last executing test programs: 2m10.350307113s ago: executing program 3 (id=800): set_mempolicy_home_node(&(0x7f0000a26000/0x2000)=nil, 0x2000, 0x1, 0x0) 2m10.130747269s ago: executing program 3 (id=801): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100), 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x8) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x8000091, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}}, 0x0, 0x0, 0x32, 0x0, "0c9e089c9b4a04000bde79090003c458187eb46c2d996aff287154e786455261c425a7519cc253d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0xfe}, 0x2}}, 0x0, 0x0, 0x4, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542c90bc21470e441225642855b5f2faed4a18d67efd5f2fdf98328de94410300"}, 0xd8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 2m9.656240558s ago: executing program 1 (id=802): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006114700000000000070e0000000000749500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2m9.457421764s ago: executing program 3 (id=804): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000000c0)=0x32) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r7, 0x5b14, 0x0) r8 = socket$tipc(0x1e, 0x2, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r8, 0xf507, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x4f3, 0x74d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x30, 0x5, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0xff, 0x1, 0x1, {0x22, 0xbb0}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0xba, 0x7}}}}}]}}]}}, 0x0) unshare(0x40000000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4, 0x181}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) 2m9.39014549s ago: executing program 0 (id=805): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0xfffffffd) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000c80)=ANY=[@ANYBLOB="12010000000000104e040c120000000000010902be"], 0x0) pselect6(0x40, &(0x7f0000000100)={0x6400, 0x3, 0x0, 0x1, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 2m9.207923365s ago: executing program 1 (id=806): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x301}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1200}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0x80000001}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x4100, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2m8.966141745s ago: executing program 1 (id=807): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 2m8.819581416s ago: executing program 1 (id=808): r0 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = syz_usb_connect(0x3, 0x62, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a2405c287a3f89908"], 0x0) syz_clone(0x80480, 0x0, 0x5c, 0x0, 0x0, 0x0) r2 = syz_clone(0x900a000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x8c) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) r4 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) lseek(r4, 0x2, 0x0) getdents(r4, 0x0, 0x22) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)={0x60, r6, 0xc4fc9e906872338b, 0x20, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x32c3c34c, 0x1c}}}}, [@NL80211_ATTR_TID_CONFIG={0x40, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x0, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x0, 0x7, 0x10, 0x2, 0x6, 0x7f, 0x2]}}]}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7e}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x85}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}]}, 0x60}}, 0x0) setpgid(r2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x67e841, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x23, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@link_local={0x3, 0x80, 0xc2, 0x18}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0xd4aa6c3a0ba5a270, 0x0, 0x0, 0x9, 0x7, {0x5, 0x4, 0x0, 0x30, 0xfffa, 0x64, 0x5, 0xea, 0x32, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}, @loopback}}}}}}, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYRESOCT=r5, @ANYRESHEX=r1]) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, &(0x7f0000000240)={0x0, 0x5, 0x2, {0x2, 0xa}}, &(0x7f0000000640)={0x0, 0x3, 0x2, @lang_id={0x4, 0x3, 0x240a}}, &(0x7f00000002c0)={0x0, 0x22, 0x3, {[@main=@item_012={0x2, 0x0, 0x9, "feff"}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xb, 0x2, 0x1, {0x22, 0x4f7}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000140)={0x40, 0x16, 0x7, "e03cfe6c652d93"}, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000480)={0x20, 0x1, 0x71, "656f727bee682062ab1496c67aad3cab3285a2ac91080cb49aa2a4583ec8d38fc48b8a395f1e9b8d7fb45b8e1976c3313ca7ab6697b07daf091dc2c12873a9eee7cb8b55e32627999cc395a36120826a04ff4454e8d4c2e36a4601791f065c4d94df30b0d5d1d6c5755bfaa22ead85a9cb"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0x6}}) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x44045}, 0x4800) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8044}, 0x4000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x39, @local, @mcast2={0xff, 0x3}, 0x2000, 0xba08, 0x0, 0x2}}) openat$incfs(r4, &(0x7f0000000100)='.pending_reads\x00', 0x2100c2, 0x11) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) 2m7.664152707s ago: executing program 0 (id=812): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x72, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x0, 0x2}) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) lstat(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r6 = open(0x0, 0x6440, 0x80) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x13, r6, 0xd000) 2m6.76598767s ago: executing program 2 (id=817): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000200000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000120003474cbb65e1c3e4ffff81ff0d0001000000070000002500000004003d000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x44420000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x38, 0x140e, 0x10, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0xc090}, 0x80) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x149002, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000002f000000180001801400020073797a5f74756e"], 0x2c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="64100000", @ANYRES16=0x0, @ANYBLOB="000127bd7000fcdbdf251900000008000300", @ANYRES32=r6, @ANYBLOB="05001e0040000000050060000b000000050060000800000005001c000800000005001c000600000006006d000600000005001d000800000005001e00090000000500a30001000000"], 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x26e1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) open_tree(r7, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$rds(r7, &(0x7f0000000880)={&(0x7f0000000540)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000580)=""/208, 0xd0}, {&(0x7f0000000680)=""/226, 0xe2}, {&(0x7f0000000780)=""/181, 0xb5}], 0x3, 0x0, 0x0, 0x80}, 0x40) close(r0) socket$nl_route(0x10, 0x3, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000400)=[@in6={0xa, 0x4e24, 0x4, @local, 0x3}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x83, &(0x7f00000000c0)={r8}, 0x8) ioctl$SIOCSIFHWADDR(r7, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 2m6.455626955s ago: executing program 2 (id=820): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES64=r1, @ANYBLOB="0100000000000000000017000000440006803c0004"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f00000000c0)=""/4096, 0x1000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000140)={0x800, 0xf, 0x1, 'queue1\x00', 0x10b8}) 2m6.231800845s ago: executing program 4 (id=821): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0x3e45, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xcb}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_macvtap\x00'}) write(0xffffffffffffffff, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d", 0x13) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) socket(0x10, 0x2, 0x0) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f00000002c0)="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", 0xfc) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="340000001c0007c1ed0000000000000002000000", @ANYRES32=r5, @ANYBLOB="d00052000a00010000000000000000000a0002"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20024090) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0xffffffff, 0x40000, 0x0, 'queue0\x00'}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$media(&(0x7f00000001c0), 0x9, 0x402) socket$inet_smc(0x2b, 0x1, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x6000000, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) write$sndseq(r2, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, 'z?\x00', 0x10, 0x21, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, "dba20d", 0x0, "0600"}}}}}}}, 0x0) 2m5.992364255s ago: executing program 2 (id=822): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="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", 0x118) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0xb, @private0, 0xffff}, 0x1c) 2m5.597024096s ago: executing program 3 (id=823): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000840)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x4d5d, 0x10, 0x2, 0x335}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r4, &(0x7f00000020c0)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120110031fcd1b08cf100355af750102030109022d0002080910030904180202b41d3f0109050e03000002070109058503"], 0x0) pread64(0xffffffffffffffff, &(0x7f0000001600)=""/4103, 0x1007, 0x99) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={0x0, 0x58}}, 0x10) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/44, 0x2c, 0x40) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0xffffffff, 0x13100, 0x2, 0x285}, &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(r5, 0x2def, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r6, &(0x7f0000000080)={0x2020}, 0x2020) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000500)={'bond_slave_0\x00'}) sendmsg$nl_route(r7, 0x0, 0x1400000000000000) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x3, 0x5, 0x6, 0x0, @private=0xa010102, @local, {[@generic={0x89, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="540100001a00130700000000fcffffff00000000000000000000000000000001ac141412000000000000000000000000000000004e6100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x154}}, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) 2m4.644178829s ago: executing program 2 (id=824): socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xd7) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) set_mempolicy_home_node(&(0x7f0000a26000/0x2000)=nil, 0x2000, 0x1, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000140)=0x2000) 2m4.548095392s ago: executing program 1 (id=825): r0 = socket(0x2b, 0x1, 0x1) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) r2 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0x18) r3 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_open_dev$cec(&(0x7f0000001080), 0x0, 0x8080) ioctl$CEC_RECEIVE(r4, 0xc0386106, &(0x7f0000000000)={0x5, 0x7, 0x1, 0x7, 0x6, 0x9, '&\x00\x00\x00\x00>\x00', 0x4, 0x0, 0x4a, 0x0, 0x0, 0x4, 0xe}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000200)={@mcast1, 0x7f, 0x3, 0x1, 0x0, 0x9, 0x917}, 0x20) getsockopt$inet6_opts(r2, 0x29, 0x36, 0x0, &(0x7f0000000080)) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @multicast2}, 0x10) timer_settime(r1, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) 2m3.850346874s ago: executing program 0 (id=826): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100), 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x8) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x8000091, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}}, 0x0, 0x0, 0x32, 0x0, "0c9e089c9b4a04000bde79090003c458187eb46c2d996aff287154e786455261c425a7519cc253d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0xfe}, 0x2}}, 0x0, 0x0, 0x4, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542c90bc21470e441225642855b5f2faed4a18d67efd5f2fdf98328de94410300"}, 0xd8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 2m3.136527189s ago: executing program 0 (id=827): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0000180000000000000000b71b0000000000007baa00fe00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b100bfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000000800000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m2.456165994s ago: executing program 0 (id=828): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x416f, 0x0, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r2, 0x567, 0x1000a387, 0x0, 0x0, 0x0) 2m2.221807805s ago: executing program 4 (id=829): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x7e, 0xab983) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe10859891d875397bab22d0000b420a9c81f40f45f819e01177d3d458dac00000000000000000000003b00", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88000) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000480)={r0, 0x1, {0x2a00, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, "fee8a2ab0000000000e3ff7f2e00000000deff000000000000000000000000000000080000000000000000000000000000000000004100", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x0, 0x5]}}) 2m1.919592521s ago: executing program 4 (id=830): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x27, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='map_files\x00') openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x2d, 'pids'}, {0x0, 'rdma'}, {0x2b, 'hugetlb'}, {0x2d, 'cpuacct'}, {0x2d, 'rlimit'}, {0x2b, 'hugetlb'}, {0x2d, 'net'}]}, 0x34) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x27, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) (async) syz_open_procfs(0x0, &(0x7f0000000380)='map_files\x00') (async) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000000), 0x2, 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x2d, 'pids'}, {0x0, 'rdma'}, {0x2b, 'hugetlb'}, {0x2d, 'cpuacct'}, {0x2d, 'rlimit'}, {0x2b, 'hugetlb'}, {0x2d, 'net'}]}, 0x34) (async) 2m1.696571646s ago: executing program 4 (id=831): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4, 0x181}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) 2m1.664188854s ago: executing program 2 (id=832): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, &(0x7f0000000080)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x6, 0xc, 0x8, 0x20000}, 0x10, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r5 = openat$nullb(0xffffffffffffff9c, 0x0, 0x12d142, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x12, r5, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="40000000190001090000000000000000021800000000fd010000000008000100ac14140008000500ac1414bb0c00168008000300e00000010606150006000000"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800df00ffff01577c4af85ab8e1b1ce9600"/27, @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b0000000000"], 0x28}}, 0x0) 2m1.519504221s ago: executing program 0 (id=833): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newtfilter={0x48, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xf, 0xa}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "357a6e6199bf2fc0e044ebfc96d3fe12"}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000084) unshare(0x2c020400) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vbi(&(0x7f00000000c0), 0x0, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8d83}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r6 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) readv(r6, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f00000016c0), &(0x7f0000001700)={'fscrypt:', @desc1}, &(0x7f0000001740)={0x0, "99c4389460af2f8b232bbbbf3910a319ac3ff99b331212b9ada1f4fd50d3bcf651bf0af09bc38e36fdf143c43e4f4c8217b50093c05438a19ba7343eacd1155a", 0x20}, 0x48, 0xfffffffffffffffb) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) eventfd(0xffffffff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4}) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100), 0xfffffd9d) sendfile(r7, r8, 0x0, 0xfffffdef) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) 2m1.200046832s ago: executing program 2 (id=834): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x6, 0xfffffffc}, 0x10) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001a000100fffffffffdffffff0a80800009"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x24084040) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x45, 0x4000010, &(0x7f0000000100)={0x2, 0xfffd, @private=0xa010101}, 0x10) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x4000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001240)=ANY=[@ANYBLOB="3c0000001000390428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01980000000000001c001284cb9ba18b4b11ce9ff6da2c800b000100697036746e6c00000c0002800500090004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001200)={@fallback=r5, 0x15, 0x1, 0x7, &(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000001100)=[0x0], &(0x7f0000001180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000011c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000001080)={0x1, 0x6}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000000040)={0xa, {"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", 0x1000}}, 0x1006) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=r7], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r9 = eventfd(0x7fffffff) lseek(r9, 0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2m1.199669997s ago: executing program 1 (id=835): openat$random(0xffffffffffffff9c, &(0x7f0000000e40), 0x400, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) io_uring_setup(0x7d98, &(0x7f0000000240)={0x0, 0x918a, 0x2, 0x1, 0x24a}) socket$tipc(0x1e, 0x5, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$vsock_stream(0x28, 0x1, 0x28) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x40000000015, 0x5, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050001300060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 1m59.957445983s ago: executing program 3 (id=836): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1200}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0x80000001}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x1c}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1m59.813381588s ago: executing program 4 (id=837): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x40048c4}, 0x8041) (async) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) connect$netlink(r0, &(0x7f0000000180)=@proc={0x10, 0x0, 0x25dfdbfd, 0x1}, 0xc) (async, rerun: 64) ioctl$KVM_CAP_XEN_HVM(r3, 0x4068aea3, &(0x7f00000001c0)={0x26, 0x0, 0x45}) (rerun: 64) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x670200, 0x82) (async) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r5, 0xc010f508, &(0x7f00000002c0)={0x6, 0x8}) (async) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r1, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9a1, 0x2}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x40) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000004c0)=@req={0x28, &(0x7f0000000480)={'erspan0\x00', @ifru_data=&(0x7f0000000440)="8e70667f3713c35e2ac75c5ddde27ae6625a5f8b042e93b1e5bf3af6ec5bcf57"}}) (async) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000540), r0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000700)={'erspan0\x00', &(0x7f0000000600)={'gretap0\x00', 0x0, 0x10, 0x8000, 0xe2b, 0x1, {{0x2f, 0x4, 0x1, 0x7, 0xbc, 0x67, 0x0, 0x2, 0x2f, 0x0, @private=0xa010100, @loopback, {[@timestamp_addr={0x44, 0x2c, 0x31, 0x1, 0xd, [{@rand_addr=0x64010101, 0x80000001}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@rand_addr=0x64010102, 0x9}, {@empty, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x78}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x32, 0x3, [{0x1, 0x8, "eee08a760d5a"}, {0x0, 0x6, "558d9347"}, {0x7, 0x5, "98d7b4"}, {0x5, 0xf, "66b54375261bace3a662e69971"}, {0x6, 0xa, "59c8e68a2e2ce764"}]}, @timestamp_prespec={0x44, 0x44, 0x7b, 0x3, 0x8, [{@local, 0xf8}, {@remote, 0x3}, {@loopback, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4cf0}, {@remote, 0x8}, {@local, 0x1000}, {@private=0xa010102, 0xa9}, {@multicast2, 0x3}]}]}}}}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000740)={0x0, @loopback, @multicast1}, &(0x7f0000000780)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000007c0)={'batadv_slave_1\x00', 0x0}) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000840)={'sit0\x00', &(0x7f0000000800)={'gre0\x00', 0x0, 0x20, 0x0, 0x0, 0x3, {{0x8, 0x4, 0x3, 0x5, 0x20, 0x66, 0x0, 0x97, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@timestamp_addr={0x44, 0xc, 0xf1, 0x1, 0x3, [{@loopback}]}]}}}}}) (rerun: 32) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a40)={'gre0\x00', &(0x7f0000000880)={'syztnl0\x00', 0x0, 0x8000, 0x10, 0x1, 0xfe, {{0x5b, 0x4, 0x1, 0x39, 0x16c, 0x67, 0x0, 0x7, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, @multicast1, {[@timestamp_prespec={0x44, 0x44, 0xcc, 0x3, 0x3, [{@rand_addr=0x64010102}, {@multicast2}, {@local, 0x5}, {@loopback}, {@empty, 0x6}, {@multicast1, 0x4}, {@private=0xa010100, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @cipso={0x86, 0x5d, 0x3, [{0x5, 0x5, "42231a"}, {0x7, 0x11, "01272de093563147ff8806274fdb8d"}, {0x6, 0x4, "b8d5"}, {0x0, 0x5, "b9a775"}, {0x0, 0xc, "05db77c2ffd8a0c3c6cb"}, {0x7, 0x3, "a8"}, {0x2, 0x8, "80748afdc051"}, {0x1, 0x10, "ef8ae0557949c2881ab25746ba44"}, {0x1, 0xc, "44c2c7416aa0ffa087f6"}, {0x6, 0x5, "480f4d"}]}, @rr={0x7, 0xb, 0x4c, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x75, 0x3, [{0x2, 0x5, "cd447c"}, {0x6, 0xa, "22788343e45185a8"}, {0x1, 0xd, "eda4bcce4405ef6762467e"}, {0x2, 0xf, "76275d939f30239d45e9b06b4b"}, {0x5, 0xe, "ebcdfb019933f6d084fd80f8"}, {0x1, 0x6, "495839fa"}, {0x0, 0x12, "99d9d3e42e7d6900bd2cf2d27b190f94"}, {0x2, 0xc, "3d3b1b3286f3b550af43"}, {0x1, 0x12, "8072065c9b9cc1c486f6eb1fe58a723c"}]}, @noop, @rr={0x7, 0x17, 0xf8, [@broadcast, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x3b}, @local, @remote]}, @noop, @rr={0x7, 0x1b, 0x6a, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast1, @dev={0xac, 0x14, 0x14, 0x2a}, @dev={0xac, 0x14, 0x14, 0x25}]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000d80)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d40)={&(0x7f0000000a80)={0x29c, r6, 0x0, 0x70bd25, 0x25dfdbff, {}, [{{0x8, 0x1, r7}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r8}, {0x144, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x1, 0x1c, 0x1e, 0x4}, {0x84, 0x2, 0x1c, 0x1ff}, {0x8, 0x81, 0x8, 0x4}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x29c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000e80)={'pimreg1\x00', &(0x7f0000000dc0)=@ethtool_flash={0x33, 0x1, './file0\x00'}}) (async, rerun: 32) ioctl(r4, 0x5, &(0x7f0000000ec0)="b4295c7997b18a4f428fe08c65688b6ebb4c7d258440af0d9b8c5a8e1786aae983e991d4e6ca0954b7700396545d3857e44dffe9d3ccbbe1b1c5907faaa0eec685267bb5c02a5e39171e16a8247516bb85d7607ea899cc90199ea0fbf24c97ece08bd62df4245c90c0b55fa2a9850bdb87e4d3f1d4b2413c05496fefd4c593a226ba70f351db91c768e735a56d767d2546fd5226970c52ff3154ed0e95ce7bd5761ecf1ef4b72d896ee4e5bcd634075df51a155712a70eeb2a881ff26558d301cafc8a6ee3f5e80ce688791402c05e5a19e904e7873e62171a9b923575a6393067b1164e611f9b1467f225193008b70760") (async, rerun: 32) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000001200)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001000)={0x1b4, r1, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x11}}}}, [@NL80211_ATTR_TID_CONFIG={0x194, 0x11d, 0x0, 0x1, [{0x17c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x13c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x48, 0x1, 0x5, 0x2, 0x18, 0x9, 0x36, 0x9, 0x72, 0x1b, 0x1, 0x2, 0x24, 0x6, 0x18, 0x24, 0x12, 0x9, 0x36, 0x16, 0x3]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x0, 0x1, 0x1, 0x0, 0xfffb, 0x8001, 0x8]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x7, 0x8}, {0x0, 0x3}, {0x3}, {0x1, 0x8}, {0x7, 0x3}, {0x2, 0x8}, {0x5}, {0x0, 0x7}, {0x5, 0x4}, {0x7, 0x6}, {0x4, 0x8}, {0x6, 0x5}, {0x0, 0x2}, {0x1, 0x4}, {0x1, 0x7}, {0x7, 0x6}, {0x4, 0x2}, {0x5, 0x3}, {0x4, 0x2}, {0x1, 0x1}, {0x5, 0x9}, {0x6, 0x5}, {0x2, 0x5}, {0x5, 0x2}, {0x7, 0x1}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x30, 0x0, 0x60, 0xc, 0x48, 0x3, 0x24, 0x3, 0x7e, 0xb, 0x30, 0x2, 0x18, 0x0, 0x5, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffb, 0x5, 0x0, 0xfff, 0xff, 0xb, 0xa85, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x4, 0xa}, {0x2, 0x4}, {0x4}, {0x2, 0x2}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x1, 0x7}, {0x3}, {0x0, 0xa}, {0x0, 0x5}, {0x4}, {0x3, 0xa}, {0x0, 0x5}, {0x1}, {0x0, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x1, 0x4, 0x2fc2, 0x6, 0x0, 0x5, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x7f, 0x2, 0x9, 0x7, 0xc61e, 0x5, 0x3]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x18}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x75}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x82}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x288c4}, 0x8005) (async) r14 = socket(0xf, 0x3, 0x9c) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000001240)=0x8) (async) r15 = socket$rds(0x15, 0x5, 0x0) connect$rds(r15, &(0x7f0000001280)={0x2, 0x4e23, @loopback}, 0x10) (async, rerun: 64) sendmsg$WG_CMD_GET_DEVICE(r14, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x30, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8000) (rerun: 64) 1m59.451197157s ago: executing program 3 (id=838): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8582, 0x0) syz_usb_connect$cdc_ecm(0x6, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f0000000280)=ANY=[]}]}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x7, 0xf, 0x9, '\x00', 0x5}) close_range(r0, 0xffffffffffffffff, 0x0) 1m54.553086013s ago: executing program 4 (id=839): socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) (rerun: 64) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x6, 0x80000000, 0x4, 0xf01, 0x13, "a63948335015f10b27c10ce93d73d28fbaeeab"}) (async, rerun: 64) ftruncate(r0, 0x4) (async, rerun: 64) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000040)=0x8, 0x4) (async) write$char_usb(0xffffffffffffffff, &(0x7f0000000080)="3062f69f9b14d4ab89ff9ae2c7", 0xd) (async, rerun: 64) socketpair(0xf, 0x80006, 0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r3 = socket$inet6(0xa, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x20, 0x700, 0x32be, 0xff, {{0x18, 0x4, 0x0, 0xb, 0x60, 0x66, 0x0, 0x2, 0x4, 0x0, @rand_addr=0x64010101, @local, {[@timestamp_prespec={0x44, 0x34, 0x95, 0x3, 0xf, [{@multicast1, 0x6a6}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x549}, {@remote, 0x8}, {@rand_addr=0x64010100}, {@broadcast, 0x800}, {@multicast1, 0x10000}]}, @noop, @ra={0x94, 0x4, 0x1}, @end, @lsrr={0x83, 0x7, 0x52, [@broadcast]}, @generic={0x88, 0x9, "f78f5de1e09ec0"}]}}}}}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000001c0)={@empty, @local, @ipv4={'\x00', '\xff\xff', @remote}, 0xdc1, 0xfffe, 0x3, 0x0, 0x8, 0x8, r4}) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0xc) (async) r5 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r5, &(0x7f0000000340)={{0x10b, 0xf, 0xff, 0x1bd, 0x169, 0x7, 0x369, 0x400}, "de4ce6a7c3934b48be69ebb4f5c42f2e7209c0e771467d25c2e3761e33eb7c8133d192493329f180d332d375798f3b2c7e83183f97fdaddfde0c4e314e65e5e22b15247c90eba64d7b396a170964cfd51b9777d734639f337ea78efb6353bb4ee5eed9573c7fa61b46543cc17204a2f8546f5f599ecba95e583fabaa3f8e398f84c8ea11233b742ea5c06a9cdccb6a925f2338348689b58be0c8aa7b72bdfdfd05c6", ['\x00']}, 0x1c2) (async, rerun: 64) openat$fuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async, rerun: 64) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x100000000) read$char_usb(r6, &(0x7f0000000580)=""/21, 0x15) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x400402, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000600)={@dev={0xac, 0x14, 0x14, 0x32}, @multicast1, 0x0, 0xa, [@loopback, @local, @remote, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @broadcast, @remote, @local, @multicast2]}, 0x38) fsopen(&(0x7f0000000640)='devtmpfs\x00', 0x1) (async) socket$tipc(0x1e, 0x2, 0x0) (async) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x8001) ioctl$KVM_CAP_X86_DISABLE_EXITS(r7, 0x4068aea3, &(0x7f00000006c0)={0x8f, 0x0, 0xc}) (async) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x50, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x59}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1022}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x4a6}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000001) (async, rerun: 64) syz_clone3(&(0x7f0000000a40)={0x212808600, &(0x7f0000000880)=0xffffffffffffffff, &(0x7f00000008c0)=0x0, &(0x7f0000000900), {}, &(0x7f0000000940)=""/114, 0x72, &(0x7f00000009c0)=""/37, &(0x7f0000000a00)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x6, {r7}}, 0x58) (rerun: 64) fcntl$setown(r3, 0x8, r9) close_range(r8, r6, 0x2) (async) r10 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000b00), 0x420001, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r10) (async) sendmsg$SMC_PNETID_FLUSH(r7, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 0s ago: executing program 32 (id=833): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newtfilter={0x48, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xf, 0xa}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "357a6e6199bf2fc0e044ebfc96d3fe12"}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000084) unshare(0x2c020400) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vbi(&(0x7f00000000c0), 0x0, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8d83}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r6 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) readv(r6, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f00000016c0), &(0x7f0000001700)={'fscrypt:', @desc1}, &(0x7f0000001740)={0x0, "99c4389460af2f8b232bbbbf3910a319ac3ff99b331212b9ada1f4fd50d3bcf651bf0af09bc38e36fdf143c43e4f4c8217b50093c05438a19ba7343eacd1155a", 0x20}, 0x48, 0xfffffffffffffffb) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) eventfd(0xffffffff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4}) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100), 0xfffffd9d) sendfile(r7, r8, 0x0, 0xfffffdef) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): 978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.721794][ T9] usb 4-1: selecting invalid altsetting 1 [ 222.727589][ T9] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 222.748334][ T978] usb 2-1: Product: syz [ 222.868029][ T978] usb 2-1: Manufacturer: syz [ 222.878493][ T978] usb 2-1: SerialNumber: syz [ 222.884573][ T9] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 222.898243][ T978] usb 2-1: config 0 descriptor?? [ 222.903962][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 222.916419][ T978] smsc95xx v2.0.0 [ 222.921399][ T9] usb 4-1: media controller created [ 222.984192][ T7734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.539'. [ 223.080176][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 223.411220][ T978] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 223.439343][ T9] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 223.448234][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 223.460487][ T978] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 223.478517][ T9] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 223.740830][ T9] usb 4-1: USB disconnect, device number 27 [ 223.999922][ T7747] netlink: 36 bytes leftover after parsing attributes in process `syz.1.536'. [ 224.043217][ T30] audit: type=1800 audit(1744400805.744:293): pid=7748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.542" name="file0" dev="tmpfs" ino=264 res=0 errno=0 [ 224.518877][ T5934] usb 3-1: unable to get BOS descriptor or descriptor too short [ 224.535581][ T5934] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 224.628899][ T5934] usb 3-1: can't read configurations, error -71 [ 225.140177][ T978] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 225.195542][ T978] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 225.288832][ T978] usb 2-1: USB disconnect, device number 43 [ 225.429536][ T7279] tipc: Subscription rejected, illegal request [ 226.766331][ T7787] batadv0: entered promiscuous mode [ 226.771821][ T7787] macsec1: entered promiscuous mode [ 226.785283][ T7787] batadv0: left promiscuous mode [ 226.840165][ T976] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 226.999903][ T976] usb 4-1: Using ep0 maxpacket: 32 [ 227.008158][ T976] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 227.016493][ T976] usb 4-1: config 0 has no interface number 0 [ 227.027803][ T976] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 227.038189][ T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.066493][ T976] usb 4-1: Product: syz [ 227.088924][ T976] usb 4-1: Manufacturer: syz [ 227.098934][ T976] usb 4-1: SerialNumber: syz [ 227.126307][ T976] usb 4-1: config 0 descriptor?? [ 227.162507][ T976] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 227.178313][ T976] usb 4-1: selecting invalid altsetting 1 [ 227.184592][ T976] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 227.200089][ T976] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 227.216906][ T976] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 227.235108][ T976] usb 4-1: media controller created [ 227.268300][ T976] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 227.373363][ T976] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 227.397249][ T976] zl10353_read_register: readreg error (reg=127, ret==-71) [ 227.406066][ T976] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 227.479916][ T47] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 227.487337][ T976] usb 4-1: USB disconnect, device number 28 [ 227.672428][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.684672][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.695207][ T47] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 227.704402][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.720730][ T47] usb 3-1: config 0 descriptor?? [ 227.950849][ T7799] netlink: 'syz.0.561': attribute type 10 has an invalid length. [ 228.013904][ T7799] macvlan0: entered allmulticast mode [ 228.036316][ T7799] veth1_vlan: entered allmulticast mode [ 228.069445][ T7799] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 228.110157][ T976] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 228.156344][ T47] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 228.202479][ T47] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 228.220792][ T47] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 228.241839][ T47] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 228.259576][ T47] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 228.269903][ T976] usb 5-1: device descriptor read/64, error -71 [ 228.294801][ T47] playstation 0003:054C:0DF2.0008: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 228.380734][ T47] playstation 0003:054C:0DF2.0008: Invalid reportID received, expected 9 got 32 [ 228.399831][ T47] playstation 0003:054C:0DF2.0008: Failed to retrieve DualSense pairing info: -22 [ 228.420811][ T47] playstation 0003:054C:0DF2.0008: Failed to get MAC address from DualSense [ 228.429570][ T47] playstation 0003:054C:0DF2.0008: Failed to create dualsense. [ 228.461039][ T47] playstation 0003:054C:0DF2.0008: probe with driver playstation failed with error -22 [ 228.510080][ T976] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 228.610631][ T978] usb 3-1: USB disconnect, device number 34 [ 228.670020][ T976] usb 5-1: device descriptor read/64, error -71 [ 228.775534][ T7830] Invalid logical block size (1) [ 228.791915][ T976] usb usb5-port1: attempt power cycle [ 228.939852][ T5934] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 229.150177][ T976] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 229.171694][ T5934] usb 2-1: Using ep0 maxpacket: 8 [ 229.234425][ T976] usb 5-1: device descriptor read/8, error -71 [ 229.264806][ T5934] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 229.314061][ T5934] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 229.361826][ T5934] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 229.382046][ T5934] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 229.443863][ T5934] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 229.479791][ T978] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 229.499790][ T976] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 229.519073][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.564655][ T976] usb 5-1: device descriptor read/8, error -71 [ 229.575653][ T7832] syzkaller1: entered promiscuous mode [ 229.588101][ T7832] syzkaller1: entered allmulticast mode [ 229.669993][ T978] usb 4-1: Using ep0 maxpacket: 32 [ 229.678256][ T978] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 229.699188][ T978] usb 4-1: config 0 has no interface number 0 [ 229.710591][ T976] usb usb5-port1: unable to enumerate USB device [ 229.748535][ T978] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 229.761629][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.775107][ T978] usb 4-1: Product: syz [ 229.779490][ T978] usb 4-1: Manufacturer: syz [ 229.786198][ T978] usb 4-1: SerialNumber: syz [ 229.796746][ T978] usb 4-1: config 0 descriptor?? [ 229.807805][ T978] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 229.820192][ T978] usb 4-1: selecting invalid altsetting 1 [ 229.826556][ T978] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 229.835610][ T5934] usb 2-1: GET_CAPABILITIES returned 0 [ 229.841276][ T5934] usbtmc 2-1:16.0: can't read capabilities [ 229.852781][ T978] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 229.875010][ T978] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 229.883890][ T978] usb 4-1: media controller created [ 229.910315][ T978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 230.064368][ T7824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.074177][ T7824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.132923][ T7828] netlink: 'syz.1.567': attribute type 1 has an invalid length. [ 230.290717][ T7828] 8021q: adding VLAN 0 to HW filter on device bond2 [ 230.300361][ T978] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 230.310260][ T978] zl10353_read_register: readreg error (reg=127, ret==-71) [ 230.321396][ T978] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 230.418386][ T978] usb 4-1: USB disconnect, device number 29 [ 230.542817][ T7847] bond2: (slave veth3): Enslaving as an active interface with a down link [ 230.583362][ T7849] bond2: (slave dummy0): making interface the new active one [ 230.596685][ T7849] dummy0: entered promiscuous mode [ 230.603362][ T7849] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 231.014101][ T7861] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 231.265462][ T4262] dummy0: left promiscuous mode [ 231.546659][ T47] usb 5-1: new low-speed USB device number 41 using dummy_hcd [ 231.773857][ T47] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 231.819928][ T47] usb 5-1: config 0 has no interface number 0 [ 231.864780][ T47] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 231.959850][ T24] usb 2-1: USB disconnect, device number 44 [ 231.989893][ T47] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 232.002292][ T47] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 232.019947][ T47] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 232.031373][ T47] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 232.053112][ T47] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 232.067162][ T47] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 232.076408][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.106204][ T47] usb 5-1: config 0 descriptor?? [ 232.288449][ T7861] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 232.299333][ T7861] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 232.324336][ T47] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 232.516241][ T7861] ldusb 5-1:0.55: Write buffer overflow, 1 bytes dropped [ 232.642932][ T7883] loop2: detected capacity change from 0 to 524287999 [ 232.668573][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 232.678013][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 232.695851][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 232.705087][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 232.715047][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 232.724264][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 232.733004][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 232.742209][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 232.753877][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 232.763215][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 232.816854][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 232.826113][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 232.835719][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 232.844975][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 232.853346][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 232.862578][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 232.870756][ T7883] ldm_validate_partition_table(): Disk read failed. [ 232.888612][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 232.897881][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 232.907106][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 232.916371][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 232.939189][ T7883] Dev loop2: unable to read RDB block 0 [ 233.181400][ T7883] loop2: unable to read partition table [ 233.187892][ T7883] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 233.717976][ T24] usb 5-1: USB disconnect, device number 41 [ 233.806730][ T24] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 234.209156][ T7886] Invalid logical block size (1) [ 234.405508][ T7890] netlink: 'syz.3.583': attribute type 32 has an invalid length. [ 234.420551][ T7890] netlink: 88 bytes leftover after parsing attributes in process `syz.3.583'. [ 234.503038][ T7893] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 234.555744][ T7897] netlink: 4 bytes leftover after parsing attributes in process `syz.4.585'. [ 234.576073][ T7895] batadv0: entered promiscuous mode [ 234.607455][ T7895] macsec1: entered promiscuous mode [ 234.653433][ T7895] batadv0: left promiscuous mode [ 234.903582][ T7907] mmap: syz.0.591 (7907) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 234.920662][ T24] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 235.029834][ T5930] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 235.081675][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 235.101115][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 235.109256][ T24] usb 3-1: config 0 has no interface number 0 [ 235.123740][ T24] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 235.133215][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.149805][ T24] usb 3-1: Product: syz [ 235.154165][ T24] usb 3-1: Manufacturer: syz [ 235.158785][ T24] usb 3-1: SerialNumber: syz [ 235.174276][ T24] usb 3-1: config 0 descriptor?? [ 235.180376][ T5930] usb 5-1: device descriptor read/64, error -71 [ 235.197278][ T24] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 235.229281][ T30] audit: type=1326 audit(1744400816.924:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7909 comm="syz.0.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2de58d169 code=0x7ffc0000 [ 235.230494][ T24] usb 3-1: selecting invalid altsetting 1 [ 235.273359][ T30] audit: type=1326 audit(1744400816.924:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7909 comm="syz.0.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe2de58d169 code=0x7ffc0000 [ 235.283128][ T24] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 235.337880][ T24] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 235.338108][ T30] audit: type=1326 audit(1744400816.924:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7909 comm="syz.0.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2de58d169 code=0x7ffc0000 [ 235.370598][ T24] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 235.387180][ T30] audit: type=1326 audit(1744400816.924:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7909 comm="syz.0.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2de58d169 code=0x7ffc0000 [ 235.415082][ T30] audit: type=1326 audit(1744400816.924:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7909 comm="syz.0.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fe2de58d169 code=0x7ffc0000 [ 235.439788][ T5930] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 235.456189][ T30] audit: type=1326 audit(1744400816.924:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7909 comm="syz.0.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2de58d169 code=0x7ffc0000 [ 235.459935][ T24] usb 3-1: media controller created [ 235.542728][ T30] audit: type=1326 audit(1744400816.924:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7909 comm="syz.0.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fe2de58d169 code=0x7ffc0000 [ 235.589574][ T30] audit: type=1326 audit(1744400816.924:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7909 comm="syz.0.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2de58d169 code=0x7ffc0000 [ 235.620290][ T5930] usb 5-1: device descriptor read/64, error -71 [ 235.650947][ T30] audit: type=1326 audit(1744400816.924:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7909 comm="syz.0.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe2de58d169 code=0x7ffc0000 [ 235.651000][ T30] audit: type=1326 audit(1744400816.924:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7909 comm="syz.0.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2de58d169 code=0x7ffc0000 [ 235.664662][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 235.754376][ T5930] usb usb5-port1: attempt power cycle [ 235.792423][ T24] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 235.815816][ T24] zl10353_read_register: readreg error (reg=127, ret==-71) [ 235.851630][ T24] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 235.973219][ T24] usb 3-1: USB disconnect, device number 35 [ 236.099962][ T5930] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 236.120986][ T5930] usb 5-1: device descriptor read/8, error -71 [ 236.371284][ T47] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 236.379145][ T5930] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 236.451467][ T5930] usb 5-1: device descriptor read/8, error -71 [ 236.479783][ T24] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 236.572953][ T5930] usb usb5-port1: unable to enumerate USB device [ 236.581547][ T47] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 236.642617][ T24] usb 3-1: device descriptor read/64, error -71 [ 236.679501][ T47] usb 2-1: config 3 has 1 interface, different from the descriptor's value: 2 [ 236.689960][ T47] usb 2-1: config 3 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 236.705710][ T47] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 236.719907][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.728117][ T47] usb 2-1: Product: syz [ 236.732438][ T47] usb 2-1: Manufacturer: syz [ 236.737151][ T47] usb 2-1: SerialNumber: syz [ 236.751922][ T47] cdc_ncm 2-1:3.0: invalid descriptor buffer length [ 236.758837][ T47] cdc_ncm 2-1:3.0: CDC Union missing and no IAD found [ 236.768080][ T47] cdc_ncm 2-1:3.0: bind() failure [ 236.880007][ T24] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 236.955331][ T5934] usb 2-1: USB disconnect, device number 45 [ 237.020337][ T24] usb 3-1: device descriptor read/64, error -71 [ 237.143372][ T24] usb usb3-port1: attempt power cycle [ 237.309885][ T47] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 237.459834][ T47] usb 1-1: Using ep0 maxpacket: 16 [ 237.472810][ T47] usb 1-1: config index 0 descriptor too short (expected 190, got 36) [ 237.486830][ T24] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 237.496700][ T47] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.507152][ T47] usb 1-1: config 0 has no interfaces? [ 237.512995][ T47] usb 1-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 237.522285][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.539827][ T24] usb 3-1: device descriptor read/8, error -71 [ 237.556990][ T47] usb 1-1: config 0 descriptor?? [ 237.638117][ T7930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.599'. [ 237.784727][ T24] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 237.822632][ T24] usb 3-1: device descriptor read/8, error -71 [ 237.930503][ T24] usb usb3-port1: unable to enumerate USB device [ 237.978726][ T7934] xt_CT: No such helper "pptp" [ 238.667489][ T7957] xt_hashlimit: size too large, truncated to 1048576 [ 239.289366][ T7962] netlink: 88 bytes leftover after parsing attributes in process `syz.2.609'. [ 239.308610][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.609'. [ 240.030691][ T47] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 240.074427][ T7981] batadv0: entered promiscuous mode [ 240.090214][ T7981] macsec1: entered promiscuous mode [ 240.099104][ T7981] batadv0: left promiscuous mode [ 240.102691][ T9] usb 1-1: USB disconnect, device number 22 [ 240.129975][ T978] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 240.190361][ T47] usb 3-1: device descriptor read/64, error -71 [ 240.300237][ T978] usb 5-1: device descriptor read/64, error -71 [ 240.439816][ T47] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 240.549778][ T978] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 240.579771][ T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 240.590062][ T47] usb 3-1: device descriptor read/64, error -71 [ 240.599944][ T976] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 240.679797][ T978] usb 5-1: device descriptor read/64, error -71 [ 240.713126][ T47] usb usb3-port1: attempt power cycle [ 240.730246][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 240.748752][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 240.759967][ T976] usb 2-1: Using ep0 maxpacket: 8 [ 240.767871][ T976] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 240.783499][ T976] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 240.795281][ T978] usb usb5-port1: attempt power cycle [ 240.808884][ T976] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 240.824705][ T9] usb 1-1: config 0 has no interface number 0 [ 240.846770][ T9] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 240.864381][ T976] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 240.883030][ T9] usb 1-1: config 0 interface 1 has no altsetting 0 [ 240.892149][ T976] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 240.906219][ T976] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 240.908894][ T9] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 240.935664][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.944856][ T976] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 240.961198][ T9] usb 1-1: Product: syz [ 240.965773][ T976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.983061][ T9] usb 1-1: Manufacturer: syz [ 240.998778][ T9] usb 1-1: SerialNumber: syz [ 241.035475][ T976] usbtmc 2-1:16.0: probe with driver usbtmc failed with error -22 [ 241.074083][ T47] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 241.100366][ T9] usb 1-1: config 0 descriptor?? [ 241.100890][ T47] usb 3-1: device descriptor read/8, error -71 [ 241.150647][ T978] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 241.244773][ T978] usb 5-1: device descriptor read/8, error -71 [ 241.302476][ T24] usb 2-1: USB disconnect, device number 46 [ 241.364591][ T47] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 241.411600][ T47] usb 3-1: device descriptor read/8, error -71 [ 241.466842][ T7994] netlink: 'syz.3.621': attribute type 63 has an invalid length. [ 241.491067][ T9] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 241.493769][ T7994] netlink: 'syz.3.621': attribute type 63 has an invalid length. [ 241.500389][ T978] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 241.511794][ T7995] netlink: 'syz.3.621': attribute type 63 has an invalid length. [ 241.523856][ T47] usb usb3-port1: unable to enumerate USB device [ 241.533028][ T9] cx231xx 1-1:0.1: Failed to read PCB config [ 241.543904][ T9] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 241.560470][ T9] usb 1-1: USB disconnect, device number 23 [ 241.566741][ T978] usb 5-1: device descriptor read/8, error -71 [ 241.683509][ T978] usb usb5-port1: unable to enumerate USB device [ 241.930020][ T47] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 242.061274][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 242.079887][ T47] usb 4-1: Using ep0 maxpacket: 32 [ 242.086886][ T47] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 242.095207][ T47] usb 4-1: config 0 has no interface number 0 [ 242.108065][ T47] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 242.126884][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.146009][ T47] usb 4-1: Product: syz [ 242.150779][ T47] usb 4-1: Manufacturer: syz [ 242.155423][ T47] usb 4-1: SerialNumber: syz [ 242.163983][ T47] usb 4-1: config 0 descriptor?? [ 242.173273][ T47] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 242.182300][ T47] usb 4-1: selecting invalid altsetting 1 [ 242.188221][ T47] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 242.212232][ T47] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 242.224515][ T47] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 242.230332][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 242.233415][ T47] usb 4-1: media controller created [ 242.248099][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 242.262152][ T9] usb 1-1: config 0 has no interface number 0 [ 242.268575][ T9] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 242.285858][ T47] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 242.286322][ T9] usb 1-1: config 0 interface 1 has no altsetting 0 [ 242.310470][ T9] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 242.319997][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.328029][ T9] usb 1-1: Product: syz [ 242.341368][ T9] usb 1-1: Manufacturer: syz [ 242.346243][ T9] usb 1-1: SerialNumber: syz [ 242.354780][ T9] usb 1-1: config 0 descriptor?? [ 242.402317][ T47] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 242.417404][ T47] zl10353_read_register: readreg error (reg=127, ret==-71) [ 242.437138][ T47] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 242.519498][ T8012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.628'. [ 242.538358][ T47] usb 4-1: USB disconnect, device number 30 [ 242.595548][ T9] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 242.621556][ T9] cx231xx 1-1:0.1: bad scenario!!!!! [ 242.621556][ T9] config_info=0 [ 242.631284][ T9] cx231xx 1-1:0.1: Failed to read PCB config [ 242.809936][ T978] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 242.847786][ T9] usb 1-1: USB disconnect, device number 24 [ 242.983450][ T8023] netlink: 24 bytes leftover after parsing attributes in process `syz.2.632'. [ 243.013836][ T978] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 243.024129][ T978] usb 2-1: config 0 has no interface number 0 [ 243.035162][ T8023] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 243.039794][ T978] usb 2-1: too many endpoints for config 0 interface 1 altsetting 118: 164, using maximum allowed: 30 [ 243.054485][ T6632] dummy0: left promiscuous mode [ 243.072254][ T978] usb 2-1: config 0 interface 1 altsetting 118 has 0 endpoint descriptors, different from the interface descriptor's value: 164 [ 243.090006][ T978] usb 2-1: config 0 interface 1 has no altsetting 0 [ 243.104922][ T978] usb 2-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=c5.77 [ 243.171872][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.200339][ T978] usb 2-1: Product: syz [ 243.204669][ T978] usb 2-1: Manufacturer: syz [ 243.224303][ T978] usb 2-1: SerialNumber: syz [ 243.258171][ T978] usb 2-1: config 0 descriptor?? [ 243.470064][ T47] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 243.485720][ T978] snd-usb-us122l 2-1:0.1: usb_set_interface error [ 243.519854][ T978] snd-usb-us122l 2-1:0.1: probe with driver snd-usb-us122l failed with error -22 [ 243.532468][ T8026] netlink: 'syz.4.631': attribute type 5 has an invalid length. [ 243.580868][ T978] usb 2-1: USB disconnect, device number 47 [ 243.645305][ T47] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 243.669955][ T8039] bridge0: port 3(veth0_to_bridge) entered blocking state [ 243.679025][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.699843][ T8039] bridge0: port 3(veth0_to_bridge) entered disabled state [ 243.707176][ T8039] veth0_to_bridge: entered allmulticast mode [ 243.716114][ T47] usb 4-1: Product: syz [ 243.730098][ T47] usb 4-1: Manufacturer: syz [ 243.745177][ T47] usb 4-1: SerialNumber: syz [ 243.752110][ T8039] veth0_to_bridge: entered promiscuous mode [ 243.766372][ T47] usb 4-1: config 0 descriptor?? [ 243.775947][ T8039] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.781396][ T8041] netlink: 'syz.2.640': attribute type 32 has an invalid length. [ 243.817473][ T8039] bridge0: port 3(veth0_to_bridge) entered blocking state [ 243.818010][ T8041] netlink: 88 bytes leftover after parsing attributes in process `syz.2.640'. [ 243.826124][ T8039] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 244.086517][ T47] hso 4-1:0.0: Can't find BULK IN endpoint [ 244.103872][ T47] usb-storage 4-1:0.0: USB Mass Storage device detected [ 244.567327][ T8054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.643'. [ 244.614184][ T47] usb 4-1: USB disconnect, device number 31 [ 244.776922][ T8065] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 244.850342][ T978] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 244.896975][ T8065] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 245.059737][ T978] usb 1-1: Using ep0 maxpacket: 16 [ 245.087433][ T978] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 245.115178][ T978] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 245.189496][ T978] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 245.201572][ T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.229818][ T978] usb 1-1: Product: syz [ 245.234056][ T978] usb 1-1: Manufacturer: syz [ 245.238696][ T978] usb 1-1: SerialNumber: syz [ 245.307615][ T978] usb 1-1: config 0 descriptor?? [ 245.577029][ T8075] netlink: 'syz.3.650': attribute type 12 has an invalid length. [ 245.618728][ T978] appledisplay 1-1:0.0: Error while getting initial brightness: -110 [ 245.675186][ T978] appledisplay 1-1:0.0: probe with driver appledisplay failed with error -110 [ 245.749193][ T978] usb 1-1: USB disconnect, device number 25 [ 246.244685][ T8085] Invalid logical block size (1) [ 246.344320][ T8087] Invalid logical block size (1) [ 246.901677][ T8096] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 247.016630][ T8096] net veth1_virt_wifi virt_wifi0 (unregistering): left allmulticast mode [ 247.379786][ T5934] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 247.384415][ T8114] [U]  [ 247.398064][ T8113] Cannot find add_set index 0 as target [ 247.630689][ T5934] usb 2-1: Using ep0 maxpacket: 16 [ 247.641413][ T5934] usb 2-1: config 3 has an invalid interface number: 156 but max is 0 [ 247.663158][ T8117] netlink: 'syz.2.667': attribute type 16 has an invalid length. [ 247.666234][ T5934] usb 2-1: config 3 has no interface number 0 [ 247.678427][ T8117] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.667'. [ 247.691397][ T8117] netlink: 20 bytes leftover after parsing attributes in process `syz.2.667'. [ 247.705472][ T5934] usb 2-1: config 3 interface 156 has no altsetting 0 [ 247.724009][ T5934] usb 2-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=f1.d8 [ 247.738832][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.747149][ T5934] usb 2-1: Product: syz [ 247.767406][ T5934] usb 2-1: Manufacturer: syz [ 247.772263][ T9] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 247.785806][ T5934] usb 2-1: SerialNumber: syz [ 247.939979][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 247.947176][ T9] usb 5-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 247.958086][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 247.971577][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 247.985636][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.995279][ T9] usb 5-1: Product: syz [ 247.999544][ T9] usb 5-1: Manufacturer: syz [ 248.004922][ T9] usb 5-1: SerialNumber: syz [ 248.016146][ T5934] gl620a 2-1:3.156: probe with driver gl620a failed with error -22 [ 248.047187][ T5934] usb 2-1: USB disconnect, device number 48 [ 248.130165][ T976] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 248.231780][ T9] usb 5-1: 0:2 : does not exist [ 248.252787][ T9] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 248.289940][ T976] usb 4-1: Using ep0 maxpacket: 8 [ 248.300016][ T9] usb 5-1: USB disconnect, device number 50 [ 248.321021][ T976] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 248.351799][ T976] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 248.366591][ T976] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 248.382152][ T976] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 248.395545][ T976] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 248.408801][ T976] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 248.427076][ T976] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 248.446316][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.467589][ T976] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -22 [ 248.552584][ T5931] udevd[5931]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 248.595229][ T47] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 248.719452][ T5896] usb 4-1: USB disconnect, device number 32 [ 248.791620][ T47] usb 3-1: config 0 has no interfaces? [ 248.811563][ T47] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 248.837322][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.860217][ T47] usb 3-1: Product: syz [ 248.864536][ T47] usb 3-1: Manufacturer: syz [ 248.869361][ T47] usb 3-1: SerialNumber: syz [ 248.895806][ T47] usb 3-1: config 0 descriptor?? [ 249.034961][ T8144] Cannot find del_set index 0 as target [ 249.213435][ T8152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.671'. [ 249.244378][ T8152] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 249.522398][ T9] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 249.618503][ T8165] netlink: 36 bytes leftover after parsing attributes in process `syz.3.681'. [ 249.627796][ T8165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.681'. [ 249.767729][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=021f, bcdDevice= 0.00 [ 249.797315][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.817618][ T8158] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 249.834054][ T9] usb 1-1: config 0 descriptor?? [ 250.233232][ T8176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.682'. [ 250.395851][ T9] apple 0003:05AC:021F.0009: hidraw0: USB HID v1.01 Device [HID 05ac:021f] on usb-dummy_hcd.0-1/input0 [ 250.481144][ T9] usb 1-1: USB disconnect, device number 26 [ 251.150728][ T5934] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 251.379992][ T5934] usb 5-1: Using ep0 maxpacket: 8 [ 251.452934][ T5934] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.564133][ T8191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.685'. [ 251.627148][ T5934] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 251.712840][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 251.735802][ T5934] usb 5-1: SerialNumber: syz [ 251.756386][ T5934] usb 5-1: config 0 descriptor?? [ 251.919332][ T8183] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 251.984297][ T5934] usb 5-1: Found UVC 0.00 device (05ac:8501) [ 251.993882][ T5934] usb 5-1: No valid video chain found. [ 252.188010][ T9] usb 5-1: USB disconnect, device number 52 [ 252.360621][ T5934] usb 3-1: USB disconnect, device number 44 [ 253.357107][ T8222] netlink: 'syz.0.693': attribute type 12 has an invalid length. [ 253.426185][ T5934] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 253.437412][ T5896] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 253.630707][ T5934] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 253.634472][ T5896] usb 5-1: Using ep0 maxpacket: 8 [ 253.676498][ T5896] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 253.686098][ T5896] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 253.706338][ T5896] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 253.726862][ T5896] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 253.749249][ T5896] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 253.749967][ T5934] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 253.759521][ T24] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 253.776788][ T5930] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 253.806259][ T5896] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 253.828993][ T5934] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 253.848095][ T5896] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 253.864172][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.874547][ T5934] usb 4-1: config 0 interface 0 has no altsetting 0 [ 253.897918][ T5896] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22 [ 253.921845][ T5934] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 253.931001][ T5934] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 253.942039][ T5934] usb 4-1: config 0 interface 0 has no altsetting 0 [ 253.950562][ T5930] usb 2-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 253.963686][ T5934] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 253.972940][ T5934] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 253.985315][ T5934] usb 4-1: config 0 interface 0 has no altsetting 0 [ 253.995533][ T5930] usb 2-1: config 1 interface 0 has no altsetting 0 [ 254.002659][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 254.398314][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 254.401505][ T5934] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 254.430095][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 254.519927][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 254.622775][ T5930] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 254.635572][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 254.679787][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.687847][ T5930] usb 2-1: Product: syz [ 254.688664][ T976] usb 5-1: USB disconnect, device number 53 [ 254.706172][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 254.762620][ T5934] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 254.764452][ T5930] usb 2-1: Manufacturer: syz [ 254.786085][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.795571][ T5930] usb 2-1: SerialNumber: syz [ 254.839771][ T5934] usb 4-1: config 0 interface 0 has no altsetting 0 [ 254.868137][ T5934] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 254.881437][ T5934] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 254.912033][ T5934] usb 4-1: config 0 interface 0 has no altsetting 0 [ 254.935403][ T5934] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 254.949784][ T5934] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 254.970006][ T5934] usb 4-1: config 0 interface 0 has no altsetting 0 [ 254.991844][ T5934] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 255.001415][ T5934] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 255.046808][ T5934] usb 4-1: config 0 interface 0 has no altsetting 0 [ 255.076303][ T8229] batadv0: entered promiscuous mode [ 255.081954][ T8229] macsec1: entered promiscuous mode [ 255.090805][ T8229] batadv0: left promiscuous mode [ 255.101041][ T24] usb 3-1: GET_CAPABILITIES returned 0 [ 255.108859][ T5934] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 255.109315][ T24] usbtmc 3-1:16.0: can't read capabilities [ 255.135252][ T5934] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 255.194331][ T5934] usb 4-1: config 0 interface 0 has no altsetting 0 [ 255.235214][ T5934] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 255.256382][ T5934] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 255.285051][ T5934] usb 4-1: Product: syz [ 255.289299][ T5934] usb 4-1: Manufacturer: syz [ 255.300229][ T5934] usb 4-1: SerialNumber: syz [ 255.341397][ T5934] usb 4-1: config 0 descriptor?? [ 255.367538][ T5934] yurex 4-1:0.0: USB YUREX device now attached to Yurex #1 [ 255.459093][ T8223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.469772][ T8223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.573863][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 255.583725][ T24] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 255.598416][ T8212] usbtmc 3-1:16.0: Unable to send data, error -71 [ 255.631309][ T8235] netlink: 'syz.2.694': attribute type 1 has an invalid length. [ 255.698742][ T8235] 8021q: adding VLAN 0 to HW filter on device bond1 [ 255.865492][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.872265][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.960138][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 255.973399][ T8238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.995845][ T24] usb 1-1: config 0 has an invalid interface number: 246 but max is 0 [ 256.016187][ T24] usb 1-1: config 0 has no interface number 0 [ 256.035775][ T8238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.070526][ T24] usb 1-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 256.096454][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 256.106394][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.118776][ T24] usb 1-1: Product: syz [ 256.123327][ T24] usb 1-1: Manufacturer: syz [ 256.194995][ T24] usb 1-1: SerialNumber: syz [ 256.220331][ T5896] usb 4-1: USB disconnect, device number 33 [ 256.239165][ T5896] yurex 4-1:0.0: USB YUREX #1 now disconnected [ 256.291842][ T24] usb 1-1: config 0 descriptor?? [ 256.392171][ T8237] bond1: (slave veth3): Enslaving as an active interface with a down link [ 256.419446][ T8235] bond1: (slave dummy0): making interface the new active one [ 256.510015][ T8235] dummy0: entered promiscuous mode [ 256.517238][ T8235] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 256.543536][ T8231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.552646][ T8231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.637468][ T8249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.658593][ T8249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.663128][ T24] msi2500 1-1:0.246: Registered as swradio24 [ 256.680193][ T24] msi2500 1-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 256.869233][ T8249] geneve2: entered promiscuous mode [ 256.869354][ T5930] usblp 2-1:1.0: usblp1: USB Unidirectional printer dev 49 if 0 alt 8 proto 1 vid 0x0525 pid 0xA4A8 [ 256.920794][ T5934] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 256.996012][ T5930] usb 2-1: USB disconnect, device number 49 [ 257.006870][ T5930] usblp1: removed [ 257.069954][ T5934] usb 4-1: device descriptor read/64, error -71 [ 257.110482][ T976] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 257.219269][ T8260] netlink: 'syz.1.705': attribute type 32 has an invalid length. [ 257.227587][ T8260] netlink: 88 bytes leftover after parsing attributes in process `syz.1.705'. [ 257.280223][ T976] usb 5-1: Using ep0 maxpacket: 16 [ 257.298346][ T976] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 257.313458][ T976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.323519][ T5934] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 257.333602][ T976] usb 5-1: Product: syz [ 257.342130][ T976] usb 5-1: Manufacturer: syz [ 257.346834][ T976] usb 5-1: SerialNumber: syz [ 257.360410][ T976] r8152-cfgselector 5-1: Unknown version 0x0000 [ 257.366728][ T976] r8152-cfgselector 5-1: config 0 descriptor?? [ 257.469840][ T5934] usb 4-1: device descriptor read/64, error -71 [ 257.560063][ T9] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 257.580186][ T5934] usb usb4-port1: attempt power cycle [ 257.592855][ T976] r8152-cfgselector 5-1: Unknown version 0x0000 [ 257.601993][ T976] r8152-cfgselector 5-1: bad CDC descriptors [ 257.615723][ T976] r8152-cfgselector 5-1: USB disconnect, device number 54 [ 257.721067][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 257.731542][ T9] usb 2-1: config index 0 descriptor too short (expected 190, got 36) [ 257.740060][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.750652][ T9] usb 2-1: config 0 has no interfaces? [ 257.756409][ T9] usb 2-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 257.765859][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.778163][ T9] usb 2-1: config 0 descriptor?? [ 257.919861][ T5934] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 257.941318][ T5934] usb 4-1: device descriptor read/8, error -71 [ 258.048586][ T5930] usb 2-1: USB disconnect, device number 50 [ 258.189933][ T5934] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 258.224234][ T5934] usb 4-1: device descriptor read/8, error -71 [ 258.268155][ T9] usb 3-1: USB disconnect, device number 45 [ 258.353659][ T978] usb 1-1: USB disconnect, device number 27 [ 258.385931][ T5934] usb usb4-port1: unable to enumerate USB device [ 258.759861][ T5896] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 258.930042][ T5896] usb 3-1: Using ep0 maxpacket: 32 [ 258.959463][ T5896] usb 3-1: unable to get BOS descriptor or descriptor too short [ 258.979329][ T5896] usb 3-1: config 5 has an invalid interface number: 4 but max is 0 [ 259.003242][ T5896] usb 3-1: config 5 has no interface number 0 [ 259.020659][ T5896] usb 3-1: config 5 interface 4 has no altsetting 0 [ 259.047351][ T5896] usb 3-1: New USB device found, idVendor=1199, idProduct=6809, bcdDevice=61.47 [ 259.064463][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.092242][ T5896] usb 3-1: Product: syz [ 259.097234][ T5896] usb 3-1: Manufacturer: syz [ 259.105155][ T5896] usb 3-1: SerialNumber: syz [ 259.332826][ T8270] netlink: 'syz.2.708': attribute type 3 has an invalid length. [ 259.374641][ T5896] sierra 3-1:5.4: Sierra USB modem converter detected [ 259.404519][ T5896] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 259.428887][ T5896] usb 3-1: USB disconnect, device number 46 [ 259.451410][ T5896] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 259.476354][ T5896] sierra 3-1:5.4: device disconnected [ 259.539877][ T47] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 259.689780][ T47] usb 1-1: Using ep0 maxpacket: 32 [ 259.704408][ T47] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 259.730552][ T47] usb 1-1: config 0 has no interface number 0 [ 259.745810][ T47] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 259.779070][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.792741][ T47] usb 1-1: Product: syz [ 259.796970][ T47] usb 1-1: Manufacturer: syz [ 259.813760][ T47] usb 1-1: SerialNumber: syz [ 259.830480][ T47] usb 1-1: config 0 descriptor?? [ 259.844429][ T47] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 259.865273][ T47] usb 1-1: selecting invalid altsetting 1 [ 259.872531][ T47] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 259.900881][ T47] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 259.931020][ T47] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 259.969855][ T47] usb 1-1: media controller created [ 260.026312][ T8301] netlink: 'syz.3.719': attribute type 3 has an invalid length. [ 260.064598][ T47] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 260.134358][ T8305] fuse: Bad value for 'fd' [ 260.141154][ T8305] netlink: 24 bytes leftover after parsing attributes in process `syz.3.719'. [ 260.181076][ T47] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 260.193850][ T47] zl10353_read_register: readreg error (reg=127, ret==-71) [ 260.208752][ T47] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 260.351736][ T47] usb 1-1: USB disconnect, device number 28 [ 260.590007][ T978] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 260.745865][ T978] usb 5-1: Using ep0 maxpacket: 16 [ 260.793002][ T978] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 260.820450][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.830985][ T978] usb 5-1: Product: syz [ 260.835833][ T978] usb 5-1: Manufacturer: syz [ 260.840139][ T47] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 260.843406][ T978] usb 5-1: SerialNumber: syz [ 260.873063][ T978] usb 5-1: config 0 descriptor?? [ 260.891812][ T978] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 260.911128][ T978] usb 5-1: Detected FT232H [ 261.029906][ T5838] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 261.051317][ T47] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 261.075798][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.094434][ T47] usb 2-1: Product: syz [ 261.110426][ T47] usb 2-1: Manufacturer: syz [ 261.115183][ T47] usb 2-1: SerialNumber: syz [ 261.159193][ T47] usb 2-1: config 0 descriptor?? [ 261.179131][ T47] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 261.200713][ T5838] usb 1-1: Using ep0 maxpacket: 8 [ 261.211172][ T5838] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 261.227786][ T5838] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.246406][ T5838] usb 1-1: Product: syz [ 261.259794][ T5838] usb 1-1: Manufacturer: syz [ 261.274800][ T5838] usb 1-1: SerialNumber: syz [ 261.301220][ T5838] usb 1-1: config 0 descriptor?? [ 261.395171][ T978] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 261.430330][ T978] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 261.450309][ T978] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 261.475808][ T978] usb 5-1: USB disconnect, device number 55 [ 261.501737][ T978] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 261.520699][ T5838] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 261.539851][ T978] ftdi_sio 5-1:0.0: device disconnected [ 261.588750][ T47] input: sonixb as /devices/platform/dummy_hcd.1/usb2/2-1/input/input13 [ 261.789174][ T5896] usb 2-1: USB disconnect, device number 51 [ 261.858180][ T8306] syz.2.721 (8306): drop_caches: 2 [ 262.278764][ T8334] netlink: 'syz.4.733': attribute type 1 has an invalid length. [ 262.326358][ T8316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.345759][ T8316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.353843][ T5896] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 262.377813][ T8334] 8021q: adding VLAN 0 to HW filter on device bond1 [ 262.475595][ T8336] bond1: (slave veth3): Enslaving as an active interface with a down link [ 262.489769][ T9] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 262.539979][ T5896] usb 4-1: Using ep0 maxpacket: 32 [ 262.560807][ T5896] usb 4-1: config 4 has an invalid interface number: 201 but max is 0 [ 262.562746][ T8334] bond1: (slave dummy0): making interface the new active one [ 262.586577][ T5896] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 262.598535][ T8334] dummy0: entered promiscuous mode [ 262.615951][ T8334] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 262.617943][ T5896] usb 4-1: config 4 has no interface number 0 [ 262.636726][ T5896] usb 4-1: config 4 interface 201 has no altsetting 0 [ 262.649576][ T5896] usb 4-1: New USB device found, idVendor=0421, idProduct=046e, bcdDevice=dc.a9 [ 262.649789][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 262.666360][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.679728][ T5896] usb 4-1: Product: syz [ 262.685377][ T5896] usb 4-1: Manufacturer: syz [ 262.695862][ T5896] usb 4-1: SerialNumber: syz [ 262.742278][ T9] usb 3-1: config index 0 descriptor too short (expected 190, got 36) [ 262.750919][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.769818][ T9] usb 3-1: config 0 has no interfaces? [ 262.779976][ T9] usb 3-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 262.800618][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.819533][ T9] usb 3-1: config 0 descriptor?? [ 262.925982][ T5896] usb 4-1: bad CDC descriptors [ 262.979419][ T5896] usb 4-1: USB disconnect, device number 38 [ 263.026100][ T8342] netlink: 88 bytes leftover after parsing attributes in process `syz.4.736'. [ 263.029957][ T5838] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 263.035489][ T8342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.736'. [ 263.050713][ T8332] FAULT_INJECTION: forcing a failure. [ 263.050713][ T8332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.083522][ T5838] usb 1-1: USB disconnect, device number 29 [ 263.089959][ T8332] CPU: 0 UID: 0 PID: 8332 Comm: syz.2.732 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 263.089989][ T8332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 263.090012][ T8332] Call Trace: [ 263.090021][ T8332] [ 263.090030][ T8332] dump_stack_lvl+0x241/0x360 [ 263.090071][ T8332] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.090102][ T8332] ? __pfx__printk+0x10/0x10 [ 263.090144][ T8332] should_fail_ex+0x424/0x570 [ 263.090172][ T8332] _copy_from_user+0x2d/0xb0 [ 263.090204][ T8332] core_sys_select+0x68d/0xab0 [ 263.090247][ T8332] ? __pfx_core_sys_select+0x10/0x10 [ 263.090280][ T8332] ? ktime_get_ts64+0xa1/0x440 [ 263.090309][ T8332] ? seqcount_lockdep_reader_access+0x159/0x230 [ 263.090339][ T8332] ? lockdep_hardirqs_on+0x9d/0x150 [ 263.090404][ T8332] ? __pfx_set_user_sigmask+0x10/0x10 [ 263.090427][ T8332] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 263.090452][ T8332] ? __fget_files+0x2a/0x420 [ 263.090478][ T8332] __se_sys_pselect6+0x356/0x3e0 [ 263.090515][ T8332] ? __pfx___se_sys_pselect6+0x10/0x10 [ 263.090553][ T8332] ? __x64_sys_pselect6+0x21/0xf0 [ 263.090584][ T8332] do_syscall_64+0xf3/0x230 [ 263.090611][ T8332] ? clear_bhb_loop+0x45/0xa0 [ 263.090635][ T8332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.090659][ T8332] RIP: 0033:0x7f3494b8d169 [ 263.090678][ T8332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.090695][ T8332] RSP: 002b:00007f34949f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 263.090718][ T8332] RAX: ffffffffffffffda RBX: 00007f3494da5fa0 RCX: 00007f3494b8d169 [ 263.090734][ T8332] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 263.090747][ T8332] RBP: 00007f34949f7090 R08: 0000200000000280 R09: 0000000000000000 [ 263.090761][ T8332] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 263.090774][ T8332] R13: 0000000000000000 R14: 00007f3494da5fa0 R15: 00007f3494ecfa28 [ 263.090810][ T8332] [ 263.317319][ T8342] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 263.351846][ T47] usb 3-1: USB disconnect, device number 47 [ 263.430389][ T8344] netlink: 88 bytes leftover after parsing attributes in process `syz.1.737'. [ 263.446901][ T8344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.737'. [ 263.468720][ T8344] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 264.096422][ T5838] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 264.219846][ T47] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 264.284320][ T8367] Invalid logical block size (1) [ 264.292994][ T5838] usb 5-1: Using ep0 maxpacket: 32 [ 264.305372][ T5838] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 264.314605][ T5838] usb 5-1: config 0 has no interface number 0 [ 264.328835][ T5838] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 264.338504][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.396166][ T5838] usb 5-1: Product: syz [ 264.400590][ T47] usb 3-1: Using ep0 maxpacket: 8 [ 264.407595][ T5838] usb 5-1: Manufacturer: syz [ 264.414023][ T47] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 264.428084][ T47] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 264.443120][ T5838] usb 5-1: SerialNumber: syz [ 264.506140][ T5838] usb 5-1: config 0 descriptor?? [ 264.559736][ T47] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 264.593638][ T5838] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 264.644990][ T47] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 264.695044][ T5838] usb 5-1: selecting invalid altsetting 1 [ 264.702243][ T47] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 264.716073][ T5838] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 264.728006][ T5838] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 264.743357][ T47] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 264.745452][ T8374] netlink: 88 bytes leftover after parsing attributes in process `syz.1.748'. [ 264.755936][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.770819][ T5838] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 264.817015][ T8374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.748'. [ 264.826901][ T5838] usb 5-1: media controller created [ 264.874620][ T8374] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 264.904253][ T5838] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 264.949852][ T5930] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 264.958972][ T5838] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 264.966418][ T5838] zl10353_read_register: readreg error (reg=127, ret==-71) [ 264.986170][ T5838] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 265.061718][ T47] usb 3-1: usb_control_msg returned -32 [ 265.067370][ T47] usbtmc 3-1:16.0: can't read capabilities [ 265.109899][ T5930] usb 4-1: device descriptor read/64, error -71 [ 265.138411][ T5838] usb 5-1: USB disconnect, device number 56 [ 265.370021][ T5930] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 265.427823][ T8362] usbtmc 3-1:16.0: INITIATE_CLEAR returned 0 [ 265.509785][ T5930] usb 4-1: device descriptor read/64, error -71 [ 265.630106][ T47] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 265.650127][ T5930] usb usb4-port1: attempt power cycle [ 265.767313][ T8394] batadv0: entered promiscuous mode [ 265.772870][ T47] usb 2-1: device descriptor read/64, error -71 [ 265.792649][ T8394] macsec1: entered promiscuous mode [ 265.822109][ T8394] batadv0: left promiscuous mode [ 266.010299][ T47] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 266.024764][ T5930] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 266.072418][ T5930] usb 4-1: device descriptor read/8, error -71 [ 266.105044][ T8396] netlink: 88 bytes leftover after parsing attributes in process `syz.0.756'. [ 266.169871][ T47] usb 2-1: device descriptor read/64, error -71 [ 266.231533][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 266.231557][ T30] audit: type=1326 audit(1744400847.894:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8397 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e198d169 code=0x7ffc0000 [ 266.319946][ T8396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.756'. [ 266.407002][ T5930] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 266.414849][ T30] audit: type=1326 audit(1744400847.894:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8397 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e198d169 code=0x7ffc0000 [ 266.451206][ T47] usb usb2-port1: attempt power cycle [ 266.467449][ T8396] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 266.521258][ T30] audit: type=1326 audit(1744400847.894:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8397 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f79e198d169 code=0x7ffc0000 [ 266.552583][ T5930] usb 4-1: device descriptor read/8, error -71 [ 266.574525][ T30] audit: type=1326 audit(1744400847.894:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8397 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e198d169 code=0x7ffc0000 [ 266.635437][ T30] audit: type=1326 audit(1744400847.894:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8397 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e198d169 code=0x7ffc0000 [ 266.919806][ T47] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 266.941734][ T5930] usb usb4-port1: unable to enumerate USB device [ 266.948918][ T47] usb 2-1: device descriptor read/8, error -71 [ 266.968554][ T30] audit: type=1326 audit(1744400847.894:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8397 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f79e198d169 code=0x7ffc0000 [ 267.104869][ T30] audit: type=1326 audit(1744400847.894:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8397 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e198d169 code=0x7ffc0000 [ 267.209934][ T47] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 267.221695][ T30] audit: type=1326 audit(1744400847.894:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8397 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e198d169 code=0x7ffc0000 [ 267.243844][ T47] usb 2-1: device descriptor read/8, error -71 [ 267.273119][ T30] audit: type=1326 audit(1744400847.894:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8397 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f79e198d169 code=0x7ffc0000 [ 267.350146][ T47] usb usb2-port1: unable to enumerate USB device [ 267.399591][ T30] audit: type=1326 audit(1744400847.894:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8397 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e198d169 code=0x7ffc0000 [ 267.849059][ T8410] netlink: 88 bytes leftover after parsing attributes in process `syz.3.760'. [ 267.858397][ T8410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.760'. [ 267.925391][ T8410] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 268.192105][ T36] dummy0: left promiscuous mode [ 268.599798][ T47] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 268.788092][ T8433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.766'. [ 268.804775][ T47] usb 4-1: device descriptor read/64, error -71 [ 269.062275][ T47] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 269.150507][ T9] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 269.239855][ T47] usb 4-1: device descriptor read/64, error -71 [ 269.361770][ T9] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 269.370493][ T47] usb usb4-port1: attempt power cycle [ 269.370509][ T9] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 269.416705][ T9] usb 5-1: config 220 has no interface number 2 [ 269.455399][ T9] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 269.484774][ T9] usb 5-1: config 220 interface 0 has no altsetting 0 [ 269.494531][ T9] usb 5-1: config 220 interface 76 has no altsetting 0 [ 269.509845][ T9] usb 5-1: config 220 interface 1 has no altsetting 0 [ 269.520185][ T9] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 269.530163][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.538209][ T9] usb 5-1: Product: syz [ 269.551077][ T9] usb 5-1: Manufacturer: syz [ 269.563218][ T9] usb 5-1: SerialNumber: syz [ 269.688490][ T8443] netlink: 88 bytes leftover after parsing attributes in process `syz.0.773'. [ 269.697628][ T8443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.773'. [ 269.709981][ T47] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 269.773917][ T8443] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 269.776606][ T47] usb 4-1: device descriptor read/8, error -71 [ 269.787721][ T8437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.800426][ T8437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.843091][ T9] usb 5-1: selecting invalid altsetting 0 [ 269.852277][ T9] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 269.858691][ T9] usb 5-1: No valid video chain found. [ 269.916698][ T9] usb 5-1: selecting invalid altsetting 0 [ 269.930018][ T9] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 269.958800][ T9] usb 5-1: USB disconnect, device number 57 [ 270.092190][ T47] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 270.183054][ T47] usb 4-1: device descriptor read/8, error -71 [ 270.292096][ T47] usb usb4-port1: unable to enumerate USB device [ 270.512375][ T8362] usbtmc 3-1:16.0: usb_control_msg returned -110 [ 270.519780][ T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 270.560571][ T5934] usb 3-1: USB disconnect, device number 48 [ 270.677825][ T8463] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 270.685198][ T8463] IPv6: NLM_F_CREATE should be set when creating new route [ 270.692540][ T8463] IPv6: NLM_F_CREATE should be set when creating new route [ 270.699842][ T8463] IPv6: NLM_F_CREATE should be set when creating new route [ 270.746738][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 270.755647][ T9] usb 1-1: config index 0 descriptor too short (expected 190, got 36) [ 270.766319][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.799916][ T9] usb 1-1: config 0 has no interfaces? [ 270.834006][ T9] usb 1-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 270.919990][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.947376][ T9] usb 1-1: config 0 descriptor?? [ 270.969819][ T978] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 271.110031][ T978] usb 2-1: device descriptor read/64, error -71 [ 271.122447][ T8470] netlink: 'syz.4.785': attribute type 32 has an invalid length. [ 271.135252][ T8470] netlink: 88 bytes leftover after parsing attributes in process `syz.4.785'. [ 271.166597][ T5894] usb 1-1: USB disconnect, device number 30 [ 271.305583][ T8472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.784'. [ 271.360222][ T978] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 271.576643][ T978] usb 2-1: device descriptor read/64, error -71 [ 271.689207][ T8481] netlink: 'syz.3.789': attribute type 1 has an invalid length. [ 271.780409][ T978] usb usb2-port1: attempt power cycle [ 271.906520][ T8481] 8021q: adding VLAN 0 to HW filter on device bond3 [ 272.149111][ T8486] bond3: (slave veth9): Enslaving as an active interface with a down link [ 272.163663][ T978] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 272.204566][ T978] usb 2-1: device descriptor read/8, error -71 [ 272.320024][ T5896] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 272.398934][ T8488] bond2: (slave dummy0): Releasing active interface [ 272.550690][ T978] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 272.558457][ T5896] usb 3-1: Using ep0 maxpacket: 8 [ 272.570304][ T8488] bond3: (slave dummy0): making interface the new active one [ 272.661367][ T8488] dummy0: entered promiscuous mode [ 272.669927][ T8490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.678814][ T8490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.686832][ T978] usb 2-1: device descriptor read/8, error -71 [ 272.697140][ T8488] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 272.963468][ T978] usb usb2-port1: unable to enumerate USB device [ 273.117729][ T8506] netlink: 'syz.3.798': attribute type 32 has an invalid length. [ 273.215210][ T8506] netlink: 88 bytes leftover after parsing attributes in process `syz.3.798'. [ 273.673926][ T8510] netlink: 196 bytes leftover after parsing attributes in process `syz.0.799'. [ 273.722365][ T8512] netlink: 'syz.0.799': attribute type 11 has an invalid length. [ 274.114010][ T5850] Bluetooth: hci1: command 0x0405 tx timeout [ 274.719931][ T5930] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 274.772169][ T36] dummy0: left promiscuous mode [ 274.799875][ T47] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 274.881995][ T5930] usb 1-1: Using ep0 maxpacket: 16 [ 274.892919][ T5930] usb 1-1: config index 0 descriptor too short (expected 190, got 36) [ 274.913956][ T5930] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.952041][ T5930] usb 1-1: config 0 has no interfaces? [ 274.959894][ T47] usb 4-1: Using ep0 maxpacket: 8 [ 274.976927][ T5930] usb 1-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 275.002804][ T47] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 275.027784][ T47] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 275.044740][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.058215][ T47] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 275.078504][ T47] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 275.096467][ T5930] usb 1-1: config 0 descriptor?? [ 275.146139][ T47] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 275.188198][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.360775][ T5930] usb 1-1: USB disconnect, device number 31 [ 275.449847][ T978] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 275.459115][ T47] usb 4-1: GET_CAPABILITIES returned 0 [ 275.483872][ T47] usbtmc 4-1:16.0: can't read capabilities [ 275.624723][ T5896] usb 3-1: unable to get BOS descriptor or descriptor too short [ 275.670163][ T8527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.680423][ T8527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.749106][ T8538] netlink: 'syz.3.804': attribute type 1 has an invalid length. [ 275.781764][ T978] usb 2-1: Using ep0 maxpacket: 8 [ 275.803727][ T5896] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 275.812102][ T8540] program syz.4.810 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 275.822725][ T978] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 275.878581][ T8538] 8021q: adding VLAN 0 to HW filter on device bond4 [ 275.886356][ T978] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.896538][ T5896] usb 3-1: can't read configurations, error -71 [ 275.979959][ T8542] program syz.4.810 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 276.028374][ T8541] bond4: (slave veth11): Enslaving as an active interface with a down link [ 276.052774][ T978] usb 2-1: config 0 has no interface number 0 [ 276.092497][ T978] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 276.104026][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.136890][ T978] usb 2-1: Product: syz [ 276.141995][ T8543] bond3: (slave dummy0): Releasing active interface [ 276.149011][ T8543] dummy0: left promiscuous mode [ 276.177087][ T8543] bond4: (slave dummy0): making interface the new active one [ 276.189790][ T8543] dummy0: entered promiscuous mode [ 276.196410][ T8543] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 276.242534][ T978] usb 2-1: Manufacturer: syz [ 276.289844][ T978] usb 2-1: SerialNumber: syz [ 276.428924][ T978] usb 2-1: config 0 descriptor?? [ 276.899805][ T5930] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 277.039802][ T5930] usb 1-1: device descriptor read/64, error -71 [ 277.173027][ T8533] netlink: 'syz.1.808': attribute type 11 has an invalid length. [ 277.520583][ T5930] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 277.689992][ T5930] usb 1-1: device descriptor read/64, error -71 [ 277.800267][ T5930] usb usb1-port1: attempt power cycle [ 277.876920][ T8578] netlink: 'syz.4.821': attribute type 12 has an invalid length. [ 278.151320][ T24] usb 4-1: USB disconnect, device number 47 [ 278.179841][ T5930] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 278.210453][ T5930] usb 1-1: device descriptor read/8, error -71 [ 278.585323][ T5930] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 278.930352][ T5930] usb 1-1: device descriptor read/8, error -71 [ 279.045221][ T5930] usb usb1-port1: unable to enumerate USB device [ 279.069396][ T978] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 279.263591][ T5930] usb 2-1: USB disconnect, device number 60 [ 279.370316][ T978] usb 4-1: Using ep0 maxpacket: 8 [ 279.433521][ T8584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.446737][ T8584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.849731][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 279.849754][ T30] audit: type=1326 audit(1744400861.414:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.2.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3494b8d169 code=0x7ffc0000 [ 279.984273][ T30] audit: type=1326 audit(1744400861.414:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.2.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f3494b8d169 code=0x7ffc0000 [ 280.458199][ T30] audit: type=1326 audit(1744400861.414:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.2.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3494b8d169 code=0x7ffc0000 [ 280.672580][ T30] audit: type=1326 audit(1744400861.414:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.2.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3494b8d169 code=0x7ffc0000 [ 280.849829][ T30] audit: type=1326 audit(1744400861.414:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.2.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f3494b8d169 code=0x7ffc0000 [ 280.880018][ T30] audit: type=1326 audit(1744400861.414:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.2.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3494b8d169 code=0x7ffc0000 [ 280.902978][ T30] audit: type=1326 audit(1744400861.414:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.2.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3494b8d169 code=0x7ffc0000 [ 280.927306][ T30] audit: type=1326 audit(1744400861.414:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.2.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f3494b8d169 code=0x7ffc0000 [ 281.072534][ T30] audit: type=1326 audit(1744400861.414:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.2.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3494b8d169 code=0x7ffc0000 [ 281.390368][ T30] audit: type=1326 audit(1744400861.414:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.2.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3494b8d169 code=0x7ffc0000 [ 281.715623][ T8607] Invalid logical block size (1) [ 282.244617][ T8612] netlink: 'syz.4.831': attribute type 1 has an invalid length. [ 282.333156][ T8612] 8021q: adding VLAN 0 to HW filter on device bond2 [ 282.347896][ T8614] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 282.351353][ T8617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.832'. [ 282.355202][ T8614] IPv6: NLM_F_CREATE should be set when creating new route [ 282.434714][ T8612] bond1: (slave dummy0): Releasing active interface [ 282.455705][ T8612] bond2: (slave dummy0): making interface the new active one [ 282.473415][ T8612] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 282.713686][ T8616] bond2: (slave veth5): Enslaving as an active interface with a down link [ 282.797248][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.800030][ T8622] lo: entered promiscuous mode [ 282.809965][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.826559][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.839081][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.851514][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.864038][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.876520][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.888988][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.901446][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.913948][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.768341][ T5930] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 283.797028][ T978] usb 4-1: unable to get BOS descriptor or descriptor too short [ 283.826601][ T8622] tunl0: entered promiscuous mode [ 283.866344][ T978] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 283.940857][ T978] usb 4-1: can't read configurations, error -71 [ 284.064433][ T8622] gre0: entered promiscuous mode [ 284.210919][ T5930] usb 2-1: Using ep0 maxpacket: 32 [ 284.212323][ T8622] gretap0: entered promiscuous mode [ 284.219524][ T8622] erspan0: entered promiscuous mode [ 284.231632][ T8622] ip_vti0: entered promiscuous mode [ 284.254467][ T8622] ip6_vti0: entered promiscuous mode [ 284.266763][ T8622] sit0: entered promiscuous mode [ 284.284385][ T8622] ip6tnl0: entered promiscuous mode [ 284.285158][ T8622] ip6gre0: entered promiscuous mode [ 284.340740][ T8622] syz_tun: entered promiscuous mode [ 284.341633][ T8622] ip6gretap0: entered promiscuous mode [ 284.342418][ T8622] bridge0: entered promiscuous mode [ 284.345028][ T8622] vcan0: entered promiscuous mode [ 284.345477][ T8622] bond0: entered promiscuous mode [ 284.345496][ T8622] bond_slave_0: entered promiscuous mode [ 284.345687][ T8622] bond_slave_1: entered promiscuous mode [ 284.345932][ T8622] macvlan0: entered promiscuous mode [ 284.347902][ T8622] team0: entered promiscuous mode [ 284.347932][ T8622] team_slave_0: entered promiscuous mode [ 284.351998][ T5930] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 284.352026][ T5930] usb 2-1: config 0 has no interface number 0 [ 284.520200][ T5930] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 284.520239][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.520262][ T5930] usb 2-1: Product: syz [ 284.520279][ T5930] usb 2-1: Manufacturer: syz [ 284.520296][ T5930] usb 2-1: SerialNumber: syz [ 284.548486][ T5930] usb 2-1: config 0 descriptor?? [ 284.635085][ T5930] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 284.635118][ T5930] usb 2-1: selecting invalid altsetting 1 [ 284.635137][ T5930] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 284.709246][ T5930] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 287.799748][ C0] net_ratelimit: 19044 callbacks suppressed [ 287.799774][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.799989][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.800276][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.800327][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.800648][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.800844][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.801141][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.801182][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.801534][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.801654][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.769671][ C0] sched: DL replenish lagged too much [ 292.809916][ C0] net_ratelimit: 23289 callbacks suppressed [ 292.809959][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.810075][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.810346][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.810418][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.810941][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.810942][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.811338][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.811360][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.811811][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.812152][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.819711][ C0] net_ratelimit: 23654 callbacks suppressed [ 297.819741][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.819820][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.820137][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.820149][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.820622][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.820649][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.820968][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.821017][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.821440][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.821512][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.829845][ C1] net_ratelimit: 23723 callbacks suppressed [ 302.829868][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.830151][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.830370][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.830516][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.830708][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.831041][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.831174][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.831407][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.831540][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.831882][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.866053][ T8622] team_slave_1: entered promiscuous mode [ 306.897113][ T8622] dummy0: entered promiscuous mode [ 307.839754][ C1] net_ratelimit: 24087 callbacks suppressed [ 307.839778][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.840027][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.840261][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.840388][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.840616][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.840854][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.841083][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.841244][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.841441][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.841715][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.850024][ C1] net_ratelimit: 23689 callbacks suppressed [ 312.850049][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.850175][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.850399][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.850596][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.850906][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.851116][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.851255][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.851532][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.851746][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.852050][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.385012][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.397912][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.859711][ C1] net_ratelimit: 23912 callbacks suppressed [ 317.859734][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.859855][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.860065][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.860327][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.860534][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.860679][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.860885][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.861140][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.861350][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.861477][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.869706][ C1] net_ratelimit: 23855 callbacks suppressed [ 322.869729][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.869979][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.870069][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.870345][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.870543][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.870779][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.870878][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.871261][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.871351][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.871708][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.880004][ C1] net_ratelimit: 23872 callbacks suppressed [ 327.880029][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.880098][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.880490][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.880499][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.880830][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.881271][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.881613][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.882069][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.882397][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.882849][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.889910][ C0] net_ratelimit: 23575 callbacks suppressed [ 332.889935][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.890079][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.890426][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.890438][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.890787][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.890935][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.891217][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.891266][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.891695][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.891730][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.899833][ C0] net_ratelimit: 23944 callbacks suppressed [ 337.899857][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.899948][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.900295][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.900313][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.900658][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.900777][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.901076][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.901113][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.901549][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.901597][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.909905][ C0] net_ratelimit: 23293 callbacks suppressed [ 342.909929][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.910392][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.910446][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.910817][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.910824][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.911200][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.911296][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.911644][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.911651][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.912123][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.919727][ C0] net_ratelimit: 22672 callbacks suppressed [ 347.919753][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.919790][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.920134][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.920268][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.920567][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.920606][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.921107][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.921110][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.921484][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.921554][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.929821][ C1] net_ratelimit: 24403 callbacks suppressed [ 352.929843][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.930197][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.930247][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.930645][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.930709][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.931099][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.931409][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.931443][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.931862][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.931908][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.939843][ C1] net_ratelimit: 23627 callbacks suppressed [ 357.939868][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.939919][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.940208][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.940493][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.940689][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.940957][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.941046][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.941379][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.941520][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.941841][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.949661][ C1] net_ratelimit: 23877 callbacks suppressed [ 362.949684][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.949967][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.950069][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:c2:8b:ed:bd:91, vlan:0) [ 362.950316][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.950390][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.950778][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.950885][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.951202][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.951208][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.951577][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.959708][ C0] net_ratelimit: 23883 callbacks suppressed [ 367.959732][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.959850][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:c2:8b:ed:bd:91, vlan:0) [ 367.960205][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.960215][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.960611][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.960671][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.961002][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.961077][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.961466][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.961618][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.969830][ C0] net_ratelimit: 21347 callbacks suppressed [ 372.969854][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.969900][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:c2:8b:ed:bd:91, vlan:0) [ 372.970224][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.970380][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.970708][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.970825][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.971083][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.971325][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.971545][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.971777][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.979753][ C0] net_ratelimit: 20974 callbacks suppressed [ 377.979777][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.980153][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.980163][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:c2:8b:ed:bd:91, vlan:0) [ 377.980490][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.980656][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.980969][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.981145][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.981338][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.981538][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.981810][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.874494][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 381.887373][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.989904][ C0] net_ratelimit: 21094 callbacks suppressed [ 382.989929][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.990010][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.990333][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.990417][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:c2:8b:ed:bd:91, vlan:0) [ 382.990770][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.990784][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.991180][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.991265][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.991522][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.991626][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.999964][ C0] net_ratelimit: 20894 callbacks suppressed [ 387.999988][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.000003][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.000553][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.000926][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.001445][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.001533][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 388.001945][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:c2:8b:ed:bd:91, vlan:0) [ 388.001973][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.002353][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.002492][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.009683][ C0] net_ratelimit: 21585 callbacks suppressed [ 393.009705][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 393.009830][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.010111][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.010295][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.010640][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.010695][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:c2:8b:ed:bd:91, vlan:0) [ 393.011035][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.011047][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.011492][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.011544][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.019711][ C0] net_ratelimit: 21408 callbacks suppressed [ 398.019735][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.019997][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.020276][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.020329][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.020729][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.020815][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.021106][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.021197][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:c2:8b:ed:bd:91, vlan:0) [ 398.021517][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.021971][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.029647][ C1] net_ratelimit: 21453 callbacks suppressed [ 403.029671][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:c2:8b:ed:bd:91, vlan:0) [ 403.029876][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.030022][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.030234][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.030510][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.030735][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.030846][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.031130][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.031320][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.031481][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.039643][ C1] net_ratelimit: 21205 callbacks suppressed [ 408.039667][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.039842][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.040066][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:c2:8b:ed:bd:91, vlan:0) [ 408.040390][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.040865][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.041209][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 408.041221][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.041626][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.041709][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.042103][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:c2:8b:ed:bd:91, vlan:0) [ 413.049639][ C1] net_ratelimit: 20892 callbacks suppressed [ 413.049663][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.049842][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.050143][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.050314][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.050505][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.050708][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.050969][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.051103][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.051379][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:c2:8b:ed:bd:91, vlan:0) [ 413.051715][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.059637][ C0] net_ratelimit: 21326 callbacks suppressed [ 418.059661][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.059736][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.060013][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.060146][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:c2:8b:ed:bd:91, vlan:0) [ 418.060485][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.060500][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.060903][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.060957][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.061254][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.061287][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.069699][ C1] net_ratelimit: 21696 callbacks suppressed [ 423.069723][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.070182][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 423.070189][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.070516][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.070634][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.070963][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.071155][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.071373][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:c2:8b:ed:bd:91, vlan:0) [ 423.071552][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.071716][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.079765][ C1] net_ratelimit: 21158 callbacks suppressed [ 428.079790][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.080130][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 428.080260][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.080557][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.080661][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:c2:8b:ed:bd:91, vlan:0) [ 428.081028][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.081095][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.081470][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.081516][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.081858][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 432.508866][ T31] INFO: task kworker/u8:0:12 blocked for more than 144 seconds. [ 432.508896][ T31] Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 [ 432.508912][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 432.508924][ T31] task:kworker/u8:0 state:D stack:22216 pid:12 tgid:12 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 432.508989][ T31] Workqueue: netns cleanup_net [ 432.509031][ T31] Call Trace: [ 432.509041][ T31] [ 432.509057][ T31] __schedule+0x1b88/0x5240 [ 432.509109][ T31] ? schedule+0x163/0x360 [ 432.509139][ T31] ? __pfx___schedule+0x10/0x10 [ 432.509182][ T31] ? schedule+0x90/0x360 [ 432.509209][ T31] ? schedule+0x90/0x360 [ 432.509232][ T31] schedule+0x163/0x360 [ 432.509267][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 432.509297][ T31] schedule_preempt_disabled+0x13/0x30 [ 432.509323][ T31] __mutex_lock+0x805/0x10c0 [ 432.509359][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 432.509392][ T31] ? netdev_run_todo+0x75c/0xf30 [ 432.509419][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 432.509449][ T31] ? __init_swait_queue_head+0xae/0x150 [ 432.509495][ T31] ? msleep+0xe2/0x100 [ 432.509528][ T31] netdev_run_todo+0x75c/0xf30 [ 432.509562][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 432.523354][ T31] ? unregister_netdevice_queue+0x2c4/0x400 [ 432.523405][ T31] ? batadv_meshif_destroy_netlink+0x1e6/0x270 [ 432.523446][ T31] default_device_exit_batch+0x804/0x880 [ 432.523491][ T31] ? __pfx_default_device_exit_batch+0x10/0x10 [ 432.523528][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 432.523564][ T31] ? cfg802154_pernet_exit+0xc3/0xe0 [ 432.523586][ T31] ? __pfx_default_device_exit_batch+0x10/0x10 [ 432.523624][ T31] cleanup_net+0x8af/0xd60 [ 432.523675][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 432.523723][ T31] ? process_scheduled_works+0x9cb/0x18e0 [ 432.523751][ T31] process_scheduled_works+0xac3/0x18e0 [ 432.523817][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 432.523855][ T31] ? assign_work+0x367/0x3d0 [ 432.523888][ T31] worker_thread+0x870/0xd50 [ 432.523933][ T31] ? __kthread_parkme+0x1a8/0x200 [ 432.523966][ T31] ? __pfx_worker_thread+0x10/0x10 [ 432.523994][ T31] kthread+0x7b7/0x940 [ 432.524029][ T31] ? __pfx_worker_thread+0x10/0x10 [ 432.524057][ T31] ? __pfx_kthread+0x10/0x10 [ 432.524087][ T31] ? __pfx_kthread+0x10/0x10 [ 432.524118][ T31] ? __pfx_kthread+0x10/0x10 [ 432.524149][ T31] ? __pfx_kthread+0x10/0x10 [ 432.524180][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 432.524203][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 432.524237][ T31] ? __pfx_kthread+0x10/0x10 [ 432.524277][ T31] ret_from_fork+0x4b/0x80 [ 432.524301][ T31] ? __pfx_kthread+0x10/0x10 [ 432.524333][ T31] ret_from_fork_asm+0x1a/0x30 [ 432.524374][ T31] [ 432.524400][ T31] INFO: task kworker/u8:3:53 blocked for more than 144 seconds. [ 432.524418][ T31] Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 [ 432.524433][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 432.524445][ T31] task:kworker/u8:3 state:D stack:22344 pid:53 tgid:53 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 432.524509][ T31] Workqueue: ipv6_addrconf addrconf_dad_work [ 432.524541][ T31] Call Trace: [ 432.524550][ T31] [ 432.524565][ T31] __schedule+0x1b88/0x5240 [ 432.524613][ T31] ? schedule+0x163/0x360 [ 432.524643][ T31] ? __pfx___schedule+0x10/0x10 [ 432.524687][ T31] ? schedule+0x90/0x360 [ 432.524713][ T31] ? schedule+0x90/0x360 [ 432.524737][ T31] schedule+0x163/0x360 [ 432.524761][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 432.524790][ T31] schedule_preempt_disabled+0x13/0x30 [ 432.524815][ T31] __mutex_lock+0x805/0x10c0 [ 432.524851][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 432.524883][ T31] ? addrconf_dad_work+0x110/0x16a0 [ 432.524912][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 432.524941][ T31] ? do_raw_spin_unlock+0x13c/0x8b0 [ 432.524980][ T31] ? look_up_lock_class+0x7b/0x170 [ 432.525017][ T31] addrconf_dad_work+0x110/0x16a0 [ 432.525046][ T31] ? __lock_acquire+0xad5/0xd80 [ 432.525077][ T31] ? __pfx_addrconf_dad_work+0x10/0x10 [ 432.525123][ T31] ? process_scheduled_works+0x9cb/0x18e0 [ 432.525148][ T31] process_scheduled_works+0xac3/0x18e0 [ 432.525207][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 432.525252][ T31] ? assign_work+0x367/0x3d0 [ 432.525285][ T31] worker_thread+0x870/0xd50 [ 432.525329][ T31] ? __kthread_parkme+0x1a8/0x200 [ 432.525361][ T31] ? __pfx_worker_thread+0x10/0x10 [ 432.525389][ T31] kthread+0x7b7/0x940 [ 432.525423][ T31] ? __pfx_worker_thread+0x10/0x10 [ 432.525452][ T31] ? __pfx_kthread+0x10/0x10 [ 432.525481][ T31] ? __pfx_kthread+0x10/0x10 [ 432.525512][ T31] ? __pfx_kthread+0x10/0x10 [ 432.525543][ T31] ? __pfx_kthread+0x10/0x10 [ 432.525573][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 432.525597][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 432.525623][ T31] ? __pfx_kthread+0x10/0x10 [ 432.525656][ T31] ret_from_fork+0x4b/0x80 [ 432.525680][ T31] ? __pfx_kthread+0x10/0x10 [ 432.525712][ T31] ret_from_fork_asm+0x1a/0x30 [ 432.525752][ T31] [ 432.525784][ T31] INFO: task kworker/u8:5:1088 blocked for more than 144 seconds. [ 432.525801][ T31] Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 [ 432.525815][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 432.525825][ T31] task:kworker/u8:5 state:D stack:22408 pid:1088 tgid:1088 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 432.525886][ T31] Workqueue: events_unbound linkwatch_event [ 432.525913][ T31] Call Trace: [ 432.525922][ T31] [ 432.525937][ T31] __schedule+0x1b88/0x5240 [ 432.525985][ T31] ? schedule+0x163/0x360 [ 432.526015][ T31] ? __pfx___schedule+0x10/0x10 [ 432.526057][ T31] ? schedule+0x90/0x360 [ 432.526088][ T31] ? schedule+0x90/0x360 [ 432.526112][ T31] schedule+0x163/0x360 [ 432.526136][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 432.526165][ T31] schedule_preempt_disabled+0x13/0x30 [ 432.526191][ T31] __mutex_lock+0x805/0x10c0 [ 432.526225][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 432.526266][ T31] ? linkwatch_event+0xe/0x60 [ 432.526292][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 432.526340][ T31] ? process_scheduled_works+0x9cb/0x18e0 [ 432.526366][ T31] linkwatch_event+0xe/0x60 [ 432.526389][ T31] process_scheduled_works+0xac3/0x18e0 [ 432.526448][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 432.526486][ T31] ? assign_work+0x367/0x3d0 [ 432.526519][ T31] worker_thread+0x870/0xd50 [ 432.526563][ T31] ? __kthread_parkme+0x1a8/0x200 [ 432.526596][ T31] ? __pfx_worker_thread+0x10/0x10 [ 432.526625][ T31] kthread+0x7b7/0x940 [ 432.526659][ T31] ? __pfx_worker_thread+0x10/0x10 [ 432.526688][ T31] ? __pfx_kthread+0x10/0x10 [ 432.526717][ T31] ? __pfx_kthread+0x10/0x10 [ 432.526747][ T31] ? __pfx_kthread+0x10/0x10 [ 432.526778][ T31] ? __pfx_kthread+0x10/0x10 [ 432.526809][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 432.526831][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 432.526859][ T31] ? __pfx_kthread+0x10/0x10 [ 432.526892][ T31] ret_from_fork+0x4b/0x80 [ 432.526915][ T31] ? __pfx_kthread+0x10/0x10 [ 432.526947][ T31] ret_from_fork_asm+0x1a/0x30 [ 432.526987][ T31] [ 432.527063][ T31] INFO: task kworker/0:5:5894 blocked for more than 144 seconds. [ 432.527080][ T31] Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 [ 432.527095][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 432.527106][ T31] task:kworker/0:5 state:D stack:22696 pid:5894 tgid:5894 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 432.527167][ T31] Workqueue: events switchdev_deferred_process_work [ 432.527201][ T31] Call Trace: [ 432.527210][ T31] [ 432.527224][ T31] __schedule+0x1b88/0x5240 [ 432.527265][ T31] ? try_to_wake_up+0xa27/0x15d0 [ 432.527309][ T31] ? __pfx_try_to_wake_up+0x10/0x10 [ 432.527341][ T31] ? schedule+0x163/0x360 [ 432.527371][ T31] ? __pfx___schedule+0x10/0x10 [ 432.527415][ T31] ? schedule+0x90/0x360 [ 432.527442][ T31] ? schedule+0x90/0x360 [ 432.527465][ T31] schedule+0x163/0x360 [ 432.527490][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 432.527520][ T31] schedule_preempt_disabled+0x13/0x30 [ 432.527545][ T31] __mutex_lock+0x805/0x10c0 [ 432.527580][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 432.527612][ T31] ? switchdev_deferred_process_work+0xe/0x20 [ 432.527645][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 432.527694][ T31] ? process_scheduled_works+0x9cb/0x18e0 [ 432.527719][ T31] switchdev_deferred_process_work+0xe/0x20 [ 432.527749][ T31] process_scheduled_works+0xac3/0x18e0 [ 432.527808][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 432.527846][ T31] ? assign_work+0x367/0x3d0 [ 432.527878][ T31] worker_thread+0x870/0xd50 [ 432.527923][ T31] ? __kthread_parkme+0x1a8/0x200 [ 432.527955][ T31] ? __pfx_worker_thread+0x10/0x10 [ 432.527984][ T31] kthread+0x7b7/0x940 [ 432.528018][ T31] ? __pfx_worker_thread+0x10/0x10 [ 432.528047][ T31] ? __pfx_kthread+0x10/0x10 [ 432.528077][ T31] ? __pfx_kthread+0x10/0x10 [ 432.528108][ T31] ? __pfx_kthread+0x10/0x10 [ 432.528139][ T31] ? __pfx_kthread+0x10/0x10 [ 432.528170][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 432.528192][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 432.528219][ T31] ? __pfx_kthread+0x10/0x10 [ 432.528259][ T31] ret_from_fork+0x4b/0x80 [ 432.528283][ T31] ? __pfx_kthread+0x10/0x10 [ 432.528315][ T31] ret_from_fork_asm+0x1a/0x30 [ 432.528355][ T31] [ 432.528368][ T31] INFO: task udevd:5931 blocked for more than 144 seconds. [ 432.528383][ T31] Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 [ 432.528398][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 432.528409][ T31] task:udevd state:D stack:23176 pid:5931 tgid:5931 ppid:5212 task_flags:0x400140 flags:0x00000002 [ 432.528470][ T31] Call Trace: [ 432.528489][ T31] [ 432.528504][ T31] __schedule+0x1b88/0x5240 [ 432.528540][ T31] ? register_lock_class+0x54/0x330 [ 432.528575][ T31] ? schedule+0x163/0x360 [ 432.528606][ T31] ? __pfx___schedule+0x10/0x10 [ 432.528648][ T31] ? schedule+0x90/0x360 [ 432.528675][ T31] ? schedule+0x90/0x360 [ 432.528698][ T31] schedule+0x163/0x360 [ 432.528722][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 432.528751][ T31] schedule_preempt_disabled+0x13/0x30 [ 432.528776][ T31] __mutex_lock+0x805/0x10c0 [ 432.528811][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 432.528843][ T31] ? uevent_show+0x17d/0x340 [ 432.528879][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 432.528917][ T31] ? __kasan_kmalloc+0x9d/0xb0 [ 432.528948][ T31] ? uevent_show+0x163/0x340 [ 432.528987][ T31] uevent_show+0x17d/0x340 [ 432.529028][ T31] dev_attr_show+0x55/0xc0 [ 432.529066][ T31] sysfs_kf_seq_show+0x32b/0x4a0 [ 432.529101][ T31] ? __pfx_dev_attr_show+0x10/0x10 [ 432.529144][ T31] seq_read_iter+0x461/0xda0 [ 432.529196][ T31] vfs_read+0x9a0/0xb90 [ 432.529233][ T31] ? __pfx_vfs_read+0x10/0x10 [ 432.529293][ T31] ksys_read+0x19d/0x2d0 [ 432.529323][ T31] ? __pfx_ksys_read+0x10/0x10 [ 432.529357][ T31] ? do_syscall_64+0xb6/0x230 [ 432.529389][ T31] do_syscall_64+0xf3/0x230 [ 432.529419][ T31] ? clear_bhb_loop+0x45/0xa0 [ 432.529447][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.529471][ T31] RIP: 0033:0x7f6c4bb16b6a [ 432.529492][ T31] RSP: 002b:00007ffff7ebccd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 432.529519][ T31] RAX: ffffffffffffffda RBX: 000055d5c86ec290 RCX: 00007f6c4bb16b6a [ 432.529537][ T31] RDX: 0000000000001000 RSI: 000055d5c86d0620 RDI: 0000000000000008 [ 432.529553][ T31] RBP: 000055d5c86ec290 R08: 0000000000000008 R09: 0000000000000020 [ 432.529569][ T31] R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000 [ 432.544066][ T31] R13: 0000000000003fff R14: 00007ffff7ebd1b8 R15: 000000000000000a [ 432.544109][ T31] [ 432.544136][ T31] INFO: task syz.2.834:8629 blocked for more than 144 seconds. [ 432.544154][ T31] Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 [ 432.544169][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 432.544180][ T31] task:syz.2.834 state:D stack:26688 pid:8629 tgid:8626 ppid:5859 task_flags:0x400140 flags:0x00000004 [ 432.544255][ T31] Call Trace: [ 432.544264][ T31] [ 432.544279][ T31] __schedule+0x1b88/0x5240 [ 432.544319][ T31] ? stack_trace_save+0x31/0x1d0 [ 432.544361][ T31] ? schedule+0x163/0x360 [ 432.544391][ T31] ? __pfx___schedule+0x10/0x10 [ 432.544435][ T31] ? schedule+0x90/0x360 [ 432.544462][ T31] ? schedule+0x90/0x360 [ 432.544485][ T31] schedule+0x163/0x360 [ 432.544510][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 432.544539][ T31] schedule_preempt_disabled+0x13/0x30 [ 432.544563][ T31] __mutex_lock+0x805/0x10c0 [ 432.544599][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 432.544631][ T31] ? rtnl_newlink+0xd68/0x1fe0 [ 432.544664][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 432.544703][ T31] ? ns_capable+0x8a/0xf0 [ 432.544731][ T31] ? rtnl_link_get_net_capable+0x168/0x340 [ 432.544770][ T31] rtnl_newlink+0xd68/0x1fe0 [ 432.544802][ T31] ? stack_depot_save_flags+0x44/0x940 [ 432.544837][ T31] ? kasan_save_track+0x51/0x80 [ 432.544862][ T31] ? kasan_save_track+0x3f/0x80 [ 432.544887][ T31] ? kasan_save_free_info+0x40/0x50 [ 432.544911][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 432.544942][ T31] ? __netlink_deliver_tap+0x561/0x7f0 [ 432.544972][ T31] ? netlink_deliver_tap+0x19d/0x1b0 [ 432.545003][ T31] ? netlink_unicast+0x7c6/0x9a0 [ 432.545030][ T31] ? netlink_sendmsg+0x8c3/0xcd0 [ 432.545061][ T31] ? __sock_sendmsg+0x221/0x270 [ 432.545089][ T31] ? ____sys_sendmsg+0x523/0x860 [ 432.545111][ T31] ? __sys_sendmsg+0x271/0x360 [ 432.545133][ T31] ? do_syscall_64+0xf3/0x230 [ 432.545159][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.545222][ T31] ? kasan_quarantine_put+0xdc/0x230 [ 432.545253][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 432.545284][ T31] ? nlmon_xmit+0xaf/0x100 [ 432.545327][ T31] ? __local_bh_enable_ip+0x168/0x200 [ 432.545350][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 432.545386][ T31] ? aa_get_newest_label+0x101/0x6f0 [ 432.545426][ T31] ? __lock_acquire+0xad5/0xd80 [ 432.545474][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 432.545509][ T31] rtnetlink_rcv_msg+0x80f/0xd70 [ 432.545541][ T31] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 432.545578][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 432.545619][ T31] ? ref_tracker_free+0x63e/0x7e0 [ 432.545653][ T31] netlink_rcv_skb+0x208/0x480 [ 432.545688][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 432.545723][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 432.545776][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 432.545811][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 432.545846][ T31] netlink_unicast+0x7f8/0x9a0 [ 432.545887][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 432.545919][ T31] ? skb_put+0x114/0x1f0 [ 432.545948][ T31] netlink_sendmsg+0x8c3/0xcd0 [ 432.545996][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.546034][ T31] ? aa_sock_msg_perm+0x91/0x160 [ 432.546072][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.546109][ T31] __sock_sendmsg+0x221/0x270 [ 432.546144][ T31] ____sys_sendmsg+0x523/0x860 [ 432.546179][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 432.546203][ T31] ? __fget_files+0x2a/0x420 [ 432.546229][ T31] ? __fget_files+0x2a/0x420 [ 432.546266][ T31] __sys_sendmsg+0x271/0x360 [ 432.546291][ T31] ? __pfx_futex_wake+0x10/0x10 [ 432.546320][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 432.546405][ T31] ? do_syscall_64+0xb6/0x230 [ 432.546438][ T31] do_syscall_64+0xf3/0x230 [ 432.546467][ T31] ? clear_bhb_loop+0x45/0xa0 [ 432.546494][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.546518][ T31] RIP: 0033:0x7f3494b8d169 [ 432.546539][ T31] RSP: 002b:00007f34949d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 432.546565][ T31] RAX: ffffffffffffffda RBX: 00007f3494da6080 RCX: 00007f3494b8d169 [ 432.546583][ T31] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000008 [ 432.546599][ T31] RBP: 00007f3494c0e990 R08: 0000000000000000 R09: 0000000000000000 [ 432.546614][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 432.546629][ T31] R13: 0000000000000000 R14: 00007f3494da6080 R15: 00007f3494ecfa28 [ 432.546664][ T31] [ 432.546677][ T31] [ 432.546677][ T31] Showing all locks held in the system: [ 432.546689][ T31] 5 locks held by kworker/0:0/9: [ 432.546704][ T31] 4 locks held by kworker/u8:0/12: [ 432.546718][ T31] #0: ffff88801bef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 432.546785][ T31] #1: ffffc90000117c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 432.546850][ T31] #2: ffffffff900f0890 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17c/0xd60 [ 432.546921][ T31] #3: ffffffff900fd3c8 (rtnl_mutex){+.+.}-{4:4}, at: netdev_run_todo+0x75c/0xf30 [ 432.546985][ T31] 3 locks held by kworker/u8:1/13: [ 432.547001][ T31] 1 lock held by khungtaskd/31: [ 432.547015][ T31] #0: ffffffff8ed3dfa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x30/0x180 [ 432.547079][ T31] 3 locks held by kworker/u8:2/36: [ 432.547095][ T31] 3 locks held by kworker/1:1/47: [ 432.547110][ T31] 3 locks held by kworker/u8:3/53: [ 432.547123][ T31] #0: ffff88814cf4e948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 432.547192][ T31] #1: ffffc90000bf7c60 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 432.547268][ T31] #2: ffffffff900fd3c8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x110/0x16a0 [ 432.547336][ T31] 3 locks held by kworker/u8:4/68: [ 432.547354][ T31] 2 locks held by kworker/0:2/976: [ 432.547368][ T31] 3 locks held by kworker/0:3/978: [ 432.547384][ T31] 3 locks held by kworker/u8:5/1088: [ 432.547397][ T31] #0: ffff88801b089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 432.547463][ T31] #1: ffffc90003e67c60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 432.547527][ T31] #2: ffffffff900fd3c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 432.547589][ T31] 3 locks held by kworker/u8:6/1159: [ 432.547616][ T31] 4 locks held by kworker/R-bat_e/3403: [ 432.547631][ T31] 3 locks held by kworker/u8:7/4262: [ 432.547646][ T31] 3 locks held by syslogd/5194: [ 432.547660][ T31] 1 lock held by klogd/5201: [ 432.547674][ T31] 3 locks held by udevd/5212: [ 432.547688][ T31] 1 lock held by dhcpcd/5505: [ 432.547703][ T31] 2 locks held by getty/5595: [ 432.547716][ T31] #0: ffff8880318ae0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 432.547782][ T31] #1: ffffc900033462f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x5bb/0x1700 [ 432.547856][ T31] 1 lock held by syz-executor/5828: [ 432.547872][ T31] 1 lock held by syz-executor/5858: [ 432.547886][ T31] #0: ffffffff8ed434b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x384/0x830 [ 432.547960][ T31] 2 locks held by kworker/0:4/5893: [ 432.547974][ T31] 3 locks held by kworker/0:5/5894: [ 432.547988][ T31] #0: ffff88801b080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 432.548053][ T31] #1: ffffc900042f7c60 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 432.548118][ T31] #2: ffffffff900fd3c8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 432.548187][ T31] 5 locks held by kworker/1:7/5930: [ 432.548202][ T31] 4 locks held by udevd/5931: [ 432.548215][ T31] #0: ffff88802037d790 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb4/0xda0 [ 432.548288][ T31] #1: ffff88807eef7488 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x53/0x3b0 [ 432.548364][ T31] #2: ffff888060c10878 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 [ 432.548439][ T31] #3: ffff8881433c4198 (&dev->mutex){....}-{4:4}, at: uevent_show+0x17d/0x340 [ 432.548512][ T31] 3 locks held by kworker/0:6/5934: [ 432.548527][ T31] 2 locks held by kworker/0:7/5949: [ 432.548542][ T31] 2 locks held by syz-executor/6567: [ 432.548556][ T31] 3 locks held by kworker/u8:8/6632: [ 432.548570][ T31] 3 locks held by kworker/u8:9/7279: [ 432.548586][ T31] 3 locks held by syz.0.833/8622: [ 432.548599][ T31] 1 lock held by syz.1.835/8623: [ 432.548613][ T31] 6 locks held by syz.2.834/8628: [ 432.548627][ T31] 1 lock held by syz.2.834/8629: [ 432.548641][ T31] #0: ffffffff900fd3c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xd68/0x1fe0 [ 432.548710][ T31] 1 lock held by syz.2.834/8631: [ 432.548725][ T31] 4 locks held by kworker/u8:10/8642: [ 432.548738][ T31] 4 locks held by kworker/u8:11/8644: [ 432.548753][ T31] 2 locks held by kworker/u8:12/8645: [ 432.548768][ T31] 1 lock held by kworker/u8:13/8646: [ 432.548782][ T31] [ 432.548789][ T31] ============================================= [ 432.548789][ T31] [ 432.548817][ T31] NMI backtrace for cpu 0 [ 432.548841][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 432.548865][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 432.548877][ T31] Call Trace: [ 432.548885][ T31] [ 432.548894][ T31] dump_stack_lvl+0x241/0x360 [ 432.548929][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 432.548960][ T31] ? __pfx__printk+0x10/0x10 [ 432.549003][ T31] nmi_cpu_backtrace+0x4ab/0x4e0 [ 432.549030][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 432.549048][ T31] ? _printk+0xd5/0x120 [ 432.549074][ T31] ? touch_all_softlockup_watchdogs+0x4a/0xf0 [ 432.549101][ T31] ? __wake_up_klogd+0xcc/0x110 [ 432.549133][ T31] ? __pfx__printk+0x10/0x10 [ 432.549162][ T31] ? debug_show_all_locks+0x30/0x180 [ 432.549187][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 432.549211][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 432.549237][ T31] watchdog+0x1058/0x10a0 [ 432.549270][ T31] ? watchdog+0x1ea/0x10a0 [ 432.549297][ T31] ? __pfx_watchdog+0x10/0x10 [ 432.549319][ T31] kthread+0x7b7/0x940 [ 432.549351][ T31] ? __pfx_watchdog+0x10/0x10 [ 432.549373][ T31] ? __pfx_kthread+0x10/0x10 [ 432.549398][ T31] ? __pfx_kthread+0x10/0x10 [ 432.549424][ T31] ? __pfx_kthread+0x10/0x10 [ 432.549452][ T31] ? __pfx_kthread+0x10/0x10 [ 432.549481][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 432.549501][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 432.549525][ T31] ? __pfx_kthread+0x10/0x10 [ 432.549555][ T31] ret_from_fork+0x4b/0x80 [ 432.549580][ T31] ? __pfx_kthread+0x10/0x10 [ 432.549609][ T31] ret_from_fork_asm+0x1a/0x30 [ 432.549645][ T31] [ 432.563371][ T31] Sending NMI from CPU 0 to CPUs 1: [ 432.563405][ C1] NMI backtrace for cpu 1 [ 432.563420][ C1] CPU: 1 UID: 0 PID: 3403 Comm: kworker/R-bat_e Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 432.563443][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 432.563455][ C1] Workqueue: bat_events batadv_tt_purge [ 432.563478][ C1] RIP: 0010:__kasan_check_byte+0x4/0x40 [ 432.563508][ C1] Code: 48 ff c8 48 89 c3 e9 db fe ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 <41> 57 41 56 53 49 89 f6 49 89 ff e8 9c 17 00 00 89 c3 84 c0 75 12 [ 432.563523][ C1] RSP: 0018:ffffc90000a07e40 EFLAGS: 00000202 [ 432.563538][ C1] RAX: 0000000000000001 RBX: ffffffff8ed3dfa0 RCX: 0000000000000002 [ 432.563550][ C1] RDX: 0000000000000000 RSI: ffffffff816dfbe5 RDI: ffffffff8ed3dfa0 [ 432.563562][ C1] RBP: ffffffff9368a020 R08: 0000000000000000 R09: 0000000000000000 [ 432.563573][ C1] R10: ffffc90000a07ff0 R11: ffffffff81aee8b0 R12: 0000000000000000 [ 432.563585][ C1] R13: 0000000000000002 R14: ffffffff8221e031 R15: 0000000000000000 [ 432.563597][ C1] FS: 0000000000000000(0000) GS:ffff888125096000(0000) knlGS:0000000000000000 [ 432.563610][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 432.563622][ C1] CR2: 00007fd81c1a6d58 CR3: 000000003299c000 CR4: 00000000003526f0 [ 432.563637][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 432.563647][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 432.563657][ C1] Call Trace: [ 432.563664][ C1] [ 432.563670][ C1] lock_acquire+0x89/0x2f0 [ 432.563690][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 432.563713][ C1] ? kmem_cache_alloc_noprof+0x1e1/0x390 [ 432.563735][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 432.563755][ C1] unwind_next_frame+0xd5/0x23b0 [ 432.563775][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 432.563798][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 432.563820][ C1] ? kmem_cache_alloc_noprof+0x1e1/0x390 [ 432.563842][ C1] ? kmem_cache_alloc_noprof+0x1e1/0x390 [ 432.563865][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 432.563891][ C1] arch_stack_walk+0x11e/0x150 [ 432.563916][ C1] ? kmem_cache_alloc_noprof+0x1e1/0x390 [ 432.563942][ C1] stack_trace_save+0x11a/0x1d0 [ 432.563967][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 432.563994][ C1] ? __lock_acquire+0xad5/0xd80 [ 432.564013][ C1] kasan_save_track+0x3f/0x80 [ 432.564031][ C1] ? kasan_save_track+0x3f/0x80 [ 432.564047][ C1] ? __kasan_slab_alloc+0x66/0x80 [ 432.564067][ C1] ? kmem_cache_alloc_noprof+0x1e1/0x390 [ 432.564116][ C1] __kasan_slab_alloc+0x66/0x80 [ 432.564136][ C1] kmem_cache_alloc_noprof+0x1e1/0x390 [ 432.564159][ C1] ? skb_ext_add+0x141/0x8e0 [ 432.564178][ C1] skb_ext_add+0x141/0x8e0 [ 432.564200][ C1] br_nf_pre_routing_ipv6+0x137/0x790 [ 432.564224][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 432.564248][ C1] ? br_nf_pre_routing+0x714/0x1480 [ 432.564271][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 432.564292][ C1] br_handle_frame+0x9fa/0x1530 [ 432.564318][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 432.564339][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 432.564364][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 432.564384][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 432.564403][ C1] __netif_receive_skb_core+0x155a/0x4bb0 [ 432.564427][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 432.564449][ C1] ? ip6_mc_input+0x9e4/0xbd0 [ 432.564466][ C1] ? ip6_mc_input+0x9e4/0xbd0 [ 432.564484][ C1] ? ip6_mc_input+0x9e4/0xbd0 [ 432.564507][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 432.564533][ C1] ? ip6_rcv_finish+0x338/0x3d0 [ 432.564559][ C1] ? NF_HOOK+0x3a0/0x450 [ 432.564581][ C1] ? skb_orphan+0xae/0xd0 [ 432.564596][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 432.564620][ C1] ? NF_HOOK+0x9e/0x450 [ 432.564643][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 432.564669][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 432.564699][ C1] __netif_receive_skb+0x130/0x670 [ 432.564725][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 432.564758][ C1] process_backlog+0x664/0x15c0 [ 432.564784][ C1] ? process_backlog+0x33d/0x15c0 [ 432.564812][ C1] ? __pfx_process_backlog+0x10/0x10 [ 432.564835][ C1] ? __lock_acquire+0xad5/0xd80 [ 432.564853][ C1] ? do_raw_spin_lock+0x151/0x370 [ 432.564878][ C1] __napi_poll+0xcb/0x480 [ 432.564902][ C1] net_rx_action+0x89d/0x1240 [ 432.564937][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 432.564960][ C1] ? __run_timer_base+0x17a/0x8e0 [ 432.564975][ C1] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 432.565011][ C1] handle_softirqs+0x2d6/0x9b0 [ 432.565033][ C1] ? do_softirq+0x11f/0x1e0 [ 432.565051][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 432.565073][ C1] do_softirq+0x11f/0x1e0 [ 432.565088][ C1] [ 432.565094][ C1] [ 432.565100][ C1] ? __pfx_do_softirq+0x10/0x10 [ 432.565119][ C1] ? batadv_tt_local_purge+0x2a0/0x340 [ 432.565138][ C1] ? lockdep_softirqs_on+0x144/0x1d0 [ 432.565156][ C1] __local_bh_enable_ip+0x1be/0x200 [ 432.565173][ C1] ? batadv_tt_local_purge+0x2a0/0x340 [ 432.565192][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 432.565209][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 432.565238][ C1] batadv_tt_local_purge+0x2a0/0x340 [ 432.565263][ C1] ? process_scheduled_works+0x9cb/0x18e0 [ 432.565282][ C1] batadv_tt_purge+0x35/0xa40 [ 432.565305][ C1] ? process_scheduled_works+0x9cb/0x18e0 [ 432.565324][ C1] process_scheduled_works+0xac3/0x18e0 [ 432.565358][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 432.565381][ C1] ? assign_work+0x346/0x3d0 [ 432.565402][ C1] rescuer_thread+0x662/0x1020 [ 432.565431][ C1] ? rescuer_thread+0x126/0x1020 [ 432.565457][ C1] ? __pfx_rescuer_thread+0x10/0x10 [ 432.565480][ C1] ? __kthread_parkme+0x1a8/0x200 [ 432.565507][ C1] ? __pfx_rescuer_thread+0x10/0x10 [ 432.565528][ C1] kthread+0x7b7/0x940 [ 432.565552][ C1] ? __pfx_rescuer_thread+0x10/0x10 [ 432.565574][ C1] ? __pfx_kthread+0x10/0x10 [ 432.565595][ C1] ? __pfx_kthread+0x10/0x10 [ 432.565617][ C1] ? __pfx_kthread+0x10/0x10 [ 432.565639][ C1] ? __pfx_kthread+0x10/0x10 [ 432.565662][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 432.565678][ C1] ? lockdep_hardirqs_on+0x9d/0x150 [ 432.565697][ C1] ? __pfx_kthread+0x10/0x10 [ 432.565720][ C1] ret_from_fork+0x4b/0x80 [ 432.565738][ C1] ? __pfx_kthread+0x10/0x10 [ 432.565760][ C1] ret_from_fork_asm+0x1a/0x30 [ 432.565784][ C1] [ 433.089815][ C1] net_ratelimit: 21116 callbacks suppressed [ 433.089838][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.089935][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.090253][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:c2:8b:ed:bd:91, vlan:0) [ 433.090293][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.090616][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.091102][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.091445][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.091717][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 433.091910][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.092122][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 437.474542][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 437.474569][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 437.474598][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 437.474613][ T31] Call Trace: [ 437.474622][ T31] [ 437.474632][ T31] dump_stack_lvl+0x241/0x360 [ 437.474685][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 437.474716][ T31] ? __pfx__printk+0x10/0x10 [ 437.474752][ T31] ? vscnprintf+0x5d/0x90 [ 437.474775][ T31] panic+0x349/0x880 [ 437.474801][ T31] ? __pfx_preempt_schedule+0x10/0x10 [ 437.474826][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 437.474849][ T31] ? __pfx_panic+0x10/0x10 [ 437.474874][ T31] ? tick_nohz_tick_stopped+0x82/0xb0 [ 437.474908][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 437.474933][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 437.474953][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 437.474977][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 437.475002][ T31] watchdog+0x1097/0x10a0 [ 437.475026][ T31] ? watchdog+0x1ea/0x10a0 [ 437.475053][ T31] ? __pfx_watchdog+0x10/0x10 [ 437.475076][ T31] kthread+0x7b7/0x940 [ 437.475116][ T31] ? __pfx_watchdog+0x10/0x10 [ 437.475138][ T31] ? __pfx_kthread+0x10/0x10 [ 437.475166][ T31] ? __pfx_kthread+0x10/0x10 [ 437.475194][ T31] ? __pfx_kthread+0x10/0x10 [ 437.475223][ T31] ? __pfx_kthread+0x10/0x10 [ 437.475251][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 437.475272][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 437.475297][ T31] ? __pfx_kthread+0x10/0x10 [ 437.475346][ T31] ret_from_fork+0x4b/0x80 [ 437.475369][ T31] ? __pfx_kthread+0x10/0x10 [ 437.475400][ T31] ret_from_fork_asm+0x1a/0x30 [ 437.475437][ T31] [ 437.475820][ T31] Kernel Offset: disabled