last executing test programs: 6m40.941195232s ago: executing program 3 (id=1024): mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x22600c0, &(0x7f0000000080)={[{@uuid_auto}, {@verity_off}, {@metacopy_on}, {@uuid_on}, {@xino_on}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@smackfshat={'smackfshat', 0x3d, '%$'}}, {@fsmagic={'fsmagic', 0x3d, 0x2}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x63, 0x61, 0x62, 0x32, 0x64, 0x31, 0x65], 0x2d, [0x32, 0x61, 0x62], 0x2d, [0x36, 0x61, 0x35, 0x34], 0x2d, [0x35, 0x32, 0x32, 0x35], 0x2d, [0x32, 0x66, 0x30, 0x33, 0x36, 0x35, 0x66, 0x38]}}}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x38, 0x31, 0x63, 0x61, 0x36, 0x64, 0x65], 0x2d, [0x62, 0x34, 0x32, 0x62], 0x2d, [0x34, 0x36, 0x66, 0x35], 0x2d, [0x38, 0x62, 0x34, 0x35], 0x2d, [0x34, 0x66, 0x39, 0x59, 0x65, 0x33, 0xc4, 0x64]}}}]}) lgetxattr(&(0x7f0000000140)='\x00', &(0x7f0000000180)=@known='system.advise\x00', &(0x7f00000001c0)=""/215, 0xd7) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000300)={0x2020, 0x0, 0x0}, 0x2020) (async) getpeername(0xffffffffffffffff, &(0x7f0000002340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f00000023c0)=0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000002400)={'vxcan0\x00', 0x0}) connect$can_j1939(r2, &(0x7f0000002440)={0x1d, r3, 0x0, {0x2, 0xf0, 0x3}}, 0x18) connect(r2, &(0x7f0000002480)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @broadcast}, 0x2, 0x3, 0x0, 0x2}}, 0x80) (async) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) sendto(r2, &(0x7f0000002500)="226a3242d01bd7134d1c77620f05b377a0d3718149865b63a806e76a43c83a93d8b08c165ad988808ac6c4bb5c53759436909d226b2badef88d988c2b831525d5a1d89553e6bd0be11db1a2c4c7faa5b662cee09032a09be7bb2567ee27a8034d1fd4ac23c3894e62dc79a08ec6ac4c908ea933eec81646cd49af742114c74cdfdf30aee6c142288703230a898b34e9bce4896cc8ae8925a46347fbf9620e12ddb0d00b21fbdb0633de257b8a9d1d28537dbeebeecfbc63a4fe285d943109644147a8d70974385d8128671c4f0f9586b", 0xd0, 0x1c001, &(0x7f0000002600)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80) (async, rerun: 32) ioctl$INCFS_IOC_PERMIT_FILL(r2, 0x40046721, &(0x7f0000002680)={r2}) (async, rerun: 32) recvfrom$inet_nvme(r2, &(0x7f00000026c0)=""/221, 0xdd, 0x10000, &(0x7f00000027c0)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x80) getsockopt$inet6_buf(r2, 0x29, 0x44, &(0x7f0000002840)=""/46, &(0x7f0000002880)=0x2e) (async) read$FUSE(r0, &(0x7f00000028c0)={0x2020}, 0x2020) (async) pipe2$9p(&(0x7f0000004900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RREADDIR(r4, &(0x7f0000004940)={0xa6, 0x29, 0x1, {0x1, [{{0x0, 0x1, 0x4}, 0x8000000000000000, 0x10, 0x7, './file0'}, {{0x80, 0x2, 0x1}, 0x5, 0x2b, 0x7, './file0'}, {{0x2, 0x4, 0x8}, 0xfffffffffffffffe, 0x0, 0x7, './file0'}, {{0x40, 0x0, 0x5}, 0x4, 0xa, 0x7, './file1'}, {{0x80, 0x3, 0x1}, 0x3, 0x6, 0x7, './file0'}]}}, 0xa6) (async) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000004a00)={0x2, 0x5}, 0x4) r5 = openat2(0xffffffffffffff9c, &(0x7f0000004a40)='./file0\x00', &(0x7f0000004a80)={0x6cfbddcbb1326f8b, 0xc, 0x2}, 0x18) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000004b00)={'syztnl1\x00', &(0x7f0000004ac0)={'ip_vti0\x00', r3, 0x7800, 0x0, 0x228, 0x7ff, {{0x8, 0x4, 0x1, 0x3e, 0x20, 0x68, 0x0, 0x7, 0x71, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0xb, 0xe7, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) mount$nfs(&(0x7f0000004b40)='!{\x00', &(0x7f0000004b80)='./file0\x00', &(0x7f0000004bc0), 0x100000, &(0x7f0000004c00)={[{}], [{@appraise}, {@flag='ro'}]}) (async) write$FUSE_WRITE(r0, &(0x7f0000004c40)={0x18, 0x0, r1, {0x8}}, 0x18) (async) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000004, 0x1010, r0, 0x8897b000) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000004c80)={0x0, 0x5c, "f767fe04c5ef22ad1a85768a19ad06e7378f956d07e84c1fa5c0ef297b7addb7a6321b102cceb4b1f13a2edecd16ec7446d6b91d63ea962bdad8f3a4f13bbf48aa930234117f27094b09d2551cadd5c7e885fac10e88b526b43dcb04"}, &(0x7f0000004d00)=0x64) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r5, 0x84, 0x5, &(0x7f0000004d40)={r7, @in={{0x2, 0x4e24, @empty}}}, 0x84) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000004e00)={'ip6_vti0\x00', @local}) (async, rerun: 32) mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1) (rerun: 32) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000004e40)={r6, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x10) (async) ioctl$BLKGETSIZE(r5, 0x1260, &(0x7f0000004e80)) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000004ec0)={0x401, 0xce, 0x20c, 0x3, 0xc3a8, 0xffffff7f, 0x0, 0x7, r7}, &(0x7f0000004f00)=0x20) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000) 6m40.873928514s ago: executing program 3 (id=1026): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) (async) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='tunl0\x00', 0x10) (async) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x7b, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1c) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) unshare(0x2040400) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b04000000000000000002000000300004802c0001800b000100736f636b657400001c000280080002400000000b080001400000f70208000300000000890000000900020073797a3200000000140000001100070000000000000000000000000a000000000000000000"], 0x84}}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000005c0)=r6, 0x12) r9 = openat$cgroup_ro(r7, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000040)=0x1, 0x12) ioctl$sock_TIOCOUTQ(r5, 0x5411, 0x0) setreuid(0x0, r4) (async) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r1, 0x7dfff000) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r11) sendmsg$DEVLINK_CMD_GET(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="141500000ff567d00f45a6d7c92be9726084df326dc02e87a9e0a88676ae00ba5f3c540bffb8427ff176f5bcb510e420a957a11c86e9b56ca80a6700914cb9e97d5ce0cbecfd95a675c28cac4501ff99892f1171d675206beab0b3a1f96bb9f7bcfa3639f5e0f816172d5856fc0547532f485ad36ec5ae25aa973e8a", @ANYRES16=r12, @ANYBLOB="93fb26bd7000fddbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000040) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r10, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="bddc140004004ba3e41652edeb7ff503598e3c5fe904e2e68bd6db066eb89289b170d9d410adb67fd6ab085e7e97d9f071b784b7fa194d67d7e79c0e337db00d02f604979f302a58fbb042083f58aeb7dc75840d55d4e12b5bca924e5b16cfdb4625295fce9122801bbc9d34714019900360178e15f0dfc08955f43372b92c7a28fec4dc3902a9308fa5c1972e9c3307e2b0eb0fd0673f63f185852a21b02a7b9704367258fb8e7dc566bcd7e9dd99f918599d", @ANYRES16=r12, @ANYBLOB="00082cbd7400fbdbdf2545000000"], 0x14}, 0x1, 0x0, 0x0, 0x4814}, 0x0) 6m40.661414066s ago: executing program 3 (id=1027): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setreuid(0x0, r2) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) sendmsg$rds(r4, &(0x7f0000001880)={&(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000001680)=[{&(0x7f00000000c0)=""/218, 0xda}, {&(0x7f00000001c0)=""/79, 0x4f}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/194, 0xc2}, {&(0x7f00000013c0)=""/153, 0x99}, {&(0x7f0000001480)=""/24, 0x18}, {&(0x7f00000014c0)=""/154, 0x9a}, {&(0x7f0000001580)=""/156, 0x9c}, {&(0x7f0000001640)=""/62, 0x3e}], 0x9, &(0x7f00000017c0)=[@rdma_dest={0x18, 0x114, 0x2, {0xd}}, @rdma_dest={0x18, 0x114, 0x2, {0x0, 0xd}}, @mask_fadd={0x58, 0x114, 0x8, {{0xdf, 0x3}, &(0x7f0000001740)=0x10, &(0x7f0000001780)=0x7, 0x3, 0x1, 0x7b, 0xdc, 0xc, 0xc4}}], 0x88, 0x4000}, 0x10) 6m40.537278056s ago: executing program 3 (id=1028): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@updsa={0x3fc, 0x1a, 0x21, 0x70bd28, 0x25dfdbff, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@loopback, 0x4e22, 0x2, 0x4e23, 0x7, 0x2, 0x80, 0x20, 0x67}, {@in=@broadcast, 0x4d6, 0x32}, @in=@empty, {0x506793d5, 0xfffffffffffffff9, 0x24f, 0x1, 0x5, 0x3ff4, 0x8, 0x5b7}, {0xd7e3, 0xff, 0x401, 0x4}, {0x6, 0x6, 0x4ae}, 0x70bd27, 0x3502, 0x2, 0x0, 0xc, 0x40}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x1}, @sa={0xe4, 0x6, {{@in6=@mcast2, @in6=@loopback, 0x4e24, 0x8, 0x4e20, 0x5, 0x2, 0x0, 0x30, 0x11, r3, r4}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d5, 0x75}, @in6=@private0, {0x80, 0x6, 0x1e, 0x6, 0xffffffff7fffffff, 0x2, 0x0, 0xc9}, {0xa, 0x1c000000000000, 0x8, 0x49a4caa7}, {0x3000, 0x2, 0x1}, 0x70bd25, 0x0, 0xa, 0x0, 0x7, 0x8}}, @policy={0xac, 0x7, {{@in=@rand_addr=0x64010102, @in=@dev={0xac, 0x14, 0x14, 0x34}, 0x4e24, 0x201, 0x4e24, 0x0, 0xa, 0x20, 0x0, 0x3a, r3, r4}, {0x4, 0x6, 0x8, 0x7ff, 0x1, 0xffff, 0x8}, {0xe5, 0xffff, 0x5, 0x350}, 0x6, 0x0, 0x0, 0x0, 0x2, 0x1}}, @algo_aead={0x54, 0x12, {{'morus1280-avx2\x00'}, 0x40, 0x300, "53bbd360896e2d48"}}, @algo_auth_trunc={0xc0, 0x14, {{'ghash-ce\x00'}, 0x3a0, 0xc0, "417f52a9c06cd0bc6aac696185cd438f64680e96d14bbe308b6c1f6f08b42341d743703cd75eedcfe878594c5968dbc3ac0a92da1d26a5117803a8062f33e5cfaa86bfa2dab195e36693627b309c53dfb4617dba7fadec2e1430597e4047025d8914e2cc127b2ecf44569b6b9a68b5044edb1b82"}}, @extra_flags={0x8, 0x18, 0x62b3}, @user_kmaddress={0x2c, 0x13, {@in6=@private0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x8}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e23, 0x4e22, @in=@local}}]}, 0x3fc}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) lsm_list_modules(0x0, &(0x7f0000000040), 0x0) 6m40.349444598s ago: executing program 3 (id=1030): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r4, 0x45809000) 6m40.273020711s ago: executing program 3 (id=1031): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x2282c3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) lsm_list_modules(0x0, &(0x7f0000000040), 0x0) 6m25.144985651s ago: executing program 32 (id=1031): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x2282c3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) lsm_list_modules(0x0, &(0x7f0000000040), 0x0) 2m33.476933394s ago: executing program 4 (id=2658): r0 = socket(0x10, 0x3, 0x0) bind$inet(r0, &(0x7f0000000700)={0x2, 0x4e23, @multicast1}, 0x10) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) signalfd4(r1, &(0x7f0000000000), 0x8, 0x800) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='incremental-fs\x00', 0x200000, 0x0) 2m33.049550932s ago: executing program 4 (id=2659): mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='hfs\x00', 0x2218086, 0x0) 2m33.009111088s ago: executing program 4 (id=2660): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) socket(0xf, 0x3, 0xff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x180000f, 0x13, r2, 0x1000) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) 2m31.529523622s ago: executing program 4 (id=2667): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x11) mount(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x10) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="0e030e00c4e8120006491e0089", 0xd, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x200, &(0x7f0000000140)={&(0x7f00000000c0)=""/105, 0x69}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000300)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000040), 0x2, r4}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000380)={0x200, 0x1, &(0x7f0000000440)=[r4], &(0x7f0000000180)=[0x7], &(0x7f0000000280)=[r5, r5], &(0x7f0000000040)=[0x0]}) sendfile(r1, r1, 0x0, 0x7ffff000) umount2(&(0x7f0000000040)='./file0\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x11) (async) mount(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0, 0x0) (async) chdir(&(0x7f00000000c0)='./file1\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x10) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="0e030e00c4e8120006491e0089", 0xd, 0x0, 0x0, 0x0) (async) ptrace(0x10, r0) (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") (async) ptrace$getregset(0x4205, r0, 0x200, &(0x7f0000000140)={&(0x7f00000000c0)=""/105, 0x69}) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000300)=[0x0], 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000040), 0x2, r4}) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000380)={0x200, 0x1, &(0x7f0000000440)=[r4], &(0x7f0000000180)=[0x7], &(0x7f0000000280)=[r5, r5], &(0x7f0000000040)=[0x0]}) (async) sendfile(r1, r1, 0x0, 0x7ffff000) (async) umount2(&(0x7f0000000040)='./file0\x00', 0x2) (async) 2m31.279470162s ago: executing program 4 (id=2668): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000001000)={&(0x7f0000000000)=""/4096, 0x1000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, r0, 0x45809000) fadvise64(r0, 0x2, 0x81, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m30.696610385s ago: executing program 4 (id=2671): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x4000}, 0x8) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x3f, 0x100, 0x100}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x80082102, &(0x7f0000000240)={r3, 0x1, r0, 0x6}) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r4, &(0x7f0000000100)=""/159, 0xfffffe5a) 2m30.228290924s ago: executing program 33 (id=2671): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x4000}, 0x8) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x3f, 0x100, 0x100}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x80082102, &(0x7f0000000240)={r3, 0x1, r0, 0x6}) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r4, &(0x7f0000000100)=""/159, 0xfffffe5a) 1m31.405864342s ago: executing program 0 (id=3038): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000580), 0x484a00, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x1410, 0xe00, 0x70bd2a, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x810}, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r4 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000180)={0x0, 0x3, 0x1, 0x1}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x0, 0x5d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414003824d0062413"], 0x0) sendto$inet(r5, &(0x7f0000000080), 0x0, 0x24020804, &(0x7f0000000140)={0x2, 0x4e24, @multicast2}, 0x10) r6 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000000)={0x5, {{0x2, 0x4e20, @multicast1}}, 0x1, 0x1, [{{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x90) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x0, 0x0) 1m28.230947735s ago: executing program 1 (id=3057): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r1 = syz_open_dev$video(&(0x7f0000000000), 0x7fff, 0x0) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000140)={0x4, @output}) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf2507"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0000001a000100000000000000000080"], 0x84}}, 0x20048010) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000200)={r0, r0, 0x3, 0x15, &(0x7f0000000180)="f1cd2213d584e7e5b4c4b4c1ad54dc8b82310e6585", 0x9, 0x8, 0xb1a, 0x964, 0x2, 0x1, 0x4, 'syz1\x00'}) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)) (async) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000100)=@add_del={0x2, &(0x7f00000000c0)='bridge0\x00'}) r4 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x0, 0x13, r4, 0x81000000) (async) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f00000000c0)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="200d03000000091d5827fb5eec37e8b6f8f20c41077dfd3af1f9cc8ef33c1a61a773cc9c3bfefa30110e11786c700c1b0ccc681eb2a4414262fa4c1654165aac52ea069949bcf52f6a2595d83640fedf089cd8cb4fd12142b74ba437fb4b5c955295ecc302082e1dffc77f9cd0e04b0bcae6dc8d0dd1ec83babf1a4ad461f9a0dcaead343152299bffaae52a51080456d0eba756c5bba6749c736d2e39722aa5724c111c4b345402483d9a0d96f944b6e143e0bb02fb82779333cd94a58c9000590b9252182b0a4144fae76da8d9ef55f2619ef2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000140)={0x1, 0x2, 0x8, &(0x7f0000000400)={0x1f, "65c28678ec59b756ec4319a503c4a578c694d9bc41923200"}}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x1200051, 0x0) 1m28.180969395s ago: executing program 0 (id=3058): write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000000c0)={0x8, {"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", 0x1000}}, 0x1006) (async) openat$sndseq(0xffffffffffffff9c, 0x0, 0x80000) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) (async) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000040)=0x6aba, 0x4) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000180)=0x40000000, 0x4) (async) recvmmsg(r0, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/30, 0x1e}, 0x1}], 0x1, 0x45833af92e4b39ff, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) (async) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCFLSH(r2, 0x80204705, 0x20000000) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) (async) socket$kcm(0x2, 0xa, 0x2) (async) syz_usb_connect(0x2, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120110019bde521023398a71d7d80102030109022400010509401909047b07022d51d5980905eb02200002020509050412"], 0x0) (async) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r4 = dup2(r3, r3) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, 0x0, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x5, 0x4}) (async) r6 = socket(0x1, 0x2, 0x1) ioctl$SIOCGETLINKNAME(r6, 0x89e0, 0x0) (async) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r5, 0x7dfff000) 1m27.736636313s ago: executing program 0 (id=3060): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020700000a00000000000000000000000500051f000000000a00000000000000fc02000000000000000000000000000000eaff0000000000030005000000000002004e24640101010000000000000000d9fcefcc46c8f117e1"], 0x50}}, 0x20000) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f00000017c0)="a2", 0x1}], 0x1, 0xc) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x200002, 0x0) 1m27.467554107s ago: executing program 5 (id=3061): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e21, 0x1, @mcast2, 0x3}}, 0x0, 0x0, 0x24, 0x0, "58129911807820fd98fa57f1de991c2cf034c0063f13e3c560f46977f97c16b5720a9ab2621fb09c3e730819ee3ab1b9e525a2d29e98f5410b16c04b72eaf2624b887a4aa64455a2aaf9c1a3a6f2fa68"}, 0xd8) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='incremental-fs\x00', 0x108c400, 0x0) 1m27.304681032s ago: executing program 2 (id=3062): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r3, 0x104, 0x4, 0x0, &(0x7f0000000000)) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fedbdf2501000000000000000b"], 0x28}, 0x1, 0x0, 0x0, 0x4000006}, 0x40) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="05000000500800401300000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="03000080"], 0x80}}, 0x3c83f4ba09aac8e3) r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000100)={0x980000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x9, '\x00', @string=&(0x7f0000000240)=0xca}}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r6, 0x4068aea3, &(0x7f0000000680)={0xa8, 0x0, 0x2}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='cgroup\x00', 0x200828, 0x0) 1m27.231030257s ago: executing program 5 (id=3063): r0 = socket$alg(0x26, 0x5, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@private=0xa010102, @in=@dev={0xac, 0x14, 0x14, 0x31}, 0x4e20, 0x5, 0x4e23, 0xf17, 0xa, 0xa0, 0x0, 0x29}, {0x7, 0x9, 0x1, 0xb2, 0x5, 0x5, 0x3c46, 0xce}, {0x5, 0x1, 0x10001, 0x6}, 0x2, 0x0, 0x1, 0x1, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in6=@mcast1, 0x3507, 0x1, 0x1, 0x8, 0x4, 0x8001, 0x759}}, 0xe8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000240)={'bridge_slave_0\x00', {0x2, 0x4e22, @multicast2}}) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) (async) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_io_uring_setup(0x4c0a, &(0x7f0000000540)={0x0, 0x3f0c, 0x80, 0x0, 0x315}, &(0x7f00000005c0), &(0x7f0000000600)) syz_io_uring_setup(0x76e0, &(0x7f0000000640)={0x0, 0x2eda, 0x420, 0x3, 0x33f, 0x0, r4}, &(0x7f00000006c0), &(0x7f0000000700)) (async) syz_io_uring_setup(0x76e0, &(0x7f0000000640)={0x0, 0x2eda, 0x420, 0x3, 0x33f, 0x0, r4}, &(0x7f00000006c0), &(0x7f0000000700)) read$alg(r3, &(0x7f0000000000)=""/107, 0x6b) (async) read$alg(r3, &(0x7f0000000000)=""/107, 0x6b) recvmsg$unix(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000140)=0x6, 0x4) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0) 1m27.085525635s ago: executing program 1 (id=3064): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad101020301090224000100b800000004290202b48cbb00090504022b0000fa0009050000"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0xa) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), r1) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) (rerun: 64) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd700000dcdf200100000008000100", @ANYRES32=r3, @ANYBLOB="04000280"], 0x20}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYRES64=r0], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid_for_children\x00') (async) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, 0x0}) (async) fcntl$notify(r4, 0x402, 0x30) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f00000001c0)={0x0, @bt={0xfffffffc, 0xff, 0x1, 0x0, 0x8fc, 0x7, 0xb016, 0x1, 0xfffffffb, 0x9, 0x100000, 0x7, 0x84, 0x4, 0x2, 0x9, {0x1, 0x54f}, 0x8, 0xc}}) (async) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt(r7, 0x6, 0x1, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) msgsnd(0x0, &(0x7f0000000480)=ANY=[@ANYRESDEC], 0x2000, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0xc4f}, 0x0, 0x0, 0xffffeffffffffffe, 0x0, 0x6, 0x2000000000000000, 0x4, 0x4, 0x9, 0x96d}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000001100)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000820}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x5b, 0x40004010}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="9c909e80bc65190c2dca3e2166afaa4608f2ec57fee3b4cd28babbafbb953a3079386c", 0x23}, {&(0x7f0000000340)="56cf37ee9897eb981262cfa64d94ad17c41de119225ed6f2ba88dfec9378efb9348424ad6c4d412628841dd2a0e8298a6597365ba21d002b7f073f12905c6683b0c909035377116889", 0x49}, {&(0x7f0000000540)="6ea95d8fbfa342e31ce407f3434a015a3215c9df13007ed2dc43f398f9e0ffb54d85de7fc1dfab6502172ddffbae160dcade031da2b5a8e0b66fef9e721e00f74cbbbca28a1b6fe3faa517a9ab07084564c5cae233ff451a1876cd80ae229b9b338cf89936c0b1f2694dae2ffea361ff1cbe0a1cf2e032a1dc24477cc03655899600d668b9424f3805540d12970f2d9df20e8caecfc7f9c8149c07630f78547dfe1f39d470cd244a8086151a35dfc45563f8030376787b0200cad819355b289fcf790d2f5c45d9cb117073421cc9a1c545de720304fe064d00ab6a46478312d7faa0edbd72", 0xe5}, {&(0x7f00000000c0)="6f8c377468b674a6b9d57b7b7452207f5a635a7862c155a97074cd96e70f37c07488480297936a1a9f8bd9510f82af9f1441da04", 0x34}], 0x4, &(0x7f00000011c0)=[@rights={{0x18, 0x1, 0x1, [r8, r4]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x30, 0x1, 0x1, [r1, r7, r6, 0xffffffffffffffff, r1, r9, r8, r9]}}, @rights={{0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, r7]}}, @rights={{0x20, 0x1, 0x1, [r4, r7, 0xffffffffffffffff, r7]}}, @cred={{0x1c}}], 0x128, 0x1}}], 0x3, 0x8048) mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x40, 0x1f0, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000100000008000300", @ANYRES8=r10], 0x24}, 0x1, 0x0, 0x0, 0x8804}, 0x0) 1m26.480778302s ago: executing program 5 (id=3065): getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0xa, 0x801, 0x84) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ed5000410"], 0x11) connect$inet(r1, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x200002, 0x0) 1m26.426465942s ago: executing program 0 (id=3066): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1a0682) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x5, 0xe1, 0x0, 0x0, @time, {}, {0x0, 0x1}, @raw8={"1b28c02c97e8c88ddd550281"}}], 0x1c) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r1, &(0x7f0000000100)=""/159, 0xfffffe5a) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001c4000/0x3000)=nil, &(0x7f0000000000/0xc00000)=nil, 0x3000, 0x0, 0x2}) 1m26.220612373s ago: executing program 2 (id=3067): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000728000/0x4000)=nil, 0x4000) (async, rerun: 64) r3 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) close(r3) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) mmap$usbmon(&(0x7f000081c000/0x2000)=nil, 0x2000, 0x840c2f58fde4be6, 0x50, r1, 0x100000001) (async) write$binfmt_misc(r2, &(0x7f00000002c0), 0x15) (async) splice(r1, 0x0, r3, 0x0, 0x19404, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r4, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000019200)=ANY=[@ANYBLOB="640000001e0015b02dbd7000ffdb0010000000000000f23f726a5e5a036914d55f00000000000004d300003200fc0200000000000000000000000000010800000000350000240000000000000a000000000000000000000001001424e6f000"/109], 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x20040004) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) 1m25.778578649s ago: executing program 5 (id=3068): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000002a00)=ANY=[@ANYBLOB="180000007600ab"], 0x18}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x240, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r3, 0x40204706, &(0x7f0000000040)={0x1000008, 0x3, 0x9, 0xe3b, 0x5, "3eadd25569fa07b33090e954145d1c5f001c00"}) read(r1, &(0x7f0000000100)=""/159, 0xfffffe5a) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000400)={0xf0f002, 0x5}) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f00000000c0)=0x1) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) 1m25.601054045s ago: executing program 0 (id=3069): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x3, {[@local=@item_012={0x2, 0x2, 0x5, "bc5b"}]}}, 0x0}, 0x0) epoll_create(0x0) mount(&(0x7f0000000040)=@md0, &(0x7f00000000c0)='./cgroup/../file0\x00', &(0x7f0000000000)='btrfs\x00', 0x100010, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x3, {[@local=@item_012={0x2, 0x2, 0x5, "bc5b"}]}}, 0x0}, 0x0) (async) epoll_create(0x0) (async) mount(&(0x7f0000000040)=@md0, &(0x7f00000000c0)='./cgroup/../file0\x00', &(0x7f0000000000)='btrfs\x00', 0x100010, 0x0) (async) 1m25.259896237s ago: executing program 1 (id=3070): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x2, 0x5, 0x20, 0x0, 0x2}, 0x10}}, 0x0) (async) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) close(r4) (async) close(0xffffffffffffffff) (async) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000001280)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001240)={&(0x7f0000001100)={0x134, 0x1, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x47, 0x6, "ad1a1bf0536486fb88c2901a8069e7add99acfb6231455560c4da9efd3152470bff078a05db44448160f207ee5a78719daff4d0d83c8d51634425c343a7107393c60e7"}, @NFTA_TABLE_USERDATA={0xb7, 0x6, "23bd725d9eb305aa165a6709d4d7d6752beab94f6995505c4e749241ecdb52a33adcb8435277cfd50140c1242f804c06550c69c10cad23a0a11d874e2ea29416f6aed49f29a0e8e8562cb2d12ef0a7c0b87ff559424f501077e2acb23f7e9af4c9c4dd26decf592d739245008474e1de23fe4264c7f4effe5dbdcce34fdec2cd830a202a56aa9525a3bd83b07bf87e69aef9b67a6032d2602c9f286c0f9271d836a74986e1ec46871ff14b7a8a3af3a4937b3b"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x134}, 0x1, 0x0, 0x0, 0x200040c1}, 0x40000080) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$hiddev(r5, &(0x7f00000000c0)=""/4078, 0xfee) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) (async) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, &(0x7f0000000600)={[&(0x7f0000000000)='\x00', &(0x7f00000003c0)='(\x00', &(0x7f0000000440)='(\'@\x96\x00']}, 0x0) (async) pwritev(r2, &(0x7f00000001c0)=[{&(0x7f0000000280)="be", 0x7ffff000}, {0x0, 0x141}], 0x2, 0x0, 0x0) (async) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x2, 0xe, 0x0, 0x2, 0x2, 0x0, 0x700}, 0x10}, 0x1, 0x7}, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/kexec_crash_size', 0x28e4c0, 0x180) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, 0x0, 0xb, 0x801, 0x0, 0x0, {}, [@NFTA_COMPAT_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='smb3\x00', 0x200002, 0x0) 1m25.099782061s ago: executing program 5 (id=3071): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) utimensat(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={{0x0, 0x3ffffffe}, {0x0, 0x3fffffff}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r1, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000000000000000000008", 0x1d) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @mcast1, 0x1}, 0x1c) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x1c7582) creat(&(0x7f0000001380)='./file0\x00', 0x120) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x10, 0x1405, 0x621}, 0x10}, 0x1, 0x0, 0x0, 0x40084}, 0x0) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x0, 0x0) 1m24.879697571s ago: executing program 1 (id=3072): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) r1 = syz_open_dev$I2C(0x0, 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, 0x0) (async, rerun: 32) mmap(&(0x7f0000215000/0x3000)=nil, 0x3000, 0x800001, 0x12, r0, 0xe8a4a000) (rerun: 32) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x141002, 0x0) fallocate(r2, 0x0, 0x0, 0xaeca) syz_open_dev$vim2m(&(0x7f0000000180), 0x10000000000201, 0x2) syz_usb_connect(0x1, 0x0, 0x0, 0x0) (async) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f00000000c0)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x686881) (async) r3 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) (async) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) (async, rerun: 32) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) (async, rerun: 32) r4 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000d2e000/0x2000)=nil, 0x2000}}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) (async) mlock2(&(0x7f00002e5000/0xc00000)=nil, 0xc00000, 0x0) 1m24.876264619s ago: executing program 2 (id=3073): read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) mount(&(0x7f0000000040)=@rnullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x2200040, 0x0) 1m24.702172003s ago: executing program 2 (id=3074): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a02, 0x0) r1 = creat(0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000000, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xeb9a0000) copy_file_range(r1, 0x0, r1, 0x0, 0x6, 0x0) lseek(r0, 0x2004, 0x0) sendfile(r0, r0, 0x0, 0x80c000) io_setup(0x6, &(0x7f0000000000)) 1m24.626195304s ago: executing program 2 (id=3075): creat(&(0x7f0000001380)='./file0\x00', 0x4) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x231, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x20, 0x6, [{{0x9, 0x4, 0x0, 0xb, 0x2, 0x3, 0x1, 0x2, 0x4, {0x9, 0x21, 0x4, 0x9, 0x1, {0x22, 0x2da}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7, 0xfc, 0xb}}}}}]}}]}}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x0, 0x0) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1b96, 0x7, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8a, 0x60, 0xf9, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x0, 0xef, {0x9, 0x21, 0x3, 0x2, 0x1, {0x22, 0x28f}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x1, 0x7, 0xff}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x80, 0x0, 0x9}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0xf4, 0x6, 0x1, 0x10}, 0x1bf, &(0x7f0000000480)={0x5, 0xf, 0x1bf, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x4, 0x3, 0xbfb6}, @wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x4, 0xf, 0x5, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0xd, "ba47b3014345f4ec1cb43328f5b765b4"}, @generic={0xca, 0x10, 0x3, "fd6c90ef38eaeb8a5ad13ac3e15c3b79874f3a3c5fa19d0dc7f41b5eb48633406ee234d28a8936ee3c3b0686f2f7cbc6f67ba9f73eb9fe3fb0c08d0a6f12a1c282a5c8d583b89a8d8d8147f516c1300f55d5beb1180dfc55f98a74ede58e41c688412310d24d593afaf3dda7ccbcd666aad5d1106d0c10a79eb3f8ed8121c8d75341d57a2d2558992dd13b2099d8555f9d8f95ac508b08e129231324f82a34ebb223d80aba362f0e377c05cf7b6a1c61fe4b63abcb8a2176184e2833c841e6e74c70472cc1820e"}, @generic={0xbc, 0x10, 0x2, "4cbd04af838298985708d034c1b8b1f10887c57a56b0c0b1bd9cc758686113aacfe0ae70b72ebe48fe14a05640456ca29edbd1774cb9201738862279f81d3333b0b9fbcb561bd680674a5fa44ac72b91f5741f15e226acbfc8e947921f3bb0e41f9514d05b0ea23032e4e0cf34d6b3cd42cff1f647cba28398fa5383d3591ebb5710730c2e81d7c1780d31b317a4e00779cf75e29237c096788e04c519eca2caf8da3ef323847a2060a9b03d119033a87857dc441db9aa9a4a"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x8, 0x0, 0x5, 0x4117, 0x6}]}, 0x6, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x44b}}, {0x2e, &(0x7f0000000280)=@string={0x2e, 0x3, "f84e90dab89c9356039b4ab9ed3deac6b15f54fc5882a922f9e569e06486ecb3196dab0eb90c79ad8ec4c950"}}, {0x52, &(0x7f00000002c0)=@string={0x52, 0x3, "329ea2dc4b17771b2214f547ee6c20f88a090c3f85a9a84c353ba75441e3bcb12842a89f029481e76d586b8e52898a5df23996230aba9382bc5e0ef50a82dbe4ddbbf516f5eab46ff569b9c9e09efc9a"}}, {0x19, &(0x7f0000000340)=@string={0x19, 0x3, "58145b5a203caf765ac46f021e0f1d5405529b7548d8e2"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xfcff}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x40}}]}) 1m24.053201074s ago: executing program 1 (id=3076): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r0, 0x0, 0x15, 0x0, 0x0) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0xe00, 0x0, 0x0, 0x7, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffff20, 0x3}) 1m23.269040412s ago: executing program 1 (id=3077): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ppoll(&(0x7f0000000040)=[{r0, 0x2006}, {r0, 0x2000}, {r0, 0x20}, {0xffffffffffffffff, 0x1204}, {r0, 0xc000}, {r0, 0x20}], 0x6, &(0x7f0000000080), &(0x7f00000000c0)={[0x8]}, 0x8) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mlock2(&(0x7f00002e5000/0xc00000)=nil, 0xc00000, 0x0) munmap(&(0x7f000039d000/0x4000)=nil, 0x4000) 1m23.130382701s ago: executing program 5 (id=3078): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) r1 = syz_open_dev$I2C(0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000000)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x78, &(0x7f00002a0000/0x1000)=nil, 0x2) ioctl$I2C_SMBUS(r1, 0x720, 0x0) mmap(&(0x7f0000215000/0x3000)=nil, 0x3000, 0x800001, 0x12, r0, 0xe8a4a000) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x141002, 0x0) fallocate(r2, 0x0, 0xffffffffffffffff, 0xe810) syz_open_dev$vim2m(&(0x7f0000000180), 0x10000000000201, 0x2) syz_usb_connect(0x1, 0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f00000000c0)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x686881) r3 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$afs(&(0x7f0000000100)=ANY=[@ANYBLOB='#/yz1:'], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) mlock2(&(0x7f00002e5000/0xc00000)=nil, 0xc00000, 0x0) 1m22.981575844s ago: executing program 2 (id=3079): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000080), 0x10) listen(r1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000000)={0x0, 0x0, r2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000fbc2a3514b08000008000300", @ANYRES32=r5], 0x7c}}, 0x0) setresuid(0x0, 0x0, 0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff199610b90661408801010203010902120001000000000904"], 0x0) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3800000, 0x20010, r7, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@dev, @local, 0x0}, &(0x7f0000000140)=0xc) sendto$packet(r7, &(0x7f0000000000)="86bae5a1e72a9fb724b38814288ba48d40a2bc317b6ffa148379cd203a2c5afbeba8f5a2d2de39392ed9e0e3df6b405f2feeebe8dd044de4fc1cab7892e16a3544394b8bb2a180223a49ecd7e77b81e91ec3a894e39b9da8e7e8ea17d4d7f68de15d3a7dde83e668cb3ffe9b7431689ade94ad7a3dbc8dbc7401974c314eb6b07348fab180064fed8fcc90493e076dc151198f56e7a7afc1c1d9d81e64c73a0dc1e54b948ad9f1849478e3322f46fa1cf3b4847f1b46993b9d6de11b4f8aace49c905541d082e51db4844602e57faacf9c35d669db", 0xd5, 0x4000000, &(0x7f00000001c0)={0x11, 0x2, r8, 0x1, 0x1, 0x6, @random="d989b5ce3dfe"}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r6, 0x45809000) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r9, &(0x7f0000000180)={0x27}, 0x8c4a72008af1be49) 1m20.374760589s ago: executing program 0 (id=3080): syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100002ec6601037210100352a010203010902120001000000000904"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x19}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x1) 0s ago: executing program 34 (id=3077): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ppoll(&(0x7f0000000040)=[{r0, 0x2006}, {r0, 0x2000}, {r0, 0x20}, {0xffffffffffffffff, 0x1204}, {r0, 0xc000}, {r0, 0x20}], 0x6, &(0x7f0000000080), &(0x7f00000000c0)={[0x8]}, 0x8) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mlock2(&(0x7f00002e5000/0xc00000)=nil, 0xc00000, 0x0) munmap(&(0x7f000039d000/0x4000)=nil, 0x4000) kernel console output (not intermixed with test programs): device number 80 using dummy_hcd [ 488.666955][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 488.675378][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 488.689022][ T24] usb 5-1: config 8 has an invalid interface number: 255 but max is 0 [ 488.700102][ T24] usb 5-1: config 8 has no interface number 0 [ 488.706244][ T24] usb 5-1: config 8 interface 255 has no altsetting 0 [ 488.720758][ T24] usb 5-1: string descriptor 0 read error: -22 [ 488.729376][ T24] usb 5-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 488.741286][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.855781][ T5905] usbhid 2-1:0.0: can't add hid device: -71 [ 488.874090][ T5905] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 488.895730][ T5905] usb 2-1: USB disconnect, device number 49 [ 489.164225][T22069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.187047][T22069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.211116][T22069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.220950][T22069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.278556][ T24] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.4-1, 00:00:00:00:00:00. [ 489.397159][ T24] usb 5-1: USB disconnect, device number 80 [ 489.431363][T22118] binder: Bad value for 'max' [ 489.513727][T22124] /dev/rnullb0: Can't open blockdev [ 489.548214][T20838] usb 3-1: USB disconnect, device number 9 [ 489.812818][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 489.823718][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 489.832736][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 489.842724][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 489.851890][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 489.927895][T22150] overlayfs: upper fs does not support file handles, falling back to index=off. [ 489.943199][T22150] /dev/rnullb0: Can't open blockdev [ 490.195917][ T5831] syz-executor (5831) used greatest stack depth: 19640 bytes left [ 490.285916][T22165] /dev/rnullb0: Can't open blockdev [ 490.468292][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.582845][T22196] /dev/rnullb0: Can't open blockdev [ 490.805588][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.918297][T22214] /dev/rnullb0: Can't open blockdev [ 490.939193][T22219] /dev/rnullb0: Can't open blockdev [ 491.020008][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.182755][T22298] rtc_cmos 00:00: Alarms can be up to one day in the future [ 491.195030][T22298] /dev/rnullb0: Can't open blockdev [ 491.356148][T22308] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 491.364212][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.385828][T22308] /dev/rnullb0: Can't open blockdev [ 491.464248][T22142] chnl_net:caif_netlink_parms(): no params data found [ 491.558914][T22324] FAULT_INJECTION: forcing a failure. [ 491.558914][T22324] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 491.600957][T22324] CPU: 0 UID: 0 PID: 22324 Comm: syz.4.2655 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) [ 491.600988][T22324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 491.601002][T22324] Call Trace: [ 491.601011][T22324] [ 491.601020][T22324] dump_stack_lvl+0x189/0x250 [ 491.601049][T22324] ? __pfx____ratelimit+0x10/0x10 [ 491.601075][T22324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 491.601098][T22324] ? __pfx__printk+0x10/0x10 [ 491.601121][T22324] ? __might_fault+0xb0/0x130 [ 491.601156][T22324] should_fail_ex+0x414/0x560 [ 491.601184][T22324] _copy_from_user+0x2d/0xb0 [ 491.601209][T22324] input_event_from_user+0xb2/0x280 [ 491.601240][T22324] ? __pfx_input_event_from_user+0x10/0x10 [ 491.601275][T22324] ? input_inject_event+0xbc/0x320 [ 491.601301][T22324] evdev_write+0x2a6/0x480 [ 491.601335][T22324] ? __pfx_evdev_write+0x10/0x10 [ 491.601363][T22324] ? bpf_lsm_file_permission+0x9/0x20 [ 491.601382][T22324] ? security_file_permission+0x75/0x290 [ 491.601405][T22324] ? rw_verify_area+0x258/0x650 [ 491.601426][T22324] ? __pfx_evdev_write+0x10/0x10 [ 491.601455][T22324] vfs_write+0x27e/0xa90 [ 491.601488][T22324] ? __pfx_vfs_write+0x10/0x10 [ 491.601513][T22324] ? __fget_files+0x2a/0x420 [ 491.601544][T22324] ? __fget_files+0x2a/0x420 [ 491.601569][T22324] ? __fget_files+0x3a0/0x420 [ 491.601594][T22324] ? __fget_files+0x2a/0x420 [ 491.601629][T22324] ksys_write+0x145/0x250 [ 491.601656][T22324] ? __pfx_ksys_write+0x10/0x10 [ 491.601677][T22324] ? rcu_is_watching+0x15/0xb0 [ 491.601702][T22324] ? do_syscall_64+0xbe/0x3b0 [ 491.601733][T22324] do_syscall_64+0xfa/0x3b0 [ 491.601757][T22324] ? lockdep_hardirqs_on+0x9c/0x150 [ 491.601783][T22324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.601803][T22324] ? clear_bhb_loop+0x60/0xb0 [ 491.601828][T22324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.601847][T22324] RIP: 0033:0x7f6b7cb8e929 [ 491.601867][T22324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.601885][T22324] RSP: 002b:00007f6b7da97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 491.601907][T22324] RAX: ffffffffffffffda RBX: 00007f6b7cdb5fa0 RCX: 00007f6b7cb8e929 [ 491.601923][T22324] RDX: 0000000000000918 RSI: 0000200000000040 RDI: 0000000000000008 [ 491.601935][T22324] RBP: 00007f6b7da97090 R08: 0000000000000000 R09: 0000000000000000 [ 491.601956][T22324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 491.601968][T22324] R13: 0000000000000000 R14: 00007f6b7cdb5fa0 R15: 00007ffedb41e078 [ 491.602000][T22324] [ 491.806976][ T890] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 491.954595][ T5835] Bluetooth: hci0: command tx timeout [ 492.076950][T20838] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 492.183148][T22355] netlink: 2384 bytes leftover after parsing attributes in process `syz.4.2657'. [ 492.208858][T22355] Invalid/unusable pipe [ 492.259274][T20838] usb 2-1: Using ep0 maxpacket: 8 [ 492.282358][T20838] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 492.294390][ T890] usb 3-1: Using ep0 maxpacket: 8 [ 492.299609][T20838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.299638][T20838] usb 2-1: Product: syz [ 492.299656][T20838] usb 2-1: Manufacturer: syz [ 492.299673][T20838] usb 2-1: SerialNumber: syz [ 492.325937][T20838] usb 2-1: config 0 descriptor?? [ 492.397238][T22142] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.404428][T22142] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.432664][ T890] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 492.442375][ T890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.457323][T22142] bridge_slave_0: entered allmulticast mode [ 492.468664][ T890] usb 3-1: Product: syz [ 492.475288][T22142] bridge_slave_0: entered promiscuous mode [ 492.487145][ T890] usb 3-1: Manufacturer: syz [ 492.491812][ T890] usb 3-1: SerialNumber: syz [ 492.519110][T22142] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.529834][ T890] usb 3-1: config 0 descriptor?? [ 492.538038][T22142] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.545320][T22142] bridge_slave_1: entered allmulticast mode [ 492.565563][T22142] bridge_slave_1: entered promiscuous mode [ 492.574483][ T13] bridge_slave_1: left allmulticast mode [ 492.579418][T20838] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 492.589251][ T13] bridge_slave_1: left promiscuous mode [ 492.589599][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.626447][ T13] bridge_slave_0: left allmulticast mode [ 492.641211][ T13] bridge_slave_0: left promiscuous mode [ 492.657736][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.757842][ T890] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 492.891228][ T890] usb write operation failed. (-71) [ 492.902956][ T890] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 492.923700][ T890] dvbdev: DVB: registering new adapter (Terratec H7) [ 492.933163][ T890] usb 3-1: media controller created [ 492.947363][ T890] usb read operation failed. (-71) [ 492.952983][ T890] usb write operation failed. (-71) [ 492.970450][ T890] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 492.988978][ T890] usb 3-1: USB disconnect, device number 10 [ 493.374989][T22445] FAULT_INJECTION: forcing a failure. [ 493.374989][T22445] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.391422][T22445] CPU: 1 UID: 0 PID: 22445 Comm: syz.2.2664 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) [ 493.391452][T22445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 493.391467][T22445] Call Trace: [ 493.391475][T22445] [ 493.391485][T22445] dump_stack_lvl+0x189/0x250 [ 493.391516][T22445] ? __pfx____ratelimit+0x10/0x10 [ 493.391550][T22445] ? __pfx_dump_stack_lvl+0x10/0x10 [ 493.391574][T22445] ? __pfx__printk+0x10/0x10 [ 493.391598][T22445] ? __might_fault+0xb0/0x130 [ 493.391633][T22445] should_fail_ex+0x414/0x560 [ 493.391664][T22445] _copy_from_user+0x2d/0xb0 [ 493.391690][T22445] input_event_from_user+0xb2/0x280 [ 493.391723][T22445] ? __pfx_input_event_from_user+0x10/0x10 [ 493.391758][T22445] ? input_inject_event+0xbc/0x320 [ 493.391785][T22445] evdev_write+0x2a6/0x480 [ 493.391821][T22445] ? __pfx_evdev_write+0x10/0x10 [ 493.391851][T22445] ? bpf_lsm_file_permission+0x9/0x20 [ 493.391870][T22445] ? security_file_permission+0x75/0x290 [ 493.391894][T22445] ? rw_verify_area+0x258/0x650 [ 493.391917][T22445] ? __pfx_evdev_write+0x10/0x10 [ 493.391947][T22445] vfs_write+0x27e/0xa90 [ 493.391981][T22445] ? __pfx_vfs_write+0x10/0x10 [ 493.392008][T22445] ? __fget_files+0x2a/0x420 [ 493.392040][T22445] ? __fget_files+0x2a/0x420 [ 493.392066][T22445] ? __fget_files+0x3a0/0x420 [ 493.392093][T22445] ? __fget_files+0x2a/0x420 [ 493.392142][T22445] ksys_write+0x145/0x250 [ 493.392169][T22445] ? __pfx_ksys_write+0x10/0x10 [ 493.392190][T22445] ? rcu_is_watching+0x15/0xb0 [ 493.392216][T22445] ? do_syscall_64+0xbe/0x3b0 [ 493.392247][T22445] do_syscall_64+0xfa/0x3b0 [ 493.392270][T22445] ? lockdep_hardirqs_on+0x9c/0x150 [ 493.392294][T22445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.392314][T22445] ? clear_bhb_loop+0x60/0xb0 [ 493.392339][T22445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.392359][T22445] RIP: 0033:0x7f9b2a78e929 [ 493.392378][T22445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 493.392396][T22445] RSP: 002b:00007f9b2b6ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 493.392417][T22445] RAX: ffffffffffffffda RBX: 00007f9b2a9b5fa0 RCX: 00007f9b2a78e929 [ 493.392432][T22445] RDX: 0000000000000918 RSI: 0000200000000040 RDI: 0000000000000008 [ 493.392446][T22445] RBP: 00007f9b2b6ad090 R08: 0000000000000000 R09: 0000000000000000 [ 493.392458][T22445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 493.392471][T22445] R13: 0000000000000000 R14: 00007f9b2a9b5fa0 R15: 00007ffd156a1c28 [ 493.392503][T22445] [ 494.037575][T20838] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 494.047390][ T5835] Bluetooth: hci0: command tx timeout [ 494.057086][T20838] usb 2-1: USB disconnect, device number 50 [ 494.266132][T22463] o2cb: This node has not been configured. [ 494.274626][T22463] o2cb: Cluster check failed. Fix errors before retrying. [ 494.282468][T22463] (syz.4.2667,22463,0):user_dlm_register:674 ERROR: status = -22 [ 494.290482][T22463] (syz.4.2667,22463,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 494.355052][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 494.359236][T22463] o2cb: This node has not been configured. [ 494.376965][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 494.380226][T22463] o2cb: Cluster check failed. Fix errors before retrying. [ 494.396237][ T13] bond0 (unregistering): Released all slaves [ 494.396610][T22463] (syz.4.2667,22463,0):user_dlm_register:674 ERROR: status = -22 [ 494.414354][T22463] (syz.4.2667,22463,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 494.551612][T22142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.579151][T22142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.761536][ T13] team0: Port device wlan1 removed [ 494.812439][T22142] team0: Port device team_slave_0 added [ 494.826127][T22142] team0: Port device team_slave_1 added [ 494.951492][T22142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.981528][T22142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.007495][ C0] vkms_vblank_simulate: vblank timer overrun [ 495.057192][T22142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.081032][T22142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.115222][T22142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.141206][ C0] vkms_vblank_simulate: vblank timer overrun [ 495.217083][T22142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.460728][ T13] hsr_slave_0: left promiscuous mode [ 495.476474][ T13] hsr_slave_1: left promiscuous mode [ 495.488444][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 495.495912][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.541483][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 495.558968][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 495.658713][ T13] veth1_macvtap: left promiscuous mode [ 495.664329][ T13] veth0_macvtap: left promiscuous mode [ 495.688110][ T13] veth1_vlan: left promiscuous mode [ 495.693577][ T13] veth0_vlan: left promiscuous mode [ 496.108085][ T5835] Bluetooth: hci0: command tx timeout [ 496.286035][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 496.298408][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 496.308682][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 496.327700][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 496.335611][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 496.476474][T22634] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2679'. [ 496.737700][ T13] team0 (unregistering): Port device team_slave_1 removed [ 496.791572][ T13] team0 (unregistering): Port device team_slave_0 removed [ 497.315445][T22142] hsr_slave_0: entered promiscuous mode [ 497.322683][T22142] hsr_slave_1: entered promiscuous mode [ 498.032210][ T13] IPVS: stop unused estimator thread 0... [ 498.177414][ T5835] Bluetooth: hci0: command tx timeout [ 498.225564][T22773] ./file0: Can't lookup blockdev [ 498.286548][T22773] ./file0: Can't lookup blockdev [ 498.417914][ T5835] Bluetooth: hci1: command tx timeout [ 498.543468][T22839] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 498.757286][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.813090][ T5835] Bluetooth: hci4: unexpected event 0x01 length: 4 > 1 [ 498.816375][T22622] chnl_net:caif_netlink_parms(): no params data found [ 498.996577][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.048171][T20838] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 499.225110][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.246989][T20838] usb 2-1: Using ep0 maxpacket: 16 [ 499.253233][T22622] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.263228][T22622] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.267640][T20838] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 499.271745][T22622] bridge_slave_0: entered allmulticast mode [ 499.292672][T20838] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 499.293336][T22622] bridge_slave_0: entered promiscuous mode [ 499.322940][T20838] usb 2-1: config 0 has no interface number 0 [ 499.343021][T20838] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 499.366948][T20838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.375144][T20838] usb 2-1: Product: syz [ 499.382071][T20838] usb 2-1: Manufacturer: syz [ 499.385962][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.386708][T20838] usb 2-1: SerialNumber: syz [ 499.423182][T22622] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.435733][T20838] usb 2-1: config 0 descriptor?? [ 499.443528][T22622] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.465519][T22622] bridge_slave_1: entered allmulticast mode [ 499.473958][T22622] bridge_slave_1: entered promiscuous mode [ 499.576149][T22622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.595217][T22622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.616073][T22142] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 499.670314][T20838] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 499.676753][T20838] usb 2-1: No valid video chain found. [ 499.687537][T22142] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 499.705137][T20838] usb 2-1: USB disconnect, device number 51 [ 499.724780][T22142] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 499.834904][T22142] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 499.871954][T22622] team0: Port device team_slave_0 added [ 499.954787][T22622] team0: Port device team_slave_1 added [ 499.998164][ T13] bridge_slave_1: left allmulticast mode [ 500.003858][ T13] bridge_slave_1: left promiscuous mode [ 500.013728][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.029453][ T13] bridge_slave_0: left allmulticast mode [ 500.036934][ T13] bridge_slave_0: left promiscuous mode [ 500.042724][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.066626][ T13] tipc: Resetting bearer [ 500.085858][T23038] sg_read: process 204 (syz.2.2697) changed security contexts after opening file descriptor, this is not allowed. [ 500.303364][ T13] tipc: Disabling bearer [ 500.440795][T23047] XFS (rnullb0): Invalid superblock magic number [ 500.498549][ T5835] Bluetooth: hci1: command tx timeout [ 500.775769][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 500.792199][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 500.803943][ T13] bond0 (unregistering): Released all slaves [ 500.884462][ T13] : left promiscuous mode [ 500.924688][T22622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.954396][T22622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.996625][T22622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.019259][T22622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.028621][T22622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.105286][T22622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.153971][ T13] tipc: Left network mode [ 501.421246][T22622] hsr_slave_0: entered promiscuous mode [ 501.438264][T22622] hsr_slave_1: entered promiscuous mode [ 501.445311][T22622] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 501.463264][T22622] Cannot create hsr debugfs directory [ 501.578393][T23127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2703'. [ 501.626949][T23127] x_tables: duplicate underflow at hook 2 [ 501.791866][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.804570][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.031434][T23172] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2705'. [ 502.041500][T23172] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2705'. [ 502.578052][ T5835] Bluetooth: hci1: command tx timeout [ 502.661365][ T13] hsr_slave_0: left promiscuous mode [ 502.700781][ T13] hsr_slave_1: left promiscuous mode [ 502.712618][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 502.741590][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.775908][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 502.807337][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.930738][ T13] veth1_macvtap: left promiscuous mode [ 502.936348][ T13] veth0_macvtap: left promiscuous mode [ 502.955866][T23204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2707'. [ 502.957296][ T13] veth1_vlan: left promiscuous mode [ 502.976170][T23204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2707'. [ 502.995558][ T13] veth0_vlan: left promiscuous mode [ 503.097795][T23209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.127647][T20838] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 503.133201][T23209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.276897][T20838] usb 2-1: Using ep0 maxpacket: 32 [ 503.286642][T20838] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 503.317728][T20838] usb 2-1: config 0 has no interface number 0 [ 503.323910][T20838] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 503.335684][T20838] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 503.347623][T20838] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 503.387281][T20838] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 503.398413][T20838] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 503.421739][T20838] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 503.467635][T20838] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 503.487537][T20838] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 2122, setting to 64 [ 503.514650][T20838] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 503.574030][T20838] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 503.586825][T20838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.595263][T20838] usb 2-1: Product: syz [ 503.612881][T20838] usb 2-1: Manufacturer: syz [ 503.618105][T20838] usb 2-1: SerialNumber: syz [ 503.628468][T20838] usb 2-1: config 0 descriptor?? [ 503.637838][T23196] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 503.662073][T20838] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 503.674134][T20838] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 503.865998][T20838] usb 2-1: USB disconnect, device number 52 [ 504.179638][ T13] team0 (unregistering): Port device team_slave_1 removed [ 504.265395][ T13] team0 (unregistering): Port device team_slave_0 removed [ 504.660582][ T5835] Bluetooth: hci1: command tx timeout [ 505.035676][T22142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.283973][T22142] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.375057][T20562] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.382436][T20562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.422170][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.429468][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.444777][T22622] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 505.480894][T22622] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 505.548913][T22622] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 505.587028][T22622] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 505.739677][T23289] /dev/rnullb0: Can't open blockdev [ 506.042317][T22622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.121894][T22622] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.162911][T20562] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.170136][T20562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.211239][T20562] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.218498][T20562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.390289][T22622] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 506.440646][T22142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 506.558713][T23327] /dev/rnullb0: Can't open blockdev [ 506.695140][T22142] veth0_vlan: entered promiscuous mode [ 506.741724][T22142] veth1_vlan: entered promiscuous mode [ 506.781918][T23344] /dev/rnullb0: Can't open blockdev [ 506.856291][T22142] veth0_macvtap: entered promiscuous mode [ 506.904183][T22142] veth1_macvtap: entered promiscuous mode [ 506.995749][T22142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 507.018302][T22622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.047877][T22142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 507.127981][T20562] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.149346][T20562] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.189669][T23356] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 507.204716][T20562] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.258130][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.428216][T23369] /dev/rnullb0: Can't open blockdev [ 507.437684][ T4267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.445551][ T4267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.587016][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.592692][T23380] /dev/rnullb0: Can't open blockdev [ 507.594903][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.009594][T22622] veth0_vlan: entered promiscuous mode [ 508.035129][T23391] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=103040199 (206080398 ns) > initial count (4753806 ns). Using initial count to start timer. [ 508.080603][T22622] veth1_vlan: entered promiscuous mode [ 508.215906][T22622] veth0_macvtap: entered promiscuous mode [ 508.229359][T22622] veth1_macvtap: entered promiscuous mode [ 508.282047][T22622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 508.304775][T22622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 508.330127][T20562] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.385586][T20562] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.396163][T20562] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.444080][T20562] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.683278][T20562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.713521][T20562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.794263][ T30] audit: type=1800 audit(1751258714.278:639): pid=23443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2730" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 508.836356][T20562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.859109][T20562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.154704][T23459] FAULT_INJECTION: forcing a failure. [ 509.154704][T23459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 509.169012][T23459] CPU: 0 UID: 0 PID: 23459 Comm: syz.5.2672 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) [ 509.169044][T23459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 509.169058][T23459] Call Trace: [ 509.169067][T23459] [ 509.169076][T23459] dump_stack_lvl+0x189/0x250 [ 509.169106][T23459] ? __pfx____ratelimit+0x10/0x10 [ 509.169132][T23459] ? __pfx_dump_stack_lvl+0x10/0x10 [ 509.169156][T23459] ? __pfx__printk+0x10/0x10 [ 509.169179][T23459] ? __might_fault+0xb0/0x130 [ 509.169215][T23459] should_fail_ex+0x414/0x560 [ 509.169244][T23459] _copy_from_user+0x2d/0xb0 [ 509.169269][T23459] input_event_from_user+0xb2/0x280 [ 509.169308][T23459] ? __pfx_input_event_from_user+0x10/0x10 [ 509.169342][T23459] ? input_inject_event+0xbc/0x320 [ 509.169370][T23459] evdev_write+0x2a6/0x480 [ 509.169404][T23459] ? __pfx_evdev_write+0x10/0x10 [ 509.169434][T23459] ? bpf_lsm_file_permission+0x9/0x20 [ 509.169454][T23459] ? security_file_permission+0x75/0x290 [ 509.169484][T23459] ? rw_verify_area+0x258/0x650 [ 509.169507][T23459] ? __pfx_evdev_write+0x10/0x10 [ 509.169537][T23459] vfs_write+0x27e/0xa90 [ 509.169571][T23459] ? __pfx_vfs_write+0x10/0x10 [ 509.169597][T23459] ? __fget_files+0x2a/0x420 [ 509.169629][T23459] ? __fget_files+0x2a/0x420 [ 509.169655][T23459] ? __fget_files+0x3a0/0x420 [ 509.169682][T23459] ? __fget_files+0x2a/0x420 [ 509.169719][T23459] ksys_write+0x145/0x250 [ 509.169746][T23459] ? __pfx_ksys_write+0x10/0x10 [ 509.169767][T23459] ? rcu_is_watching+0x15/0xb0 [ 509.169795][T23459] ? do_syscall_64+0xbe/0x3b0 [ 509.169826][T23459] do_syscall_64+0xfa/0x3b0 [ 509.169851][T23459] ? lockdep_hardirqs_on+0x9c/0x150 [ 509.169876][T23459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.169897][T23459] ? clear_bhb_loop+0x60/0xb0 [ 509.169923][T23459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.169943][T23459] RIP: 0033:0x7fe30358e929 [ 509.169962][T23459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 509.169980][T23459] RSP: 002b:00007fe3044c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 509.170002][T23459] RAX: ffffffffffffffda RBX: 00007fe3037b5fa0 RCX: 00007fe30358e929 [ 509.170018][T23459] RDX: 0000000000000918 RSI: 0000200000000040 RDI: 0000000000000008 [ 509.170031][T23459] RBP: 00007fe3044c0090 R08: 0000000000000000 R09: 0000000000000000 [ 509.170044][T23459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 509.170056][T23459] R13: 0000000000000000 R14: 00007fe3037b5fa0 R15: 00007ffd519576c8 [ 509.170087][T23459] [ 509.619880][T23468] ptrace attach of "./syz-executor exec"[23475] was attempted by "./syz-executor exec"[23468] [ 510.534266][T23513] FAULT_INJECTION: forcing a failure. [ 510.534266][T23513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 510.566958][T23513] CPU: 0 UID: 0 PID: 23513 Comm: syz.1.2742 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) [ 510.566990][T23513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 510.567004][T23513] Call Trace: [ 510.567013][T23513] [ 510.567023][T23513] dump_stack_lvl+0x189/0x250 [ 510.567052][T23513] ? __pfx____ratelimit+0x10/0x10 [ 510.567080][T23513] ? __pfx_dump_stack_lvl+0x10/0x10 [ 510.567111][T23513] ? __pfx__printk+0x10/0x10 [ 510.567135][T23513] ? __might_fault+0xb0/0x130 [ 510.567170][T23513] should_fail_ex+0x414/0x560 [ 510.567199][T23513] _copy_from_user+0x2d/0xb0 [ 510.567224][T23513] input_event_from_user+0xb2/0x280 [ 510.567256][T23513] ? __pfx_input_event_from_user+0x10/0x10 [ 510.567291][T23513] ? input_inject_event+0xbc/0x320 [ 510.567318][T23513] evdev_write+0x2a6/0x480 [ 510.567352][T23513] ? __pfx_evdev_write+0x10/0x10 [ 510.567383][T23513] ? bpf_lsm_file_permission+0x9/0x20 [ 510.567403][T23513] ? security_file_permission+0x75/0x290 [ 510.567426][T23513] ? rw_verify_area+0x258/0x650 [ 510.567449][T23513] ? __pfx_evdev_write+0x10/0x10 [ 510.567478][T23513] vfs_write+0x27e/0xa90 [ 510.567511][T23513] ? __pfx_vfs_write+0x10/0x10 [ 510.567538][T23513] ? __fget_files+0x2a/0x420 [ 510.567569][T23513] ? __fget_files+0x2a/0x420 [ 510.567595][T23513] ? __fget_files+0x3a0/0x420 [ 510.567622][T23513] ? __fget_files+0x2a/0x420 [ 510.567658][T23513] ksys_write+0x145/0x250 [ 510.567686][T23513] ? __pfx_ksys_write+0x10/0x10 [ 510.567707][T23513] ? rcu_is_watching+0x15/0xb0 [ 510.567735][T23513] ? do_syscall_64+0xbe/0x3b0 [ 510.567767][T23513] do_syscall_64+0xfa/0x3b0 [ 510.567792][T23513] ? lockdep_hardirqs_on+0x9c/0x150 [ 510.567818][T23513] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.567838][T23513] ? clear_bhb_loop+0x60/0xb0 [ 510.567865][T23513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.567886][T23513] RIP: 0033:0x7f6ab258e929 [ 510.567905][T23513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 510.567924][T23513] RSP: 002b:00007f6ab3374038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 510.567945][T23513] RAX: ffffffffffffffda RBX: 00007f6ab27b5fa0 RCX: 00007f6ab258e929 [ 510.567961][T23513] RDX: 0000000000000918 RSI: 0000200000000040 RDI: 0000000000000008 [ 510.567975][T23513] RBP: 00007f6ab3374090 R08: 0000000000000000 R09: 0000000000000000 [ 510.567988][T23513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 510.568000][T23513] R13: 0000000000000000 R14: 00007f6ab27b5fa0 R15: 00007ffc345547e8 [ 510.568033][T23513] [ 510.832003][ C0] vkms_vblank_simulate: vblank timer overrun [ 511.347000][ T890] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 511.488831][ T890] usb 2-1: device descriptor read/64, error -71 [ 511.732524][ T890] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 511.743708][T23546] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2746'. [ 511.876887][ T890] usb 2-1: device descriptor read/64, error -71 [ 512.000124][T23566] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 512.008260][ T890] usb usb2-port1: attempt power cycle [ 512.056019][T23571] FAULT_INJECTION: forcing a failure. [ 512.056019][T23571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 512.120508][T23571] CPU: 0 UID: 0 PID: 23571 Comm: syz.0.2751 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) [ 512.120541][T23571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 512.120555][T23571] Call Trace: [ 512.120564][T23571] [ 512.120573][T23571] dump_stack_lvl+0x189/0x250 [ 512.120602][T23571] ? __pfx____ratelimit+0x10/0x10 [ 512.120629][T23571] ? __pfx_dump_stack_lvl+0x10/0x10 [ 512.120652][T23571] ? __pfx__printk+0x10/0x10 [ 512.120674][T23571] ? __might_fault+0xb0/0x130 [ 512.120708][T23571] should_fail_ex+0x414/0x560 [ 512.120737][T23571] _copy_from_user+0x2d/0xb0 [ 512.120762][T23571] input_event_from_user+0xb2/0x280 [ 512.120794][T23571] ? __pfx_input_event_from_user+0x10/0x10 [ 512.120829][T23571] ? input_inject_event+0xbc/0x320 [ 512.120856][T23571] evdev_write+0x2a6/0x480 [ 512.120891][T23571] ? __pfx_evdev_write+0x10/0x10 [ 512.120920][T23571] ? bpf_lsm_file_permission+0x9/0x20 [ 512.120940][T23571] ? security_file_permission+0x75/0x290 [ 512.120963][T23571] ? rw_verify_area+0x258/0x650 [ 512.120986][T23571] ? __pfx_evdev_write+0x10/0x10 [ 512.121013][T23571] vfs_write+0x27e/0xa90 [ 512.121045][T23571] ? __pfx_vfs_write+0x10/0x10 [ 512.121070][T23571] ? __fget_files+0x2a/0x420 [ 512.121101][T23571] ? __fget_files+0x2a/0x420 [ 512.121126][T23571] ? __fget_files+0x3a0/0x420 [ 512.121153][T23571] ? __fget_files+0x2a/0x420 [ 512.121190][T23571] ksys_write+0x145/0x250 [ 512.121218][T23571] ? __pfx_ksys_write+0x10/0x10 [ 512.121239][T23571] ? rcu_is_watching+0x15/0xb0 [ 512.121274][T23571] ? do_syscall_64+0xbe/0x3b0 [ 512.121306][T23571] do_syscall_64+0xfa/0x3b0 [ 512.121332][T23571] ? lockdep_hardirqs_on+0x9c/0x150 [ 512.121357][T23571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.121378][T23571] ? clear_bhb_loop+0x60/0xb0 [ 512.121404][T23571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.121425][T23571] RIP: 0033:0x7fbf7fd8e929 [ 512.121443][T23571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 512.121461][T23571] RSP: 002b:00007fbf80c0a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 512.121483][T23571] RAX: ffffffffffffffda RBX: 00007fbf7ffb5fa0 RCX: 00007fbf7fd8e929 [ 512.121499][T23571] RDX: 0000000000000918 RSI: 0000200000000040 RDI: 0000000000000008 [ 512.121513][T23571] RBP: 00007fbf80c0a090 R08: 0000000000000000 R09: 0000000000000000 [ 512.121531][T23571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 512.121543][T23571] R13: 0000000000000000 R14: 00007fbf7ffb5fa0 R15: 00007ffe8260f5a8 [ 512.121576][T23571] [ 512.381991][ C0] vkms_vblank_simulate: vblank timer overrun [ 512.466626][ T890] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 512.525478][ T890] usb 2-1: device descriptor read/8, error -71 [ 512.776958][ T890] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 512.824629][ T890] usb 2-1: device descriptor read/8, error -71 [ 513.027259][ T890] usb usb2-port1: unable to enumerate USB device [ 513.814910][T23633] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2761'. [ 513.842157][T23630] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2761'. [ 513.855593][T23633] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2761'. [ 514.023785][T23638] FAULT_INJECTION: forcing a failure. [ 514.023785][T23638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.045541][T23638] CPU: 1 UID: 0 PID: 23638 Comm: syz.2.2762 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) [ 514.045571][T23638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 514.045584][T23638] Call Trace: [ 514.045592][T23638] [ 514.045602][T23638] dump_stack_lvl+0x189/0x250 [ 514.045631][T23638] ? __pfx____ratelimit+0x10/0x10 [ 514.045659][T23638] ? __pfx_dump_stack_lvl+0x10/0x10 [ 514.045682][T23638] ? __pfx__printk+0x10/0x10 [ 514.045705][T23638] ? __might_fault+0xb0/0x130 [ 514.045739][T23638] should_fail_ex+0x414/0x560 [ 514.045767][T23638] _copy_from_user+0x2d/0xb0 [ 514.045792][T23638] input_event_from_user+0xb2/0x280 [ 514.045824][T23638] ? __pfx_input_event_from_user+0x10/0x10 [ 514.045868][T23638] ? input_inject_event+0xbc/0x320 [ 514.045895][T23638] evdev_write+0x2a6/0x480 [ 514.045929][T23638] ? __pfx_evdev_write+0x10/0x10 [ 514.045958][T23638] ? bpf_lsm_file_permission+0x9/0x20 [ 514.045977][T23638] ? security_file_permission+0x75/0x290 [ 514.046001][T23638] ? rw_verify_area+0x258/0x650 [ 514.046024][T23638] ? __pfx_evdev_write+0x10/0x10 [ 514.046053][T23638] vfs_write+0x27e/0xa90 [ 514.046087][T23638] ? __pfx_vfs_write+0x10/0x10 [ 514.046112][T23638] ? __fget_files+0x2a/0x420 [ 514.046142][T23638] ? __fget_files+0x2a/0x420 [ 514.046167][T23638] ? __fget_files+0x3a0/0x420 [ 514.046195][T23638] ? __fget_files+0x2a/0x420 [ 514.046232][T23638] ksys_write+0x145/0x250 [ 514.046259][T23638] ? __pfx_ksys_write+0x10/0x10 [ 514.046289][T23638] ? do_syscall_64+0xbe/0x3b0 [ 514.046319][T23638] do_syscall_64+0xfa/0x3b0 [ 514.046344][T23638] ? lockdep_hardirqs_on+0x9c/0x150 [ 514.046369][T23638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.046390][T23638] ? clear_bhb_loop+0x60/0xb0 [ 514.046415][T23638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.046434][T23638] RIP: 0033:0x7f9b2a78e929 [ 514.046453][T23638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 514.046471][T23638] RSP: 002b:00007f9b2b6ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 514.046493][T23638] RAX: ffffffffffffffda RBX: 00007f9b2a9b5fa0 RCX: 00007f9b2a78e929 [ 514.046510][T23638] RDX: 0000000000000918 RSI: 0000200000000040 RDI: 0000000000000008 [ 514.046524][T23638] RBP: 00007f9b2b6ad090 R08: 0000000000000000 R09: 0000000000000000 [ 514.046537][T23638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 514.046550][T23638] R13: 0000000000000000 R14: 00007f9b2a9b5fa0 R15: 00007ffd156a1c28 [ 514.046583][T23638] [ 514.396946][ T5835] Bluetooth: hci1: unexpected cc 0x2039 length: 9 > 1 [ 514.568703][T23667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2766'. [ 514.728604][T23677] netlink: 'syz.5.2768': attribute type 1 has an invalid length. [ 514.782829][ T24] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 514.829159][ T5899] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 514.948957][ T24] usb 2-1: config 36 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 514.985792][ T24] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 514.996225][ T24] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 515.010098][ T5899] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 515.021685][ T24] usb 2-1: Manufacturer: syz [ 515.026343][ T24] usb 2-1: SerialNumber: syz [ 515.033586][ T5899] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 515.055215][ T5899] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 515.068188][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.076254][ T5899] usb 3-1: Product: syz [ 515.084006][ T5899] usb 3-1: Manufacturer: syz [ 515.090265][ T5899] usb 3-1: SerialNumber: syz [ 515.104025][ T5899] usb 3-1: config 0 descriptor?? [ 515.115897][ T5899] ims_pcu 3-1:0.0: Missing CDC union descriptor [ 515.126491][ T5899] ims_pcu 3-1:0.0: probe with driver ims_pcu failed with error -22 [ 515.246921][ T2155] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 515.349799][ T24] usbhid 2-1:36.0: couldn't find an input interrupt endpoint [ 515.392289][ T24] usb 3-1: USB disconnect, device number 12 [ 515.410299][ T2155] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 515.447249][ T2155] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 515.466603][ T2155] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 515.487228][ T2155] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 515.506993][ T2155] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 515.540789][ T2155] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 515.574971][ T2155] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 515.584032][ T2155] usb 6-1: Product: syz [ 515.590729][ T2155] usb 6-1: Manufacturer: syz [ 515.595519][ T2155] usb 6-1: SerialNumber: syz [ 515.617317][ T2155] usb 6-1: config 0 descriptor?? [ 515.638190][ T5897] usb 2-1: USB disconnect, device number 57 [ 515.854923][ T2155] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 515.862911][ T2155] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 516.067280][T20838] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 516.098523][ T30] audit: type=1326 audit(1751258721.598:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23690 comm="syz.5.2769" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe30358e929 code=0x0 [ 516.237578][T20838] usb 3-1: Using ep0 maxpacket: 16 [ 516.264819][T20838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 516.291551][T20838] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 516.317846][T20838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.326588][T20838] usb 3-1: Product: syz [ 516.347726][T20838] usb 3-1: Manufacturer: syz [ 516.352418][T20838] usb 3-1: SerialNumber: syz [ 516.365378][T23767] binder: BINDER_SET_CONTEXT_MGR already set [ 516.376080][T23767] binder: 23765:23767 ioctl 40046207 0 returned -16 [ 516.377999][T20838] usb 3-1: config 0 descriptor?? [ 516.385386][T23766] /dev/rnullb0: Can't open blockdev [ 516.396215][ T2155] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 516.414335][ T2155] radio-si470x 6-1:0.0: si470x_get_scratch: si470x_get_report returned -110 [ 516.440077][T20838] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 516.450443][ T2155] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -5 [ 516.466846][T20838] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 516.728700][ T5899] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 516.888391][T20838] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 516.919143][ T5899] usb 2-1: config 4 has an invalid interface number: 223 but max is 1 [ 516.930059][ T5899] usb 2-1: config 4 has an invalid interface number: 12 but max is 1 [ 516.938485][ T5899] usb 2-1: config 4 has no interface number 0 [ 516.944624][ T5899] usb 2-1: config 4 has no interface number 1 [ 516.953061][ T5899] usb 2-1: config 4 interface 223 altsetting 85 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 516.964385][ T5899] usb 2-1: config 4 interface 223 altsetting 85 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 516.975299][T20838] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 516.976530][ T5899] usb 2-1: config 4 interface 223 has no altsetting 0 [ 516.990982][T20838] em28xx 3-1:0.0: board has no eeprom [ 516.991692][ T5899] usb 2-1: config 4 interface 12 has no altsetting 0 [ 517.009737][ T5899] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0112, bcdDevice=e0.78 [ 517.019217][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.027615][ T5899] usb 2-1: Product: syz [ 517.032300][ T5899] usb 2-1: Manufacturer: syz [ 517.037462][ T5899] usb 2-1: SerialNumber: syz [ 517.049859][T23772] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 517.059591][T23772] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 517.067686][T20838] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 517.075885][T20838] em28xx 3-1:0.0: dvb set to bulk mode. [ 517.084478][ T5897] em28xx 3-1:0.0: Binding DVB extension [ 517.116364][T20838] usb 3-1: USB disconnect, device number 13 [ 517.139623][T20838] em28xx 3-1:0.0: Disconnecting em28xx [ 517.180484][ T5897] em28xx 3-1:0.0: Registering input extension [ 517.189607][T20838] em28xx 3-1:0.0: Closing input extension [ 517.244443][T20838] em28xx 3-1:0.0: Freeing device [ 517.306312][ T5899] kvaser_usb 2-1:4.223: error -ENODEV: Cannot get usb endpoint(s) [ 517.341021][ T5899] kvaser_usb 2-1:4.12: error -ENODEV: Cannot get usb endpoint(s) [ 517.361175][ T5899] usb 2-1: USB disconnect, device number 58 [ 517.721642][T23826] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2777'. [ 517.732301][T23826] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2777'. [ 517.884181][T23830] /dev/rnullb0: Can't open blockdev [ 518.031298][ T5897] usb 6-1: USB disconnect, device number 2 [ 518.211713][ T5883] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 518.419143][ T5835] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 518.429606][ T5835] Bluetooth: hci1: Injecting HCI hardware error event [ 518.440566][ T5843] Bluetooth: hci1: hardware error 0x00 [ 518.826880][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 518.990843][ T24] usb 6-1: config 1 interface 0 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 519.009787][ T24] usb 6-1: config 1 interface 0 has no altsetting 0 [ 519.021554][ T24] usb 6-1: New USB device found, idVendor=056a, idProduct=00fb, bcdDevice= 0.40 [ 519.032800][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.041572][ T24] usb 6-1: Product: syz [ 519.045763][ T24] usb 6-1: Manufacturer: syz [ 519.052029][ T24] usb 6-1: SerialNumber: syz [ 519.562061][ T24] usbhid 6-1:1.0: can't add hid device: -71 [ 519.594366][ T24] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 519.614445][ T24] usb 6-1: USB disconnect, device number 3 [ 519.737351][T23922] syzkaller1: entered promiscuous mode [ 519.745750][T23922] syzkaller1: entered allmulticast mode [ 519.934363][T23935] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2796'. [ 520.224636][T23944] /dev/rnullb0: Can't open blockdev [ 520.476932][ T5897] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 520.499481][ T5843] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 520.646894][ T5897] usb 6-1: Using ep0 maxpacket: 16 [ 520.659249][ T5897] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 520.668249][ T5897] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 520.686880][ T5897] usb 6-1: config 0 has no interface number 0 [ 520.699641][ T5897] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 520.709403][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.726875][ T5897] usb 6-1: Product: syz [ 520.735224][ T5897] usb 6-1: Manufacturer: syz [ 520.747160][ T5897] usb 6-1: SerialNumber: syz [ 520.756198][ T5897] usb 6-1: config 0 descriptor?? [ 520.763713][T23958] program syz.1.2803 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 520.778684][ T5897] usb 6-1: Found UVC 0.00 device syz (046d:08f3) [ 520.785312][ T5897] usb 6-1: No valid video chain found. [ 521.005903][T23946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.024034][T23946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.042733][ T5897] usb 6-1: USB disconnect, device number 4 [ 521.059884][T23975] input: syz0 as /devices/virtual/input/input40 [ 521.114931][T23985] /dev/rnullb0: Can't open blockdev [ 521.886456][T24006] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 522.007833][ T2155] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 522.190386][ T2155] usb 6-1: config 0 has no interfaces? [ 522.198491][ T2155] usb 6-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 522.212009][ T2155] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.223711][ T2155] usb 6-1: config 0 descriptor?? [ 522.327208][T20838] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 522.436983][ T5876] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 522.488674][T20838] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 522.500963][T20838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 522.515354][T20838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 522.517502][ T24] usb 6-1: USB disconnect, device number 5 [ 522.537352][T20838] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 522.558377][T20838] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 522.570083][T20838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.583945][T20838] usb 3-1: config 0 descriptor?? [ 522.589619][ T5876] usb 2-1: device descriptor read/64, error -71 [ 522.826922][ T5876] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 522.958667][ T5876] usb 2-1: device descriptor read/64, error -71 [ 523.014558][T20838] plantronics 0003:047F:FFFF.001D: ignoring exceeding usage max [ 523.046968][T20838] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 523.069272][ T5876] usb usb2-port1: attempt power cycle [ 523.366438][T24065] /dev/rnullb0: Can't open blockdev [ 523.388193][T24065] /dev/rnullb0: Can't open blockdev [ 523.394852][T24065] /dev/rnullb0: Can't open blockdev [ 523.401366][T24065] /dev/rnullb0: Can't open blockdev [ 523.409334][T24065] /dev/rnullb0: Can't open blockdev [ 523.415732][T24065] /dev/rnullb0: Can't open blockdev [ 523.423397][T24065] /dev/rnullb0: Can't open blockdev [ 523.429335][ T5876] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 523.439723][T24065] /dev/rnullb0: Can't open blockdev [ 523.446147][T24065] /dev/rnullb0: Can't open blockdev [ 523.454601][T24065] /dev/rnullb0: Can't open blockdev [ 523.462782][ T5876] usb 2-1: device descriptor read/8, error -71 [ 523.473797][T24065] /dev/rnullb0: Can't open blockdev [ 523.480398][T24065] /dev/rnullb0: Can't open blockdev [ 523.491165][T24065] /dev/rnullb0: Can't open blockdev [ 523.507273][T24065] /dev/rnullb0: Can't open blockdev [ 523.513308][T24065] /dev/rnullb0: Can't open blockdev [ 523.539184][T24065] /dev/rnullb0: Can't open blockdev [ 523.555556][T24065] /dev/rnullb0: Can't open blockdev [ 523.562591][T24065] /dev/rnullb0: Can't open blockdev [ 523.569345][T24065] /dev/rnullb0: Can't open blockdev [ 523.575660][T24065] /dev/rnullb0: Can't open blockdev [ 523.583200][T24065] /dev/rnullb0: Can't open blockdev [ 523.591469][T24065] /dev/rnullb0: Can't open blockdev [ 523.602276][T24065] /dev/rnullb0: Can't open blockdev [ 523.608627][T24065] /dev/rnullb0: Can't open blockdev [ 523.615358][T24065] /dev/rnullb0: Can't open blockdev [ 523.629036][T24065] /dev/rnullb0: Can't open blockdev [ 523.635364][T24065] /dev/rnullb0: Can't open blockdev [ 523.646349][T24065] /dev/rnullb0: Can't open blockdev [ 523.656020][T24065] /dev/rnullb0: Can't open blockdev [ 523.668980][T24065] /dev/rnullb0: Can't open blockdev [ 523.684227][T24065] /dev/rnullb0: Can't open blockdev [ 523.692242][T24065] /dev/rnullb0: Can't open blockdev [ 523.698843][T24065] /dev/rnullb0: Can't open blockdev [ 523.707937][ T5876] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 523.730845][ T5876] usb 2-1: device descriptor read/8, error -71 [ 523.857693][ T5876] usb usb2-port1: unable to enumerate USB device [ 523.870748][T24081] /dev/rnullb0: Can't open blockdev [ 523.977447][T24087] /dev/rnullb0: Can't open blockdev [ 524.117252][T24092] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 524.129890][T24092] /dev/rnullb0: Can't open blockdev [ 524.749589][T24128] /dev/rnullb0: Can't open blockdev [ 525.077764][T24137] binder_alloc: binder_alloc_mmap_handler: 24136 200000ffd000-200001000000 already mapped failed -16 [ 525.109200][ T5883] usb 3-1: USB disconnect, device number 14 [ 525.117693][T24137] binder_alloc: 24136: binder_alloc_buf, no vma [ 525.126030][T24137] /dev/rnullb0: Can't open blockdev [ 525.395578][T24162] 9pnet_virtio: no channels available for device syz [ 525.400960][T24160] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2835'. [ 525.414563][T24160] netlink: 'syz.5.2835': attribute type 3 has an invalid length. [ 525.541014][ T30] audit: type=1800 audit(1751258731.028:641): pid=24165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2838" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 525.576976][ T5883] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 525.628339][T24174] /dev/rnullb0: Can't open blockdev [ 525.636088][ T5843] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 525.647909][ T5843] CPU: 0 UID: 0 PID: 5843 Comm: kworker/u9:5 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) [ 525.647941][ T5843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 525.647957][ T5843] Workqueue: hci0 hci_rx_work [ 525.647988][ T5843] Call Trace: [ 525.647997][ T5843] [ 525.648007][ T5843] dump_stack_lvl+0x189/0x250 [ 525.648035][ T5843] ? kernfs_path_from_node+0x2c/0x260 [ 525.648070][ T5843] ? __pfx_dump_stack_lvl+0x10/0x10 [ 525.648103][ T5843] ? __pfx__printk+0x10/0x10 [ 525.648130][ T5843] ? kernfs_path_from_node+0x2c/0x260 [ 525.648160][ T5843] ? kernfs_path_from_node+0x2c/0x260 [ 525.648194][ T5843] ? kernfs_path_from_node+0x22c/0x260 [ 525.648224][ T5843] ? kernfs_path_from_node+0x2c/0x260 [ 525.648259][ T5843] sysfs_create_dir_ns+0x259/0x280 [ 525.648293][ T5843] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 525.648326][ T5843] ? do_raw_spin_unlock+0x122/0x240 [ 525.648359][ T5843] kobject_add_internal+0x59f/0xb40 [ 525.648401][ T5843] kobject_add+0x155/0x220 [ 525.648437][ T5843] ? __pfx_kobject_add+0x10/0x10 [ 525.648469][ T5843] ? _raw_spin_unlock+0x28/0x50 [ 525.648496][ T5843] ? get_device_parent+0x366/0x3a0 [ 525.648524][ T5843] device_add+0x408/0xb50 [ 525.648553][ T5843] hci_conn_add_sysfs+0xd5/0x1e0 [ 525.648579][ T5843] le_conn_complete_evt+0xc3a/0x1220 [ 525.648624][ T5843] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 525.648655][ T5843] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 525.648682][ T5843] ? __asan_memcpy+0x40/0x70 [ 525.648717][ T5843] ? __pfx___mutex_lock+0x10/0x10 [ 525.648746][ T5843] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 525.648771][ T5843] ? skb_pull_data+0xfb/0x200 [ 525.648802][ T5843] hci_le_conn_complete_evt+0x187/0x450 [ 525.648839][ T5843] hci_event_packet+0x78f/0x1200 [ 525.648867][ T5843] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 525.648898][ T5843] ? __pfx_hci_event_packet+0x10/0x10 [ 525.648924][ T5843] ? kcov_remote_start+0x4d3/0x7f0 [ 525.648952][ T5843] ? lockdep_hardirqs_on+0x60/0x150 [ 525.648982][ T5843] ? hci_send_to_monitor+0xe2/0x570 [ 525.649016][ T5843] hci_rx_work+0x46a/0xe80 [ 525.649049][ T5843] ? process_scheduled_works+0x9ef/0x17b0 [ 525.649094][ T5843] process_scheduled_works+0xade/0x17b0 [ 525.649161][ T5843] ? __pfx_process_scheduled_works+0x10/0x10 [ 525.649213][ T5843] worker_thread+0x8a0/0xda0 [ 525.649237][ T5843] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 525.649272][ T5843] ? __kthread_parkme+0x7b/0x200 [ 525.649305][ T5843] kthread+0x711/0x8a0 [ 525.649336][ T5843] ? __pfx_worker_thread+0x10/0x10 [ 525.649356][ T5843] ? __pfx_kthread+0x10/0x10 [ 525.649385][ T5843] ? _raw_spin_unlock_irq+0x23/0x50 [ 525.649408][ T5843] ? lockdep_hardirqs_on+0x9c/0x150 [ 525.649431][ T5843] ? __pfx_kthread+0x10/0x10 [ 525.649458][ T5843] ret_from_fork+0x3fc/0x770 [ 525.649496][ T5843] ? __pfx_ret_from_fork+0x10/0x10 [ 525.649535][ T5843] ? __switch_to_asm+0x39/0x70 [ 525.649562][ T5843] ? __switch_to_asm+0x33/0x70 [ 525.649586][ T5843] ? __pfx_kthread+0x10/0x10 [ 525.649612][ T5843] ret_from_fork_asm+0x1a/0x30 [ 525.649656][ T5843] [ 525.649930][ T5843] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 525.777395][ T5883] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 525.778975][ T5843] Bluetooth: hci0: failed to register connection device [ 525.784077][ T5883] usb 3-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 526.004656][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.026472][ T5883] usb 3-1: config 0 descriptor?? [ 526.034911][ T5883] usb 3-1: bad CDC descriptors [ 526.117168][T20838] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 526.245062][ T5897] usb 3-1: USB disconnect, device number 15 [ 526.280210][T20838] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 526.291131][T20838] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 526.306251][T20838] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 526.316711][T20838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 526.325461][T20838] usb 6-1: SerialNumber: syz [ 526.340050][T20838] cdc_acm 6-1:1.0: Zero length descriptor references [ 526.346947][T20838] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -22 [ 526.356851][ T5883] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 526.528607][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.542385][ T30] audit: type=1326 audit(1751258732.038:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24177 comm="syz.5.2840" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe30358e929 code=0x0 [ 526.542991][ T5883] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 526.573968][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.584637][ T5883] usb 2-1: config 0 descriptor?? [ 527.000584][ T5883] lenovo 0003:17EF:6047.001E: unknown main item tag 0x0 [ 527.016022][ T5883] lenovo 0003:17EF:6047.001E: unknown main item tag 0x0 [ 527.023767][ T5883] lenovo 0003:17EF:6047.001E: unknown main item tag 0x0 [ 527.035157][ T5883] lenovo 0003:17EF:6047.001E: unknown main item tag 0x0 [ 527.045319][ T5883] lenovo 0003:17EF:6047.001E: unknown main item tag 0x0 [ 527.056165][ T5883] lenovo 0003:17EF:6047.001E: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.1-1/input0 [ 528.041067][ T5883] usb 2-1: USB disconnect, device number 64 [ 528.813553][ T5897] usb 6-1: USB disconnect, device number 6 [ 528.847187][ T5899] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 529.011031][ T5899] usb 3-1: unable to get BOS descriptor or descriptor too short [ 529.025562][ T5899] usb 3-1: not running at top speed; connect to a high speed hub [ 529.058917][ T5899] usb 3-1: config 106 has an invalid interface number: 8 but max is 0 [ 529.106863][ T5899] usb 3-1: config 106 has no interface number 0 [ 529.113230][ T5899] usb 3-1: config 106 interface 8 has no altsetting 0 [ 529.148889][ T5899] usb 3-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=93.dd [ 529.166895][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.203926][ T5899] usb 3-1: Product: syz [ 529.219342][ T5899] usb 3-1: Manufacturer: syz [ 529.225200][ T5899] usb 3-1: SerialNumber: syz [ 529.326880][T24331] /dev/rnullb0: Can't open blockdev [ 529.446591][T24303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.471916][T24303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.552130][T24303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.600239][T24303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.823261][ T5899] kalmia 3-1:106.8 (unnamed net_device) (uninitialized): Error sending init packet. Status -22 [ 529.855304][ T5899] kalmia 3-1:106.8: probe with driver kalmia failed with error -22 [ 529.921962][ T5899] usb 3-1: USB disconnect, device number 16 [ 530.618981][ T5899] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 530.808415][ T5899] usb 2-1: Using ep0 maxpacket: 16 [ 530.820647][ T5899] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 530.843820][T24412] x_tables: duplicate underflow at hook 2 [ 530.854029][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 530.885552][ T5899] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 530.910492][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.939887][ T5899] usb 2-1: Product: syz [ 530.944123][ T5899] usb 2-1: Manufacturer: syz [ 530.966809][ T5899] usb 2-1: SerialNumber: syz [ 530.985209][ T5899] usb 2-1: config 0 descriptor?? [ 531.003733][ T5899] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 531.025122][ T5899] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 531.203815][T24441] syz.0.2872: attempt to access beyond end of device [ 531.203815][T24441] loop0: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 531.220709][T24441] gfs2: error -5 reading superblock [ 531.604299][ T5899] em28xx 2-1:0.0: chip ID is em2765 [ 531.653712][T24457] ./cgroup: Can't lookup blockdev [ 531.809168][ T5899] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 531.825365][ T5899] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 531.846274][ T5899] em28xx 2-1:0.0: No AC97 audio processor [ 531.888377][ T5899] usb 2-1: USB disconnect, device number 65 [ 531.895804][ T5899] em28xx 2-1:0.0: Disconnecting em28xx [ 532.017210][ T5835] Bluetooth: hci0: command 0x0406 tx timeout [ 532.109495][T24476] NILFS (rnullb0): couldn't find nilfs on the device [ 532.118892][ T5899] em28xx 2-1:0.0: Freeing device [ 533.547315][ T24] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 533.717314][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 533.739152][ T24] usb 3-1: too many configurations: 60, using maximum allowed: 8 [ 533.778793][ T24] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 533.793482][ T24] usb 3-1: can't read configurations, error -61 [ 533.927042][ T24] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 534.030605][T24592] NILFS (rnullb0): couldn't find nilfs on the device [ 534.108743][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 534.116722][ T24] usb 3-1: too many configurations: 60, using maximum allowed: 8 [ 534.131696][ T24] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 534.141305][ T24] usb 3-1: can't read configurations, error -61 [ 534.149565][ T24] usb usb3-port1: attempt power cycle [ 534.487093][ T24] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 534.522089][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 534.537606][ T24] usb 3-1: too many configurations: 60, using maximum allowed: 8 [ 534.559066][ T24] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 534.566704][ T24] usb 3-1: can't read configurations, error -61 [ 534.578355][T24601] XFS (rnullb0): Invalid superblock magic number [ 534.727728][ T24] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 534.767468][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 534.783601][ T24] usb 3-1: too many configurations: 60, using maximum allowed: 8 [ 534.836252][ T24] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 534.857118][ T24] usb 3-1: can't read configurations, error -61 [ 534.869356][ T24] usb usb3-port1: unable to enumerate USB device [ 535.387304][T24639] fuseblk: Bad value for 'user_id' [ 535.437279][T24639] fuseblk: Bad value for 'user_id' [ 535.978025][T24672] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2901'. [ 535.989251][T24672] netlink: zone id is out of range [ 535.995891][T24672] netlink: zone id is out of range [ 536.004831][T24672] netlink: zone id is out of range [ 536.010116][T24672] netlink: zone id is out of range [ 536.015429][T24672] netlink: zone id is out of range [ 536.021076][T24672] netlink: zone id is out of range [ 536.026239][T24672] netlink: zone id is out of range [ 536.031499][T24672] netlink: zone id is out of range [ 536.036627][T24672] netlink: zone id is out of range [ 536.042305][T24672] netlink: zone id is out of range [ 536.117522][ T5899] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 536.160662][T24678] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 536.172904][T24678] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 536.186715][T24678] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null. [ 536.244129][T24680] bridge0: port 3(veth0_to_bridge) entered blocking state [ 536.252580][T24680] bridge0: port 3(veth0_to_bridge) entered disabled state [ 536.261757][ T5899] usb 6-1: device descriptor read/64, error -71 [ 536.273979][T24680] veth0_to_bridge: entered allmulticast mode [ 536.284637][T24680] veth0_to_bridge: entered promiscuous mode [ 536.317123][T24680] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 536.351897][T24680] bridge0: port 3(veth0_to_bridge) entered blocking state [ 536.359299][T24680] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 536.507087][ T5899] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 536.647490][ T5899] usb 6-1: device descriptor read/64, error -71 [ 536.805973][ T5899] usb usb6-port1: attempt power cycle [ 537.098293][T24738] XFS (rnullb0): Invalid superblock magic number [ 537.182029][ T5899] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 537.210538][ T5899] usb 6-1: device descriptor read/8, error -71 [ 537.377100][ T24] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 537.490457][ T5899] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 537.496570][T24767] program syz.2.2921 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 537.537944][ T5899] usb 6-1: device descriptor read/8, error -71 [ 537.582100][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 537.607574][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 537.632900][ T24] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 537.642175][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 537.657346][ T5899] usb usb6-port1: unable to enumerate USB device [ 537.663968][ T24] usb 2-1: SerialNumber: syz [ 537.910313][ T24] usb 2-1: 0:2 : does not exist [ 537.915392][ T24] usb 2-1: unit 5 not found! [ 537.952265][ T24] usb 2-1: USB disconnect, device number 66 [ 538.024376][ T7135] udevd[7135]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 538.201911][T24814] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/rnullb0": -EINTR [ 538.337303][T20838] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 538.513138][T20838] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 538.525599][T20838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 538.536640][T20838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 538.546474][T20838] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 538.559578][T20838] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 538.568791][T20838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.585543][T20838] usb 3-1: config 0 descriptor?? [ 539.017541][T24841] 9pnet_fd: Insufficient options for proto=fd [ 539.121355][T20838] plantronics 0003:047F:FFFF.001F: ignoring exceeding usage max [ 539.166577][T20838] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 539.400926][T24803] /dev/rnullb0: Can't open blockdev [ 540.017017][ T5899] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 540.190313][ T5899] usb 6-1: Using ep0 maxpacket: 32 [ 540.202661][ T5899] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 540.222707][ T5899] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.238091][ T5899] usb 6-1: config 0 descriptor?? [ 540.260273][ T5899] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 540.650770][ T30] audit: type=1800 audit(1751258746.148:643): pid=24935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2941" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 540.821716][ T5899] gspca_nw80x: reg_r err -71 [ 540.826447][ T5899] nw80x 6-1:0.0: probe with driver nw80x failed with error -71 [ 540.854839][ T5899] usb 6-1: USB disconnect, device number 11 [ 541.335423][ T5899] usb 3-1: USB disconnect, device number 21 [ 541.913160][T24984] sctp: [Deprecated]: syz.1.2948 (pid 24984) Use of struct sctp_assoc_value in delayed_ack socket option. [ 541.913160][T24984] Use struct sctp_sack_info instead [ 542.337148][ T5899] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 542.469071][T25016] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2955'. [ 542.497300][ T5899] usb 2-1: Using ep0 maxpacket: 16 [ 542.520432][ T5899] usb 2-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 542.537358][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.555688][ T5899] usb 2-1: Product: syz [ 542.565816][ T5899] usb 2-1: Manufacturer: syz [ 542.577383][ T5883] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 542.592819][T25016] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 542.599802][ T5899] usb 2-1: SerialNumber: syz [ 542.610500][ T5899] usb 2-1: config 0 descriptor?? [ 542.624913][ T5899] hub 2-1:0.0: bad descriptor, ignoring hub [ 542.631419][ T5899] hub 2-1:0.0: probe with driver hub failed with error -5 [ 542.742154][ T5883] usb 3-1: Using ep0 maxpacket: 32 [ 542.838842][ T5883] usb 3-1: config index 0 descriptor too short (expected 21796, got 36) [ 542.876121][ T5883] usb 3-1: config 140 has too many interfaces: 36, using maximum allowed: 32 [ 542.935683][ T5883] usb 3-1: config 140 has an invalid descriptor of length 217, skipping remainder of the config [ 542.960010][ T5883] usb 3-1: config 140 has 0 interfaces, different from the descriptor's value: 36 [ 542.978749][ T2155] usb 2-1: USB disconnect, device number 67 [ 543.013731][ T5883] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.40 [ 543.040222][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.071777][ T5883] usb 3-1: Product:  [ 543.076935][ T5883] usb 3-1: SerialNumber:  [ 543.369458][T25078] XFS (rnullb0): Invalid superblock magic number [ 543.381540][ T5883] usb 3-1: USB disconnect, device number 22 [ 543.476048][T25089] syz.0.2963: attempt to access beyond end of device [ 543.476048][T25089] loop0: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 543.554259][T25089] gfs2: error -5 reading superblock [ 543.722568][T25097] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2967'. [ 543.742314][T25097] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2967'. [ 544.006853][ T5883] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 544.186136][ T5883] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 544.199498][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.210548][ T5883] usb 6-1: Product: syz [ 544.214944][ T5883] usb 6-1: Manufacturer: syz [ 544.223075][ T5883] usb 6-1: SerialNumber: syz [ 544.243613][ T5883] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 544.275829][ T5899] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 544.758066][ T2155] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 544.913069][T25143] /dev/rnullb0: Can't open blockdev [ 544.937004][ T2155] usb 2-1: Using ep0 maxpacket: 8 [ 544.946439][ T2155] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 544.966136][ T2155] usb 2-1: config 0 interface 0 has no altsetting 0 [ 544.973422][ T2155] usb 2-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 544.984095][ T2155] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.998015][ T2155] usb 2-1: config 0 descriptor?? [ 545.047696][T25150] /dev/rnullb0: Can't open blockdev [ 545.377745][ T5899] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 545.388161][T25160] /dev/rnullb0: Can't open blockdev [ 545.390689][ T5899] ath9k_htc: Failed to initialize the device [ 545.422732][ T2155] uclogic 0003:5543:0042.0020: unbalanced delimiter at end of report description [ 545.443127][ T2155] uclogic 0003:5543:0042.0020: parse failed [ 545.456518][ T2155] uclogic 0003:5543:0042.0020: probe with driver uclogic failed with error -22 [ 545.457435][ T5899] usb 6-1: ath9k_htc: USB layer deinitialized [ 545.719922][ T5899] usb 6-1: USB disconnect, device number 12 [ 545.756832][ T5883] usb 2-1: USB disconnect, device number 68 [ 546.270574][T25189] /dev/rnullb0: Can't open blockdev [ 546.424416][T25199] ieee802154 phy0 wpan0: encryption failed: -22 [ 546.442663][T25199] /dev/rnullb0: Can't open blockdev [ 546.493237][T25201] /dev/rnullb0: Can't open blockdev [ 546.614671][ T30] audit: type=1800 audit(1751258752.108:644): pid=25205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2989" name="file1" dev="overlay" ino=909 res=0 errno=0 [ 546.706341][T25205] net_ratelimit: 74 callbacks suppressed [ 546.706356][T25205] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 546.815080][T25217] overlay: Bad value for 'redirect_dir' [ 546.887155][ T2155] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 547.030201][T25232] XFS (rnullb0): Invalid superblock magic number [ 547.080230][ T2155] usb 2-1: Using ep0 maxpacket: 8 [ 547.107493][ T2155] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 547.120688][ T2155] usb 2-1: config 3 has 1 interface, different from the descriptor's value: 3 [ 547.147441][ T5899] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 547.154326][ T2155] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=f4.40 [ 547.176704][ T2155] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.198323][ T2155] usb 2-1: Product: syz [ 547.202551][ T2155] usb 2-1: Manufacturer: syz [ 547.211814][ T2155] usb 2-1: SerialNumber: syz [ 547.302358][ T5899] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 547.331861][ T5899] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 547.343613][ T5899] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 547.357074][ T5899] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 547.370636][ T5899] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 547.370667][ T5899] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.374462][ T5899] usb 6-1: config 0 descriptor?? [ 547.434118][T25209] ntfs3(loop1): try to read out of volume at offset 0x0 [ 547.454587][ T2155] usb 2-1: interface 1 not found [ 547.477105][ T2155] usb 2-1: USB disconnect, device number 69 [ 547.650465][T25263] netlink: 'syz.0.3002': attribute type 46 has an invalid length. [ 547.661476][T25264] netlink: 'syz.0.3002': attribute type 46 has an invalid length. [ 547.815292][T25222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.832378][T25222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.845557][ T5899] plantronics 0003:047F:FFFF.0021: ignoring exceeding usage max [ 547.859910][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.872473][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.885043][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 547.897515][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.910013][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.922534][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 547.935062][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.947597][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.960116][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 547.985941][ T5899] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 548.086509][T25277] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3003'. [ 548.183869][T25278] netlink: 'syz.2.3003': attribute type 33 has an invalid length. [ 548.289004][T25278] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3003'. [ 548.847328][ T890] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 548.995186][T25299] mmap: syz.1.3007 (25299): VmData 37470208 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data. [ 549.249335][T25307] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 549.256645][ T30] audit: type=1326 audit(1751258754.748:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25305 comm="syz.1.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ab258e929 code=0x7fc00000 [ 549.575956][T25313] batadv_slave_0: entered promiscuous mode [ 549.601141][T25312] batadv_slave_0: left promiscuous mode [ 549.868495][ T5883] usb 6-1: USB disconnect, device number 13 [ 550.046307][T25333] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3016'. [ 550.674009][ T5843] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 550.685156][ T5843] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 551.031219][T25359] fuse: Bad value for 'fd' [ 551.706823][ C0] net_ratelimit: 9011 callbacks suppressed [ 551.706845][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 551.725341][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 551.737877][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 551.750459][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 551.751298][T25377] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:20003 [ 551.762995][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 551.782585][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 551.795215][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 551.807706][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 551.820240][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 551.832842][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 551.858090][T25377] /dev/rnullb0: Can't open blockdev [ 551.895081][T25385] /dev/rnullb0: Can't open blockdev [ 553.017138][ T5920] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 553.097991][T25406] No control pipe specified [ 553.236919][ T5920] usb 2-1: Using ep0 maxpacket: 32 [ 553.264508][ T5920] usb 2-1: config 0 has no interfaces? [ 553.286526][ T5920] usb 2-1: New USB device found, idVendor=0cf3, idProduct=817a, bcdDevice=eb.19 [ 553.321687][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.354591][ T5920] usb 2-1: Product: syz [ 553.370092][ T5920] usb 2-1: Manufacturer: syz [ 553.383550][T25414] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3034'. [ 553.409173][ T5920] usb 2-1: SerialNumber: syz [ 553.424314][T25408] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3034'. [ 553.451196][ T5920] usb 2-1: config 0 descriptor?? [ 553.499358][T25411] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3034'. [ 554.186122][ T5899] usb 2-1: USB disconnect, device number 70 [ 555.415631][T25463] /dev/rnullb0: Can't open blockdev [ 555.447667][T25463] /dev/rnullb0: Can't open blockdev [ 556.200715][ T5920] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 556.377687][ T5920] usb 6-1: Using ep0 maxpacket: 16 [ 556.399933][ T5920] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 556.432005][ T5920] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 556.470879][ T5920] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 556.500263][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.528957][ T5920] usb 6-1: Product: syz [ 556.551771][ T5920] usb 6-1: Manufacturer: syz [ 556.579784][ T5920] usb 6-1: SerialNumber: syz [ 556.716904][ C0] net_ratelimit: 11714 callbacks suppressed [ 556.716928][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 556.735367][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 556.747887][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 556.760455][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 556.772979][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 556.785522][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 556.798082][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 556.810576][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 556.823114][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 556.835725][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 557.305873][ T5920] usb 6-1: 0:2 : does not exist [ 557.342182][ T5920] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 557.412879][ T5920] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 557.453507][ T5920] usb 6-1: 5:0: cannot get min/max values for control 4 (id 5) [ 557.491867][T25510] /dev/rnullb0: Can't open blockdev [ 557.514215][ T5920] usb 6-1: 5:0: cannot get min/max values for control 8 (id 5) [ 557.662452][ T5920] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 557.715461][ T5920] usb 6-1: USB disconnect, device number 14 [ 557.748053][T25525] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3057'. [ 559.215326][ T890] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 559.573014][ T890] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 559.662597][ T890] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 559.787115][ T890] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 559.846923][ T890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.893350][ T890] usb 2-1: Product: syz [ 559.920112][ T890] usb 2-1: Manufacturer: syz [ 559.958611][ T890] usb 2-1: SerialNumber: syz [ 559.984311][T25594] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3067'. [ 560.000567][ T890] usb 2-1: config 0 descriptor?? [ 560.376423][ T890] usb 2-1: USB disconnect, device number 71 [ 560.619182][T25619] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 560.977418][ T890] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 561.176970][ T890] usb 6-1: Using ep0 maxpacket: 32 [ 561.187631][ T890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.202053][ T890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.214255][ T890] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 561.227132][ T890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.256566][ T890] usb 6-1: config 0 descriptor?? [ 561.396969][ T5883] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 561.567026][ T5883] usb 3-1: Using ep0 maxpacket: 32 [ 561.578995][ T5883] usb 3-1: config 1 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 561.612534][ T5883] usb 3-1: config 1 interface 0 has no altsetting 0 [ 561.643868][ T5883] usb 3-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.40 [ 561.665046][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.701781][ T5883] usb 3-1: Product: syz [ 561.706028][ T5883] usb 3-1: Manufacturer: syz [ 561.719532][ T890] savu 0003:1E7D:2D5A.0022: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 561.726834][ C0] net_ratelimit: 11542 callbacks suppressed [ 561.726858][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 561.747324][ T5883] usb 3-1: SerialNumber: syz [ 561.749788][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 561.766299][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 561.778915][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 561.791502][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 561.804028][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 561.816617][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 561.835035][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 561.847610][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 561.860190][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 561.942373][ T890] usb 6-1: USB disconnect, device number 15 [ 562.011172][T25638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.063574][T25638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.111429][ T5883] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input42 [ 562.159277][ T5189] bcm5974 3-1:1.0: could not read from device [ 562.186605][T25655] fido_id[25655]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 562.210039][ T5189] bcm5974 3-1:1.0: could not read from device [ 562.251601][ T5189] bcm5974 3-1:1.0: could not read from device [ 562.266055][ T5883] usb 3-1: USB disconnect, device number 24 [ 562.671664][T25689] kAFS: unable to lookup cell '/yz1' [ 562.825147][T25692] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3079'. [ 563.106920][ T5883] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 563.498659][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.519714][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.179214][ T5883] usb 3-1: Using ep0 maxpacket: 16 [ 566.736776][ C0] net_ratelimit: 14256 callbacks suppressed [ 566.736798][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 566.738103][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 566.743238][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 566.756411][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 566.767126][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 566.780343][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 566.791212][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 566.805422][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 566.815042][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 566.828271][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 568.568487][T20541] sched: DL replenish lagged too much [ 570.945182][ T5883] usb 3-1: unable to read config index 0 descriptor/start: -110 [ 571.195953][ T5883] usb 3-1: can't read configurations, error -110 [ 571.746767][ C0] net_ratelimit: 15151 callbacks suppressed [ 571.746790][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 571.747087][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 571.753135][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 571.766665][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 571.777297][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 571.790333][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 571.800994][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 571.814226][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 571.824836][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 571.838229][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 576.756999][ C0] net_ratelimit: 14602 callbacks suppressed [ 576.757023][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 576.757755][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 576.763546][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 576.776634][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 576.787350][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 576.800561][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 576.811197][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 576.824494][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 576.835277][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 576.848393][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 581.766813][ C1] net_ratelimit: 15487 callbacks suppressed [ 581.766836][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 581.767087][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 581.774440][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 581.785208][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 581.798405][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 581.809110][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 581.822506][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 581.833195][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 581.846423][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 581.857044][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 586.777100][ C1] net_ratelimit: 14864 callbacks suppressed [ 586.777124][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 586.777195][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 586.784591][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 586.795567][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 586.809433][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 586.819398][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 586.832548][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 586.843536][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 586.856384][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 586.867283][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 591.242658][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 591.786974][ C0] net_ratelimit: 14699 callbacks suppressed [ 591.786997][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 591.788569][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 591.793370][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 591.806752][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 591.817479][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 591.830483][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 591.841245][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 591.854461][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 591.865108][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 591.878487][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 596.797193][ C0] net_ratelimit: 14653 callbacks suppressed [ 596.797216][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 596.797666][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 596.803654][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 596.816820][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 596.827598][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 596.840752][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 596.851658][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 596.864569][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 596.875482][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 596.888542][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 601.807018][ C0] net_ratelimit: 15519 callbacks suppressed [ 601.807042][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 601.808344][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 601.813428][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 601.826806][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 601.837357][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 601.850714][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 601.861413][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 601.875615][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 601.885191][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 601.898500][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 606.817059][ C0] net_ratelimit: 15578 callbacks suppressed [ 606.817083][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 606.818190][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 606.823417][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 606.836548][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 606.847594][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 606.861229][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 606.872027][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 606.885168][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 606.895954][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 606.909391][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 611.827038][ C0] net_ratelimit: 14706 callbacks suppressed [ 611.827062][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 611.827423][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 611.833543][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 611.846624][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 611.857435][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 611.870576][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 611.881583][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 611.894416][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 611.905362][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 611.918289][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 616.837175][ C1] net_ratelimit: 14685 callbacks suppressed [ 616.837199][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 616.837204][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 616.837713][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 616.844643][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 616.855537][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 616.868752][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 616.879712][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 616.892584][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 616.903644][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 616.916444][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 621.847114][ C0] net_ratelimit: 14992 callbacks suppressed [ 621.847139][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 621.847503][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 621.853553][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 621.866605][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 621.877632][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 621.890536][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 621.901396][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 621.914434][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 621.925242][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 621.938388][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 625.605799][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 626.406833][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.856908][ C1] net_ratelimit: 14752 callbacks suppressed [ 626.856932][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 626.857015][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 626.864647][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 626.875284][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 626.888391][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 626.899364][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 626.912177][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 626.923112][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 626.936177][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 626.946991][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.867173][ C0] net_ratelimit: 14987 callbacks suppressed [ 631.867196][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 631.867763][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 631.873752][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.886860][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 631.897816][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.910701][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 631.921746][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 631.934644][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 631.945569][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.958605][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 636.877152][ C0] net_ratelimit: 15116 callbacks suppressed [ 636.877176][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.877310][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 636.883686][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 636.896809][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 636.907528][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.920647][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 636.931656][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.944591][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 636.955472][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 636.968481][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 641.887097][ C0] net_ratelimit: 14727 callbacks suppressed [ 641.887120][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 641.887290][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 641.893576][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 641.906752][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 641.917456][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 641.930544][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 641.947083][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 641.954446][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 641.965365][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 641.978316][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 646.897187][ C0] net_ratelimit: 14822 callbacks suppressed [ 646.897209][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 646.897885][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 646.903653][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 646.916966][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 646.927613][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 646.940975][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 646.951893][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 646.965052][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 646.975713][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 646.988781][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 651.906883][ C0] net_ratelimit: 14650 callbacks suppressed [ 651.906906][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 651.907935][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 651.913395][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 651.926453][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 651.937294][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 651.950370][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 651.961332][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 651.974238][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 651.985120][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 651.998151][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 656.916853][ C0] net_ratelimit: 14708 callbacks suppressed [ 656.916878][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 656.917089][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 656.923494][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 656.936400][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 656.947246][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 656.961536][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 656.971104][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 656.984222][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 656.995202][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.008083][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 661.927006][ C0] net_ratelimit: 14611 callbacks suppressed [ 661.927029][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 661.927079][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 661.933514][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 661.946492][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 661.957378][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 661.971339][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 661.981475][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 661.994260][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 662.005233][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 662.018219][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 666.936760][ C0] net_ratelimit: 14747 callbacks suppressed [ 666.936788][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 666.937400][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 666.943219][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 666.956300][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 666.967144][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 666.980265][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 666.991260][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 667.004149][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 667.015031][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 667.028139][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 671.946932][ C0] net_ratelimit: 14800 callbacks suppressed [ 671.946955][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 671.948150][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 671.953489][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 671.966535][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 671.977404][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 671.990566][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 672.001606][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 672.014525][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 672.025436][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 672.038592][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 676.957022][ C0] net_ratelimit: 14918 callbacks suppressed [ 676.957046][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 676.957117][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 676.963548][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 676.976602][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 676.987395][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 677.000518][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 677.011481][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 677.024387][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 677.035299][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 677.048324][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 681.966792][ C0] net_ratelimit: 14653 callbacks suppressed [ 681.966815][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 681.967173][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 681.973361][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 681.986322][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 681.997258][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 682.010170][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 682.021019][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 682.034173][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 682.045106][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 682.058070][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 685.496706][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 685.503713][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P13/2:b..l [ 685.512086][ C1] rcu: (detected by 1, t=10503 jiffies, g=93657, q=1726 ncpus=2) [ 685.519935][ C1] task:kworker/u8:1 state:R running task stack:21704 pid:13 tgid:13 ppid:2 task_flags:0x24208060 flags:0x00004000 [ 685.535174][ C1] Workqueue: writeback wb_workfn (flush-250:0) [ 685.541407][ C1] Call Trace: [ 685.544717][ C1] [ 685.547676][ C1] __schedule+0x16f5/0x4d00 [ 685.552235][ C1] ? trace_sched_exit_tp+0x38/0x120 [ 685.557476][ C1] ? __schedule+0x1713/0x4d00 [ 685.562185][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 685.567507][ C1] ? __pfx___schedule+0x10/0x10 [ 685.572391][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 685.577722][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 685.583042][ C1] preempt_schedule_irq+0xb5/0x150 [ 685.588186][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 685.593945][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 685.599789][ C1] irqentry_exit+0x6f/0x90 [ 685.604243][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 685.610255][ C1] RIP: 0010:lock_acquire+0x175/0x360 [ 685.615579][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 5b b3 25 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 685.635214][ C1] RSP: 0018:ffffc900001262b8 EFLAGS: 00000206 [ 685.641317][ C1] RAX: ef23a48506b15f00 RBX: 0000000000000000 RCX: ef23a48506b15f00 [ 685.649318][ C1] RDX: 0000000000000000 RSI: ffffffff8dc50382 RDI: ffffffff8be4ab80 [ 685.657338][ C1] RBP: ffffffff8172dc65 R08: 0000000000000000 R09: ffffffff8172dc65 [ 685.665341][ C1] R10: ffffc90000126488 R11: fffff52000024c9d R12: 0000000000000002 [ 685.673347][ C1] R13: ffffffff8e33bf20 R14: 0000000000000000 R15: 0000000000000246 [ 685.681357][ C1] ? unwind_next_frame+0xa5/0x2390 [ 685.686516][ C1] ? unwind_next_frame+0xa5/0x2390 [ 685.691669][ C1] ? unwind_next_frame+0x19ae/0x2390 [ 685.696988][ C1] ? __unwind_start+0xf8/0x760 [ 685.701776][ C1] ? unwind_next_frame+0xa5/0x2390 [ 685.706915][ C1] unwind_next_frame+0xc2/0x2390 [ 685.711877][ C1] ? unwind_next_frame+0xa5/0x2390 [ 685.717027][ C1] ? arch_stack_walk+0x11c/0x150 [ 685.722002][ C1] ? get_stack_info_noinstr+0x1b/0x130 [ 685.727519][ C1] __unwind_start+0x5b9/0x760 [ 685.732231][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 685.738422][ C1] arch_stack_walk+0xe4/0x150 [ 685.743136][ C1] ? __unwind_start+0xf8/0x760 [ 685.747935][ C1] stack_trace_save+0x9c/0xe0 [ 685.752647][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 685.758049][ C1] ? blk_mq_flush_plug_list+0x432/0x550 [ 685.763649][ C1] ? submit_bio_noacct_nocheck+0x4ab/0xb50 [ 685.769492][ C1] ? __block_write_full_folio+0x810/0xe10 [ 685.775251][ C1] ? blkdev_writepages+0xd1/0x170 [ 685.780308][ C1] ? do_writepages+0x32b/0x550 [ 685.785114][ C1] ? writeback_sb_inodes+0x6c7/0x1010 [ 685.790514][ C1] ? __writeback_inodes_wb+0x111/0x240 [ 685.796005][ C1] ? wb_writeback+0x44f/0xaf0 [ 685.800711][ C1] ? process_scheduled_works+0xade/0x17b0 [ 685.806469][ C1] ? worker_thread+0x8a0/0xda0 [ 685.811264][ C1] kasan_save_track+0x3e/0x80 [ 685.816029][ C1] __kasan_kmalloc+0x93/0xb0 [ 685.820656][ C1] __kmalloc_cache_noprof+0x230/0x3d0 [ 685.826060][ C1] ? kmem_cache_free+0x166/0x400 [ 685.831029][ C1] ? blk_update_request+0x5eb/0xe70 [ 685.836265][ C1] kmem_cache_free+0x166/0x400 [ 685.841069][ C1] blk_update_request+0x5eb/0xe70 [ 685.846145][ C1] blk_mq_end_request+0x3e/0x70 [ 685.851033][ C1] null_queue_rq+0xbfe/0xe30 [ 685.855684][ C1] null_queue_rqs+0x123/0x270 [ 685.860412][ C1] ? blk_mq_dispatch_queue_requests+0x11a/0x800 [ 685.866697][ C1] blk_mq_dispatch_queue_requests+0x414/0x800 [ 685.872811][ C1] blk_mq_flush_plug_list+0x432/0x550 [ 685.878230][ C1] ? update_io_ticks+0x21f/0x260 [ 685.883207][ C1] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 685.889214][ C1] blk_add_rq_to_plug+0x175/0x450 [ 685.894281][ C1] blk_mq_submit_bio+0xbcb/0x2520 [ 685.899361][ C1] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 685.904878][ C1] __submit_bio+0x207/0x5a0 [ 685.909415][ C1] ? blk_add_trace_bio+0x2c/0x2e0 [ 685.914478][ C1] ? __pfx___submit_bio+0x10/0x10 [ 685.919537][ C1] ? blk_add_trace_bio+0x2c/0x2e0 [ 685.924605][ C1] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 685.930317][ C1] ? bio_associate_blkg+0x6d/0x230 [ 685.935483][ C1] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 685.941684][ C1] ? submit_bio_noacct+0xd65/0x1a70 [ 685.946934][ C1] __block_write_full_folio+0x810/0xe10 [ 685.952523][ C1] ? __pfx_blkdev_get_block+0x10/0x10 [ 685.957933][ C1] blkdev_writepages+0xd1/0x170 [ 685.962817][ C1] ? __pfx_blkdev_writepages+0x10/0x10 [ 685.968325][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 685.973565][ C1] ? __pfx_blkdev_writepages+0x10/0x10 [ 685.979061][ C1] do_writepages+0x32b/0x550 [ 685.983688][ C1] ? reacquire_held_locks+0x127/0x1d0 [ 685.989085][ C1] ? writeback_sb_inodes+0x384/0x1010 [ 685.994504][ C1] __writeback_single_inode+0x145/0xff0 [ 686.000085][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 686.005320][ C1] writeback_sb_inodes+0x6c7/0x1010 [ 686.010586][ C1] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 686.016293][ C1] ? __pfx_down_read_trylock+0x10/0x10 [ 686.021793][ C1] ? __pfx_move_expired_inodes+0x10/0x10 [ 686.027465][ C1] __writeback_inodes_wb+0x111/0x240 [ 686.032809][ C1] wb_writeback+0x44f/0xaf0 [ 686.037361][ C1] ? queue_io+0x2f1/0x590 [ 686.041733][ C1] ? __pfx_wb_writeback+0x10/0x10 [ 686.046803][ C1] wb_workfn+0xaef/0xef0 [ 686.051100][ C1] ? __pfx_wb_workfn+0x10/0x10 [ 686.055905][ C1] ? __lock_acquire+0xab9/0xd20 [ 686.060805][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 686.066571][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 686.071798][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 686.077557][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 686.083323][ C1] process_scheduled_works+0xade/0x17b0 [ 686.088947][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 686.094987][ C1] worker_thread+0x8a0/0xda0 [ 686.099638][ C1] kthread+0x711/0x8a0 [ 686.103748][ C1] ? __pfx_worker_thread+0x10/0x10 [ 686.108890][ C1] ? __pfx_kthread+0x10/0x10 [ 686.113515][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 686.118745][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 686.123974][ C1] ? __pfx_kthread+0x10/0x10 [ 686.128602][ C1] ret_from_fork+0x3fc/0x770 [ 686.133237][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 686.138402][ C1] ? __switch_to_asm+0x39/0x70 [ 686.143201][ C1] ? __switch_to_asm+0x33/0x70 [ 686.148000][ C1] ? __pfx_kthread+0x10/0x10 [ 686.152624][ C1] ret_from_fork_asm+0x1a/0x30 [ 686.157435][ C1] [ 686.160489][ C1] rcu: rcu_preempt kthread starved for 979 jiffies! g93657 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 686.171541][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 686.181534][ C1] rcu: RCU grace-period kthread stack dump: [ 686.187461][ C1] task:rcu_preempt state:R running task stack:26600 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 686.200989][ C1] Call Trace: [ 686.204294][ C1] [ 686.207340][ C1] __schedule+0x16f5/0x4d00 [ 686.211901][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 686.217142][ C1] ? schedule+0x165/0x360 [ 686.221506][ C1] ? __lock_acquire+0xab9/0xd20 [ 686.226405][ C1] ? __pfx___schedule+0x10/0x10 [ 686.231323][ C1] ? schedule+0x91/0x360 [ 686.235631][ C1] schedule+0x165/0x360 [ 686.239831][ C1] schedule_timeout+0x12b/0x270 [ 686.244730][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 686.250149][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 686.256082][ C1] ? __pfx_process_timeout+0x10/0x10 [ 686.261411][ C1] ? prepare_to_swait_event+0x341/0x380 [ 686.267004][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 686.271907][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 686.278100][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 686.283419][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 686.288669][ C1] ? finish_swait+0xcd/0x1f0 [ 686.293305][ C1] rcu_gp_kthread+0x99/0x390 [ 686.297949][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 686.303190][ C1] ? __kthread_parkme+0x7b/0x200 [ 686.308159][ C1] ? __kthread_parkme+0x1a1/0x200 [ 686.313225][ C1] kthread+0x711/0x8a0 [ 686.317341][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 686.322579][ C1] ? __pfx_kthread+0x10/0x10 [ 686.327201][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 686.332427][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 686.337648][ C1] ? __pfx_kthread+0x10/0x10 [ 686.342273][ C1] ret_from_fork+0x3fc/0x770 [ 686.346924][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 686.352086][ C1] ? __switch_to_asm+0x39/0x70 [ 686.356880][ C1] ? __switch_to_asm+0x33/0x70 [ 686.361671][ C1] ? __pfx_kthread+0x10/0x10 [ 686.366298][ C1] ret_from_fork_asm+0x1a/0x30 [ 686.371115][ C1] [ 686.374153][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 686.380506][ C1] Sending NMI from CPU 1 to CPUs 0: [ 686.385742][ C0] NMI backtrace for cpu 0 [ 686.385760][ C0] CPU: 0 UID: 0 PID: 1099 Comm: kworker/u8:5 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) [ 686.385793][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 686.385810][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 686.385840][ C0] RIP: 0010:lock_is_held_type+0x97/0x190 [ 686.385864][ C0] Code: 48 c7 c7 0d 3d a7 8d e8 e7 16 00 00 65 ff 05 a0 97 4d 07 41 83 bd e8 0a 00 00 00 7e 48 4c 89 eb 48 81 c3 f0 0a 00 00 45 31 ff <49> 83 ff 31 73 24 48 89 df 4c 89 f6 e8 78 02 00 00 85 c0 75 2a 49 [ 686.385880][ C0] RSP: 0018:ffffc900000064b8 EFLAGS: 00000097 [ 686.385895][ C0] RAX: 0000000000000007 RBX: ffff888026d8a918 RCX: fa2f8f1a77ec3d00 [ 686.385908][ C0] RDX: 1ffff1100fca7d31 RSI: ffffffff8e33bf20 RDI: ffff888026d8a8f0 [ 686.385922][ C0] RBP: 00000000ffffffff R08: ffff888026d89e00 R09: 0000000000000002 [ 686.385935][ C0] R10: 0000000000004888 R11: 0000000000000100 R12: 0000000000000246 [ 686.385946][ C0] R13: ffff888026d89e00 R14: ffffffff8e33bf20 R15: 0000000000000001 [ 686.385959][ C0] FS: 0000000000000000(0000) GS:ffff8881259e6000(0000) knlGS:0000000000000000 [ 686.385974][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 686.385987][ C0] CR2: 00007fbf7ff82c78 CR3: 00000000118fe000 CR4: 00000000003526f0 [ 686.386003][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 00000000000000d8 [ 686.386014][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 686.386038][ C0] Call Trace: [ 686.386045][ C0] [ 686.386056][ C0] dev_hard_start_xmit+0x106/0x830 [ 686.386087][ C0] __dev_queue_xmit+0x1adf/0x3a70 [ 686.386105][ C0] ? stack_depot_save_flags+0x40/0x900 [ 686.386128][ C0] ? __dev_queue_xmit+0x27e/0x3a70 [ 686.386145][ C0] ? kasan_save_track+0x4f/0x80 [ 686.386161][ C0] ? kasan_save_free_info+0x46/0x50 [ 686.386184][ C0] ? kmem_cache_free+0x18f/0x400 [ 686.386201][ C0] ? br_nf_dev_queue_xmit+0x4fe/0x2680 [ 686.386224][ C0] ? br_nf_post_routing+0xb66/0xfe0 [ 686.386245][ C0] ? nf_hook_slow+0xc2/0x220 [ 686.386265][ C0] ? NF_HOOK+0x215/0x3c0 [ 686.386282][ C0] ? br_forward_finish+0xd3/0x130 [ 686.386300][ C0] ? br_nf_forward_finish+0xa40/0xe60 [ 686.386321][ C0] ? NF_HOOK+0x618/0x6b0 [ 686.386340][ C0] ? br_nf_forward_ip+0x647/0x7e0 [ 686.386361][ C0] ? nf_hook_slow+0xc2/0x220 [ 686.386381][ C0] ? NF_HOOK+0x215/0x3c0 [ 686.386399][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 686.386415][ C0] ? br_nf_pre_routing_ipv6+0x37e/0x6b0 [ 686.386438][ C0] ? br_handle_frame+0x982/0x14c0 [ 686.386459][ C0] ? __netif_receive_skb_core+0x10de/0x4180 [ 686.386478][ C0] ? __netif_receive_skb+0x72/0x380 [ 686.386497][ C0] ? process_backlog+0x60e/0x14f0 [ 686.386517][ C0] ? __napi_poll+0xc7/0x480 [ 686.386536][ C0] ? net_rx_action+0x707/0xe30 [ 686.386556][ C0] ? handle_softirqs+0x286/0x870 [ 686.386570][ C0] ? do_softirq+0xec/0x180 [ 686.386584][ C0] ? __local_bh_enable_ip+0x17d/0x1c0 [ 686.386598][ C0] ? cfg80211_inform_single_bss_data+0x13d2/0x1ac0 [ 686.386617][ C0] ? cfg80211_inform_bss_data+0x1fb/0x3b20 [ 686.386634][ C0] ? cfg80211_inform_bss_frame_data+0x3d7/0x730 [ 686.386651][ C0] ? ieee80211_bss_info_update+0x746/0x9e0 [ 686.386669][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xa36/0x2ae0 [ 686.386692][ C0] ? ieee80211_iface_work+0x806/0xfe0 [ 686.386710][ C0] ? cfg80211_wiphy_work+0x2df/0x460 [ 686.386730][ C0] ? process_scheduled_works+0xade/0x17b0 [ 686.386756][ C0] ? worker_thread+0x8a0/0xda0 [ 686.386771][ C0] ? kthread+0x711/0x8a0 [ 686.386788][ C0] ? ret_from_fork+0x3fc/0x770 [ 686.386812][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 686.386839][ C0] ? kasan_quarantine_put+0xdd/0x220 [ 686.386855][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 686.386879][ C0] br_dev_queue_push_xmit+0x6c5/0x890 [ 686.386900][ C0] ? br_nf_dev_queue_xmit+0x4fe/0x2680 [ 686.386923][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 686.386946][ C0] ? NF_HOOK+0x9e/0x6b0 [ 686.386966][ C0] NF_HOOK+0x618/0x6b0 [ 686.386989][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 686.387010][ C0] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 686.387033][ C0] ? net_generic+0x1e/0x240 [ 686.387052][ C0] ? net_generic+0x1e/0x240 [ 686.387071][ C0] ? net_generic+0x1e/0x240 [ 686.387095][ C0] ? skb_pull+0xc1/0x1d0 [ 686.387113][ C0] br_nf_post_routing+0xb66/0xfe0 [ 686.387135][ C0] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 686.387160][ C0] ? __pfx_br_nf_post_routing+0x10/0x10 [ 686.387182][ C0] nf_hook_slow+0xc2/0x220 [ 686.387204][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 686.387223][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 686.387242][ C0] NF_HOOK+0x215/0x3c0 [ 686.387262][ C0] ? NF_HOOK+0x9e/0x3c0 [ 686.387279][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 686.387296][ C0] ? net_generic+0x1e/0x240 [ 686.387316][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 686.387339][ C0] ? net_generic+0x1e/0x240 [ 686.387360][ C0] br_forward_finish+0xd3/0x130 [ 686.387379][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 686.387399][ C0] br_nf_forward_finish+0xa40/0xe60 [ 686.387426][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 686.387449][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 686.387470][ C0] ? NF_HOOK+0x9e/0x6b0 [ 686.387490][ C0] ? NF_HOOK+0x9e/0x6b0 [ 686.387510][ C0] NF_HOOK+0x618/0x6b0 [ 686.387533][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 686.387553][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 686.387580][ C0] br_nf_forward_ip+0x647/0x7e0 [ 686.387602][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 686.387625][ C0] ? __pfx_br_nf_forward+0x10/0x10 [ 686.387647][ C0] nf_hook_slow+0xc2/0x220 [ 686.387669][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 686.387687][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 686.387705][ C0] NF_HOOK+0x215/0x3c0 [ 686.387725][ C0] ? NF_HOOK+0x9e/0x3c0 [ 686.387742][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 686.387761][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 686.387785][ C0] __br_forward+0x41e/0x600 [ 686.387802][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 686.387821][ C0] ? skb_clone+0x246/0x3a0 [ 686.387838][ C0] ? __pfx___br_forward+0x10/0x10 [ 686.387862][ C0] br_handle_frame_finish+0x14b4/0x19b0 [ 686.387889][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 686.387916][ C0] ? ip6t_do_table+0x1db/0x1560 [ 686.387942][ C0] ? nf_hook_slow+0x176/0x220 [ 686.387964][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 686.387985][ C0] br_nf_hook_thresh+0x3c3/0x4a0 [ 686.388010][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 686.388032][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 686.388053][ C0] ? nf_nat_ipv6_in+0x1fc/0x2b0 [ 686.388076][ C0] br_nf_pre_routing_finish_ipv6+0x948/0xd00 [ 686.388106][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 686.388132][ C0] ? br_nf_pre_routing_ipv6+0x42f/0x6b0 [ 686.388155][ C0] br_nf_pre_routing_ipv6+0x37e/0x6b0 [ 686.388180][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 686.388205][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 686.388228][ C0] ? br_nf_pre_routing+0x720/0x1470 [ 686.388252][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 686.388273][ C0] br_handle_frame+0x982/0x14c0 [ 686.388298][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 686.388321][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 686.388346][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 686.388368][ C0] __netif_receive_skb_core+0x10de/0x4180 [ 686.388389][ C0] ? ip6_mc_input+0x9c3/0xbe0 [ 686.388405][ C0] ? kmem_cache_free+0x18f/0x400 [ 686.388425][ C0] ? ip6_mc_input+0x9c3/0xbe0 [ 686.388446][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 686.388484][ C0] ? ip6_rcv_finish+0x29a/0x2d0 [ 686.388501][ C0] ? NF_HOOK+0x30c/0x3a0 [ 686.388515][ C0] ? skb_orphan+0xaf/0xd0 [ 686.388533][ C0] ? __lock_acquire+0xab9/0xd20 [ 686.388561][ C0] ? process_backlog+0x2d5/0x14f0 [ 686.388583][ C0] ? process_backlog+0x2d5/0x14f0 [ 686.388606][ C0] __netif_receive_skb+0x72/0x380 [ 686.388629][ C0] ? process_backlog+0x2d5/0x14f0 [ 686.388651][ C0] process_backlog+0x60e/0x14f0 [ 686.388673][ C0] ? __lock_acquire+0xab9/0xd20 [ 686.388703][ C0] ? __pfx_process_backlog+0x10/0x10 [ 686.388729][ C0] __napi_poll+0xc7/0x480 [ 686.388748][ C0] ? net_rx_action+0x46d/0xe30 [ 686.388771][ C0] net_rx_action+0x707/0xe30 [ 686.388793][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 686.388819][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 686.388857][ C0] handle_softirqs+0x286/0x870 [ 686.388874][ C0] ? do_softirq+0xec/0x180 [ 686.388891][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 686.388910][ C0] ? cfg80211_inform_single_bss_data+0x13d2/0x1ac0 [ 686.388930][ C0] do_softirq+0xec/0x180 [ 686.388944][ C0] [ 686.388951][ C0] [ 686.388958][ C0] ? __pfx_do_softirq+0x10/0x10 [ 686.388972][ C0] ? ieee80211_inform_bss+0xbd9/0x10a0 [ 686.388994][ C0] ? lockdep_softirqs_on+0x13b/0x1c0 [ 686.389018][ C0] __local_bh_enable_ip+0x17d/0x1c0 [ 686.389034][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 686.389052][ C0] ? cfg80211_inform_single_bss_data+0x13d2/0x1ac0 [ 686.389073][ C0] cfg80211_inform_single_bss_data+0x13d2/0x1ac0 [ 686.389104][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 686.389135][ C0] ? cfg80211_inform_bss_data+0x1e8/0x3b20 [ 686.389156][ C0] cfg80211_inform_bss_data+0x1fb/0x3b20 [ 686.389187][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 686.389218][ C0] ? __pfx__ieee802_11_parse_elems_full+0x10/0x10 [ 686.389240][ C0] ? __lock_acquire+0xab9/0xd20 [ 686.389276][ C0] cfg80211_inform_bss_frame_data+0x3d7/0x730 [ 686.389298][ C0] ? ieee80211_bss_info_update+0x2dc/0x9e0 [ 686.389319][ C0] ieee80211_bss_info_update+0x746/0x9e0 [ 686.389342][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 686.389360][ C0] ? sta_info_get+0x4f/0x2a0 [ 686.389385][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xf93/0x2ae0 [ 686.389407][ C0] ieee80211_ibss_rx_queued_mgmt+0xa36/0x2ae0 [ 686.389431][ C0] ? worker_thread+0x8a0/0xda0 [ 686.389447][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 686.389470][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xf93/0x2ae0 [ 686.389489][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 686.389513][ C0] ? __lock_acquire+0xab9/0xd20 [ 686.389553][ C0] ieee80211_iface_work+0x806/0xfe0 [ 686.389578][ C0] cfg80211_wiphy_work+0x2df/0x460 [ 686.389601][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 686.389628][ C0] process_scheduled_works+0xade/0x17b0 [ 686.389667][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 686.389701][ C0] worker_thread+0x8a0/0xda0 [ 686.389718][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 686.389741][ C0] ? __kthread_parkme+0x7b/0x200 [ 686.389763][ C0] kthread+0x711/0x8a0 [ 686.389784][ C0] ? __pfx_worker_thread+0x10/0x10 [ 686.389812][ C0] ? __pfx_kthread+0x10/0x10 [ 686.389832][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 686.389850][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 686.389869][ C0] ? __pfx_kthread+0x10/0x10 [ 686.389888][ C0] ret_from_fork+0x3fc/0x770 [ 686.389914][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 686.389941][ C0] ? __switch_to_asm+0x39/0x70 [ 686.389960][ C0] ? __switch_to_asm+0x33/0x70 [ 686.389979][ C0] ? __pfx_kthread+0x10/0x10 [ 686.389999][ C0] ret_from_fork_asm+0x1a/0x30 [ 686.390026][ C0] [ 686.987082][ C1] net_ratelimit: 12655 callbacks suppressed [ 686.987106][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 686.992908][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 686.999906][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 687.003775][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 687.009459][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 687.014316][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.020554][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 687.024876][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 687.031642][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 687.035607][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 691.996857][ C1] net_ratelimit: 13327 callbacks suppressed [ 691.996881][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 691.997096][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 692.005198][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 692.015294][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 692.029165][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 692.039179][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 692.053087][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 692.063223][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:9f:71:6f:e6:26, vlan:0) [ 692.077010][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 692.087036][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)