: USB disconnect, device number 103 [ 775.955414][ T5830] usb 2-1: new full-speed USB device number 94 using dummy_hcd [ 776.000714][T16095] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 776.053022][T16095] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 776.094612][T16095] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 776.151138][T16095] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 776.189342][ T5830] usb 2-1: config 0 has an invalid interface number: 238 but max is 0 [ 776.216659][ T5830] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 776.284340][ T5830] usb 2-1: config 0 has no interface number 0 [ 776.343808][T16190] netlink: 'syz.2.2919': attribute type 10 has an invalid length. [ 776.361585][ T5830] usb 2-1: config 0 interface 238 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 776.443433][ T5830] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=76.6a [ 776.459929][ T5830] usb 2-1: New USB device strings: Mfr=7, Product=2, SerialNumber=3 [ 776.499543][ T5830] usb 2-1: Product: syz [ 776.524023][ T5830] usb 2-1: Manufacturer: syz [ 776.542159][ T5830] usb 2-1: SerialNumber: syz [ 776.552916][ T12] IPVS: stop unused estimator thread 0... [ 776.583013][ T5830] usb 2-1: config 0 descriptor?? [ 776.631436][ T5830] comedi comedi5: Wrong number of endpoints [ 776.655686][ T5830] ni6501 2-1:0.238: driver 'ni6501' failed to auto-configure device. [ 776.731236][T16095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 776.814166][T16095] 8021q: adding VLAN 0 to HW filter on device team0 [ 776.860865][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.868071][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 776.939990][ T6170] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.947192][ T6170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 777.195182][ T5956] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 777.270215][T16095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 777.365229][ T5956] usb 5-1: Using ep0 maxpacket: 32 [ 777.380027][ T5956] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 777.395085][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.435725][T16095] veth0_vlan: entered promiscuous mode [ 777.442342][ T5956] usb 5-1: config 0 descriptor?? [ 777.480263][T16095] veth1_vlan: entered promiscuous mode [ 777.510176][ T5956] as10x_usb: device has been detected [ 777.561305][ T5956] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 777.633299][ T5956] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 777.643423][T16095] veth0_macvtap: entered promiscuous mode [ 777.700828][ T5956] as10x_usb: error during firmware upload part1 [ 777.709508][T16095] veth1_macvtap: entered promiscuous mode [ 777.733204][ T5956] Registered device nBox DVB-T Dongle [ 777.774578][T16095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 777.868263][T16095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 777.983053][ T3837] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.998974][ T3837] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.023095][ T3837] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.042727][ T3837] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.145334][T16211] netlink: 'syz.2.2926': attribute type 21 has an invalid length. [ 778.170574][T16211] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2926'. [ 778.260117][T16211] tipc: Enabled bearer , priority 0 [ 778.271924][T16211] syzkaller0: entered promiscuous mode [ 778.277904][T16211] syzkaller0: entered allmulticast mode [ 778.449417][T16151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.466441][T16151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 778.514678][T16151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.530494][T16151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 778.630450][ T5921] usb 2-1: USB disconnect, device number 94 [ 779.167969][T16208] tipc: Resetting bearer [ 779.401970][T16208] tipc: Disabling bearer [ 779.645297][ T5920] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 779.833142][ T5921] usb 5-1: USB disconnect, device number 87 [ 779.889043][ T5921] Unregistered device nBox DVB-T Dongle [ 779.891225][ T5920] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 779.891803][ T5921] as10x_usb: device has been disconnected [ 779.942310][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 780.012837][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 780.081362][ T5920] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 780.137592][ T5920] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 780.183921][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.372663][ T5920] usb 2-1: config 0 descriptor?? [ 780.466916][ T5892] tipc: Node number set to 1609416955 [ 780.614244][T16228] bridge0: port 3(veth0_to_bridge) entered blocking state [ 780.689378][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 780.705783][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 780.715263][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 780.738689][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 780.746656][T16228] bridge0: port 3(veth0_to_bridge) entered disabled state [ 780.746715][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 780.754152][T16228] veth0_to_bridge: entered allmulticast mode [ 780.870769][ T5920] plantronics 0003:047F:FFFF.002D: ignoring exceeding usage max [ 780.912053][T16228] veth0_to_bridge: entered promiscuous mode [ 780.956020][T16228] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 780.969741][T16228] bridge0: port 3(veth0_to_bridge) entered blocking state [ 780.977327][T16228] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 780.986981][ T5920] plantronics 0003:047F:FFFF.002D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 782.225799][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 782.238078][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 782.250814][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 782.263059][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 782.275818][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 782.288019][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 782.300753][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 782.305536][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 782.313167][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 782.325137][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 782.358223][ T5939] usb 2-1: reset high-speed USB device number 95 using dummy_hcd [ 783.013142][ T36] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 783.077743][ T5841] Bluetooth: hci2: command tx timeout [ 783.370511][ T5939] usb 2-1: device descriptor read/64, error -32 [ 784.379635][ T5939] usb 2-1: reset high-speed USB device number 95 using dummy_hcd [ 784.657737][ T5939] usb 2-1: device descriptor read/64, error -32 [ 785.009183][ T5939] usb 2-1: reset high-speed USB device number 95 using dummy_hcd [ 785.107902][ T5841] Bluetooth: hci2: command tx timeout [ 785.979160][ T5939] usb 2-1: device descriptor read/8, error -32 [ 786.329396][T16230] chnl_net:caif_netlink_parms(): no params data found [ 786.583431][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 787.178935][ T5841] Bluetooth: hci2: command tx timeout [ 787.235129][ C0] net_ratelimit: 17964 callbacks suppressed [ 787.235151][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 787.235410][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 787.241466][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 787.254265][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 787.265540][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 787.277462][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 787.289248][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 787.302015][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 787.313322][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 787.325252][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 787.409441][ T5939] usb 2-1: reset high-speed USB device number 95 using dummy_hcd [ 788.800253][ T5939] usb 2-1: device descriptor read/8, error -32 [ 789.018278][ T5939] raw-gadget.0 gadget.1: failed to queue suspend event [ 789.392652][ T5841] Bluetooth: hci2: command tx timeout [ 789.966571][ T5920] usb 2-1: USB disconnect, device number 95 [ 792.245252][ C0] net_ratelimit: 19173 callbacks suppressed [ 792.245274][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 792.245364][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 792.251584][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 792.264535][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 792.275609][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 792.287451][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 792.299383][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 792.311368][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 792.323229][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 792.336145][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 797.074189][ C1] sched: DL replenish lagged too much [ 797.255308][ C0] net_ratelimit: 18601 callbacks suppressed [ 797.255328][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 797.255371][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 797.261656][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 797.273609][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 797.285557][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 797.298370][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 797.309476][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 797.322383][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 797.333571][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 797.345670][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 798.382121][ T5920] raw-gadget.0 gadget.1: failed to queue reset event [ 801.418188][ T5920] raw-gadget.0 gadget.1: failed to queue resume event [ 802.265179][ C1] net_ratelimit: 18930 callbacks suppressed [ 802.265199][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 802.265326][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 802.271477][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 802.283451][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 802.295467][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 802.307284][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 802.320137][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 802.331293][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 802.343912][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 802.355245][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 803.061379][ T5920] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 805.132548][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 805.159684][ T5920] raw-gadget.0 gadget.1: failed to queue reset event [ 807.275097][ C1] net_ratelimit: 19222 callbacks suppressed [ 807.275118][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 807.275431][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 807.281739][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 807.293446][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 807.306242][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 807.317418][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 807.329448][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 807.341311][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 807.354191][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 807.365377][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 809.131885][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.204989][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.129155][ T5920] raw-gadget.0 gadget.1: failed to queue resume event [ 812.285366][ C0] net_ratelimit: 18491 callbacks suppressed [ 812.285386][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 812.285635][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 812.291658][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 812.304376][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 812.315835][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 812.327755][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 812.339608][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 812.351727][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 812.363528][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 812.376121][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 815.758169][ T5920] usb 2-1: device descriptor read/64, error -32 [ 817.295081][ C0] net_ratelimit: 18268 callbacks suppressed [ 817.295103][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 817.295714][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 817.301375][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 817.314351][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 817.325433][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 817.337431][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 817.349346][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 817.361280][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 817.373223][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 817.385819][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 819.251433][ T5920] raw-gadget.0 gadget.1: failed to queue suspend event [ 822.305083][ C0] net_ratelimit: 18627 callbacks suppressed [ 822.305104][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 822.305323][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 822.311379][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 822.324137][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 822.335499][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 822.348355][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 822.359390][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 822.371375][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 822.383204][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 822.395342][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 825.513290][ T1157] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 826.043098][ T5920] raw-gadget.0 gadget.1: failed to queue reset event [ 827.315141][ C0] net_ratelimit: 19999 callbacks suppressed [ 827.315162][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 827.315402][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 827.321482][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 827.333565][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 827.345387][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 827.358345][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 827.369294][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 827.381453][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 827.393227][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 827.406181][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 830.628610][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 832.325275][ C0] net_ratelimit: 17661 callbacks suppressed [ 832.325298][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 832.325868][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 832.331717][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 832.343564][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 832.355721][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 832.368506][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 832.379725][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 832.392595][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 832.403681][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 832.415718][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 837.335074][ C0] net_ratelimit: 19114 callbacks suppressed [ 837.335096][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 837.335989][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 837.341453][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 837.353407][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 837.365429][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 837.377351][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 837.389271][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 837.401195][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 837.413191][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 837.426049][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 838.057655][ T5920] raw-gadget.0 gadget.1: failed to queue resume event [ 840.207938][ T5920] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 841.097687][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 841.105594][ T5920] raw-gadget.0 gadget.1: failed to queue reset event [ 841.228301][ T5920] raw-gadget.0 gadget.1: failed to queue resume event [ 842.345070][ C0] net_ratelimit: 18652 callbacks suppressed [ 842.345090][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 842.345602][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 842.351459][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 842.363515][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 842.375578][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 842.387715][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 842.399437][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 842.411586][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 842.423441][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 842.436509][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 843.948786][ T5920] usb 2-1: device descriptor read/64, error -32 [ 844.263526][ T5920] raw-gadget.0 gadget.1: failed to queue suspend event [ 844.543141][T16218] raw-gadget.0 gadget.1: failed to queue disconnect event [ 846.420989][ T5920] usb usb2-port1: attempt power cycle [ 847.355242][ C0] net_ratelimit: 17742 callbacks suppressed [ 847.355253][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 847.355263][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 847.355683][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 847.361655][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 847.373599][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 847.385540][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 847.397509][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 847.409330][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 847.421232][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 847.434163][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 852.365142][ C0] net_ratelimit: 18483 callbacks suppressed [ 852.365163][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 852.365971][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 852.371454][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 852.384295][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 852.395529][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 852.407410][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 852.419324][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 852.432109][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 852.443195][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 852.455817][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 857.375185][ C0] net_ratelimit: 18630 callbacks suppressed [ 857.375208][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 857.376189][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 857.381544][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 857.394365][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 857.405491][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 857.417570][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 857.429531][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 857.441425][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 857.453168][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 857.465228][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 862.385046][ C0] net_ratelimit: 18184 callbacks suppressed [ 862.385067][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 862.385135][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 862.391466][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 862.403414][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 862.415468][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 862.428280][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 862.439341][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 862.452201][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 862.463439][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 862.475290][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 863.309141][ T5841] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 866.598689][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 867.395121][ C1] net_ratelimit: 17652 callbacks suppressed [ 867.395142][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 867.395209][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 867.402160][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 867.413481][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 867.425495][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 867.437623][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 867.449665][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 867.461632][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 867.473428][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 867.485374][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 868.189052][T16093] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 868.236002][T16093] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 868.289654][T16093] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 868.744602][T16093] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 868.857747][T16093] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 869.299175][T16271] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 869.403984][T16271] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 869.649693][T16271] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 869.747551][T16271] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 870.568506][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.626642][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.405259][ C0] net_ratelimit: 18089 callbacks suppressed [ 872.405281][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 872.405623][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 872.411893][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 872.424488][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 872.435723][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 872.447723][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 872.459630][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 872.472501][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 872.483522][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 872.496305][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 872.768526][T16271] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 873.005657][T16271] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 873.189310][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 873.526595][T16247] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 876.037012][T16271] Bluetooth: hci6: command tx timeout [ 876.106474][ T5833] Bluetooth: hci4: command tx timeout [ 876.703755][T16247] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 876.718117][T16272] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 876.782627][T16272] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 877.415085][ C0] net_ratelimit: 16888 callbacks suppressed [ 877.415106][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 877.415179][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 877.421414][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 877.433422][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 877.445315][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 877.458290][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 877.469217][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 877.482528][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 877.493425][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 877.505257][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 878.349709][T16093] Bluetooth: hci6: command tx timeout [ 878.498882][T16274] Bluetooth: hci4: command tx timeout [ 880.472217][T16274] Bluetooth: hci6: command tx timeout [ 880.548913][ T5833] Bluetooth: hci3: command tx timeout [ 880.662170][T16093] Bluetooth: hci4: command tx timeout [ 882.425082][ C1] net_ratelimit: 18865 callbacks suppressed [ 882.425103][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 882.425351][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 882.431374][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 882.443303][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 882.455363][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 882.467279][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 882.479241][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 882.491142][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 882.503965][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 882.515209][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 883.805327][ T5841] Bluetooth: hci3: command tx timeout [ 883.810775][ T5841] Bluetooth: hci6: command tx timeout [ 883.829027][ T5841] Bluetooth: hci4: command tx timeout [ 886.870360][ T5841] Bluetooth: hci3: command tx timeout [ 887.435173][ C0] net_ratelimit: 17614 callbacks suppressed [ 887.435194][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 887.435531][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 887.441603][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 887.453434][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 887.465353][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 887.478571][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 887.489330][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 887.501992][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 887.513209][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 887.525118][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 888.949211][ T5841] Bluetooth: hci3: command tx timeout [ 892.445148][ C0] net_ratelimit: 19225 callbacks suppressed [ 892.445170][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 892.446327][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 892.451536][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 892.464549][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 892.475410][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 892.488188][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 892.499447][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 892.511386][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 892.523203][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 892.535284][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 894.724769][ T5841] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 897.455283][ C1] net_ratelimit: 18961 callbacks suppressed [ 897.455303][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 897.455321][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 897.461594][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 897.473582][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 897.486418][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 897.497690][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 897.510235][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 897.521463][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 897.533492][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 897.545451][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 900.688061][T16274] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 902.465099][ C1] net_ratelimit: 19146 callbacks suppressed [ 902.465120][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 902.465385][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 902.471425][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 902.483327][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 902.495332][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 902.507289][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 902.520062][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 902.531308][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 902.543961][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 902.555218][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 902.809336][T16268] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 907.475283][ C0] net_ratelimit: 18436 callbacks suppressed [ 907.475303][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 907.475404][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 907.481671][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 907.493550][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 907.505608][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 907.518454][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 907.529520][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 907.542108][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 907.553400][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 907.565348][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 910.652113][T16247] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 912.485095][ C0] net_ratelimit: 18093 callbacks suppressed [ 912.485118][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 912.485965][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 912.491477][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 912.503328][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 912.515279][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 912.528133][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 912.539190][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 912.551085][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 912.563172][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 912.576027][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 916.500924][ T50] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 917.495050][ C0] net_ratelimit: 18005 callbacks suppressed [ 917.495070][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 917.496157][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 917.501472][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 917.513332][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 917.525453][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 917.538222][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 917.549254][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 917.561963][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 917.573182][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 917.585173][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 922.505047][ C0] net_ratelimit: 18669 callbacks suppressed [ 922.505068][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 922.505666][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 922.511429][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 922.523305][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 922.535184][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 922.547289][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 922.559147][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 922.570974][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 922.582974][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 922.595694][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 927.515397][ C0] net_ratelimit: 18415 callbacks suppressed [ 927.515418][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 927.516067][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 927.521687][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 927.534480][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 927.545762][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 927.557613][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 927.569550][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 927.582561][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 927.593593][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 927.605386][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 931.867381][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.885456][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.525117][ C0] net_ratelimit: 17993 callbacks suppressed [ 932.525137][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 932.526091][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 932.531471][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 932.544321][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 932.555480][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 932.567372][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 932.579247][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 932.592366][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 932.603251][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 932.615246][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 937.535144][ C0] net_ratelimit: 18578 callbacks suppressed [ 937.535165][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 937.535307][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 937.541475][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 937.553427][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 937.565464][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 937.578061][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 937.589304][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 937.601958][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 937.613310][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 937.625234][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 942.545067][ C1] net_ratelimit: 18795 callbacks suppressed [ 942.545078][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 942.545087][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 942.546229][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 942.551397][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 942.563403][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 942.576018][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 942.588629][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 942.599638][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 942.611543][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 942.623671][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 946.492841][T16249] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 947.555145][ C0] net_ratelimit: 18150 callbacks suppressed [ 947.555167][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 947.555898][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 947.561474][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 947.573500][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 947.585405][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 947.598362][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 947.609275][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 947.621539][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 947.633593][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 947.646830][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 952.565042][ C0] net_ratelimit: 19331 callbacks suppressed [ 952.565064][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 952.565726][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 952.571401][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 952.584237][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 952.595428][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 952.607448][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 952.619427][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 952.632164][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 952.643308][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 952.655306][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 955.985909][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 956.920407][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 957.102733][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 957.364436][T16249] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 957.575344][ C0] net_ratelimit: 18605 callbacks suppressed [ 957.575365][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 957.575532][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 957.581730][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 957.593737][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 957.605614][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 957.617678][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 957.629589][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 957.641527][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 957.653557][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 957.666325][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 958.083687][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 959.133977][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 959.807675][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 959.876984][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 961.794787][T16274] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 962.143600][T16274] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 962.279750][T16274] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 962.585037][ C0] net_ratelimit: 18609 callbacks suppressed [ 962.585057][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 962.585943][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 962.591357][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 962.604228][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 962.615609][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 962.627687][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 962.639477][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 962.651710][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 962.663554][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 962.675454][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 966.061333][ T5841] Bluetooth: hci0: command tx timeout [ 967.595336][ C0] net_ratelimit: 18623 callbacks suppressed [ 967.595356][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 967.595437][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 967.605237][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 967.614427][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 967.625671][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 967.637834][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 967.649992][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 967.661738][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 967.673584][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 967.685422][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 968.302228][T16274] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 968.324157][T16274] Bluetooth: hci0: command tx timeout [ 969.613073][T16093] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 969.776425][T16093] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 970.086156][T16093] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 970.481351][T16093] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 970.625597][T16093] Bluetooth: hci0: command tx timeout [ 971.790012][T16093] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 972.524817][T16093] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 972.605212][ C1] net_ratelimit: 18556 callbacks suppressed [ 972.605234][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 972.605246][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 972.605536][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 972.612408][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 972.623500][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 972.635375][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 972.647275][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 972.660712][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 972.671399][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 972.684079][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 972.948313][T16093] Bluetooth: hci0: command tx timeout [ 972.972178][T16093] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 973.414149][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 973.489143][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 976.710537][T16274] Bluetooth: hci1: command tx timeout [ 977.515858][ T5833] Bluetooth: hci5: command tx timeout [ 977.615166][ C0] net_ratelimit: 18513 callbacks suppressed [ 977.615187][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 977.615830][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 977.621559][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 977.633487][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 977.645449][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 977.657463][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 977.669423][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 977.681321][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 977.693361][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 977.706241][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 978.831980][T16274] Bluetooth: hci1: command tx timeout [ 979.682578][T16274] Bluetooth: hci5: command tx timeout [ 980.865806][ T5833] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 980.872603][ T5833] Bluetooth: hci1: command tx timeout [ 981.747505][ T5833] Bluetooth: hci5: command tx timeout [ 982.625232][ C0] net_ratelimit: 18654 callbacks suppressed [ 982.625255][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 982.625370][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 982.631637][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 982.643532][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 982.655614][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 982.668509][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 982.679589][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 982.692438][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 982.703576][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 982.715595][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 983.084343][ T5833] Bluetooth: hci1: command tx timeout [ 983.833586][ T5833] Bluetooth: hci5: command tx timeout [ 985.604519][T13641] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 987.635173][ C0] net_ratelimit: 18869 callbacks suppressed [ 987.635195][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 987.635243][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 987.641532][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 987.654334][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 987.665578][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 987.677604][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 987.689570][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 987.702450][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 987.713515][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 987.725328][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 992.645354][ C0] net_ratelimit: 18925 callbacks suppressed [ 992.645380][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 992.645646][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 992.651622][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 992.663715][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 992.675646][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 992.688742][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 992.699681][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 992.711512][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 992.723619][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 992.737131][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 993.209861][T16249] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 993.234316][ T31] INFO: task syz.1.1413:10924 blocked for more than 143 seconds. [ 993.255820][ T31] Tainted: G L syzkaller #0 [ 993.474053][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.492502][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.658654][ T31] Blocked by coredump. [ 993.687397][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 994.568503][ T31] task:syz.1.1413 state:D stack:26848 pid:10924 tgid:10924 ppid:5849 task_flags:0x40044c flags:0x00080003 [ 995.503967][T16274] Bluetooth: hci4: command 0x0406 tx timeout [ 996.252903][ T31] Call Trace: [ 996.268493][ T31] [ 996.271480][ T31] __schedule+0x149b/0x4fd0 [ 996.948765][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 996.954220][ T31] ? __pfx___schedule+0x10/0x10 [ 997.655129][ C1] net_ratelimit: 19065 callbacks suppressed [ 997.655150][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 997.655165][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 997.662291][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 997.673436][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 997.685267][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 997.697278][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 997.710114][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 997.721193][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 997.733934][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 997.745180][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 998.287818][ T31] ? schedule+0x91/0x360 [ 998.292135][ T31] schedule+0x165/0x360 [ 998.948841][ T31] schedule_preempt_disabled+0x13/0x30 [ 998.954366][ T31] __mutex_lock+0x7e6/0x1350 [ 999.971295][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1000.429957][T16093] Bluetooth: hci6: command 0x0406 tx timeout [ 1000.448009][ T31] ? tun_chr_close+0x3e/0x1c0 [ 1000.452758][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1001.987244][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 1001.992472][ T31] tun_chr_close+0x3e/0x1c0 [ 1002.665202][ C0] net_ratelimit: 18550 callbacks suppressed [ 1002.665223][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1002.665730][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1002.671620][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1002.683431][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1002.695602][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 1002.708293][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1002.719361][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 1002.732073][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1002.743331][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:32:bc:c3:1f:94, vlan:0) [ 1002.755320][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)