last executing test programs: 1m6.378602481s ago: executing program 0 (id=246): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYRESHEX], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x24cc) r1 = getpid() sched_setaffinity(0x0, 0xc, &(0x7f00000002c0)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f00000016c0)=""/11, 0xb}, 0xa}, {{&(0x7f0000001700)=@xdp, 0x80, &(0x7f00000017c0)=[{&(0x7f0000001780)=""/13, 0xd}], 0x1}, 0x9}, {{&(0x7f0000001800)=@nfc_llcp, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001880)=""/7, 0x7}], 0x1, &(0x7f0000001900)=""/172, 0xac}, 0x9}, {{&(0x7f00000019c0)=@ieee802154, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001a40)=""/230, 0xe6}, {&(0x7f0000001b40)=""/73, 0x49}, {&(0x7f0000001bc0)=""/141, 0x8d}, {&(0x7f0000001c80)=""/71, 0x47}, {&(0x7f0000001d00)=""/223, 0xdf}, {&(0x7f0000001e00)=""/202, 0xca}, {&(0x7f0000001f00)=""/28, 0x1c}], 0x7}, 0x1b0}], 0x4, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x24050) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x4, r1, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0x6) read$msr(r4, &(0x7f00000020c0)=""/102400, 0x19000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x5}, 0x8) 1m3.473885526s ago: executing program 2 (id=253): r0 = syz_open_dev$vbi(&(0x7f00000000c0), 0x1, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000000000000140012800b00010065727370616e0000040002"], 0x40}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r2, 0x0, 0x0, 0x800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)=""/90, 0x5a}, {&(0x7f0000000200)=""/76, 0x4c}], 0x2}, 0x40000201) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000100)={0x8, [0xbea0, 0xd7a1, 0x0, 0xa2, 0x2, 0x1, 0x1, 0xe65, 0xa, 0x32, 0x6, 0x1, 0xca58, 0x5, 0x800, 0x1, 0x1, 0x7, 0x1, 0x7f, 0x7, 0x6, 0x5, 0x6, 0xe1d0, 0xfc01, 0x4, 0x7, 0x40, 0x44, 0x3, 0x7, 0x3, 0x10, 0x81, 0x2, 0xfff0, 0x95, 0x81, 0x8, 0x6, 0x8, 0x1, 0x80, 0x1, 0x7f, 0x8], 0x9}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000060000004000000040"], 0x50) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r7, &(0x7f00000014c0), 0x0}, 0x20) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x4e21, 0x8001, @ipv4={'\x00', '\xff\xff', @remote}, 0xe}]}, &(0x7f0000000300)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000840)={r9, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) readv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/247, 0xf7}], 0x1) 1m2.901540847s ago: executing program 0 (id=256): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(0x0, 0x1) wait4(r1, &(0x7f0000000180), 0x80000005, &(0x7f0000000300)) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') open(&(0x7f00000003c0)='.\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r6, 0xffffffffffffffff}, 0x4) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r5, @ANYRES16=r7], 0x4c}}, 0x40000) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 1m1.158158727s ago: executing program 2 (id=258): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) close(0xffffffffffffffff) openat$iommufd(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r3, 0xffffffff) io_uring_enter(0xffffffffffffffff, 0x27e2, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40040010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019000100feffffff00000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a0080", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x0) 1m0.850903528s ago: executing program 0 (id=259): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x30, 0x36, 0x1, 0x80000, 0x10, {}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@typed={0x4, 0xa3}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000100)}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @local, @multicast2}, &(0x7f0000000280)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000340)={@rand_addr, @multicast1}, &(0x7f0000000380)=0xc) fsopen(&(0x7f0000001880)='binfmt_misc\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfd}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x80}, 0x1, 0x7}, 0x0) 1m0.015041882s ago: executing program 2 (id=260): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$inet(0xa, 0x801, 0x84) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r3 = accept(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18}], 0x1d}], 0x1, 0x0) recvmsg(r3, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) 58.791633177s ago: executing program 3 (id=264): read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) dup2(0xffffffffffffffff, 0xffffffffffffffff) 58.613486664s ago: executing program 3 (id=265): add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000000280)={0x0, "f8d0795308ab7dcd6b16d60155f0e4f75257ebcea827aa2b9a5308dae765cb33cb35badf4802defde177e36aaa76b3ce4309f1c31b0bea734d5fa2f289be35c9", 0x2a}, 0x48, 0xfffffffffffffffb) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000180)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x12, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x85, 0x0, 0x10, 0xd2, 0x0, 0x5f, 0xfb, 0x0, 0xa6, 0x4, 0xff, 0x0, 0xf7fffffffffffdfc}, {0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x4, 0xff, 0x2, 0x0, 0xfffffffffffffffa}, {0x2, 0x33, 0x0, 0x0, 0xac, 0x5, 0x14, 0x9, 0x5}], 0xfffffffd}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x1000000000, 0x2004cb, 0x1, 0xfffffffffffffffe, 0x3, 0x0, 0xff, 0x0, 0x4, 0x2, 0x1ffc], 0x80a0000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4804}, 0x80) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000580)=[@textreal={0x8, &(0x7f0000000380)="0f35baf80c66b8c2473f8c66efbafc0cb80600ef0f072ed0649e64363e0f5b8c191366b92109000066b80000000066ba000000000f30baf80c66b8847c678866efbafc0cec66b97d0300000f320fc73e9a4a640fc7a8073a", 0x58}], 0x1, 0x53, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x7, 0xf, 0x9, '\x00', 0x5}) socket$nl_xfrm(0x10, 0x3, 0x6) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = syz_io_uring_setup(0xa1, 0x0, 0x0, &(0x7f00000020c0)=0x0) syz_io_uring_submit(0x0, r7, 0x0) io_uring_enter(r6, 0x47ba, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0xefffffffffffffff, 0x0, 0x3, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x7f, 0x0) read$msr(r8, &(0x7f0000032680)=""/102396, 0x18ffc) 58.435703938s ago: executing program 0 (id=267): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0xffffffff, 0x7fff, 0x101}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xffffe10e}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$I2C_TENBIT(r6, 0x704, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 55.584379166s ago: executing program 1 (id=272): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, 0x0) fchdir(r2) sendmsg$TCPDIAG_GETSOCK(r2, 0x0, 0x4084805) r3 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c0002800800034000004000080001400000000d0500020094000000080006400000000408000440000000170900010073797a30000000000900020073797a32"], 0x94}}, 0x0) clock_adjtime(0x7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) socket$kcm(0x29, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x1c0, 0x12, 0x60d, 0x0, 0x202, 0x2b8, 0x2e8, 0x2e8, 0x2b8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @local, [], [], 'ip6erspan0\x00', 'macsec0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x1, 0x1}, {0x1, 0x1, 0x2}, 0x9, 0x7}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x6}, {0x0, 0x41}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) r9 = accept4(r8, 0x0, 0x0, 0x80000) sendmsg$kcm(r9, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 55.370260326s ago: executing program 0 (id=273): socket$netlink(0x10, 0x3, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1b) r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x101000) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000140)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xff}) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_usb_connect(0x0, 0x208, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0) r9 = socket$phonet_pipe(0x23, 0x5, 0x2) r10 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000280)=@usbdevfs_driver={0x0, 0x4, 0x0}) connect$phonet_pipe(r9, &(0x7f0000000040)={0x23, 0x1, 0x9, 0xfe}, 0x10) io_uring_enter(r1, 0x3516, 0x77e, 0x0, 0x0, 0x0) 55.363370723s ago: executing program 3 (id=274): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(0x0, 0x1) wait4(r1, &(0x7f0000000180), 0x80000005, &(0x7f0000000300)) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) open(&(0x7f00000003c0)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x10}, 0x94) r5 = socket(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r6, 0xffffffffffffffff}, 0x4) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r5, @ANYRES16=r7], 0x4c}}, 0x40000) 55.362457285s ago: executing program 4 (id=275): read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) dup2(0xffffffffffffffff, 0xffffffffffffffff) 54.513637551s ago: executing program 1 (id=276): socket$inet6(0xa, 0x6, 0x9) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000003c0)=ANY=[@ANYRES64=0x0], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x6e0447cf, 0x940) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002500), r8) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r8, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000000180)={0x50, r9, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x50}, 0x1, 0x0, 0x0, 0x8010}, 0x4040) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r6, r7, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000480)={0x28, 0x4, r7, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r4, 0x3b8b, &(0x7f0000000080)={0x10, 0x1, r10}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r4, 0x3b8b, &(0x7f0000000040)={0x10, 0x1, r10}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x100007c8) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00ecffffff940200000000000040000000000000004d020000000000000000000000003800010001017f000800030000006400"], 0x78) 53.97677102s ago: executing program 3 (id=277): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="79a2a95b870f71ea7d4f8a0df3587064f3c2e36d813394909b54b47a8030d658fdaba18a10482291688df66881e18cb4f7db4f2071b5a6de4e63b16d8b6c176fdfdaeb2c853bf79072559ede2cdfe9ff03000015f23614"], 0x0, 0x0, 0x0, 0x0, 0x0}) 53.22252034s ago: executing program 4 (id=278): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = syz_io_uring_setup(0x27f0, &(0x7f0000000340)={0x0, 0x400000, 0x10100, 0x400001, 0x28c}, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0)={0x0, 0xd762, 0x100, 0x0, 0x134, 0x0, r0}, &(0x7f00000002c0)=0x0, &(0x7f0000000180)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x3, 0x7, 0x2, 0x17d, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182}) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x1e1983, 0x0) r4 = dup(r3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000240)={0xffffff0e, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)=""/218, 0xda}, {&(0x7f00000000c0)=""/66, 0x42}, {&(0x7f0000000540)=""/202, 0xca}], &(0x7f0000000200)=[0x10001, 0x9, 0x8, 0x80000001], 0x3}, 0x20) ioctl$PTP_EXTTS_REQUEST2(r4, 0xc0603d06, &(0x7f0000000000)={0x0, 0x4}) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0x8184c, 0x0, 0x9, 0x0, 0x0) 52.794891214s ago: executing program 2 (id=279): r0 = syz_open_dev$vbi(&(0x7f00000000c0), 0x1, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000000000000140012800b00010065727370616e0000040002"], 0x40}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffde6}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)=""/90, 0x5a}, {&(0x7f0000000200)=""/76, 0x4c}], 0x2}, 0x40000201) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000100)={0x8, [0xbea0, 0xd7a1, 0x0, 0xa2, 0x2, 0x1, 0x1, 0xe65, 0xa, 0x32, 0x6, 0x1, 0xca58, 0x5, 0x800, 0x1, 0x1, 0x7, 0x1, 0x7f, 0x7, 0x6, 0x5, 0x6, 0xe1d0, 0xfc01, 0x4, 0x7, 0x40, 0x44, 0x3, 0x7, 0x3, 0x10, 0x81, 0x2, 0xfff0, 0x95, 0x81, 0x8, 0x6, 0x8, 0x1, 0x80, 0x1, 0x7f, 0x8], 0x9}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000060000004000000040"], 0x50) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r6, &(0x7f00000014c0), 0x0}, 0x20) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x4e21, 0x8001, @ipv4={'\x00', '\xff\xff', @remote}, 0xe}]}, &(0x7f0000000300)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000840)={r8, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) readv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/247, 0xf7}], 0x1) 52.710976271s ago: executing program 1 (id=280): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(0x0, 0x1) wait4(r1, &(0x7f0000000180), 0x80000005, &(0x7f0000000300)) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') open(&(0x7f00000003c0)='.\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r6, 0xffffffffffffffff}, 0x4) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r5, @ANYRES16=r7], 0x4c}}, 0x40000) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 52.59753717s ago: executing program 4 (id=281): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x88}]}]}, 0x30}}, 0x0) 51.398174241s ago: executing program 4 (id=282): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) close(0xffffffffffffffff) openat$iommufd(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r3, 0xffffffff) io_uring_enter(0xffffffffffffffff, 0x27e2, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40040010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019000100feffffff00000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a0080", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x0) 51.027589158s ago: executing program 1 (id=283): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000001140012800c0001006d6163766c616e00dbff028008000500", @ANYRES32=r1, @ANYBLOB="080004007f0000000a000100aa"], 0x50}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000002c0)={0x3, &(0x7f0000000340)=[{0x40, 0x2, 0x48, 0x5}, {0x28, 0x4, 0x9, 0xfffff038}, {0x6, 0x27, 0x4, 0x207}]}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r2) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r4, &(0x7f0000000000)=@other={'lock', ' ', 'io+mem'}, 0xc) (async) close(r4) (async) r5 = fsopen(&(0x7f00000000c0)='jfs\x00', 0x1) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000100)='usrquota', &(0x7f00000002c0)='./file1\x00', 0xffffffffffffff9c) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) (async) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r9, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r9, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) (async) setsockopt$inet_MCAST_MSFILTER(r9, 0x0, 0x30, &(0x7f0000000a40)={0x9, {{0x2, 0x0, @multicast2}}, 0x1, 0x2, [{{0x2, 0x0, @loopback}}, {{0x2, 0x4e23, @broadcast}}]}, 0x190) (async) symlink(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='./file0\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r8, 0x0) (async) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x100) (async) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES16=r6, @ANYRES32=0x0, @ANYBLOB="000400070000000008000500", @ANYRES32=r6, @ANYBLOB="400012800c0001006d6163766c616e00300002800800010010000000aaaaaaaabb000008000300030000000a000400aaaaaaaaa2aa0000", @ANYRES16=r7], 0x68}, 0x1, 0x0, 0x0, 0x24004150}, 0x0) 51.026680156s ago: executing program 2 (id=284): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10138, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="24001000fe04000600000020ce45b02066392241"], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) timer_create(0x1, &(0x7f0000000100)={0x0, 0x37, 0x1, @tid=r0}, &(0x7f0000000180)) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x28) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000340)={r5, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x4, 0x9a7, 0xcc7d, 0x3, 0x74, 0x5, 0x7f}, &(0x7f00000000c0)=0x9c) (fail_nth: 2) syz_open_procfs(0x0, &(0x7f0000000f40)='fdinfo\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f00000001c0)=""/37, 0x25) getdents(r6, 0xfffffffffffffffd, 0xbb) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@bridge_setlink={0x44, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r8}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4, 0x5, 0x0, 0x0, [{0x8, 0x0, 0x0, 0x0, 0x123e}, {0x8, 0x5}, {0x8}]}}]}]}, 0x44}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006280)={0x2020}, 0x2020) 50.969569733s ago: executing program 0 (id=285): ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r3, 0xc0403d11, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r6, &(0x7f0000000040), 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8814}, 0x800) getsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f00000006c0), &(0x7f0000000140)=0x8) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0x0, 0xffffffff, 0xffffffff, 0x108, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@empty, [0x1fe, 0xff000000, 0xffffff00, 0xff], 0x4e21, 0x4e23, 0x4e22, 0x4e21, 0xd04, 0x7f, 0x0, 0x6, 0x8}}}, {{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff], [0xffffff00], 'wg1\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x3, 0x0, 0x50}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'virt_wifi0\x00', {0x0, 0x0, 0x40004, 0x0, 0xffffffff, 0x7, 0x3ff, 0x98}, {0xfffffffffffffffe}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000080)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, 0x5, 0x0, 0x1, 0x100, 0x5, 0x44280000}) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 49.659892034s ago: executing program 3 (id=286): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x6c, 0x30, 0x17b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_bpf={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x0, 0x10000000}}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x20011814) r5 = syz_io_uring_setup(0x5683, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x22}, &(0x7f00000001c0), &(0x7f0000000240)) ppoll(&(0x7f0000000140)=[{r5}], 0x1, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0x3734, &(0x7f0000000580)={0x0, 0x139b, 0x4, 0x1, 0x16a, 0x0, r5}, &(0x7f0000000600), &(0x7f0000000900)) syz_io_uring_setup(0x7dc0, &(0x7f0000000880)={0x0, 0x5, 0x20000, 0x2, 0x2000000, 0x0, r6}, &(0x7f0000000780), 0x0) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r7}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r8, 0x58, &(0x7f0000000500)}, 0x10) syz_io_uring_setup(0x1868, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x10}, &(0x7f0000000700)=0x0, 0x0) syz_io_uring_submit(r9, 0x0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) gettid() socket$can_j1939(0x1d, 0x2, 0x7) 49.473887518s ago: executing program 1 (id=287): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @local}, 0xc) (async) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000180)='vlan1\x00') (async) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x60, r1, 0x1, 0x14, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x200, @dev={0xfe, 0x80, '\x00', 0x39}, 0x1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) (async) openat$vicodec0(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000013c4c20c215dcff1ba4010203010902"], 0x0) (async) socket(0x2, 0x80805, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$netlink(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) fsopen(&(0x7f0000000140)='btrfs\x00', 0x0) (async) socket$netlink(0x10, 0x3, 0xa) socket$kcm(0x2b, 0x1, 0x0) (async) socket$netlink(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES16=r3], 0x5c}, 0x1, 0xfffffffffffffc00, 0x0, 0x4000800}, 0x140cc014) 48.728794441s ago: executing program 4 (id=288): read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) dup2(0xffffffffffffffff, 0xffffffffffffffff) 43.52959542s ago: executing program 2 (id=289): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$inet(0xa, 0x801, 0x84) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r3 = accept(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18}], 0x1d}], 0x1, 0x0) recvmsg(r3, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) 43.241510199s ago: executing program 4 (id=290): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000a5"], 0x48) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$msr(r0, &(0x7f0000000180)=""/174, 0xae) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0xb62, &(0x7f00000000c0)={0x0, 0x5c6, 0x808, 0xffffffff, 0x201}, &(0x7f0000000040)=0x0, &(0x7f0000000340)=0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000506000/0x1000)=nil, 0x1000, 0x4, 0x20010, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd, 0xc9a, 0x0, 0x8, 0x1, 0x1, {0x0, r7}}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0xd0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000000100000811000009005c0001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r10}, 0x38) r11 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000280)={{0x0, 0x5, 0xeb2c, 0x100, 0x0, 0x5, 0x7, 0x8, 0xff, 0x3ff, 0x4000, 0x4, 0x7, 0x4, 0xfffffffffffffffd}, 0x10, [0x0, 0x0]}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001e0001db"], 0x48}, 0x1, 0x0, 0x0, 0x4048050}, 0x20000800) readv(r13, &(0x7f00000012c0)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1) ioctl$BTRFS_IOC_INO_LOOKUP(r11, 0xd0009412, &(0x7f0000000480)={r12, 0x9d5}) 42.511500839s ago: executing program 1 (id=291): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616d00010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000600)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 42.492129615s ago: executing program 3 (id=292): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x82, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x60, r4, 0x20, 0x3, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x2c, 0x51, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_IDX={0x2b, 0x2, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "a3446ceb1c5a6525e8f56e2add"}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r6, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') sendfile(r6, r7, 0x0, 0xffffffff000) recvmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x19, 0x0, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x240, 0x0, 0x0, 0x0, 0x40, 0x1e71, 0x2011, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x60, 0xd, [{{0x9, 0x4, 0x0, 0x10, 0x1, 0x3, 0x1, 0x0, 0x5, {0x9, 0x21, 0x8, 0x2, 0x1, {0x22, 0x63f}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x32, 0x5c, 0xaf}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x0, 0x40, 0x9}}]}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x6, 0x5, 0xd8, 0x8, 0x7f}, 0x138, &(0x7f0000000500)={0x5, 0xf, 0x138, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x80, "ce53281059d463efcf3b413a796e14d3"}, @generic={0xfa, 0x10, 0xb, "2c93546ca76d01ca92acf92e00dca480ecee3c88d55c7ed02ef22b852826166224cff7897233acf55698353e9720eeb41304a202c9fcc8c6a8b82705d7a50f87201ecc759296cc506c3e82542c6b8198d634002c8df95f659d17332f483e55e54bf63c90b4ce3f2dcf139d0791f07cdda9f3ced2b7a911b200d67fa7f09325b452be9bfb48651f29c0205d139e9344c1e0870e2d64378a84e08a30e4936d371459d75aacc94a61bef2501e207486d116c2ac8227c8e1f1b5bf99064e982f5cab3f98f31df1d48a58533750235d6ce3a0e96288971c1c57147cba714ab7a519c3d5c6d9e38a9048985c5794d2f1a3931f85825d662372cb"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x2, 0xf, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xaf19e6747e33d330, 0x1, 0x4, 0x7fff}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x7, 0x9, 0x400}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0x6, 0x0, 0x8000}]}, 0x1, [{0xac, &(0x7f0000000140)=@string={0xac, 0x3, "a54072f688af04b977231ac6dc32b26256d396b5156808fdb4477b09429bcc907d72fa5d128e2d8bae9dc270a1901aeb1ab64d398af539e90758e3e4ba33936108648009f26f78402e282a36aeec606b3978702adec090babf2d7a7f4eadbc100591bcdd0acb3338d90495fb04695be68c7b06ae812058cc6b6349bf7d73fcfd573c1733af4e094d16d0be945f0ea8717e0494aa48e2deeb233f380ea887bc7d301d6a51c13bd00b3009"}}]}) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='global_dirty_state\x00', r9}, 0x10) capset(0x0, 0x0) connect$802154_dgram(r1, &(0x7f0000000280)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14) sendfile(r8, r8, 0x0, 0x200000) 0s ago: executing program 32 (id=285): ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r3, 0xc0403d11, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r6, &(0x7f0000000040), 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8814}, 0x800) getsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f00000006c0), &(0x7f0000000140)=0x8) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0x0, 0xffffffff, 0xffffffff, 0x108, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@empty, [0x1fe, 0xff000000, 0xffffff00, 0xff], 0x4e21, 0x4e23, 0x4e22, 0x4e21, 0xd04, 0x7f, 0x0, 0x6, 0x8}}}, {{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff], [0xffffff00], 'wg1\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x3, 0x0, 0x50}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'virt_wifi0\x00', {0x0, 0x0, 0x40004, 0x0, 0xffffffff, 0x7, 0x3ff, 0x98}, {0xfffffffffffffffe}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000080)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, 0x5, 0x0, 0x1, 0x100, 0x5, 0x44280000}) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.70' (ED25519) to the list of known hosts. [ 81.285901][ T5821] cgroup: Unknown subsys name 'net' [ 81.481548][ T5821] cgroup: Unknown subsys name 'cpuset' [ 81.490803][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.997815][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.721513][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.730992][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.739212][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.746977][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.766650][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.777053][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.784914][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.793441][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.801061][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.810993][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.819547][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.829475][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.837399][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.844878][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.852145][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.861414][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.862228][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.870424][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.877851][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.883890][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.894725][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.899044][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.913048][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.927063][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.934834][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.607868][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 86.665498][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 86.742975][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 86.936853][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 87.002877][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 87.038980][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.046348][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.058188][ T5838] bridge_slave_0: entered allmulticast mode [ 87.066771][ T5838] bridge_slave_0: entered promiscuous mode [ 87.179820][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.188732][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.196071][ T5838] bridge_slave_1: entered allmulticast mode [ 87.204237][ T5838] bridge_slave_1: entered promiscuous mode [ 87.230649][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.238297][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.245618][ T5844] bridge_slave_0: entered allmulticast mode [ 87.253949][ T5844] bridge_slave_0: entered promiscuous mode [ 87.282800][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.290392][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.298057][ T5831] bridge_slave_0: entered allmulticast mode [ 87.305876][ T5831] bridge_slave_0: entered promiscuous mode [ 87.349681][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.356906][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.369532][ T5844] bridge_slave_1: entered allmulticast mode [ 87.377412][ T5844] bridge_slave_1: entered promiscuous mode [ 87.390885][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.398154][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.405456][ T5831] bridge_slave_1: entered allmulticast mode [ 87.412820][ T5831] bridge_slave_1: entered promiscuous mode [ 87.436690][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.502157][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.542490][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.572784][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.602170][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.628942][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.661286][ T5838] team0: Port device team_slave_0 added [ 87.682156][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.691622][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.699115][ T5836] bridge_slave_0: entered allmulticast mode [ 87.706558][ T5836] bridge_slave_0: entered promiscuous mode [ 87.753510][ T5838] team0: Port device team_slave_1 added [ 87.773145][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.780854][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.788334][ T5836] bridge_slave_1: entered allmulticast mode [ 87.795396][ T5836] bridge_slave_1: entered promiscuous mode [ 87.819588][ T5831] team0: Port device team_slave_0 added [ 87.825843][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.833203][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.840565][ T5837] bridge_slave_0: entered allmulticast mode [ 87.847753][ T5837] bridge_slave_0: entered promiscuous mode [ 87.869408][ T5844] team0: Port device team_slave_0 added [ 87.889704][ T5831] team0: Port device team_slave_1 added [ 87.898632][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.907975][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.915076][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.922711][ T5837] bridge_slave_1: entered allmulticast mode [ 87.931507][ T5837] bridge_slave_1: entered promiscuous mode [ 87.955324][ T5844] team0: Port device team_slave_1 added [ 87.968467][ T5849] Bluetooth: hci0: command tx timeout [ 87.974380][ T5841] Bluetooth: hci4: command tx timeout [ 87.980549][ T5849] Bluetooth: hci2: command tx timeout [ 88.007692][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.033686][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.040909][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.068138][ T5849] Bluetooth: hci1: command tx timeout [ 88.071874][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.074102][ T5841] Bluetooth: hci3: command tx timeout [ 88.099266][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.106260][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.132634][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.145751][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.152921][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.179446][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.216912][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.224277][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.251042][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.300245][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.319017][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.327028][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.354343][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.368249][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.375289][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.401488][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.418342][ T5836] team0: Port device team_slave_0 added [ 88.427107][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.475207][ T5836] team0: Port device team_slave_1 added [ 88.519545][ T5831] hsr_slave_0: entered promiscuous mode [ 88.526035][ T5831] hsr_slave_1: entered promiscuous mode [ 88.564502][ T5837] team0: Port device team_slave_0 added [ 88.573375][ T5837] team0: Port device team_slave_1 added [ 88.671543][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.679004][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.705379][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.723427][ T5838] hsr_slave_0: entered promiscuous mode [ 88.730639][ T5838] hsr_slave_1: entered promiscuous mode [ 88.736816][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.745079][ T5838] Cannot create hsr debugfs directory [ 88.787346][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.794690][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.820805][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.846381][ T5844] hsr_slave_0: entered promiscuous mode [ 88.855674][ T5844] hsr_slave_1: entered promiscuous mode [ 88.862682][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.870369][ T5844] Cannot create hsr debugfs directory [ 88.876774][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.884142][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.910405][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.966791][ T5836] hsr_slave_0: entered promiscuous mode [ 88.973860][ T5836] hsr_slave_1: entered promiscuous mode [ 88.980912][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.989249][ T5836] Cannot create hsr debugfs directory [ 88.995839][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.003283][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.029414][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.267863][ T5837] hsr_slave_0: entered promiscuous mode [ 89.275041][ T5837] hsr_slave_1: entered promiscuous mode [ 89.281942][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.289750][ T5837] Cannot create hsr debugfs directory [ 89.677671][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.693547][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.728443][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.755574][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.815726][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.865954][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.893405][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.913907][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.954140][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.983741][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.003637][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.028533][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.048655][ T5841] Bluetooth: hci4: command tx timeout [ 90.054235][ T5841] Bluetooth: hci2: command tx timeout [ 90.060760][ T5849] Bluetooth: hci0: command tx timeout [ 90.124120][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.128456][ T51] Bluetooth: hci1: command tx timeout [ 90.136344][ T5841] Bluetooth: hci3: command tx timeout [ 90.145140][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.159403][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.181566][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.283023][ T5837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.303904][ T5837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.314376][ T5837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.332402][ T5837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.373492][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.439219][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.460803][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.468231][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.494634][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.501885][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.571799][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.655225][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.689100][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.726697][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.761333][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.768613][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.804042][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.811282][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.831713][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.860249][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.867640][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.904168][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.911426][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.945127][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.964112][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.053626][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.060837][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.072373][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.079555][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.110612][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.136459][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.143700][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.165570][ T5838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.232689][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.240068][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.266855][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.546301][ T5831] veth0_vlan: entered promiscuous mode [ 91.624386][ T5831] veth1_vlan: entered promiscuous mode [ 91.661772][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.779334][ T5831] veth0_macvtap: entered promiscuous mode [ 91.814507][ T5831] veth1_macvtap: entered promiscuous mode [ 91.882355][ T5838] veth0_vlan: entered promiscuous mode [ 91.910532][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.931749][ T5838] veth1_vlan: entered promiscuous mode [ 91.947071][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.960038][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.981300][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.026168][ T5831] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.035893][ T5831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.046387][ T5831] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.058641][ T5831] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.129771][ T5841] Bluetooth: hci2: command tx timeout [ 92.130314][ T5838] veth0_macvtap: entered promiscuous mode [ 92.135357][ T5841] Bluetooth: hci0: command tx timeout [ 92.147940][ T51] Bluetooth: hci4: command tx timeout [ 92.152670][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.163333][ T43] cfg80211: failed to load regulatory.db [ 92.200175][ T5838] veth1_macvtap: entered promiscuous mode [ 92.208320][ T5849] Bluetooth: hci1: command tx timeout [ 92.213868][ T5841] Bluetooth: hci3: command tx timeout [ 92.316358][ T5836] veth0_vlan: entered promiscuous mode [ 92.355750][ T5844] veth0_vlan: entered promiscuous mode [ 92.386317][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.405235][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.442698][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.481492][ T5836] veth1_vlan: entered promiscuous mode [ 92.496040][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.504637][ T5844] veth1_vlan: entered promiscuous mode [ 92.518449][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.536832][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.580759][ T5838] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.596873][ T5838] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.606766][ T5838] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.615979][ T5838] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.680637][ T5844] veth0_macvtap: entered promiscuous mode [ 92.685431][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.705889][ T5844] veth1_macvtap: entered promiscuous mode [ 92.731398][ T5836] veth0_macvtap: entered promiscuous mode [ 92.847076][ T5836] veth1_macvtap: entered promiscuous mode [ 92.870802][ T5956] fuse: Bad value for 'fd' [ 92.884995][ T5837] veth0_vlan: entered promiscuous mode [ 92.896497][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.915023][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.925471][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.948403][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.971706][ T5837] veth1_vlan: entered promiscuous mode [ 93.000948][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.042974][ T5844] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.054317][ T5844] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.067102][ T5844] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.077130][ T5844] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.108646][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.120814][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.134081][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.136787][ T5836] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.152093][ T5836] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.163108][ T5836] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.172762][ T5836] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.380057][ T5837] veth0_macvtap: entered promiscuous mode [ 93.531434][ T5968] Bluetooth: (null): Out-of-order packet arrived (4 != 0) [ 93.559242][ T49] Bluetooth: (null): Invalid header checksum [ 93.630014][ T13] Bluetooth: (null): Invalid header checksum [ 93.686480][ T5837] veth1_macvtap: entered promiscuous mode [ 93.705970][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.715506][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.258364][ T5849] Bluetooth: hci4: command tx timeout [ 94.264118][ T5849] Bluetooth: hci2: command tx timeout [ 94.269670][ T5841] Bluetooth: hci0: command tx timeout [ 94.288142][ T5841] Bluetooth: hci1: command tx timeout [ 94.293799][ T5849] Bluetooth: hci3: command tx timeout [ 94.301764][ T49] Bluetooth: (null): Invalid header checksum [ 94.308731][ T49] Bluetooth: (null): Invalid header checksum [ 94.314974][ T49] Bluetooth: (null): Invalid header checksum [ 94.323993][ T49] Bluetooth: (null): Invalid header checksum [ 94.331099][ T49] Bluetooth: (null): Invalid header checksum [ 94.339080][ T49] Bluetooth: (null): Invalid header checksum [ 94.433939][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.460159][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.548001][ T5975] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10'. [ 94.555631][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.606209][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.635882][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.654070][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.657546][ T5975] syz.1.10: attempt to access beyond end of device [ 94.657546][ T5975] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 94.697910][ T5975] FAT-fs (loop3): unable to read boot sector [ 94.797999][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.806845][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.816520][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.825785][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.917873][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.926302][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.936228][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 95.029068][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.044900][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.339200][ T5837] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.437126][ T5837] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.517930][ T5837] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.611802][ T5837] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.854499][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.864115][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.928651][ T980] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.439078][ T980] usb 3-1: Using ep0 maxpacket: 8 [ 96.457843][ T980] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 24718, setting to 1024 [ 96.520986][ T980] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 96.598658][ T980] usb 3-1: config 0 interface 0 has no altsetting 0 [ 96.602664][ T5996] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13'. [ 96.619531][ T5996] netlink: 'syz.0.13': attribute type 7 has an invalid length. [ 96.619984][ T5987] Zero length message leads to an empty skb [ 96.627314][ T5996] netlink: 'syz.0.13': attribute type 8 has an invalid length. [ 96.627346][ T5996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13'. [ 96.646985][ T5996] gretap0: entered promiscuous mode [ 96.656042][ T980] usb 3-1: New USB device found, idVendor=056a, idProduct=00f6, bcdDevice= 0.00 [ 96.656744][ T5996] batadv_slave_1: entered promiscuous mode [ 96.666162][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.673861][ T5996] erspan0: entered promiscuous mode [ 96.696929][ T980] usb 3-1: config 0 descriptor?? [ 96.700249][ T5995] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.4'. [ 96.741098][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.766983][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.911088][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.931352][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.057870][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 100.784527][ T6006] tty tty4: ldisc open failed (-12), clearing slot 3 [ 100.930245][ T92] usb 3-1: USB disconnect, device number 2 [ 101.299221][ T6018] mmap: syz.4.5 (6018): VmData 21016576 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 101.334478][ T6021] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 102.510723][ T30] audit: type=1326 audit(1754603480.956:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6020 comm="syz.1.17" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e3978ebe9 code=0x0 [ 102.731753][ T6034] syz.3.18 uses obsolete (PF_INET,SOCK_PACKET) [ 106.487865][ T92] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 107.131610][ T6073] netlink: 60 bytes leftover after parsing attributes in process `syz.3.29'. [ 107.387838][ T92] usb 2-1: Using ep0 maxpacket: 8 [ 108.719771][ T92] usb 2-1: config 1 interface 0 has no altsetting 0 [ 108.799673][ T92] usb 2-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice= 0.40 [ 108.863188][ T92] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.882919][ T92] usb 2-1: Product: syz [ 108.906947][ T92] usb 2-1: Manufacturer: syz [ 108.921798][ T92] usb 2-1: SerialNumber: syz [ 109.037861][ T92] usb 2-1: can't set config #1, error -71 [ 109.076001][ T92] usb 2-1: USB disconnect, device number 2 [ 111.665149][ T6123] netlink: 28 bytes leftover after parsing attributes in process `syz.3.42'. [ 111.674362][ T6123] netlink: 28 bytes leftover after parsing attributes in process `syz.3.42'. [ 111.686197][ T6123] Cannot find add_set index 0 as target [ 113.440160][ T6124] netlink: 60 bytes leftover after parsing attributes in process `syz.4.43'. [ 117.527667][ T5898] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 117.749796][ T6166] netlink: 28 bytes leftover after parsing attributes in process `syz.0.50'. [ 117.758742][ T6166] netlink: 28 bytes leftover after parsing attributes in process `syz.0.50'. [ 117.776791][ T6166] Cannot find add_set index 0 as target [ 118.237583][ T5898] usb 5-1: Using ep0 maxpacket: 8 [ 118.269683][ T5898] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 118.292794][ T5898] usb 5-1: config 0 has no interface number 0 [ 118.302500][ T5898] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 118.313785][ T5898] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 118.335530][ T5898] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 118.348149][ T5898] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 118.436968][ T5898] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 118.447120][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.459318][ T5898] usb 5-1: config 0 descriptor?? [ 118.476451][ T5898] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 118.634614][ T6175] sctp: [Deprecated]: syz.0.53 (pid 6175) Use of struct sctp_assoc_value in delayed_ack socket option. [ 118.634614][ T6175] Use struct sctp_sack_info instead [ 120.495604][ T6159] team0 (unregistering): Port device team_slave_0 removed [ 120.512499][ T6189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.55'. [ 120.576746][ T6159] team0 (unregistering): Port device team_slave_1 removed [ 121.127742][ T5898] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 121.349894][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 121.579638][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 121.604315][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.625415][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 121.643554][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 121.659809][ T5898] usb 3-1: Using ep0 maxpacket: 8 [ 121.662908][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.670967][ T5898] usb 3-1: unable to get BOS descriptor or descriptor too short [ 121.703059][ T9] usb 2-1: config 0 descriptor?? [ 121.740469][ T5898] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 121.774946][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 121.792266][ T5936] usb 5-1: USB disconnect, device number 2 [ 121.916311][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 121.928527][ T5936] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 121.937427][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 121.947388][ T5898] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 121.978534][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 122.046446][ T5898] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 122.068508][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 122.089951][ T5898] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 122.104072][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.112865][ T5898] usb 3-1: Product: syz [ 122.127598][ T5898] usb 3-1: Manufacturer: syz [ 122.133270][ T5898] usb 3-1: SerialNumber: syz [ 122.140985][ T5898] usb 3-1: config 0 descriptor?? [ 122.148756][ T6192] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 122.163756][ T5898] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 122.365291][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 122.389142][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 122.428484][ T6192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.817015][ T6192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.819740][ T9] usb 2-1: USB disconnect, device number 3 [ 123.006820][ T6023] udevd[6023]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 123.097274][ T5898] usb 3-1: USB disconnect, device number 3 [ 124.572956][ T6234] process 'syz.4.69' launched './file1' with NULL argv: empty string added [ 124.777625][ T92] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 125.157616][ T92] usb 2-1: Using ep0 maxpacket: 16 [ 125.320047][ T92] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.571948][ T92] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.665780][ T92] usb 2-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice= 0.00 [ 125.849564][ T92] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.865351][ T92] usb 2-1: config 0 descriptor?? [ 126.442693][ T6232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.508183][ T6232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.045216][ T92] apple 0003:05AC:0246.0002: unknown global tag 0xc [ 127.068224][ T92] apple 0003:05AC:0246.0002: item 0 2 1 12 parsing failed [ 127.076149][ T92] apple 0003:05AC:0246.0002: parse failed [ 127.084026][ T92] apple 0003:05AC:0246.0002: probe with driver apple failed with error -22 [ 127.239472][ T5949] usb 2-1: USB disconnect, device number 4 [ 131.759249][ T6293] tmpfs: Bad value for 'mpol' [ 132.740133][ T6293] tmpfs: Bad value for 'mpol' [ 133.019613][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 133.094899][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.104915][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.250722][ T10] usb 1-1: device descriptor read/64, error -71 [ 133.367620][ T92] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 133.497617][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 133.517681][ T92] usb 4-1: device descriptor read/64, error -71 [ 133.517787][ T5949] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 133.647765][ T10] usb 1-1: device descriptor read/64, error -71 [ 133.711817][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 133.723440][ T5949] usb 3-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 133.796851][ T92] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 133.838897][ T10] usb usb1-port1: attempt power cycle [ 133.847174][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.893408][ T5949] usb 3-1: config 0 descriptor?? [ 133.921817][ T6307] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 133.977996][ T92] usb 4-1: device descriptor read/64, error -71 [ 134.182730][ T92] usb usb4-port1: attempt power cycle [ 134.537631][ T92] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 134.712321][ T92] usb 4-1: device descriptor read/8, error -71 [ 134.982966][ T5949] belkin 0003:050D:3201.0003: unknown main item tag 0x2 [ 135.027788][ T5949] belkin 0003:050D:3201.0003: unknown main item tag 0x0 [ 135.561036][ T5949] belkin 0003:050D:3201.0003: hiddev0,hidraw0: USB HID v1.01 Device [HID 050d:3201] on usb-dummy_hcd.2-1/input0 [ 135.627662][ T92] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 135.643866][ T6323] block device autoloading is deprecated and will be removed. [ 135.682578][ T5936] usb 3-1: USB disconnect, device number 4 [ 135.692759][ T92] usb 4-1: device descriptor read/8, error -71 [ 135.819678][ T92] usb usb4-port1: unable to enumerate USB device [ 135.858241][ T6330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.92'. [ 135.906958][ T6331] fido_id[6331]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 136.060275][ T6330] ======================================================= [ 136.060275][ T6330] WARNING: The mand mount option has been deprecated and [ 136.060275][ T6330] and is ignored by this kernel. Remove the mand [ 136.060275][ T6330] option from the mount to silence this warning. [ 136.060275][ T6330] ======================================================= [ 137.279304][ T6341] capability: warning: `syz.4.96' uses deprecated v2 capabilities in a way that may be insecure [ 138.082498][ T6349] netlink: 60 bytes leftover after parsing attributes in process `syz.1.98'. [ 138.362118][ T6355] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 139.633724][ T6359] netlink: 'syz.3.101': attribute type 10 has an invalid length. [ 139.758927][ T6365] QAT: Device 7 not found [ 140.104314][ T6359] netlink: 40 bytes leftover after parsing attributes in process `syz.3.101'. [ 141.649458][ T6359] batman_adv: batadv0: Adding interface: virt_wifi0 [ 141.656301][ T6359] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.724798][ T6359] batman_adv: batadv0: Interface activated: virt_wifi0 [ 141.816625][ T6374] netlink: 'syz.1.105': attribute type 1 has an invalid length. [ 141.845206][ T6374] netlink: 228 bytes leftover after parsing attributes in process `syz.1.105'. [ 142.586927][ T6386] netlink: 16 bytes leftover after parsing attributes in process `syz.4.108'. [ 144.527936][ T6397] netlink: 60 bytes leftover after parsing attributes in process `syz.3.110'. [ 145.032194][ T6405] netlink: 28 bytes leftover after parsing attributes in process `syz.4.113'. [ 145.032302][ T6405] netlink: 28 bytes leftover after parsing attributes in process `syz.4.113'. [ 145.037852][ T6405] Cannot find add_set index 0 as target [ 145.576120][ T6409] netlink: 288 bytes leftover after parsing attributes in process `syz.3.115'. [ 146.119015][ T6421] netlink: 228 bytes leftover after parsing attributes in process `syz.3.117'. [ 146.419164][ T30] audit: type=1326 audit(1754603525.006:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6417 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e458ebe9 code=0x7ffc0000 [ 146.584085][ T30] audit: type=1326 audit(1754603525.036:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6417 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e458ebe9 code=0x7ffc0000 [ 147.093995][ T6436] netlink: 12 bytes leftover after parsing attributes in process `syz.0.120'. [ 147.695046][ T6435] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 150.099857][ T6453] netlink: 60 bytes leftover after parsing attributes in process `syz.1.126'. [ 150.901708][ T30] audit: type=1326 audit(1754603529.536:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6470 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7c638ebe9 code=0x7ffc0000 [ 150.950369][ T30] audit: type=1326 audit(1754603529.536:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6470 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7c638ebe9 code=0x7ffc0000 [ 150.980259][ T6469] netlink: 24 bytes leftover after parsing attributes in process `syz.4.130'. [ 151.100514][ T6474] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.108960][ T30] audit: type=1326 audit(1754603529.536:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6470 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7fc7c638ebe9 code=0x7ffc0000 [ 151.217995][ T30] audit: type=1326 audit(1754603529.536:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6470 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7c638ebe9 code=0x7ffc0000 [ 151.242385][ T6479] FAULT_INJECTION: forcing a failure. [ 151.242385][ T6479] name failslab, interval 1, probability 0, space 0, times 1 [ 151.358411][ T6479] CPU: 1 UID: 0 PID: 6479 Comm: syz.3.132 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 151.358438][ T6479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 151.358456][ T6479] Call Trace: [ 151.358468][ T6479] [ 151.358477][ T6479] dump_stack_lvl+0x189/0x250 [ 151.358504][ T6479] ? __pfx____ratelimit+0x10/0x10 [ 151.358525][ T6479] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.358546][ T6479] ? __pfx__printk+0x10/0x10 [ 151.358573][ T6479] ? __pfx___might_resched+0x10/0x10 [ 151.358594][ T6479] ? fs_reclaim_acquire+0x7d/0x100 [ 151.358623][ T6479] should_fail_ex+0x414/0x560 [ 151.358650][ T6479] should_failslab+0xa8/0x100 [ 151.358691][ T6479] __kmalloc_cache_noprof+0x70/0x3d0 [ 151.358711][ T6479] ? snd_mixer_oss_get_volume1_sw+0xf6/0x470 [ 151.358737][ T6479] snd_mixer_oss_get_volume1_sw+0xf6/0x470 [ 151.358772][ T6479] snd_mixer_oss_get_recsrc1_sw+0x8f/0x140 [ 151.358797][ T6479] snd_mixer_oss_set_recsrc+0x305/0x400 [ 151.358824][ T6479] ? __pfx_snd_mixer_oss_set_recsrc+0x10/0x10 [ 151.358849][ T6479] ? __might_fault+0xb0/0x130 [ 151.358878][ T6479] snd_mixer_oss_ioctl1+0xebd/0x18b0 [ 151.358904][ T6479] ? __pfx_snd_mixer_oss_ioctl1+0x10/0x10 [ 151.358928][ T6479] ? smack_file_ioctl+0x2a9/0x340 [ 151.358951][ T6479] ? __pfx_smack_file_ioctl+0x10/0x10 [ 151.358987][ T6479] ? __fget_files+0x2a/0x420 [ 151.359006][ T6479] ? __fget_files+0x3a0/0x420 [ 151.359024][ T6479] ? __fget_files+0x2a/0x420 [ 151.359047][ T6479] ? __pfx_snd_mixer_oss_ioctl+0x10/0x10 [ 151.359065][ T6479] snd_mixer_oss_ioctl+0x45/0x60 [ 151.359085][ T6479] __se_sys_ioctl+0xfc/0x170 [ 151.359117][ T6479] do_syscall_64+0xfa/0x3b0 [ 151.359137][ T6479] ? lockdep_hardirqs_on+0x9c/0x150 [ 151.359158][ T6479] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.359177][ T6479] ? clear_bhb_loop+0x60/0xb0 [ 151.359201][ T6479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.359219][ T6479] RIP: 0033:0x7fc7c638ebe9 [ 151.359242][ T6479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.359258][ T6479] RSP: 002b:00007fc7c715f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 151.359279][ T6479] RAX: ffffffffffffffda RBX: 00007fc7c65b6090 RCX: 00007fc7c638ebe9 [ 151.359294][ T6479] RDX: 0000200000004000 RSI: 00000000c0044dff RDI: 0000000000000006 [ 151.359306][ T6479] RBP: 00007fc7c715f090 R08: 0000000000000000 R09: 0000000000000000 [ 151.359318][ T6479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 151.359330][ T6479] R13: 00007fc7c65b6128 R14: 00007fc7c65b6090 R15: 00007fffb73618b8 [ 151.359363][ T6479] [ 151.445444][ T6472] block nbd64: NBD_DISCONNECT [ 151.642248][ T6472] udevd[6472]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 152.587154][ T6499] netlink: 20 bytes leftover after parsing attributes in process `syz.0.135'. [ 156.016215][ T30] audit: type=1326 audit(1754603534.686:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6528 comm="syz.2.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a938ebe9 code=0x7ffc0000 [ 156.107649][ T30] audit: type=1326 audit(1754603534.686:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6528 comm="syz.2.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f25a938ebe9 code=0x7ffc0000 [ 156.295209][ T30] audit: type=1326 audit(1754603534.686:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6528 comm="syz.2.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a938ebe9 code=0x7ffc0000 [ 156.316814][ T30] audit: type=1326 audit(1754603534.686:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6528 comm="syz.2.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a938ebe9 code=0x7ffc0000 [ 156.407220][ T6536] netlink: 68 bytes leftover after parsing attributes in process `syz.0.144'. [ 156.963063][ T6534] netlink: 60 bytes leftover after parsing attributes in process `syz.0.144'. [ 160.139111][ T6559] veth0_to_team: entered promiscuous mode [ 160.144933][ T6559] veth0_to_team: entered allmulticast mode [ 161.287695][ T30] audit: type=1326 audit(1754603539.956:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6575 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a938ebe9 code=0x7ffc0000 [ 161.426454][ T30] audit: type=1326 audit(1754603539.986:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6575 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a938ebe9 code=0x7ffc0000 [ 161.463396][ T30] audit: type=1326 audit(1754603539.986:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6575 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f25a938ebe9 code=0x7ffc0000 [ 161.485462][ T30] audit: type=1326 audit(1754603539.986:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6575 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a938ebe9 code=0x7ffc0000 [ 161.507165][ C0] vkms_vblank_simulate: vblank timer overrun [ 161.515799][ T30] audit: type=1326 audit(1754603539.986:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6575 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a938ebe9 code=0x7ffc0000 [ 162.932384][ T6586] netlink: 68 bytes leftover after parsing attributes in process `syz.1.157'. [ 162.995934][ T6588] netlink: 60 bytes leftover after parsing attributes in process `syz.1.157'. [ 163.741045][ T6595] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.706321][ T6603] netlink: 'syz.0.162': attribute type 38 has an invalid length. [ 164.722287][ T6603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.162'. [ 166.412834][ T6610] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 166.527796][ T980] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 166.728509][ T980] usb 5-1: Using ep0 maxpacket: 16 [ 166.794683][ T980] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 166.898239][ T980] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.021103][ T980] usb 5-1: config 0 has no interface number 0 [ 167.205681][ T980] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 167.847514][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.855598][ T980] usb 5-1: Product: syz [ 167.871187][ T980] usb 5-1: Manufacturer: syz [ 167.881157][ T980] usb 5-1: SerialNumber: syz [ 167.901943][ T980] usb 5-1: config 0 descriptor?? [ 167.955967][ T980] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 168.099955][ T980] usb 5-1: No valid video chain found. [ 168.140419][ T980] usb 5-1: USB disconnect, device number 4 [ 168.348965][ T30] audit: type=1326 audit(1754603547.026:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6616 comm="syz.4.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e458ebe9 code=0x7ffc0000 [ 168.401343][ T6621] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 168.461200][ T30] audit: type=1326 audit(1754603547.026:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6616 comm="syz.4.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f93e458ebe9 code=0x7ffc0000 [ 168.505565][ T6621] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 168.595107][ T30] audit: type=1326 audit(1754603547.026:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6616 comm="syz.4.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e458ebe9 code=0x7ffc0000 [ 169.282971][ T6629] netlink: 28 bytes leftover after parsing attributes in process `syz.2.169'. [ 169.292122][ T6629] netlink: 28 bytes leftover after parsing attributes in process `syz.2.169'. [ 169.305220][ T6629] Cannot find add_set index 0 as target [ 170.347808][ T6630] netlink: 68 bytes leftover after parsing attributes in process `syz.4.170'. [ 170.409918][ T6631] netlink: 60 bytes leftover after parsing attributes in process `syz.4.170'. [ 174.349366][ T6658] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 174.843435][ T6635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.172'. [ 174.942793][ T6665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.178'. [ 175.866488][ T6665] dummy0: entered promiscuous mode [ 176.582886][ T6673] sctp: failed to load transform for md5: -2 [ 177.555237][ T6685] FAULT_INJECTION: forcing a failure. [ 177.555237][ T6685] name failslab, interval 1, probability 0, space 0, times 0 [ 177.837144][ T6689] netlink: 28 bytes leftover after parsing attributes in process `syz.3.182'. [ 177.846326][ T6689] netlink: 28 bytes leftover after parsing attributes in process `syz.3.182'. [ 177.856867][ T6689] Cannot find add_set index 0 as target [ 177.863426][ T6685] CPU: 0 UID: 0 PID: 6685 Comm: syz.0.183 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 177.863452][ T6685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 177.863464][ T6685] Call Trace: [ 177.863471][ T6685] [ 177.863480][ T6685] dump_stack_lvl+0x189/0x250 [ 177.863507][ T6685] ? __pfx____ratelimit+0x10/0x10 [ 177.863528][ T6685] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.863550][ T6685] ? __pfx__printk+0x10/0x10 [ 177.863587][ T6685] ? __pfx___might_resched+0x10/0x10 [ 177.863608][ T6685] ? fs_reclaim_acquire+0x7d/0x100 [ 177.863636][ T6685] should_fail_ex+0x414/0x560 [ 177.863662][ T6685] should_failslab+0xa8/0x100 [ 177.863685][ T6685] __kmalloc_noprof+0xcb/0x4f0 [ 177.863702][ T6685] ? kfree+0x4d/0x440 [ 177.863727][ T6685] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 177.863755][ T6685] tomoyo_realpath_from_path+0xe3/0x5d0 [ 177.863782][ T6685] ? tomoyo_domain+0xda/0x130 [ 177.863813][ T6685] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 177.863833][ T6685] tomoyo_path_number_perm+0x1e8/0x5a0 [ 177.863857][ T6685] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 177.863896][ T6685] ? __lock_acquire+0xab9/0xd20 [ 177.863937][ T6685] ? __fget_files+0x2a/0x420 [ 177.863962][ T6685] ? __fget_files+0x2a/0x420 [ 177.863981][ T6685] ? __fget_files+0x3a0/0x420 [ 177.864001][ T6685] ? __fget_files+0x2a/0x420 [ 177.864026][ T6685] security_file_ioctl+0xcb/0x2d0 [ 177.864052][ T6685] __se_sys_ioctl+0x47/0x170 [ 177.864083][ T6685] do_syscall_64+0xfa/0x3b0 [ 177.864103][ T6685] ? lockdep_hardirqs_on+0x9c/0x150 [ 177.864123][ T6685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.864142][ T6685] ? clear_bhb_loop+0x60/0xb0 [ 177.864165][ T6685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.864183][ T6685] RIP: 0033:0x7fa11498ebe9 [ 177.864200][ T6685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.864216][ T6685] RSP: 002b:00007fa1157bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 177.864235][ T6685] RAX: ffffffffffffffda RBX: 00007fa114bb5fa0 RCX: 00007fa11498ebe9 [ 177.864250][ T6685] RDX: 0000200000000140 RSI: 000000004040534e RDI: 0000000000000003 [ 177.864262][ T6685] RBP: 00007fa1157bc090 R08: 0000000000000000 R09: 0000000000000000 [ 177.864274][ T6685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.864285][ T6685] R13: 00007fa114bb6038 R14: 00007fa114bb5fa0 R15: 00007ffd220d6a68 [ 177.864317][ T6685] [ 177.864373][ T6685] ERROR: Out of memory at tomoyo_realpath_from_path. [ 178.135410][ T6691] netlink: 68 bytes leftover after parsing attributes in process `syz.2.184'. [ 178.868182][ T6690] netlink: 60 bytes leftover after parsing attributes in process `syz.2.184'. [ 180.445060][ T6699] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 182.981942][ T6741] netlink: 512 bytes leftover after parsing attributes in process `syz.2.195'. [ 183.696482][ T6731] syz.4.193 (6731): drop_caches: 2 [ 183.887920][ T5898] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 183.964072][ T6747] netlink: 28 bytes leftover after parsing attributes in process `syz.0.196'. [ 183.973403][ T6747] netlink: 28 bytes leftover after parsing attributes in process `syz.0.196'. [ 183.992453][ T6747] Cannot find add_set index 0 as target [ 184.480534][ T5898] usb 3-1: config 8 has an invalid interface number: 220 but max is 1 [ 184.522552][ T5898] usb 3-1: config 8 has an invalid interface number: 203 but max is 1 [ 184.637693][ T5898] usb 3-1: config 8 has no interface number 0 [ 184.643843][ T5898] usb 3-1: config 8 has no interface number 1 [ 184.657671][ T5898] usb 3-1: config 8 interface 220 has no altsetting 0 [ 184.664639][ T5898] usb 3-1: config 8 interface 203 has no altsetting 0 [ 184.720360][ T5898] usb 3-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice=16.fc [ 184.971176][ T6755] netlink: 68 bytes leftover after parsing attributes in process `syz.0.197'. [ 185.439060][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.461908][ T6752] netlink: 60 bytes leftover after parsing attributes in process `syz.0.197'. [ 185.472821][ T5898] usb 3-1: Product: syz [ 185.477251][ T5898] usb 3-1: Manufacturer: syz [ 185.487930][ T5898] usb 3-1: SerialNumber: syz [ 185.553328][ T6754] syz.3.198: attempt to access beyond end of device [ 185.553328][ T6754] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 185.589131][ T6754] SQUASHFS error: Failed to read block 0x0: -5 [ 185.736382][ T5898] usb 3-1: USB disconnect, device number 5 [ 185.761062][ T6754] unable to read squashfs_super_block [ 188.738313][ T6780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.205'. [ 190.537038][ T6785] hfsplus: unable to find HFS+ superblock [ 190.905867][ T6798] netlink: 28 bytes leftover after parsing attributes in process `syz.4.208'. [ 190.914941][ T6798] netlink: 28 bytes leftover after parsing attributes in process `syz.4.208'. [ 190.931644][ T6798] Cannot find add_set index 0 as target [ 191.655078][ T6801] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 193.415390][ T6808] netlink: 68 bytes leftover after parsing attributes in process `syz.4.210'. [ 193.478186][ T6809] netlink: 60 bytes leftover after parsing attributes in process `syz.4.210'. [ 194.543036][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.551868][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.008578][ T5898] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 196.123746][ T5898] usb 4-1: config 8 has an invalid interface number: 220 but max is 1 [ 196.146166][ T5898] usb 4-1: config 8 has an invalid interface number: 203 but max is 1 [ 196.172043][ T5898] usb 4-1: config 8 has no interface number 0 [ 196.180421][ T5898] usb 4-1: config 8 has no interface number 1 [ 196.186931][ T5898] usb 4-1: config 8 interface 220 has no altsetting 0 [ 196.199209][ T5898] usb 4-1: config 8 interface 203 has no altsetting 0 [ 196.211861][ T5898] usb 4-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice=16.fc [ 196.236269][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.804766][ T5898] usb 4-1: Product: syz [ 196.810756][ T5898] usb 4-1: Manufacturer: syz [ 196.817851][ T5898] usb 4-1: SerialNumber: syz [ 196.836483][ T5898] usb 4-1: can't set config #8, error -71 [ 196.908556][ T5898] usb 4-1: USB disconnect, device number 6 [ 197.058897][ T6838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.219'. [ 198.259785][ T6855] ieee802154 phy0 wpan0: encryption failed: -90 [ 198.267921][ T6855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.221'. [ 200.118613][ T30] audit: type=1326 audit(1754603578.786:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6873 comm="syz.2.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a938ebe9 code=0x7ffc0000 [ 200.177295][ T6877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.226'. [ 200.190030][ T6878] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 200.339232][ T30] audit: type=1326 audit(1754603578.786:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6873 comm="syz.2.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f25a938ebe9 code=0x7ffc0000 [ 201.388787][ T30] audit: type=1326 audit(1754603578.786:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6873 comm="syz.2.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a938ebe9 code=0x7ffc0000 [ 204.397427][ T5949] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 205.109965][ T5949] usb 4-1: config 8 has an invalid interface number: 220 but max is 1 [ 205.124179][ T5949] usb 4-1: config 8 has an invalid interface number: 203 but max is 1 [ 205.133188][ T5949] usb 4-1: config 8 has no interface number 0 [ 205.140080][ T5949] usb 4-1: config 8 has no interface number 1 [ 205.146396][ T5949] usb 4-1: config 8 interface 220 has no altsetting 0 [ 205.153545][ T5949] usb 4-1: config 8 interface 203 has no altsetting 0 [ 205.175982][ T5949] usb 4-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice=16.fc [ 205.287602][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.409106][ T5949] usb 4-1: Product: syz [ 205.413349][ T5949] usb 4-1: Manufacturer: syz [ 205.427556][ T5949] usb 4-1: SerialNumber: syz [ 205.485849][ T5949] usb 4-1: can't set config #8, error -71 [ 205.515638][ T5949] usb 4-1: USB disconnect, device number 7 [ 205.818612][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 205.847603][ T30] audit: type=1326 audit(1754603584.506:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6935 comm="syz.4.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e458ebe9 code=0x7ffc0000 [ 205.945191][ T30] audit: type=1326 audit(1754603584.506:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6935 comm="syz.4.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e458ebe9 code=0x7ffc0000 [ 206.084441][ T30] audit: type=1326 audit(1754603584.516:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6935 comm="syz.4.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f93e458ebe9 code=0x7ffc0000 [ 206.134834][ T30] audit: type=1326 audit(1754603584.516:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6935 comm="syz.4.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e458ebe9 code=0x7ffc0000 [ 206.177710][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 206.203699][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 206.225731][ T30] audit: type=1326 audit(1754603584.516:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6935 comm="syz.4.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e458ebe9 code=0x7ffc0000 [ 206.265723][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.296891][ T9] usb 2-1: Product: syz [ 206.311381][ T9] usb 2-1: Manufacturer: syz [ 206.323203][ T9] usb 2-1: SerialNumber: syz [ 206.345235][ T9] usb 2-1: config 0 descriptor?? [ 207.297059][ T9] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 207.385058][ T6938] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 209.364551][ T9] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 209.514942][ T9] usb 2-1: USB disconnect, device number 5 [ 211.027614][ T5936] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 211.210867][ T5936] usb 4-1: config 8 has an invalid interface number: 220 but max is 1 [ 211.239893][ T5936] usb 4-1: config 8 has an invalid interface number: 203 but max is 1 [ 211.287612][ T30] audit: type=1326 audit(1754603589.946:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6990 comm="syz.4.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e458ebe9 code=0x7ffc0000 [ 211.319556][ T5936] usb 4-1: config 8 has no interface number 0 [ 211.396397][ T5936] usb 4-1: config 8 has no interface number 1 [ 211.458205][ T5936] usb 4-1: config 8 interface 220 has no altsetting 0 [ 211.763862][ T30] audit: type=1326 audit(1754603589.946:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6990 comm="syz.4.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e458ebe9 code=0x7ffc0000 [ 211.860276][ T5936] usb 4-1: config 8 interface 203 has no altsetting 0 [ 212.007898][ T5936] usb 4-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice=16.fc [ 212.020045][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.114477][ T5936] usb 4-1: Product: syz [ 212.182863][ T30] audit: type=1326 audit(1754603589.946:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6990 comm="syz.4.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f93e458ebe9 code=0x7ffc0000 [ 212.254347][ T5936] usb 4-1: Manufacturer: syz [ 212.299173][ T30] audit: type=1326 audit(1754603589.946:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6990 comm="syz.4.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e458ebe9 code=0x7ffc0000 [ 212.322226][ T5936] usb 4-1: SerialNumber: syz [ 212.447648][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 212.455460][ T5842] Bluetooth: hci4: command 0x0406 tx timeout [ 212.467364][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 212.468502][ T5852] Bluetooth: hci3: command 0x0406 tx timeout [ 212.604399][ T5936] usb 4-1: can't set config #8, error -71 [ 212.803352][ T5936] usb 4-1: USB disconnect, device number 8 [ 214.068264][ T5949] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 214.627652][ T5949] usb 5-1: Using ep0 maxpacket: 32 [ 214.654762][ T5949] usb 5-1: config 0 has an invalid interface number: 247 but max is 0 [ 214.677216][ T5949] usb 5-1: config 0 has no interface number 0 [ 214.841738][ T5949] usb 5-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 214.852682][ T5949] usb 5-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 214.872799][ T5949] usb 5-1: Product: syz [ 214.879548][ T5949] usb 5-1: Manufacturer: syz [ 214.897232][ T5949] usb 5-1: config 0 descriptor?? [ 214.968581][ T5936] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 215.728667][ T5936] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 215.755919][ T5936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 215.793805][ T5936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 215.891169][ T5936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 216.387834][ T5949] usb 5-1: USB disconnect, device number 5 [ 216.445881][ T5936] usb 4-1: string descriptor 0 read error: -71 [ 216.483983][ T5936] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 216.505932][ T7034] fuse: Unknown parameter 'user_id00000000000000000000' [ 216.546855][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.577742][ T7036] 9pnet: p9_errstr2errno: server reported unknown error Çpî‘AçÁ›¬ž [ 216.681164][ T5936] usb 4-1: config 0 descriptor?? [ 216.725015][ T5936] usb 4-1: can't set config #0, error -71 [ 216.739227][ T5936] usb 4-1: USB disconnect, device number 9 [ 217.092262][ T30] audit: type=1326 audit(1754603595.766:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7044 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7c638ebe9 code=0x7ffc0000 [ 217.251485][ T30] audit: type=1326 audit(1754603595.766:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7044 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7c638ebe9 code=0x7ffc0000 [ 217.357636][ T30] audit: type=1326 audit(1754603595.766:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7044 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7fc7c638ebe9 code=0x7ffc0000 [ 217.547872][ T30] audit: type=1326 audit(1754603595.766:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7044 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7c638ebe9 code=0x7ffc0000 [ 217.570193][ T30] audit: type=1326 audit(1754603595.766:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7044 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7c638ebe9 code=0x7ffc0000 [ 218.676095][ T7058] tipc: Started in network mode [ 218.681597][ T7058] tipc: Node identity 223c777b0433, cluster identity 4711 [ 218.835580][ T7058] tipc: Enabled bearer , priority 0 [ 218.852899][ T7062] syzkaller0: entered promiscuous mode [ 218.878124][ T7062] syzkaller0: entered allmulticast mode [ 218.941122][ T7065] Illegal XDP return value 4294967274 on prog (id 60) dev N/A, expect packet loss! [ 219.175042][ T7066] tipc: Resetting bearer [ 219.363090][ T7052] tipc: Resetting bearer [ 219.939175][ T5898] tipc: Node number set to 638547835 [ 220.016836][ T7052] tipc: Disabling bearer [ 220.051011][ T7073] bridge0: port 3(veth0_to_bridge) entered blocking state [ 220.060069][ T7073] bridge0: port 3(veth0_to_bridge) entered disabled state [ 220.143922][ T7073] veth0_to_bridge: entered allmulticast mode [ 220.216382][ T7073] veth0_to_bridge: entered promiscuous mode [ 220.239946][ T7073] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 220.279274][ T7073] bridge0: port 3(veth0_to_bridge) entered blocking state [ 220.287180][ T7073] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 220.895880][ T7083] netlink: 40 bytes leftover after parsing attributes in process `syz.1.272'. [ 221.775980][ T30] audit: type=1326 audit(1754603600.446:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7079 comm="syz.4.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e458ebe9 code=0x7ffc0000 [ 221.814279][ T30] audit: type=1326 audit(1754603600.446:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7079 comm="syz.4.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e458ebe9 code=0x7ffc0000 [ 221.836953][ T30] audit: type=1326 audit(1754603600.446:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7079 comm="syz.4.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f93e458ebe9 code=0x7ffc0000 [ 221.867774][ T30] audit: type=1326 audit(1754603600.476:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7079 comm="syz.4.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e458ebe9 code=0x7ffc0000 [ 222.198304][ T7094] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 222.965769][ T30] audit: type=1326 audit(1754603600.476:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7079 comm="syz.4.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e458ebe9 code=0x7ffc0000 [ 223.017584][ T5949] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 224.107560][ T5936] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 224.275210][ T5949] usb 1-1: Using ep0 maxpacket: 8 [ 224.724300][ T5949] usb 1-1: device descriptor read/all, error -71 [ 224.767774][ T5936] usb 4-1: Using ep0 maxpacket: 16 [ 224.802093][ T5936] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 224.826815][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.057732][ T5936] usb 4-1: Product: syz [ 225.062255][ T5936] usb 4-1: Manufacturer: syz [ 225.066872][ T5936] usb 4-1: SerialNumber: syz [ 225.137490][ T5936] r8152-cfgselector 4-1: Unknown version 0x0000 [ 225.254595][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 225.268060][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 225.280754][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 225.293425][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 225.306115][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 225.318756][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 225.331430][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 225.344075][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 225.356779][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 225.369436][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 225.640707][ T7124] FAULT_INJECTION: forcing a failure. [ 225.640707][ T7124] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 225.668245][ T7124] CPU: 1 UID: 0 PID: 7124 Comm: syz.2.284 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 225.668270][ T7124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 225.668280][ T7124] Call Trace: [ 225.668288][ T7124] [ 225.668295][ T7124] dump_stack_lvl+0x189/0x250 [ 225.668322][ T7124] ? __pfx____ratelimit+0x10/0x10 [ 225.668343][ T7124] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.668365][ T7124] ? __pfx__printk+0x10/0x10 [ 225.668389][ T7124] ? __might_fault+0xb0/0x130 [ 225.668421][ T7124] should_fail_ex+0x414/0x560 [ 225.668447][ T7124] _copy_from_user+0x2d/0xb0 [ 225.668474][ T7124] sctp_getsockopt_peer_addr_params+0x103/0xcc0 [ 225.668498][ T7124] ? trace_irq_disable+0x37/0x110 [ 225.668528][ T7124] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 225.668549][ T7124] ? __pfx_sctp_getsockopt_peer_addr_params+0x10/0x10 [ 225.668596][ T7124] ? sctp_getsockopt+0x7dc/0xb60 [ 225.668629][ T7124] sctp_getsockopt+0x7ed/0xb60 [ 225.668654][ T7124] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 225.668687][ T7124] do_sock_getsockopt+0x36f/0x450 [ 225.668718][ T7124] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 225.668745][ T7124] ? do_syscall_64+0x20/0x3b0 [ 225.668766][ T7124] ? __fget_files+0x3a0/0x420 [ 225.668787][ T7124] ? __fget_files+0x2a/0x420 [ 225.668816][ T7124] __x64_sys_getsockopt+0x1a5/0x250 [ 225.668843][ T7124] ? do_syscall_64+0x20/0x3b0 [ 225.668866][ T7124] ? do_syscall_64+0x20/0x3b0 [ 225.668891][ T7124] do_syscall_64+0xfa/0x3b0 [ 225.668913][ T7124] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.668931][ T7124] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 225.668949][ T7124] ? clear_bhb_loop+0x60/0xb0 [ 225.668973][ T7124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.668991][ T7124] RIP: 0033:0x7f25a938ebe9 [ 225.669013][ T7124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.669029][ T7124] RSP: 002b:00007f25aa27e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 225.669061][ T7124] RAX: ffffffffffffffda RBX: 00007f25a95b6180 RCX: 00007f25a938ebe9 [ 225.669075][ T7124] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000006 [ 225.669086][ T7124] RBP: 00007f25aa27e090 R08: 00002000000000c0 R09: 0000000000000000 [ 225.669099][ T7124] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 225.669111][ T7124] R13: 00007f25a95b6218 R14: 00007f25a95b6180 R15: 00007ffc2d71eca8 [ 225.669143][ T7124] [ 226.299885][ T5936] r8152-cfgselector 4-1: config 0 descriptor?? [ 228.331366][ T5936] r8152-cfgselector 4-1: can't set config #0, error -71 [ 228.507654][ T5936] r8152-cfgselector 4-1: USB disconnect, device number 10 [ 230.257536][ C1] net_ratelimit: 13384 callbacks suppressed [ 230.257551][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 230.276189][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 230.288676][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 230.301611][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 230.314283][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 230.326927][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 230.338960][ C1] sched: DL replenish lagged too much [ 230.344697][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 230.357387][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 230.369949][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 230.382542][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 230.995062][ T30] audit: type=1326 audit(1754603609.666:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7139 comm="syz.4.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e458ebe9 code=0x7ffc0000 [ 232.452096][ T30] audit: type=1326 audit(1754603609.696:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7139 comm="syz.4.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f93e458ebe9 code=0x7ffc0000 [ 233.276900][ T30] audit: type=1326 audit(1754603609.696:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7139 comm="syz.4.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e458ebe9 code=0x7ffc0000 [ 235.267552][ C1] net_ratelimit: 19397 callbacks suppressed [ 235.267576][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 235.286191][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.299118][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.311633][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 235.324031][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.336800][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.349448][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 235.362897][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.375486][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.388356][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 235.730268][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 235.741022][ T7144] netlink: 44 bytes leftover after parsing attributes in process `syz.4.290'. [ 240.074572][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 240.277671][ C1] net_ratelimit: 11368 callbacks suppressed [ 240.277691][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.296175][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 240.308756][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.321584][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.334076][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 240.346422][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.358848][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.371489][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 240.383993][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.396550][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.287760][ C1] net_ratelimit: 9662 callbacks suppressed [ 245.287781][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.306131][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 245.319151][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.331703][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.344335][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 245.356854][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.369406][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.382026][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 245.394447][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.406895][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.467690][ T9] usb 2-1: device descriptor read/all, error -110 [ 250.297759][ C1] net_ratelimit: 8272 callbacks suppressed [ 250.297780][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.316174][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.328636][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 250.341363][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.354236][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.367351][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 250.380412][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.392891][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.405483][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 250.418017][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.307486][ C1] net_ratelimit: 8405 callbacks suppressed [ 255.307507][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.326047][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.338508][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 255.350968][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.363477][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.377634][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 255.390058][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.402687][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.415155][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 255.427587][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.317770][ C1] net_ratelimit: 8723 callbacks suppressed [ 260.317791][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.336070][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.349068][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 260.361625][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.374149][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.386616][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 260.399135][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.411584][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.425873][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 260.438349][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.134159][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.153688][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.327633][ C1] net_ratelimit: 10015 callbacks suppressed [ 265.327653][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 265.346010][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.358523][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.371048][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 265.383491][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.396127][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.408699][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 265.421437][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.433908][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.446395][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 270.337686][ C1] net_ratelimit: 9839 callbacks suppressed [ 270.337706][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 270.355983][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.368565][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.381298][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 270.393864][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.406390][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.418936][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 270.431551][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.444213][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.456727][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 275.347639][ C1] net_ratelimit: 10217 callbacks suppressed [ 275.347672][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 275.366450][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.379146][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.391870][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 275.404282][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.416798][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.429457][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 275.441900][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.454520][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.467152][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 280.357587][ C1] net_ratelimit: 12196 callbacks suppressed [ 280.357609][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.376577][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 280.388994][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.401460][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.414497][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 280.427184][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.439934][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.452703][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 280.465224][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.477730][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.367685][ C1] net_ratelimit: 11918 callbacks suppressed [ 285.367705][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.386227][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 285.398873][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.411323][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.423972][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 285.436544][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.449068][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.461622][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 285.474611][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.487324][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.377648][ C1] net_ratelimit: 7958 callbacks suppressed [ 290.377669][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.396063][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 290.408589][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.421114][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.433602][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 290.446079][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.458660][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.471201][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 290.483636][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.496163][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.387476][ C1] net_ratelimit: 7984 callbacks suppressed [ 295.387496][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.406762][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.419433][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 295.432058][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.444675][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.457324][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 295.477785][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.491429][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.504051][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 295.516938][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.397651][ C1] net_ratelimit: 7964 callbacks suppressed [ 300.397672][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.416174][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.429854][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 300.442709][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.455738][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.468316][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 300.480926][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.494410][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.506984][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 300.519468][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.407704][ C1] net_ratelimit: 7982 callbacks suppressed [ 305.407727][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.426298][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.439301][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 305.452033][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.464663][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.477226][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 305.489850][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.502506][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.517826][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 305.530233][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.417744][ C1] net_ratelimit: 7998 callbacks suppressed [ 310.417765][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.436065][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 310.448571][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.461087][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.473688][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 310.486085][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.498609][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.511088][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 310.523563][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.536070][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.427661][ C1] net_ratelimit: 7958 callbacks suppressed [ 315.427682][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.446075][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 315.458480][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.470940][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.483429][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 315.496028][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.508511][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.520968][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 315.533371][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.545910][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.437552][ C1] net_ratelimit: 7983 callbacks suppressed [ 320.437572][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 320.456027][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.468543][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.481036][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 320.493422][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.505846][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.527815][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 320.540434][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.552966][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.566193][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 325.447688][ C1] net_ratelimit: 7964 callbacks suppressed [ 325.447709][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 325.465985][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.478426][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.490937][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 325.503501][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.515942][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.528390][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 325.540781][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.553257][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.565728][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 330.457734][ C1] net_ratelimit: 8005 callbacks suppressed [ 330.457755][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.476128][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 330.488535][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.501130][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.513703][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 330.526146][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.538589][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.551180][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 330.563633][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.576217][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.467650][ C1] net_ratelimit: 7965 callbacks suppressed [ 335.467672][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 335.486198][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.498859][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.511361][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 335.523756][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.536194][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.548667][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 335.567771][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.580214][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.593043][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 340.477646][ C1] net_ratelimit: 7995 callbacks suppressed [ 340.477678][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.496043][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 340.508682][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 340.521237][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.533799][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.546617][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 340.559064][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 340.571468][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.584103][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.596539][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 345.487552][ C1] net_ratelimit: 8013 callbacks suppressed [ 345.487572][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.505926][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.518772][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 345.531250][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 345.544020][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.556613][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.569167][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 345.588023][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 345.600462][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.612919][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.497567][ C1] net_ratelimit: 7988 callbacks suppressed [ 350.497587][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 350.515871][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 350.528444][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.541028][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.553435][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 350.565968][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 350.578527][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.597799][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.610541][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 350.623043][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 355.507595][ C1] net_ratelimit: 7961 callbacks suppressed [ 355.507615][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.526210][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 355.538682][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 355.551225][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.563711][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.576128][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 355.588541][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 355.600949][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.613600][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.626037][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 360.517584][ C1] net_ratelimit: 7981 callbacks suppressed [ 360.517604][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 360.535921][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 360.548487][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.561043][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 360.573650][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.586987][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 360.599449][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 360.611947][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.627884][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 360.640577][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.527767][ C1] net_ratelimit: 7998 callbacks suppressed [ 365.527787][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 365.546098][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.558489][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 365.571122][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 365.583578][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.596097][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 365.608665][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.621176][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 365.633615][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 365.646095][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.927474][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 366.934483][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5836/1:b..l [ 366.942843][ C1] rcu: (detected by 1, t=10502 jiffies, g=16705, q=680 ncpus=2) [ 366.950604][ C1] task:syz-executor state:R running task stack:21960 pid:5836 tgid:5836 ppid:5829 task_flags:0x400140 flags:0x00004002 [ 366.965161][ C1] Call Trace: [ 366.968482][ C1] [ 366.971437][ C1] __schedule+0x16aa/0x4c90 [ 366.976003][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 366.981331][ C1] ? __pfx___schedule+0x10/0x10 [ 366.986241][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 366.991571][ C1] preempt_schedule_irq+0xb5/0x150 [ 366.996738][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 367.002526][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 367.008479][ C1] irqentry_exit+0x6f/0x90 [ 367.012933][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 367.018939][ C1] RIP: 0010:unwind_next_frame+0x374/0x2390 [ 367.024810][ C1] Code: ea 48 01 d2 48 01 f2 48 bd 00 00 00 00 00 fc ff df 0f 84 37 01 00 00 4c 8d 62 04 4c 8d 6a 05 4c 89 e0 48 c1 e8 03 0f b6 04 28 <84> c0 0f 85 6d 19 00 00 4c 89 e8 48 c1 e8 03 0f b6 04 28 84 c0 0f [ 367.044546][ C1] RSP: 0018:ffffc9000414f078 EFLAGS: 00000a03 [ 367.050644][ C1] RAX: 0000000000000000 RBX: ffffffff8fbdeff8 RCX: ffffffff8fbdeffc [ 367.058645][ C1] RDX: ffffffff903e3fa0 RSI: ffffffff903e3fa0 RDI: ffffffff8be1b9e0 [ 367.066645][ C1] RBP: dffffc0000000000 R08: 0000000000000001 R09: ffffffff8172aae5 [ 367.074653][ C1] R10: ffffc9000414f198 R11: ffffffff81acfd40 R12: ffffffff903e3fa4 [ 367.082654][ C1] R13: ffffffff903e3fa5 R14: ffffc9000414f148 R15: ffffffff8fbdeff8 [ 367.090859][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 367.097235][ C1] ? unwind_next_frame+0xa5/0x2390 [ 367.102477][ C1] ? unwind_next_frame+0xd4/0x2390 [ 367.107628][ C1] ? unwind_next_frame+0xa5/0x2390 [ 367.112773][ C1] ? do_sys_openat2+0x121/0x1c0 [ 367.117661][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 367.123881][ C1] arch_stack_walk+0x11c/0x150 [ 367.128692][ C1] ? do_sys_openat2+0x121/0x1c0 [ 367.133579][ C1] stack_trace_save+0x9c/0xe0 [ 367.138301][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 367.143824][ C1] kasan_save_track+0x3e/0x80 [ 367.148648][ C1] ? kasan_save_track+0x3e/0x80 [ 367.153551][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 367.158339][ C1] ? __kmalloc_noprof+0x27a/0x4f0 [ 367.163391][ C1] ? tomoyo_encode+0x28b/0x550 [ 367.168187][ C1] ? tomoyo_realpath_from_path+0x58d/0x5d0 [ 367.174136][ C1] ? tomoyo_check_open_permission+0x1c1/0x3b0 [ 367.180240][ C1] ? security_file_open+0xb1/0x270 [ 367.185381][ C1] ? do_dentry_open+0x35e/0x1970 [ 367.190357][ C1] ? vfs_open+0x3b/0x340 [ 367.194653][ C1] ? path_openat+0x2ee5/0x3830 [ 367.199466][ C1] ? do_filp_open+0x1fa/0x410 [ 367.204189][ C1] ? do_sys_openat2+0x121/0x1c0 [ 367.209133][ C1] __kasan_kmalloc+0x93/0xb0 [ 367.213770][ C1] __kmalloc_noprof+0x27a/0x4f0 [ 367.218653][ C1] ? tomoyo_encode+0x28b/0x550 [ 367.223573][ C1] tomoyo_encode+0x28b/0x550 [ 367.228208][ C1] tomoyo_realpath_from_path+0x58d/0x5d0 [ 367.233902][ C1] tomoyo_check_open_permission+0x1c1/0x3b0 [ 367.239843][ C1] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 367.245947][ C1] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 367.252433][ C1] ? tomoyo_file_open+0x166/0x220 [ 367.257532][ C1] security_file_open+0xb1/0x270 [ 367.262560][ C1] do_dentry_open+0x35e/0x1970 [ 367.267396][ C1] vfs_open+0x3b/0x340 [ 367.271509][ C1] ? path_openat+0x2ecd/0x3830 [ 367.276339][ C1] path_openat+0x2ee5/0x3830 [ 367.281095][ C1] ? arch_stack_walk+0xfc/0x150 [ 367.286026][ C1] ? __pfx_path_openat+0x10/0x10 [ 367.291005][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.297133][ C1] do_filp_open+0x1fa/0x410 [ 367.301680][ C1] ? __lock_acquire+0xab9/0xd20 [ 367.306567][ C1] ? __pfx_do_filp_open+0x10/0x10 [ 367.311734][ C1] ? _raw_spin_unlock+0x28/0x50 [ 367.316641][ C1] ? alloc_fd+0x64c/0x6c0 [ 367.321266][ C1] do_sys_openat2+0x121/0x1c0 [ 367.326013][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 367.331256][ C1] ? __se_sys_clock_nanosleep+0x2f1/0x380 [ 367.337033][ C1] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 367.343144][ C1] __x64_sys_openat+0x138/0x170 [ 367.348045][ C1] do_syscall_64+0xfa/0x3b0 [ 367.352596][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.358799][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 367.365070][ C1] ? clear_bhb_loop+0x60/0xb0 [ 367.369777][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.375699][ C1] RIP: 0033:0x7fc7c638e4e1 [ 367.380140][ C1] RSP: 002b:00007fffb7361bd0 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 367.388585][ C1] RAX: ffffffffffffffda RBX: 00000000000000e5 RCX: 00007fc7c638e4e1 [ 367.396589][ C1] RDX: 0000000000090800 RSI: 00007fc7c641210e RDI: 00000000ffffff9c [ 367.404602][ C1] RBP: 00007fffb7361c7c R08: 0000000000000000 R09: 0000000000000000 [ 367.412656][ C1] R10: 0000000000000000 R11: 0000000000000287 R12: 000000000000003b [ 367.420652][ C1] R13: 0000000000000000 R14: 000000000003ae32 R15: 00007fffb7361cd0 [ 367.428668][ C1] [ 367.431713][ C1] rcu: rcu_preempt kthread starved for 4164 jiffies! g16705 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 367.442842][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 367.452848][ C1] rcu: RCU grace-period kthread stack dump: [ 367.458939][ C1] task:rcu_preempt state:R running task stack:26792 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 367.472494][ C1] Call Trace: [ 367.475797][ C1] [ 367.478755][ C1] __schedule+0x16aa/0x4c90 [ 367.483315][ C1] ? schedule+0x165/0x360 [ 367.487741][ C1] ? __pfx___schedule+0x10/0x10 [ 367.492669][ C1] ? schedule+0x91/0x360 [ 367.496948][ C1] schedule+0x165/0x360 [ 367.501216][ C1] schedule_timeout+0x12b/0x270 [ 367.506125][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 367.511537][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 367.517588][ C1] ? __pfx_process_timeout+0x10/0x10 [ 367.522915][ C1] ? prepare_to_swait_event+0x341/0x380 [ 367.528504][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 367.533401][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 367.538638][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 367.544877][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 367.550215][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 367.555457][ C1] ? finish_swait+0xcd/0x1f0 [ 367.560096][ C1] rcu_gp_kthread+0x99/0x390 [ 367.564716][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 367.569941][ C1] ? __kthread_parkme+0x7b/0x200 [ 367.574995][ C1] ? __kthread_parkme+0x1a1/0x200 [ 367.580063][ C1] kthread+0x70e/0x8a0 [ 367.584174][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 367.589505][ C1] ? __pfx_kthread+0x10/0x10 [ 367.594156][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 367.599394][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 367.604615][ C1] ? __pfx_kthread+0x10/0x10 [ 367.609237][ C1] ret_from_fork+0x3fc/0x770 [ 367.613922][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 367.619105][ C1] ? __switch_to_asm+0x39/0x70 [ 367.623932][ C1] ? __switch_to_asm+0x33/0x70 [ 367.628720][ C1] ? __pfx_kthread+0x10/0x10 [ 367.633353][ C1] ret_from_fork_asm+0x1a/0x30 [ 367.638176][ C1] [ 367.641222][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 367.647588][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 367.657171][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 367.667509][ C1] RIP: 0010:lock_acquire+0x175/0x360 [ 367.672838][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 6b 55 fe 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 367.692667][ C1] RSP: 0018:ffffc90000a07838 EFLAGS: 00000206 [ 367.698865][ C1] RAX: 16ded35c4cefcc00 RBX: 0000000000000000 RCX: 16ded35c4cefcc00 [ 367.706890][ C1] RDX: 0000000000000000 RSI: ffffffff8db6fcc6 RDI: ffffffff8be1ba40 [ 367.714897][ C1] RBP: ffffffff8172aae5 R08: 0000000000000000 R09: ffffffff8172aae5 [ 367.722987][ C1] R10: ffffc90000a079f8 R11: ffffffff81acfd40 R12: 0000000000000002 [ 367.730995][ C1] R13: ffffffff8e13f0e0 R14: 0000000000000000 R15: 0000000000000246 [ 367.739084][ C1] FS: 0000000000000000(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000 [ 367.748047][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 367.754658][ C1] CR2: 000020000001c000 CR3: 0000000075b0e000 CR4: 00000000003526f0 [ 367.762893][ C1] Call Trace: [ 367.766372][ C1] [ 367.769244][ C1] ? unwind_next_frame+0xa5/0x2390 [ 367.774397][ C1] ? handle_softirqs+0x283/0x870 [ 367.779375][ C1] ? unwind_next_frame+0xa5/0x2390 [ 367.784519][ C1] unwind_next_frame+0xc2/0x2390 [ 367.789498][ C1] ? unwind_next_frame+0xa5/0x2390 [ 367.794653][ C1] ? unwind_next_frame+0xa5/0x2390 [ 367.799807][ C1] ? net_rx_action+0x707/0xe30 [ 367.804618][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 367.810816][ C1] arch_stack_walk+0x11c/0x150 [ 367.815629][ C1] ? handle_softirqs+0x283/0x870 [ 367.820620][ C1] stack_trace_save+0x9c/0xe0 [ 367.825344][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 367.830853][ C1] ? __lock_acquire+0xab9/0xd20 [ 367.835757][ C1] kasan_save_track+0x3e/0x80 [ 367.840477][ C1] ? kasan_save_track+0x3e/0x80 [ 367.845360][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 367.850407][ C1] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 367.856077][ C1] ? skb_ext_add+0x1b6/0x8f0 [ 367.860711][ C1] ? br_nf_forward_ip+0xc6/0x7e0 [ 367.865676][ C1] ? nf_hook_slow+0xc5/0x220 [ 367.870300][ C1] ? NF_HOOK+0x215/0x3c0 [ 367.874569][ C1] ? __br_forward+0x41e/0x600 [ 367.879271][ C1] ? maybe_deliver+0xb5/0x160 [ 367.884063][ C1] ? br_flood+0x31a/0x6a0 [ 367.888418][ C1] ? br_handle_frame_finish+0x14b4/0x19b0 [ 367.894163][ C1] ? br_nf_hook_thresh+0x3c6/0x4a0 [ 367.899321][ C1] ? br_nf_pre_routing_finish_ipv6+0x948/0xd00 [ 367.905527][ C1] ? br_nf_pre_routing_ipv6+0x37e/0x6b0 [ 367.911158][ C1] ? br_handle_frame+0x97f/0x14c0 [ 367.916264][ C1] ? __netif_receive_skb_core+0x10e1/0x4180 [ 367.922193][ C1] ? __netif_receive_skb+0x72/0x380 [ 367.927421][ C1] ? process_backlog+0x60e/0x14f0 [ 367.932478][ C1] ? __napi_poll+0xc4/0x480 [ 367.937252][ C1] ? net_rx_action+0x707/0xe30 [ 367.942077][ C1] ? handle_softirqs+0x283/0x870 [ 367.947087][ C1] ? net_generic+0x1e/0x240 [ 367.951712][ C1] __kasan_slab_alloc+0x6c/0x80 [ 367.956593][ C1] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 367.962103][ C1] ? skb_ext_add+0x1b6/0x8f0 [ 367.966742][ C1] skb_ext_add+0x1b6/0x8f0 [ 367.971201][ C1] br_nf_forward_ip+0xc6/0x7e0 [ 367.976016][ C1] ? __pfx_br_nf_forward+0x10/0x10 [ 367.981162][ C1] nf_hook_slow+0xc5/0x220 [ 367.985609][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 367.991098][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 367.996593][ C1] NF_HOOK+0x215/0x3c0 [ 368.000703][ C1] ? NF_HOOK+0x9e/0x3c0 [ 368.004881][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 368.009515][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 368.015023][ C1] __br_forward+0x41e/0x600 [ 368.019593][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 368.025205][ C1] ? __pfx___br_forward+0x10/0x10 [ 368.030554][ C1] ? skb_clone+0x246/0x3a0 [ 368.035020][ C1] maybe_deliver+0xb5/0x160 [ 368.039567][ C1] br_flood+0x31a/0x6a0 [ 368.043971][ C1] br_handle_frame_finish+0x14b4/0x19b0 [ 368.049571][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 368.055511][ C1] ? ip6t_do_table+0x1db/0x1550 [ 368.060403][ C1] ? nf_hook_slow+0x176/0x220 [ 368.065120][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 368.071055][ C1] br_nf_hook_thresh+0x3c6/0x4a0 [ 368.076127][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 368.081657][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 368.087580][ C1] ? nf_nat_ipv6_in+0x1fc/0x2b0 [ 368.092470][ C1] br_nf_pre_routing_finish_ipv6+0x948/0xd00 [ 368.098516][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 368.104520][ C1] ? br_nf_pre_routing_ipv6+0x42f/0x6b0 [ 368.110305][ C1] br_nf_pre_routing_ipv6+0x37e/0x6b0 [ 368.116084][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 368.122109][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 368.128681][ C1] ? br_nf_pre_routing+0x720/0x1470 [ 368.134029][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 368.139582][ C1] br_handle_frame+0x97f/0x14c0 [ 368.144488][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 368.149813][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 368.155774][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 368.161104][ C1] __netif_receive_skb_core+0x10e1/0x4180 [ 368.166870][ C1] ? ip6_mc_input+0x9c3/0xbe0 [ 368.171579][ C1] ? kmem_cache_free+0x18f/0x400 [ 368.176765][ C1] ? ip6_mc_input+0x9c3/0xbe0 [ 368.181673][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 368.187952][ C1] ? ip6_rcv_finish+0x29a/0x2d0 [ 368.192858][ C1] ? NF_HOOK+0x30c/0x3a0 [ 368.197136][ C1] ? skb_orphan+0xaf/0xd0 [ 368.201585][ C1] ? __lock_acquire+0xab9/0xd20 [ 368.206503][ C1] ? process_backlog+0x2d5/0x14f0 [ 368.211661][ C1] ? process_backlog+0x2d5/0x14f0 [ 368.216912][ C1] __netif_receive_skb+0x72/0x380 [ 368.222022][ C1] ? process_backlog+0x2d5/0x14f0 [ 368.227179][ C1] process_backlog+0x60e/0x14f0 [ 368.232072][ C1] ? __lock_acquire+0xab9/0xd20 [ 368.236980][ C1] ? __pfx_process_backlog+0x10/0x10 [ 368.242311][ C1] __napi_poll+0xc4/0x480 [ 368.246690][ C1] ? net_rx_action+0x46d/0xe30 [ 368.251575][ C1] net_rx_action+0x707/0xe30 [ 368.256213][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 368.261465][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 368.266645][ C1] handle_softirqs+0x283/0x870 [ 368.271444][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 368.276257][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 368.281691][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 368.286954][ C1] __irq_exit_rcu+0xca/0x1f0 [ 368.291612][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 368.296968][ C1] irq_exit_rcu+0x9/0x30 [ 368.301261][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 368.307109][ C1] [ 368.310096][ C1] [ 368.313055][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 368.319076][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 368.324843][ C1] Code: 53 de 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 ad 21 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 368.344806][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 368.350910][ C1] RAX: 16ded35c4cefcc00 RBX: ffffffff81976918 RCX: 16ded35c4cefcc00 [ 368.359015][ C1] RDX: 0000000000000001 RSI: ffffffff8d982fba RDI: ffffffff8be1ba40 [ 368.367025][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb [ 368.375025][ C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8fa0b3f0 [ 368.383022][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a52b40 [ 368.391113][ C1] ? do_idle+0x1e8/0x510 [ 368.395721][ C1] default_idle+0x13/0x20 [ 368.400106][ C1] default_idle_call+0x74/0xb0 [ 368.405091][ C1] do_idle+0x1e8/0x510 [ 368.409298][ C1] ? __pfx_do_idle+0x10/0x10 [ 368.413928][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 368.419272][ C1] cpu_startup_entry+0x44/0x60 [ 368.424165][ C1] start_secondary+0x101/0x110 [ 368.428985][ C1] common_startup_64+0x13e/0x147 [ 368.433976][ C1] [ 368.916636][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 368.934669][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 370.537606][ C1] net_ratelimit: 7303 callbacks suppressed [ 370.537627][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 370.555987][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 370.568468][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 370.580888][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 370.593501][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 370.605905][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 370.618583][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 370.631131][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 370.643678][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 370.656016][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 375.547473][ C1] net_ratelimit: 11674 callbacks suppressed [ 375.547495][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 375.566386][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 375.578813][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 375.591250][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 375.603804][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 375.616989][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 375.637756][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 375.650417][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 375.662949][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:48:8b:9a:c0:7d, vlan:0) [ 375.675457][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)