last executing test programs: 7m42.321769183s ago: executing program 32 (id=96): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x48, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x48}}, 0x0) 4m58.11142118s ago: executing program 3 (id=440): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x185}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x45}, 0x0) 4m58.022367028s ago: executing program 0 (id=441): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback, 0x7fff}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) shutdown(r0, 0x1) 4m57.847417553s ago: executing program 3 (id=442): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r1, &(0x7f00000002c0)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x10, 0x11, 0x0, @empty, @mcast2, {[], {0x4f1c, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x6, 0x100}}}}}}}}}, 0x4a) 4m57.222290746s ago: executing program 3 (id=444): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280), 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b800000019000100000000f7ffff"], 0xb8}}, 0x4004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x11}, 0x80) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYRES16=r3, @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x11, &(0x7f0000000540)=0x8, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000044000000080003", @ANYBLOB="08002700851600000a0018"], 0x4c}}, 0x4000804) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4m57.206677484s ago: executing program 0 (id=445): r0 = socket$inet6(0xa, 0x3, 0x1d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mknod(&(0x7f00000000c0)='./file0\x00', 0x8001420, 0x0) mount$afs(&(0x7f0000000480)=ANY=[@ANYBLOB="2373797a310373797a302e"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r4, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r5, 0x4) signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x8]}, 0x8, 0x0) bind$inet6(r0, 0x0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101100) ioctl$int_in(r6, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000240)=0xffe) fcntl$setstatus(r6, 0x4, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, 0x0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c0000000109021200010000000009040000"], 0x0) r8 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r8, 0x52b242d) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) syz_usb_control_io(r7, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 4m57.024623615s ago: executing program 3 (id=446): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone3(&(0x7f00000014c0)={0x6361100, &(0x7f00000002c0), 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x1, 0x7ffc1ffb}]}) 4m53.672507614s ago: executing program 3 (id=450): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa65a245d5cde008004500001c01000000f4ff07908400000008"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x501083, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) 4m53.486391921s ago: executing program 0 (id=451): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@gettclass={0x24, 0x2a, 0x300, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xf}, {0x5, 0xfff1}, {0xd, 0xb}}, ["", "", "", "", "", "", "", "", ""]}, 0x54}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x40) (rerun: 64) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040), 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, "d20bddda7d1db9342de76eec7967fe97751f13a23aeaacb0565c1c2251560ed1"}}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000180)={0x401ca6, 0x2, 0x5, 0x4, 0xa, "e0779a25f5b33b9df0e22ace6c697b10aef0f1"}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800"], 0x98}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, 0x0, 0x0) (async, rerun: 32) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000002010101000000040000000000000002"], 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4) (rerun: 32) socket$inet6_udp(0xa, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r7, 0x0, 0x0}, 0x10) 4m53.485596418s ago: executing program 5 (id=452): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x185}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x45}, 0x0) 4m52.633919212s ago: executing program 5 (id=453): pipe(&(0x7f00000001c0)) socket$inet6_tcp(0xa, 0x1, 0x0) gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x31, 0x800000000004, @thr={&(0x7f0000000380)="5de39c1929a9fd818b8d651c69094247afb184ddca6ef65d30dae4d6e9a93a71a6a191071760f7abd2979b20f77041612abb44755ced1f3d6470b25b0542126d40a3b62c75dea37c7fccc5c7f776853d3fb5f79851ff9e6c7ab312699bf203c145218d327f91cf805b6d522e1a966a17", &(0x7f0000000400)="4c7e95c6b41be3e3cc2ad6347b2f431619e445c2d51bd45dfc71d2f2aeb3f53553"}}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) read$midi(0xffffffffffffffff, 0x0, 0x43) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000100)=0x3) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='cubic\x00', 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_create(0x2, 0x0, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000000)={{}, {0x0, 0x989680}}, 0x0) timer_settime(r3, 0x1, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000240)={0x77359400}, 0x0) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000040)={0x5, @raw_data="08dace1554cb5956ee662ba36f6485f6e3e5146bf27deddf43f8c909f548a10df62a5c8d486e9f6e3451bbaf70078aa35ae276c29c521584f39af6eeb5c000d7141fb70749b86775d8f1f1b5b1e3dc6073d66d9f4cf292355a36b04656a72a684df3b005a8871d52e56ce19df5afb08a8e3a05604903b365ad1f3c6e050aa44be370da53ee367be4b03a830e894521a48c99c02cb5445a6fd4be5900d0061543619f82821592a5e7ae7bb7ade47cfd73b1ed9d5e4433c3c9ed45292247359a7b6cfd356f872a488e"}) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, 0x0) set_mempolicy(0x8006, 0x0, 0x5) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x4001100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x0) 4m52.200470488s ago: executing program 3 (id=455): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r0, &(0x7f00000002c0)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x10, 0x11, 0x0, @empty, @mcast2, {[], {0x4f1c, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x6, 0x100}}}}}}}}}, 0x4a) 4m51.290945005s ago: executing program 33 (id=455): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r0, &(0x7f00000002c0)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x10, 0x11, 0x0, @empty, @mcast2, {[], {0x4f1c, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x6, 0x100}}}}}}}}}, 0x4a) 4m51.280879208s ago: executing program 5 (id=458): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000500)="88", 0x1}], 0x1}}], 0x1, 0x30008870) shutdown(r0, 0x1) 4m51.12152752s ago: executing program 0 (id=460): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone3(&(0x7f00000014c0)={0x6361100, &(0x7f00000002c0), 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x1, 0x7ffc1ffb}]}) 4m50.946804522s ago: executing program 5 (id=462): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone3(&(0x7f00000014c0)={0x6361100, &(0x7f00000002c0), 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x1, 0x7ffc1ffb}]}) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000580)=0x400030, 0x4) 4m48.210819687s ago: executing program 0 (id=463): syz_io_uring_setup(0x7870, &(0x7f00000003c0)={0x0, 0xd7c6, 0x40, 0x10, 0x333}, 0x0, &(0x7f0000000200)=0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x143082, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000080)=0x1) read$dsp(r1, &(0x7f00000000c0)=""/75, 0x4b) r2 = socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_emit_ethernet(0x2e4, &(0x7f0000001e00)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb884700000f000000000066b0a620109006ff00000000000000000000ffffac1414aafc000000000000000000000000000000010000000000000004010700000000002e0000000000000001040000000000006200053867000000840009e168000000000000000000000001020000000000004e21", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRES32=r0], 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, &(0x7f0000000040), 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYBLOB], 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) tkill(r4, 0xb) syz_io_uring_setup(0x1ff, &(0x7f0000000280)={0x0, 0x800000, 0x2, 0x2}, &(0x7f0000000000), &(0x7f0000000140)) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000cc0)={0xa, {0x20000000, 0x7b, 0x1000, 0x4}}) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r6, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) 4m47.830750794s ago: executing program 5 (id=464): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x185}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x45}, 0x0) 4m46.431261331s ago: executing program 0 (id=466): r0 = socket$inet6(0xa, 0x3, 0x1d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mknod(&(0x7f00000000c0)='./file0\x00', 0x8001420, 0x0) mount$afs(&(0x7f0000000480)=ANY=[@ANYBLOB="2373797a310373797a302e"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r4, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r5, 0x4) signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x8]}, 0x8, 0x0) bind$inet6(r0, 0x0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101100) ioctl$int_in(r6, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, 0x0) fcntl$setstatus(r6, 0x4, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c0000000109021200010000000009040000"], 0x0) r8 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r8, 0x52b242d) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) syz_usb_control_io(r7, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 4m46.375221509s ago: executing program 5 (id=467): socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init1(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xb5}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73, 0x103}, 0x70) 4m45.764334755s ago: executing program 34 (id=466): r0 = socket$inet6(0xa, 0x3, 0x1d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mknod(&(0x7f00000000c0)='./file0\x00', 0x8001420, 0x0) mount$afs(&(0x7f0000000480)=ANY=[@ANYBLOB="2373797a310373797a302e"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r4, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r5, 0x4) signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x8]}, 0x8, 0x0) bind$inet6(r0, 0x0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101100) ioctl$int_in(r6, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, 0x0) fcntl$setstatus(r6, 0x4, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c0000000109021200010000000009040000"], 0x0) r8 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r8, 0x52b242d) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) syz_usb_control_io(r7, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 4m45.757867326s ago: executing program 1 (id=469): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xfffffffffffffed9, 0x2, [@TCA_HTB_INIT={0xf}]}}]}, 0x48}}, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095", @ANYRES64=r6], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xc, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000005c0)={&(0x7f0000000680)="37ff80ed75f20a12da6cd5585309d375b806185704d78bf93dea2dcd1cebf85d9d138ec5da471980250f26d8a5b687a5fe2c911236ddaab6361af08608dd195e5514b120fb9cd78a4155cbd6a80d76c726c5ddfbdffd37bd34f199f9725729406c989d067b93619242da58591d2860d5bea56c5f43df17fd61df0a4ec348d5b98c3e4b20ef282a97e3c4bba064fd82f303d93fc181ec9002687524610c19fe6d3a574022e5f3b4d133fa382b4def625ef9a3664062fd580e03e62f4e199a3f467726ca4daa3928ba77248af7a633d622e2cbdc821444e5c44151aa28264e279104acdf059b96", &(0x7f00000003c0)=""/48, &(0x7f0000000480)="1866d016a5a7f2085504b98141f65cb01e10eac507fafa108e55d8f9dec9db941ea5d9231bb07c78bbf65cab3835322158a3e2a994333b2ef8f96a613ea009c3b8", &(0x7f0000000500)="5efab6123160d6c8a44f6808e593c6abceb7af750d8e87d4aff23d54d43ce5283ca8ad4df8d202e87d", 0x9, r8, 0x4}, 0x38) prlimit64(0x0, 0xe, 0x0, 0x0) r9 = socket$inet6(0xa, 0x80002, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r8) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r10, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f86ccc5cf6926d8a08e5c337b8"}, @NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "6c82836b07"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "2ec39165b30ae41273f2c52d05"}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]}, 0x5c}}, 0x4000000) setsockopt$inet6_udp_int(r9, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r9, &(0x7f0000003cc0), 0x0, 0x4001c00) syz_open_procfs(0x0, 0x0) 4m45.673112974s ago: executing program 35 (id=467): socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init1(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xb5}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73, 0x103}, 0x70) 4m44.225243374s ago: executing program 1 (id=472): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, &(0x7f0000000140)=""/56, 0x38) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b0, 0xe0, 0x1b0, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@unspec=@ipvs={{0x48}, {@ipv4=@private=0xa010100, [0xffffffff, 0xffffff00], 0x4e23, 0x2b, 0x2, 0x4e20, 0x4, 0x8}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0xf}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast, 0x2a, 0xc, [0x6, 0x0, 0x29, 0x2a, 0xb, 0x0, 0xb, 0x13, 0x2a, 0x21, 0x18, 0x2, 0x28, 0x3e, 0x7, 0x3c], 0x0, 0x7}}}, {{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x3, 0x7f], 0x1}}, @common=@icmp={{0x28}, {0x4, "1d4d", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x1, {0xb}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000010000100000000000000000000002dc3dbbff64cb6f601020000000000000000010000000900010073797a30000000002c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001400000010000100fab496000000000000000000"], 0x74}}, 0x0) 4m44.033309777s ago: executing program 1 (id=473): socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) semop(0x0, 0x0, 0x52) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x14b042, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0) getrlimit(0x5, &(0x7f0000000080)) r1 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc95b4b88e2afb55ae6f1229bcf13ecff7a597f452bed6b6fb4c812df9be8e35d8d15086609c033a5d2a42d5dcb0d103098f", 0xc1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r2, r3}, 0x0, 0x0, 0x0) 4m43.174107649s ago: executing program 1 (id=475): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone3(&(0x7f00000014c0)={0x6361100, &(0x7f00000002c0), 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 4m39.990393996s ago: executing program 1 (id=477): r0 = socket$inet6(0xa, 0x3, 0x1d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mknod(&(0x7f00000000c0)='./file0\x00', 0x8001420, 0x0) mount$afs(&(0x7f0000000480)=ANY=[@ANYBLOB="2373797a310373797a302e"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r4, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r5, 0x4) signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x8]}, 0x8, 0x0) bind$inet6(r0, 0x0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101100) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000240)=0xffe) fcntl$setstatus(r6, 0x4, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c0000000109021200010000000009040000"], 0x0) keyctl$setperm(0x5, 0x0, 0x52b242d) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) syz_usb_control_io(r7, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 4m39.415727571s ago: executing program 1 (id=479): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback, 0x7fff}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x30008870) shutdown(r0, 0x1) 4m38.003357489s ago: executing program 36 (id=479): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback, 0x7fff}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x30008870) shutdown(r0, 0x1) 4m9.019120893s ago: executing program 6 (id=527): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) shutdown(r0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000380)=@gcm_128={{0x304}, "82f84cbe349c4abc", "0e5d23e3519731b5395c0eb4843f822e", "c02be723", "df1215a7d932f72d"}, 0x28) pselect6(0x40, &(0x7f0000000200)={0x9, 0x93, 0x5, 0x0, 0x6200000000000000, 0x4, 0x8, 0x7fff}, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 4m7.848378215s ago: executing program 6 (id=531): r0 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000180)={&(0x7f0000000a00)=[{0x9, 0x0, 0xffffffffffffff62, 0x0}], 0x1}) 4m7.642737143s ago: executing program 6 (id=535): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x4008af21, &(0x7f0000000800)) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0xdef6) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x0) 4m3.924580205s ago: executing program 6 (id=547): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone3(&(0x7f00000014c0)={0x6361100, &(0x7f00000002c0), 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 4m0.622647253s ago: executing program 6 (id=559): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) write(r0, &(0x7f0000000180)="8f2a0a65bd8c002b", 0x8) 3m58.911679728s ago: executing program 6 (id=564): syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x200000) syz_emit_ethernet(0x7e, &(0x7f0000000340)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1d0008", 0x48, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x2e, 0x1, @mcast2, @private2, [@fragment={0x0, 0x0, 0x7, 0x0, 0x0, 0x7, 0x65}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) 3m57.816501534s ago: executing program 37 (id=564): syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x200000) syz_emit_ethernet(0x7e, &(0x7f0000000340)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1d0008", 0x48, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x2e, 0x1, @mcast2, @private2, [@fragment={0x0, 0x0, 0x7, 0x0, 0x0, 0x7, 0x65}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) 43.562426506s ago: executing program 7 (id=1299): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$packet(0x11, 0x2, 0x300) r1 = socket$netlink(0x10, 0x3, 0x2) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe150f0000000000000000f3ffffff000000", 0x27) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4040084) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0xfff, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000340)=ANY=[@ANYRESOCT=r3, @ANYRESHEX=r3, @ANYBLOB="2c726f6f746d6f64653d3030303014319e7ab2ff122d24277f30303030303130303030302c757365725f69643d", @ANYRESHEX=r2, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0x0, 0x0, 0x0, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r4, 0x29, 0x45, &(0x7f0000000880)="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", 0x27f) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x40100, 0x10) getdents64(r6, &(0x7f0000000f80)=""/4096, 0x1000) write$tcp_congestion(r5, &(0x7f00000000c0)='lp\x00', 0xfffffdef) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_IOAS_COPY$syz(0xffffffffffffffff, 0x3b83, &(0x7f0000000040)={0x28, 0x10002, 0x0, 0x0, 0xc542, 0xd75, 0x5, 0x1f3619}) 42.168733597s ago: executing program 7 (id=1306): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000500)="c17a3487519255c136f0d9c62b2747cd56271f033b9f5f154bee2ab2ae0e2dc13ffb8df7dcd3769eb2891dc9ae99a8eb8563a876e61a3c05bfd4522b0a8eec0666f6c457b5d8e22a45609108fc316a9993cdbd0b399cef1777", 0x59}], 0x1}}, {{&(0x7f0000000580)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f00000009c0)=[{&(0x7f00000005c0)="8c8145477b", 0x5}], 0x1}}], 0x2, 0x14) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000140)={r1, 0xff}, 0x8) 40.296739618s ago: executing program 7 (id=1311): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x5}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x7b47, &(0x7f0000000400)={0x0, 0x80fd, 0x10, 0x5, 0x2cd}, &(0x7f0000000380), &(0x7f00000002c0)) r1 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x4a) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) close(r5) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r6 = dup(r5) getsockname$l2tp(r6, 0x0, &(0x7f0000000040)) accept$alg(r1, 0x0, 0x0) userfaultfd(0x80001) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, 0x0, 0x1) 39.288837115s ago: executing program 7 (id=1317): syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x10, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8001, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x5, 0x6, 0x8, {0x7, 0x25, 0x1, 0x82, 0xfd, 0x33}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x7, 0x9, 0x3, {0x7, 0x25, 0x1, 0x2, 0x6, 0x8e}}}}}}}]}}, &(0x7f0000003700)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) r0 = socket$kcm(0x10, 0x2, 0x10) recvmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4148, 0x1034}], 0xf}, 0x42) 38.16159709s ago: executing program 2 (id=1322): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) 37.852574484s ago: executing program 2 (id=1324): getpid() r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[], 0x28}}, 0x8000) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002380)="1b0000001a007f029e741683c28f7b331d00"/27, 0x1b}], 0x1}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000100)={0x20, r6, 0x1, 0x70bd2a, 0x0, {0x1a}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40880}, 0xd0) 37.395791933s ago: executing program 2 (id=1327): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000407d1e9c31000000000001090224000100000000090400000103000800092100000001220700090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, &(0x7f0000000440)={0x40, 0x6, 0x7, {0x7, 0x10, "0000001800"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 37.094234168s ago: executing program 7 (id=1330): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmmsg(r0, &(0x7f0000002940)=[{{0x0, 0x4a, &(0x7f0000000100)=[{&(0x7f00000001c0)}], 0x1}}], 0x1, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000003c0)=0x0) sched_setscheduler(r1, 0x6, &(0x7f0000000400)=0x7fff) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x5, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}]}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="06040100"], 0xa) memfd_create(0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000180), 0x8003, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r4, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r4, 0x0, &(0x7f0000ff8000/0x1000)=nil, 0x1000}) sendto(0xffffffffffffffff, &(0x7f0000000500)="0f46205421f3de4ec5e201f810fbe8540881e7a667ff1138f7da488bd650a75030cbb5e27383e8a12ea4f6874e6aca535979192dfb46d43468a119988aff4e4b6628e3886cec2796fbcfc1cd9fbed2db756d8533c8748157c2dfd0d43a12d729c37171ba0b491c4da112b28b7f87afe6126d9be8f64db45382ee", 0x7a, 0x4004000, 0x0, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) r6 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r6, &(0x7f0000000a40)={0xa, 0x4e22, 0x7fff, @remote, 0x9}, 0x1c) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r4}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 36.605599161s ago: executing program 7 (id=1331): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) rt_sigpending(0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x169a82, 0x0) sendfile(r2, r2, 0x0, 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000400)=0xa4, 0x4) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xaf) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) syz_usb_connect$printer(0x2, 0x36, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x201, 0xa000000, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) (fail_nth: 1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000240), 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x121040, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) writev(0xffffffffffffffff, 0x0, 0x0) 34.141150882s ago: executing program 8 (id=1336): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) munlockall() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000040000000800000014100000", @ANYRES32, @ANYBLOB="0000a90f00001f0000004e0000a15fcd483588bc556451b8af73be00000000000000fda96e2a1019581f8aa3413acc70c514b79dd00ce5bed61cd4caf38ecc6a86e33b7a143ac43715228e20046bea60e41c72617f7c5e000173a3b65ed91a475376886d719d4642a044330e4bce78b8f34ab5366c0c66f2b8b4d3dc5390ab1e0e0e23daa579611c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1e00000005000000020000000500000020000000", @ANYRES32=r1, @ANYBLOB="c100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000005000000000000000c00000000000000000000000000000055497cb270a82bcf684f37a04c5b64bb178033a932cd6152b6c329aa354ba71716a50b57e0ad73b6a1bb1837c1b1a0574a9b91f3962d9360140d82c30154c3aa70f4ce3781604530f77b38255cf39a1a680335f84362d6b67415d60cc7f762ad50e5a71ffd118e93d8a6f5c1e9179b7411ebb13d9f6ca3cb42920bf2e9808b131abeffb5c1ec3d0904c682e4d3eab04c8cfe321c8c58686c7dfde01836c9252b7d9238ddee24576e523495533586e2fb"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) syz_init_net_socket$ax25(0x3, 0x5, 0xc4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x19, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$RDMA_NLDEV_CMD_GET(r2, 0x0, 0x408c1) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) 27.745899171s ago: executing program 8 (id=1338): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/udplite6\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xb, &(0x7f00000002c0)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xb, &(0x7f00000002c0)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000005c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x400000}) writev(r2, &(0x7f0000000580)=[{&(0x7f0000000000)="228292", 0xfff6}], 0x2) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f"}) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) pwritev2(r4, &(0x7f0000000a80)=[{&(0x7f0000000340)="e5b29a682c198b427b4cbf4728f1279fd3c672933be991627fd204ce2974dc10c8033a6a86ff629b3f604535c52e69006fa92a9ba76ec94b2eae63eb1d9cd85c1cb2f7ab1bfb4260ccb61db9a600fea88704e8a856048276fc4edb896e7efffd21713038e0bbcc43f580380f570b64172062f74f697a5d5a698afb92ad4ff45cc91ccc3f60dcb9a1ecf366b8ca0c1c4d8c48364114c9b5a152bfc3bac182f78abeb3e361f18ceeaabe9c6f7490ae2e78a4e2938038aad824715b30eac001dbefae44780abe202ec577b5dad992b03a873849906cd9799699155b09f4abe52f7b2a8fb612519dd83bd2d4d01cb651bba987b4c711c345a0eb328767f73e", 0xfd}, {&(0x7f0000000440)="f540a3e8df7e6315ca8c87941c195a7a41d5292e45533d43686560f8cde09315069b28aa77b76b4af497e45d7d8c71d9122b553eb390cf6c3d1828b500ba1364c927a2354ac726cd326f387ed518f9f9d03afdf20ba14ae21367d5b44140368d3c0f09fc3d3c5c20c5ad9049d1be2a43d4b30ce9e4c71745aaf612c5bd1d7d2ac10f6cbf8b09598c97234e46a7a22e3ecd6a0dea79a565b7d5fb62c4eef55336fd4101fda6710e0250", 0xa9}, {&(0x7f0000000680)="63773ed4c688c4a2957103f39a9043ee5d6ae4385ed139daf148df0cffb316b990ec14d1b0b3305ec7521f2bdc1e914391edfc984e74f414cc29ed7bf9cb9a8d1717334b1cd1e268bb8e7b2f2ed7db2a15914aeee3540290c423b1ba1d8d35a2379b18d7c623a9322f23bc48352d4a84e1e832e32bf6a8046c06e8232b863e18edeeb703eca67926e2119f5eff818be80fc375234c3f3a85f6c090173a46f9e70da3b51bde1a8c44c9562dff5f39a280064916dfab6ba22a0b96e3c62ed2aefda669e00a54aea345e6cf9fdbf3ca7bb9bdaecef2460e1d92e9466356a6ef2cd7f4261eedd4eb", 0xe6}, {&(0x7f0000000500)="5555883afb0e6ce380fe4af1c41529e6bc06326ef3b509c4ec9edb3be6ea580129e80a512b62c66463756045f6c1", 0x2e}, {&(0x7f0000000780)="b4f973d29f9bf9c181059a5520a2554ea24896fa45c3088449deed7df3903a81f40c1f43d75b4fae3b88e185b609de81ca403abc865b100ea1f2ff0032d3f5aa3939cc9e4b6cd94409eed076d53b3b9c4723164e77f6a4138ac71c3f2e67525de933", 0x62}, {&(0x7f0000000540)="dd351c706b2cbb", 0x7}, {&(0x7f0000000800)="039ffd7e357be9fd1d69e293a3b9cac3ba4c7132d09d4139cb6cfdd71351fecb96acc39fa13e38ef1f4dab5c81026bc22c6bf88be6cdbf9a61c358b4d599e87d49da4c2b8eca7cde3a7ee6a67c581afd52199373d727f8452f87e11d9b4cd023b9b3a06ecea42c92078be7147620f6db552287f7727ae385dc7ace85eeb7", 0x7e}, {&(0x7f0000000880)="9e199943a8f649fb7adaeb45e227945d49adb7e17533848ea6491451e0a66c75a85eef85985cb977ec42140715acacafda", 0x31}, {&(0x7f00000008c0)="41ed6637c31749fb686c36a038ca078107c551a3e538cae2825d7bec831b1893a3e9d24fe3687bc3a2c844f89dd3ca0f8da8d6bd7c68c00a51c6831aa946d62d0707e2b9e43b7a4c9df6ba7189c5528f5399ca31b4bedf21d02fab6c7f98c818c39300306985b3750b75593fea7b480efbb2d284ba4f51daa416217d51ca50d44476d307f614cf05b4318f7f74a125d56baea7cc44ee4e5dda05ee656c06d26aa6b76a963d6b8d1fa23b2b9cb01914fec037bbbb52d32058214391b4d0ede768b6b1d047226902a0bbea4c085481c099f3812c9bbb263a2818c2b8aef7ccec47414f5f2906", 0xe5}, {&(0x7f00000009c0)="8ac9f733393d77339b33e15281ec5731e4caedcfcb4e4e1b5d8c83d764c02ec01b4401013714367a52246e6482b4db5f254f293dd2a6bebd8accb2ef7e201eb43a848663f7d5477a59074c48af285e3c68002bf8f111a669ab866a57c216bee1aca71426633f401cf1108c2c98d2b96eddd877af7da90829eba24706ba9544952bafb176acba554e73d3a1a22368", 0x8e}], 0xa, 0x0, 0x8, 0x10) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xff2e) (async) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xff2e) mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x160) (async) mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x160) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x400000, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x400000, 0x0) r5 = syz_open_pts(r4, 0x101400) fanotify_mark(r2, 0x8, 0x8001008, r0, &(0x7f0000000b40)='./file0\x00') r6 = dup3(r5, r4, 0x0) read(r6, &(0x7f00000000c0)=""/226, 0xe2) 27.66104887s ago: executing program 2 (id=1339): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500), 0x10000000000001ea, 0x0, 0x0, 0x4004811}, 0x4011) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') r0 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) io_setup(0x5, &(0x7f00000002c0)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0xffff, r2, 0x0, 0x0, 0x3ff}]) fspick(r2, &(0x7f0000000480)='./file0\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = inotify_init() creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r3, &(0x7f0000000240)='./file0\x00', 0x8c5) r4 = inotify_init1(0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80400, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x200000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) inotify_add_watch(r4, &(0x7f00000004c0)='./file0\x00', 0x80000000) inotify_add_watch(r4, &(0x7f0000000240)='./file0\x00', 0x8c5) fsmount(r0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r8 = fcntl$dupfd(r7, 0x406, r7) ioctl$SCSI_IOCTL_GET_PCI(r8, 0x5393, &(0x7f0000000000)) 27.30491082s ago: executing program 9 (id=1340): syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x10, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8001, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x5, 0x6, 0x8, {0x7, 0x25, 0x1, 0x82, 0xfd, 0x33}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x7, 0x9, 0x3, {0x7, 0x25, 0x1, 0x2, 0x6, 0x8e}}}}}}}]}}, &(0x7f0000003700)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) r0 = socket$kcm(0x10, 0x2, 0x10) recvmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4148, 0x1034}], 0xf}, 0x42) 26.769474003s ago: executing program 4 (id=1341): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmmsg(r0, &(0x7f0000002940)=[{{0x0, 0x4a, &(0x7f0000000100)=[{&(0x7f00000001c0)}], 0x1}}], 0x1, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000003c0)=0x0) sched_setscheduler(r1, 0x6, &(0x7f0000000400)=0x7fff) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x5, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}]}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="06040100"], 0xa) memfd_create(0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000180), 0x8003, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r4, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r4, 0x0, &(0x7f0000ff8000/0x1000)=nil, 0x1000}) sendto(0xffffffffffffffff, &(0x7f0000000500)="0f46205421f3de4ec5e201f810fbe8540881e7a667ff1138f7da488bd650a75030cbb5e27383e8a12ea4f6874e6aca535979192dfb46d43468a119988aff4e4b6628e3886cec2796fbcfc1cd9fbed2db756d8533c8748157c2dfd0d43a12d729c37171ba0b491c4da112b28b7f87afe6126d9be8f64db45382ee", 0x7a, 0x4004000, 0x0, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) r6 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r6, &(0x7f0000000a40)={0xa, 0x4e22, 0x7fff, @remote, 0x9}, 0x1c) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r4}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 26.769141337s ago: executing program 8 (id=1342): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001e40)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="763a9e147583ddd0569ba56a655855", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) lseek(r1, 0x7, 0x2) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x400017e) creat(&(0x7f0000000100)='./file0\x00', 0x0) inotify_add_watch(r2, &(0x7f00000003c0)='./file0\x00', 0x84000100) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) setxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), &(0x7f00000002c0)=@v1={0x2, "02c1ab09cd5f13aef8"}, 0xa, 0x1) recvmmsg(r5, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000000), 0x4) 26.28732s ago: executing program 8 (id=1343): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r1, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) write$usbip_server(0xffffffffffffffff, &(0x7f0000000480)=@ret_submit={{0x3, 0x2, 0x0, 0x1, 0x1}, 0x6, 0x0, 0x3526, 0x0, 0xff}, 0x30) 26.224723848s ago: executing program 4 (id=1344): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad73364256408b0011021f", 0xb) prctl$PR_SET_KEEPCAPS(0x8, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x1) r1 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000001080)={0xaa, 0x14}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0xa, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$alg(0x26, 0x5, 0x0) ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000020c0)={'\x00', 0x0, 0xaf54, 0x5, 0x0, 0x100000005}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) openat$vicodec0(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cb00f631f27b59014ec44307"], 0x1c}, 0x1, 0x0, 0x0, 0x4801}, 0x800) recvmmsg$unix(r4, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) r5 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x800}], 0x1, 0x40008040) 26.114725077s ago: executing program 8 (id=1345): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000003e00)}}], 0x1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') getdents(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00'/13, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010065727370616e00000c00028005001600000000001400030065727370616e30000000000000000000"], 0x50}}, 0x0) getdents(r2, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240), 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r5 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e22, 0x0, @private2}}}, 0x108) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x5f, 0x0) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) 26.10448219s ago: executing program 2 (id=1346): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002640)=@delchain={0x1e8, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x194, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x16c, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_simple={0xe8, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0xb1, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bf7dae04880a34e7bf775010128401ec7b2a9ceab9c40c5f9bd00ceff17d69ca7a27324ef7a1ad28d4b3c6a826826e9c291c16ab3d13e1f337751959e47bf0fe515b70ea5a3584d9cdba83a705d3257305f931866cf9f1faa34fce0e8a7ee76e20f05d4e1adbee4ba00ddd7b896197ea2a0391ef62c651d59ed7e0e8964192a2c1c29308d03650349840a4d759fc9421e3569c90"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x50, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x1d, 0x6, "726786f34dc39a3b098ea66afe225634df06865f963558e695"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_FD={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b000000000000", 0x10, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 21.363567497s ago: executing program 38 (id=1331): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) rt_sigpending(0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x169a82, 0x0) sendfile(r2, r2, 0x0, 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000400)=0xa4, 0x4) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xaf) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) syz_usb_connect$printer(0x2, 0x36, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x201, 0xa000000, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) (fail_nth: 1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000240), 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x121040, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) writev(0xffffffffffffffff, 0x0, 0x0) 21.312493061s ago: executing program 8 (id=1348): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000709c3120e80401669b81010203010902120001010000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="8967d8576cb4"], 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x200) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000003300), r3) sendmsg$NFC_CMD_ENABLE_SE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000000100)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000044}, 0x20000000) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x8004) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) 21.312127896s ago: executing program 2 (id=1349): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, 0x0, 0x0, &(0x7f00000a0000)}) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f0000000c00)={0x18}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681", 0xe}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) socket$kcm(0x10, 0x2, 0x0) msgrcv(0x0, 0x0, 0x0, 0x5, 0x4c00) personality(0x5000004) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0) 21.299335313s ago: executing program 4 (id=1350): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000b80)=[{{&(0x7f0000000000)={0x2, 0x400, @rand_addr=0x64010101}, 0x10, 0x0}}, {{&(0x7f0000000580)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f00000009c0)=[{&(0x7f00000005c0)="8c8145477b", 0x5}], 0x1}}], 0x2, 0x14) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000140)={r1, 0xff}, 0x8) 21.208437187s ago: executing program 9 (id=1351): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="b400028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000101000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000180000040"], 0xd0}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 19.725037827s ago: executing program 4 (id=1352): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000003e00)}}], 0x1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') getdents(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00'/13, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010065727370616e00000c00028005001600000000001400030065727370616e30000000000000000000"], 0x50}}, 0x0) getdents(r2, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240), 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r5 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r5, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x5f, 0x0) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) 19.453079955s ago: executing program 9 (id=1353): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad73364256408b0011021f", 0xb) prctl$PR_SET_KEEPCAPS(0x8, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x1) r1 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000001080)={0xaa, 0x14}) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0xa, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$alg(0x26, 0x5, 0x0) ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000020c0)={'\x00', 0x0, 0xaf54, 0x5, 0x0, 0x100000005}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) openat$vicodec0(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cb00f631f27b59014ec44307"], 0x1c}, 0x1, 0x0, 0x0, 0x4801}, 0x800) recvmmsg$unix(r4, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) 12.726508928s ago: executing program 9 (id=1354): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmmsg(r0, &(0x7f0000002940)=[{{0x0, 0x4a, &(0x7f0000000100)=[{&(0x7f00000001c0)}], 0x1}}], 0x1, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000003c0)=0x0) sched_setscheduler(r1, 0x6, &(0x7f0000000400)=0x7fff) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x5, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}]}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="06040100"], 0xa) memfd_create(0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000180), 0x8003, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r4, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r4, 0x0, &(0x7f0000ff8000/0x1000)=nil, 0x1000}) sendto(0xffffffffffffffff, &(0x7f0000000500)="0f46205421f3de4ec5e201f810fbe8540881e7a667ff1138f7da488bd650a75030cbb5e27383e8a12ea4f6874e6aca535979192dfb46d43468a119988aff4e4b6628e3886cec2796fbcfc1cd9fbed2db756d8533c8748157c2dfd0d43a12d729c37171ba0b491c4da112b28b7f87afe6126d9be8f64db45382ee", 0x7a, 0x4004000, 0x0, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) r6 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r6, &(0x7f0000000a40)={0xa, 0x4e22, 0x7fff, @remote, 0x9}, 0x1c) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r4}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 11.676719573s ago: executing program 4 (id=1355): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r1, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) write$usbip_server(0xffffffffffffffff, &(0x7f0000000480)=@ret_submit={{0x3, 0x2, 0x0, 0x1, 0x1}, 0x6, 0x0, 0x3526, 0x0, 0xff}, 0x30) 11.358380278s ago: executing program 9 (id=1356): getpid() r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[], 0x28}}, 0x8000) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002380)="1b0000001a007f029e741683c28f7b331d00"/27, 0x1b}], 0x1}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000100)={0x20, r6, 0x1, 0x70bd2a, 0x0, {0x1a}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40880}, 0xd0) 11.204134095s ago: executing program 9 (id=1357): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad73364256408b0011021f", 0xb) prctl$PR_SET_KEEPCAPS(0x8, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x1) r1 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000001080)={0xaa, 0x14}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0xa, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$alg(0x26, 0x5, 0x0) ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000020c0)={'\x00', 0x0, 0xaf54, 0x5, 0x0, 0x100000005}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = openat$vicodec0(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cb00f631f27b59014ec44307"], 0x1c}, 0x1, 0x0, 0x0, 0x4801}, 0x800) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) ioctl$VIDIOC_S_PARM(r4, 0xc0cc5616, &(0x7f0000000140)={0x2, @raw_data="06154cf7d0c6216a86d79be7ca6f85020d5464e743a4163f8a2f5bf45d92b19c96e535db07cf4c02bc6b32f458d0bdf80e15fe63e1c072287539c5c805c1e0f8de1d7428eb3ac1697ab9553ab6d0d2d1de24f0fffa1370d7f1696c863a8c4c3bbe5172703622cd4ae5f45e6a57796b85a6bbfcda6ce17dbfac01c878f476af3ab22fe6ccfcf7ca6a00893ca1244994bd1f24680547cc722dca8c68661bcf5d9254522df9967227ca82543e1c331aa01949ba70d20a0ef4ca4dbecac919309893fda0675f0be973c8"}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) r5 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x800}], 0x1, 0x40008040) 11.203983779s ago: executing program 4 (id=1358): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001e00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4084) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = dup(r4) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a320000000005000100070000001400078008001340000000000800124009"], 0x64}}, 0x0) 0s ago: executing program 39 (id=1348): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000709c3120e80401669b81010203010902120001010000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="8967d8576cb4"], 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x200) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000003300), r3) sendmsg$NFC_CMD_ENABLE_SE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000000100)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000044}, 0x20000000) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x8004) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) kernel console output (not intermixed with test programs): s_ppoll+0x20/0xc0 [ 514.447133][T10523] do_syscall_64+0xfa/0x3b0 [ 514.447146][T10523] ? lockdep_hardirqs_on+0x9c/0x150 [ 514.447159][T10523] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.447172][T10523] ? clear_bhb_loop+0x60/0xb0 [ 514.447189][T10523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.447202][T10523] RIP: 0033:0x7fd580f8e969 [ 514.447215][T10523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 514.447232][T10523] RSP: 002b:00007fd581d1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 514.447252][T10523] RAX: ffffffffffffffda RBX: 00007fd5811b5fa0 RCX: 00007fd580f8e969 [ 514.447267][T10523] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 514.447280][T10523] RBP: 00007fd581d1f090 R08: 0000000000000000 R09: 0000000000000000 [ 514.447293][T10523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.447304][T10523] R13: 0000000000000000 R14: 00007fd5811b5fa0 R15: 00007ffcf12599f8 [ 514.447324][T10523] [ 514.691142][ C0] vkms_vblank_simulate: vblank timer overrun [ 515.004195][T10525] FAULT_INJECTION: forcing a failure. [ 515.004195][T10525] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 515.093075][T10525] CPU: 1 UID: 0 PID: 10525 Comm: syz.4.1081 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 515.093108][T10525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 515.093122][T10525] Call Trace: [ 515.093131][T10525] [ 515.093141][T10525] dump_stack_lvl+0x189/0x250 [ 515.093178][T10525] ? __pfx____ratelimit+0x10/0x10 [ 515.093213][T10525] ? __pfx_dump_stack_lvl+0x10/0x10 [ 515.093246][T10525] ? __pfx__printk+0x10/0x10 [ 515.093270][T10525] ? fs_reclaim_acquire+0x7d/0x100 [ 515.093303][T10525] should_fail_ex+0x414/0x560 [ 515.093333][T10525] prepare_alloc_pages+0x213/0x610 [ 515.093369][T10525] __alloc_frozen_pages_noprof+0x123/0x370 [ 515.093401][T10525] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 515.093437][T10525] ? policy_nodemask+0x27c/0x720 [ 515.093468][T10525] ? __lock_acquire+0xab9/0xd20 [ 515.093496][T10525] alloc_pages_mpol+0x232/0x4a0 [ 515.093536][T10525] vma_alloc_folio_noprof+0xe4/0x200 [ 515.093575][T10525] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 515.093623][T10525] folio_prealloc+0x30/0x180 [ 515.093647][T10525] __handle_mm_fault+0x2c6a/0x55e0 [ 515.093701][T10525] ? __pfx___handle_mm_fault+0x10/0x10 [ 515.093755][T10525] ? find_vma+0xe7/0x160 [ 515.093786][T10525] ? __pfx_find_vma+0x10/0x10 [ 515.093821][T10525] handle_mm_fault+0x2d5/0x7f0 [ 515.093871][T10525] do_user_addr_fault+0x764/0x1390 [ 515.093923][T10525] exc_page_fault+0x76/0xf0 [ 515.093960][T10525] asm_exc_page_fault+0x26/0x30 [ 515.093980][T10525] RIP: 0010:rep_stos_alternative+0x40/0x80 [ 515.094007][T10525] Code: c9 75 f6 c3 cc cc cc cc 48 89 07 48 83 c7 08 83 e9 08 74 ef 83 f9 08 73 ef eb de 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 <48> 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 [ 515.094025][T10525] RSP: 0018:ffffc900042af978 EFLAGS: 00050202 [ 515.094044][T10525] RAX: 0000000000000000 RBX: 0000200000002380 RCX: 0000000000000380 [ 515.094058][T10525] RDX: 0000000000000000 RSI: ffffffff8db46f77 RDI: 0000200000002000 [ 515.094072][T10525] RBP: ffffc900042afad8 R08: 0000000000000000 R09: ffffffff820a19e0 [ 515.094087][T10525] R10: 0000000000000005 R11: 0000000000000000 R12: 0000200000001380 [ 515.094100][T10525] R13: 00007ffffffff000 R14: 1ffff92000855f40 R15: ffffc900042afc01 [ 515.094123][T10525] ? __might_fault+0xb0/0x130 [ 515.094164][T10525] iov_iter_zero+0x53f/0x1690 [ 515.094206][T10525] ? __pfx_iov_iter_zero+0x10/0x10 [ 515.094231][T10525] ? _parse_integer_limit+0x1ae/0x1f0 [ 515.094264][T10525] ? __lock_acquire+0xab9/0xd20 [ 515.094289][T10525] read_iter_zero+0x92/0x2a0 [ 515.094328][T10525] do_iter_readv_writev+0x518/0x6e0 [ 515.094364][T10525] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 515.094401][T10525] ? bpf_lsm_file_permission+0x9/0x20 [ 515.094424][T10525] ? security_file_permission+0x75/0x290 [ 515.094449][T10525] ? rw_verify_area+0x258/0x650 [ 515.094482][T10525] vfs_readv+0x253/0x850 [ 515.094511][T10525] ? __pfx_vfs_readv+0x10/0x10 [ 515.094549][T10525] ? __fget_files+0x2a/0x420 [ 515.094574][T10525] ? __fget_files+0x3a0/0x420 [ 515.094592][T10525] ? __fget_files+0x2a/0x420 [ 515.094622][T10525] __se_sys_preadv2+0x179/0x290 [ 515.094657][T10525] ? __pfx___se_sys_preadv2+0x10/0x10 [ 515.094687][T10525] ? rcu_is_watching+0x15/0xb0 [ 515.094717][T10525] ? do_syscall_64+0xbe/0x3b0 [ 515.094736][T10525] ? __x64_sys_preadv2+0x20/0xc0 [ 515.094771][T10525] do_syscall_64+0xfa/0x3b0 [ 515.094790][T10525] ? lockdep_hardirqs_on+0x9c/0x150 [ 515.094809][T10525] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.094830][T10525] ? clear_bhb_loop+0x60/0xb0 [ 515.094856][T10525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.094885][T10525] RIP: 0033:0x7fd580f8e969 [ 515.094902][T10525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 515.094920][T10525] RSP: 002b:00007fd581d1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 515.094941][T10525] RAX: ffffffffffffffda RBX: 00007fd5811b5fa0 RCX: 00007fd580f8e969 [ 515.094956][T10525] RDX: 0000000000000002 RSI: 0000200000001540 RDI: 0000000000000003 [ 515.094969][T10525] RBP: 00007fd581d1f090 R08: 0000000000000000 R09: 0000000000000000 [ 515.094983][T10525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.094995][T10525] R13: 0000000000000000 R14: 00007fd5811b5fa0 R15: 00007ffcf12599f8 [ 515.095027][T10525] [ 515.592206][ C1] sd 0:0:1:0: [sda] tag#1914 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 515.602725][ C1] sd 0:0:1:0: [sda] tag#1914 CDB: Write(6) 0a 00 4e 23 00 00 00 00 00 00 00 00 [ 515.618015][T10529] vivid-001: ================= START STATUS ================= [ 515.783738][T10529] vivid-001: Radio HW Seek Mode: Bounded [ 515.789679][T10529] vivid-001: Radio Programmable HW Seek: false [ 515.796010][T10529] vivid-001: RDS Rx I/O Mode: Block I/O [ 515.801579][T10529] vivid-001: Generate RBDS Instead of RDS: false [ 515.808008][T10529] vivid-001: RDS Reception: true [ 515.812966][T10529] vivid-001: RDS Program Type: 0 inactive [ 515.819169][T10529] vivid-001: RDS PS Name: inactive [ 515.824451][T10529] vivid-001: RDS Radio Text: inactive [ 515.830009][T10529] vivid-001: RDS Traffic Announcement: false inactive [ 515.837577][T10529] vivid-001: RDS Traffic Program: false inactive [ 515.844076][T10529] vivid-001: RDS Music: false inactive [ 515.849587][T10529] vivid-001: ================== END STATUS ================== [ 516.376022][ T5877] usb 8-1: new full-speed USB device number 22 using dummy_hcd [ 516.837700][ T5877] usb 8-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 516.863541][ T5877] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.905586][ T5877] usb 8-1: config 0 descriptor?? [ 516.940988][ T5877] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 517.369964][ T5877] gp8psk: usb in 128 operation failed. [ 517.687367][ T5945] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 517.961744][ T5877] gp8psk: usb in 146 operation failed. [ 517.974187][ T5877] gp8psk: failed to get FW version [ 517.994375][ T5877] gp8psk: FPGA Version = 165 [ 518.136750][ T5945] usb 9-1: config 0 has an invalid interface number: 117 but max is 0 [ 518.155632][ T5945] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 518.183543][ T5945] usb 9-1: config 0 has no interface number 0 [ 518.197532][ T5945] usb 9-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 518.221275][ T5945] usb 9-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 518.269251][ T5945] usb 9-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 518.293493][ T5945] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.322044][ T5945] usb 9-1: Product: syz [ 518.326652][ T5877] gp8psk: usb in 138 operation failed. [ 518.326687][ T5877] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 518.326725][ T5877] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 518.331414][ T5877] usb 8-1: USB disconnect, device number 22 [ 518.367587][ T5945] usb 9-1: Manufacturer: syz [ 518.383617][ T5945] usb 9-1: SerialNumber: syz [ 518.399282][ T5945] usb 9-1: config 0 descriptor?? [ 518.452392][T10576] FAULT_INJECTION: forcing a failure. [ 518.452392][T10576] name failslab, interval 1, probability 0, space 0, times 0 [ 518.467903][T10576] CPU: 1 UID: 0 PID: 10576 Comm: syz.2.1098 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 518.467936][T10576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 518.467949][T10576] Call Trace: [ 518.467957][T10576] [ 518.467966][T10576] dump_stack_lvl+0x189/0x250 [ 518.468001][T10576] ? __pfx____ratelimit+0x10/0x10 [ 518.468034][T10576] ? __pfx_dump_stack_lvl+0x10/0x10 [ 518.468064][T10576] ? __pfx__printk+0x10/0x10 [ 518.468090][T10576] ? __pfx___might_resched+0x10/0x10 [ 518.468113][T10576] ? fs_reclaim_acquire+0x7d/0x100 [ 518.468141][T10576] should_fail_ex+0x414/0x560 [ 518.468168][T10576] should_failslab+0xa8/0x100 [ 518.468202][T10576] __kmalloc_noprof+0xcb/0x4f0 [ 518.468230][T10576] ? kfree+0x4d/0x440 [ 518.468254][T10576] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 518.468286][T10576] tomoyo_realpath_from_path+0xe3/0x5d0 [ 518.468314][T10576] ? tomoyo_domain+0xda/0x130 [ 518.468346][T10576] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 518.468368][T10576] tomoyo_path_number_perm+0x1e8/0x5a0 [ 518.468393][T10576] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 518.468431][T10576] ? __lock_acquire+0xab9/0xd20 [ 518.468473][T10576] ? __fget_files+0x2a/0x420 [ 518.468495][T10576] ? __fget_files+0x2a/0x420 [ 518.468512][T10576] ? __fget_files+0x3a0/0x420 [ 518.468530][T10576] ? __fget_files+0x2a/0x420 [ 518.468572][T10576] security_file_ioctl+0xcb/0x2d0 [ 518.468600][T10576] __se_sys_ioctl+0x47/0x170 [ 518.468631][T10576] do_syscall_64+0xfa/0x3b0 [ 518.468654][T10576] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.468675][T10576] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 518.468696][T10576] ? clear_bhb_loop+0x60/0xb0 [ 518.468729][T10576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.468750][T10576] RIP: 0033:0x7fa07cf8e969 [ 518.468768][T10576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 518.468787][T10576] RSP: 002b:00007fa07dd9b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 518.468810][T10576] RAX: ffffffffffffffda RBX: 00007fa07d1b5fa0 RCX: 00007fa07cf8e969 [ 518.468826][T10576] RDX: 0000200000000680 RSI: 00000000c0306201 RDI: 0000000000000003 [ 518.468841][T10576] RBP: 00007fa07dd9b090 R08: 0000000000000000 R09: 0000000000000000 [ 518.468854][T10576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 518.468867][T10576] R13: 0000000000000000 R14: 00007fa07d1b5fa0 R15: 00007ffca6ec8e48 [ 518.468900][T10576] [ 518.468932][T10576] ERROR: Out of memory at tomoyo_realpath_from_path. [ 518.727820][ T5945] usbtouchscreen 9-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 518.742453][ T5945] usb 9-1: USB disconnect, device number 17 [ 518.797177][ T9965] vhci_hcd: vhci_device speed not set [ 518.853581][ T24] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 519.007454][ T24] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 519.025083][ T24] usb 5-1: config 1 has no interface number 1 [ 519.031290][ T24] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 519.067678][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 519.081356][ T24] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 0 [ 519.098828][ T24] usb 5-1: string descriptor 0 read error: -22 [ 519.267589][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 519.279332][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.396768][ T24] usb 5-1: low speed audio streaming not supported [ 519.638030][ T24] usb 5-1: USB disconnect, device number 28 [ 519.956239][T10599] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1105'. [ 520.384282][T10616] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 520.390852][T10616] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 520.451896][T10616] vhci_hcd vhci_hcd.0: Device attached [ 520.457579][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 520.457595][ T30] audit: type=1326 audit(2000000218.380:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10589 comm="syz.2.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07cf8e969 code=0x7fc00000 [ 520.573192][T10622] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 520.680225][T10617] vhci_hcd: cannot find a urb of seqnum 2 max seqnum 0 [ 520.723898][ T9965] usb 47-1: new high-speed USB device number 3 using vhci_hcd [ 520.749779][ T30] audit: type=1326 audit(2000000218.380:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10589 comm="syz.2.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa07cf8e969 code=0x7fc00000 [ 521.081611][ T4541] vhci_hcd: stop threads [ 521.096337][ T4541] vhci_hcd: release socket [ 521.102012][ T30] audit: type=1326 audit(2000000218.380:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10589 comm="syz.2.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07cf8e969 code=0x7fc00000 [ 521.140373][ T4541] vhci_hcd: disconnect device [ 521.201205][ T30] audit: type=1326 audit(2000000218.380:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10589 comm="syz.2.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07cf8e969 code=0x7fc00000 [ 521.222847][ C0] vkms_vblank_simulate: vblank timer overrun [ 521.263660][ T30] audit: type=1326 audit(2000000218.380:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10589 comm="syz.2.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07cf8e969 code=0x7fc00000 [ 521.427771][ T30] audit: type=1326 audit(2000000218.380:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10589 comm="syz.2.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07cf8e969 code=0x7fc00000 [ 521.579541][ T30] audit: type=1326 audit(2000000218.380:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10589 comm="syz.2.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07cf8e969 code=0x7fc00000 [ 521.674893][ T30] audit: type=1326 audit(2000000218.380:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10589 comm="syz.2.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07cf8e969 code=0x7fc00000 [ 521.891927][ T30] audit: type=1326 audit(2000000218.380:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10589 comm="syz.2.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07cf8e969 code=0x7fc00000 [ 522.140806][ T30] audit: type=1326 audit(2000000218.380:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10589 comm="syz.2.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07cf8e969 code=0x7fc00000 [ 523.659825][ T9] libceph: connect (1)[c::]:6789 error -101 [ 523.666628][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 523.673595][ T5897] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 523.697829][T10674] netlink: 'syz.7.1127': attribute type 10 has an invalid length. [ 523.708912][T10674] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1127'. [ 523.778457][T10668] ceph: No mds server is up or the cluster is laggy [ 523.814520][ T5897] usb 5-1: device descriptor read/64, error -71 [ 524.113706][ T5897] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 524.434628][ T5897] usb 5-1: device descriptor read/64, error -71 [ 524.560312][ T5897] usb usb5-port1: attempt power cycle [ 524.984074][T10685] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 524.990695][T10685] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 525.024360][T10685] vhci_hcd vhci_hcd.0: Device attached [ 525.063000][T10686] vhci_hcd: cannot find a urb of seqnum 2 max seqnum 0 [ 525.078250][ T6292] vhci_hcd: stop threads [ 525.083482][ T5897] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 525.108099][ T6292] vhci_hcd: release socket [ 525.120280][ T6292] vhci_hcd: disconnect device [ 525.135409][ T5897] usb 5-1: device descriptor read/8, error -71 [ 525.163897][T10693] kAFS: No cell specified [ 525.627396][ T5897] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 525.676872][ T5897] usb 5-1: device descriptor read/8, error -71 [ 525.744032][ T9501] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 525.786740][ T5897] usb usb5-port1: unable to enumerate USB device [ 525.961272][ T9501] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 525.981497][ T9965] vhci_hcd: vhci_device speed not set [ 526.013898][ T9501] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.029783][ T9501] usb 9-1: config 0 descriptor?? [ 526.353771][ T5877] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 526.383541][T10712] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 526.388492][T10710] lo speed is unknown, defaulting to 1000 [ 526.520312][ T5877] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.539858][ T5877] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.551544][ T5877] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 526.561480][ T5877] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.576126][ T5877] usb 8-1: config 0 descriptor?? [ 526.994730][ T5877] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 527.004252][ T5877] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0 [ 527.202829][ T5877] cp2112 0003:10C4:EA90.0007: Part Number: 0x82 Device Version: 0xFE [ 527.819904][T10705] FAULT_INJECTION: forcing a failure. [ 527.819904][T10705] name failslab, interval 1, probability 0, space 0, times 0 [ 527.945695][T10705] CPU: 0 UID: 0 PID: 10705 Comm: syz.7.1137 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 527.945727][T10705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 527.945740][T10705] Call Trace: [ 527.945749][T10705] [ 527.945759][T10705] dump_stack_lvl+0x189/0x250 [ 527.945793][T10705] ? __pfx____ratelimit+0x10/0x10 [ 527.945826][T10705] ? __pfx_dump_stack_lvl+0x10/0x10 [ 527.945855][T10705] ? __pfx__printk+0x10/0x10 [ 527.945881][T10705] ? __pfx___might_resched+0x10/0x10 [ 527.945904][T10705] ? fs_reclaim_acquire+0x7d/0x100 [ 527.945931][T10705] should_fail_ex+0x414/0x560 [ 527.945963][T10705] should_failslab+0xa8/0x100 [ 527.945996][T10705] __kmalloc_noprof+0xcb/0x4f0 [ 527.946025][T10705] ? kfree+0x4d/0x440 [ 527.946049][T10705] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 527.946081][T10705] tomoyo_realpath_from_path+0xe3/0x5d0 [ 527.946109][T10705] ? tomoyo_domain+0xda/0x130 [ 527.946141][T10705] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 527.946162][T10705] tomoyo_path_number_perm+0x1e8/0x5a0 [ 527.946186][T10705] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 527.946210][T10705] ? __pfx___schedule+0x10/0x10 [ 527.946251][T10705] ? __lock_acquire+0xab9/0xd20 [ 527.946292][T10705] ? __fget_files+0x2a/0x420 [ 527.946315][T10705] ? __fget_files+0x2a/0x420 [ 527.946332][T10705] ? __fget_files+0x3a0/0x420 [ 527.946350][T10705] ? __fget_files+0x2a/0x420 [ 527.946373][T10705] security_file_ioctl+0xcb/0x2d0 [ 527.946399][T10705] __se_sys_ioctl+0x47/0x170 [ 527.946428][T10705] do_syscall_64+0xfa/0x3b0 [ 527.946450][T10705] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.946470][T10705] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 527.946489][T10705] ? clear_bhb_loop+0x60/0xb0 [ 527.946514][T10705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.946534][T10705] RIP: 0033:0x7fc33598e969 [ 527.946559][T10705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 527.946581][T10705] RSP: 002b:00007fc336742038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 527.946602][T10705] RAX: ffffffffffffffda RBX: 00007fc335bb5fa0 RCX: 00007fc33598e969 [ 527.946617][T10705] RDX: 0000000000000000 RSI: 0000000000000705 RDI: 0000000000000004 [ 527.946629][T10705] RBP: 00007fc336742090 R08: 0000000000000000 R09: 0000000000000000 [ 527.946641][T10705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.946653][T10705] R13: 0000000000000000 R14: 00007fc335bb5fa0 R15: 00007ffd99d9b6e8 [ 527.946693][T10705] [ 528.202247][ C0] vkms_vblank_simulate: vblank timer overrun [ 528.301872][T10705] ERROR: Out of memory at tomoyo_realpath_from_path. [ 528.543565][ T5877] cp2112 0003:10C4:EA90.0007: error reading lock byte: -71 [ 528.574348][ T5877] usb 8-1: USB disconnect, device number 23 [ 528.885039][ T9965] usb 9-1: USB disconnect, device number 18 [ 529.423737][T10739] netlink: 'syz.9.1146': attribute type 10 has an invalid length. [ 529.432654][T10739] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1146'. [ 529.433260][T10744] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 529.448140][T10744] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 529.455756][ C0] vkms_vblank_simulate: vblank timer overrun [ 529.483673][T10744] vhci_hcd vhci_hcd.0: Device attached [ 529.638104][T10745] vhci_hcd: cannot find a urb of seqnum 2 max seqnum 2 [ 529.659384][ T6292] vhci_hcd: stop threads [ 529.667199][ T6292] vhci_hcd: release socket [ 529.678479][ T6292] vhci_hcd: disconnect device [ 529.723744][ T5897] usb 41-1: new high-speed USB device number 4 using vhci_hcd [ 530.136452][T10753] netlink: 'syz.7.1149': attribute type 12 has an invalid length. [ 530.251088][T10757] netlink: 100 bytes leftover after parsing attributes in process `syz.8.1151'. [ 530.281272][T10757] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1151'. [ 530.291480][T10758] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1151'. [ 530.489672][ T5829] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 530.505879][ T5829] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 532.838813][T10770] FAULT_INJECTION: forcing a failure. [ 532.838813][T10770] name failslab, interval 1, probability 0, space 0, times 0 [ 532.863548][T10770] CPU: 1 UID: 0 PID: 10770 Comm: syz.8.1155 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 532.863584][T10770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 532.863597][T10770] Call Trace: [ 532.863605][T10770] [ 532.863613][T10770] dump_stack_lvl+0x189/0x250 [ 532.863648][T10770] ? __pfx____ratelimit+0x10/0x10 [ 532.863683][T10770] ? __pfx_dump_stack_lvl+0x10/0x10 [ 532.863714][T10770] ? __pfx__printk+0x10/0x10 [ 532.863741][T10770] ? __pfx___might_resched+0x10/0x10 [ 532.863764][T10770] ? fs_reclaim_acquire+0x7d/0x100 [ 532.863791][T10770] should_fail_ex+0x414/0x560 [ 532.863819][T10770] should_failslab+0xa8/0x100 [ 532.863854][T10770] __kmalloc_noprof+0xcb/0x4f0 [ 532.863895][T10770] ? kfree+0x4d/0x440 [ 532.863919][T10770] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 532.863951][T10770] tomoyo_realpath_from_path+0xe3/0x5d0 [ 532.863978][T10770] ? tomoyo_domain+0xda/0x130 [ 532.864007][T10770] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 532.864027][T10770] tomoyo_path_number_perm+0x1e8/0x5a0 [ 532.864051][T10770] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 532.864088][T10770] ? __lock_acquire+0xab9/0xd20 [ 532.864127][T10770] ? __fget_files+0x2a/0x420 [ 532.864148][T10770] ? __fget_files+0x2a/0x420 [ 532.864166][T10770] ? __fget_files+0x3a0/0x420 [ 532.864183][T10770] ? __fget_files+0x2a/0x420 [ 532.864206][T10770] security_file_ioctl+0xcb/0x2d0 [ 532.864230][T10770] __se_sys_ioctl+0x47/0x170 [ 532.864258][T10770] do_syscall_64+0xfa/0x3b0 [ 532.864278][T10770] ? lockdep_hardirqs_on+0x9c/0x150 [ 532.864297][T10770] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.864317][T10770] ? clear_bhb_loop+0x60/0xb0 [ 532.864341][T10770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.864361][T10770] RIP: 0033:0x7f57fa78e969 [ 532.864378][T10770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.864396][T10770] RSP: 002b:00007f57fb6ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 532.864416][T10770] RAX: ffffffffffffffda RBX: 00007f57fa9b5fa0 RCX: 00007f57fa78e969 [ 532.864431][T10770] RDX: 0000200000000040 RSI: 00000000c0404806 RDI: 0000000000000005 [ 532.864444][T10770] RBP: 00007f57fb6ad090 R08: 0000000000000000 R09: 0000000000000000 [ 532.864456][T10770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.864468][T10770] R13: 0000000000000000 R14: 00007f57fa9b5fa0 R15: 00007ffd024efc98 [ 532.864498][T10770] [ 532.865073][T10770] ERROR: Out of memory at tomoyo_realpath_from_path. [ 533.184514][ T5829] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 533.335783][ T5829] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.538248][ T5829] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 533.611928][ T5829] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 533.893969][ T5829] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.976342][ T5829] usb 8-1: config 0 descriptor?? [ 534.204541][T10781] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 534.262462][T10803] FAULT_INJECTION: forcing a failure. [ 534.262462][T10803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 534.276641][T10803] CPU: 1 UID: 0 PID: 10803 Comm: syz.9.1159 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 534.276671][T10803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 534.276682][T10803] Call Trace: [ 534.276707][T10803] [ 534.276717][T10803] dump_stack_lvl+0x189/0x250 [ 534.276752][T10803] ? __pfx____ratelimit+0x10/0x10 [ 534.276786][T10803] ? __pfx_dump_stack_lvl+0x10/0x10 [ 534.276818][T10803] ? __pfx__printk+0x10/0x10 [ 534.276839][T10803] ? __might_fault+0xb0/0x130 [ 534.276884][T10803] should_fail_ex+0x414/0x560 [ 534.276912][T10803] _copy_from_user+0x2d/0xb0 [ 534.276944][T10803] ___sys_sendmsg+0x158/0x2a0 [ 534.276978][T10803] ? __pfx____sys_sendmsg+0x10/0x10 [ 534.277045][T10803] ? __fget_files+0x2a/0x420 [ 534.277064][T10803] ? __fget_files+0x3a0/0x420 [ 534.277095][T10803] __x64_sys_sendmsg+0x19b/0x260 [ 534.277128][T10803] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 534.277167][T10803] ? __pfx_ksys_write+0x10/0x10 [ 534.277194][T10803] ? rcu_is_watching+0x15/0xb0 [ 534.277225][T10803] ? do_syscall_64+0xbe/0x3b0 [ 534.277250][T10803] do_syscall_64+0xfa/0x3b0 [ 534.277273][T10803] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.277294][T10803] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 534.277315][T10803] ? clear_bhb_loop+0x60/0xb0 [ 534.277340][T10803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.277361][T10803] RIP: 0033:0x7ff00958e969 [ 534.277380][T10803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 534.277405][T10803] RSP: 002b:00007ff00a498038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 534.277427][T10803] RAX: ffffffffffffffda RBX: 00007ff0097b6160 RCX: 00007ff00958e969 [ 534.277443][T10803] RDX: 0000000000000004 RSI: 00002000000004c0 RDI: 0000000000000007 [ 534.277457][T10803] RBP: 00007ff00a498090 R08: 0000000000000000 R09: 0000000000000000 [ 534.277470][T10803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.277483][T10803] R13: 0000000000000000 R14: 00007ff0097b6160 R15: 00007ffefb4960a8 [ 534.277515][T10803] [ 534.975180][ T5829] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 534.997440][ T5829] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0 [ 535.109709][ T5829] cp2112 0003:10C4:EA90.0009: Part Number: 0x82 Device Version: 0xFE [ 535.113593][ T5897] vhci_hcd: vhci_device speed not set [ 535.238858][T10812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.253520][ T5877] usb 5-1: new low-speed USB device number 33 using dummy_hcd [ 535.289386][T10812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.366014][T10816] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 535.372596][T10816] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 535.385104][T10816] vhci_hcd vhci_hcd.0: Device attached [ 535.436373][ T5877] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 535.454899][T10817] vhci_hcd: cannot find a urb of seqnum 2 max seqnum 1 [ 535.464653][ T5877] usb 5-1: config 1 has no interface number 1 [ 535.475135][ T6292] vhci_hcd: stop threads [ 535.479512][ T6292] vhci_hcd: release socket [ 535.488068][ T5877] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 535.501506][ T6292] vhci_hcd: disconnect device [ 535.509212][ T5877] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 535.524201][ T5877] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 0 [ 535.548167][ T5877] usb 5-1: string descriptor 0 read error: -22 [ 535.556316][ T5877] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 535.565688][ T9] vhci_hcd: vhci_device speed not set [ 535.572349][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.590775][ T5877] usb 5-1: low speed audio streaming not supported [ 535.801768][ T5877] usb 5-1: USB disconnect, device number 33 [ 535.957512][ T5829] cp2112 0003:10C4:EA90.0009: error reading lock byte: -71 [ 535.976983][ T5829] usb 8-1: USB disconnect, device number 24 [ 536.691353][T10837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1176'. [ 536.869325][T10841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.878240][T10841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.887324][T10841] FAULT_INJECTION: forcing a failure. [ 536.887324][T10841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 536.901363][T10841] CPU: 1 UID: 0 PID: 10841 Comm: syz.2.1179 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 536.901391][T10841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 536.901403][T10841] Call Trace: [ 536.901412][T10841] [ 536.901420][T10841] dump_stack_lvl+0x189/0x250 [ 536.901454][T10841] ? __pfx____ratelimit+0x10/0x10 [ 536.901487][T10841] ? __pfx_dump_stack_lvl+0x10/0x10 [ 536.901516][T10841] ? __pfx__printk+0x10/0x10 [ 536.901549][T10841] should_fail_ex+0x414/0x560 [ 536.901576][T10841] _copy_to_user+0x31/0xb0 [ 536.901607][T10841] simple_read_from_buffer+0xe1/0x170 [ 536.901643][T10841] proc_fail_nth_read+0x1df/0x250 [ 536.901668][T10841] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 536.901693][T10841] ? rw_verify_area+0x258/0x650 [ 536.901720][T10841] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 536.901744][T10841] vfs_read+0x1fd/0x980 [ 536.901777][T10841] ? __pfx___mutex_lock+0x10/0x10 [ 536.901798][T10841] ? __pfx_vfs_read+0x10/0x10 [ 536.901827][T10841] ? __fget_files+0x2a/0x420 [ 536.901851][T10841] ? __fget_files+0x3a0/0x420 [ 536.901868][T10841] ? __fget_files+0x2a/0x420 [ 536.901896][T10841] ksys_read+0x145/0x250 [ 536.901926][T10841] ? __pfx_ksys_read+0x10/0x10 [ 536.901951][T10841] ? rcu_is_watching+0x15/0xb0 [ 536.901980][T10841] ? do_syscall_64+0xbe/0x3b0 [ 536.902003][T10841] do_syscall_64+0xfa/0x3b0 [ 536.902022][T10841] ? lockdep_hardirqs_on+0x9c/0x150 [ 536.902041][T10841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.902061][T10841] ? clear_bhb_loop+0x60/0xb0 [ 536.902085][T10841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.902104][T10841] RIP: 0033:0x7fa07cf8d37c [ 536.902122][T10841] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 536.902140][T10841] RSP: 002b:00007fa07dd9b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 536.902161][T10841] RAX: ffffffffffffffda RBX: 00007fa07d1b5fa0 RCX: 00007fa07cf8d37c [ 536.902182][T10841] RDX: 000000000000000f RSI: 00007fa07dd9b0a0 RDI: 0000000000000004 [ 536.902195][T10841] RBP: 00007fa07dd9b090 R08: 0000000000000000 R09: 0000000000000000 [ 536.902208][T10841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 536.902220][T10841] R13: 0000000000000000 R14: 00007fa07d1b5fa0 R15: 00007ffca6ec8e48 [ 536.902251][T10841] [ 537.401089][T10846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.424011][T10846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.711041][T10855] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 537.893470][ T9501] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 538.034177][ T9501] usb 8-1: device descriptor read/64, error -71 [ 538.157195][T10866] lo speed is unknown, defaulting to 1000 [ 538.312947][ T24] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 538.463540][ T9501] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 538.475196][ T24] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 538.573433][ T24] usb 5-1: config 1 has no interface number 1 [ 538.579780][ T24] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 538.597150][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 538.626453][ T24] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 0 [ 538.641479][ T24] usb 5-1: string descriptor 0 read error: -22 [ 538.665155][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 538.691823][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.723481][ T9501] usb 8-1: device descriptor read/64, error -71 [ 538.850298][ T24] usb 5-1: low speed audio streaming not supported [ 538.863885][ T9501] usb usb8-port1: attempt power cycle [ 538.875024][T10875] netlink: 'syz.8.1190': attribute type 10 has an invalid length. [ 538.913179][T10875] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1190'. [ 539.015787][ T24] usb 5-1: USB disconnect, device number 34 [ 539.203643][ T9501] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 539.244832][ T9501] usb 8-1: device descriptor read/8, error -71 [ 539.254264][T10882] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 539.503470][ T9501] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 539.534177][ T9501] usb 8-1: device descriptor read/8, error -71 [ 539.780268][T10893] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 539.849533][ T9501] usb usb8-port1: unable to enumerate USB device [ 539.886495][T10895] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1197'. [ 540.593497][ T9501] usb 5-1: new low-speed USB device number 35 using dummy_hcd [ 540.755536][ T9501] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 540.797925][ T9501] usb 5-1: config 1 has no interface number 1 [ 540.817556][ T9501] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 540.865011][ T9501] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 540.902370][ T9501] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 0 [ 540.947335][ T9501] usb 5-1: string descriptor 0 read error: -22 [ 540.954494][ T9501] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 540.970335][ T9501] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.075761][ T9501] usb 5-1: low speed audio streaming not supported [ 541.261731][T10909] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1203'. [ 541.463950][T10909] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1203'. [ 542.390683][T10919] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 542.537017][ T5945] usb 5-1: USB disconnect, device number 35 [ 542.886329][T10930] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1209'. [ 542.981708][T10933] netlink: 'syz.2.1212': attribute type 1 has an invalid length. [ 542.990226][T10933] netlink: 'syz.2.1212': attribute type 2 has an invalid length. [ 542.998545][T10933] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1212'. [ 544.536837][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 545.363512][ T9] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 545.624725][T10962] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 545.803492][T10968] syz.8.1221: attempt to access beyond end of device [ 545.803492][T10968] loop8: rw=0, sector=0, nr_sectors = 1 limit=0 [ 545.816969][T10968] FAT-fs (loop8): unable to read boot sector [ 545.919343][ T9] usb 8-1: config 0 has an invalid interface number: 117 but max is 0 [ 545.967513][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 546.006536][ T5877] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 546.057410][ T9] usb 8-1: config 0 has no interface number 0 [ 546.108751][ T9] usb 8-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 546.178056][ T9] usb 8-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 546.253643][ T5877] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 546.294315][ T9] usb 8-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 546.313530][ T5877] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 546.342781][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.351325][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.368561][ T9] usb 8-1: Product: syz [ 546.373042][ T5877] usb 5-1: Product: syz [ 546.387609][ T9] usb 8-1: Manufacturer: syz [ 546.392312][ T5877] usb 5-1: Manufacturer: syz [ 546.407681][ T9] usb 8-1: SerialNumber: syz [ 546.412600][ T5877] usb 5-1: SerialNumber: syz [ 546.448672][ T9] usb 8-1: config 0 descriptor?? [ 546.459131][ T5877] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 546.673476][ T5829] usb 9-1: new low-speed USB device number 19 using dummy_hcd [ 546.719100][ T9] usbtouchscreen 8-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 546.737699][T10977] cgroup: fork rejected by pids controller in /syz2 [ 546.762649][ T9] usb 8-1: USB disconnect, device number 29 [ 546.855868][T11012] kernel read not supported for file /eth0 (pid: 11012 comm: syz.2.1226) [ 546.858864][ T5829] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 546.874626][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 546.874642][ T30] audit: type=1800 audit(2000000244.810:147): pid=11012 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1226" name="eth0" dev="mqueue" ino=28952 res=0 errno=0 [ 546.911131][ T5829] usb 9-1: config 1 has no interface number 1 [ 546.919688][ T5829] usb 9-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 546.930872][ T5829] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 546.944128][ T5829] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 0 [ 546.959261][ T5829] usb 9-1: string descriptor 0 read error: -22 [ 546.965818][ T5829] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 546.974917][ T5829] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.990791][ T5829] usb 9-1: low speed audio streaming not supported [ 547.291733][T10973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.308032][T10973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.422201][T11023] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1229'. [ 547.457223][ T5945] usb 9-1: USB disconnect, device number 19 [ 547.510463][T11024] FAULT_INJECTION: forcing a failure. [ 547.510463][T11024] name failslab, interval 1, probability 0, space 0, times 0 [ 547.548426][T11024] CPU: 0 UID: 0 PID: 11024 Comm: syz.9.1228 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 547.548459][T11024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 547.548473][T11024] Call Trace: [ 547.548482][T11024] [ 547.548492][T11024] dump_stack_lvl+0x189/0x250 [ 547.548533][T11024] ? __pfx____ratelimit+0x10/0x10 [ 547.548567][T11024] ? __pfx_dump_stack_lvl+0x10/0x10 [ 547.548599][T11024] ? __pfx__printk+0x10/0x10 [ 547.548627][T11024] ? __pfx___might_resched+0x10/0x10 [ 547.548651][T11024] ? fs_reclaim_acquire+0x7d/0x100 [ 547.548681][T11024] should_fail_ex+0x414/0x560 [ 547.548710][T11024] should_failslab+0xa8/0x100 [ 547.548744][T11024] __kmalloc_noprof+0xcb/0x4f0 [ 547.548775][T11024] ? kfree+0x4d/0x440 [ 547.548801][T11024] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 547.548835][T11024] tomoyo_realpath_from_path+0xe3/0x5d0 [ 547.548865][T11024] ? tomoyo_domain+0xda/0x130 [ 547.548899][T11024] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 547.548922][T11024] tomoyo_path_number_perm+0x1e8/0x5a0 [ 547.548949][T11024] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 547.548990][T11024] ? __lock_acquire+0xab9/0xd20 [ 547.549034][T11024] ? __fget_files+0x2a/0x420 [ 547.549058][T11024] ? __fget_files+0x2a/0x420 [ 547.549077][T11024] ? __fget_files+0x3a0/0x420 [ 547.549096][T11024] ? __fget_files+0x2a/0x420 [ 547.549121][T11024] security_file_ioctl+0xcb/0x2d0 [ 547.549148][T11024] __se_sys_ioctl+0x47/0x170 [ 547.549178][T11024] do_syscall_64+0xfa/0x3b0 [ 547.549199][T11024] ? lockdep_hardirqs_on+0x9c/0x150 [ 547.549218][T11024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.549239][T11024] ? clear_bhb_loop+0x60/0xb0 [ 547.549264][T11024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.549292][T11024] RIP: 0033:0x7ff00958e969 [ 547.549310][T11024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.549329][T11024] RSP: 002b:00007ff00a498038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 547.549351][T11024] RAX: ffffffffffffffda RBX: 00007ff0097b6160 RCX: 00007ff00958e969 [ 547.549367][T11024] RDX: 0000200000001600 RSI: 00000000c080aebe RDI: 0000000000000007 [ 547.549381][T11024] RBP: 00007ff00a498090 R08: 0000000000000000 R09: 0000000000000000 [ 547.549395][T11024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.549407][T11024] R13: 0000000000000000 R14: 00007ff0097b6160 R15: 00007ffefb4960a8 [ 547.549440][T11024] [ 547.551772][T11024] ERROR: Out of memory at tomoyo_realpath_from_path. [ 547.974545][T11015] delete_channel: no stack [ 548.282888][ T5877] usb 5-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 548.307331][ T5877] usb 5-1: USB disconnect, device number 36 [ 549.885591][T11042] netlink: 'syz.7.1234': attribute type 10 has an invalid length. [ 549.906019][T11042] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1234'. [ 550.653496][ T5945] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 551.313115][T11056] sctp: failed to load transform for md5: -2 [ 551.320267][T11064] xt_CT: No such helper "pptp" [ 551.433657][ T5945] usb 10-1: Using ep0 maxpacket: 16 [ 551.464006][ T5945] usb 10-1: config 0 has no interfaces? [ 551.490518][ T5945] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 551.508644][ T5945] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.519965][ T5945] usb 10-1: Product: syz [ 551.525364][ T5945] usb 10-1: Manufacturer: syz [ 551.530140][ T5945] usb 10-1: SerialNumber: syz [ 551.543818][ T5945] usb 10-1: config 0 descriptor?? [ 551.843581][ T5877] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 551.948725][T11050] netlink: 248 bytes leftover after parsing attributes in process `syz.9.1237'. [ 552.045260][ T5877] usb 9-1: config 0 has an invalid interface number: 49 but max is 0 [ 552.066125][ T5877] usb 9-1: config 0 has no interface number 0 [ 552.072286][ T5877] usb 9-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=2d.ad [ 552.087788][ T5877] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.126925][ T5877] usb 9-1: config 0 descriptor?? [ 552.170962][ T5877] usb 10-1: USB disconnect, device number 15 [ 552.409867][ T9] usb 9-1: USB disconnect, device number 20 [ 552.721526][T11079] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1240'. [ 552.745721][ T5945] usb 8-1: new low-speed USB device number 30 using dummy_hcd [ 552.991010][ T5945] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 553.059643][ T5945] usb 8-1: config 1 has no interface number 1 [ 553.094321][ T5945] usb 8-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 553.117027][ T5945] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 553.137685][ T5945] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 0 [ 553.158386][ T5945] usb 8-1: string descriptor 0 read error: -22 [ 553.181272][ T5945] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 553.203613][ T5945] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.237703][ T5945] usb 8-1: low speed audio streaming not supported [ 553.689620][ T5945] usb 8-1: USB disconnect, device number 30 [ 555.145615][T11112] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1250'. [ 555.184167][T11114] FAULT_INJECTION: forcing a failure. [ 555.184167][T11114] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 555.213145][T11118] netlink: 'syz.4.1251': attribute type 10 has an invalid length. [ 555.224951][T11118] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1251'. [ 555.234240][T11114] CPU: 1 UID: 0 PID: 11114 Comm: syz.2.1249 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 555.234274][T11114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 555.234287][T11114] Call Trace: [ 555.234295][T11114] [ 555.234304][T11114] dump_stack_lvl+0x189/0x250 [ 555.234341][T11114] ? __pfx____ratelimit+0x10/0x10 [ 555.234375][T11114] ? __pfx_dump_stack_lvl+0x10/0x10 [ 555.234415][T11114] ? __pfx__printk+0x10/0x10 [ 555.234437][T11114] ? __might_fault+0xb0/0x130 [ 555.234483][T11114] should_fail_ex+0x414/0x560 [ 555.234512][T11114] _copy_from_user+0x2d/0xb0 [ 555.234544][T11114] ___sys_sendmsg+0x158/0x2a0 [ 555.234576][T11114] ? __pfx____sys_sendmsg+0x10/0x10 [ 555.234645][T11114] ? __fget_files+0x2a/0x420 [ 555.234664][T11114] ? __fget_files+0x3a0/0x420 [ 555.234695][T11114] __x64_sys_sendmsg+0x19b/0x260 [ 555.234727][T11114] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 555.234767][T11114] ? __pfx_ksys_write+0x10/0x10 [ 555.234793][T11114] ? rcu_is_watching+0x15/0xb0 [ 555.234822][T11114] ? do_syscall_64+0xbe/0x3b0 [ 555.234846][T11114] do_syscall_64+0xfa/0x3b0 [ 555.234865][T11114] ? lockdep_hardirqs_on+0x9c/0x150 [ 555.234885][T11114] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.234906][T11114] ? clear_bhb_loop+0x60/0xb0 [ 555.234931][T11114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.234951][T11114] RIP: 0033:0x7fa07cf8e969 [ 555.234969][T11114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 555.234987][T11114] RSP: 002b:00007fa07dd9b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 555.235009][T11114] RAX: ffffffffffffffda RBX: 00007fa07d1b5fa0 RCX: 00007fa07cf8e969 [ 555.235024][T11114] RDX: 0000000020004804 RSI: 0000200000006040 RDI: 0000000000000004 [ 555.235038][T11114] RBP: 00007fa07dd9b090 R08: 0000000000000000 R09: 0000000000000000 [ 555.235051][T11114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 555.235065][T11114] R13: 0000000000000000 R14: 00007fa07d1b5fa0 R15: 00007ffca6ec8e48 [ 555.235098][T11114] [ 555.473315][T11120] netlink: 'syz.7.1253': attribute type 11 has an invalid length. [ 555.485473][T11120] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1253'. [ 555.783340][T11127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.831159][T11127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.333519][ T9] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 556.380417][T11138] batadv_slave_1: entered promiscuous mode [ 556.495271][ T9] usb 5-1: config 0 has no interfaces? [ 556.512351][ T9] usb 5-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51 [ 556.524473][T11138] batadv_slave_1: left promiscuous mode [ 556.533966][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.541995][ T9] usb 5-1: Product: syz [ 556.563451][ T9] usb 5-1: Manufacturer: syz [ 556.568096][ T9] usb 5-1: SerialNumber: syz [ 556.583173][ T9] usb 5-1: config 0 descriptor?? [ 557.080237][ T5877] usb 5-1: USB disconnect, device number 37 [ 557.308590][T11155] ptrace attach of "./syz-executor exec"[8536] was attempted by "./syz-executor exec"[11155] [ 557.679682][T11159] syzkaller0: entered promiscuous mode [ 557.695708][T11159] syzkaller0: entered allmulticast mode [ 558.544907][T11167] netlink: 'syz.4.1265': attribute type 10 has an invalid length. [ 558.552788][T11167] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1265'. [ 559.924864][T11162] syz.8.1264 (11162): drop_caches: 2 [ 560.167284][ T5945] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 560.331073][ T5945] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.342833][ T5945] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.352958][ T5945] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 560.366318][ T5945] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 560.375788][ T5945] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.388200][ T5945] usb 8-1: config 0 descriptor?? [ 560.832781][ T5945] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 560.925707][ T5945] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 561.825116][T11187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.837818][T11187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.781464][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.788747][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.897547][ T30] audit: type=1326 audit(2000000260.820:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11208 comm="syz.4.1278" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd580f8e969 code=0x0 [ 563.964646][ T5829] usb 8-1: USB disconnect, device number 31 [ 564.347141][T11231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.356046][T11231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.364437][T11231] FAULT_INJECTION: forcing a failure. [ 564.364437][T11231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 564.377570][T11231] CPU: 0 UID: 0 PID: 11231 Comm: syz.2.1279 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 564.377609][T11231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 564.377629][T11231] Call Trace: [ 564.377637][T11231] [ 564.377645][T11231] dump_stack_lvl+0x189/0x250 [ 564.377680][T11231] ? __pfx____ratelimit+0x10/0x10 [ 564.377713][T11231] ? __pfx_dump_stack_lvl+0x10/0x10 [ 564.377742][T11231] ? __pfx__printk+0x10/0x10 [ 564.377763][T11231] ? __might_fault+0xb0/0x130 [ 564.377805][T11231] should_fail_ex+0x414/0x560 [ 564.377832][T11231] _copy_from_user+0x2d/0xb0 [ 564.377862][T11231] ___sys_sendmsg+0x158/0x2a0 [ 564.377895][T11231] ? __pfx____sys_sendmsg+0x10/0x10 [ 564.377959][T11231] ? __fget_files+0x2a/0x420 [ 564.377977][T11231] ? __fget_files+0x3a0/0x420 [ 564.378007][T11231] __x64_sys_sendmsg+0x19b/0x260 [ 564.378038][T11231] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 564.378076][T11231] ? __pfx_ksys_write+0x10/0x10 [ 564.378102][T11231] ? rcu_is_watching+0x15/0xb0 [ 564.378130][T11231] ? do_syscall_64+0xbe/0x3b0 [ 564.378155][T11231] do_syscall_64+0xfa/0x3b0 [ 564.378174][T11231] ? lockdep_hardirqs_on+0x9c/0x150 [ 564.378193][T11231] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.378213][T11231] ? clear_bhb_loop+0x60/0xb0 [ 564.378238][T11231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.378257][T11231] RIP: 0033:0x7fa07cf8e969 [ 564.378275][T11231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.378292][T11231] RSP: 002b:00007fa07dd59038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 564.378313][T11231] RAX: ffffffffffffffda RBX: 00007fa07d1b6160 RCX: 00007fa07cf8e969 [ 564.378328][T11231] RDX: 0000000000044080 RSI: 0000200000000040 RDI: 000000000000000a [ 564.378341][T11231] RBP: 00007fa07dd59090 R08: 0000000000000000 R09: 0000000000000000 [ 564.378354][T11231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 564.378365][T11231] R13: 0000000000000000 R14: 00007fa07d1b6160 R15: 00007ffca6ec8e48 [ 564.378396][T11231] [ 564.672066][ T9501] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 564.739583][T11225] netlink: 'syz.4.1282': attribute type 10 has an invalid length. [ 564.788230][T11225] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1282'. [ 564.873499][ T9501] usb 8-1: Using ep0 maxpacket: 16 [ 564.923207][ T9501] usb 8-1: config 8 has an invalid interface number: 198 but max is 0 [ 564.962461][ T9501] usb 8-1: config 8 has an invalid descriptor of length 36, skipping remainder of the config [ 565.066996][ T9501] usb 8-1: config 8 has no interface number 0 [ 565.081658][ T9501] usb 8-1: config 8 interface 198 has no altsetting 0 [ 565.105891][ T9501] usb 8-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=6c.67 [ 565.117616][ T9501] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.128681][ T9501] usb 8-1: Product: syz [ 565.143317][ T9501] usb 8-1: Manufacturer: syz [ 565.171063][ T9501] usb 8-1: SerialNumber: syz [ 565.675408][ T9] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 565.833502][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 565.863319][ T9] usb 5-1: config 0 has no interfaces? [ 565.871159][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 565.888611][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.897582][ T9] usb 5-1: Product: syz [ 565.906431][ T9] usb 5-1: Manufacturer: syz [ 565.920606][ T9] usb 5-1: SerialNumber: syz [ 565.943052][ T9] usb 5-1: config 0 descriptor?? [ 566.216844][T11244] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1286'. [ 566.517636][ T5877] usb 5-1: USB disconnect, device number 38 [ 566.536882][ T5945] libceph: connect (1)[c::]:6789 error -101 [ 566.542965][ T5945] libceph: mon0 (1)[c::]:6789 connect error [ 566.711135][T11261] ceph: No mds server is up or the cluster is laggy [ 566.841488][ T5945] libceph: connect (1)[c::]:6789 error -101 [ 567.132197][ T5945] libceph: mon0 (1)[c::]:6789 connect error [ 567.385744][ T9501] ums-onetouch 8-1:8.198: USB Mass Storage device detected [ 567.468405][ T9501] usb 8-1: USB disconnect, device number 32 [ 567.541581][T11275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.565123][T11275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.630684][ T5945] libceph: connect (1)[c::]:6789 error -101 [ 567.637086][ T5945] libceph: mon0 (1)[c::]:6789 connect error [ 567.776808][T11283] ceph: No mds server is up or the cluster is laggy [ 567.907831][ T9501] libceph: connect (1)[c::]:6789 error -101 [ 568.149892][ T9501] libceph: mon0 (1)[c::]:6789 connect error [ 568.989469][T11302] fuse: Unknown parameter '000000000000000000000100x0000000000000008' [ 569.113060][T11305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.186946][T11305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.781821][T11319] lo speed is unknown, defaulting to 1000 [ 571.501308][ C1] sd 0:0:1:0: [sda] tag#1859 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 571.511765][ C1] sd 0:0:1:0: [sda] tag#1859 CDB: Write(6) 0a 00 4e 23 00 00 00 00 00 00 00 00 [ 572.821655][T11367] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1314'. [ 572.907071][T11374] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 572.983990][T11367] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 572.993062][T11367] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.002452][T11367] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.012257][T11367] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.023962][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.036197][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.048516][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.060895][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.073163][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.085348][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.097552][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.109735][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.121913][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.134105][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.163427][ T5829] usb 8-1: new low-speed USB device number 33 using dummy_hcd [ 573.699094][ T5829] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 573.709378][T11367] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1314'. [ 573.740670][ T5829] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 573.816872][ T5829] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 573.867823][ T5829] usb 8-1: string descriptor 0 read error: -22 [ 573.880305][ T5829] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 573.931044][ T5829] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.088131][ T5829] usb 8-1: 0:2 : does not exist [ 574.103652][ T5877] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 574.311422][ T5829] usb 8-1: USB disconnect, device number 33 [ 574.351970][ T5877] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 574.371459][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 574.402705][ T5877] usb 5-1: Product: syz [ 574.450261][ T5877] usb 5-1: SerialNumber: syz [ 574.451368][ C1] sd 0:0:1:0: [sda] tag#1866 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 574.465343][ C1] sd 0:0:1:0: [sda] tag#1866 CDB: Write(6) 0a 00 4e 23 00 00 00 00 00 00 00 00 [ 574.466546][ T5877] usb 5-1: config 0 descriptor?? [ 574.575016][T11392] netlink: 'syz.8.1326': attribute type 1 has an invalid length. [ 574.582990][T11392] netlink: 105116 bytes leftover after parsing attributes in process `syz.8.1326'. [ 574.741149][ T5877] hso 5-1:0.0: Failed to find BULK IN ep [ 575.010398][ T5877] usb 5-1: USB disconnect, device number 39 [ 575.210982][T11404] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 576.195495][T11409] FAULT_INJECTION: forcing a failure. [ 576.195495][T11409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 576.208637][T11409] CPU: 0 UID: 0 PID: 11409 Comm: syz.7.1331 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 576.208664][T11409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 576.208678][T11409] Call Trace: [ 576.208686][T11409] [ 576.208695][T11409] dump_stack_lvl+0x189/0x250 [ 576.208730][T11409] ? __pfx____ratelimit+0x10/0x10 [ 576.208763][T11409] ? __pfx_dump_stack_lvl+0x10/0x10 [ 576.208793][T11409] ? __pfx__printk+0x10/0x10 [ 576.208814][T11409] ? __might_fault+0xb0/0x130 [ 576.208856][T11409] should_fail_ex+0x414/0x560 [ 576.208884][T11409] _copy_from_user+0x2d/0xb0 [ 576.208915][T11409] ___sys_sendmsg+0x158/0x2a0 [ 576.208946][T11409] ? __pfx____sys_sendmsg+0x10/0x10 [ 576.209011][T11409] ? __fget_files+0x2a/0x420 [ 576.209030][T11409] ? __fget_files+0x3a0/0x420 [ 576.209060][T11409] __x64_sys_sendmsg+0x19b/0x260 [ 576.209091][T11409] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 576.209129][T11409] ? __pfx_ksys_write+0x10/0x10 [ 576.209156][T11409] ? rcu_is_watching+0x15/0xb0 [ 576.209185][T11409] ? do_syscall_64+0xbe/0x3b0 [ 576.209209][T11409] do_syscall_64+0xfa/0x3b0 [ 576.209228][T11409] ? lockdep_hardirqs_on+0x9c/0x150 [ 576.209248][T11409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.209269][T11409] ? clear_bhb_loop+0x60/0xb0 [ 576.209294][T11409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.209314][T11409] RIP: 0033:0x7fc33598e969 [ 576.209332][T11409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 576.209351][T11409] RSP: 002b:00007fc3337f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 576.209372][T11409] RAX: ffffffffffffffda RBX: 00007fc335bb6160 RCX: 00007fc33598e969 [ 576.209388][T11409] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 576.209401][T11409] RBP: 00007fc3337f6090 R08: 0000000000000000 R09: 0000000000000000 [ 576.209414][T11409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 576.209426][T11409] R13: 0000000000000000 R14: 00007fc335bb6160 R15: 00007ffd99d9b6e8 [ 576.209457][T11409] [ 576.317399][T11411] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 577.875894][T11410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.876218][T11410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.034591][ C1] net_ratelimit: 13482 callbacks suppressed [ 578.034612][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.035200][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.035632][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.036162][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.036549][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.037088][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.037506][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.038029][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.038438][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.038943][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 581.282772][ T10] usb 10-1: new low-speed USB device number 16 using dummy_hcd [ 583.043447][ C1] net_ratelimit: 15301 callbacks suppressed [ 583.043465][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 583.043704][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 583.044034][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 583.044224][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 583.044487][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 583.044677][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 583.044953][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 583.045147][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 583.045422][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 583.045616][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 584.676906][ T10] usb 10-1: device descriptor read/all, error -71 [ 584.799255][ T0] sched: DL replenish lagged too much [ 585.165591][ C1] sd 0:0:1:0: [sda] tag#1894 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 585.165654][ C1] sd 0:0:1:0: [sda] tag#1894 CDB: Write(6) 0a 00 4e 23 00 00 00 00 00 00 00 00 [ 585.174670][ T5829] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 585.531295][ T10] usb 10-1: new low-speed USB device number 17 using dummy_hcd [ 585.661716][T11441] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 588.053505][ C1] net_ratelimit: 14544 callbacks suppressed [ 588.053528][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 588.053864][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 588.054291][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 588.054587][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 588.055006][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 588.055336][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 588.055779][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 588.056081][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 588.056504][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 588.056783][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 590.683832][ T10] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 590.683876][ T10] usb 10-1: can't read configurations, error -71 [ 590.686108][ T10] usb usb10-port1: attempt power cycle [ 591.094142][ T9] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 591.289804][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 591.735422][ T9] usb 9-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 591.735457][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.735480][ T9] usb 9-1: Product: syz [ 591.735497][ T9] usb 9-1: Manufacturer: syz [ 591.735515][ T9] usb 9-1: SerialNumber: syz [ 592.237082][ T9] visor 9-1:1.0: Handspring Visor / Palm OS converter detected [ 592.244103][ T9] usb 9-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 592.263781][ T9] usb 9-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 593.063467][ C1] net_ratelimit: 12863 callbacks suppressed [ 593.063489][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 593.063875][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 593.064153][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 593.064537][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 593.064778][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 593.065096][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 593.065323][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 593.065638][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 593.065917][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 593.066275][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 598.073464][ C1] net_ratelimit: 18302 callbacks suppressed [ 598.073483][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 598.073850][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 598.074115][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 598.074453][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 598.074696][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 598.075059][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 598.075333][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 598.075671][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 598.075914][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 598.076258][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 600.386237][T11482] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 600.802069][ T5824] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 600.812536][ T5824] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 600.830709][ T5824] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 600.847866][ T5824] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 600.848706][ T5824] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 603.083465][ C1] net_ratelimit: 16774 callbacks suppressed [ 603.083481][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.083809][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.084024][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.084358][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.084597][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.084896][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.085110][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.085432][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.085660][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.085962][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 606.984502][ T5831] Bluetooth: hci5: command tx timeout [ 608.093527][ C1] net_ratelimit: 19457 callbacks suppressed [ 608.093544][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 608.093763][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 608.094116][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 608.094330][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 608.094645][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 608.094872][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 608.095176][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 608.095392][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 608.095669][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 608.095882][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.210163][ T5831] Bluetooth: hci5: command tx timeout [ 611.253618][ T5831] Bluetooth: hci5: command tx timeout [ 613.103744][ C1] net_ratelimit: 18928 callbacks suppressed [ 613.103763][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.104002][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.104300][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.104538][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.104844][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.105063][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.105377][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.105595][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.105897][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.106126][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.448704][ T5831] Bluetooth: hci5: command tx timeout [ 618.113691][ C0] net_ratelimit: 22361 callbacks suppressed [ 618.113708][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 618.113715][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 618.114077][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 618.114175][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 618.114532][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 618.114613][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 618.114825][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 618.115031][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 618.115267][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 618.115478][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 623.123441][ C1] net_ratelimit: 16854 callbacks suppressed [ 623.123465][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 623.123732][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 623.124210][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 623.124661][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 623.125119][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 623.125215][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 623.125590][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 623.125611][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 623.126068][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 623.126547][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 626.616563][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 626.628667][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.133390][ C0] net_ratelimit: 16991 callbacks suppressed [ 628.133414][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 628.133766][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 628.133784][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 628.134088][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 628.134299][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 628.134784][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 628.135325][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 628.135558][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 628.135707][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 628.135899][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 633.143704][ C0] net_ratelimit: 16298 callbacks suppressed [ 633.143729][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 633.144100][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 633.144485][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 633.144581][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 633.144810][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 633.144923][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 633.145355][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 633.145716][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 633.146178][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 633.146306][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 638.153630][ C0] net_ratelimit: 17593 callbacks suppressed [ 638.153655][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 638.153665][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 638.154028][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 638.154134][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 638.154522][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 638.154999][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 638.155341][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 638.155500][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 638.155823][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 638.155846][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.163715][ C0] net_ratelimit: 18295 callbacks suppressed [ 643.163737][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 643.163938][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.164073][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 643.164281][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.164572][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 643.164883][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 643.165320][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 643.165652][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.165671][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 643.166094][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.173705][ C0] net_ratelimit: 18027 callbacks suppressed [ 648.173728][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 648.173909][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.174245][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.174322][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 648.174775][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 648.175363][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 648.175679][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.175818][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 648.176015][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.176366][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 653.183701][ C0] net_ratelimit: 17407 callbacks suppressed [ 653.183725][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 653.184097][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 653.184216][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.184541][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 653.184584][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.184854][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 653.185353][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 653.185699][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 653.186049][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.186172][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 658.193433][ C0] net_ratelimit: 16460 callbacks suppressed [ 658.193457][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 658.193885][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 658.193908][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.194242][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.194387][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 658.194742][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 658.195228][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 658.195584][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 658.195703][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.196041][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.203416][ C1] net_ratelimit: 19085 callbacks suppressed [ 663.203439][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.203561][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 663.203789][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.204038][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 663.204335][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 663.204744][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 663.205054][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 663.205076][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.205390][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.205486][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 668.213467][ C0] net_ratelimit: 20009 callbacks suppressed [ 668.213491][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 668.213846][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 668.213945][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.214341][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.214368][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 668.214706][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 668.215196][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 668.215510][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 668.215728][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.215973][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 673.223651][ C0] net_ratelimit: 19996 callbacks suppressed [ 673.223674][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 673.224043][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.224051][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 673.224397][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.224526][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 673.224873][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 673.225345][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 673.225672][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 673.225879][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.226176][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 678.233504][ C0] net_ratelimit: 20034 callbacks suppressed [ 678.233528][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 678.233882][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 678.234269][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 678.234356][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 678.234584][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 678.234662][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 678.235088][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 678.235401][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 678.235846][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 678.235910][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.243382][ C0] net_ratelimit: 19536 callbacks suppressed [ 683.243405][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 683.243411][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.243752][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 683.243787][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.244194][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 683.244485][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 683.244932][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 683.245037][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.245224][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 683.245332][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 688.253478][ C0] net_ratelimit: 16480 callbacks suppressed [ 688.253502][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 688.253892][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 688.254474][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 688.254586][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 688.254857][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 688.254920][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 688.255369][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 688.255727][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 688.256234][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 688.256254][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 693.263528][ C0] net_ratelimit: 15131 callbacks suppressed [ 693.263550][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 693.263771][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 693.264069][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 693.264110][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 693.264428][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 693.264961][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 693.265346][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 693.265516][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 693.265872][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 693.265889][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 698.273362][ C0] net_ratelimit: 15281 callbacks suppressed [ 698.273384][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 698.273792][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 698.274281][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 698.274517][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 698.274652][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 698.274844][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 698.275152][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 698.275517][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 698.276005][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 698.276188][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 703.283350][ C0] net_ratelimit: 15297 callbacks suppressed [ 703.283374][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 703.283923][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 703.284252][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 703.284309][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 703.284602][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 703.284822][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 703.285236][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 703.285769][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 703.286198][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 703.286397][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 706.649583][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 706.662717][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 708.293387][ C0] net_ratelimit: 16789 callbacks suppressed [ 708.293410][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 708.293645][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 708.293927][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 708.294274][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 708.294762][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 708.295080][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 708.295097][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 708.295427][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 708.295559][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 708.295879][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 713.303339][ C0] net_ratelimit: 19592 callbacks suppressed [ 713.303362][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 713.303698][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 713.303935][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 713.304191][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 713.304270][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 713.304504][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 713.304975][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 713.305351][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 713.305715][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 713.305814][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 718.313421][ C0] net_ratelimit: 19120 callbacks suppressed [ 718.313444][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 718.313799][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 718.313985][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 718.314287][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 718.314324][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 718.314614][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 718.315073][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 718.315420][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 718.315776][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 718.315900][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 723.323417][ C0] net_ratelimit: 18893 callbacks suppressed [ 723.323442][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 723.323915][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 723.324119][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 723.324304][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 723.324490][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 723.324786][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 723.325112][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 723.325597][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 723.325925][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 723.325925][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 728.333721][ C0] net_ratelimit: 19033 callbacks suppressed [ 728.333745][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 728.334138][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 728.334317][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 728.334644][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 728.334688][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 728.335067][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 728.335613][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 728.335996][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 728.336047][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 728.336377][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.823607][ T5831] Bluetooth: hci5: command 0x0406 tx timeout [ 733.343636][ C0] net_ratelimit: 18075 callbacks suppressed [ 733.343659][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 733.344212][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 733.344602][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 733.344625][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 733.344958][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 733.345112][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 733.345469][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 733.345956][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 733.346272][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 733.346314][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 738.353756][ C0] net_ratelimit: 15019 callbacks suppressed [ 738.353780][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 738.354027][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 738.354199][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 738.354397][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 738.354754][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 738.355150][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 738.355682][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 738.355859][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 738.356115][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 738.356219][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 743.363437][ C0] net_ratelimit: 15241 callbacks suppressed [ 743.363443][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 743.363460][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 743.363852][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 743.364349][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 743.364706][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 743.364821][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 743.365152][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 743.365214][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 743.365572][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 743.366084][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 747.250002][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.260827][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.373569][ C0] net_ratelimit: 16733 callbacks suppressed [ 748.373592][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 748.373776][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 748.373917][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 748.374139][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 748.374348][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 748.374664][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 748.375068][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 748.375375][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 748.375428][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 748.375760][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 753.383351][ C0] net_ratelimit: 20566 callbacks suppressed [ 753.383369][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 753.383375][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 753.383716][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 753.383716][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 753.384188][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 753.384493][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 753.384923][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 753.385124][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 753.385289][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 753.385490][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 758.393318][ C0] net_ratelimit: 20318 callbacks suppressed [ 758.393326][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 758.393339][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 758.393680][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 758.393682][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 758.394139][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 758.394457][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 758.394882][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 758.394974][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 758.395176][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 758.395288][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 763.403360][ C0] net_ratelimit: 20467 callbacks suppressed [ 763.403383][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 763.403820][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 763.403915][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 763.404162][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 763.404228][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 763.404567][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 763.404858][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 763.405301][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 763.405484][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 763.405592][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 768.413352][ C1] net_ratelimit: 18643 callbacks suppressed [ 768.413376][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 768.413517][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 768.413720][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 768.413928][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 768.414429][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 768.414813][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 768.415096][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 768.415290][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 768.415431][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 768.415664][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 773.423536][ C0] net_ratelimit: 17447 callbacks suppressed [ 773.423559][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 773.423764][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 773.424110][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 773.424119][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 773.424504][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 773.425014][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 773.425360][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 773.425810][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 773.425824][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 773.426104][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 778.433640][ C0] net_ratelimit: 18559 callbacks suppressed [ 778.433664][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 778.434070][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 778.434110][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 778.434417][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 778.434570][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 778.434933][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 778.435415][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 778.435738][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 778.435829][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 778.436054][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 783.443384][ C0] net_ratelimit: 15381 callbacks suppressed [ 783.443408][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 783.443783][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 783.443925][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 783.444139][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 783.444325][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 783.444793][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 783.445126][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 783.445378][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 783.445599][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 783.445665][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 788.453507][ C0] net_ratelimit: 16940 callbacks suppressed [ 788.453531][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 788.454094][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 788.454238][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 788.454460][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 788.454551][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 788.454947][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 788.455323][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 788.455886][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 788.455979][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 788.456291][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 789.346635][ T31] INFO: task kworker/0:5:5879 blocked for more than 149 seconds. [ 789.346662][ T31] Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 [ 789.346676][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 789.346687][ T31] task:kworker/0:5 state:D stack:21928 pid:5879 tgid:5879 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 789.346746][ T31] Workqueue: events_power_efficient reg_check_chans_work [ 789.346781][ T31] Call Trace: [ 789.346790][ T31] [ 789.346805][ T31] __schedule+0x16a2/0x4cb0 [ 789.346861][ T31] ? schedule+0x165/0x360 [ 789.346915][ T31] ? __pfx___schedule+0x10/0x10 [ 789.346964][ T31] ? schedule+0x91/0x360 [ 789.347000][ T31] schedule+0x165/0x360 [ 789.347035][ T31] schedule_preempt_disabled+0x13/0x30 [ 789.347067][ T31] __mutex_lock+0x724/0xe80 [ 789.347092][ T31] ? __mutex_lock+0x51b/0xe80 [ 789.347120][ T31] ? reg_check_chans_work+0x164/0xf00 [ 789.347158][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 789.347181][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 789.347224][ T31] reg_check_chans_work+0x164/0xf00 [ 789.347259][ T31] ? __lock_acquire+0xab9/0xd20 [ 789.347291][ T31] ? __pfx_reg_check_chans_work+0x10/0x10 [ 789.347320][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 789.347353][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 789.347384][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 789.347408][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 789.347436][ T31] process_scheduled_works+0xae1/0x17b0 [ 789.347492][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 789.347537][ T31] worker_thread+0x8a0/0xda0 [ 789.347568][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 789.347609][ T31] ? __kthread_parkme+0x7b/0x200 [ 789.347648][ T31] kthread+0x70e/0x8a0 [ 789.347682][ T31] ? __pfx_worker_thread+0x10/0x10 [ 789.347708][ T31] ? __pfx_kthread+0x10/0x10 [ 789.347742][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 789.347773][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 789.347793][ T31] ? __pfx_kthread+0x10/0x10 [ 789.347825][ T31] ret_from_fork+0x3fc/0x770 [ 789.347859][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 789.347890][ T31] ? __switch_to_asm+0x39/0x70 [ 789.347910][ T31] ? __switch_to_asm+0x33/0x70 [ 789.347930][ T31] ? __pfx_kthread+0x10/0x10 [ 789.347963][ T31] ret_from_fork_asm+0x1a/0x30 [ 789.348001][ T31] [ 789.348030][ T31] INFO: task syz.8.1348:11464 blocked for more than 149 seconds. [ 789.348046][ T31] Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 [ 789.348059][ T31] Blocked by coredump. [ 789.348068][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 789.348079][ T31] task:syz.8.1348 state:D stack:25352 pid:11464 tgid:11463 ppid:7924 task_flags:0x40054c flags:0x00004006 [ 789.348140][ T31] Call Trace: [ 789.348149][ T31] [ 789.348163][ T31] __schedule+0x16a2/0x4cb0 [ 789.348214][ T31] ? schedule+0x165/0x360 [ 789.348251][ T31] ? __pfx___schedule+0x10/0x10 [ 789.348307][ T31] ? schedule+0x91/0x360 [ 789.348341][ T31] schedule+0x165/0x360 [ 789.348373][ T31] schedule_preempt_disabled+0x13/0x30 [ 789.348404][ T31] __mutex_lock+0x724/0xe80 [ 789.348427][ T31] ? __mutex_lock+0x51b/0xe80 [ 789.348453][ T31] ? tun_chr_close+0x3e/0x1c0 [ 789.348482][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 789.348540][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 789.348567][ T31] tun_chr_close+0x3e/0x1c0 [ 789.348595][ T31] __fput+0x449/0xa70 [ 789.348633][ T31] task_work_run+0x1d1/0x260 [ 789.348670][ T31] ? __pfx_task_work_run+0x10/0x10 [ 789.348706][ T31] ? kmem_cache_free+0x18f/0x400 [ 789.348745][ T31] do_exit+0x8d1/0x2550 [ 789.348777][ T31] ? __lock_acquire+0xab9/0xd20 [ 789.348809][ T31] ? do_raw_spin_lock+0x121/0x290 [ 789.348839][ T31] ? __pfx_do_exit+0x10/0x10 [ 789.348878][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 789.348926][ T31] do_group_exit+0x21c/0x2d0 [ 789.348959][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 789.348994][ T31] get_signal+0x125e/0x1310 [ 789.349057][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 789.349093][ T31] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 789.349131][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 789.349182][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 789.349211][ T31] exit_to_user_mode_loop+0x75/0x110 [ 789.349235][ T31] do_syscall_64+0x2bd/0x3b0 [ 789.349258][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 789.349279][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.349300][ T31] ? clear_bhb_loop+0x60/0xb0 [ 789.349325][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.349346][ T31] RIP: 0033:0x7f57fa78d2d0 [ 789.349367][ T31] RSP: 002b:00007f57fb6acb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 789.349391][ T31] RAX: 0000000000000007 RBX: 0000000000000000 RCX: 00007f57fa78d2d0 [ 789.349406][ T31] RDX: 0000000000000000 RSI: 00007f57fb6acc10 RDI: 00000000ffffff9c [ 789.349422][ T31] RBP: 00007f57fb6acc10 R08: 0000000000000000 R09: 0072736d2f232f75 [ 789.349438][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 789.349453][ T31] R13: 0000000000000000 R14: 00007f57fa9b5fa0 R15: 00007ffd024efc98 [ 789.349486][ T31] [ 789.349505][ T31] [ 789.349505][ T31] Showing all locks held in the system: [ 789.349517][ T31] 2 locks held by kworker/0:0/9: [ 789.349531][ T31] 3 locks held by kworker/u8:1/13: [ 789.349545][ T31] 1 lock held by kworker/R-mm_pe/14: [ 789.349558][ T31] #0: ffffffff8dfe3ca8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x2e/0x3a0 [ 789.349624][ T31] 3 locks held by kworker/1:0/24: [ 789.349638][ T31] 1 lock held by khungtaskd/31: [ 789.349651][ T31] #0: ffffffff8e13cc80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 789.349719][ T31] 4 locks held by kworker/u8:2/36: [ 789.349733][ T31] 2 locks held by kworker/1:1/43: [ 789.349748][ T31] 3 locks held by kworker/u8:3/49: [ 789.349762][ T31] 3 locks held by kworker/u8:4/59: [ 789.349779][ T31] 4 locks held by kworker/u8:5/984: [ 789.349804][ T31] 2 locks held by kworker/1:2/3078: [ 789.349818][ T31] 4 locks held by kworker/u8:6/3117: [ 789.349831][ T31] 3 locks held by kworker/R-ipv6_/3169: [ 789.349851][ T31] #0: ffff88814c3d4148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 789.349913][ T31] #1: ffffc9000b8f7ba0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 789.349974][ T31] #2: ffffffff8f4f7bc8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 789.350039][ T31] 3 locks held by kworker/R-bat_e/3399: [ 789.350053][ T31] 3 locks held by kworker/u8:7/4541: [ 789.350068][ T31] 2 locks held by getty/5585: [ 789.350080][ T31] #0: ffff88814da980a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 789.350142][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 789.350198][ T31] 1 lock held by syz-executor/5806: [ 789.350212][ T31] 5 locks held by kworker/u9:2/5824: [ 789.350226][ T31] #0: ffff88805dace148 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 789.350284][ T31] #1: ffffc900044bfbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 789.350344][ T31] #2: ffff88807d898d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 789.350410][ T31] #3: ffff88807d898078 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0 [ 789.350470][ T31] #4: ffffffff8e1427b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f4/0x730 [ 789.350533][ T31] 1 lock held by kworker/R-wg-cr/5857: [ 789.350547][ T31] #0: ffffffff8dfe3ca8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x88b/0xdd0 [ 789.350610][ T31] 1 lock held by kworker/R-wg-cr/5861: [ 789.350624][ T31] 3 locks held by kworker/1:3/5878: [ 789.350637][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 789.350696][ T31] #1: ffffc9000452fbc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 789.350755][ T31] #2: ffffffff8f4f7bc8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 789.350814][ T31] 4 locks held by kworker/0:5/5879: [ 789.350827][ T31] #0: ffff88801a481d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 789.350893][ T31] #1: ffffc90005387bc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 789.350953][ T31] #2: ffffffff8f4f7bc8 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf00 [ 789.351015][ T31] #3: ffff8880332d0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_check_chans_work+0x164/0xf00 [ 789.351077][ T31] 2 locks held by kworker/1:4/5897: [ 789.351091][ T31] 3 locks held by kworker/u8:8/5909: [ 789.351105][ T31] 2 locks held by kworker/1:6/5945: [ 789.351119][ T31] 1 lock held by kworker/1:7/5952: [ 789.351133][ T31] 6 locks held by kworker/u8:9/6028: [ 789.351147][ T31] 3 locks held by kworker/u8:10/6251: [ 789.351161][ T31] 3 locks held by kworker/u8:11/6292: [ 789.351177][ T31] 2 locks held by syz-executor/8536: [ 789.351191][ T31] 2 locks held by kworker/1:5/9501: [ 789.351205][ T31] 2 locks held by kworker/1:8/9965: [ 789.351219][ T31] 3 locks held by kworker/u8:12/11201: [ 789.351233][ T31] 1 lock held by syz.7.1331/11408: [ 789.351247][ T31] 2 locks held by syz.7.1331/11409: [ 789.351260][ T31] 1 lock held by syz.8.1348/11464: [ 789.351273][ T31] #0: ffffffff8f4f7bc8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 789.351332][ T31] 3 locks held by syz-executor/11485: [ 789.351345][ T31] 1 lock held by syz.9.1357/11493: [ 789.351359][ T31] [ 789.351376][ T31] ============================================= [ 789.351376][ T31] [ 789.351394][ T31] NMI backtrace for cpu 0 [ 789.351412][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 789.351449][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 789.351467][ T31] Call Trace: [ 789.351480][ T31] [ 789.351493][ T31] dump_stack_lvl+0x189/0x250 [ 789.351535][ T31] ? __wake_up_klogd+0xd9/0x110 [ 789.351581][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 789.351614][ T31] ? __pfx__printk+0x10/0x10 [ 789.351644][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 789.351674][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 789.351698][ T31] ? _printk+0xcf/0x120 [ 789.351721][ T31] ? __pfx__printk+0x10/0x10 [ 789.351741][ T31] ? debug_show_all_locks+0x2e/0x180 [ 789.351768][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 789.351790][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 789.351820][ T31] watchdog+0xfee/0x1030 [ 789.351840][ T31] ? watchdog+0x1de/0x1030 [ 789.351871][ T31] kthread+0x70e/0x8a0 [ 789.351901][ T31] ? __pfx_watchdog+0x10/0x10 [ 789.351918][ T31] ? __pfx_kthread+0x10/0x10 [ 789.351947][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 789.351974][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 789.351990][ T31] ? __pfx_kthread+0x10/0x10 [ 789.352019][ T31] ret_from_fork+0x3fc/0x770 [ 789.352042][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 789.352069][ T31] ? __switch_to_asm+0x39/0x70 [ 789.352086][ T31] ? __switch_to_asm+0x33/0x70 [ 789.352103][ T31] ? __pfx_kthread+0x10/0x10 [ 789.352131][ T31] ret_from_fork_asm+0x1a/0x30 [ 789.352164][ T31] [ 789.352172][ T31] Sending NMI from CPU 0 to CPUs 1: [ 789.352205][ C1] NMI backtrace for cpu 1 [ 789.352219][ C1] CPU: 1 UID: 0 PID: 3399 Comm: kworker/R-bat_e Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 789.352247][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 789.352262][ C1] Workqueue: bat_events batadv_bla_periodic_work [ 789.352284][ C1] RIP: 0010:arch_stack_walk+0x101/0x150 [ 789.352307][ C1] Code: ff ff 4c 89 e6 4c 89 fa e8 1c 41 09 00 83 bd 78 ff ff ff 00 74 38 4c 8d bd 78 ff ff ff 4c 89 ff e8 64 17 09 00 48 85 c0 74 24 <48> 89 df 48 89 c6 4d 89 f3 2e e8 08 d7 96 1e 84 c0 74 11 4c 89 ff [ 789.352322][ C1] RSP: 0018:ffffc90000a07ce8 EFLAGS: 00000282 [ 789.352334][ C1] RAX: ffffffff8b26442c RBX: ffffc90000a07da0 RCX: 4727fa90e25c4b00 [ 789.352347][ C1] RDX: 0000000000000001 RSI: ffffffff8db46f77 RDI: ffffffff8b26442c [ 789.352359][ C1] RBP: ffffc90000a07d70 R08: ffffc9000c1c7860 R09: 0000000000000000 [ 789.352370][ C1] R10: ffffc90000a07d38 R11: fffff52000140fa9 R12: ffff888031048000 [ 789.352383][ C1] R13: ffff888140fbcdc0 R14: ffffffff81acdb00 R15: ffffc90000a07ce8 [ 789.352395][ C1] FS: 0000000000000000(0000) GS:ffff888125d99000(0000) knlGS:0000000000000000 [ 789.352409][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 789.352420][ C1] CR2: 000020000002d000 CR3: 0000000029e8a000 CR4: 00000000003526f0 [ 789.352436][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 789.352445][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 789.352455][ C1] Call Trace: [ 789.352461][ C1] [ 789.352471][ C1] ? batadv_bla_purge_backbone_gw+0x44c/0x4f0 [ 789.352493][ C1] stack_trace_save+0x9c/0xe0 [ 789.352515][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 789.352536][ C1] ? __switchdev_handle_fdb_event_to_device+0x408/0x480 [ 789.352554][ C1] ? __pfx___switchdev_handle_fdb_event_to_device+0x10/0x10 [ 789.352571][ C1] ? __pfx_dsa_user_dev_check+0x10/0x10 [ 789.352601][ C1] ? __pfx_dsa_foreign_dev_check+0x10/0x10 [ 789.352622][ C1] kasan_save_track+0x3e/0x80 [ 789.352644][ C1] ? kasan_save_track+0x3e/0x80 [ 789.352663][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 789.352684][ C1] ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 789.352707][ C1] ? __alloc_skb+0x112/0x2d0 [ 789.352726][ C1] ? fdb_notify+0xa6/0x160 [ 789.352748][ C1] ? br_fdb_update+0x4c8/0x690 [ 789.352762][ C1] ? br_handle_frame_finish+0x573/0x19b0 [ 789.352780][ C1] ? br_nf_hook_thresh+0x3c6/0x4a0 [ 789.352798][ C1] ? br_nf_pre_routing_finish_ipv6+0x948/0xd00 [ 789.352836][ C1] ? br_nf_pre_routing_ipv6+0x37e/0x6b0 [ 789.352858][ C1] ? br_handle_frame+0x97f/0x14c0 [ 789.352878][ C1] ? __netif_receive_skb_core+0x10de/0x4180 [ 789.352895][ C1] ? __netif_receive_skb+0x72/0x380 [ 789.352911][ C1] ? process_backlog+0x60e/0x14f0 [ 789.352929][ C1] ? __napi_poll+0xc4/0x480 [ 789.352944][ C1] ? net_rx_action+0x707/0xe30 [ 789.352962][ C1] ? handle_softirqs+0x286/0x870 [ 789.352980][ C1] ? do_softirq+0xec/0x180 [ 789.353015][ C1] ? __local_bh_enable_ip+0x17d/0x1c0 [ 789.353057][ C1] __kasan_slab_alloc+0x6c/0x80 [ 789.353084][ C1] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 789.353112][ C1] ? __alloc_skb+0x112/0x2d0 [ 789.353135][ C1] __alloc_skb+0x112/0x2d0 [ 789.353159][ C1] fdb_notify+0xa6/0x160 [ 789.353188][ C1] br_fdb_update+0x4c8/0x690 [ 789.353227][ C1] ? __pfx_br_fdb_update+0x10/0x10 [ 789.353250][ C1] br_handle_frame_finish+0x573/0x19b0 [ 789.353281][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 789.353317][ C1] ? ip6t_do_table+0x1db/0x1550 [ 789.353351][ C1] ? nf_hook_slow+0x176/0x220 [ 789.353379][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 789.353407][ C1] br_nf_hook_thresh+0x3c6/0x4a0 [ 789.353440][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 789.353469][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 789.353495][ C1] ? nf_nat_ipv6_in+0x1fc/0x2b0 [ 789.353526][ C1] br_nf_pre_routing_finish_ipv6+0x948/0xd00 [ 789.353556][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 789.353590][ C1] ? br_nf_pre_routing_ipv6+0x42f/0x6b0 [ 789.353628][ C1] br_nf_pre_routing_ipv6+0x37e/0x6b0 [ 789.353660][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 789.353692][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 789.353722][ C1] ? br_nf_pre_routing+0x720/0x1470 [ 789.353754][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 789.353780][ C1] br_handle_frame+0x97f/0x14c0 [ 789.353813][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 789.353839][ C1] ? rcu_lockdep_current_cpu_online+0x37/0x120 [ 789.353873][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 789.353899][ C1] ? __pfx_rcu_read_lock_bh_held+0x10/0x10 [ 789.353932][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 789.353961][ C1] __netif_receive_skb_core+0x10de/0x4180 [ 789.353992][ C1] ? ip6_mc_input+0x9c3/0xbe0 [ 789.354035][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 789.354058][ C1] ? ip6_rcv_finish+0x29a/0x2d0 [ 789.354093][ C1] ? NF_HOOK+0x30c/0x3a0 [ 789.354124][ C1] ? skb_orphan+0xaf/0xd0 [ 789.354152][ C1] ? process_backlog+0x2d5/0x14f0 [ 789.354178][ C1] ? process_backlog+0x2d5/0x14f0 [ 789.354206][ C1] __netif_receive_skb+0x72/0x380 [ 789.354232][ C1] ? process_backlog+0x2d5/0x14f0 [ 789.354258][ C1] process_backlog+0x60e/0x14f0 [ 789.354282][ C1] ? __lock_acquire+0xab9/0xd20 [ 789.354313][ C1] ? __pfx_process_backlog+0x10/0x10 [ 789.354346][ C1] __napi_poll+0xc4/0x480 [ 789.354367][ C1] ? net_rx_action+0x46d/0xe30 [ 789.354405][ C1] net_rx_action+0x707/0xe30 [ 789.354428][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 789.354471][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 789.354528][ C1] handle_softirqs+0x286/0x870 [ 789.354554][ C1] ? do_softirq+0xec/0x180 [ 789.354580][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 789.354612][ C1] ? batadv_bla_purge_backbone_gw+0x44c/0x4f0 [ 789.354637][ C1] do_softirq+0xec/0x180 [ 789.354659][ C1] [ 789.354666][ C1] [ 789.354674][ C1] ? __pfx_do_softirq+0x10/0x10 [ 789.354702][ C1] ? lockdep_softirqs_on+0x13b/0x1c0 [ 789.354722][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 789.354746][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 789.354770][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 789.354798][ C1] ? batadv_bla_purge_backbone_gw+0x44c/0x4f0 [ 789.354825][ C1] batadv_bla_purge_backbone_gw+0x44c/0x4f0 [ 789.354858][ C1] batadv_bla_periodic_work+0xc7/0xac0 [ 789.354892][ C1] ? __pfx_batadv_bla_periodic_work+0x10/0x10 [ 789.354920][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 789.354949][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 789.354971][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 789.354996][ C1] process_scheduled_works+0xae1/0x17b0 [ 789.355036][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 789.355066][ C1] ? assign_work+0x381/0x410 [ 789.355101][ C1] rescuer_thread+0x53c/0xdd0 [ 789.355129][ C1] ? rescuer_thread+0xbb/0xdd0 [ 789.355164][ C1] kthread+0x70e/0x8a0 [ 789.355192][ C1] ? __pfx_rescuer_thread+0x10/0x10 [ 789.355216][ C1] ? __pfx_kthread+0x10/0x10 [ 789.355244][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 789.355271][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 789.355287][ C1] ? __pfx_kthread+0x10/0x10 [ 789.355314][ C1] ret_from_fork+0x3fc/0x770 [ 789.355336][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 789.355360][ C1] ? __switch_to_asm+0x39/0x70 [ 789.355376][ C1] ? __switch_to_asm+0x33/0x70 [ 789.355393][ C1] ? __pfx_kthread+0x10/0x10 [ 789.355421][ C1] ret_from_fork_asm+0x1a/0x30 [ 789.355448][ C1] [ 793.463524][ C0] net_ratelimit: 17690 callbacks suppressed [ 793.463547][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 793.464018][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 793.464351][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 793.464483][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 793.464781][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 793.464811][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 793.465116][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 793.465585][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:c9:0a:3d:61:ce, vlan:0) [ 793.465900][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 793.466165][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 798.271410][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 798.271435][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 798.271463][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 798.271479][ T31] Call Trace: [ 798.271489][ T31] [ 798.271501][ T31] dump_stack_lvl+0x99/0x250 [ 798.271539][ T31] ? __asan_memcpy+0x40/0x70 [ 798.271568][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 798.271599][ T31] ? __pfx__printk+0x10/0x10 [ 798.271635][ T31] panic+0x2db/0x790 [ 798.271685][ T31] ? __pfx_panic+0x10/0x10 [ 798.271712][ T31] ? tick_nohz_tick_stopped+0x86/0xb0 [ 798.271744][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 798.271771][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 798.271808][ T31] watchdog+0x102d/0x1030 [ 798.271832][ T31] ? watchdog+0x1de/0x1030 [ 798.271860][ T31] kthread+0x70e/0x8a0 [ 798.271893][ T31] ? __pfx_watchdog+0x10/0x10 [ 798.271913][ T31] ? __pfx_kthread+0x10/0x10 [ 798.271945][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 798.271975][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 798.271994][ T31] ? __pfx_kthread+0x10/0x10 [ 798.272025][ T31] ret_from_fork+0x3fc/0x770 [ 798.272052][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 798.272108][ T31] ? __switch_to_asm+0x39/0x70 [ 798.272129][ T31] ? __switch_to_asm+0x33/0x70 [ 798.272148][ T31] ? __pfx_kthread+0x10/0x10 [ 798.272181][ T31] ret_from_fork_asm+0x1a/0x30 [ 798.272219][ T31] [ 798.272555][ T31] Kernel Offset: disabled