last executing test programs: 1m47.270311978s ago: executing program 2 (id=2385): ioctl$KVM_ASSIGN_SET_MSIX_NR(0xffffffffffffffff, 0x4008ae73, &(0x7f0000000100)={0xff, 0x9}) socket$key(0xf, 0x3, 0x2) openat$kvm(0xffffff9c, &(0x7f00000002c0), 0x103, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'ipvlan0\x00', 0x2}) socket$unix(0x1, 0x1, 0x0) write$FUSE_NOTIFY_RESEND(r0, &(0x7f00000000c0)={0x14}, 0x14) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0xff, 0x2}, 0xfe}, 0x18) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000340)}, 0x8) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYRES8], 0x50}}, 0x80010) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m46.903046525s ago: executing program 2 (id=2386): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_open_procfs(0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000004340), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc0f8565c, &(0x7f0000000000)={0x0, 0x6, 0x4, {0x4, @vbi={0x5, 0x4, 0x0, 0x47425247, [0x1, 0x5], [0xfffffffe], 0x1}}, 0xfffffffd}) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af60, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x52fadf8b, &(0x7f00000001c0)=""/115}]}) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) write$sndseq(r5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="42a1ee5b20dddd57a5", 0x9, 0xc001, 0x0, 0x0) syz_usb_connect(0x0, 0x12, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@gettfilter={0x34, 0x2e, 0x818e76d6a1ff35b4, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x4, 0x5}, {0xffe0, 0x7}, {0x5, 0x4}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x51}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001c00c9242bbd7000fbdbdf2507000000", @ANYRES32=r7, @ANYBLOB="80001e0a0a000200aaaa"], 0x30}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) 1m43.111953944s ago: executing program 2 (id=2396): ioctl$KVM_ASSIGN_SET_MSIX_NR(0xffffffffffffffff, 0x4008ae73, &(0x7f0000000100)={0xff, 0x9}) socket$key(0xf, 0x3, 0x2) openat$kvm(0xffffff9c, &(0x7f00000002c0), 0x103, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'ipvlan0\x00', 0x2}) socket$unix(0x1, 0x1, 0x0) write$FUSE_NOTIFY_RESEND(r0, &(0x7f00000000c0)={0x14}, 0x14) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0xff, 0x2}, 0xfe}, 0x18) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000340)}, 0x8) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYRES8], 0x50}}, 0x80010) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m42.858285662s ago: executing program 2 (id=2400): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/kcm\x00') unshare(0x8040600) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) syz_open_procfs(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') pread64(r0, &(0x7f0000002280)=""/4096, 0x1000, 0xff) 1m42.688984286s ago: executing program 2 (id=2401): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$loop(0x0, 0x1, 0x400000) fchdir(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x8000, 0xffffffff}, 0x0) r5 = fsopen(&(0x7f00000000c0)='ocfs2_dlmfs\x00', 0x1) r6 = fsmount(r5, 0x0, 0x8) getdents(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, 0x0, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) socket$alg(0x26, 0x5, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2093, 0x2000}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x7}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}]}}}]}, 0x58}}, 0x20000000) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xe1, 0x2, 0x9, '\x00', 0x5}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vnet(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) 1m42.411068745s ago: executing program 2 (id=2405): userfaultfd(0x80001) socket$key(0xf, 0x3, 0x2) openat$kvm(0xffffff9c, &(0x7f00000002c0), 0x103, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'ipvlan0\x00', 0x2}) socket$unix(0x1, 0x1, 0x0) write$FUSE_NOTIFY_RESEND(r0, &(0x7f00000000c0)={0x14}, 0x14) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0xff, 0x2}, 0xfe}, 0x18) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000340)}, 0x8) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYRES8], 0x50}}, 0x80010) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m41.807389107s ago: executing program 32 (id=2405): userfaultfd(0x80001) socket$key(0xf, 0x3, 0x2) openat$kvm(0xffffff9c, &(0x7f00000002c0), 0x103, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'ipvlan0\x00', 0x2}) socket$unix(0x1, 0x1, 0x0) write$FUSE_NOTIFY_RESEND(r0, &(0x7f00000000c0)={0x14}, 0x14) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0xff, 0x2}, 0xfe}, 0x18) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000340)}, 0x8) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYRES8], 0x50}}, 0x80010) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 51.774786974s ago: executing program 4 (id=2575): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000280)={'security\x00', 0xffffffffffffff06}, &(0x7f0000000080)=0x24) 51.710699709s ago: executing program 4 (id=2576): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r1 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r0, 0x0, 0x0, 0x0, 0x40000023, 0x1, {0x2}}) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000030902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x8000, 0x0, 0x0, 0x2) sched_setattr(0x0, 0x0, 0x0) io_uring_enter(r1, 0x6e2, 0x600, 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$netlink(0x10, 0x3, 0x4) syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x3, 0x1, 0x0, 0xb0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0x13, 0x24, 0x6, 0x6, 0x0, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @output_terminal={0x9}, @selector_unit={0x9, 0x24, 0x5, 0x1, 0x0, "f8431cfd"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x307, 0x0, 0x4, 0xfc}, @selector_unit={0x6, 0x24, 0x5, 0x4, 0x0, "fd"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0xcd8}}}}}}}]}}, 0x0) 49.344721816s ago: executing program 5 (id=2584): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x0, 0x80) getdents(r1, &(0x7f0000000000)=""/23, 0x17) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0xd9d8, 0x8}) io_uring_register$IORING_REGISTER_FILES(r2, 0x1e, &(0x7f0000000000)=[r2], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x7, 0x8}, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) getrusage(0x1, &(0x7f0000000100)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r6, &(0x7f0000000000)=""/42, 0x2a, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0}], 0x1) socket$inet6(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/bpf', 0x0, 0x0) socket$inet(0xa, 0x801, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond_slave_1\x00'}) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x14c, 0x1a, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 48.329706208s ago: executing program 4 (id=2586): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000002c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000100)={@my=0x1}) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0x5}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x1, 0xffff, 0x0, 0xffffffff, 0x75, 0x46b, 0x9, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7aa, &(0x7f0000000000)={{@my=0x1}, @local, 0x8}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'gretap0\x00', &(0x7f00000004c0)={'erspan0\x00', r1, 0x7, 0x800f, 0x1, 0x4, {{0x9, 0x4, 0x0, 0x34, 0x24, 0x68, 0x0, 0x1, 0x4, 0x0, @rand_addr=0x64010100, @multicast2, {[@end, @lsrr={0x83, 0xf, 0x38, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbff, {0x1c, 0x14, 0x7ed814f048b2afb7, 0x3, 0xfc, 0x3, 0x0, 0x2, 0x4700}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_DST={0x8, 0x1, {0xce67, 0x0, 0x1}}, @RTA_VIA={0x14, 0x12, {0x29, "8bbe542ae7efe5396c3f5f1da2e5"}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x2, 0x7, r11}}, @RTA_DST={0x8, 0x1, {0x7ff}}, @RTA_VIA={0x14, 0x12, {0x9, "743759fa34f72b8915759a480a48"}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1c}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x3}, @RTA_VIA={0x14, 0x12, {0x21, "085363df9755f45e060000002be6"}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20004885}, 0x48014) 47.351694896s ago: executing program 4 (id=2589): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0xf000, 0x6, 0x7, 0xc, 0x0, [{0x4, 0xb, 0x4, '\x00', 0x9}, {0xfa, 0x0, 0x0, '\x00', 0x80}, {0x0, 0x3, 0x0, '\x00', 0x7}, {0x1, 0x8, 0x8, '\x00', 0x3}, {0xc0, 0x8, 0x9, '\x00', 0xf0}, {0xf6, 0x4, 0x6, '\x00', 0x3}, {0x42, 0x6b, 0x7, '\x00', 0xd}, {0x3, 0x5, 0x1, '\x00', 0x9}, {0x5, 0x0, 0xf, '\x00', 0x5}, {0x2, 0x4, 0x2, '\x00', 0x3}, {0x7, 0x5, 0x4, '\x00', 0x5}, {0x9b, 0x7, 0x3, '\x00', 0x4}, {0x7, 0x9, 0xc3, '\x00', 0x7}, {0x4, 0x4, 0xf7, '\x00', 0x3}, {0xc, 0x9e, 0xc, '\x00', 0x9}, {0x8, 0xb, 0x6f, '\x00', 0x5}, {0x7, 0x5, 0xf, '\x00', 0xf3}, {0x2, 0x80, 0x70, '\x00', 0xff}, {0x10, 0xe2, 0x3, '\x00', 0xe}, {0x1, 0x4, 0x4, '\x00', 0x6}, {0xa, 0x9, 0x6}, {0x7f, 0xc0, 0x0, '\x00', 0x6}, {0x9c, 0x6, 0x8, '\x00', 0x1}, {0x2, 0x2, 0x6, '\x00', 0x7}]}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82042, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000071000040"]) r4 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x6, 0x8, 0x4, 0xc07}) mq_getsetattr(r4, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_timedreceive(r4, &(0x7f0000000100)=""/90, 0x5a, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x5, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_pgetevents(0x0, 0x3, 0x2, &(0x7f0000000340)=[{}, {}], 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) timer_create(0x9, 0x0, &(0x7f0000bbdffc)) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r0], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x24040841) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000140)) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, 0x0, 0x0) 47.193608336s ago: executing program 5 (id=2592): set_mempolicy(0x1, &(0x7f0000000000)=0xffff, 0x2d0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1, 0x3, 0x9fd, 0x84, 0x105}, 0x50) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r1, &(0x7f0000000340), 0x8) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000440)={{0xfffe, 0x5, 0x2, 0x5}, 'syz1\x00', 0x53}) openat$fb0(0xffffff9c, &(0x7f0000000100), 0x45e801, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_CREATE(r0, 0x5501) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write$cgroup_int(r3, &(0x7f00000000c0)=0x40000000000005, 0x12) set_mempolicy(0x1, &(0x7f0000000040)=0x9639, 0x40) 47.031149715s ago: executing program 3 (id=2594): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfffa}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40) (fail_nth: 3) 46.880690325s ago: executing program 4 (id=2595): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x10, 0x2, &(0x7f0000000000)=0xfd) socket$inet(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_sctp(0x2, 0x5, 0x84) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x180) recvmmsg(r0, &(0x7f00000009c0)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000000500), 0x0, &(0x7f0000000a40)=""/127, 0x7f}}, {{&(0x7f00000001c0)=@sco={0x1f, @none}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/90, 0x5a}, {&(0x7f00000004c0)=""/133, 0x85}, {&(0x7f0000000040)=""/25, 0x19}, {&(0x7f00000006c0)=""/208, 0xd0}, {&(0x7f0000000580)=""/30, 0x1e}], 0x5, &(0x7f00000007c0)=""/83, 0x53}, 0xe8ef}, {{&(0x7f0000000840)=@hci, 0x80, &(0x7f0000000980)=[{&(0x7f00000008c0)=""/160, 0xa0}], 0x1}, 0x800}], 0x3, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) quotactl$Q_SETINFO(0xffffffff80000601, 0x0, 0x0, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4098) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x2c020400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="48000000100001002cbd700000000000400000fa6402648b947a85ecc6f0fd6690c73825b5165cdd92eb21305bf683f03f61c2021a2c1978d7930be7e94bf365b17096749e3ec4e44c95103612c0127483d5cde31ae25f928ed61ccc4dd7a2810fdddc4284869ba2fcb9c6ae94ca8d601f29bb9633faf14799fa56dfdb1424068c04549aa87161ec539caf12bfdc215aaa0fea", @ANYRES32=0x0, @ANYBLOB="a821000000000000140003006e657464657673696d3000000000000014001680100001800c000900fdffffff07000000"], 0x48}}, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) getegid() r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') r4 = socket$inet6(0xa, 0x2, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) lseek(r3, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0xffffffff) 46.754195028s ago: executing program 5 (id=2596): r0 = io_uring_setup(0x46ea, &(0x7f00000000c0)={0x0, 0xc0a6, 0x80, 0x800, 0x303}) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000080), 0xc) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) read(r1, &(0x7f0000000180)=""/52, 0xfffffdef) getpeername(r1, 0x0, &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], '\x00\x008'}, @datasec={0x4, 0x0, 0x0, 0xf, 0x1, [], "de"}]}}, 0x0, 0x36}, 0x28) r2 = socket(0xa, 0x3, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') 46.620539914s ago: executing program 3 (id=2597): r0 = getpid() r1 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r0, @ANYBLOB="cc860fd09d8ce0aa65cda12f081efb5b96fcd787d14990ff3a4952ca517cd171bd2c32b546bd2fa552c689d61eddd04bc089d3d2eae179a18462a4362edfd3284f4cca955a0e440fcfe18dea956d0892501dfa2becb5bd2b67c94c06a29d09a4758494206a7a54b9a0cc4ac69884faed4b68691eb1086ef2e9c3c1fff133bce54294ba44327701d45ec113d35b2f32fb3ea5bb5c1543cc60a31a04232bcec91c"], 0x0) syz_usb_connect(0x6, 0x77e, &(0x7f0000000f40)={{0x12, 0x1, 0x300, 0xa7, 0x83, 0xba, 0x8, 0x87d, 0x5704, 0xd394, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76c, 0x4, 0x5, 0x6, 0xb0, 0xf5, [{{0x9, 0x4, 0xe8, 0x1, 0x5, 0x15, 0x39, 0xc8, 0xd0, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x4, 0x5, 0x2}, {0x6, 0x24, 0x1a, 0x6, 0x1}}], [{{0x9, 0x5, 0xb, 0x4, 0x20, 0x9, 0x7f, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x6, 0x8, 0xc2}]}}, {{0x9, 0x5, 0x9, 0xc, 0x400, 0xf, 0x9, 0x5, [@generic={0x61, 0x23, "e2b5b4e4c96fac365ae517facd48783b9d08080a3c82f518002f75d281244fda0e4ee6a4d595d07896b1ef82a76eaae0261180c3dd600d254b27ce1663a5730c919598c25b5a86b434eea118298fe2cbc8083661b4b236a23eaebb2eb51f91"}, @generic={0x30, 0x1, "a12370af9f00eb29f212ef781e8a541a82073952adf210dc80af64837fb91cebfc9e4da12688a2f0c44a21d64265"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0x3, 0xd4}}, {{0x9, 0x5, 0x0, 0x1, 0x3ff, 0x81, 0x8, 0x4}}, {{0x9, 0x5, 0xb, 0x2, 0x20, 0x7, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x1}, @generic={0x71, 0x2, "fe4c9bb844ec1ba400cbbb49b2f9d0e77ab9ea7a9765c1fc9ad4952c55e6cf7f19c4c8ba46e30c47b48112a4236d733bf39e54430ed6467d5d02a792195b53521c283bc185ff8378932bd489f66be2fbb1d22ebee99c6c7a25269814963b012415a9d6d10c119980a617c362a3e404"}]}}]}}, {{0x9, 0x4, 0xb, 0xa, 0xa, 0x22, 0x8a, 0x55, 0x7f, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x600000, 0x0, 0x8, 0xbd}, [@mdlm_detail={0x7, 0x24, 0x13, 0x5, 't\b:'}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0xb2}, @mbim={0xc, 0x24, 0x1b, 0x3, 0xa8, 0xf9, 0xee, 0x1, 0x9}, @ncm={0x6, 0x24, 0x1a, 0x4, 0x4}]}], [{{0x9, 0x5, 0xc, 0x3, 0x40, 0x60, 0x8, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x5}]}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x7, 0x7, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x85, 0x101}]}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0x8, 0x80, 0x3}}, {{0x9, 0x5, 0xf, 0x10, 0x0, 0x7, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x8001}]}}, {{0x9, 0x5, 0x5, 0x2, 0x10, 0xef, 0xfd, 0x9, [@generic={0x6a, 0x10, "c811a6e2f104ed3a1a22bf24ecc54ea7a8a07020336f572091c405b79fcbad1a240515fb672c0a1bef19ebfab6fbdc820464840d646a59b9b6733e5be32bfedc0e7413a4b16c0558ba116bfa4a01b647d887de01925d17348ceef9ca25eca13fdd34e2306b84bfa9"}, @generic={0x38, 0x7, "f2e9d474fcc8611d208a94dad62410c8b00f92cb6555d8a0ef65fd310e58c9b61ced1f5f026fc508bb0dc9989db79a153f24c57c7825"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x3ff, 0xf8, 0x7, 0x5}}, {{0x9, 0x5, 0x80, 0x1, 0x400, 0xd, 0x8, 0xfe}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x9c, 0x7, 0x4}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x2a, 0xf5, 0xf7}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x6, 0x4, 0x3, [@generic={0xd, 0x5, "8b65fbbd26e5516802bb29"}]}}]}}, {{0x9, 0x4, 0x7, 0x3, 0x4, 0xc6, 0x98, 0xf6, 0x2, [], [{{0x9, 0x5, 0xe, 0x10, 0x40, 0x9, 0x7f, 0x2, [@generic={0x1e, 0x2, "8c67b0b3993accc637bcd63064ed60ecb266b4760d40cfc8c5354844"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x5, 0x6, 0x1}}, {{0x9, 0x5, 0x6, 0x3, 0x200, 0x3, 0x0, 0x6, [@generic={0xd8, 0x3, "a8fc1ccf93f10c79149427943ff46bb0097b622fee923ab1865a05309a0b72207fb02e6b1f2dedb7e63f0597375df0891641688933a317a125b951c6b1f578ed4d7a5fa7b20fd2bd0e9a5244a9b6e86a4d250738a08a6e1bb767bf7b03af0531219dbfa08c674264e85b9677242c9b4be76d5700ab6000742826a8ef5303edf47c887899f787f4f10044e1d9772fed03478cd478d6d1b1d707eced15bb34076f1260e32439414bfc52bc02faf36d70bfbe31191db8f1f5de313206d7e7acc5e8cbb4f9118d41cdbdc18f5b34e6b8d10fa77ebce7de89"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x7, 0x25f3}]}}, {{0x9, 0x5, 0x5, 0x10, 0x400, 0x73, 0xc, 0xe}}]}}, {{0x9, 0x4, 0xf9, 0x3c, 0x7, 0x86, 0xb3, 0xd9, 0x3, [@generic={0x2a, 0x8, "567a8a983e95266dacdb5e1d463e22507d1384b9e32b8380c466392e115958fb3df56e149b392597"}], [{{0x9, 0x5, 0x0, 0xc, 0x8, 0x2, 0x36, 0x2}}, {{0x9, 0x5, 0xf73edd67aedc27d1, 0xc, 0x3ff, 0x0, 0x8, 0x2, [@generic={0x71, 0xa, "48208802aace8a86907b023c47d4cddfe11849a94064633b4c2a48e300c67b72afae79d4c77f0fb0b41a64cd2daefb25baef3f030a5af7995b36631b3ab82d2cf6545f73b93c5a00d05a70fde5e9627bf44972a99ca581faf7d08afc14a4541d6cd4eb3c4b1c84233f02d71df97546"}, @generic={0x28, 0x7, "3412e8069004157eedbf7840f80dd1b3219a4b2b089d0d4c546e4355b45485c5b396c6422299"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x3ff, 0x4, 0x42, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x6, 0xb, 0x8}, @generic={0x6f, 0x4, "7b0c8bb7ab2df79b629bd2ca4d5264a958a4b577cab67c414787c88eed1dd68eae152f65bb018797eddb26cfb71e49f0e97057c31cecc359f0d398d468dd24d8d524b924b122f2e719b8d3175b1bcafac72df8e832e819324f3ae1172b676b462c3f90697895697cbb9aa0037f"}]}}, {{0x9, 0x5, 0xd, 0x14, 0x40, 0x9, 0x2, 0x3a}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0x2, 0x9, 0x40, [@generic={0xd4, 0x21, "82c5cb93437ccf32e3d9acb5ca115621df441763b68b90ce582338f773efeae58159b9262c5531aa11189b511c93ab0a99a867da5c7c2c9fecf9347b5d482a3a8be52f13a3dacb4376f8d7c1e20d98fe4408149eaa91db5e738adb0eef85cd9d75be692db0aa00d22e4eb55fdde9ed22e5e5d52c3f270cc29ae949e684085c541454e01077452ddfde6b5e56125b93b359f0d107c4f070211fdda0ea559f27a954a0210043d3a4ccd72fb444c481ccf07018aeb57f4819a1707bb0a7f911ff73b09a931da5dca495b90651297dd62e92f5b5"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x81, 0xa8, 0x1, [@generic={0xe9, 0x14, "050a6a8219d7874743bfbe1fcb639dedcc17cd3c27a91483ffbd84c5125b87158de3fc78556347db26319ddedd662f2c4ea4875e9c2f77091cb6c5d69cec4582bca30278223ad58922475d9951adef06d3e083452b3025624d53c9cec73470d4fdf7b809665112fd02522bdd78a4abf15fd553c26bd6091da0118389afb53beb396f0a445e59808a5398d5f108c7f77329b39428f6ad0686bd84585c63cf3ffcfbd8ca0a9785b83afa74a1f385aa9c785a43a1e630850c08947f5d3585442e5e49072b7c373ee7ec254267b8dd0d8e4cfb58d6f314836daac6665d93160aa33e9e0bcb97aab02b"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0xfffd}]}}, {{0x9, 0x5, 0x0, 0x1, 0x200, 0x3, 0xf7, 0x58, [@generic={0x35, 0x2a, "fe2a761734c75b313133f96813d39167b32d56f35508ae7a0c2003a02671dd5dbbd5b52b8a72823f2335d7d61535118fe3ab09"}]}}]}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x17, 0x88, 0x8, 0x10, 0x9}, 0x33, &(0x7f0000000900)=ANY=[@ANYBLOB="050f33000403100b141004099f7aff80444f0298aa740624e7fe03100b141004013224ed5a8ac52bd7005ae8ff43d5a3bc0000"], 0x6, [{0xa1, &(0x7f0000000940)=@string={0xa1, 0x3, "565a0609239bedc912efb7f8deb3f69501074820b730563f77a501c6656c1947205d5c8e12606db96947127e3f96e9c387c0cc90600946db754b8a0fba92d81ca7103a688399ea91f987d074b531b96ed9dbef4893386347894d6f421f600b5df5acb7da68ca6c05d6887eab2ed7baf6c378b2b6c667e29dedbfc28b4b433e6615593b464243940d60ff3a5944e45dc5257a42ec64e51a0832661df90b262c"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x418}}, {0x31, &(0x7f0000000880)=@string={0x31, 0x3, "6b3e94d63c9743944124dc940bff965fd7776a7de92e5adf66e709f1d95c574738b38ae894fdc1a4ef6e928768f040"}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x641d}}]}) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = syz_pidfd_open(r0, 0x0) process_madvise(r2, &(0x7f0000000740)=[{0x0}, {}, {&(0x7f0000000240)="732bbbf2cdf6d2e3db984fcb1ce7ce6b2cdd427e62112c8a9d9a69f3816dc1e87cfa8f2f65c10eecb76d7a10ed5b2b0082c0649e99dda81483230bc0b8999944d92f44c323644ee6441396c3b425ffb7cd774174f9e7c3cbcb056c999fdd5b2990c84485ee1eccb1ae", 0x69}, {&(0x7f0000000080)="601040e0ad25c41d59be25d13d3118d76f5bad464cef96f468e407d40970668f3c6279699b39f9f28c31729d8f6f12afc10dfdf3972074a6dfec5e9959a1ccc62ce143dab3e218b4af2209a1488f1fcdc6903a67f4d483fc25143270af6c152736d37562003078c40b5cdf09a210ee605c74d20b3137243469d077118d9849553c1b199681a4e623c45a61629fec039d0f3efd96c5df6c71537b624827cc235af86232ccf9cdd8e2c77d743eb0f30dc09000fe36bdcea9c0318ca025206174", 0xbf}, {&(0x7f00000002c0)="6347c530c89cf959bc1306bd78cfe764be0ccbe093c1a504830c8087a9b28ce1196354877d8cc1aa55ad105597bfe23fbd47369c9440450c1fa435ba50716949e0dfffab56a38b069442db7db7435cfa7934621ae6ac9a534d5437fe3f058fddd6bd33a71b97762849a56ee7197b12606d3a2135d33eccbb7535c1f4bdf8f3d4a3c0a8bd202b73562dd39340649792314edd6391dc9e670b4b9a6a8c150eec9241e80414242ebb16c17f22c158efc3cb7838c13ecb0fcd8d3bcf94839b4e57812d76d4cdf9ab611ef1", 0xc9}, {&(0x7f00000003c0)="23a199571afbd6af44b3aad32bffee8097696ab06d06b5c03b036e2b033492b8cc5da34a2c8449ca3e960ef933bbfcdf9860871ad71c138d196a4a045f8b079a03f8e127009126985918e9c3ee17214bcc48b1744e5379d472e4df9f306fc23db2107cd8e8bb015e2bf21055cbc028650f388c2c0556cb3089e0a9af2ad0aca4ad3a342b48d213bb909838454ac6badc5116046fced5639516255255b06297035fe21f9400018cfdc4ee42a1999eada791e876fc52775b29bfb3a27e2439b24e816d8a08b76749e01b49", 0xca}, {&(0x7f00000004c0)="995e4b00c4a7d312fb0227ae365d8cdc88cb8364846999d98ed89a088d12c2ebcaf0885094513c351472bb3158413f2bca3ea6335d5b5474c4974873d997bfb84a6a2b915083dc31ceddef63f4d6b475738f0e4d5df9a51761db38bc6017a09bb2a0a8df023019ac2db4c28f4af2ed02d5cbeb3ff5d55a26095338c2833bc216ed2450f03f13fabe81360dbc1d734b268e0325e8dc86af0a1432e645c65f41e8573ce598ab73afa5e189d940f36f85947bb336269f388a63c32475f1bb6c49d54b322123300397720d03db578af2f5", 0xcf}, {&(0x7f00000005c0)="33ac397ac27c99b6f657bb2ad56231ea41b6ebc439f7548809898599984faaf44567732734448813f06904c0c1225af403c0eab76be7b6139f83a64f117aab16158e5cbf21077416e9d4488aaae013870b88f4613f570d36f3327fb55c6859b2090363f5bf77574945fafd14b675ecbefc9f2732ff151c81b773e630c4924b8bcfc32381", 0x84}, {&(0x7f0000000680)="5fba8ecbff214ee000a41c3af03b8e1b76ff667777d920bd74f897a2cda9526e6c80d15dd82ebd97586739977602d1fbd64de324a12c8b76b748f289962ef595317ac167f19e4a140e9b8e538cf4b5c0d46ee9b4f262757a1008423bf5a033efacc8704feca240905a4c96adba0fa776513edf3bc0cbd5dce6351a0458042999a65df3404ee10c7a9c517b5eadc915f56d29db36", 0x94}], 0x9, 0x9, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r8, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x80000, 0x0, 0xffffffffffffffff}) sendmsg$nl_route_sched_retired(r6, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=@newtclass={0x934, 0x28, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {0x8, 0x8}, {0x0, 0x8}}, [@c_cbq={{0x8}, {0x4}}, @c_cbq={{0x8}, {0x854, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0xffff, 0x7}, 0x2, 0x8}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x9, 0x10001, 0x400, 0x7, 0x2, 0x0, 0x0, 0xba9, 0x5, 0x9, 0x81, 0xc20, 0x6, 0x1f8, 0x10000000, 0x4, 0x9afe, 0xb, 0x6, 0x5, 0x3, 0xb, 0x8, 0x2, 0x1, 0xfffffff3, 0x5, 0x5, 0x0, 0x2, 0x4, 0x3, 0x4, 0x1, 0x10, 0x10, 0x2, 0x3f05, 0xecf, 0x847, 0x1000, 0x2, 0x5, 0x4, 0x9, 0x95, 0x579d, 0x2, 0xb, 0x400, 0xb90, 0x6, 0x9, 0x3, 0x5, 0xfffff801, 0x6, 0x7, 0xffff, 0x1, 0x1, 0x845, 0x0, 0x3, 0xf, 0xf, 0x6, 0x8, 0xfffffffb, 0xb8, 0x3, 0x1000, 0x1ff, 0x10001, 0x6, 0x1, 0xc, 0xb1, 0xfffffff7, 0x6, 0x8, 0x3, 0x1, 0x0, 0x110, 0x2, 0x7f, 0x8, 0x6, 0x101, 0x7, 0x8, 0x80000001, 0xfffffff8, 0x2, 0x6, 0x1, 0x0, 0x6, 0x4, 0x80000000, 0x0, 0x0, 0x2, 0x5, 0x2dba, 0x8eac, 0xc33, 0x100, 0x5, 0x2, 0xfff, 0xff, 0x400, 0x8001, 0x93, 0x9, 0x66bd, 0x5, 0x9f1, 0x1, 0x8001, 0xa, 0x7, 0x401, 0x10001, 0x100, 0x0, 0xfffffff8, 0x7, 0x4076, 0x9, 0x6, 0x0, 0x1000, 0x8, 0x7, 0xff, 0x0, 0x217e, 0xffff, 0x9, 0x7, 0x80000000, 0x5, 0x3, 0x7, 0xf, 0x5, 0x25, 0x5b, 0x6, 0xff, 0x8, 0xa, 0x1, 0x5, 0xec, 0x2, 0x1, 0x4, 0x0, 0xd, 0xffffff92, 0x0, 0x3, 0x4, 0x3, 0x1, 0x81, 0x1, 0x1, 0x265a, 0x5, 0xec, 0x82, 0xfb, 0xee7, 0x9, 0x7, 0x4, 0x2, 0x6, 0x6, 0x0, 0x0, 0x8, 0x4, 0x4, 0x4, 0x7, 0x800, 0xc, 0x4b7, 0x3402, 0xfffffffd, 0x4, 0x101, 0x40, 0x8, 0x3, 0x0, 0x0, 0x80, 0x5, 0x4, 0x4, 0x800, 0x5, 0x9d, 0x5, 0x7, 0x2258, 0x6, 0x7ff, 0x4, 0x44, 0xfff, 0x0, 0x4, 0x3, 0xf, 0x0, 0x4, 0x3, 0x3, 0x1, 0x81, 0x2, 0x8001, 0x4, 0x9, 0x8, 0x7, 0x5, 0x8, 0x10, 0x5, 0x5, 0x2, 0xfc0, 0xc, 0x2, 0xa30, 0x602, 0x2, 0x4, 0x1, 0xb7f1, 0x8, 0x2, 0x9, 0x9, 0xc, 0x70c5c912, 0x6c7]}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x5, 0x2, 0x2, 0xfc, 0x0, 0x10001}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x800, 0x3, 0x3, 0x4d8bf21e, 0x3, 0x3, 0x9, 0x81, 0x10, 0x5, 0x80000001, 0x1, 0x8, 0xfffffff9, 0x1, 0x1921, 0x2, 0xe, 0x45, 0x823, 0x4, 0x7, 0x97, 0x3, 0x9, 0x8, 0x0, 0x5, 0xbca, 0xd1, 0x800, 0x3, 0x3, 0x5, 0x0, 0x2, 0x33e1, 0xffff, 0xcc3, 0xecb1, 0x101, 0x8, 0x8, 0xfffff287, 0x4, 0x6, 0x8, 0xa55, 0x0, 0x4, 0x1, 0xdf, 0x8, 0x397ceb65, 0x7, 0x8, 0x10, 0x7, 0x429, 0x8, 0x0, 0x8, 0x2, 0x8, 0x5b1, 0x200, 0xe, 0x3, 0x4, 0xffffffc0, 0x1f9, 0xffffffff, 0x400, 0xdbd, 0x6, 0x9, 0x3ff, 0x9, 0x20, 0xa4, 0x1, 0x7, 0x10001, 0x83, 0x3, 0x0, 0x3, 0x81, 0x4, 0x2, 0xf4ee, 0x401, 0x6, 0x4c7, 0x80000001, 0x800, 0x5, 0x6, 0x7, 0x9, 0x3, 0x7, 0x10000, 0x2, 0x1, 0x2, 0x1, 0x2, 0x57db, 0xfffffffc, 0x6, 0xffffffbd, 0x4, 0x5, 0x6, 0xfffffff8, 0x6, 0x8000, 0x7, 0x0, 0x4, 0x7fffffff, 0x29df2f95, 0x2, 0x2, 0xb, 0x7, 0x7, 0xd, 0x9, 0x2, 0xc2, 0x6, 0x3, 0x800, 0x5, 0x6, 0x7, 0x3, 0xfffffc01, 0x5, 0x80, 0x4, 0x9, 0x8, 0x4, 0x6, 0x6, 0xc99, 0x8001, 0x8, 0x8, 0x2, 0x200, 0x9, 0x3, 0x8, 0x100, 0x10000, 0x1, 0x7f, 0x9, 0x0, 0x7b0d, 0x9, 0xff, 0x4, 0x8, 0x1, 0x3, 0x2, 0x2, 0xfa19, 0x6, 0x6, 0x3, 0x0, 0x3ff, 0x5, 0x800, 0x1, 0x4, 0x1, 0x10, 0x9, 0x4, 0x4, 0x0, 0x101, 0x5, 0x9, 0x5, 0x4, 0x1000, 0x0, 0x8, 0x7fffffff, 0x3, 0x1, 0x80, 0x2, 0x9, 0x8, 0x64, 0x4, 0x3, 0x80, 0x2, 0x100, 0xe8700, 0x65, 0x5a, 0x0, 0xe, 0x46, 0x1, 0x6, 0x0, 0x401, 0x2, 0x0, 0x45b2, 0xffff9f7f, 0x0, 0x0, 0x5, 0x7ff, 0xffff, 0x9, 0x3, 0xd569, 0x4, 0x5, 0x7fff, 0x240, 0x0, 0x2, 0x6, 0x8, 0x9, 0x7fffffff, 0x7, 0x2, 0x4, 0x1, 0x100, 0x7, 0xa, 0x8001, 0x5, 0x6, 0x1, 0x3, 0xa, 0x7, 0x1]}, @TCA_CBQ_RATE={0x10, 0x5, {0xa8, 0x3, 0x8000, 0x400, 0x2, 0x93}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x0, 0x1, 0x1b, 0x5, 0x8, 0xfffffffa, 0x81, 0x7f}}]}}, @c_atm={{0x8}, {0x50, 0x2, [@TCA_ATM_FD={0x8, 0x1, r10}, @TCA_ATM_EXCESS={0x8, 0x4, {0x1fffe, 0xd}}, @TCA_ATM_HDR={0x32, 0x3, "237cf0dc7b6cd0ac5ce2c4b6cda235604f96dc9b0da0d73562769043bfd1a734fca80e516b89e98e063247b5a920"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x2, 0x5}}]}}, @c_atm={{0x8}, {0x48, 0x2, [@TCA_ATM_FD={0x8, 0x1, r9}, @TCA_ATM_HDR={0x3b, 0x3, "6bbaf7111d048a4f81efd573a5931b5928ebf939e87d4e03d91385379c607bed853dbe59886a2625399e2eb2d5a7f811126241d1a8dc5c"}]}}]}, 0x934}, 0x1, 0x0, 0x0, 0x10}, 0xc880) connect$can_bcm(r5, &(0x7f0000000800)={0x1d, r8}, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000f00)={'veth1_to_hsr\x00', &(0x7f0000000000)=@ethtool_eeprom={0xc, 0x2, 0x4, 0x64, "1e0fee3ebaad67dc9a96b7f14a7507509b0b15980a92f558ff6e0b09da4aff68c12a454efce06d9dccfb6880f22a3ad82208f0aa8f88936bd75f31ebf63525c6434037bb02af6c1090df9f85c53f94e014172858c28a01ce1205fcf8f784648faac5de50"}}) 46.380636186s ago: executing program 0 (id=2598): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) setpgid(0x0, 0x0) 45.580717938s ago: executing program 5 (id=2600): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x0, 0x80) getdents(r1, &(0x7f0000000000)=""/23, 0x17) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0xd9d8, 0x8}) io_uring_register$IORING_REGISTER_FILES(r2, 0x1e, &(0x7f0000000000)=[r2], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x7, 0x8}, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) getrusage(0x1, &(0x7f0000000100)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r6, &(0x7f0000000000)=""/42, 0x2a, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0}], 0x1) socket$inet6(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/bpf', 0x0, 0x0) socket$inet(0xa, 0x801, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond_slave_1\x00'}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a325bd7000fddbdf25200f07074a264e22030000002f00000001ffffffc3000000060000000000000000000000070000", @ANYRES32=0x0, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x14c, 0x1a, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 45.194951123s ago: executing program 0 (id=2601): r0 = syz_io_uring_setup(0x891, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) socket(0x1d, 0x2, 0x6) openat$vnet(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x2, 0x80000000000004, 0x6}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0xfffffffffffffffe, 0x1000000000, 0xfffffffffffffffc, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) (fail_nth: 1) 45.07651151s ago: executing program 1 (id=2602): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x4000040, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000002240)="2d12376647d788ad2cdbd0e68c140c7f72d35ae5869c470a1f53ea73c32220190e02cb0b770bb154d1d5d1b343cb1feadca1752e4397955e1a151721f1b28b9e32b7966f9ddd7ad3822c5ff3dc03786c1c86c2a6f7c271710c573396ca95e95a524201b0bf0539042ae14072693f9734306f7a21f92421e8e0ea335d07d1f2839c4c195930cd35c65dfc527de84f2cab4f0c78474734d7c5cba0c70ee0fd10ad5ed3f4b70308c29000e8cd98d57c90c7d9298ee4a2c41b141614627880ace9cfde45a0ae5f6f5cf3eb31254454e92eacdab64eb048b144e4fcc16afe59e7d7dad7696df64aa223d14d69bbe8", 0xec, 0x4000, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x407006}, 0x104) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000227bd7000ffdbdf251400000008000300", @ANYRES32=0x0, @ANYBLOB="0600ff010b020000"], 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x4) 44.660793056s ago: executing program 0 (id=2603): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) readv(r1, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="41020000015081002000128008000100677470ff140002c2a88bf604195083bf379df7ca1edd1f7934b573803e2b33c81852764ef58c97ec46672ac28358e6ff9ac44c9f762735b1b294f194ee85c45c64d84a3c704edd4eac45db24", @ANYRES32, @ANYBLOB="08000300075d000008000a00", @ANYRES32=r2, @ANYBLOB], 0x48}}, 0x0) 44.402211585s ago: executing program 1 (id=2604): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xa, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x7, "d58838068b"}]}}}}}}, 0x4a) 43.391762829s ago: executing program 0 (id=2605): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='gid_map\x00') exit(0x1ff) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x601) r0 = syz_io_uring_setup(0x111, &(0x7f00000001c0)={0x0, 0x15885, 0x0, 0x2000000}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x701, 0xf7, 0x48, 0xbe, 0x8, 0x15f4, 0x15, 0x6f2b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x2, 0x20, 0xb, [{{0x9, 0x4, 0xc6, 0xa9, 0x0, 0x9b, 0x7d, 0xd1, 0x3}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x2, &(0x7f0000000140)=@string={0x2}}]}) 43.095651162s ago: executing program 1 (id=2606): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0xf000, 0x6, 0x7, 0xc, 0x0, [{0x4, 0xb, 0x4, '\x00', 0x9}, {0xfa, 0x0, 0x0, '\x00', 0x80}, {0x0, 0x3, 0x0, '\x00', 0x7}, {0x1, 0x8, 0x8, '\x00', 0x3}, {0xc0, 0x8, 0x9, '\x00', 0xf0}, {0xf6, 0x4, 0x6, '\x00', 0x3}, {0x42, 0x6b, 0x7, '\x00', 0xd}, {0x3, 0x5, 0x1, '\x00', 0x9}, {0x5, 0x0, 0xf, '\x00', 0x5}, {0x2, 0x4, 0x2, '\x00', 0x3}, {0x7, 0x5, 0x4, '\x00', 0x5}, {0x9b, 0x7, 0x3, '\x00', 0x4}, {0x7, 0x9, 0xc3, '\x00', 0x7}, {0x4, 0x4, 0xf7, '\x00', 0x3}, {0xc, 0x9e, 0xc, '\x00', 0x9}, {0x8, 0xb, 0x6f, '\x00', 0x5}, {0x7, 0x5, 0xf, '\x00', 0xf3}, {0x2, 0x80, 0x70, '\x00', 0xff}, {0x10, 0xe2, 0x3, '\x00', 0xe}, {0x1, 0x4, 0x4, '\x00', 0x6}, {0xa, 0x9, 0x6}, {0x7f, 0xc0, 0x0, '\x00', 0x6}, {0x9c, 0x6, 0x8, '\x00', 0x1}, {0x2, 0x2, 0x6, '\x00', 0x7}]}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82042, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000071000040"]) r4 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x6, 0x8, 0x4, 0xc07}) mq_getsetattr(r4, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_timedreceive(r4, &(0x7f0000000100)=""/90, 0x5a, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x5, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_pgetevents(0x0, 0x3, 0x2, &(0x7f0000000340)=[{}, {}], 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) timer_create(0x9, 0x0, &(0x7f0000bbdffc)) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r0], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x24040841) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000140)) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, 0x0, 0x0) 42.595488318s ago: executing program 3 (id=2607): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) syz_emit_ethernet(0x9a, &(0x7f00000004c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2abe00", 0x64, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, {[], {0x0, 0x4f22, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x3, "8a8bebc4b04ccb77e7f3a5ca93d7c73e6c0c42d91e27fb2f15030dcafcdaca76", "e24fcb751eeaa8add0b2f075633f64c7", {"249908bc00000000000000002000", "51f3b6750c654f5d43fbb564be51ddae"}}}}}}}}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, 0x0, 0x68) 42.522902649s ago: executing program 4 (id=2608): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) listen(0xffffffffffffffff, 0x0) socket$inet(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000001a40)}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001300), 0x28200, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x400}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) r5 = dup(r3) r6 = syz_io_uring_setup(0xc0f, &(0x7f00000000c0)={0x0, 0x6efd, 0x80, 0xffffffff, 0x1a}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r5, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r6, 0x47f5, 0x0, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f00000029c0)={0x9, {"a2e3ad214fc752f91b5d090932f70e0dd038e7ff7fc6e5539b324c078b089b3438076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b35310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509301815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c482a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db87195358bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc311f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) r9 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r10 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r10) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r9, 0x1000) 42.123054147s ago: executing program 3 (id=2609): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) sendmsg$inet6(r3, &(0x7f0000000480)={&(0x7f0000000040)={0xa, 0x4e20, 0x89a8, @remote, 0x2}, 0x4f, 0x0}, 0x20008814) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x7, 0x28, 0x64, 0x0, 0x1, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x2, 0x0, 0xe83}}}}}}, 0x0) sendfile(r2, r1, &(0x7f00000000c0)=0x58, 0xa) r4 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0xd79, 0x10100, 0x3, 0x1f5}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x41, 0x2004, @fd=r4, 0x81, 0x0, 0x0, 0xa, 0x0, {0x3, r7}}) io_uring_enter(r4, 0x567, 0x60, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000010000)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffd74, 0x40004, 0x0, 0x0) r8 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8801, 0xc0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000cc0)=@delchain={0x1bc, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x18c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x8065738cbab9bcb1}, @TCA_FLOW_EMATCHES={0x168, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x148, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x3}, {0x4, 0x1, 0x6, "eb"}}}, @TCF_EM_IPT={0x114, 0x2, 0x0, 0x0, {{0x100, 0x9, 0x319}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_DATA={0xd5, 0x5, "404ed3d434fb1f48a30cc0474d3c5260844ef8d653aa690f08733679c0f9bd6e29e13b09adea5ceb607c74a62934f395f716bdc5b2d344210a255c16f0fddd15bf1303af3d0414041b90743b0add6ab90d0ba1b39a9b13161873fb2acea362d73c88e899ccfc750491142a1922eb492fc626348d86473ea9e39f4faacf8bb869c6a124325737b32502d3a21fc90b0b54b97bd41ac70a2a68a7262bee65d25822852d63465a22a320cdb82bc9707038d69fee5710d419574700b52c157c1ecb20712de3168b38d238726620651097d32ee2"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xfc}]}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1, 0x3, 0x81}, {0x10, 0xe, 0x6, 0xd4c}}}]}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{0x0, 0x2, 0x8}, {0x7, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x40}}]}, @TCA_FLOW_XOR={0x8, 0x7, 0xffffff7b}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x1e2}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000880)=""/199, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) connect$l2tp6(r8, &(0x7f0000000040)={0xa, 0x0, 0x9, @loopback, 0xaf, 0x2}, 0x20) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r9, 0xaf01, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 41.165226122s ago: executing program 1 (id=2610): socket$inet_tcp(0x2, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0xa, 0x4e20, 0x89a8, @remote, 0x2}, 0x4f, 0x0}, 0x20008814) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x7, 0x28, 0x64, 0x0, 0x1, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x2, 0x0, 0xe83}}}}}}, 0x0) 41.163911155s ago: executing program 5 (id=2611): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0200"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000040)={0x0, 0x4}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000240)="51dbd71a8db46ebfd407e45f152a0c25da91b42623a48ee5b9ade414489b1a8e50e98d351748cff1f97344115c6ac7c84cb99e3e41b06b54c9ba55cb52bfcf96751d8de2b572224cd382caf2630162c4b872d631e99b4a43561a7260783201fd29f79855222f1834fa2d6540617ac689e68222f247a3c5b1df2cd027e7092a65cf6aaa94a90447f71701cac4adff5a88b0e1bfb892570d50e7edbd51ea54c352e8c5f2161a3fd9f7cfa4543d018e82561980437e39d021e4c315d51174ed543e1b4681334ac8741ee4556d68a934084af5bb40b5cca0eb47d8bd3c961e2c0a2a33277e3cc774be6b2dd7f39b81f0d6", 0xef}, {&(0x7f0000000340)="e96b60fc6ae7b0a78533337cb6c8d61008758158d27e7e9bfa1eac25a483fb115d3593257157f0c5d9d45010d8fccc60867f5f04219ee78fddb0288402fbf2fe872a622d41be949d09173678b0899842f29eab91db47d748285d5d34f26d951152139bd4d09bba9dc3aa7824583b2db908d438b132da43b71cacf6da5d4dbcdc1754e8970a7015b92ae88ad4d4f1e4ff4c3b9d1a9911dfb8771add062347e9e1d5dfc0453fdfc7b8043c928384c812c5d36811a545f6333cd86fda28f51bbaa3b45aaa6f68aa52816884f1a70f98dc24b8a5e8d5a47a335f0bcacbd37143abfcc6", 0xe1}, {&(0x7f0000000580)="981e42d239ce368f054b21bad4f2cfb284e8968ddcb2a1814539b954231f5b3fa8a7f997033d834643992478b4a114c144839d17091d2858578c1c2f825545d19bef97d3fd379ef6251dbd2d0615abb5e9d3788a46b0ba614f1b23d6166e9715e2cc230b3ab8517bb3bdeec33246b3bdfe9f6d451a601026f8249557fc323516a367475a39d643992443496d2ce0c80994a5a39e", 0x94}, {&(0x7f0000000640)="854932cde1e02c78c797eb8827cc65471068ad3749122e9db88804e359cb8753529d21ab833d8deb086e62cc3583c9d9ac9d986576c38b52e291136191aa683ef5483c3be8f7bd045be99c11a59d51a1dc251e1352f8d68ac2a363d8b8c1caffb731f61bff160049ae8784a60387f2d4f53940ad56906f3ac18baf1f0c97e6ce9117b62ce1726749dd036cd653dec70764d42dfeac6a3d5e3436774b4dd504cb069d5c1968f6ee7135a6089872287d0a7d9673d29d63cd1db9f08044043ca66ca6401ad9fde3d2b697fcc290b42064dcc58b8342", 0xd4}], 0x4) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000140)={0x24, 0x5, 0xfffffff9}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, &(0x7f0000000080)) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9f, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x8, 0x0, 0x0]}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x101, 0x6, 0x8, 0x0, 0x10}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x3}, @feature_unit={0x9, 0x24, 0x6, 0x0, 0x6, 0x1, [0x0]}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x5}, @feature_unit={0x9, 0x24, 0x6, 0x5, 0x0, 0x1, [0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x40, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x80}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x2}}}}}}}]}}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0200"]) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000040)={0x0, 0x4}) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000240)="51dbd71a8db46ebfd407e45f152a0c25da91b42623a48ee5b9ade414489b1a8e50e98d351748cff1f97344115c6ac7c84cb99e3e41b06b54c9ba55cb52bfcf96751d8de2b572224cd382caf2630162c4b872d631e99b4a43561a7260783201fd29f79855222f1834fa2d6540617ac689e68222f247a3c5b1df2cd027e7092a65cf6aaa94a90447f71701cac4adff5a88b0e1bfb892570d50e7edbd51ea54c352e8c5f2161a3fd9f7cfa4543d018e82561980437e39d021e4c315d51174ed543e1b4681334ac8741ee4556d68a934084af5bb40b5cca0eb47d8bd3c961e2c0a2a33277e3cc774be6b2dd7f39b81f0d6", 0xef}, {&(0x7f0000000340)="e96b60fc6ae7b0a78533337cb6c8d61008758158d27e7e9bfa1eac25a483fb115d3593257157f0c5d9d45010d8fccc60867f5f04219ee78fddb0288402fbf2fe872a622d41be949d09173678b0899842f29eab91db47d748285d5d34f26d951152139bd4d09bba9dc3aa7824583b2db908d438b132da43b71cacf6da5d4dbcdc1754e8970a7015b92ae88ad4d4f1e4ff4c3b9d1a9911dfb8771add062347e9e1d5dfc0453fdfc7b8043c928384c812c5d36811a545f6333cd86fda28f51bbaa3b45aaa6f68aa52816884f1a70f98dc24b8a5e8d5a47a335f0bcacbd37143abfcc6", 0xe1}, {&(0x7f0000000580)="981e42d239ce368f054b21bad4f2cfb284e8968ddcb2a1814539b954231f5b3fa8a7f997033d834643992478b4a114c144839d17091d2858578c1c2f825545d19bef97d3fd379ef6251dbd2d0615abb5e9d3788a46b0ba614f1b23d6166e9715e2cc230b3ab8517bb3bdeec33246b3bdfe9f6d451a601026f8249557fc323516a367475a39d643992443496d2ce0c80994a5a39e", 0x94}, {&(0x7f0000000640)="854932cde1e02c78c797eb8827cc65471068ad3749122e9db88804e359cb8753529d21ab833d8deb086e62cc3583c9d9ac9d986576c38b52e291136191aa683ef5483c3be8f7bd045be99c11a59d51a1dc251e1352f8d68ac2a363d8b8c1caffb731f61bff160049ae8784a60387f2d4f53940ad56906f3ac18baf1f0c97e6ce9117b62ce1726749dd036cd653dec70764d42dfeac6a3d5e3436774b4dd504cb069d5c1968f6ee7135a6089872287d0a7d9673d29d63cd1db9f08044043ca66ca6401ad9fde3d2b697fcc290b42064dcc58b8342", 0xd4}], 0x4) (async) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000140)={0x24, 0x5, 0xfffffff9}) (async) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, &(0x7f0000000080)) (async) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9f, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x8, 0x0, 0x0]}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x101, 0x6, 0x8, 0x0, 0x10}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x3}, @feature_unit={0x9, 0x24, 0x6, 0x0, 0x6, 0x1, [0x0]}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x5}, @feature_unit={0x9, 0x24, 0x6, 0x5, 0x0, 0x1, [0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x40, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x80}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x2}}}}}}}]}}, 0x0) (async) 40.71092497s ago: executing program 1 (id=2612): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000002c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000100)={@my=0x1}) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0x5}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x1, 0xffff, 0x0, 0xffffffff, 0x75, 0x46b, 0x9, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7aa, &(0x7f0000000000)={{@my=0x1}, @local, 0x8}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'gretap0\x00', &(0x7f00000004c0)={'erspan0\x00', r1, 0x7, 0x800f, 0x1, 0x4, {{0x9, 0x4, 0x0, 0x34, 0x24, 0x68, 0x0, 0x1, 0x4, 0x0, @rand_addr=0x64010100, @multicast2, {[@end, @lsrr={0x83, 0xf, 0x38, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbff, {0x1c, 0x14, 0x7ed814f048b2afb7, 0x3, 0xfc, 0x3, 0x0, 0x2, 0x4700}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_DST={0x8, 0x1, {0xce67, 0x0, 0x1}}, @RTA_VIA={0x14, 0x12, {0x29, "8bbe542ae7efe5396c3f5f1da2e5"}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x2, 0x7, r11}}, @RTA_DST={0x8, 0x1, {0x7ff}}, @RTA_VIA={0x14, 0x12, {0x9, "743759fa34f72b8915759a480a48"}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1c}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x3}, @RTA_VIA={0x14, 0x12, {0x21, "085363df9755f45e060000002be6"}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20004885}, 0x48014) 40.279765696s ago: executing program 3 (id=2613): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)={0x47, r1, 0x1, 0x70bd24, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008804}, 0x4050) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f0000000080)={0x6, {0x38, 0x6, 0x400, 0x2}, {0x210001, 0x80, 0x8bb4d08f}, {0x7ff, 0x7}}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff) 39.321512428s ago: executing program 0 (id=2614): r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x482c00, 0x0) ppoll(&(0x7f0000000140)=[{r0, 0x4000}], 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2002, 0x0) sendmsg(r2, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x6c0082, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x53356f0f3fb274d6) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0)=0x1, 0x8) sched_setattr(0x0, &(0x7f0000000100)={0x3a, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[], 0x30}}, 0x0) sendto$inet6(r3, &(0x7f0000000140)="b3019c28", 0x4, 0x40, &(0x7f00000000c0)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) syz_usbip_server_init(0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xa4841, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000004c0)=ANY=[]) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000010000153d97e664ba14c647b45b51a10f81fb0e47728635faa8e3ab8422900437da40400000057f3fd0000ffffff7f00000000000000"], 0x110}}, 0x4000004) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) socket$alg(0x26, 0x5, 0x0) 38.050046949s ago: executing program 1 (id=2615): socket(0x2b, 0x80801, 0x1) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000100), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001500)={'vxcan1\x00'}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x8401, 0x0) io_setup(0xca, &(0x7f0000000080)=0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@newqdisc={0x94, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x700}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0xb, 0x4, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x4}}]}, 0x94}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000800) io_submit(r2, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000300)="8799", 0x2, 0x4}]) close(0xffffffffffffffff) r10 = syz_open_dev$vivid(&(0x7f0000000080), 0x2, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000000340)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000540)={{0x0, 0xaec, 0x2, 0x7, 0xb, 0x10001, 0x4, 0x2, 0xbcfc3d1, 0x5, 0x1, 0x8, 0x7ae0, 0x8, 0x2}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r10, 0xd000943e, &(0x7f0000000fc0)={r12, r13, "9c6eae66ecac1eb53c3f61d538a6537f52faefc346f669bf0a6ddf601ec18fc5fcc55102a00dc4b3d2f9925b6be320ce0973de3cbb3e869b2d1b5cbee655781202dcd24841e2b0a26c14056f55f82e16ddc3b981d5f88c97b761fa82f63ce6351fd27c5b8faad835a19e46df11d47eaf3ec20f123064f37e1fdb58f2756bf90783f137779f314e8ee5524944aa9188b16e54789fe774df6bd87177d97a405a88d73dec59c2704af331de8751d41bb90311a3e1cc3384851447e6f0c1d59d3f7881b7764ea3c40c836b084e5b3d90f876f79a9354962400cf323b5c9579e55213ba9fbdaeefb2a37c33c5d5d8a9baae45ea0ac7ce513d20a88a486fdba846f695", "d2cd7de066541e656c3706f4e381b68a156dd721c4deb22e6e516f64c02bcd4397d4df6c1de4279b9881b181c2b3ec1c91c76df70d5ec8fd9023b749b52f35d91670db9d178601e133064adb1f6c6aa48e17d86f75babb2bc8ed80252f63ed1e4f84555af58dfd4d93d5fe527813dd3f64846682c19cf5b4bb1e2e689159801411fd5d74a84c75aec9ac5b3f100da405c14cff9418d4ba86c1e24ba8ccdc24f8de5462211f906cb10cb9bb3c0cf303cbc39e61c46db33543f52a235c7db0e62fdb7ada2be4be53b5d78d493c8c08a13517fb4deb6734207de4d877e1f66dc590953f0ce954acf74cd1025da05f1db138417f7ff83bb18a91a6e4c62a8acc057f2546f263b8948b1f0241f21a8bf5eaf8d9ec4ff18648333073437bcd68717faaa2b0455f0522e500dbeb3fe592b5e5033060b5f343ee5981c46adca3e66e5732d786f357603fb0dd3fb6807a8bb3e1dc2b77037b8c841c941c0809fd778e1bd0903a358eabb51b90646e41ff782953b06445ee1465626d5e6c5565c44e3e65dfe072491954ba2e50209e3ffd710538bccf4f83f8a2c4a833941f246d41ede0ec46a4fca2012dda29dbba1062859095a6ced7e0f9d8808beea8489ff15bde705e5a6e7797660cf91554caa9d29b3fc0f8603f6d584bbf17452b438750c07e3f18d54849dcd0b97d6427756028504ae665780a1e77c1c623d1c6115de6779c090afab1ca722a1939db66c19dc93b2dadd2b3a9cb06aa9e854cf5a0806a9c436b389c9df9d25c8f968f6d033bf2c50204d441c7b11592407f7a7ac03e539f327394f2e204322708c3312a7e18218ef035258415a79be1a9ae8c8685ad15ba8422b4a9a8576acfabea89cc23fced7f2e19303d685bfa6c5ee48ae1d3d2022b456deb8544b20bf98dfe05df1dd727773b5af7a64d6956781db8bf73d8e8f52ca7de4e2dabed9a7fa3a5dc3adefb44d9ab916e041f13725cbc58a3175cdf3fc673afe52b2332d687d5cd1ec4a79a1805381ed4e2c0f039335bc1b53383323b2c1c54d1f5bdb416a5c06de0f18782985e64830065d4dd61b18b3f3e47731e2d057443c5badb2b3e072d78308b824e6ad97b67cda95c7637265f5d2f05891d1b7a215d884c8ed5b0c5fd535dda3edc0d723e798334e98860067d0c7b67e4e5325f8b939a144db005c1898d517dd7609e70506ab41471db3fe4b1996915f0a8a2ee93705a6c76785f306dc8b1cd78a0390aa47dfba1f89adeb203db5dcc48f1655effd9bbe183c7601d515ebf7621b964b811489d4b3b37f5f9520ec36fbbc0bd95ce6d327e9aa4ca9628faf775f45373a80e840ac631267a1f9c38c2e443dc73d2f47b21a83aadbe28784cbc11595c57691924132a19389839f5343974296ce9566a18fe462cda44f462ace2547280a44064d8232179b656da4df4020016f4c3853f51c9a46277de8f8bb41bf857d6a3be9b1b129d9bd403be921c21782a74aa4949d9c13b20f3dc441f74b2f9af5bb95a3a1abec8bae7206fdc437fa0628f9d8bb2564ecb7ec6591a84e234f1c80d357c46f00ba433c471cce45a5463dbbed83a7a5b6466dee405591e8c002bb3bae4d09c662403387d22fdb6babd514ee33d7c76dd19989acbf66d49924861083ab66763d31a82929859a19dccd97fb47458962ba53b804f6e5efebd83384188dd4eaecbf4f2472536867345b5817d22090df8cbc22db31e9bf625092604e5e1305ba1eb25b98904351a1c0c022e90e45b879dd604aa58dd24312538fa13574b50e324b161bf4bb0825261ac2120ba3c67ad4c1fb306cf0e1335f97f2a2ee1fc5ace6f16ad55e9b8d4d49ae72fcc77d8969d176d804636d0725cd98cb1e0c9134379e2671ebc822b5a273805d4a8352cea87d5ae0b107b7cd08ce1dcbd350623fbee010eb3bc23a9e077e45ac229a80ff613aac00babe7cf71cc9e4415e5d6b1459753a24704c0dc160a65b74d928949ce34062e24b3b2d9e84320511395fc2e5b567bf6f9110321fbd2737ac5fa2d473a9a41fbfee768329859e32eee4ab1e053e4a901e0b9ad5b8f520f97279929ea2bcbe21e256069c08466f43bf682f91e5b14b276c763264dfd4efa0067f34cd6468f5b7ba7073c5064526b7bcb795049491498e67350e58fd21e8434fb6acf1709e5b292e3df59f07a187b5ca397140eb010bbd0297a37f58932d231410f72bd6f2dc3eb3856909676fd4ce7a44125d42fffb63b81ab5f6e68ab510dc6250935fd99e3fb6664e85c704e89e4e7281ab5d02becaed22c8931d2aadad5dfbe4bfbe7802d53d8581e9a876f039975bb807eb3b5aec5d2a946bbd32f5fbb658d104a5b8ee12c638325b4b85a2ada694641e502296f20eced6d99f9572063d0b4f88ccbe608d244c590c97a165655aeb7c33b7cb7e03207a21b2da4653e3d8251256fb98d5e056546989261e8709c98524de4cffb6749422998e7e2821daef947d0dc5bd88b908f60fef2436a988d49c8fb878caef22f962a9ad5aa06f038544b2dc4a2df3f3e21f39f54eed0dc086c3cf2ad66b7b0a7842b048f76ee5d30dd21ba1e1ca8db7efddc98d2ecae3cf83627f0a2191119e9a4c15bc5b093094f163525815bccd6bbe6d98884a08ee34c211d715919214a45bab2156bafd1faab05a26581621c4aa0b4a13b9c67cc2a0404c0bba6ca5697dba8c110f26e22573265ed93171bcb222e0b0979b818acbc119b2ea153c43ef6ffe9e5af7fdcf15fff829e722c6dd8d87a30676a3e26db34de99d6d8f37acdf4bb8e676e70405e70187f56c7b94e2778ecddee728cf942a9532359036a070c2fa6092622ae9cc7a0be2e229c1c18d52a8cfcf402802a03d33044f5752b32d6ce84a29381f9c4b7e55d87770f3621ceaaf017fe5c332f8d34de83052c80a94ce11ff8cf4f2fa6fd6804a196271d7949d5d608eeeb89f66b2a54b2d63f1632ce1ea2e1242a9520e6aea3eb82fd3732748cc0f0e112bf181c0fd5c8667f6e95f4b3490bcb695ba325c2dfb7f0357a3fccb42e2514a28f842a2e9e4219b015911eec741bec97c4cf3afe6b13767e2ad48d41cf32395887f0bb0afc738bc1c317d206a4da6b77e2646ab98236a4649eeda7395c64d2421fcd66d647289d5443585a86aba7ba993de800b1139de5d2bf74a820cd14ac02f5df44f7e6d4ffd57a6ffcec4b9623aa45bc59fe0fe134a45ef9e83993292edbdb09c7a1090470079e4687f6167a698efcd84b66a4e53c8141113ba91349325cfb0f1a0c93144bb28ced0200b193322b01986dcbb730a875e50e085146669161b11817990156ef7af619e1921700a0d5ce0b131a239b83b39aefbd5eae02e0166d00b973f86ce7098ae625a322eb8bb6bcc608556421f62b224ed533d43dab1f572c7f2d2f1ba99e9c32f07339592aa4197ee15a0bbffc37ccbe6d9cea51b4be84730b3335920419973bed77e6918dfe081af90b2031980c1d90ed8eed7e62ef187048b6da9fa8fe7dc037edf40e793df1f1c811dbe98d1eb75fa3fb3b4ce25600091304b5d4588b9c160c84c98f249f701836765dd36717f145912bf8540fdcc2f1786a993e8388689cefe82279d9aeb7cc69c624a7779d75761e02277ee4a8b5d80c29007bbd30fb0f06f6377ab8a29d5a80338ceadc0500b366efdd9f05be254441c1ef1033137cf13eae5b6d893ffe78b8d5c823f20b93cc436d8e0c0321ffd1df445e1811aee571bd42004184dadb24e516fb6f7c1d2b589016ba2148bee54afbe6d8694d77d46e2ff52ca48ddac6559583cfc543c717e507c67b2744b39a84a8360de2ff136a9adc107e0f7b49df6a22af1eb7903c4b0cc8ae68c7a44d16252acfd387b107a212433799b8e7be923d32276dcbd5223e4974651208b109c11c1f6654f499a2b0d54c171627e4a7253b087e182b52825f2a58dbb603e7ab8f2c2232eae8952b2fc44c360563ccf1412dabfaa13ea2217510d64b4df5bbf87c1ea2b0eec1fbbaf5cffdc9a9e1172190b58920c7e54d7da4a42fd40ae37dae81e15266078cc05674fda0b185014a4b7a7e4251a323b5910c642bd1d88a486449c51ac1da392b91511bc35ae8f89bfffa4b38832a9b9952c0201ad18c329e80eaf531792b4621080b2e5841a9ed4c49565315b21680de3286dcc0765bbd053ef2deee96dabe3f3ae1f8771fc61cfc13bfae9ecbd190959a0228f98b135f26e94a98de1a1b06c11a2271b0eb99f37e61131e7a8ef0cab2d3567845187545d83eeb116b6143176971542ebcadbe3cacca87a3772a25512c65601e723769cae5681a316e3d111c45eabe4da13f6d4401f0c68837436483f5b3bb1d5239b46852e46189e3869a493d1fe2adfdca5ac632ade944307d997be0b21a98cb38168c38182ba3ba3ef41f70e993b028f9632f82edc6b858af396fa3b29c0629980595dd0d3df2e9db8f26ac1d2efb4d4e4ab1380031b28b3f6851d6a008701dead8cca050d7067538ffe7cb9561c717524c44d53cda6a28bd64074c22bc721d35e1afab718d981504c34a945b24c48b1be3e4fd03b7aab4b7bacdcad3062466062cc93efce49ef3fde3e33f7b0bc06afacd9739010e30afda899724ed73b2876b0ce2b163ab0e0552f83d428742856d71bc03209f9380953a2787df80565cf538d403f0474f30d9840d256496003d2ef146e514c5d33ce08df5a25891f787fc090611911815f0570bca158a98c5fe55ecf29c27e42294b151516f6c7b6856120fd30bd0f3c908aa8472331e918867b0e15ffa345e533422d26a47a2d013ec8cdffc4bda1119e8eb4297cf9ad376e93c2ffbd1861e3ae8ed8a1a3248212d05479a4305aab41fd3627900640bcb70053ac7ccefee310661273c1d4c64703a919c2235c9f2561d2cd03049255ec01f5c23a3372bfa26f0cfe9b82878dca0bf509564a52c4946c8d26c8ff0e55e1beeca7e4effc8c938471c221d987d35009c2691f62d6b1723f63faadb21aba0301bccf43058582b08b7c0c11cd3d770c86302fcc92ec141127d82176ff966c1c079ce7bbc54d117b0f6eefbab15a2bf66befac941506dce5e5eb157fb93b7bd7b02a77296fd8472a537907e48d67de8e0100b16ca31cadb12f68df6f469bbe0c0aa2504d14c80d658974033d0d59e987eaffb9e19ac45634e8fc17234efb031611eb52bfa23fe3ba19a512c4fc58c8256f0c823f1974db6e8a81e6e87d357512acf2acfa26175b393f84f51fcf4e11726633b3d505304081ad5c09f1c5b8e36f821628bff52b8b6b80f76db0aa0edd7fbc648f5283814383719d9ab79ded4960a9c0d9edf16de2d7af85311d4e0c785678b0cb4571ba019a13fbc552205641397c8b478dd3a02a7f28d1ffd0ee36dcd5da23901d6e004cab8a0ccc484666832958cef1edfae2cc4"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000dd340)={{0x0, 0x6, 0x10000, 0xa, 0xffffffff, 0xe36, 0x2d3f, 0x0, 0x7, 0xf, 0x1, 0x4, 0x6c, 0x0, 0x7}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000de340)={0x0, 0x0, "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", "fcbc2de30ece5918cf2757b57770479591b26b724e43d765734f84dd2f2fa2bb14ce074ebe0858b97772b5d5d2f6ca5170d5fbe074a65840a6d4ee34593a30ee40183d003d9643475079bf4b8d3b1756547d21600a7a15554413c200f48f784431da9f67607afd25403150452d8baa74e6e00bca50daa2dbb581cee60ba79fbeface626e5016ad48f572ba844d6d9041af99fc2d68488a951247de559865f1d5a645f254da6f63cfed6232179cf7ac00a8af21ea79c109a33e64da765ebe430e12d68f7e159183d5504ecc49b969cf7dee1f20a556c062f47fa624f414e45a79ad546d2ae93cedf1ed2987f9b35c2ac9d9321fbc13cde84162d81a2a9e058d997d2d580da85dd6fa5977efe5c56d6eec5a1f3131443914b9cdd4ac3f3478db8ea334dcc8ef8c4b72603c97cafd7ebb27b47ed5a46b0669a0655ab2c32ca666039409ffc04d19ac0d46085c4d3d992eaaa4d314ebad2b3e9816543a30de9c69b058ca4e8c350c83fcd4fa0c38fc9342840d4278aa0ab8a9c3cf6bccbd21ce0dc841840f65a4fa2c897982f14358eb0d381ed60c363acbe20b5d15cc2abd777a819a44ccc1c8741be6edd563b522a8f759809e4348f5ee92c512b26f97b68767dfcba7f5e7443086fcda36b3526404e8327af87ee35068e6a6590727fa01ec183b1ee56caf988d37ca219b77343d98a36d33eeece6380a6f2d9be2280db176040000bccbc32d2cc109372d255f6e5dfdaaab9654aaf862cee35750fbc238f15402595f87fa610768b65700753711da05774f4f874889b1b511183db1670212246d20e5ad95e58c587c5358782b64a01d1e2e3ac3672705850c4608bcb4aae4292a66d2b623ba06440ec06d0ab2a02532fb62c43d9dd00d72f74b59d73b679e4f5652149037b26272203685419fb3eb1f7e9d3d65830cfc3ad25d67b74b7d89d94d515bd64acd7e1333851c615965d5cecfffbba4d63bdec95ffaafd558459bed28342006a4c3f313d2f763f89d2361fb4ebfd67245c1e60b3b7ea91cbffa03c3e200dd67cff9feb0dc19148c7567912ec7d41a12d4f822224a12fff10f9a2f6e49b22642c6559cd95c90cdf9c4055e76adb021a7448436cfff6d12a4831eb26b10803a15693b7c381f31249ab42c076e42227904ddbbc3fce75d7bf58a1b6c53b2ccbc7a708576a2a23a9f3665c42cdbfea03fa2c063cdcdba556d831730f23a9b4c86476bc4fdffde8435ee812118d0844a9803fa5ccec011e36cad3e2a7cb3d62f3f8d2d2a1b7fd333e224d4ba23c603d528b8fc3d1c03d77be8486d451aefb4879dfdb29cb80a81dabab4f4e4ac337e20654784750c172987bf4c3ff6cf8526994d48d9e3bfda9e5906e7d2ec871ffa6aadca105c6cb7e33ec4201a6c30293cd2ce3c1640ed6f85bd70ed74aa073be1b80c14a19adc0a0ef1e53e49ede213c80ba0dcda491309101f75b513b89189efe7f66f38b5e762ec0f0064af4b6c3d4255a509eb740b33aa352164088806e4e608ff1e65d121239226591e9ba044428c288f299d6bf28e1d83d4b03222beda87a0b8a2b37af4a33d8562ace8dbc92ddcba6c03cfec24d605e87acdf2752d9ce532a0303fce93e0562f80f82672751b2ae3d1936402c485171259a3bf1830f40326b78816dedf2d9710e44a26e6de91e6e982bd9e8895985630f414ad0e63391dee4a0424b822c55089966e5ed80ed69a50d788028aba1bd7979171ed6529cae8ebd7ea18e655b625f831414f703bde710ffbe47c72ce8ded688063d4058bafc679385149137bc0cded75bb6afd84548c3d8f56e220ae0f8f2b533fa41fbbb11284af7718b9137303c0f5cefaaea6babe0fee9a322cc8ba594f079d871046bbfd18c8ebcad28046b25452e15f0b4be8e5c46fce186482fd3ca6b3ce862dce0c17a73a6421c08e3ca01d74e44a6291088cade27ff84f5451340b7e27b2475277ddfe62b08806bc2444178cfeeca4e13d1d20470a6bbb07b3127ac934242ee1b83ea4e8af4f27feace29307e3bf2b6be2c0bfa0280d8c81826836474a0f53c2dc31268b43216b564fedc4b30b449f48fe86a335b6c922b7014a8677189077a992203353d2e5d14acbff4444cf9c6918fffa27780414346528ea081d05fb72373fb39ac8f7219876a608d6b1eda8eef53f376377ebee011dfc9a87a169a017310275f28513ccee37d7974f78923674a5e14b5fcc885ad793b2cd09a8c7ba82cda1246bd9fef69ee3acf91d702209b83a838dcb54df2cb84205042341c78c66472da1f2d81169f46e91ef21e5fcbc69409717b88315ad35c99e5c16d3889ddcec80ef831c1b35e0b2406034702e721f8494cc83074d25933a675a657c9586f289c7461d3eacdc8cde99da6c9965d569716de1cdcd851a41b61c2fb7433a067e05f382796253a20130be07cbe32f26d9819e979e295a3046425c386792a580723c2d3027d375845c020d30ca7e9e8a0693d476f2c6b8d4aa5662de58e703e8cc5d1b25b1b08ee3f462fc39ce5243ebda031d2836586680b730ccd6fdeb5efb0c27122e81689ca311c76e8531f60042aeedcb534d7a879e870a0e6e28c165f75f3e8dcd234ae56fb08eb8abfe4bf738f6603fb0204f5571c52cd11479804427956800fdc51d9ef2a77810f279dfacc410bbd46a3049ba311704fdbc4261891c771b521bc72f9bcec1a8cc5f52e4ce374396aa8fdd1d4e47fd9a0b9068d2f83fb9da81ad946fd220a5daedbcac46dba1d2db6e8cb5eb56115f8a1a408d3b2092a47588151c32ee45a97e5639a49b8e9d978692a065f95aa3f75264ca85f2957778505e9cf94fb261ed6a8673c4667e4a61af5a4e77313f308b101588faffa3cc6bbfd1785ea115e0d35638f5e63ba72f54ae1edbc6d9bd1b6476ca3380196297aeb73544b37979d1d7061d918a092ffe440baeb5643831be5a1212f4fd498778ec400efea71f6058e9530a52b3f85dce105e39b545285f19d4d978c0c8034769703613da781871eee76c35a8c56629331dd59f6475b00c9f10a4139894e37fc3f61331c6f04415a969ef9b4d35d497fec15966b2e74f8a73627475d6071a9f5005e4bb1669dc14ed2ba99329008adbb1793d684d01749b8a63abdf10fe73d241e8ff7c6065c7554b7ff0793c258af78ad23b8d419832e0230f48db6c0c2d386a89177615bc802e3a5638b3983bb364b4fb0c1ce2a44775459c54c5ebf05aec71d329f5778c240ecc0f25ea81225fd40c3ed9a09f45e4bc5796ef86ef38204126354731973e1a7cbf4b237d9516b03f3b184d4ed36d0ea9bf13333f85232f89a13b723cd589d9bc8ec16842dc729cd48e0cc0b600c560f40aae4b31623ab7e02a2c2c84eb66d30b547bd11247130cef216d8d5e4932df99281eb44232932462365a2f0421cc11541d677f2a458f95252db1c1667e4177e29db4785ec40e9accf73c4f268afdcdbf3a011b1f7322fe5295b04595db66be4dda19fcbe0daa45b27119793a2d6b9f674303739d58efab38e3fdbc6aadaa20f86d4f7dadbc9dafa66ea5255654703400a1ccdca72d51da647c0034a754330bc82bd561c91b6a33f21e8e7db9b15176681a1f8a117232ccfbbe4c42b6ab63e3366d56296578bc43f17882c7eebcd1342a66d6ec292b8bc6bed9adc7e7969099bd7411b0ee0387ac27b78b77ea48231f70962a99a704eba279eb5195c0b307c809489fd6f03cdb16693f4ddd3815a2db40c761e740179ee2e634d94a084ac523ef70ca4604926076a39dd9a2d112c3abb1712f3c45cc3bc222a74109e56859fecfae2f7973278e160e126dc0c00e9ea1cfcbf0becb12bc6c69dd5676056bb25de693147adce7766968c2cbc41f0ef4d7ad34464ea48474d378cf47b8deafde773f77e7160c323c6e6e2ff62e835af2c0ca625debcae29135ad67c70cd73ea4fba7631541b2ae47f02b6961bb4b103048f9f3d5698bcaa646e46b5bf6cbbb25ed00ccc6fe9b0fe6040ee4bec9a31b72b82eb55dd0668a02b3cdc4b40f0887efb15839aeb2593658c43047f023dda417bed413acc54929b7ec6123c4a85a8e9098650debef85975ed8134d15470c4cd81595186e8958139caf22a719ee7d7ef95f33d7b6e7d77938e0091b7b0be1466442e23a9347db1b439fb1bceb28763f216c6ac5a46ec269fcc5645d197dde6e41168c91167155e6c462a51ad224c0866e92ab7e17222105c99d979609da616b3fbdb1626526c1eff3668bd5502a0d51ed8d00cbe8898137a8d709d3ff4bdaaac13294a7f7115b9bc7619c20f15dacc4d1d55d7edabbafd97d5d2ceab7ed96d50b6336a97e34b4d4ac9a85dbaef696b1cf7d2212f09476350f59b8fee59624365b8d30034064578aba1ee70ba028774d3b6b257d330a8c043aa92272e90b6478bbef53241555e0aa11bc40317c987810b0e0eaaa7575e1b35ca90af0a07e5aab04f8b38597fc61b76359976090cbf36f2f0e82eb42d30215568d28a56e07ab4fb223c50ac4e013633ff7bab6e362a172e022b6f4ea824b63c86a573d34d570995f9203945f4b72ae0b76b1b6f2d931e5374a5f2b6807ae31fc2da2f3f80b396362ae590c66573ac0e8b0d170e01125268e2e2e7ba96ab9216697046478223dd1fc9ffe2f082e56bdfacb7e4bdce4b333a991e1c3216a39eab1d57309e0b16b4a66a1a14d3da5cd6c45e73a8360bc594832f2f74a235a1c2b3e155d51a0cd058b897cb269619418eb098828ffb7c34603ad9b05171a4c9693f9294ede392482690d05cd8368feed1d3ae711e97ec149087363536965c803279a3c26a1ecc7a8a959a9d4c013014087fa411565e76b3a809804c47983320c47bc713d552934e765285dc4e0bca95e05c92352dcb5768e9a010b5d73bc1d166b27703eaad9c007b930b43663b933ab024f298e1be58e630031c49fee84e4e3d1861fc4c6fdff2609facd63cdb5c01a4ae11fd4bbe1758932c3958610f43dd072a1f1cc4d7bc25889687169c2c38486fcc11754ef8cef625f3d6764a39ecb9852825e2897c8ba53f44a3622f7357750fd4d56ef462da138d9dc1220b86f5eab9709dc7d445dc2279906e3555c70e54a0f91c9eaae7cad1ff31889489bf2e3ccc0c2135b274b916e07364143fc2875e75ef5954a3f3be5e8543f6b84a83e18d76a7b67d1c8d71596556baa0dd19e1a9db0c22018d598837977267cbcc4548a364fe0b33ffbfb0ca2960dc90804dddbbdc666a47cde7ea18222d14edbf8eb48ad98aeeb963be719ef4a8a542f73c99cc8272867a1bb4352d1b7991b5eacd89ae707ab59192e9a3f3a67f9e44936ebe59c472b1e7f5492f06f55187db8a6a0b8d571d809c443c38dc53c56889f4af007a010695ba7afb01d3538ac1f6654440ee84e67185488c4fd89c2"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000df340)={{0x0, 0x5, 0x8001, 0x9, 0x17, 0x9, 0x8, 0xed, 0x9, 0x1, 0x0, 0x1, 0x8, 0xfffffffffffffff8, 0x401}, 0x8, [0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f00000df3c0)={{0x0, 0x10001, 0x8, 0x3, 0x6, 0x1, 0x40, 0x40000000, 0x4, 0x4, 0x1, 0x3, 0x6, 0x7f, 0x1}, 0x8, [0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000df440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r15}], 0x8, "1a150f01900023"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000e0440)={0x200, [], 0x6, "bfc35e79674bf5"}) 33.916340932s ago: executing program 0 (id=2616): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$loop(0x0, 0x1, 0x400000) fchdir(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x8000, 0xffffffff}, 0x0) r5 = fsopen(&(0x7f00000000c0)='ocfs2_dlmfs\x00', 0x1) r6 = fsmount(r5, 0x0, 0x8) getdents(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) socket$alg(0x26, 0x5, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x20000000) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xe1, 0x2, 0x9, '\x00', 0x5}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vnet(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) 33.174192646s ago: executing program 5 (id=2617): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x28}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x200000006, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x10, 0x800000f}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20004884, &(0x7f0000000240)={0xa, 0x4e21, 0x788, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x9}, 0x1c) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="016091c0159cbaa1ffff7ffbeaf66244e36fe3", @ANYRES32=r6, @ANYBLOB="06009500faff0000"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40) 33.173896519s ago: executing program 3 (id=2618): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x0, 0x80) getdents(r1, &(0x7f0000000000)=""/23, 0x17) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0xd9d8, 0x8}) io_uring_register$IORING_REGISTER_FILES(r2, 0x1e, &(0x7f0000000000)=[r2], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x7, 0x8}, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) getrusage(0x1, &(0x7f0000000100)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r6, &(0x7f0000000000)=""/42, 0x2a, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0}], 0x1) socket$inet6(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/bpf', 0x0, 0x0) socket$inet(0xa, 0x801, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond_slave_1\x00'}) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x14c, 0x1a, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 0s ago: executing program 33 (id=2608): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) listen(0xffffffffffffffff, 0x0) socket$inet(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000001a40)}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001300), 0x28200, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x400}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) r5 = dup(r3) r6 = syz_io_uring_setup(0xc0f, &(0x7f00000000c0)={0x0, 0x6efd, 0x80, 0xffffffff, 0x1a}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r5, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r6, 0x47f5, 0x0, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f00000029c0)={0x9, {"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", 0x1000}}, 0x1006) r9 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r10 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r10) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r9, 0x1000) kernel console output (not intermixed with test programs): [T14329] ? __dev_queue_xmit+0x27b/0x3b50 [ 674.988269][T14329] ? __dev_queue_xmit+0x1d79/0x3b50 [ 674.988282][T14329] ? kasan_save_track+0x3e/0x80 [ 674.988296][T14329] ? __kasan_slab_alloc+0x6c/0x80 [ 674.988315][T14329] ? __lock_acquire+0xab9/0xd20 [ 674.988347][T14329] ? __pfx_rtnl_newlink+0x10/0x10 [ 674.988359][T14329] rtnetlink_rcv_msg+0x7cf/0xb70 [ 674.988373][T14329] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 674.988384][T14329] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 674.988394][T14329] ? ref_tracker_free+0x63a/0x7d0 [ 674.988410][T14329] ? __asan_memcpy+0x40/0x70 [ 674.988424][T14329] ? __pfx_ref_tracker_free+0x10/0x10 [ 674.988446][T14329] netlink_rcv_skb+0x208/0x470 [ 674.988459][T14329] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 674.988472][T14329] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 674.988491][T14329] ? netlink_deliver_tap+0x2e/0x1b0 [ 674.988509][T14329] netlink_unicast+0x82c/0x9e0 [ 674.988532][T14329] ? __pfx_netlink_unicast+0x10/0x10 [ 674.988550][T14329] ? netlink_sendmsg+0x642/0xb30 [ 674.988561][T14329] ? skb_put+0x11b/0x210 [ 674.988576][T14329] netlink_sendmsg+0x805/0xb30 [ 674.988595][T14329] ? __pfx_netlink_sendmsg+0x10/0x10 [ 674.988609][T14329] ? __import_iovec+0x5d4/0x7f0 [ 674.988619][T14329] ? aa_sock_msg_perm+0xf1/0x1d0 [ 674.988637][T14329] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 674.988716][T14329] ? __pfx_netlink_sendmsg+0x10/0x10 [ 674.988730][T14329] __sock_sendmsg+0x21c/0x270 [ 674.988755][T14329] ____sys_sendmsg+0x505/0x830 [ 674.988777][T14329] ? __pfx_____sys_sendmsg+0x10/0x10 [ 674.988802][T14329] ___sys_sendmsg+0x21f/0x2a0 [ 674.988817][T14329] ? __pfx____sys_sendmsg+0x10/0x10 [ 674.988862][T14329] ? __fget_files+0x2a/0x420 [ 674.988877][T14329] ? __fget_files+0x3a0/0x420 [ 674.988908][T14329] __sys_sendmsg+0x164/0x220 [ 674.988926][T14329] ? __pfx___sys_sendmsg+0x10/0x10 [ 674.988945][T14329] ? __pfx_ksys_write+0x10/0x10 [ 674.988963][T14329] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 674.988979][T14329] ? lockdep_hardirqs_on+0x9c/0x150 [ 674.988995][T14329] __do_fast_syscall_32+0xb6/0x2b0 [ 674.989011][T14329] ? lockdep_hardirqs_on+0x9c/0x150 [ 674.989027][T14329] do_fast_syscall_32+0x34/0x80 [ 674.989042][T14329] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 674.989058][T14329] RIP: 0023:0xf7f64539 [ 674.989071][T14329] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 674.989082][T14329] RSP: 002b:00000000f545655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 674.989097][T14329] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 674.989106][T14329] RDX: 0000000008000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 674.989114][T14329] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 674.989122][T14329] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 674.989129][T14329] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 674.989149][T14329] [ 676.003325][T14343] kvm: kvm [14342]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x11e) = 0xbe70a111 [ 676.236271][T14356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2365'. [ 676.337749][ T5894] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 676.447739][ T5827] Bluetooth: hci2: command 0x0406 tx timeout [ 676.490736][ T5894] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 676.502048][ T5894] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 676.531900][ T5894] usb 3-1: config 0 has no interface number 0 [ 676.574983][ T5894] usb 3-1: config 0 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 676.631319][ T5894] usb 3-1: config 0 interface 1 has no altsetting 0 [ 676.647012][ T5894] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 676.663287][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.685253][ T5894] usb 3-1: config 0 descriptor?? [ 676.956704][ T5894] usb 3-1: string descriptor 0 read error: -71 [ 677.000674][ T5894] usb 3-1: selecting invalid altsetting 0 [ 677.091694][ T5894] usb 3-1: USB disconnect, device number 94 [ 677.815583][T10596] usb 4-1: new full-speed USB device number 117 using dummy_hcd [ 678.022353][T10596] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 678.037995][T10596] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 678.173402][T10596] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 678.184803][T10596] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.204212][T10596] usb 4-1: config 0 descriptor?? [ 679.195237][T14386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2371'. [ 679.329551][ T8362] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 679.587873][ T8362] usb 1-1: Using ep0 maxpacket: 32 [ 679.616968][ T8362] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 679.638911][ T8362] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 679.654429][T14390] FAULT_INJECTION: forcing a failure. [ 679.654429][T14390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 679.664904][ T8362] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 679.668521][T14390] CPU: 0 UID: 0 PID: 14390 Comm: syz.2.2374 Not tainted syzkaller #0 PREEMPT(full) [ 679.668545][T14390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 679.668557][T14390] Call Trace: [ 679.668565][T14390] [ 679.668574][T14390] dump_stack_lvl+0x189/0x250 [ 679.668599][T14390] ? __pfx____ratelimit+0x10/0x10 [ 679.668620][T14390] ? __pfx_dump_stack_lvl+0x10/0x10 [ 679.668640][T14390] ? __pfx__printk+0x10/0x10 [ 679.668659][T14390] ? __might_fault+0xb0/0x130 [ 679.668695][T14390] should_fail_ex+0x414/0x560 [ 679.668721][T14390] _copy_from_iter+0x1de/0x1790 [ 679.668753][T14390] ? rcu_is_watching+0x15/0xb0 [ 679.668777][T14390] ? kmalloc_reserve+0xbd/0x290 [ 679.668797][T14390] ? __pfx__copy_from_iter+0x10/0x10 [ 679.668824][T14390] ? __build_skb_around+0x262/0x3f0 [ 679.668846][T14390] ? netlink_sendmsg+0x642/0xb30 [ 679.668863][T14390] ? skb_put+0x11b/0x210 [ 679.668894][T14390] netlink_sendmsg+0x6b2/0xb30 [ 679.668923][T14390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 679.668944][T14390] ? __import_iovec+0x5d4/0x7f0 [ 679.668959][T14390] ? aa_sock_msg_perm+0xf1/0x1d0 [ 679.668986][T14390] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 679.669003][T14390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 679.669023][T14390] __sock_sendmsg+0x21c/0x270 [ 679.669052][T14390] ____sys_sendmsg+0x505/0x830 [ 679.669079][T14390] ? __pfx_____sys_sendmsg+0x10/0x10 [ 679.669117][T14390] ___sys_sendmsg+0x21f/0x2a0 [ 679.669140][T14390] ? __pfx____sys_sendmsg+0x10/0x10 [ 679.669197][T14390] ? __fget_files+0x2a/0x420 [ 679.669213][T14390] ? __fget_files+0x3a0/0x420 [ 679.669240][T14390] __sys_sendmsg+0x164/0x220 [ 679.669263][T14390] ? __pfx___sys_sendmsg+0x10/0x10 [ 679.669294][T14390] ? __pfx_ksys_write+0x10/0x10 [ 679.669322][T14390] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 679.669346][T14390] ? lockdep_hardirqs_on+0x9c/0x150 [ 679.669370][T14390] __do_fast_syscall_32+0xb6/0x2b0 [ 679.669393][T14390] ? lockdep_hardirqs_on+0x9c/0x150 [ 679.669418][T14390] do_fast_syscall_32+0x34/0x80 [ 679.669441][T14390] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 679.669462][T14390] RIP: 0023:0xf7f92539 [ 679.669479][T14390] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 679.669496][T14390] RSP: 002b:00000000f548655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 679.669516][T14390] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 679.669529][T14390] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 679.669540][T14390] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 679.669551][T14390] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 679.669562][T14390] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 679.669592][T14390] [ 679.767833][T14392] tipc: Enabled bearer , priority 0 [ 679.768913][ T8362] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 679.807293][T14392] syzkaller0: entered promiscuous mode [ 679.981792][ T8362] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.002897][ T8362] usb 1-1: config 0 descriptor?? [ 680.005172][T14392] syzkaller0: entered allmulticast mode [ 680.047429][T14385] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 680.064511][T14392] tipc: Resetting bearer [ 680.067195][ T8362] hub 1-1:0.0: USB hub found [ 680.077443][T14391] tipc: Resetting bearer [ 680.108754][T14391] tipc: Disabling bearer [ 680.266959][ T8362] hub 1-1:0.0: 2 ports detected [ 680.439919][T14398] tipc: Enabled bearer , priority 0 [ 680.448018][T14398] syzkaller0: entered promiscuous mode [ 680.453812][T14398] syzkaller0: entered allmulticast mode [ 680.488939][ T8362] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 680.503703][T14397] tipc: Resetting bearer [ 680.534604][ T8362] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 680.544118][T14397] tipc: Disabling bearer [ 680.592164][ T8362] usbhid 1-1:0.0: can't add hid device: -71 [ 680.608371][ T8362] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 680.656524][ T8362] usb 1-1: USB disconnect, device number 103 [ 680.659376][T13340] usb 4-1: USB disconnect, device number 117 [ 680.908283][T14409] netlink: 'syz.2.2381': attribute type 4 has an invalid length. [ 680.932910][T14408] usb usb1: check_ctrlrecip: process 14408 (syz.3.2379) requesting ep 01 but needs 81 [ 680.950151][T14408] usb usb1: usbfs: process 14408 (syz.3.2379) did not claim interface 0 before use [ 681.207757][T13340] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 681.467775][T13340] usb 4-1: Using ep0 maxpacket: 8 [ 681.536711][T13340] usb 4-1: config 0 has an invalid interface number: 246 but max is 0 [ 681.545511][T13340] usb 4-1: config 0 has no interface number 0 [ 681.554867][T13340] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 681.564481][T13340] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.572729][T13340] usb 4-1: Product: syz [ 681.577336][T13340] usb 4-1: Manufacturer: syz [ 681.582177][T13340] usb 4-1: SerialNumber: syz [ 681.589156][T13340] usb 4-1: config 0 descriptor?? [ 681.730369][T13340] msi2500 4-1:0.246: Registered as swradio24 [ 681.753570][T13340] msi2500 4-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 682.521916][ T8362] usb 4-1: USB disconnect, device number 118 [ 682.629783][T14437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2386'. [ 682.878028][T14444] input: syz1 as /devices/virtual/input/input59 [ 682.885061][T14444] input: failed to attach handler leds to device input59, error: -6 [ 682.888839][T14447] syzkaller0: entered promiscuous mode [ 682.919520][T14447] syzkaller0: entered allmulticast mode [ 684.087729][T13340] usb 2-1: new full-speed USB device number 111 using dummy_hcd [ 684.542116][T14459] tipc: Enabled bearer , priority 0 [ 684.552244][T14459] syzkaller0: entered promiscuous mode [ 684.562272][T14459] syzkaller0: entered allmulticast mode [ 684.581203][T13340] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 684.646189][T14458] tipc: Resetting bearer [ 684.762327][T14458] tipc: Disabling bearer [ 684.853807][T13340] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 684.873114][T13340] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 684.882287][T13340] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.906439][T13340] usb 2-1: config 0 descriptor?? [ 685.556919][T14473] program syz.0.2395 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 685.760214][ T8362] usb 2-1: USB disconnect, device number 111 [ 686.132848][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.139640][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.710794][T14501] tipc: Enabled bearer , priority 0 [ 686.759368][T14502] syzkaller0: entered promiscuous mode [ 686.805986][T14502] syzkaller0: entered allmulticast mode [ 686.855644][T14499] tipc: Resetting bearer [ 686.972811][T14499] tipc: Disabling bearer [ 687.397807][T13340] usb 1-1: new full-speed USB device number 104 using dummy_hcd [ 687.487748][T10596] usb 5-1: new low-speed USB device number 86 using dummy_hcd [ 687.560312][T13340] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 687.585117][T13340] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 687.602641][T13340] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 687.621402][T13340] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.638028][T10596] usb 5-1: device descriptor read/64, error -71 [ 687.659500][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 687.670019][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 687.679372][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 687.687340][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 687.696216][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 687.718117][T13340] usb 1-1: config 0 descriptor?? [ 687.897821][T10596] usb 5-1: new low-speed USB device number 87 using dummy_hcd [ 687.920917][T14517] chnl_net:caif_netlink_parms(): no params data found [ 688.031057][T10596] usb 5-1: device descriptor read/64, error -71 [ 688.039981][T14517] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.058187][T14517] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.065714][T14517] bridge_slave_0: entered allmulticast mode [ 688.074652][T14517] bridge_slave_0: entered promiscuous mode [ 688.087098][T14517] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.095070][T14517] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.102809][T14517] bridge_slave_1: entered allmulticast mode [ 688.111548][T14517] bridge_slave_1: entered promiscuous mode [ 688.159155][T10596] usb usb5-port1: attempt power cycle [ 688.176349][T14517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 688.198755][T14517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 688.266524][T14517] team0: Port device team_slave_0 added [ 688.276752][T14517] team0: Port device team_slave_1 added [ 688.299577][T14529] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2412'. [ 688.322801][T14517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 688.330249][T14517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 688.357345][T14517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 688.372395][T14517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 688.381030][T14517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 688.408436][T14517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 688.506929][T14517] hsr_slave_0: entered promiscuous mode [ 688.513883][T14517] hsr_slave_1: entered promiscuous mode [ 688.517717][T10596] usb 5-1: new low-speed USB device number 88 using dummy_hcd [ 688.528567][T14517] debugfs: 'hsr0' already exists in 'hsr' [ 688.538924][T14517] Cannot create hsr debugfs directory [ 688.549032][T10596] usb 5-1: device descriptor read/8, error -71 [ 688.736019][T14517] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 688.746997][T14517] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 688.758362][T14517] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 688.771990][T14517] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 688.797847][T10596] usb 5-1: new low-speed USB device number 89 using dummy_hcd [ 688.829338][T10596] usb 5-1: device descriptor read/8, error -71 [ 688.882285][T14517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 688.909901][T14517] 8021q: adding VLAN 0 to HW filter on device team0 [ 688.923785][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.931038][ T1006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 688.941527][T10596] usb usb5-port1: unable to enumerate USB device [ 688.951833][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.958998][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 689.044564][T14517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 689.129414][T14517] veth0_vlan: entered promiscuous mode [ 689.154410][T14517] veth1_vlan: entered promiscuous mode [ 689.203503][ T8362] usb 1-1: USB disconnect, device number 104 [ 689.261834][T14517] veth0_macvtap: entered promiscuous mode [ 689.283169][T14517] veth1_macvtap: entered promiscuous mode [ 689.342378][T14517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 689.381708][T14517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 689.396480][T14540] veth0_to_bond: entered allmulticast mode [ 689.414362][T14545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2415'. [ 689.456472][T11721] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.481921][T11721] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.526813][T11721] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.541909][T11721] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.720685][T11721] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.731470][ T5827] Bluetooth: hci1: command tx timeout [ 689.751995][T11721] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.820689][T11725] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.832526][T11725] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.126056][T14561] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2407'. [ 690.556231][ T30] audit: type=1326 audit(1759932221.438:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14563 comm="syz.1.2418" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f56539 code=0x0 [ 691.967200][ T5827] Bluetooth: hci1: command tx timeout [ 691.986778][T14590] FAULT_INJECTION: forcing a failure. [ 691.986778][T14590] name failslab, interval 1, probability 0, space 0, times 0 [ 692.018161][T14590] CPU: 1 UID: 0 PID: 14590 Comm: syz.4.2426 Not tainted syzkaller #0 PREEMPT(full) [ 692.018191][T14590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 692.018204][T14590] Call Trace: [ 692.018212][T14590] [ 692.018222][T14590] dump_stack_lvl+0x189/0x250 [ 692.018254][T14590] ? __pfx____ratelimit+0x10/0x10 [ 692.018278][T14590] ? __pfx_dump_stack_lvl+0x10/0x10 [ 692.018300][T14590] ? __pfx__printk+0x10/0x10 [ 692.018326][T14590] ? __lock_acquire+0xab9/0xd20 [ 692.018354][T14590] should_fail_ex+0x414/0x560 [ 692.018384][T14590] should_failslab+0xa8/0x100 [ 692.018405][T14590] kmem_cache_alloc_noprof+0x74/0x6e0 [ 692.018432][T14590] ? skb_clone+0x212/0x3a0 [ 692.018461][T14590] skb_clone+0x212/0x3a0 [ 692.018489][T14590] __netlink_deliver_tap+0x404/0x850 [ 692.018523][T14590] ? netlink_deliver_tap+0x2e/0x1b0 [ 692.018546][T14590] netlink_deliver_tap+0x19c/0x1b0 [ 692.018566][T14590] netlink_unicast+0x7fa/0x9e0 [ 692.018622][T14590] ? __pfx_netlink_unicast+0x10/0x10 [ 692.018652][T14590] ? netlink_sendmsg+0x642/0xb30 [ 692.018670][T14590] ? skb_put+0x11b/0x210 [ 692.018697][T14590] netlink_sendmsg+0x805/0xb30 [ 692.018729][T14590] ? __pfx_netlink_sendmsg+0x10/0x10 [ 692.018753][T14590] ? __import_iovec+0x5d4/0x7f0 [ 692.018770][T14590] ? aa_sock_msg_perm+0xf1/0x1d0 [ 692.018800][T14590] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 692.018819][T14590] ? __pfx_netlink_sendmsg+0x10/0x10 [ 692.018839][T14590] __sock_sendmsg+0x21c/0x270 [ 692.018870][T14590] ____sys_sendmsg+0x505/0x830 [ 692.018897][T14590] ? __pfx_____sys_sendmsg+0x10/0x10 [ 692.018939][T14590] ___sys_sendmsg+0x21f/0x2a0 [ 692.018973][T14590] ? __pfx____sys_sendmsg+0x10/0x10 [ 692.019037][T14590] ? __fget_files+0x2a/0x420 [ 692.019054][T14590] ? __fget_files+0x3a0/0x420 [ 692.019084][T14590] __sys_sendmsg+0x164/0x220 [ 692.019110][T14590] ? __pfx___sys_sendmsg+0x10/0x10 [ 692.019145][T14590] ? __pfx_ksys_write+0x10/0x10 [ 692.019176][T14590] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 692.019203][T14590] ? lockdep_hardirqs_on+0x9c/0x150 [ 692.019229][T14590] __do_fast_syscall_32+0xb6/0x2b0 [ 692.019254][T14590] ? lockdep_hardirqs_on+0x9c/0x150 [ 692.019282][T14590] do_fast_syscall_32+0x34/0x80 [ 692.019309][T14590] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 692.019335][T14590] RIP: 0023:0xf7f64539 [ 692.019378][T14590] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 692.019397][T14590] RSP: 002b:00000000f545655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 692.019419][T14590] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 692.019434][T14590] RDX: 00000000200c48a4 RSI: 0000000000000000 RDI: 0000000000000000 [ 692.019447][T14590] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 692.019459][T14590] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 692.019473][T14590] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 692.019505][T14590] [ 693.047771][ T5830] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 693.239113][ T5830] usb 1-1: Using ep0 maxpacket: 32 [ 693.263066][ T5830] usb 1-1: config 0 has an invalid interface number: 244 but max is 0 [ 693.283934][ T5830] usb 1-1: config 0 has no interface number 0 [ 693.302740][ T5830] usb 1-1: config 0 interface 244 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 693.324004][ T5830] usb 1-1: config 0 interface 244 has no altsetting 0 [ 693.336297][ T5830] usb 1-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 693.346980][ T5830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.357259][ T5830] usb 1-1: Product: syz [ 693.361916][ T5830] usb 1-1: Manufacturer: syz [ 693.366695][ T5830] usb 1-1: SerialNumber: syz [ 693.376132][ T5830] usb 1-1: config 0 descriptor?? [ 693.385242][ T5830] snd_usb_toneport 1-1:0.244: Line 6 GuitarPort found [ 693.589732][ T5830] snd_usb_toneport 1-1:0.244: cannot get proper max packet size [ 693.598298][ T5830] snd_usb_toneport 1-1:0.244: Line 6 GuitarPort now disconnected [ 693.610897][ T5830] snd_usb_toneport 1-1:0.244: probe with driver snd_usb_toneport failed with error -22 [ 693.667844][ T8362] usb 4-1: new full-speed USB device number 119 using dummy_hcd [ 693.801605][ T5830] usb 1-1: USB disconnect, device number 105 [ 693.825047][ T8362] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 693.836296][ T8362] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 693.851923][ T8362] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 693.862427][ T8362] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 693.878624][ T8362] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 693.889198][ T8362] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 693.897441][ T8362] usb 4-1: Manufacturer: syz [ 693.910905][ T8362] usb 4-1: config 0 descriptor?? [ 694.048694][ T5833] Bluetooth: hci1: command tx timeout [ 694.227729][ T8362] rc_core: IR keymap rc-hauppauge not found [ 694.234802][ T8362] Registered IR keymap rc-empty [ 694.261760][ T8362] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 694.288147][ T8362] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 694.308855][ T8362] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 694.324311][ T8362] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input61 [ 694.342080][ T8362] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 694.388042][ T8362] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 694.407801][ T5830] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 694.415542][ T8362] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 694.441504][ T8362] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 694.478175][ T8362] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 694.498544][ T8362] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 694.533654][ T8362] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 694.557906][ T5830] usb 6-1: device descriptor read/64, error -71 [ 694.564939][ T8362] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 694.599448][ T8362] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 694.637816][ T8362] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 694.691020][ T8362] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 694.703418][ T8362] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 694.724911][ T8362] usb 4-1: USB disconnect, device number 119 [ 694.731094][ T8194] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 694.837766][ T5830] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 694.913130][ T8194] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 694.926445][ T8194] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.949556][ T8194] usb 2-1: config 0 descriptor?? [ 694.982204][ T5830] usb 6-1: device descriptor read/64, error -71 [ 694.989689][ T8194] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 695.118297][ T5830] usb usb6-port1: attempt power cycle [ 695.491014][ T5830] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 695.554815][T14637] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2439'. [ 695.569526][ T5830] usb 6-1: device descriptor read/8, error -71 [ 695.642442][T14637] vxlan0: entered promiscuous mode [ 695.680056][T11727] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 695.698291][T11727] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 695.795389][T11727] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 695.818181][ T1006] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 695.849857][T10593] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 695.927783][ T5830] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 695.972078][ T5830] usb 6-1: device descriptor read/8, error -71 [ 696.087800][T10593] usb 4-1: Using ep0 maxpacket: 16 [ 696.099627][ T5830] usb usb6-port1: unable to enumerate USB device [ 696.132782][ T5833] Bluetooth: hci1: command tx timeout [ 696.141414][T10593] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 696.178162][T10593] usb 4-1: config 0 has no interface number 0 [ 696.211611][T10593] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 696.228100][T10593] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.240776][T10593] usb 4-1: Product: syz [ 696.262853][T10593] usb 4-1: Manufacturer: syz [ 696.274748][T10593] usb 4-1: SerialNumber: syz [ 696.302201][T10593] usb 4-1: config 0 descriptor?? [ 696.323961][T10593] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 696.848316][T10593] gspca_spca1528: reg_w err -110 [ 696.943717][T10593] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110 [ 697.661561][ T8194] gspca_stv06xx: I2C: Read error writing address: -71 [ 697.736383][ T8194] usb 2-1: USB disconnect, device number 112 [ 698.586339][T14666] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2446'. [ 698.602966][ T8194] usb 4-1: USB disconnect, device number 120 [ 698.811156][T14676] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2447'. [ 699.107762][ T8194] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 699.117743][T10659] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 699.268863][ T8194] usb 4-1: device descriptor read/64, error -71 [ 699.297701][T10659] usb 2-1: Using ep0 maxpacket: 16 [ 699.306711][T10659] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 699.321617][T10659] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 699.338859][T10659] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 699.354244][T10659] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.390437][T10659] usb 2-1: config 0 descriptor?? [ 699.517863][ T8194] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 699.667792][ T8194] usb 4-1: device descriptor read/64, error -71 [ 699.788118][ T8194] usb usb4-port1: attempt power cycle [ 699.828054][T14670] raw-gadget.1 gadget.1: fail, usb_ep_set_halt returned -11 [ 699.974186][T10659] usbhid 2-1:0.0: can't add hid device: -71 [ 700.022153][T10659] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 700.078229][T10659] usb 2-1: USB disconnect, device number 113 [ 700.198007][ T8194] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 700.228586][ T8194] usb 4-1: device descriptor read/8, error -71 [ 700.467732][ T8194] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 700.488671][ T8194] usb 4-1: device descriptor read/8, error -71 [ 700.557552][T14695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2455'. [ 700.609541][ T8194] usb usb4-port1: unable to enumerate USB device [ 702.021787][T14733] tipc: Enabled bearer , priority 0 [ 702.058746][T14733] syzkaller0: entered promiscuous mode [ 702.084127][T14733] syzkaller0: entered allmulticast mode [ 702.151753][T14733] tipc: Resetting bearer [ 702.197587][T14731] tipc: Resetting bearer [ 702.238967][T14736] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2463'. [ 702.272677][T14731] tipc: Disabling bearer [ 702.596399][T14732] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2462'. [ 702.661844][T14737] netlink: 'syz.0.2462': attribute type 21 has an invalid length. [ 702.691433][T14737] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2462'. [ 702.751724][T14732] netlink: 'syz.0.2462': attribute type 21 has an invalid length. [ 702.765437][T14732] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2462'. [ 703.456486][ T30] audit: type=1326 audit(1759932234.328:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14750 comm="syz.4.2468" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x0 [ 703.478042][ C1] vkms_vblank_simulate: vblank timer overrun [ 703.747847][T13340] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 703.950888][T13340] usb 5-1: device descriptor read/64, error -71 [ 704.207858][T13340] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 704.357785][T13340] usb 5-1: device descriptor read/64, error -71 [ 704.468373][T13340] usb usb5-port1: attempt power cycle [ 704.567915][ T5830] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 704.750535][ T5830] usb 2-1: config 0 has no interfaces? [ 704.763101][ T5830] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 704.775366][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.786312][ T5830] usb 2-1: Product: syz [ 704.790877][ T5830] usb 2-1: Manufacturer: syz [ 704.796039][ T5830] usb 2-1: SerialNumber: syz [ 704.805778][ T5830] usb 2-1: config 0 descriptor?? [ 704.819458][T13340] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 704.827234][T14769] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.834700][T14769] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.868355][T13340] usb 5-1: device descriptor read/8, error -71 [ 704.871575][T14769] team_slave_0: left promiscuous mode [ 704.883704][T14769] team_slave_1: left promiscuous mode [ 705.066496][T14769] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 705.085562][T14769] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 705.118221][T13340] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 705.149341][T13340] usb 5-1: device descriptor read/8, error -71 [ 705.238116][T10594] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 705.268803][T13340] usb usb5-port1: unable to enumerate USB device [ 705.298458][T14769] bond2: left allmulticast mode [ 705.319671][T14769] hsr0: left allmulticast mode [ 705.324842][T14769] veth1_to_team: left allmulticast mode [ 705.332574][T14769] bond0: left allmulticast mode [ 705.343516][T11721] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.357240][T11721] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.382278][T11721] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.391808][T11721] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.407916][T10594] usb 1-1: Using ep0 maxpacket: 32 [ 705.424267][T10594] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 705.444885][T10594] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 705.463503][T10594] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 705.483670][T10594] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 705.505812][T10594] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 705.523410][T10594] usb 1-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 705.541809][T10594] usb 1-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf [ 705.551399][T10594] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.560043][T10594] usb 1-1: Product: syz [ 705.564295][T10594] usb 1-1: Manufacturer: syz [ 705.569396][T10594] usb 1-1: SerialNumber: syz [ 705.576848][T10594] usb 1-1: config 0 descriptor?? [ 705.584296][T14770] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 705.593751][T10594] pn533_usb 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 705.831438][T14769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.852107][T14769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.395156][T14785] FAULT_INJECTION: forcing a failure. [ 706.395156][T14785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 706.409037][T14785] CPU: 0 UID: 0 PID: 14785 Comm: syz.4.2474 Not tainted syzkaller #0 PREEMPT(full) [ 706.409069][T14785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 706.409081][T14785] Call Trace: [ 706.409090][T14785] [ 706.409098][T14785] dump_stack_lvl+0x189/0x250 [ 706.409128][T14785] ? __pfx____ratelimit+0x10/0x10 [ 706.409152][T14785] ? __pfx_dump_stack_lvl+0x10/0x10 [ 706.409173][T14785] ? __pfx__printk+0x10/0x10 [ 706.409195][T14785] ? __might_fault+0xb0/0x130 [ 706.409236][T14785] should_fail_ex+0x414/0x560 [ 706.409266][T14785] _copy_from_user+0x2d/0xb0 [ 706.409288][T14785] get_compat_msghdr+0xad/0x4a0 [ 706.409317][T14785] ? __pfx_get_compat_msghdr+0x10/0x10 [ 706.409353][T14785] ___sys_sendmsg+0x193/0x2a0 [ 706.409381][T14785] ? __pfx____sys_sendmsg+0x10/0x10 [ 706.409446][T14785] ? __fget_files+0x2a/0x420 [ 706.409464][T14785] ? __fget_files+0x3a0/0x420 [ 706.409494][T14785] __sys_sendmsg+0x164/0x220 [ 706.409520][T14785] ? __pfx___sys_sendmsg+0x10/0x10 [ 706.409554][T14785] ? __pfx_ksys_write+0x10/0x10 [ 706.409585][T14785] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 706.409612][T14785] ? lockdep_hardirqs_on+0x9c/0x150 [ 706.409638][T14785] __do_fast_syscall_32+0xb6/0x2b0 [ 706.409664][T14785] ? lockdep_hardirqs_on+0x9c/0x150 [ 706.409692][T14785] do_fast_syscall_32+0x34/0x80 [ 706.409727][T14785] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 706.409751][T14785] RIP: 0023:0xf7f64539 [ 706.409771][T14785] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 706.409790][T14785] RSP: 002b:00000000f545655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 706.409814][T14785] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000140 [ 706.409829][T14785] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 706.409842][T14785] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 706.409854][T14785] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 706.409867][T14785] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 706.409901][T14785] [ 706.681728][T10594] usb 1-1: USB disconnect, device number 106 [ 706.729056][T10593] usb 2-1: USB disconnect, device number 114 [ 706.880311][ T5915] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 707.049528][ T5915] usb 5-1: Using ep0 maxpacket: 32 [ 707.058532][ T5915] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 707.075145][ T5915] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 707.088658][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 707.102627][ T5915] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 707.142398][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 707.158426][ T5915] usb 5-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 707.174222][ T5915] usb 5-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf [ 707.184917][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.193889][ T5915] usb 5-1: Product: syz [ 707.200020][ T5915] usb 5-1: Manufacturer: syz [ 707.206623][ T5915] usb 5-1: SerialNumber: syz [ 707.216178][ T5915] usb 5-1: config 0 descriptor?? [ 707.225521][T14786] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 707.237232][ T5915] pn533_usb 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 707.436632][T14785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 707.437117][T14785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 707.662414][T14813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2483'. [ 707.664456][T14813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2483'. [ 707.664718][T14813] FAULT_INJECTION: forcing a failure. [ 707.664718][T14813] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 707.664763][T14813] CPU: 0 UID: 0 PID: 14813 Comm: syz.1.2483 Not tainted syzkaller #0 PREEMPT(full) [ 707.664779][T14813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 707.664787][T14813] Call Trace: [ 707.664792][T14813] [ 707.664798][T14813] dump_stack_lvl+0x189/0x250 [ 707.664816][T14813] ? __pfx____ratelimit+0x10/0x10 [ 707.664830][T14813] ? __pfx_dump_stack_lvl+0x10/0x10 [ 707.664851][T14813] ? __pfx__printk+0x10/0x10 [ 707.664871][T14813] should_fail_ex+0x414/0x560 [ 707.664889][T14813] _copy_to_user+0x31/0xb0 [ 707.664909][T14813] simple_read_from_buffer+0xe1/0x170 [ 707.664930][T14813] proc_fail_nth_read+0x1b3/0x220 [ 707.664947][T14813] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 707.664963][T14813] ? rw_verify_area+0x2a6/0x4d0 [ 707.664978][T14813] ? __lock_acquire+0xab9/0xd20 [ 707.664989][T14813] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 707.665012][T14813] vfs_read+0x200/0xa30 [ 707.665037][T14813] ? fdget_pos+0x247/0x320 [ 707.665061][T14813] ? __pfx___mutex_lock+0x10/0x10 [ 707.665086][T14813] ? __pfx_vfs_read+0x10/0x10 [ 707.665115][T14813] ? __fget_files+0x2a/0x420 [ 707.665139][T14813] ? __fget_files+0x3a0/0x420 [ 707.665157][T14813] ? __fget_files+0x2a/0x420 [ 707.665186][T14813] ksys_read+0x145/0x250 [ 707.665216][T14813] ? __pfx_ksys_read+0x10/0x10 [ 707.665247][T14813] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 707.665273][T14813] ? lockdep_hardirqs_on+0x9c/0x150 [ 707.665301][T14813] __do_fast_syscall_32+0xb6/0x2b0 [ 707.665328][T14813] ? lockdep_hardirqs_on+0x9c/0x150 [ 707.665356][T14813] do_fast_syscall_32+0x34/0x80 [ 707.665382][T14813] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 707.665406][T14813] RIP: 0023:0xf7f56539 [ 707.665424][T14813] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 707.665443][T14813] RSP: 002b:00000000f5446590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 707.665474][T14813] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5446620 [ 707.665488][T14813] RDX: 000000000000000f RSI: 00000000f73e5ff4 RDI: 0000000000000000 [ 707.665501][T14813] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 707.665513][T14813] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 707.665526][T14813] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 707.665560][T14813] [ 708.176836][T14823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2485'. [ 708.185096][T14826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2481'. [ 708.260293][ T5886] usb 5-1: USB disconnect, device number 94 [ 710.209430][ T5827] Bluetooth: hci1: command 0x0405 tx timeout [ 711.227320][T14874] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2499'. [ 711.679771][ T5948] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 711.702406][T14874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2499'. [ 711.721289][T14872] veth0_to_bond: left allmulticast mode [ 711.882499][ T5948] usb 4-1: Using ep0 maxpacket: 32 [ 711.914556][ T5948] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 711.971909][ T5948] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 711.976023][T14872] vlan1: left promiscuous mode [ 712.012393][ T5948] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 712.018761][T14872] vlan1: left allmulticast mode [ 712.039919][T14872] veth0_vlan: left allmulticast mode [ 712.071960][ T5948] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 712.114868][ T5948] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 712.167408][ T5948] usb 4-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 712.211441][ T5948] usb 4-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf [ 712.237052][ T5948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.256335][ T5948] usb 4-1: Product: syz [ 712.260804][ T5948] usb 4-1: Manufacturer: syz [ 712.265432][ T5948] usb 4-1: SerialNumber: syz [ 712.270988][T14872] vxlan0: left promiscuous mode [ 712.294317][ T1006] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 712.318215][ T5948] usb 4-1: config 0 descriptor?? [ 712.324445][T14880] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 712.338181][ T1006] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.374738][ T5948] pn533_usb 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 712.383761][ T1006] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 712.404608][ T1006] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.427948][ T1006] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 712.447280][ T1006] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.468894][ T1006] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 712.478225][ T1006] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.819542][T14872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 712.838665][T14872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 712.887976][ T10] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 713.007857][T10593] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 713.102956][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 713.102979][ T10] usb 1-1: config 0 has no interfaces? [ 713.103001][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 713.103016][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.117941][ T10] usb 1-1: config 0 descriptor?? [ 713.160060][T10593] usb 5-1: Using ep0 maxpacket: 32 [ 713.219103][T10593] usb 5-1: config 0 interface 0 has no altsetting 0 [ 713.229569][T10593] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 713.241259][T10593] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.278977][T10593] usb 5-1: Product: syz [ 713.279114][T10593] usb 5-1: Manufacturer: syz [ 713.279662][T10593] usb 5-1: SerialNumber: syz [ 713.316165][T10593] usb 5-1: config 0 descriptor?? [ 713.439555][ T10] usb 1-1: USB disconnect, device number 107 [ 713.634593][ T10] usb 4-1: USB disconnect, device number 125 [ 714.328017][ T10] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 714.494557][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 714.526672][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 714.538288][T10593] gs_usb 5-1:0.0: Couldn't get device config: (err=-110) [ 714.555332][T10593] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -110 [ 714.591300][ T10] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 714.657950][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.825480][ T10] usb 2-1: config 0 descriptor?? [ 715.461538][ T5948] usb 5-1: USB disconnect, device number 95 [ 715.529286][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 715.535605][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 715.585880][ T10] usb 2-1: USB disconnect, device number 115 [ 715.946025][T14937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2510'. [ 716.210690][ T5833] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 716.428213][T14943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2511'. [ 716.689727][ T5948] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 716.851853][ T5948] usb 5-1: Using ep0 maxpacket: 32 [ 716.892174][ T5948] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 716.942188][ T5948] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 717.068572][ T5948] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 717.126388][ T5948] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 717.165526][ T5948] usb 5-1: config 0 interface 0 has no altsetting 0 [ 717.233676][ T5948] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 717.298430][ T5948] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 717.358709][ T5948] usb 5-1: Product: syz [ 717.381761][ T5948] usb 5-1: Manufacturer: syz [ 717.398395][ T5948] usb 5-1: SerialNumber: syz [ 717.440016][ T5948] usb 5-1: config 0 descriptor?? [ 717.494571][ T5948] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 717.528120][ T5948] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 717.704053][ T1006] bond0: (slave netdevsim0): Releasing backup interface [ 717.774287][ T1006] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 718.352690][ T1006] bridge_slave_1: left allmulticast mode [ 718.398114][ T1006] bridge_slave_1: left promiscuous mode [ 718.417236][ T1006] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.492100][ T1006] bridge_slave_0: left allmulticast mode [ 718.509220][ T1006] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.549594][ T10] usb 5-1: USB disconnect, device number 96 [ 718.583663][ T10] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 719.661767][ T30] audit: type=1326 audit(1759932250.538:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14978 comm="syz.1.2522" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56539 code=0x7ffc0000 [ 719.661836][ T30] audit: type=1326 audit(1759932250.538:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14978 comm="syz.1.2522" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56539 code=0x7ffc0000 [ 719.661881][ T30] audit: type=1326 audit(1759932250.538:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14978 comm="syz.1.2522" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7f56539 code=0x7ffc0000 [ 719.661931][ T30] audit: type=1326 audit(1759932250.538:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14978 comm="syz.1.2522" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56539 code=0x7ffc0000 [ 719.661974][ T30] audit: type=1326 audit(1759932250.548:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14978 comm="syz.1.2522" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56539 code=0x7ffc0000 [ 719.677940][ T30] audit: type=1326 audit(1759932250.548:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14978 comm="syz.1.2522" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f56539 code=0x7ffc0000 [ 719.970667][T14991] program syz.5.2525 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 720.232890][T14998] fuse: Bad value for 'fd' [ 720.467877][ T30] audit: type=1326 audit(1759932250.548:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14978 comm="syz.1.2522" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56539 code=0x7ffc0000 [ 720.587783][ T30] audit: type=1326 audit(1759932250.578:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14978 comm="syz.1.2522" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f56539 code=0x7ffc0000 [ 720.648741][ T30] audit: type=1326 audit(1759932250.578:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14978 comm="syz.1.2522" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56539 code=0x7ffc0000 [ 720.788358][ T30] audit: type=1326 audit(1759932250.668:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14978 comm="syz.1.2522" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f56539 code=0x7ffc0000 [ 721.955880][ T1006] bond0 (unregistering): left promiscuous mode [ 721.962450][ T1006] bond_slave_0: left promiscuous mode [ 721.977150][ T1006] bond_slave_1: left promiscuous mode [ 721.997063][ T1006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 722.020971][ T1006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 722.047178][ T1006] bond0 (unregistering): Released all slaves [ 722.080344][ T1006] bond1 (unregistering): Released all slaves [ 722.113314][ T1006] bond2 (unregistering): Released all slaves [ 722.251583][ T1006] tipc: Left network mode [ 722.381376][ T1006] IPVS: stopping backup sync thread 13236 ... [ 722.581109][ T5908] IPVS: starting estimator thread 0... [ 722.656424][T15035] FAULT_INJECTION: forcing a failure. [ 722.656424][T15035] name failslab, interval 1, probability 0, space 0, times 0 [ 722.701146][T15035] CPU: 1 UID: 0 PID: 15035 Comm: syz.1.2533 Not tainted syzkaller #0 PREEMPT(full) [ 722.701177][T15035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 722.701190][T15035] Call Trace: [ 722.701199][T15035] [ 722.701209][T15035] dump_stack_lvl+0x189/0x250 [ 722.701237][T15035] ? __pfx____ratelimit+0x10/0x10 [ 722.701262][T15035] ? __pfx_dump_stack_lvl+0x10/0x10 [ 722.701284][T15035] ? __pfx__printk+0x10/0x10 [ 722.701302][T15035] ? crng_make_state+0x34c/0x700 [ 722.701336][T15035] ? crng_make_state+0x3fc/0x700 [ 722.701366][T15035] ? crng_make_state+0x13a/0x700 [ 722.701396][T15035] should_fail_ex+0x414/0x560 [ 722.701427][T15035] should_failslab+0xa8/0x100 [ 722.701451][T15035] __kmalloc_cache_noprof+0x6f/0x6f0 [ 722.701479][T15035] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 722.701502][T15035] ? sctp_add_bind_addr+0x8c/0x370 [ 722.701533][T15035] sctp_add_bind_addr+0x8c/0x370 [ 722.701563][T15035] sctp_copy_local_addr_list+0x30b/0x4e0 [ 722.701592][T15035] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 722.701615][T15035] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 722.701642][T15035] ? sctp_v6_is_any+0x64/0x80 [ 722.701670][T15035] ? sctp_copy_one_addr+0x93/0x360 [ 722.701699][T15035] sctp_bind_addr_copy+0xb3/0x3c0 [ 722.701725][T15035] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 722.701752][T15035] sctp_connect_new_asoc+0x2e0/0x690 [ 722.701786][T15035] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 722.701813][T15035] ? __local_bh_enable_ip+0x12d/0x1c0 [ 722.701854][T15035] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 722.701874][T15035] ? security_sctp_bind_connect+0x7e/0x2e0 [ 722.701901][T15035] sctp_sendmsg+0x155c/0x2810 [ 722.701946][T15035] ? __pfx_sctp_sendmsg+0x10/0x10 [ 722.701979][T15035] ? aa_sk_perm+0x81e/0x950 [ 722.702010][T15035] ? __pfx_aa_sk_perm+0x10/0x10 [ 722.702040][T15035] ? sock_rps_record_flow+0x19/0x410 [ 722.702076][T15035] ? inet_sendmsg+0x2f4/0x370 [ 722.702101][T15035] __sock_sendmsg+0x19c/0x270 [ 722.702134][T15035] __sys_sendto+0x3bd/0x520 [ 722.702166][T15035] ? __pfx___sys_sendto+0x10/0x10 [ 722.702183][T15035] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 722.702225][T15035] ? __fget_files+0x3a0/0x420 [ 722.702258][T15035] ? ksys_write+0x22a/0x250 [ 722.702284][T15035] ? exc_page_fault+0x82/0x100 [ 722.702309][T15035] ? __pfx_ksys_write+0x10/0x10 [ 722.702344][T15035] __ia32_sys_sendto+0xdd/0x100 [ 722.702370][T15035] __do_fast_syscall_32+0xb6/0x2b0 [ 722.702397][T15035] ? lockdep_hardirqs_on+0x9c/0x150 [ 722.702426][T15035] do_fast_syscall_32+0x34/0x80 [ 722.702452][T15035] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 722.702477][T15035] RIP: 0023:0xf7f56539 [ 722.702496][T15035] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 722.702513][T15035] RSP: 002b:00000000f544655c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 722.702536][T15035] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 722.702550][T15035] RDX: 0000000000000001 RSI: 0000000000000051 RDI: 0000000080000080 [ 722.702563][T15035] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 722.702576][T15035] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 722.702587][T15035] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 722.702621][T15035] [ 723.335358][T15032] IPVS: using max 33 ests per chain, 79200 per kthread [ 723.657036][ T1006] team0: left promiscuous mode [ 723.663771][ T1006] team_slave_0: left promiscuous mode [ 723.678630][ T1006] team_slave_1: left promiscuous mode [ 723.705421][ T1006] hsr_slave_0: left promiscuous mode [ 723.719619][ T1006] hsr_slave_1: left promiscuous mode [ 723.726688][ T1006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 723.736235][ T1006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 725.557468][ T1006] team0 (unregistering): Port device team_slave_1 removed [ 725.697350][ T1006] team0 (unregistering): Port device team_slave_0 removed [ 725.905434][ T5886] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 726.076843][ T5886] usb 1-1: Using ep0 maxpacket: 16 [ 726.084814][ T5886] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 726.096833][ T5886] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 726.115145][ T5886] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 726.140511][ T5886] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 726.173948][ T5886] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 726.185326][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.194808][ T5886] usb 1-1: Product: syz [ 726.204565][ T5886] usb 1-1: Manufacturer: syz [ 726.212179][ T5886] usb 1-1: SerialNumber: syz [ 726.657736][T15067] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2540'. [ 727.042227][ T1006] IPVS: stop unused estimator thread 0... [ 727.227769][ T1168] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 727.410419][ T1168] usb 5-1: Using ep0 maxpacket: 32 [ 727.426540][ T1168] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 727.450536][ T1168] usb 5-1: config 0 has no interface number 0 [ 727.470123][ T1168] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 727.505397][ T1168] usb 5-1: config 0 interface 196 has no altsetting 0 [ 727.519612][ T1168] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 727.544630][ T1168] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.554927][ T1168] usb 5-1: Product: syz [ 727.559762][ T1168] usb 5-1: Manufacturer: syz [ 727.564603][ T1168] usb 5-1: SerialNumber: syz [ 727.576853][ T1168] usb 5-1: config 0 descriptor?? [ 727.590195][T15097] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 727.842897][ T5908] usb 2-1: new full-speed USB device number 116 using dummy_hcd [ 727.987942][ T5886] usb 1-1: USB disconnect, device number 108 [ 728.110822][T14516] udevd[14516]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 728.133980][ T5908] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 728.157734][ T5908] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 728.166895][ T5908] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 728.197738][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.235852][ T5908] usb 2-1: config 0 descriptor?? [ 728.313284][ T1168] ipheth 5-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 728.342674][ T1168] ipheth 5-1:0.196: Apple iPhone USB Ethernet device attached [ 728.518921][T15097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.538566][T15097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.616757][T15132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.637422][T15132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.655956][T15133] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2547'. [ 729.033976][ T10] usb 5-1: USB disconnect, device number 97 [ 729.130098][ T10] ipheth 5-1:0.196: Apple iPhone USB Ethernet now disconnected [ 730.722990][ T5886] usb 2-1: USB disconnect, device number 116 [ 730.882413][T15186] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2555'. [ 730.919415][T15186] netem: change failed [ 732.088801][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 732.088822][ T30] audit: type=1326 audit(1759932262.978:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15200 comm="syz.3.2558" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 732.250884][T15201] fuse: blksize only supported for fuseblk [ 732.261450][ T30] audit: type=1326 audit(1759932263.008:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15200 comm="syz.3.2558" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 732.328437][ T30] audit: type=1326 audit(1759932263.028:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15200 comm="syz.3.2558" exe="/root/syz-executor" sig=0 arch=40000003 syscall=76 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 732.391187][ T30] audit: type=1326 audit(1759932263.028:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15200 comm="syz.3.2558" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 732.447262][ T30] audit: type=1326 audit(1759932263.028:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15200 comm="syz.3.2558" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 732.491045][ T30] audit: type=1326 audit(1759932263.048:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15200 comm="syz.3.2558" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 732.514890][ T30] audit: type=1326 audit(1759932263.048:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15200 comm="syz.3.2558" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 732.551514][ T30] audit: type=1326 audit(1759932263.048:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15200 comm="syz.3.2558" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 732.575224][ T30] audit: type=1326 audit(1759932263.048:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15200 comm="syz.3.2558" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 732.597931][T15193] delete_channel: no stack [ 732.602754][ T30] audit: type=1326 audit(1759932263.048:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15200 comm="syz.3.2558" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 732.997862][ T10] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 733.207881][ T1168] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 733.240905][ T10] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 733.282211][ T10] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 733.314615][T15213] input: syz0 as /devices/virtual/input/input62 [ 733.324757][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 733.338720][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.378058][ T1168] usb 4-1: device descriptor read/64, error -71 [ 733.436157][T15193] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 733.456360][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 733.658856][ T1168] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 733.678137][ T10] usb 1-1: USB disconnect, device number 109 [ 733.817696][ T1168] usb 4-1: device descriptor read/64, error -71 [ 733.928143][ T1168] usb usb4-port1: attempt power cycle [ 734.267720][ T1168] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 734.309737][ T1168] usb 4-1: device descriptor read/8, error -71 [ 734.348804][T15223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2563'. [ 734.572092][ T1168] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 734.796715][ T1168] usb 4-1: device descriptor read/8, error -71 [ 734.988630][ T1168] usb usb4-port1: unable to enumerate USB device [ 736.407742][ T5908] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 736.557806][ T5908] usb 4-1: device descriptor read/64, error -71 [ 736.583412][T15255] FAULT_INJECTION: forcing a failure. [ 736.583412][T15255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 736.605486][T15255] CPU: 0 UID: 0 PID: 15255 Comm: syz.5.2572 Not tainted syzkaller #0 PREEMPT(full) [ 736.605519][T15255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 736.605533][T15255] Call Trace: [ 736.605542][T15255] [ 736.605551][T15255] dump_stack_lvl+0x189/0x250 [ 736.605580][T15255] ? __pfx____ratelimit+0x10/0x10 [ 736.605603][T15255] ? __pfx_dump_stack_lvl+0x10/0x10 [ 736.605624][T15255] ? __pfx__printk+0x10/0x10 [ 736.605644][T15255] ? __might_fault+0xb0/0x130 [ 736.605682][T15255] should_fail_ex+0x414/0x560 [ 736.605711][T15255] strncpy_from_user+0x36/0x290 [ 736.605737][T15255] getname_flags+0xf3/0x540 [ 736.605755][T15255] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 736.605784][T15255] __ia32_sys_rename+0x5c/0x90 [ 736.605822][T15255] __do_fast_syscall_32+0xb6/0x2b0 [ 736.605848][T15255] ? lockdep_hardirqs_on+0x9c/0x150 [ 736.605875][T15255] do_fast_syscall_32+0x34/0x80 [ 736.605898][T15255] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 736.605921][T15255] RIP: 0023:0xf70dd539 [ 736.605939][T15255] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 736.605956][T15255] RSP: 002b:00000000f54cd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000026 [ 736.605978][T15255] RAX: ffffffffffffffda RBX: 0000000080000240 RCX: 0000000080000c40 [ 736.605992][T15255] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 736.606004][T15255] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 736.606016][T15255] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 736.606027][T15255] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 736.606058][T15255] [ 736.966927][ T5908] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 737.110337][ T5908] usb 4-1: device descriptor read/64, error -71 [ 737.218561][ T5908] usb usb4-port1: attempt power cycle [ 737.367839][ T10] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 737.577878][ T5908] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 737.597770][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 737.605207][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 737.613862][ T5908] usb 4-1: device descriptor read/8, error -71 [ 737.630100][ T10] usb 1-1: config index 0 descriptor too short (expected 55570, got 18) [ 737.654264][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 737.682139][ T10] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 8 [ 737.705691][ T10] usb 1-1: string descriptor 0 read error: -22 [ 737.712566][ T10] usb 1-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 737.773058][ T10] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 737.838335][ T10] usb 1-1: config 0 descriptor?? [ 737.887827][ T5908] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 737.968467][ T5908] usb 4-1: device descriptor read/8, error -71 [ 738.090225][ T5908] usb usb4-port1: unable to enumerate USB device [ 738.249752][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 738.447904][T14771] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 738.512698][ T10] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 738.521687][ T10] usb 6-1: config 0 has no interface number 0 [ 738.529948][ T10] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 738.544213][ T10] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 738.558252][ T10] usb 6-1: config 0 interface 255 has no altsetting 0 [ 738.565183][ T10] usb 6-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 738.574861][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.586239][ T10] usb 6-1: config 0 descriptor?? [ 738.594470][ T10] ums-realtek 6-1:0.255: USB Mass Storage device detected [ 738.607772][T14771] usb 5-1: Using ep0 maxpacket: 16 [ 738.618350][T14771] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 738.629694][T14771] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 738.642137][T14771] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 738.654175][T14771] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 738.681116][T14771] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 738.690815][T14771] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.702446][T14771] usb 5-1: Product: syz [ 738.706707][T14771] usb 5-1: Manufacturer: syz [ 738.711961][T14771] usb 5-1: SerialNumber: syz [ 738.798272][ T10] usb 6-1: USB disconnect, device number 6 [ 739.520092][ T5886] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 739.703951][ T5886] usb 4-1: Using ep0 maxpacket: 32 [ 739.729332][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 739.761556][ T5886] usb 4-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=93.a8 [ 739.771702][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.780292][ T5886] usb 4-1: Product: syz [ 739.785934][ T5886] usb 4-1: Manufacturer: syz [ 739.791673][ T5886] usb 4-1: SerialNumber: syz [ 739.804475][ T5886] usb 4-1: config 0 descriptor?? [ 740.011118][ T5908] usb 1-1: USB disconnect, device number 110 [ 740.068107][T15290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.177261][T15290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.285095][T15290] random: crng reseeded on system resumption [ 740.496783][ T5886] ath6kl: Failed to submit usb control message: -71 [ 740.577275][ T5886] ath6kl: unable to send the bmi data to the device: -71 [ 740.656940][ T5886] ath6kl: Unable to send get target info: -71 [ 740.689124][T14771] usb 5-1: USB disconnect, device number 98 [ 740.706896][ T5886] ath6kl: Failed to init ath6kl core: -71 [ 740.751763][ T5886] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 740.903933][ T5886] usb 4-1: USB disconnect, device number 8 [ 741.002105][T14516] udevd[14516]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 741.099074][T15315] tipc: Enabled bearer , priority 0 [ 741.154454][T15315] syzkaller0: entered promiscuous mode [ 741.187078][T15315] syzkaller0: entered allmulticast mode [ 741.303778][T15315] tipc: Resetting bearer [ 741.366566][T15314] tipc: Resetting bearer [ 741.434252][T15314] tipc: Disabling bearer [ 741.950602][T15338] input: syz1 as /devices/virtual/input/input63 [ 742.524195][T15357] bridge0: port 3(veth0_to_bridge) entered blocking state [ 742.563453][T15357] bridge0: port 3(veth0_to_bridge) entered disabled state [ 742.586154][T15357] veth0_to_bridge: entered allmulticast mode [ 742.619864][T15357] veth0_to_bridge: entered promiscuous mode [ 742.646466][T15357] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 742.683541][T15357] bridge0: port 3(veth0_to_bridge) entered blocking state [ 742.691381][T15357] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 742.701243][ T10] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 742.849233][ T10] usb 4-1: device descriptor read/64, error -71 [ 743.137693][ T10] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 743.288201][ T10] usb 4-1: device descriptor read/64, error -71 [ 743.325347][T15370] tipc: Enabled bearer , priority 0 [ 743.356571][T15370] syzkaller0: entered promiscuous mode [ 743.381849][T15370] syzkaller0: entered allmulticast mode [ 743.467166][ T10] usb usb4-port1: attempt power cycle [ 743.490750][T15370] tipc: Resetting bearer [ 743.548845][T15369] tipc: Resetting bearer [ 743.680463][T15369] tipc: Disabling bearer [ 743.827886][ T10] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 743.880107][ T10] usb 4-1: device descriptor read/8, error -71 [ 743.943776][T15385] FAULT_INJECTION: forcing a failure. [ 743.943776][T15385] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 743.974259][T15385] CPU: 0 UID: 0 PID: 15385 Comm: syz.0.2601 Not tainted syzkaller #0 PREEMPT(full) [ 743.974290][T15385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 743.974303][T15385] Call Trace: [ 743.974311][T15385] [ 743.974321][T15385] dump_stack_lvl+0x189/0x250 [ 743.974350][T15385] ? __pfx____ratelimit+0x10/0x10 [ 743.974374][T15385] ? __pfx_dump_stack_lvl+0x10/0x10 [ 743.974397][T15385] ? __pfx__printk+0x10/0x10 [ 743.974419][T15385] ? __might_fault+0xb0/0x130 [ 743.974458][T15385] should_fail_ex+0x414/0x560 [ 743.974487][T15385] _copy_from_user+0x2d/0xb0 [ 743.974509][T15385] get_old_timespec32+0x88/0x130 [ 743.974530][T15385] ? __pfx_get_old_timespec32+0x10/0x10 [ 743.974561][T15385] do_compat_pselect+0xe2/0x2d0 [ 743.974598][T15385] ? __pfx_do_compat_pselect+0x10/0x10 [ 743.974627][T15385] ? ksys_write+0x22a/0x250 [ 743.974648][T15385] ? __pfx_ksys_write+0x10/0x10 [ 743.974665][T15385] __ia32_compat_sys_pselect6_time32+0x149/0x190 [ 743.974684][T15385] ? lockdep_hardirqs_on+0x9c/0x150 [ 743.974700][T15385] __do_fast_syscall_32+0xb6/0x2b0 [ 743.974716][T15385] ? lockdep_hardirqs_on+0x9c/0x150 [ 743.974732][T15385] do_fast_syscall_32+0x34/0x80 [ 743.974747][T15385] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 743.974761][T15385] RIP: 0023:0xf7f47539 [ 743.974774][T15385] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 743.974795][T15385] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000134 [ 743.974810][T15385] RAX: ffffffffffffffda RBX: 0000000000000040 RCX: 0000000080000100 [ 743.974820][T15385] RDX: 0000000000000000 RSI: 0000000080000400 RDI: 0000000080000280 [ 743.974828][T15385] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 743.974835][T15385] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 743.974843][T15385] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 743.974862][T15385] [ 744.368038][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 744.380638][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 744.393151][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 744.405654][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 744.418134][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 744.430603][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 744.443728][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 744.456274][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 744.469050][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 744.481511][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 744.529532][ T10] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 744.627468][ T10] usb 4-1: device descriptor read/8, error -71 [ 744.787309][ T10] usb usb4-port1: unable to enumerate USB device [ 746.808278][ T5886] usb 1-1: new low-speed USB device number 111 using dummy_hcd [ 747.065355][ T5886] usb 1-1: unable to get BOS descriptor or descriptor too short [ 747.082062][ T5886] usb 1-1: config 9 has an invalid interface number: 198 but max is 0 [ 747.127444][ T5886] usb 1-1: config 9 has no interface number 0 [ 747.439414][ T5886] usb 1-1: config 9 interface 198 has no altsetting 0 [ 747.499828][ T5886] usb 1-1: string descriptor 0 read error: -22 [ 747.506934][ T5886] usb 1-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=6f.2b [ 747.598384][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.604980][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.748508][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.898405][ T5886] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 747.906280][ T5886] dvb-usb: bulk message failed: -22 (3/0) [ 748.059194][ T5886] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 748.138699][ T5886] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 748.204755][ T5886] usb 1-1: media controller created [ 748.948958][ T5886] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 749.176675][ T1168] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 749.377630][ C0] net_ratelimit: 15492 callbacks suppressed [ 749.377654][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 749.378166][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 749.378700][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 749.379205][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 749.379743][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 749.380271][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 749.380781][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 749.381283][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 749.381796][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 749.382278][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 749.439098][T15432] tipc: Enabled bearer , priority 0 [ 749.457315][T15432] tipc: Resetting bearer [ 749.611439][ T1168] usb 6-1: Using ep0 maxpacket: 16 [ 749.714990][ T5886] DVB: Unable to find symbol mt352_attach() [ 749.715013][ T5886] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 749.719006][ T5886] dvb-usb: bulk message failed: -22 (3/0) [ 749.749402][ T5886] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 749.751359][ T1168] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 749.751394][ T1168] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 749.751430][ T1168] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 749.764278][ T5886] usb 1-1: USB disconnect, device number 111 [ 749.892120][T15431] tipc: Disabling bearer [ 750.122935][ T5886] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 750.194558][ T1168] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 750.194587][ T1168] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.194601][ T1168] usb 6-1: Product: syz [ 750.194611][ T1168] usb 6-1: Manufacturer: syz [ 750.194621][ T1168] usb 6-1: SerialNumber: syz [ 754.387709][ C0] net_ratelimit: 20841 callbacks suppressed [ 754.387733][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 754.387996][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 754.388194][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 754.388439][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 754.388644][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 754.388889][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 754.389072][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 754.389316][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 754.389512][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 754.389777][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 754.811243][ T1168] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 755.015438][ T1168] usb 6-1: USB disconnect, device number 7 [ 755.252130][T14516] udevd[14516]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 759.397676][ C0] net_ratelimit: 13129 callbacks suppressed [ 759.397701][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 759.398110][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 759.398594][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 759.399147][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 759.399719][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 759.400205][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 759.400662][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 759.401215][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 759.401722][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 759.402132][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 763.173856][ C1] sched: DL replenish lagged too much [ 764.407744][ C0] net_ratelimit: 11378 callbacks suppressed [ 764.407769][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 764.408274][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 764.408819][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 764.409463][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 764.410009][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 764.410470][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 764.411012][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 764.411664][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 764.412224][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 764.412692][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 769.417845][ C0] net_ratelimit: 10148 callbacks suppressed [ 769.417870][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 769.418532][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 769.419070][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 769.419569][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 769.420132][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 769.420756][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 769.421304][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 769.421796][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 769.422354][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 769.422966][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 774.427999][ C0] net_ratelimit: 11005 callbacks suppressed [ 774.428023][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 774.428509][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 774.429094][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 774.429572][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 774.430097][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 774.430667][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 774.431277][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 774.431796][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 774.432253][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 774.432780][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 779.437932][ C0] net_ratelimit: 8694 callbacks suppressed [ 779.437959][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 779.438381][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 779.438892][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 779.439331][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 779.439685][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 779.440134][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 779.440612][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 779.441039][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 779.441411][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 779.441844][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 784.447840][ C0] net_ratelimit: 11264 callbacks suppressed [ 784.447864][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 784.448361][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 784.448867][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 784.449394][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 784.449954][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 784.450434][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 784.450855][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 784.451338][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 784.451917][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 784.452420][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 789.457637][ C0] net_ratelimit: 8726 callbacks suppressed [ 789.457661][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 789.458096][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 789.458516][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 789.458951][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 789.459454][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 789.459884][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 789.460310][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 789.460728][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 789.461257][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 789.461678][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 794.467968][ C0] net_ratelimit: 8807 callbacks suppressed [ 794.467993][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 794.468354][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 794.468866][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 794.469368][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 794.469813][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 794.470177][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 794.470596][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 794.471089][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 794.471586][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 794.471957][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 799.477802][ C0] net_ratelimit: 10882 callbacks suppressed [ 799.477829][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 799.478282][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 799.478785][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 799.479333][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 799.479821][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 799.480259][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 799.480769][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 799.481314][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 799.481799][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 799.482212][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 804.487782][ C0] net_ratelimit: 8087 callbacks suppressed [ 804.487806][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 804.488314][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 804.488871][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 804.489287][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 804.489854][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 804.490364][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 804.490850][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 804.491397][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 804.491809][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 804.492359][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 809.180519][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.193265][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.497866][ C0] net_ratelimit: 8008 callbacks suppressed [ 809.497890][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 809.498461][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 809.498885][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 809.499390][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 809.499935][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 809.500349][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 809.500926][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 809.501342][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 809.501896][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 809.502445][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 814.507836][ C0] net_ratelimit: 8709 callbacks suppressed [ 814.507861][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 814.508472][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 814.508862][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 814.509382][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 814.509776][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 814.510298][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 814.510739][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 814.511295][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 814.511830][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 814.512400][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 814.550425][ T5827] Bluetooth: hci1: command 0x0405 tx timeout [ 819.517921][ C0] net_ratelimit: 11415 callbacks suppressed [ 819.517946][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 819.518354][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 819.518861][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 819.519216][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 819.519704][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 819.520093][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 819.520608][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 819.520983][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 819.521463][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 819.521822][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 824.527824][ C0] net_ratelimit: 11018 callbacks suppressed [ 824.527848][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 824.528293][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 824.528846][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 824.529258][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 824.529820][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 824.530233][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 824.530744][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 824.531296][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 824.531784][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 824.532197][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 829.537671][ C0] net_ratelimit: 8757 callbacks suppressed [ 829.537697][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 829.538212][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 829.538720][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 829.539271][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 829.539693][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 829.540242][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 829.540668][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 829.541170][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 829.541749][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 829.542232][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 834.547924][ C0] net_ratelimit: 9080 callbacks suppressed [ 834.547948][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 834.548440][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 834.548806][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 834.549320][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 834.549678][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 834.550111][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 834.550623][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 834.551057][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 834.551413][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 834.551926][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.557935][ C0] net_ratelimit: 13725 callbacks suppressed [ 839.557960][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 839.558329][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.558838][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.559193][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 839.559706][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 839.560085][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 839.560512][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.560992][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.561411][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 839.561782][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.567663][ C0] net_ratelimit: 11114 callbacks suppressed [ 844.567688][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 844.568168][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 844.568874][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.569542][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.570106][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 844.570643][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.571274][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.571744][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 844.572372][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 844.572851][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 849.577687][ C0] net_ratelimit: 13060 callbacks suppressed [ 849.577712][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.578106][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 849.578626][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 849.579012][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 849.579447][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.579935][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.580361][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 849.580751][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.581261][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.581629][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 854.587776][ C0] net_ratelimit: 14640 callbacks suppressed [ 854.587801][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 854.588167][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 854.588588][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.589088][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.589541][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 854.589907][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.590414][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.590796][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 854.591278][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 854.591663][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 859.597638][ C0] net_ratelimit: 13778 callbacks suppressed [ 859.597663][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 859.598031][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 859.598544][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 859.598898][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 859.599379][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 859.599765][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 859.600205][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 859.600692][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 859.601111][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 859.601471][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 864.607967][ C0] net_ratelimit: 14890 callbacks suppressed [ 864.607992][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 864.608371][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 864.608802][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 864.609280][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 864.609704][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 864.610057][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 864.610565][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 864.610953][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 864.611439][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 864.611804][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 869.617630][ C0] net_ratelimit: 14743 callbacks suppressed [ 869.617656][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 869.618084][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 869.618602][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 869.619027][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 869.619409][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 869.619903][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 869.620284][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 869.620899][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 869.621265][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 869.621696][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 874.627667][ C0] net_ratelimit: 14618 callbacks suppressed [ 874.627692][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 874.628187][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 874.628582][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 874.629088][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 874.629484][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 874.629908][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 874.630400][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 874.630846][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 874.631207][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 874.631700][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.637863][ C0] net_ratelimit: 14650 callbacks suppressed [ 879.637888][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 879.638352][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.638852][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.639310][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 879.639701][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.640224][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.640601][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 879.641087][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 879.641481][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 879.641912][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.647693][ C0] net_ratelimit: 14820 callbacks suppressed [ 884.647719][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 884.648205][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 884.648570][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 884.648988][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.649502][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.649944][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 884.650297][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.650786][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.651139][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 884.651625][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 889.657601][ C0] net_ratelimit: 14984 callbacks suppressed [ 889.657624][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 889.658048][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.658553][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.659017][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 889.659372][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.659857][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.660211][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 889.660766][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 889.661159][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 889.661617][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 893.614651][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 893.629389][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 894.667845][ C0] net_ratelimit: 14133 callbacks suppressed [ 894.667870][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 894.668390][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 894.668968][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 894.669634][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 894.670218][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 894.670721][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 894.671387][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 894.671889][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 894.672553][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 894.673060][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 899.677894][ C0] net_ratelimit: 11219 callbacks suppressed [ 899.677920][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 899.678520][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 899.678923][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 899.679403][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 899.679784][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 899.680244][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 899.680750][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 899.681182][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 899.681572][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 899.682077][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 904.687794][ C0] net_ratelimit: 8407 callbacks suppressed [ 904.687819][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 904.688268][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 904.688846][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 904.689261][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 904.689793][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 904.690343][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 904.690833][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 904.691285][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 904.691844][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 904.692259][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 909.697720][ C0] net_ratelimit: 8011 callbacks suppressed [ 909.697745][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 909.698233][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 909.698691][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 909.699242][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 909.699665][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 909.700233][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 909.700662][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 909.701150][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 909.701741][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 909.702225][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:ec:1d:10:ec:a5, vlan:0) [ 912.226244][ T31] INFO: task kworker/u8:17:11730 blocked for more than 155 seconds. [ 912.226276][ T31] Not tainted syzkaller #0 [ 912.226300][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 912.226313][ T31] task:kworker/u8:17 state:D stack:22056 pid:11730 tgid:11730 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 912.226384][ T31] Workqueue: events_unbound linkwatch_event [ 912.226421][ T31] Call Trace: [ 912.226432][ T31] [ 912.226449][ T31] __schedule+0x1798/0x4cc0 [ 912.226510][ T31] ? __pfx___schedule+0x10/0x10 [ 912.226555][ T31] ? schedule+0x91/0x360 [ 912.226585][ T31] schedule+0x165/0x360 [ 912.226614][ T31] schedule_preempt_disabled+0x13/0x30 [ 912.226639][ T31] __mutex_lock+0x7e6/0x1350 [ 912.226665][ T31] ? look_up_lock_class+0x74/0x170 [ 912.226696][ T31] ? __mutex_lock+0x5bb/0x1350 [ 912.226730][ T31] ? linkwatch_event+0xe/0x60 [ 912.226761][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 912.226804][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 912.226827][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 912.226849][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 912.226876][ T31] linkwatch_event+0xe/0x60 [ 912.226901][ T31] process_scheduled_works+0xade/0x17b0 [ 912.226960][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 912.227005][ T31] worker_thread+0x8a0/0xda0 [ 912.227035][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 912.227067][ T31] ? __kthread_parkme+0x7b/0x200 [ 912.227105][ T31] kthread+0x70e/0x8a0 [ 912.227138][ T31] ? __pfx_worker_thread+0x10/0x10 [ 912.227163][ T31] ? __pfx_kthread+0x10/0x10 [ 912.227202][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 912.227226][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 912.227249][ T31] ? __pfx_kthread+0x10/0x10 [ 912.227279][ T31] ret_from_fork+0x4bc/0x870 [ 912.227315][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 912.227348][ T31] ? __switch_to_asm+0x39/0x70 [ 912.227373][ T31] ? __switch_to_asm+0x33/0x70 [ 912.227398][ T31] ? __pfx_kthread+0x10/0x10 [ 912.227430][ T31] ret_from_fork_asm+0x1a/0x30 [ 912.227477][ T31] [ 912.240393][ T31] [ 912.240393][ T31] Showing all locks held in the system: [ 912.240410][ T31] 2 locks held by kworker/0:1/10: [ 912.240429][ T31] 4 locks held by kworker/u8:0/12: [ 912.240442][ T31] 3 locks held by kworker/u8:1/13: [ 912.240457][ T31] #0: ffff88802f46a148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 912.240525][ T31] #1: ffffc90000127ba0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 912.240588][ T31] #2: ffffffff8f4df908 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 912.240654][ T31] 1 lock held by khungtaskd/31: [ 912.240668][ T31] #0: ffffffff8e13d320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 912.240748][ T31] 3 locks held by kworker/u8:5/1006: [ 912.240764][ T31] 3 locks held by kworker/u8:6/1156: [ 912.240778][ T31] #0: ffff88801d3b6948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 912.240837][ T31] #1: ffffc90003b3fba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 912.240897][ T31] #2: ffffffff8e142db8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 912.240961][ T31] 4 locks held by kworker/0:2/1168: [ 912.240975][ T31] #0: ffff8880590e7548 ((wq_completion)wg-kex-wg1#12){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 912.241041][ T31] #1: ffffc90003ddfba0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 912.241118][ T31] #2: ffff888043ee9308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_response+0x1c7/0xab0 [ 912.241181][ T31] #3: ffff888032489708 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_response+0x6f9/0xab0 [ 912.241257][ T31] 3 locks held by kworker/u8:8/3522: [ 912.241272][ T31] 1 lock held by klogd/5186: [ 912.241294][ T31] 5 locks held by udevd/5197: [ 912.241308][ T31] 2 locks held by crond/5569: [ 912.241322][ T31] 2 locks held by getty/5585: [ 912.241335][ T31] #0: ffff88814d3070a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 912.241394][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 912.241461][ T31] 2 locks held by syz-executor/5813: [ 912.241476][ T31] 4 locks held by kworker/u9:5/5833: [ 912.241490][ T31] #0: ffff888026b80148 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 912.241549][ T31] #1: ffffc9000460fba0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 912.241611][ T31] #2: ffff88806bb24dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 912.241680][ T31] #3: ffff88806bb240b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 912.241743][ T31] 5 locks held by syz-executor/5843: [ 912.241758][ T31] 2 locks held by syz-executor/5847: [ 912.241773][ T31] 4 locks held by kworker/1:4/5886: [ 912.241789][ T31] 4 locks held by kworker/0:3/5901: [ 912.241803][ T31] 3 locks held by kworker/0:4/5908: [ 912.241817][ T31] #0: ffff88813ff1a948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 912.241878][ T31] #1: ffffc90004a07ba0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 912.241937][ T31] #2: ffffffff8f4df908 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xa1/0xf40 [ 912.242003][ T31] 3 locks held by kworker/0:6/5917: [ 912.242021][ T31] 2 locks held by kworker/0:9/10593: [ 912.242036][ T31] 2 locks held by kworker/0:10/10594: [ 912.242050][ T31] 2 locks held by kworker/0:14/10658: [ 912.242064][ T31] 3 locks held by kworker/u8:9/11721: [ 912.242078][ T31] 3 locks held by kworker/u8:10/11722: [ 912.242092][ T31] 4 locks held by kworker/u8:12/11725: [ 912.242105][ T31] 3 locks held by kworker/u8:14/11727: [ 912.242120][ T31] 2 locks held by kworker/u8:15/11728: [ 912.242133][ T31] 3 locks held by kworker/u8:17/11730: [ 912.242147][ T31] #0: ffff88813ff29948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 912.242214][ T31] #1: ffffc9001c647ba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 912.242274][ T31] #2: ffffffff8f4df908 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 912.242346][ T31] 2 locks held by syz.4.2110/13470: [ 912.242361][ T31] 2 locks held by syz-executor/14517: [ 912.242378][ T31] 2 locks held by kworker/1:10/14771: [ 912.242392][ T31] 2 locks held by kworker/1:13/14772: [ 912.242407][ T31] 6 locks held by syz.4.2608/15429: [ 912.242422][ T31] 1 lock held by syz.1.2615/15449: [ 912.242436][ T31] 2 locks held by sed/15460: [ 912.242450][ T31] [ 912.242458][ T31] ============================================= [ 912.242458][ T31] [ 912.242469][ T31] NMI backtrace for cpu 0 [ 912.242485][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 912.242507][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 912.242520][ T31] Call Trace: [ 912.242528][ T31] [ 912.242537][ T31] dump_stack_lvl+0x189/0x250 [ 912.242564][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 912.242585][ T31] ? __pfx__printk+0x10/0x10 [ 912.242616][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 912.242650][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 912.242682][ T31] ? __pfx__printk+0x10/0x10 [ 912.242708][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 912.242742][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 912.242776][ T31] watchdog+0xf60/0xfa0 [ 912.242803][ T31] ? watchdog+0x1e2/0xfa0 [ 912.242830][ T31] kthread+0x70e/0x8a0 [ 912.242860][ T31] ? __pfx_watchdog+0x10/0x10 [ 912.242880][ T31] ? __pfx_kthread+0x10/0x10 [ 912.242908][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 912.242929][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 912.242950][ T31] ? __pfx_kthread+0x10/0x10 [ 912.242978][ T31] ret_from_fork+0x4bc/0x870 [ 912.243003][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 912.243032][ T31] ? __switch_to_asm+0x39/0x70 [ 912.243054][ T31] ? __switch_to_asm+0x33/0x70 [ 912.243075][ T31] ? __pfx_kthread+0x10/0x10 [ 912.243102][ T31] ret_from_fork_asm+0x1a/0x30 [ 912.243144][ T31] [ 912.243152][ T31] Sending NMI from CPU 0 to CPUs 1: [ 912.243194][ C1] NMI backtrace for cpu 1 [ 912.243210][ C1] CPU: 1 UID: 0 PID: 5886 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) [ 912.243229][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 912.243241][ C1] Workqueue: events_long defense_work_handler [ 912.243264][ C1] RIP: 0010:__rcu_read_lock+0x2a/0x60 [ 912.243289][ C1] Code: f3 0f 1e fa 53 65 48 8b 1c 25 08 e0 90 92 48 81 c3 84 04 00 00 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 <84> c0 75 18 ff 03 8b 03 3d 00 00 00 40 7d 07 5b c3 cc cc cc cc cc [ 912.243304][ C1] RSP: 0018:ffffc90000a078a8 EFLAGS: 00000a03 [ 912.243318][ C1] RAX: 0000000000000000 RBX: ffff88802e134104 RCX: dffffc0000000000 [ 912.243330][ C1] RDX: dffffc0000000000 RSI: ffffffff81abbc7c RDI: ffffc90000a07988 [ 912.243342][ C1] RBP: dffffc0000000000 R08: ffffc90000a07a50 R09: 0000000000000000 [ 912.243354][ C1] R10: ffffc90000a079d8 R11: ffffffff81abbcd0 R12: 1ffff92000140f31 [ 912.243366][ C1] R13: ffffc90000a079c0 R14: ffffc90000a07988 R15: ffffc90000a07a20 [ 912.243379][ C1] FS: 0000000000000000(0000) GS:ffff888125e12000(0000) knlGS:0000000000000000 [ 912.243392][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 912.243404][ C1] CR2: 00007f7827fa9020 CR3: 000000000df38000 CR4: 00000000003526f0 [ 912.243420][ C1] Call Trace: [ 912.243427][ C1] [ 912.243433][ C1] ? stack_trace_save+0x9c/0xe0 [ 912.243453][ C1] unwind_next_frame+0x9e/0x2390 [ 912.243472][ C1] ? arch_stack_walk+0xe4/0x150 [ 912.243494][ C1] ? __unwind_start+0x5b9/0x760 [ 912.243513][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 912.243534][ C1] arch_stack_walk+0x11c/0x150 [ 912.243561][ C1] ? stack_trace_save+0x9c/0xe0 [ 912.243582][ C1] stack_trace_save+0x9c/0xe0 [ 912.243602][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 912.243625][ C1] ? __lock_acquire+0xab9/0xd20 [ 912.243640][ C1] kasan_save_track+0x3e/0x80 [ 912.243682][ C1] ? ip6_mc_input+0x8de/0xb70 [ 912.243703][ C1] __kasan_save_free_info+0x46/0x50 [ 912.243722][ C1] __kasan_slab_free+0x5c/0x80 [ 912.243744][ C1] kmem_cache_free+0x19b/0x690 [ 912.243768][ C1] ip6_mc_input+0x8de/0xb70 [ 912.243792][ C1] ? __pfx_ip6_mc_input+0x10/0x10 [ 912.243815][ C1] ? ip6_rcv_finish+0x29e/0x2e0 [ 912.243836][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 912.243856][ C1] ip_sabotage_in+0x1e1/0x270 [ 912.243874][ C1] ? __pfx_ip_sabotage_in+0x10/0x10 [ 912.243893][ C1] nf_hook_slow+0xc5/0x220 [ 912.243912][ C1] NF_HOOK+0x206/0x3a0 [ 912.243931][ C1] ? skb_orphan+0xaf/0xd0 [ 912.243952][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 912.243972][ C1] ? NF_HOOK+0x9a/0x3a0 [ 912.243991][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 912.244012][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 912.244037][ C1] __netif_receive_skb+0xd3/0x380 [ 912.244061][ C1] ? netif_receive_skb+0x115/0x790 [ 912.244082][ C1] netif_receive_skb+0x1cb/0x790 [ 912.244103][ C1] ? __pfx_netif_receive_skb+0x10/0x10 [ 912.244126][ C1] ? br_netif_receive_skb+0x126/0x190 [ 912.244146][ C1] NF_HOOK+0x9d/0x390 [ 912.244162][ C1] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 912.244181][ C1] ? NF_HOOK+0x102/0x390 [ 912.244198][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 912.244217][ C1] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 912.244237][ C1] ? br_pass_frame_up+0x275/0x420 [ 912.244257][ C1] br_handle_frame_finish+0x15c6/0x1c50 [ 912.244281][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 912.244304][ C1] ? ip6t_do_table+0x1db/0x1560 [ 912.244326][ C1] ? nf_hook_slow+0x176/0x220 [ 912.244343][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 912.244361][ C1] br_nf_hook_thresh+0x3c3/0x4a0 [ 912.244382][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 912.244401][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 912.244419][ C1] ? nf_nat_ipv6_in+0x1fc/0x2b0 [ 912.244445][ C1] br_nf_pre_routing_finish_ipv6+0x999/0xd60 [ 912.244465][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 912.244486][ C1] ? br_nf_pre_routing_ipv6+0x42f/0x6b0 [ 912.244506][ C1] br_nf_pre_routing_ipv6+0x37e/0x6b0 [ 912.244526][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 912.244577][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 912.244597][ C1] ? br_nf_pre_routing+0x720/0x1470 [ 912.244618][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 912.244635][ C1] br_handle_frame+0x97f/0x14c0 [ 912.244657][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 912.244674][ C1] ? rcu_lockdep_current_cpu_online+0x37/0x120 [ 912.244696][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 912.244713][ C1] ? __pfx_rcu_read_lock_bh_held+0x10/0x10 [ 912.244734][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 912.244753][ C1] __netif_receive_skb_core+0x10b6/0x4380 [ 912.244775][ C1] ? kmem_cache_free+0x19b/0x690 [ 912.244799][ C1] ? ip6_mc_input+0x8de/0xb70 [ 912.244822][ C1] ? __pfx_ip6_mc_input+0x10/0x10 [ 912.244845][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 912.244866][ C1] ? ip6_rcv_finish+0x29e/0x2e0 [ 912.244888][ C1] ? NF_HOOK+0x309/0x3a0 [ 912.244906][ C1] ? skb_orphan+0xaf/0xd0 [ 912.244932][ C1] ? process_backlog+0x2d5/0x14f0 [ 912.244947][ C1] ? process_backlog+0x2d5/0x14f0 [ 912.244963][ C1] __netif_receive_skb+0x72/0x380 [ 912.244986][ C1] ? process_backlog+0x2d5/0x14f0 [ 912.245001][ C1] process_backlog+0x60e/0x14f0 [ 912.245022][ C1] ? __pfx_process_backlog+0x10/0x10 [ 912.245035][ C1] ? do_raw_spin_lock+0x121/0x290 [ 912.245057][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 912.245079][ C1] __napi_poll+0xc7/0x360 [ 912.245099][ C1] ? skb_defer_free_flush+0x229/0x250 [ 912.245121][ C1] net_rx_action+0x5f7/0xdf0 [ 912.245142][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 912.245171][ C1] handle_softirqs+0x283/0x870 [ 912.245190][ C1] ? do_softirq+0xec/0x180 [ 912.245208][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 912.245227][ C1] ? update_defense_level+0xec/0xd80 [ 912.245247][ C1] do_softirq+0xec/0x180 [ 912.245262][ C1] [ 912.245268][ C1] [ 912.245274][ C1] ? __pfx_do_softirq+0x10/0x10 [ 912.245289][ C1] ? __lock_acquire+0xab9/0xd20 [ 912.245308][ C1] ? lockdep_softirqs_on+0x13b/0x1c0 [ 912.245323][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 912.245340][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 912.245358][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 912.245380][ C1] ? update_defense_level+0xec/0xd80 [ 912.245398][ C1] update_defense_level+0x8d2/0xd80 [ 912.245419][ C1] ? update_defense_level+0xec/0xd80 [ 912.245439][ C1] ? __pfx_update_defense_level+0x10/0x10 [ 912.245464][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 912.245485][ C1] defense_work_handler+0x2d/0xd0 [ 912.245503][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 912.245520][ C1] process_scheduled_works+0xade/0x17b0 [ 912.245553][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 912.245576][ C1] worker_thread+0x8a0/0xda0 [ 912.245595][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 912.245616][ C1] ? __kthread_parkme+0x7b/0x200 [ 912.245637][ C1] kthread+0x70e/0x8a0 [ 912.245658][ C1] ? __pfx_worker_thread+0x10/0x10 [ 912.245674][ C1] ? __pfx_kthread+0x10/0x10 [ 912.245694][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 912.245710][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 912.245726][ C1] ? __pfx_kthread+0x10/0x10 [ 912.245746][ C1] ret_from_fork+0x4bc/0x870 [ 912.245763][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 912.245782][ C1] ? __switch_to_asm+0x39/0x70 [ 912.245799][ C1] ? __switch_to_asm+0x33/0x70 [ 912.245815][ C1] ? __pfx_kthread+0x10/0x10 [ 912.245835][ C1] ret_from_fork_asm+0x1a/0x30 [ 912.245860][ C1] [ 912.246190][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 912.246208][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 912.246231][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 912.246244][ T31] Call Trace: [ 912.246253][ T31] [ 912.246263][ T31] dump_stack_lvl+0x99/0x250 [ 912.246295][ T31] ? __asan_memcpy+0x40/0x70 [ 912.246323][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 912.246346][ T31] ? __pfx__printk+0x10/0x10 [ 912.246383][ T31] vpanic+0x237/0x6d0 [ 912.246412][ T31] ? __pfx_vpanic+0x10/0x10 [ 912.246452][ T31] panic+0xb9/0xc0 [ 912.246480][ T31] ? __pfx_panic+0x10/0x10 [ 912.246512][ T31] ? irq_work_queue+0xc3/0x140 [ 912.246538][ T31] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 912.246571][ T31] watchdog+0xf9f/0xfa0 [ 912.246598][ T31] ? watchdog+0x1e2/0xfa0 [ 912.246626][ T31] kthread+0x70e/0x8a0 [ 912.246657][ T31] ? __pfx_watchdog+0x10/0x10 [ 912.246678][ T31] ? __pfx_kthread+0x10/0x10 [ 912.246708][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 912.246730][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 912.246752][ T31] ? __pfx_kthread+0x10/0x10 [ 912.246781][ T31] ret_from_fork+0x4bc/0x870 [ 912.246806][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 912.246837][ T31] ? __switch_to_asm+0x39/0x70 [ 912.246860][ T31] ? __switch_to_asm+0x33/0x70 [ 912.246883][ T31] ? __pfx_kthread+0x10/0x10 [ 912.246912][ T31] ret_from_fork_asm+0x1a/0x30 [ 912.246955][ T31] [ 912.247385][ T31] Kernel Offset: disabled