last executing test programs: 9m34.186108922s ago: executing program 2 (id=7): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) openat$iommufd(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r3, 0xffffffff) io_uring_enter(0xffffffffffffffff, 0x27e2, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40040010}, 0x0) r4 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) write$binfmt_script(r4, &(0x7f0000000340)={'#! ', './file0', [], 0xa, "9c"}, 0xc) openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/load-self\x00', 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 9m31.725974997s ago: executing program 2 (id=9): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) munlockall() mount$fuse(0x0, 0x0, 0x0, 0x802043, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$OBJ_PIN_MAP(0x9, &(0x7f0000000040)=@generic={0x0}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() syz_emit_ethernet(0x66, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x8000000}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) select(0x0, 0x0, &(0x7f00000000c0)={0x3, 0x1, 0xff, 0xfffffffffffffe5e, 0x4, 0x5, 0x6, 0x9}, &(0x7f00000001c0)={0x9, 0xffffffff, 0x8, 0x2fdd64c9, 0x10001, 0x6, 0x7ff, 0x20000}, &(0x7f0000000240)={0x77359400}) munlockall() r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r4, 0x1) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) 9m25.944840661s ago: executing program 2 (id=12): mkdir(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, 0x0, 0x0) connect$inet(r0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000500)) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000003c00)=0x17, 0x4) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000240)={0xfffffffe, 0x0, 0xffff, 0x1000, 0xfffffffe, 0x10001}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)}, 0x0) fanotify_init(0x4000, 0x2) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4000) sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16, @ANYBLOB="00012cbd7000ffdbdf250b000000"], 0x70}}, 0x8000000) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 9m16.86080668s ago: executing program 2 (id=21): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) syz_usb_connect(0x6, 0x244, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x406}}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prlimit64(r2, 0x7, 0x0, 0x0) socket(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) r6 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) write$P9_RSTATu(r6, 0x0, 0x5a) sched_setaffinity(0x0, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETS(r7, 0x5402, &(0x7f0000000100)={0x6, 0x73, 0x2, 0xc9f, 0x59, "88bd91aa90758062b5fffd9272e301aa98af75"}) write$UHID_INPUT(r7, &(0x7f0000001980)={0x9, {"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", 0x745}}, 0x1006) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x1f) setns(r1, 0x24020000) syz_clone(0x120e1100, 0x0, 0x0, 0x0, 0x0, 0x0) 9m11.992875169s ago: executing program 2 (id=26): openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xe9b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000040000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0], 0x48) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x20180, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = open(0x0, 0x2a4c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') rmdir(&(0x7f0000000440)='./file0\x00') open(0x0, 0x0, 0x1) sendmsg$nl_generic(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[@ANYBLOB="f9001b3ade8bed5d3139187058c1fc092ef75a1663", @ANYBLOB="13d0dde050e96770f7aa60222803b4c286e3c3de72cd6d5840454b849fc17ada45bf1620c685f773fdeb4d01c26378d91f17b9d247f5f81b76a651e8aa9fa85f04dab7b8a4915af26c7f4a0a6fac39bd571545c56cd98114d6e35870707552b16fcb7f7304870500820000290000000000000000a76fcc55f38ad6f8ae8d221067997ef6de1406ffa340fdda3db4960d7a9c577ba5ce6fcab8b9c4dbac14f8c045f2cb032c0496e4aa0e51db744d35717d830180198e8c0de9a41b806d0e1900"], 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x2400c810) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) 9m8.115904196s ago: executing program 2 (id=29): socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000000)=ANY=[]) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000040)=ANY=[]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) pivot_root(0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x1) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000100)={{}, {0xe}, 0xbf00, 0xbf}) r4 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x32, 0x0, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0xb7e, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) 8m52.368860048s ago: executing program 32 (id=29): socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000000)=ANY=[]) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000040)=ANY=[]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) pivot_root(0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x1) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000100)={{}, {0xe}, 0xbf00, 0xbf}) r4 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x32, 0x0, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0xb7e, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) 7m5.45140086s ago: executing program 3 (id=145): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x13c, 0x10, 0x713, 0xfffffffe, 0x25dfdbfc, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x20, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0x400fe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x10000, 0x0, 0x543}, {0x4, 0x7fffffffffffffff, 0x2000000000}, {0x2}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x40}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0) r6 = open(0x0, 0x6c143, 0x0) setsockopt$inet_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000000380)=@ccm_128={{0x304}, "cd0f9bcdc8292bb9", "a884b8acbab5d8416c9479d9ec75f9c5", "09011ee8", "4284ef20778207a0"}, 0x28) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xff, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @loopback, @loopback}}}}}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x703, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x84}}, 0x0) 7m2.397936253s ago: executing program 3 (id=149): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) munlockall() mount$fuse(0x0, 0x0, 0x0, 0x802043, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$OBJ_PIN_MAP(0x9, &(0x7f0000000040)=@generic={0x0}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() syz_emit_ethernet(0x66, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x8000000}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) select(0x0, 0x0, &(0x7f00000000c0)={0x3, 0x1, 0xff, 0xfffffffffffffe5e, 0x4, 0x5, 0x6, 0x9}, &(0x7f00000001c0)={0x9, 0xffffffff, 0x8, 0x2fdd64c9, 0x10001, 0x6, 0x7ff, 0x20000}, &(0x7f0000000240)={0x77359400}) munlockall() r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r4, 0x1) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) 7m0.748632275s ago: executing program 3 (id=151): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x13c, 0x10, 0x713, 0xfffffffe, 0x25dfdbfc, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x20, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0x400fe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x10000, 0x0, 0x543}, {0x4, 0x7fffffffffffffff, 0x2000000000}, {0x2}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x40}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0) r6 = open(0x0, 0x6c143, 0x0) setsockopt$inet_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000000380)=@ccm_128={{0x304}, "cd0f9bcdc8292bb9", "a884b8acbab5d8416c9479d9ec75f9c5", "09011ee8", "4284ef20778207a0"}, 0x28) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xff, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @loopback, @loopback}}}}}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x703, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x84}}, 0x0) 6m58.454350118s ago: executing program 3 (id=154): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x13c, 0x10, 0x713, 0xfffffffe, 0x25dfdbfc, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x20, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0x400fe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x10000, 0x0, 0x543}, {0x4, 0x7fffffffffffffff, 0x2000000000}, {0x2}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x40}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0) open(0x0, 0x6c143, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) 6m57.019708178s ago: executing program 3 (id=156): openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000040000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0], 0x48) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x20180, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) open(0x0, 0x2a4c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 6m55.605201121s ago: executing program 3 (id=158): openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xe9b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000040000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0], 0x48) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x20180, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = open(0x0, 0x2a4c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') rmdir(&(0x7f0000000440)='./file0\x00') open(0x0, 0x0, 0x1) sendmsg$nl_generic(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[@ANYBLOB="f9001b3ade8bed5d3139187058c1fc092ef75a1663", @ANYBLOB="13d0dde050e96770f7aa60222803b4c286e3c3de72cd6d5840454b849fc17ada45bf1620c685f773fdeb4d01c26378d91f17b9d247f5f81b76a651e8aa9fa85f04dab7b8a4915af26c7f4a0a6fac39bd571545c56cd98114d6e35870707552b16fcb7f7304870500820000290000000000000000a76fcc55f38ad6f8ae8d221067997ef6de1406ffa340fdda3db4960d7a9c577ba5ce6fcab8b9c4dbac14f8c045f2cb032c0496e4aa0e51db744d35717d830180198e8c0de9a41b806d0e1900"], 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x2400c810) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) 6m37.32665081s ago: executing program 33 (id=158): openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xe9b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000040000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0], 0x48) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x20180, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = open(0x0, 0x2a4c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') rmdir(&(0x7f0000000440)='./file0\x00') open(0x0, 0x0, 0x1) sendmsg$nl_generic(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[@ANYBLOB="f9001b3ade8bed5d3139187058c1fc092ef75a1663", @ANYBLOB="13d0dde050e96770f7aa60222803b4c286e3c3de72cd6d5840454b849fc17ada45bf1620c685f773fdeb4d01c26378d91f17b9d247f5f81b76a651e8aa9fa85f04dab7b8a4915af26c7f4a0a6fac39bd571545c56cd98114d6e35870707552b16fcb7f7304870500820000290000000000000000a76fcc55f38ad6f8ae8d221067997ef6de1406ffa340fdda3db4960d7a9c577ba5ce6fcab8b9c4dbac14f8c045f2cb032c0496e4aa0e51db744d35717d830180198e8c0de9a41b806d0e1900"], 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x2400c810) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) 32.746190601s ago: executing program 1 (id=569): mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ntfs3\x00', 0x2208004, 0x0) 32.157965265s ago: executing program 1 (id=572): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r1 = syz_io_uring_setup(0xcd0, &(0x7f0000000400)={0x0, 0x586d, 0x10300, 0x1, 0x152}, &(0x7f0000000240)=0x0, &(0x7f0000000e40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0xff39) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5100) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f00000005c0)={0x9, {"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", 0x1000}}, 0x1006) 29.985797417s ago: executing program 1 (id=573): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv6_getanyicast={0x14, 0x3e, 0x2, 0x70bd29, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000885}, 0x20054010) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) syz_emit_ethernet(0x9e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000308", 0x68, 0x3a, 0x0, @private1, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b52ab", 0x0, 0x2b, 0x0, @private0, @private0, [@srh={0x0, 0x4, 0x4, 0x2, 0x1, 0x0, 0x0, [@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @dstopts={0x88, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x9}]}]}}}}}}}, 0x0) (async) syz_emit_ethernet(0x9e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000308", 0x68, 0x3a, 0x0, @private1, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b52ab", 0x0, 0x2b, 0x0, @private0, @private0, [@srh={0x0, 0x4, 0x4, 0x2, 0x1, 0x0, 0x0, [@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @dstopts={0x88, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x9}]}]}}}}}}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) (async) connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x38, r5, 0x1, 0x0, 0x25dfdbff, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}, @L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x5}]}, 0x38}}, 0x2) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) socket(0x2, 0x80805, 0x0) (async) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) 29.203014751s ago: executing program 1 (id=574): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create(0x9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001200000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r3 = dup2(r0, r1) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000040)={0x2002}) r5 = fcntl$dupfd(r3, 0x406, r4) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000001480)={0x4000200c}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0x10}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000080), 0x4) mlockall(0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9af33139c2c4eaae}, 0x20) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r9, 0x0) r10 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) ftruncate(r10, 0x1) r11 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_logging(r11, &(0x7f0000000040), 0x14) connect$pppl2tp(r6, 0x0, 0x0) r12 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCSARP(r12, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e20, @loopback}, {0x6, @multicast}, 0x0, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}, 'pim6reg\x00'}) 27.772237988s ago: executing program 0 (id=578): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 27.752158815s ago: executing program 1 (id=579): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, 0x0, 0x0) 26.572531244s ago: executing program 1 (id=580): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x41ba9f51b90caa66, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x37}, @void, @val={0xc, 0x99, {0x4, 0x71}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xfe4}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) r3 = eventfd2(0x4, 0x80800) r4 = eventfd2(0xe51, 0x3) r5 = eventfd2(0x8, 0x801) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000580), 0x1) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) r9 = eventfd(0x7) r10 = eventfd2(0x3da1c00, 0x80001) r11 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0) io_submit(0x0, 0xa, &(0x7f0000000ac0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x8, r0, &(0x7f0000000140)="1d702fa473253dab99bd2c9ff62e1a16ee1a95e553b95472e0e467a5c1cd360c5a2a0e4c3654184a8fe332eefe0370eef03a4367ce94d304f3529262a29ab0a77ae2030b96e205f775563429b6ec6945a7dfe0c3467011d0e6d094298dfb0419a935b21411545ee5470579bf13c14390d7ddbea036a10c355f7c1b2b4cd5c4c9", 0x80, 0x8000000000000000, 0x0, 0x1}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0x1, r2, &(0x7f0000000240)="7ef7cf762c17a194618333648492332bd4489e186e7dd25eee51a8b7b1960c5696c02668f48538f5a8d0c2fb9931f9ee8c68f1169cff56a0a3fb8cef103c8d83ceadc21a45d966c7601169e10bef4909a3bc85598c69f7e20522855ea4b2641c38d9c080672848ddf3a30b74e5f77f78374ef92f77f851b3215b93d50741d3ca4892aad6b39131691cd6", 0x8a, 0x9, 0x0, 0x1, r3}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x3, r0, &(0x7f0000000340)="b0f8d4bdb9665c33b4781db4a54a8b6060bb243771abce2a054fd2fd1c34cfbacd69215aed20c7a3ed7062b3d9c4e05cf1e87c3bceb85f2c0945d690d2349aa5ccf6209520d1ad96072033e1481aa7fe5aa3daa506d4c5956006be3e70bb7e48f3b9613a928da0b6ea8c799bff25976adf29cb3e1220d7594fb7134f72684d24236a82a85f574929f3b56b", 0x8b, 0x510cb555, 0x0, 0x3, r4}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x1ff, r0, &(0x7f0000000440)="bdfcf6263a5a35e09d232156c6e09a2420226861f7c993055908", 0x1a, 0x40, 0x0, 0x1}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x6, 0x5, r0, &(0x7f00000004c0)="aba9a0a09b830df0b9999d1dc20355d5dfec8ed1369b32d8f4928a04e483558ba094ffa86634e07484c09575867ee4815577ed11411a9935761a3a1364e0b76425f7ae6b", 0x44, 0x10001, 0x0, 0x2, r5}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x8, 0x0, r6, &(0x7f00000005c0)="f1182aff11c22e27c9465429b6f6560e042856e83b0e28f2c36c188c0523e777902a1392f5a741caa3e855a00e4664", 0x2f, 0x6}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x36, r7, &(0x7f0000000640)="77047c60a31539ed3a31e94f11870137c1b69a3a5467a4db2d2485aed5dd13bd77d4ab7465196d7a523588916dfbbf22dcedbd094492899b633f225162dfa8b469be59c24508538d8169a8d76cac4e7cf03b63e3e4dfa6ea0b399d71ca822a63e454f2678ba208f77e4edfea4a3d9bda7af6a0a8dcc5ffbac6b7aa64d513632f6e9c01281587b3f4b87d778eb9d77bcc8f92c823125df6b2921f30c748110727c4bdb87e98d45a02de0af23015861243f096a1433955bb8475cc72f0841dcd4cbb6ab42925a92d0e50948567498d50a5c61777c85089334c5d461578e34e4dda2cfcf95b", 0xe4, 0x6838}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x3, r8, &(0x7f00000007c0)="383bae4dd988465602302d3fc70f929a0a71b5ef2a37b696e51c9e5b446fb4f8505dca15885a664cf9fe6a83586fd0958782ce721bc98dea764737290ce28b7b6c5d21a2f2b4d73c54b4a1bce36af083fbf48a475983df2581127141234ff6bc777b2099077d481b6a22c6e7f244ab0028c0cbfbd423bed7d80ed275accf953a67c9e33e1b434af8d5bcc9644f1185e8aafd3a739cffcc06a7e8bce728c73e3e4c715b92498355bff67d3e6486", 0xad, 0x7, 0x0, 0x3, r9}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x2, 0x6, r0, &(0x7f00000008c0)="d80cdd16f53a19362432e704bd", 0xd, 0x1ff, 0x0, 0x3, r10}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x6, 0x100, r0, &(0x7f0000000940)="7d5cadc86ed7645c3a1b00b36a2868acb17d302a2b44f93ebf4da6b5c372c6892684b4348fe18abe0acd017a2ae851d404392ca639440e05bde82ebc31a9946626b9d428dc5ea45d6052a9451fb652252e279a9a9267a9c56da21201836691b997fbebbf33b61328c3032d22606da62aa1892588bd11568d3b387ea41b746b795424d8f84a0bac1ee5367c942fbb4dd8ea5a619256ee89712f2716d28941f49e3dc42d2c87241a5c87e179097e5056d213f58aa49b32d0e2341c31abc19f50d532d9679ea53a07980fe8b65117cc058af02bb8936ae213fb12", 0xd9, 0xfffffffffffffffa, 0x0, 0x0, r11}]) r12 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000b40), 0x3, 0x0) r13 = syz_clone3(&(0x7f0000001d80)={0x48020100, &(0x7f0000000b80)=0xffffffffffffffff, &(0x7f0000000bc0), &(0x7f0000000c00), {0x2b}, &(0x7f0000000c40)=""/197, 0xc5, &(0x7f0000000d40)=""/4096, &(0x7f0000001d40)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r2}}, 0x58) fcntl$lock(r12, 0x6, &(0x7f0000001e00)={0x0, 0x0, 0x7fff, 0x9, r13}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r11, 0x40bc5311, &(0x7f0000001e40)={0x400, 0x2, 'client0\x00', 0x80000003, "53d702eeb231fa23", "19cdad0f3adafc1c5e81266b20954cc8492b8edd5ad9b5201b7bdf6f90ceab8d", 0xe0, 0x3}) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c8, &(0x7f0000001fc0)={r2, r7, 0x4, 0x9d, &(0x7f0000001f00)="80a132b3d25508ab3935c03079c158a5992fee42087837f907f75e39b0699d7efd0aed23e982df024b0541b29849e780b83937040b6c7797cd80c0fa00038870b495af2b368a6a22feaebedc42adec653a870fa4016ca115ac94df0f31c1bdd7318d83f0fced9110bcdfd35a0832b3c954c3d63603a1bc7feef2d8a0909a778bb503b4d92d7d3c4e875fd007280cae340cea804d01b3523ab083b181bc", 0x6, 0xfa, 0x4, 0x0, 0x81, 0x2, 0xfffffffb, 'syz1\x00'}) fsync(0xffffffffffffffff) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f00000020c0), r11) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x34, r15, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "84b48a25dce5f660804ef4320d38d528"}]}, 0x34}, 0x1, 0x0, 0x0, 0x8880}, 0x800) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/asound/card1/oss_mixer\x00', 0x111500, 0x0) accept4$bt_l2cap(r2, &(0x7f0000002200)={0x1f, 0x0, @none}, &(0x7f0000002240)=0xe, 0x0) ioctl$KDSETMODE(r11, 0x4b3a, 0x1) ioctl$PTP_PEROUT_REQUEST(r11, 0x40383d03, &(0x7f0000002280)={{0x3f, 0xd1b}, {0x7fffffffffffffff, 0xff}, 0x0, 0x1}) ioctl$BTRFS_IOC_SCRUB(r14, 0xc400941b, &(0x7f00000022c0)={0x0, 0x0, 0x3, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, &(0x7f00000026c0)={r16, 0xcaa, 0x1, [0x800, 0x8000, 0x6, 0x8, 0x6], [0x21dbde79, 0x6, 0x80000001, 0xc7, 0x6, 0xd4b, 0x9, 0x1, 0xffffffff, 0x8, 0x3, 0x6, 0x0, 0x9, 0x8, 0x2400000000, 0x4b, 0x7fff, 0x400, 0xbf, 0x8c, 0x1, 0xfff, 0x3ff, 0x3, 0x6, 0x128000, 0x6, 0xffffffffffffffc0, 0x6, 0x5, 0x4, 0xf, 0x2, 0x800, 0x1, 0x708, 0xfff, 0x9d7, 0xc27, 0x7, 0x101, 0x4, 0xea9, 0x301, 0x2, 0x7, 0x8b8, 0xb9e, 0x1ff, 0x5, 0x1, 0x122, 0x4, 0xffffffffffffff01, 0x8, 0x3, 0x40, 0xe, 0xfffffffffffffffd, 0x7, 0xffffffff, 0x6, 0x7, 0x8, 0x9, 0x16, 0xd9, 0xec, 0x4, 0x800, 0xffffffffffff0000, 0x2, 0xb9be, 0x4, 0x5, 0x65, 0x8, 0x0, 0x4, 0x10001, 0x800, 0xfffffffffffffffe, 0x5, 0x0, 0x7, 0x3, 0x1, 0x60, 0x5, 0x8000000000000000, 0x0, 0x8, 0x7, 0x9, 0x7, 0x7ea94944, 0x1, 0x2, 0xfffffffffffffffe, 0x56a, 0xa6, 0x9, 0x8, 0x8, 0x1, 0xffffffff80000001, 0x8c8, 0x5, 0x9, 0x1000, 0x7, 0x7f, 0x6, 0x80, 0x1, 0x2, 0x2, 0xff, 0x1]}) fcntl$notify(r3, 0x402, 0x80000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002ec0)={r11, 0x0, 0xe8, 0xc2, &(0x7f0000002b00)="9843f6b09690d2ce03f99ca32dc14c58f7fe898d5bc33708b9ccd4782fabb76983cb9c736350b379d46f7ae867ffe24b9e1811274543286e62a21907a129b7bcf09b5c3aa9606089b415d99a86521a237a50a0ceca8b74a37ea9a676ef883fea2e1aeba4a2959870f26e2cf5ed25a28d83598105a37df49d03c1d9f83a0636a5d8b95ae6f2601540239067739c9696a61b1e7ea3ffbe9dcea74b3f9d928e2dde40a83ce89e01008bf2080afec2235bfb0c0f9841de1d94cddd3c116856136edd271a3b2c983512d07e742798e6d8c497e1fddc372a5572a898df78f8b657abd57172f9f0ab3c8e75", &(0x7f0000002c00)=""/194, 0x4, 0x0, 0xe2, 0x89, &(0x7f0000002d00)="d789991968528aed92f856a12fa8985eb7f4ddd551df9d22f7de6ca5f6a88cd49c0895b7269f1fe45de91be5e5c3485c867a6ada1f05b23ce9137675cc259b685fffae5306346d1c60f99c290c269fb3157f25c5e6e06803593c16149f4dda26b9c0cd8a3af4919d449bf000431bd6168a79ef0a622355e0ba55fc8dab2aad8d696ccd88a16560592256680df95fb7cdd07c84437e1aeec4271d8ea9f89831bb4e44b68fec6d61648d885c4e5ce9f1a6e3c95709feb840283652ff3d6b61df12375ddde6b5cbc7b413e23a930213c343833ddb8a07ac4c5669008bbd81a476c91a84", &(0x7f0000002e00)="ae900097a8cd2c358a3c11ca9d49b6e967961e574fa3f32db4685932a8893bb409ba0b6b072b51ef4cb5a127137d8140af5b5598b1b86ed92cf637480d57620e52469e4ef932960fdad34bddd14c086c1d41eb4c6ffd8b3028d9a7a2bef3534c3954858c954ab4bcc7f14d4e885b9fef4c3b67de5e5b4488b8239466bbe0bef5b7151add53e87ffd37", 0x2, 0x0, 0x2}, 0x50) 20.75231628s ago: executing program 0 (id=583): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80800, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xba3]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) openat$dir(0xffffff9c, &(0x7f0000000040)='./file1\x00', 0x4101, 0x1a1) 20.450637537s ago: executing program 0 (id=584): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x7}) 11.358386245s ago: executing program 34 (id=580): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x41ba9f51b90caa66, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x37}, @void, @val={0xc, 0x99, {0x4, 0x71}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xfe4}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) r3 = eventfd2(0x4, 0x80800) r4 = eventfd2(0xe51, 0x3) r5 = eventfd2(0x8, 0x801) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000580), 0x1) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) r9 = eventfd(0x7) r10 = eventfd2(0x3da1c00, 0x80001) r11 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0) io_submit(0x0, 0xa, &(0x7f0000000ac0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x8, r0, &(0x7f0000000140)="1d702fa473253dab99bd2c9ff62e1a16ee1a95e553b95472e0e467a5c1cd360c5a2a0e4c3654184a8fe332eefe0370eef03a4367ce94d304f3529262a29ab0a77ae2030b96e205f775563429b6ec6945a7dfe0c3467011d0e6d094298dfb0419a935b21411545ee5470579bf13c14390d7ddbea036a10c355f7c1b2b4cd5c4c9", 0x80, 0x8000000000000000, 0x0, 0x1}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0x1, r2, &(0x7f0000000240)="7ef7cf762c17a194618333648492332bd4489e186e7dd25eee51a8b7b1960c5696c02668f48538f5a8d0c2fb9931f9ee8c68f1169cff56a0a3fb8cef103c8d83ceadc21a45d966c7601169e10bef4909a3bc85598c69f7e20522855ea4b2641c38d9c080672848ddf3a30b74e5f77f78374ef92f77f851b3215b93d50741d3ca4892aad6b39131691cd6", 0x8a, 0x9, 0x0, 0x1, r3}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x3, r0, &(0x7f0000000340)="b0f8d4bdb9665c33b4781db4a54a8b6060bb243771abce2a054fd2fd1c34cfbacd69215aed20c7a3ed7062b3d9c4e05cf1e87c3bceb85f2c0945d690d2349aa5ccf6209520d1ad96072033e1481aa7fe5aa3daa506d4c5956006be3e70bb7e48f3b9613a928da0b6ea8c799bff25976adf29cb3e1220d7594fb7134f72684d24236a82a85f574929f3b56b", 0x8b, 0x510cb555, 0x0, 0x3, r4}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x1ff, r0, &(0x7f0000000440)="bdfcf6263a5a35e09d232156c6e09a2420226861f7c993055908", 0x1a, 0x40, 0x0, 0x1}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x6, 0x5, r0, &(0x7f00000004c0)="aba9a0a09b830df0b9999d1dc20355d5dfec8ed1369b32d8f4928a04e483558ba094ffa86634e07484c09575867ee4815577ed11411a9935761a3a1364e0b76425f7ae6b", 0x44, 0x10001, 0x0, 0x2, r5}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x8, 0x0, r6, &(0x7f00000005c0)="f1182aff11c22e27c9465429b6f6560e042856e83b0e28f2c36c188c0523e777902a1392f5a741caa3e855a00e4664", 0x2f, 0x6}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x36, r7, &(0x7f0000000640)="77047c60a31539ed3a31e94f11870137c1b69a3a5467a4db2d2485aed5dd13bd77d4ab7465196d7a523588916dfbbf22dcedbd094492899b633f225162dfa8b469be59c24508538d8169a8d76cac4e7cf03b63e3e4dfa6ea0b399d71ca822a63e454f2678ba208f77e4edfea4a3d9bda7af6a0a8dcc5ffbac6b7aa64d513632f6e9c01281587b3f4b87d778eb9d77bcc8f92c823125df6b2921f30c748110727c4bdb87e98d45a02de0af23015861243f096a1433955bb8475cc72f0841dcd4cbb6ab42925a92d0e50948567498d50a5c61777c85089334c5d461578e34e4dda2cfcf95b", 0xe4, 0x6838}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x3, r8, &(0x7f00000007c0)="383bae4dd988465602302d3fc70f929a0a71b5ef2a37b696e51c9e5b446fb4f8505dca15885a664cf9fe6a83586fd0958782ce721bc98dea764737290ce28b7b6c5d21a2f2b4d73c54b4a1bce36af083fbf48a475983df2581127141234ff6bc777b2099077d481b6a22c6e7f244ab0028c0cbfbd423bed7d80ed275accf953a67c9e33e1b434af8d5bcc9644f1185e8aafd3a739cffcc06a7e8bce728c73e3e4c715b92498355bff67d3e6486", 0xad, 0x7, 0x0, 0x3, r9}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x2, 0x6, r0, &(0x7f00000008c0)="d80cdd16f53a19362432e704bd", 0xd, 0x1ff, 0x0, 0x3, r10}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x6, 0x100, r0, &(0x7f0000000940)="7d5cadc86ed7645c3a1b00b36a2868acb17d302a2b44f93ebf4da6b5c372c6892684b4348fe18abe0acd017a2ae851d404392ca639440e05bde82ebc31a9946626b9d428dc5ea45d6052a9451fb652252e279a9a9267a9c56da21201836691b997fbebbf33b61328c3032d22606da62aa1892588bd11568d3b387ea41b746b795424d8f84a0bac1ee5367c942fbb4dd8ea5a619256ee89712f2716d28941f49e3dc42d2c87241a5c87e179097e5056d213f58aa49b32d0e2341c31abc19f50d532d9679ea53a07980fe8b65117cc058af02bb8936ae213fb12", 0xd9, 0xfffffffffffffffa, 0x0, 0x0, r11}]) r12 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000b40), 0x3, 0x0) r13 = syz_clone3(&(0x7f0000001d80)={0x48020100, &(0x7f0000000b80)=0xffffffffffffffff, &(0x7f0000000bc0), &(0x7f0000000c00), {0x2b}, &(0x7f0000000c40)=""/197, 0xc5, &(0x7f0000000d40)=""/4096, &(0x7f0000001d40)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r2}}, 0x58) fcntl$lock(r12, 0x6, &(0x7f0000001e00)={0x0, 0x0, 0x7fff, 0x9, r13}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r11, 0x40bc5311, &(0x7f0000001e40)={0x400, 0x2, 'client0\x00', 0x80000003, "53d702eeb231fa23", "19cdad0f3adafc1c5e81266b20954cc8492b8edd5ad9b5201b7bdf6f90ceab8d", 0xe0, 0x3}) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c8, &(0x7f0000001fc0)={r2, r7, 0x4, 0x9d, &(0x7f0000001f00)="80a132b3d25508ab3935c03079c158a5992fee42087837f907f75e39b0699d7efd0aed23e982df024b0541b29849e780b83937040b6c7797cd80c0fa00038870b495af2b368a6a22feaebedc42adec653a870fa4016ca115ac94df0f31c1bdd7318d83f0fced9110bcdfd35a0832b3c954c3d63603a1bc7feef2d8a0909a778bb503b4d92d7d3c4e875fd007280cae340cea804d01b3523ab083b181bc", 0x6, 0xfa, 0x4, 0x0, 0x81, 0x2, 0xfffffffb, 'syz1\x00'}) fsync(0xffffffffffffffff) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f00000020c0), r11) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x34, r15, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "84b48a25dce5f660804ef4320d38d528"}]}, 0x34}, 0x1, 0x0, 0x0, 0x8880}, 0x800) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/asound/card1/oss_mixer\x00', 0x111500, 0x0) accept4$bt_l2cap(r2, &(0x7f0000002200)={0x1f, 0x0, @none}, &(0x7f0000002240)=0xe, 0x0) ioctl$KDSETMODE(r11, 0x4b3a, 0x1) ioctl$PTP_PEROUT_REQUEST(r11, 0x40383d03, &(0x7f0000002280)={{0x3f, 0xd1b}, {0x7fffffffffffffff, 0xff}, 0x0, 0x1}) ioctl$BTRFS_IOC_SCRUB(r14, 0xc400941b, &(0x7f00000022c0)={0x0, 0x0, 0x3, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, &(0x7f00000026c0)={r16, 0xcaa, 0x1, [0x800, 0x8000, 0x6, 0x8, 0x6], [0x21dbde79, 0x6, 0x80000001, 0xc7, 0x6, 0xd4b, 0x9, 0x1, 0xffffffff, 0x8, 0x3, 0x6, 0x0, 0x9, 0x8, 0x2400000000, 0x4b, 0x7fff, 0x400, 0xbf, 0x8c, 0x1, 0xfff, 0x3ff, 0x3, 0x6, 0x128000, 0x6, 0xffffffffffffffc0, 0x6, 0x5, 0x4, 0xf, 0x2, 0x800, 0x1, 0x708, 0xfff, 0x9d7, 0xc27, 0x7, 0x101, 0x4, 0xea9, 0x301, 0x2, 0x7, 0x8b8, 0xb9e, 0x1ff, 0x5, 0x1, 0x122, 0x4, 0xffffffffffffff01, 0x8, 0x3, 0x40, 0xe, 0xfffffffffffffffd, 0x7, 0xffffffff, 0x6, 0x7, 0x8, 0x9, 0x16, 0xd9, 0xec, 0x4, 0x800, 0xffffffffffff0000, 0x2, 0xb9be, 0x4, 0x5, 0x65, 0x8, 0x0, 0x4, 0x10001, 0x800, 0xfffffffffffffffe, 0x5, 0x0, 0x7, 0x3, 0x1, 0x60, 0x5, 0x8000000000000000, 0x0, 0x8, 0x7, 0x9, 0x7, 0x7ea94944, 0x1, 0x2, 0xfffffffffffffffe, 0x56a, 0xa6, 0x9, 0x8, 0x8, 0x1, 0xffffffff80000001, 0x8c8, 0x5, 0x9, 0x1000, 0x7, 0x7f, 0x6, 0x80, 0x1, 0x2, 0x2, 0xff, 0x1]}) fcntl$notify(r3, 0x402, 0x80000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002ec0)={r11, 0x0, 0xe8, 0xc2, &(0x7f0000002b00)="9843f6b09690d2ce03f99ca32dc14c58f7fe898d5bc33708b9ccd4782fabb76983cb9c736350b379d46f7ae867ffe24b9e1811274543286e62a21907a129b7bcf09b5c3aa9606089b415d99a86521a237a50a0ceca8b74a37ea9a676ef883fea2e1aeba4a2959870f26e2cf5ed25a28d83598105a37df49d03c1d9f83a0636a5d8b95ae6f2601540239067739c9696a61b1e7ea3ffbe9dcea74b3f9d928e2dde40a83ce89e01008bf2080afec2235bfb0c0f9841de1d94cddd3c116856136edd271a3b2c983512d07e742798e6d8c497e1fddc372a5572a898df78f8b657abd57172f9f0ab3c8e75", &(0x7f0000002c00)=""/194, 0x4, 0x0, 0xe2, 0x89, &(0x7f0000002d00)="d789991968528aed92f856a12fa8985eb7f4ddd551df9d22f7de6ca5f6a88cd49c0895b7269f1fe45de91be5e5c3485c867a6ada1f05b23ce9137675cc259b685fffae5306346d1c60f99c290c269fb3157f25c5e6e06803593c16149f4dda26b9c0cd8a3af4919d449bf000431bd6168a79ef0a622355e0ba55fc8dab2aad8d696ccd88a16560592256680df95fb7cdd07c84437e1aeec4271d8ea9f89831bb4e44b68fec6d61648d885c4e5ce9f1a6e3c95709feb840283652ff3d6b61df12375ddde6b5cbc7b413e23a930213c343833ddb8a07ac4c5669008bbd81a476c91a84", &(0x7f0000002e00)="ae900097a8cd2c358a3c11ca9d49b6e967961e574fa3f32db4685932a8893bb409ba0b6b072b51ef4cb5a127137d8140af5b5598b1b86ed92cf637480d57620e52469e4ef932960fdad34bddd14c086c1d41eb4c6ffd8b3028d9a7a2bef3534c3954858c954ab4bcc7f14d4e885b9fef4c3b67de5e5b4488b8239466bbe0bef5b7151add53e87ffd37", 0x2, 0x0, 0x2}, 0x50) 9.911299567s ago: executing program 4 (id=588): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getpeername(r0, &(0x7f00000001c0), &(0x7f0000000040)=0x80) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) (async) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) fcntl$lock(r4, 0x6, &(0x7f0000000dc0)={0x1, 0x1, 0x5}) (async) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYRES16=0x0, @ANYBLOB="000000000000000014001a80100004800c000380", @ANYRES16=0x0, @ANYRESOCT=r5, @ANYRES8=r6], 0x34}}, 0x0) 6.099113527s ago: executing program 4 (id=589): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) (fail_nth: 2) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x400f0}, 0x0) 5.618560579s ago: executing program 0 (id=590): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r3, 0x29, 0x46, 0x0, &(0x7f0000000040)) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@newae={0x40, 0x1e, 0x4, 0x70bd2c, 0x25dfdbfd, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d2, 0x2, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1d}, 0xf, 0x3501}}, 0x40}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000150001ff"], 0xb8}}, 0x0) mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_usb_connect$uac1(0x2, 0x0, 0x0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xbd, &(0x7f0000000340)=@string={0xbd, 0x3, "0d26c5613e61c7df574766c5b2c4c6fc094fd9d209708dafc553c9295e3d96b32b6107c1329cda5ec132d456bd77ff721bbe9574331de68adc92f628ae1817340187f11feb15444b435a8a4e549a3fa6735f4c9757faab33d92904977aa3e1541046ea0342f3cd8c3ba9e367409bd3d4042edd8de613d502177e298dd659bdb555787ddbbf90e5187abe5e1dfc8ad09c6b3c15160f5bb2a9e15434d017d26f40ac7228cb9cdfc38b0e29bb1ace007fc590fd4f0111af745a084dd3"}}]}) r5 = syz_open_dev$video(&(0x7f0000000440), 0x37ad5285, 0x12b043) ioctl$VIDIOC_S_FMT(r5, 0xc0d05640, &(0x7f0000000340)={0x9, @vbi={0x7, 0x5, 0x33565348, 0x34363248, [0x7fffffff, 0x10001], [0xa, 0x3], 0x1}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) ioctl$int_in(r7, 0x5452, &(0x7f0000000940)=0x707987cd) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r10, r9, 0x26}, 0x10) recvmsg(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x0) sendmsg$inet(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x6000, 0x0) 5.618406761s ago: executing program 4 (id=591): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4.40663371s ago: executing program 4 (id=592): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x1, 0xfe6, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x57, 0x9, 0x95, 0x8, 0xaf9, 0x10, 0x7efd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfd4, 0x4, 0x0, 0xf, 0x40, 0x7, [{{0x9, 0x4, 0x5e, 0xf, 0xe, 0x3f, 0xf8, 0x5f, 0xff, [], [{{0x9, 0x5, 0xf, 0x0, 0xd277a42fecf5f205, 0x80, 0x81, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x7}, @generic={0x55, 0x30, "9d447eb13f424be3b0014b7d5680908f9ca7c98a4d21979960f708f6d4422a27c96c29e2e921407328e80e3b329b5ecd90069801659dd177b63402d1a892db26bdff47b330695fa5e281ac03c35e70d5771363"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x9, 0xb7, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8e, 0x2}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x7, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0xea}, @generic={0x74, 0x35, "df84d85f1adeecdf07aeec15c8dee28a59e011b7a8a92300996656fcb77151ad1d46b764a1ccd8487bc1863a0f2bbb10ab810e506522efb6632085f0b07a81d2611be49baf3c2d5123c8002a99eb0104f8fac42299c8c1588136243a7e0357401cde8b622ff6cf21eaf2978279975042c442"}]}}, {{0x9, 0x5, 0xc, 0xc, 0x20, 0x8, 0x8, 0x10, [@generic={0xa9, 0x1, "5d19dda071c23f7f44c9137d2b26e61af0aedf7921212ada8be875fd991a0c9ee45da3cfa0b759f5b88571939fa3d9e441670ce929e53d0846ee8b747d7c167c423a8651e6a3ec5adb060c19a995d9b2fdda0936df47d43cfee5b36fc1d4594d6159305eca862138456e6d744057fe07e9d24a6f0e5854ee00e2f50c835de69fd8e3588af70fcbe13509cf34cfc021de6128003c18b7e9bc230751cc17dc6b79ac029566e38d72"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0x6, 0xfe, 0x9}}, {{0x9, 0x5, 0x80, 0x4, 0x8, 0x3, 0x6, 0x0, [@generic={0xb3, 0x10, "4acd7ef62e4e7e463045c0686e9e6a4ad81f654844ade551acf0aefb7330972671281821d9000ee766fe370b2337883a9e56a752ef5344d39801ba954912e8c71a105b66ab1237e5c240a1176e8ef7892d036ec660d92cf5987648cec7beb44ab2eae553f429e031d2fca8803e9400aa78aa3d61e04ff55e00e741c325bc7d7314ac3421354002c3f9fdee3c6b28efe52a95051030f85e00010b2b0dd2552a47215ed9935feff07a2a45e588f6b79f7fbd"}, @generic={0x59, 0x64, "6d5ffac72565d129da07ff92da00d19e20f47fb666e280d1792ff8fef9a6be7b265d7a8d0f80b10cd38ea5ce0be81fa1ee87cbb2c552a701f41b8d65da423a0b96b038fe32b1ec4fcbdccf5b503e35a951cbb119e9203d"}]}}, {{0x9, 0x5, 0xa, 0x1, 0x200, 0xfc, 0x1, 0xca}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x3, 0x6, 0xe0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6b, 0x7f}]}}, {{0x9, 0x5, 0x5, 0x14, 0x248, 0x8, 0xb, 0xd, [@generic={0x7b, 0xa, "ebc994bfa2578c3536f481320d94d245693206067cad4a40ac78496db748d88d54d71698d6dcfe497335295cc2184fe6db93b0843033e95bb9a57188d6cda37318d0860612dcd8a1ef2423b67dce8a7033a0109d12f4aa0d78065aaa1bdb159445d81fbad7f552a8d93a2177bb1124180c934f00d9a94a9737"}, @generic={0x6e, 0x21, "41ef757476f790ba7a9f33ea84adf90a532293f4029bf87da7653833658f8c466fef861252f3ca06aaaba8b2954b86ea65003fa638a9bc0950e21f88bdfb6acff6c077c0a395d592b8527e8578bf02cc147253f7ff60e633b123d628addb64e78f99b92166f9e132f9b727ca"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x4, 0x81, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1}, @generic={0x45, 0x24, "7a62fe657daf566cb94a9e98fe693767e73605885107432efb2ce0fb42d58d2c032eb964eff008e3bcceb04a4ff799ad8a128462e9484600eaeb481b4ef865783233ea"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x40, 0xff, 0xd0, 0xf, [@generic={0xfe, 0xc, "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"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x48b89a35f9cd7ed2, 0x2, 0xf8, 0xf9, [@generic={0xec, 0x3, "e577c1677b3725f21ed9dc2a6e05565baf023e66b3f2a0a3dd58fa1cfe67c04bc225fa4c4ca4d9de55ef5e13ea7d94b93b4fed1c91b71b9a0d02b1b78eaa0e7019a4803259a339484205aea51c22d471ff46ceecf3c6c554c652c6bd4dad209fc81f305a056aaf92157b1866bf6173d1e7710527027a61bf2b2181b67eb2d8fb5db1c518d44d2c9b6344cd3133e7531739e4913a58b299d3fdfb9ac8d7ef5dfbe371e6ad2d7392a85465c17bd4fdb00515baaebd801e1de9fb5ab9910de254f062160b1a2c7944f29a2b3eec9b56dfddf97d9f2c473f90f88eeafd72739d91e79ddf5ffffda20ddfda0f"}]}}, {{0x9, 0x5, 0x7, 0x2, 0x200, 0x8, 0xf8, 0x1}}, {{0x9, 0x5, 0x0, 0x3, 0x200, 0x6, 0x4, 0x0, [@generic={0xb4, 0xb, "d4d72cf8f46b0e4f673af50e72ac1d0ff39685c4dc2992b4891f1bc5a26006079b9e1ff90f13dfe7888b0880e71f8c75aade45676909915e1fb79fb21cd870a718b25b82a693d12c1471052045c06b203dfc4b492b6c1e29697b37ad4e4a8d0c2c8823e831855d0332ba9ba9ea868c6f70d4742af915a3d163c036f613d4d3e48df901cd43e725fdc1fe11b73d8604cd94536fa6ef39fe28b81fae24ab499926538c87f7c0e53a1a689df4ccb2bd7c897213"}]}}]}}, {{0x9, 0x4, 0x3b, 0x9, 0x8, 0x2, 0x6, 0x0, 0x2, [], [{{0x9, 0x5, 0x0, 0x2, 0x20, 0x4, 0x3, 0x5, [@generic={0x76, 0x3, "95a8e4668df9c82e65c26f11d278968ab3d8fc6c3e74fc68ffca3789868323e8cda2d664a26bdfbec2b3bbda28a4f65896ba338166a83eace1479a6455684a9b1d27431d93b619ad98ec0fd05eb8098057d09321655fe1f3f1e203388543e5bbcc250dfb621e16d65a0a53fe60fe8eed2a7c3251"}]}}, {{0x9, 0x5, 0x4, 0x8, 0x8, 0x5, 0x0, 0x4}}, {{0x9, 0x5, 0x2, 0x0, 0xbff, 0xf, 0x6, 0x4, [@generic={0xc8, 0x6, "1a93800c1d4fc129cdee4622e267f0981a76ef296383945dc03fb11cf56450b8a9ab3b31efde0835222cf5836162baa43b8b789359c5253ed1b0be23727f54815059614b85893e2e0685f446d376342377fdd4c9a304e35ade0662abfeb783260ab8d966bc1328b03e5a30177180965b6a33be0282cadebc65c19bb53750c4786b39303b7842bf2bbc7f5b11963dbb9d2073f331e52dbc9c6e3c6b6d0b7d4d192d90ce6e367586ec381c21e864aa5e91caeea22d2b81eaad870347696f4df627208aa4fe007a"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x5}]}}, {{0x9, 0x5, 0x5, 0x10, 0x20, 0x7, 0xc, 0xb9, [@generic={0x66, 0x2, "5450906471eb7df45b1f472e6ed995bbe01fc8e1cb9a297c494cb61fcc80e699ab34c36076b6d3f369d2eb38c7bfc7c810eea0bf1004d46c0237f06fdda85e24b9b5f2c8fe98275978ae789ff8219b38732f7504abe5acdccbb6fe46d980eddfd21744b0"}, @generic={0x18, 0x23, "f9ca8279dc4a01c326349983bbd2c4c0f80a3eccc4d8"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x1, 0x8, 0x7, [@generic={0x3, 0xd965d7d387ae5955, "ec"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0xff81}]}}, {{0x9, 0x5, 0xa, 0xc, 0x8, 0x3, 0x4, 0x78, [@generic={0x62, 0x24, "f5e956fb1a9dcdec7b954d3f696b9c3dbf578e3b6bdb56738f35bcc30f0c42f693a14801bbabb92a090d899acf963c5bc6c53138627852eb3e86a273d02ca3ead63049e648380ba9a2f010b17e0344c860ed0aad5303967877744086ef7d759d"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x3ff, 0x7, 0xc}}, {{0x9, 0x5, 0x1, 0x3, 0x400, 0x3, 0x8, 0x88, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x7}, @generic={0x2b, 0x9, "e8c748215bc4e2084f51ae76629ed1faac915841d8e265f3c635ed8994fa5531ac294ccc90e9d04b61"}]}}]}}, {{0x9, 0x4, 0xee, 0xde, 0xa, 0xa4, 0x5c, 0xe7, 0x1, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "d91425a2"}, {0x5, 0x24, 0x0, 0x882}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x2, 0x7beb, 0xc3}, {0x6, 0x24, 0x1a, 0xfffb, 0xc}}, @hid_hid={0x9, 0x21, 0xe, 0x8, 0x1, {0x22, 0xbf0}}], [{{0x9, 0x5, 0xe, 0x8, 0x400, 0xae, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x60, 0xfffb}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xb, 0xf}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0xff, 0x6, 0x4}}, {{0x9, 0x5, 0xb, 0xc, 0x20, 0x8, 0x1, 0x6}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0x4, 0x9, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xc, 0x2}]}}, {{0x9, 0x5, 0x4, 0x4, 0x20, 0xff, 0x0, 0x40, [@generic={0xa5, 0x7, "6c5e1d3e2bbdeb94ee74773928a6452c0ba701dd1a4f863bee469699f9e354f053673cb2dc0bb32489bdc3af951e5345f6f8fc70941fd5adbb78dd21a7cfda3378fd3ae50408f1268d0ccc3e6296e414790bb7dae3526dcf97347718eac2b4f485ab0110be7916cc2125aa397436fd11d088ee3cb18c659b970d04028c80846386f2571949a858b2cc667e6013d7dd2c0f2dcc38875191fb4498fa9a8512bcec7ba676"}, @generic={0x96, 0xe, "fb343100931b5c307c281456fe6e3d063e9813932fa656d4015f635c46ebecdc780a1c8008501b433d406905eefe26fd6f5b9f0802bbeac510ca38ec8e6e541973f28037e9bf8ca9a834fab6d3aac7264a77fa930a366e3788add2574bdd782a93e5ecd1366b38ee060e771f41e4926554a7992cb4581843899b562e753c799c29e9ad8fa9ca688cde5bbe3fda569c95ae563e7e"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x17, 0x5, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xfd, 0x1}]}}, {{0x9, 0x5, 0x3, 0x10, 0x200, 0x5d, 0x9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x7}]}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x2b, 0x1, 0xfa}}, {{0x9, 0x5, 0xc, 0x2, 0x40, 0xfc, 0x3, 0x4}}, {{0x9, 0x5, 0xa, 0x8, 0x3ff, 0x9, 0x9, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf7, 0x2c17}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x200}]}}]}}, {{0x9, 0x4, 0x95, 0x5, 0x6, 0x22, 0xf, 0x56, 0x7, [], [{{0x9, 0x5, 0x1, 0x8, 0x200, 0x4, 0x7, 0x1, [@generic={0x5e, 0xb, "4f129f0f30d1bf60b6912ab4ee9d09c6df629eed160ed8fa8446960b4a779cf602aae9ce7c8c6a1108192d01aece9d75643a840dec67498508e0adedecd2ad8f88c06d7fe1dd69bdebde3376eb62261b5943e3f9609c3a1c4b7d8fee"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0xfc00}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x3, 0x2, 0x9, [@generic={0x6b, 0xe, "b054936ea110bcb28c33ebbe2d343e7dcb640c292ffdf6f426133668b3aaab3a89260d0829b8b8daf86ddf7d7533c8c8e4055727eabe6c308a5d54e25f7290da310125a4e590f6b0f4e488a156ef78fcb06457c54bba902ad9521aee8a4ee50a12b27121b69aafcf3d"}, @generic={0x66, 0x22, "8b7753719464c67294b8939c3a655f46fbd953bb13617e46d42e6b40faac56e92f9719f5ed49c8cff94f37cb9bb286edf53610f327c1f2ee397fbacdd41fe2e1ed38aad525fb807abf507da1b703534e644ea5e97c8f5eda4c066a4e3eadd263bd03c2a8"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x3ff, 0x0, 0xff, 0x6}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x5, 0x8, 0x5, [@generic={0xd1, 0xa, "28d52487d896380e3c89577710a232ebd9c0afa93174c72c431cac297e4b2e455b91e53534ca5f0a9bcf2ef0765128652e9e762fa7778bb3ce9a658c0e56a7012f98890e3f839594cb7cbc6ecbd454bca8adb1fd0a6d0465366892212c3f631fbd108acb937781dbca834d00a1a605db20991b05308ee360ec8addf82fd16e77c9341e867a3e81e9e986d766e78830daaf8bbc657486fcf14a7e62877fe418ecd3f12ea1a26cf2c83c1e0fc6c8d00a247670e3371fcad1ef8dd288c3b405f67859d8199924b9aea458654d86cce703"}]}}, {{0x9, 0x5, 0xd, 0x8, 0x200, 0x5, 0x8, 0xf8, [@generic={0x18, 0x11, "218da40f78b6528c3cbb4a7bcceccb7729f451abcc30"}]}}, {{0x9, 0x5, 0xa, 0x1, 0x200, 0x5, 0x2d, 0x3, [@generic={0xef, 0x8, "8f86d73ec2bc688abc0aba255dbdb7e5f9470e1b6dc4db373d2fa515e1a1c44912ec4a16412b41c2c90afa87d3d8fd83b99ea2d81140d5b710e1a21c4739488cd875eb833873f4f70e924b3206f9cdef998cc9a662857042d37d640efa54755308bfe4136a02e0d8d8628388ca3f4d7c953fb695b88e75863f2f88753af005cf8682c16beb8bd8b31f358e8c5140247bb9da3755cbd75d6d29f331cfbf8d58b18cba56606d5324ef9e04bc37b56401f98717bbfadc36744999685873f1a96c0631bd5b81ab239c1c3065588c9937707e8b1f02a2501fc9c244a763c61ba0322538dadaa638d1e27832ff7d30ee"}, @generic={0xd8, 0x21, "3670e47273a89d0f25ac37c62c3853d9bb99a2d7cf409b282c6021ed73c69a9fe2e09625089f5c82e4914750bef72d017e1c2567338bd6988cafed1f377323ac79397d4b20810b2905c4d7446848d44cd86d18d4bc0b2167767ea41dbdab204d987e90c63c82c2832f5ffb8d10bc701dee383fdc39097264a256a5eb91ce23960097ab5595d14f5d1ffcf52a473cc003bdf4abeed251b4b49d10c3e0114e54e36d67a3366d353033571b4415d5e067e4ae384af806eb61a02d0521e5aa41d09eef3c0e76766ba3bfe63eb185447d3081d828bec7fcef"}]}}]}}]}}]}}, &(0x7f0000001240)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x0, 0x2, 0x0, 0x40, 0x1}, 0x53, &(0x7f0000000140)={0x5, 0xf, 0x53, 0x4, [@ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x4, 0xf00, 0x7, [0xff0f, 0x0, 0xc0ff, 0xffbec0]}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x4, 0x5, 0x1}, @ssp_cap={0x24, 0x10, 0xa, 0x8, 0x6, 0x0, 0xf000, 0x1, [0xc0c0, 0xffc00f, 0x180, 0xff0018, 0xfe400f, 0xff0f]}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x3, 0x9, 0x100}]}, 0x1, [{0x25, &(0x7f0000001200)=@string={0x25, 0x3, "2358120126f2e4ce8e0f6b60c464296165fbdb4afed1454744700e1577d24f1da4a7b7"}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) 1.789978789s ago: executing program 0 (id=593): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x19, &(0x7f0000001840), 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) ioctl$int_in(r5, 0x5452, &(0x7f0000000940)=0x707987cd) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r8, r7, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) recvmsg(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x0) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x6000, 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) prlimit64(r0, 0x4, 0x0, &(0x7f00000001c0)) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) 1.788160152s ago: executing program 4 (id=594): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000a40)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$unix(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000300)="a29a5a0e76cc809932179755a86c08e5d70d3acb907e2c30e10fe263be7b0bb36908a08e928a607c619b9eeba4ba7bdc53dd607a1f634f2d1c5467872e6216fbef33a484d28f27448777624b44521e120103435858aee0fd81f39c57523c9e08b6ecd2fbb16a089b5a6dff16eac24d654e4c9239d71cf972272b44f857e5953efda0d03c0e436e0b1978a14de1201d3f0556e95208629381d15193a46b7f5b749cd276835d53855d8639b38017da0776a4dc", 0xb2}, {&(0x7f0000000180)="d2d47e2bd71af658438cfa09cfe24fc131787cd4635ca6d031f56b5d300879b08f55f89f9b1db3afd48273885b51bd4687126a8f56eccd1c1ac739", 0x3b}, {&(0x7f00000003c0)="1715c70d21a7402d8140ef1c08b92a3faef7e672f8bae6078211eca51e9ca8b518c82a010dba01fdbbdbd0b01e00bab96f933956ed7fc5897bc7e89c396032ec0bda96087d5613ad4007e2e844fd18acbd6977f1ace31ac947b4cd9574edf758fc46928c9fb582c6bd64fee16752e649c7e53ee458f7492626b20ae5daaa7e51b4b8aa02b8f080e3d75a0a327b885f66c36ac1e38bd6376580c78bf91b037f1a3cb5392e9155b2765965f908e0c12225522ebdc1771c82594b2f8f505ce75fc1f8fc2ea7c835865d3012c18ff42b42c901eeb93e2e4382c785c026332ced2479998b4567d7c74a5dbec4fe0dff79958487d1df", 0xf3}, {&(0x7f00000004c0)="6a7bd6f3852e2955c6c4c0a9c61b0eb6830e4c9875f4475ffa4714a9bc51b37d8e6e0b9d9b597d049ca4c38b119326c58af9686e01137f26140867ba63840f83868297eef36806c76dc39e46a074217efdf1ba5cd7ca00f7dc3ea075e3379610e1732aa1a381d4e9b794891047d86ccb476af76408341ca24f0e53ec7a37117244aa0b44dc612caba4055bc8e9823cb1a62a24a7a5a63c2ce71d5a6ba47dfe695a897e32c70a49654aaccc12b7541d63f230d7a8f2cff273e9155939550a6b9f98218273de9a56c2e140645884a714807f16db1d8022f5c766ba3594cea52b25880bbab74c75100b054a40a5cb0cefa5165646b097402984", 0xf8}, {&(0x7f0000000240)="a25a28b798f8c2da92285bb3cfaa8befe401e8745a88c073758ea3e1d82a4937480418d8543d9678dcef62c2647ac1815a92e7e9503c1ef999e80f2a6b184bb3f34da022467410f629222693daae4ee8b5f6549e26e531cc4223428cd7c95aa85c8650b949e2ceb0415115b81ceaf354678304", 0x73}, {&(0x7f00000005c0)="63b419bdac3aff29658b70833f9252d3c97ce30a26d1c55767d77eed87f1136f0085dcf5fa61e7641398951fd601013a21f10c44de076f18f3f8f07422", 0x3d}, {0x0}, {&(0x7f0000000640)="ecc5f5bfee665586815445ed3d0ca826a33cdd9e5da7a5c8e5025bcd74191b73e0968695ab086065c5e9c7fd6f72c9b4028957e2260a971dd1aab244a99e6d66add1eb7e6a0f5228d39b091cd6f4fdb9ada57904f6b4d3ef02c6ea8a", 0x5c}, {&(0x7f00000006c0)="4566efcc4d5eb26ea83a6ce38d042d7bb03b99c12b6b17c2de1fcd14fc4fe5b1d6f9", 0x22}, {&(0x7f0000000700)}], 0xa, &(0x7f0000000ac0)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x2c, 0x1, 0x1, [r3, r3, r3, r1, r3, r1, r5]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0x90, 0x4000}, 0x8000) 22.584491ms ago: executing program 0 (id=595): openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xe9b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000040000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0], 0x48) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x20180, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = open(0x0, 0x2a4c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') rmdir(&(0x7f0000000440)='./file0\x00') open(0x0, 0x0, 0x1) sendmsg$nl_generic(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[@ANYBLOB="f9001b3ade8bed5d3139187058c1fc092ef75a1663", @ANYBLOB="13d0dde050e96770f7aa60222803b4c286e3c3de72cd6d5840454b849fc17ada45bf1620c685f773fdeb4d01c26378d91f17b9d247f5f81b76a651e8aa9fa85f04dab7b8a4915af26c7f4a0a6fac39bd571545c56cd98114d6e35870707552b16fcb7f7304870500820000290000000000000000a76fcc55f38ad6f8ae8d221067997ef6de1406ffa340fdda3db4960d7a9c577ba5ce6fcab8b9c4dbac14f8c045f2cb032c0496e4aa0e51db744d35717d830180198e8c0de9a41b806d0e1900"], 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x2400c810) 0s ago: executing program 4 (id=596): r0 = openat$smackfs_access(0xffffffffffffff9c, &(0x7f0000000400)='/sys/fs/smackfs/access\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000000a80)=[{&(0x7f00000006c0)="2895126b009c449c1dcbd648d5ca8d0d769c1b70597f095278101364b4f7ae70e2aaa7bd1c02da2cf15a293377af7422a48e8179153c", 0x36}], 0x1, 0x9, 0x10001) kernel console output (not intermixed with test programs): removed [ 323.567138][ T3643] team0 (unregistering): Port device team_slave_0 removed [ 325.218455][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 325.452708][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 325.456413][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 325.482774][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 325.497077][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 327.029857][ T7059] ubi: mtd0 is already attached to ubi31 [ 327.789918][ T59] Bluetooth: hci3: command tx timeout [ 329.852464][ T59] Bluetooth: hci3: command tx timeout [ 331.934688][ T59] Bluetooth: hci3: command tx timeout [ 334.068240][ T59] Bluetooth: hci3: command tx timeout [ 339.648847][ T5851] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 339.660736][ T5851] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 339.673728][ T5851] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 339.674917][ T5851] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 339.676157][ T5851] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 345.028019][ T59] Bluetooth: hci6: command tx timeout [ 347.068704][ T59] Bluetooth: hci6: command tx timeout [ 350.727770][ T59] Bluetooth: hci6: command tx timeout [ 352.814028][ T59] Bluetooth: hci6: command tx timeout [ 362.821780][ T7043] chnl_net:caif_netlink_parms(): no params data found [ 364.931374][ T7108] chnl_net:caif_netlink_parms(): no params data found [ 369.575540][ T7268] overlayfs: failed to resolve './bus': -2 [ 369.690875][ T7043] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.691371][ T7043] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.715033][ T7043] bridge_slave_0: entered allmulticast mode [ 369.745064][ T3643] IPVS: stop unused estimator thread 0... [ 369.838603][ T7043] bridge_slave_0: entered promiscuous mode [ 370.309723][ T7043] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.309859][ T7043] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.310087][ T7043] bridge_slave_1: entered allmulticast mode [ 370.343878][ T7043] bridge_slave_1: entered promiscuous mode [ 374.275655][ T7108] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.275796][ T7108] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.276044][ T7108] bridge_slave_0: entered allmulticast mode [ 374.312422][ T7108] bridge_slave_0: entered promiscuous mode [ 374.338984][ T7043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.345484][ T7108] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.345615][ T7108] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.345841][ T7108] bridge_slave_1: entered allmulticast mode [ 374.362585][ T7108] bridge_slave_1: entered promiscuous mode [ 374.373809][ T7043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.378747][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.378824][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.234951][ T7108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.856215][ T7108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.086602][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 387.266806][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 387.280754][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 387.282805][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 387.309410][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 388.920466][ T3643] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.512544][ T5851] Bluetooth: hci2: command tx timeout [ 393.532432][ T5851] Bluetooth: hci2: command tx timeout [ 395.672101][ T5851] Bluetooth: hci2: command tx timeout [ 397.158551][ T3643] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.299750][ T7108] team0: Port device team_slave_0 added [ 397.321014][ T7108] team0: Port device team_slave_1 added [ 397.694521][ T5851] Bluetooth: hci2: command tx timeout [ 403.249784][ T3643] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.407712][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 405.425471][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 405.451415][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 405.496652][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 405.516994][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 406.584174][ T3643] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.852407][ T5851] Bluetooth: hci3: command tx timeout [ 409.933267][ T5851] Bluetooth: hci3: command tx timeout [ 411.190724][ T3643] bridge_slave_1: left allmulticast mode [ 411.190757][ T3643] bridge_slave_1: left promiscuous mode [ 411.195042][ T3643] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.606654][ T5851] Bluetooth: hci3: command tx timeout [ 412.644531][ T3643] bridge_slave_0: left allmulticast mode [ 412.644552][ T3643] bridge_slave_0: left promiscuous mode [ 412.644716][ T3643] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.121021][ T3643] bridge_slave_1: left allmulticast mode [ 413.121054][ T3643] bridge_slave_1: left promiscuous mode [ 413.121342][ T3643] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.246503][ T3643] bridge_slave_0: left allmulticast mode [ 413.246535][ T3643] bridge_slave_0: left promiscuous mode [ 413.246785][ T3643] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.978007][ T5851] Bluetooth: hci3: command tx timeout [ 426.476027][ T3643] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 426.553769][ T3643] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.631070][ T3643] bond0 (unregistering): Released all slaves [ 428.812512][ T3643] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.160253][ T3643] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.053190][ T3643] bond0 (unregistering): Released all slaves [ 434.405414][ T7349] chnl_net:caif_netlink_parms(): no params data found [ 438.888510][ T7452] chnl_net:caif_netlink_parms(): no params data found [ 440.180589][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.180666][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.882766][ T7349] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.882913][ T7349] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.883155][ T7349] bridge_slave_0: entered allmulticast mode [ 444.047866][ T7349] bridge_slave_0: entered promiscuous mode [ 444.790813][ T7349] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.790956][ T7349] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.791216][ T7349] bridge_slave_1: entered allmulticast mode [ 444.804778][ T7349] bridge_slave_1: entered promiscuous mode [ 447.773592][ T3643] hsr_slave_0: left promiscuous mode [ 448.254962][ T5851] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 448.272599][ T5851] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 448.274427][ T3643] hsr_slave_1: left promiscuous mode [ 448.275309][ T5851] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 448.275890][ T3643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.275918][ T3643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.276374][ T5851] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 448.277453][ T5851] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 448.515099][ T3643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.515131][ T3643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.855843][ T3643] veth1_macvtap: left promiscuous mode [ 449.855974][ T3643] veth0_macvtap: left promiscuous mode [ 449.856284][ T3643] veth1_vlan: left promiscuous mode [ 449.856494][ T3643] veth0_vlan: left promiscuous mode [ 451.780127][ T5851] Bluetooth: hci5: command tx timeout [ 453.896380][ T5851] Bluetooth: hci5: command tx timeout [ 457.165668][ T5851] Bluetooth: hci5: command tx timeout [ 459.260854][ T59] Bluetooth: hci5: command tx timeout [ 460.612008][ T37] audit: type=1326 audit(1757732138.411:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7760 comm="syz.0.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288203eba9 code=0x7ffc0000 [ 460.612060][ T37] audit: type=1326 audit(1757732138.411:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7760 comm="syz.0.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288203eba9 code=0x7ffc0000 [ 460.612099][ T37] audit: type=1326 audit(1757732138.411:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7760 comm="syz.0.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f288203eba9 code=0x7ffc0000 [ 460.612138][ T37] audit: type=1326 audit(1757732138.411:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7760 comm="syz.0.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288203eba9 code=0x7ffc0000 [ 460.612177][ T37] audit: type=1326 audit(1757732138.411:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7760 comm="syz.0.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288203eba9 code=0x7ffc0000 [ 460.612217][ T37] audit: type=1326 audit(1757732138.411:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7760 comm="syz.0.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f288203eba9 code=0x7ffc0000 [ 460.612306][ T37] audit: type=1326 audit(1757732138.411:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7760 comm="syz.0.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288203eba9 code=0x7ffc0000 [ 460.612346][ T37] audit: type=1326 audit(1757732138.411:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7760 comm="syz.0.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f288203eba9 code=0x7ffc0000 [ 460.612385][ T37] audit: type=1326 audit(1757732138.411:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7760 comm="syz.0.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288203eba9 code=0x7ffc0000 [ 460.612425][ T37] audit: type=1326 audit(1757732138.421:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7760 comm="syz.0.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f288203d65f code=0x7ffc0000 [ 465.846568][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 465.868265][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 465.888952][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 465.893660][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 465.908260][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 468.022572][ T59] Bluetooth: hci2: command tx timeout [ 470.189925][ T59] Bluetooth: hci2: command tx timeout [ 470.458806][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 470.458822][ T37] audit: type=1326 audit(1757732148.881:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7816 comm="syz.4.369" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa1864aeba9 code=0x0 [ 472.336029][ T59] Bluetooth: hci2: command tx timeout [ 475.603852][ T59] Bluetooth: hci2: command tx timeout [ 478.915667][ T3643] team0 (unregistering): Port device team_slave_1 removed [ 480.402690][ T37] audit: type=1326 audit(1757732158.801:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7866 comm="syz.1.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d86cdeba9 code=0x7ffc0000 [ 480.402747][ T37] audit: type=1326 audit(1757732158.801:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7866 comm="syz.1.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d86cdeba9 code=0x7ffc0000 [ 480.402789][ T37] audit: type=1326 audit(1757732158.801:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7866 comm="syz.1.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f1d86cdeba9 code=0x7ffc0000 [ 480.402826][ T37] audit: type=1326 audit(1757732158.801:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7866 comm="syz.1.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d86cdeba9 code=0x7ffc0000 [ 480.402865][ T37] audit: type=1326 audit(1757732158.801:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7866 comm="syz.1.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d86cdeba9 code=0x7ffc0000 [ 480.402905][ T37] audit: type=1326 audit(1757732158.801:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7866 comm="syz.1.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f1d86cdeba9 code=0x7ffc0000 [ 480.402946][ T37] audit: type=1326 audit(1757732158.801:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7866 comm="syz.1.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d86cdeba9 code=0x7ffc0000 [ 480.402985][ T37] audit: type=1326 audit(1757732158.801:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7866 comm="syz.1.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d86cdeba9 code=0x7ffc0000 [ 480.403024][ T37] audit: type=1326 audit(1757732158.801:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7866 comm="syz.1.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1d86cdeba9 code=0x7ffc0000 [ 480.403072][ T37] audit: type=1326 audit(1757732158.811:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7866 comm="syz.1.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d86cdeba9 code=0x7ffc0000 [ 481.263341][ T3643] team0 (unregistering): Port device team_slave_0 removed [ 496.491688][ T7938] overlayfs: overlapping lowerdir path [ 501.850042][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.850120][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.774699][ T3643] team0 (unregistering): Port device team_slave_1 removed [ 505.923451][ T3643] team0 (unregistering): Port device team_slave_0 removed [ 507.478898][ T7994] overlayfs: failed to resolve './file1/file0': -2 [ 514.329441][ T37] kauditd_printk_skb: 22 callbacks suppressed [ 514.329461][ T37] audit: type=1326 audit(1757732192.561:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8010 comm="syz.1.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d86cdeba9 code=0x7ffc0000 [ 514.329504][ T37] audit: type=1326 audit(1757732192.561:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8010 comm="syz.1.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d86cdeba9 code=0x7ffc0000 [ 514.329553][ T37] audit: type=1326 audit(1757732192.561:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8010 comm="syz.1.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f1d86cdeba9 code=0x7ffc0000 [ 514.329594][ T37] audit: type=1326 audit(1757732192.561:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8010 comm="syz.1.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d86cdeba9 code=0x7ffc0000 [ 514.329633][ T37] audit: type=1326 audit(1757732192.561:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8010 comm="syz.1.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d86cdeba9 code=0x7ffc0000 [ 514.329672][ T37] audit: type=1326 audit(1757732192.561:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8010 comm="syz.1.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f1d86cdeba9 code=0x7ffc0000 [ 514.329711][ T37] audit: type=1326 audit(1757732192.561:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8010 comm="syz.1.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d86cdeba9 code=0x7ffc0000 [ 514.329750][ T37] audit: type=1326 audit(1757732192.561:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8010 comm="syz.1.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1d86cdeba9 code=0x7ffc0000 [ 514.329787][ T37] audit: type=1326 audit(1757732192.571:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8010 comm="syz.1.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d86cdeba9 code=0x7ffc0000 [ 514.329827][ T37] audit: type=1326 audit(1757732192.571:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8010 comm="syz.1.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f1d86cdeba9 code=0x7ffc0000 [ 514.975549][ T5851] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 514.993433][ T5851] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 514.996942][ T5851] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 514.998476][ T5851] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 514.999258][ T5851] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 517.692741][ T5851] Bluetooth: hci6: command tx timeout [ 519.773127][ T5851] Bluetooth: hci6: command tx timeout [ 521.764478][ T8014] chnl_net:caif_netlink_parms(): no params data found [ 521.854856][ T5851] Bluetooth: hci6: command tx timeout [ 524.356989][ T5851] Bluetooth: hci6: command tx timeout [ 527.427423][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 527.449492][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 527.500669][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 527.539164][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 527.540481][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 527.589815][ T8014] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.589960][ T8014] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.590151][ T8014] bridge_slave_0: entered allmulticast mode [ 527.613311][ T8014] bridge_slave_0: entered promiscuous mode [ 527.646791][ T8014] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.646925][ T8014] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.647167][ T8014] bridge_slave_1: entered allmulticast mode [ 527.650877][ T8014] bridge_slave_1: entered promiscuous mode [ 529.654900][ T59] Bluetooth: hci2: command tx timeout [ 529.915735][ T8014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.098932][ T8014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 531.693948][ T59] Bluetooth: hci2: command tx timeout [ 532.881243][ T8014] team0: Port device team_slave_0 added [ 532.907029][ T3643] IPVS: stop unused estimator thread 0... [ 533.087248][ T8014] team0: Port device team_slave_1 added [ 533.827685][ T59] Bluetooth: hci2: command tx timeout [ 535.869508][ T59] Bluetooth: hci2: command tx timeout [ 541.926869][ T8014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.926880][ T8014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.926894][ T8014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 542.024900][ T8014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.024911][ T8014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.024932][ T8014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.267997][ T8014] hsr_slave_0: entered promiscuous mode [ 544.269269][ T8014] hsr_slave_1: entered promiscuous mode [ 544.270230][ T8014] debugfs: 'hsr0' already exists in 'hsr' [ 544.270254][ T8014] Cannot create hsr debugfs directory [ 546.187779][ T3643] bridge_slave_1: left allmulticast mode [ 546.187802][ T3643] bridge_slave_1: left promiscuous mode [ 546.187964][ T3643] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.300095][ T3643] bridge_slave_0: left allmulticast mode [ 546.300117][ T3643] bridge_slave_0: left promiscuous mode [ 546.301029][ T3643] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.581314][ T3643] bridge_slave_1: left allmulticast mode [ 546.581348][ T3643] bridge_slave_1: left promiscuous mode [ 546.581627][ T3643] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.886425][ T3643] bridge_slave_0: left allmulticast mode [ 547.886459][ T3643] bridge_slave_0: left promiscuous mode [ 547.886712][ T3643] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.024760][ T3643] bridge_slave_1: left allmulticast mode [ 548.024794][ T3643] bridge_slave_1: left promiscuous mode [ 548.025048][ T3643] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.107713][ T3643] bridge_slave_0: left allmulticast mode [ 548.107735][ T3643] bridge_slave_0: left promiscuous mode [ 548.107915][ T3643] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.857889][ T3643] bond0 (unregistering): Released all slaves [ 552.348094][ T3643] bond0 (unregistering): Released all slaves [ 553.803182][ T3643] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 554.745355][ T3643] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 555.832646][ T3643] bond0 (unregistering): Released all slaves [ 556.596668][ T37] kauditd_printk_skb: 22 callbacks suppressed [ 556.596753][ T37] audit: type=1326 audit(1757732234.931:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8245 comm="syz.0.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288203eba9 code=0x7ffc0000 [ 556.597337][ T37] audit: type=1326 audit(1757732234.931:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8245 comm="syz.0.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288203eba9 code=0x7ffc0000 [ 557.014811][ T37] audit: type=1326 audit(1757732235.031:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8245 comm="syz.0.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f288203eba9 code=0x7ffc0000 [ 557.015167][ T37] audit: type=1326 audit(1757732235.031:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8245 comm="syz.0.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288203eba9 code=0x7ffc0000 [ 557.015502][ T37] audit: type=1326 audit(1757732235.031:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8245 comm="syz.0.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288203eba9 code=0x7ffc0000 [ 557.015745][ T37] audit: type=1326 audit(1757732235.031:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8245 comm="syz.0.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f288203eba9 code=0x7ffc0000 [ 557.015977][ T37] audit: type=1326 audit(1757732235.321:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8245 comm="syz.0.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288203eba9 code=0x7ffc0000 [ 557.016183][ T37] audit: type=1326 audit(1757732235.331:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8245 comm="syz.0.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f288203eba9 code=0x7ffc0000 [ 557.016461][ T37] audit: type=1326 audit(1757732235.371:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8245 comm="syz.0.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288203eba9 code=0x7ffc0000 [ 557.016699][ T37] audit: type=1326 audit(1757732235.381:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8245 comm="syz.0.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288203eba9 code=0x7ffc0000 [ 559.388657][ T3643] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 559.599966][ T3643] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 559.772743][ T3643] bond0 (unregistering): Released all slaves [ 563.330082][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.334965][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.695704][ T8104] chnl_net:caif_netlink_parms(): no params data found [ 565.476671][ T5851] Bluetooth: hci2: command 0x0405 tx timeout [ 568.952434][ T37] audit: type=1326 audit(1757732246.991:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8309 comm="syz.0.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288203eba9 code=0x7ffc0000 [ 568.952491][ T37] audit: type=1326 audit(1757732246.991:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8309 comm="syz.0.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288203eba9 code=0x7ffc0000 [ 568.952531][ T37] audit: type=1326 audit(1757732247.001:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8309 comm="syz.0.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f288203eba9 code=0x7ffc0000 [ 568.952569][ T37] audit: type=1326 audit(1757732247.001:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8309 comm="syz.0.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288203eba9 code=0x7ffc0000 [ 568.952609][ T37] audit: type=1326 audit(1757732247.001:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8309 comm="syz.0.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288203eba9 code=0x7ffc0000 [ 568.952647][ T37] audit: type=1326 audit(1757732247.001:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8309 comm="syz.0.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f288203eba9 code=0x7ffc0000 [ 568.952686][ T37] audit: type=1326 audit(1757732247.001:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8309 comm="syz.0.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288203eba9 code=0x7ffc0000 [ 568.952724][ T37] audit: type=1326 audit(1757732247.001:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8309 comm="syz.0.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f288203eba9 code=0x7ffc0000 [ 568.952762][ T37] audit: type=1326 audit(1757732247.001:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8309 comm="syz.0.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288203eba9 code=0x7ffc0000 [ 568.952801][ T37] audit: type=1326 audit(1757732247.001:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8309 comm="syz.0.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f288203eba9 code=0x7ffc0000 [ 579.399693][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 579.421366][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 579.431466][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 579.474450][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 579.490157][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 580.827961][ T3643] team0 (unregistering): Port device team_slave_1 removed [ 581.534860][ T59] Bluetooth: hci3: command tx timeout [ 582.494416][ T3643] team0 (unregistering): Port device team_slave_0 removed [ 583.643115][ T59] Bluetooth: hci3: command tx timeout [ 585.792107][ T5851] Bluetooth: hci3: command tx timeout [ 585.906366][ T5851] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 585.934404][ T5851] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 585.941533][ T5851] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 585.959254][ T5851] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 585.961219][ T5851] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 587.451809][ T8385] overlayfs: overlapping lowerdir path [ 588.242789][ T59] Bluetooth: hci3: command tx timeout [ 588.242848][ T59] Bluetooth: hci5: command tx timeout [ 590.252514][ T5851] Bluetooth: hci5: command tx timeout [ 592.332837][ T5851] Bluetooth: hci5: command tx timeout [ 594.412680][ T5851] Bluetooth: hci5: command tx timeout [ 600.826862][ T8104] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg1": -EINTR [ 602.119883][ T8401] process 'syz.1.502' launched './file2' with NULL argv: empty string added [ 602.324440][ T8403] mac80211_hwsim hwsim8 €: renamed from wlan0 (while UP) [ 603.572224][ T6011] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 603.825293][ T6011] usb 2-1: Using ep0 maxpacket: 32 [ 603.840237][ T6011] usb 2-1: unable to get BOS descriptor or descriptor too short [ 603.872519][ T6011] usb 2-1: config 12 has an invalid interface number: 184 but max is 0 [ 603.872547][ T6011] usb 2-1: config 12 has no interface number 0 [ 603.872595][ T6011] usb 2-1: config 12 interface 184 altsetting 0 endpoint 0x3 has invalid maxpacket 49467, setting to 1024 [ 603.908783][ T6011] usb 2-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 603.908813][ T6011] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.908833][ T6011] usb 2-1: Product: syz [ 603.908846][ T6011] usb 2-1: Manufacturer: syz [ 603.908859][ T6011] usb 2-1: SerialNumber: syz [ 604.843048][ T6011] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 605.592730][ T6011] usb 2-1: USB disconnect, device number 2 [ 605.772917][ T6202] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 605.932600][ T6202] usb 5-1: Using ep0 maxpacket: 16 [ 605.935238][ T6202] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 605.935260][ T6202] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 605.935277][ T6202] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 605.943144][ T6202] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 605.943172][ T6202] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.943191][ T6202] usb 5-1: Product: syz [ 605.943205][ T6202] usb 5-1: Manufacturer: syz [ 605.943218][ T6202] usb 5-1: SerialNumber: syz [ 606.620401][ T6202] usb 5-1: 0:2 : does not exist [ 607.693114][ T6202] usb 5-1: 1:0: cannot get min/max values for control 2 (id 1) [ 607.763468][ T6202] usb 5-1: USB disconnect, device number 2 [ 607.942959][ T8366] chnl_net:caif_netlink_parms(): no params data found [ 609.529209][ T8481] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 610.059056][ T8447] udevd[8447]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 610.488171][ T8493] trusted_key: syz.1.520 sent an empty control message without MSG_MORE. [ 610.491297][ T8491] bridge0: port 3(veth0_to_bridge) entered blocking state [ 610.491589][ T8491] bridge0: port 3(veth0_to_bridge) entered disabled state [ 610.491814][ T8491] veth0_to_bridge: entered allmulticast mode [ 610.525054][ T8491] veth0_to_bridge: entered promiscuous mode [ 610.525289][ T8491] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 610.528005][ T8491] bridge0: port 3(veth0_to_bridge) entered blocking state [ 610.528151][ T8491] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 610.596790][ T8335] chnl_net:caif_netlink_parms(): no params data found [ 611.102411][ T1228] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 611.262396][ T1228] usb 2-1: Using ep0 maxpacket: 8 [ 611.265549][ T1228] usb 2-1: unable to get BOS descriptor or descriptor too short [ 611.282873][ T1228] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 611.282904][ T1228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 611.282931][ T1228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 611.282952][ T1228] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 611.282974][ T1228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 611.282993][ T1228] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x2D, changing to 0xD [ 611.283014][ T1228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 29797, setting to 1024 [ 611.283038][ T1228] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 1024 [ 611.288382][ T1228] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 611.288409][ T1228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.288429][ T1228] usb 2-1: Product: syz [ 611.288443][ T1228] usb 2-1: Manufacturer: syz [ 611.288457][ T1228] usb 2-1: SerialNumber: syz [ 611.425387][ T1228] usb 2-1: config 0 descriptor?? [ 611.426442][ T8505] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 611.426677][ T8505] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 611.466260][ T1228] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 611.544486][ T8366] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.544620][ T8366] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.545011][ T8366] bridge_slave_0: entered allmulticast mode [ 611.548179][ T8366] bridge_slave_0: entered promiscuous mode [ 611.933349][ T8366] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.933519][ T8366] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.934100][ T8366] bridge_slave_1: entered allmulticast mode [ 611.989280][ T8366] bridge_slave_1: entered promiscuous mode [ 612.034183][ T1228] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 612.249342][ T1228] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 612.249383][ T1228] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 612.249426][ T1228] usb 1-1: New USB device found, idVendor=05ac, idProduct=0249, bcdDevice= 0.00 [ 612.249447][ T1228] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.419946][ T1228] usb 1-1: config 0 descriptor?? [ 612.984968][ T1228] usb 1-1: string descriptor 0 read error: -71 [ 613.009191][ T1228] usbhid 1-1:0.0: can't add hid device: -71 [ 613.009317][ T1228] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 613.050646][ T1228] usb 1-1: USB disconnect, device number 2 [ 613.951306][ T6011] usb 2-1: USB disconnect, device number 3 [ 614.067467][ T8366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 614.359190][ T8546] FAULT_INJECTION: forcing a failure. [ 614.359190][ T8546] name failslab, interval 1, probability 0, space 0, times 0 [ 614.359247][ T8546] CPU: 0 UID: 0 PID: 8546 Comm: syz.0.530 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 614.359267][ T8546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 614.359284][ T8546] Call Trace: [ 614.359291][ T8546] [ 614.359299][ T8546] dump_stack_lvl+0x189/0x250 [ 614.359338][ T8546] ? __pfx____ratelimit+0x10/0x10 [ 614.359363][ T8546] ? __pfx_dump_stack_lvl+0x10/0x10 [ 614.359387][ T8546] ? __pfx__printk+0x10/0x10 [ 614.359411][ T8546] ? __pfx___might_resched+0x10/0x10 [ 614.359431][ T8546] ? fs_reclaim_acquire+0x7d/0x100 [ 614.359452][ T8546] should_fail_ex+0x46c/0x600 [ 614.359480][ T8546] ? audit_log_start+0x126/0x850 [ 614.359497][ T8546] should_failslab+0xa8/0x100 [ 614.359520][ T8546] ? audit_log_start+0x126/0x850 [ 614.359536][ T8546] kmem_cache_alloc_noprof+0x6e/0x310 [ 614.359564][ T8546] audit_log_start+0x126/0x850 [ 614.359588][ T8546] ? __pfx_audit_log_start+0x10/0x10 [ 614.359610][ T8546] ? migrate_enable+0x29c/0x3c0 [ 614.359633][ T8546] ? __lock_acquire+0xab9/0xd20 [ 614.359656][ T8546] ? __pfx_migrate_enable+0x10/0x10 [ 614.359682][ T8546] audit_seccomp+0x64/0x190 [ 614.359712][ T8546] __seccomp_filter+0x9aa/0x1a40 [ 614.359746][ T8546] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 614.359771][ T8546] ? __pfx___seccomp_filter+0x10/0x10 [ 614.359796][ T8546] ? __pfx_vfs_write+0x10/0x10 [ 614.359814][ T8546] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 614.359838][ T8546] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 614.359858][ T8546] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 614.359896][ T8546] ? __secure_computing+0xe2/0x2a0 [ 614.359924][ T8546] syscall_trace_enter+0xaa/0x160 [ 614.359949][ T8546] do_syscall_64+0xd3/0x3b0 [ 614.359965][ T8546] ? lockdep_hardirqs_on+0x9c/0x150 [ 614.359988][ T8546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.360005][ T8546] ? clear_bhb_loop+0x60/0xb0 [ 614.360036][ T8546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.360057][ T8546] RIP: 0033:0x7f288203eba9 [ 614.360074][ T8546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 614.360088][ T8546] RSP: 002b:00007f28802a6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f3 [ 614.360113][ T8546] RAX: ffffffffffffffda RBX: 00007f2882285fa0 RCX: 00007f288203eba9 [ 614.360126][ T8546] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 614.360137][ T8546] RBP: 00007f28802a6090 R08: 0000000000000000 R09: 0000000000000000 [ 614.360148][ T8546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 614.360159][ T8546] R13: 00007f2882286038 R14: 00007f2882285fa0 R15: 00007ffc08baa548 [ 614.360189][ T8546] [ 614.360197][ T8546] audit_log_lost: 6 callbacks suppressed [ 614.360206][ T8546] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 614.360219][ T8546] audit: out of memory in audit_log_start [ 614.370800][ T8547] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 614.370826][ T8366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 614.400945][ T8335] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.401090][ T8335] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.401326][ T8335] bridge_slave_0: entered allmulticast mode [ 614.404691][ T8335] bridge_slave_0: entered promiscuous mode [ 614.526312][ T37] audit: type=1326 audit(1757732292.761:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8545 comm="syz.0.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288203eba9 code=0x7ffc0000 [ 614.526362][ T37] audit: type=1326 audit(1757732292.781:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8545 comm="syz.0.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f288203d510 code=0x7ffc0000 [ 614.526400][ T37] audit: type=1326 audit(1757732292.781:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8545 comm="syz.0.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f288203d65f code=0x7ffc0000 [ 614.526439][ T37] audit: type=1326 audit(1757732292.781:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8545 comm="syz.0.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f288203d5bc code=0x7ffc0000 [ 614.526476][ T37] audit: type=1326 audit(1757732292.781:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8545 comm="syz.0.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f288203d65f code=0x7ffc0000 [ 614.526514][ T37] audit: type=1326 audit(1757732292.781:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8545 comm="syz.0.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f288203d80a code=0x7ffc0000 [ 614.526551][ T37] audit: type=1326 audit(1757732292.781:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8545 comm="syz.0.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288203eba9 code=0x7ffc0000 [ 614.526588][ T37] audit: type=1326 audit(1757732292.801:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8545 comm="syz.0.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288203eba9 code=0x7ffc0000 [ 615.032501][ T6011] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 615.263441][ T8335] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.264160][ T8335] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.266880][ T8335] bridge_slave_1: entered allmulticast mode [ 615.441481][ T8335] bridge_slave_1: entered promiscuous mode [ 615.571879][ T6011] usb 2-1: device descriptor read/64, error -71 [ 615.852607][ T6011] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 615.974445][ T8366] team0: Port device team_slave_0 added [ 616.003290][ T6011] usb 2-1: device descriptor read/64, error -71 [ 616.113082][ T6011] usb usb2-port1: attempt power cycle [ 616.138249][ T8366] team0: Port device team_slave_1 added [ 616.157735][ T8335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 616.246878][ T8335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 616.264205][ T5841] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 616.447623][ T5841] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 616.447653][ T5841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.447673][ T5841] usb 1-1: Product: syz [ 616.447686][ T5841] usb 1-1: Manufacturer: syz [ 616.447699][ T5841] usb 1-1: SerialNumber: syz [ 616.493161][ T6011] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 616.501170][ T5841] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 616.513728][ T8366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 616.513745][ T8366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 616.513768][ T8366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 616.524703][ T6011] usb 2-1: device descriptor read/8, error -71 [ 616.652243][ T5913] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 616.794307][ T6011] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 616.825981][ T6011] usb 2-1: device descriptor read/8, error -71 [ 616.859527][ C0] usb 1-1: ath9k_htc: invalid pkt_len (ff31) [ 616.862824][ T8366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 616.862839][ T8366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 616.863485][ T8366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 616.901953][ T8335] team0: Port device team_slave_0 added [ 616.952052][ T6011] usb usb2-port1: unable to enumerate USB device [ 617.079753][ T8335] team0: Port device team_slave_1 added [ 618.197846][ T5913] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 618.198242][ T5913] ath9k_htc: Failed to initialize the device [ 622.252422][ T9] usb 1-1: USB disconnect, device number 3 [ 622.291653][ T9] usb 1-1: ath9k_htc: USB layer deinitialized [ 623.820456][ T8598] FAULT_INJECTION: forcing a failure. [ 623.820456][ T8598] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 623.820570][ T8598] CPU: 1 UID: 0 PID: 8598 Comm: syz.0.539 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 623.820590][ T8598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 623.820600][ T8598] Call Trace: [ 623.820607][ T8598] [ 623.820615][ T8598] dump_stack_lvl+0x189/0x250 [ 623.820645][ T8598] ? __pfx____ratelimit+0x10/0x10 [ 623.820670][ T8598] ? __pfx_dump_stack_lvl+0x10/0x10 [ 623.820694][ T8598] ? __pfx__printk+0x10/0x10 [ 623.820714][ T8598] ? __might_fault+0xb0/0x130 [ 623.820750][ T8598] should_fail_ex+0x46c/0x600 [ 623.820780][ T8598] _copy_from_user+0x2d/0xb0 [ 623.820802][ T8598] snd_pcm_oss_write+0x855/0x11a0 [ 623.820825][ T8598] ? get_pid_task+0x20/0x1f0 [ 623.820868][ T8598] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 623.820888][ T8598] ? do_raw_spin_lock+0x121/0x290 [ 623.820914][ T8598] ? rw_verify_area+0x25b/0x4e0 [ 623.820935][ T8598] ? __lock_acquire+0xab9/0xd20 [ 623.820954][ T8598] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 623.820978][ T8598] vfs_write+0x287/0xb40 [ 623.821008][ T8598] ? __pfx_vfs_write+0x10/0x10 [ 623.821030][ T8598] ? __fget_files+0x2a/0x420 [ 623.821055][ T8598] ? __fget_files+0x2a/0x420 [ 623.821077][ T8598] ? __fget_files+0x3a6/0x420 [ 623.821098][ T8598] ? __fget_files+0x2a/0x420 [ 623.821135][ T8598] ksys_write+0x14b/0x260 [ 623.821159][ T8598] ? __pfx_ksys_write+0x10/0x10 [ 623.821177][ T8598] ? rcu_is_watching+0x15/0xb0 [ 623.821207][ T8598] ? do_syscall_64+0xbe/0x3b0 [ 623.821228][ T8598] do_syscall_64+0xfa/0x3b0 [ 623.821243][ T8598] ? lockdep_hardirqs_on+0x9c/0x150 [ 623.821266][ T8598] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.821291][ T8598] ? clear_bhb_loop+0x60/0xb0 [ 623.821313][ T8598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.821330][ T8598] RIP: 0033:0x7f288203eba9 [ 623.821345][ T8598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 623.821359][ T8598] RSP: 002b:00007f28802a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 623.821378][ T8598] RAX: ffffffffffffffda RBX: 00007f2882285fa0 RCX: 00007f288203eba9 [ 623.821391][ T8598] RDX: 0000000000004000 RSI: 00002000000012c0 RDI: 0000000000000003 [ 623.821403][ T8598] RBP: 00007f28802a6090 R08: 0000000000000000 R09: 0000000000000000 [ 623.821414][ T8598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 623.821424][ T8598] R13: 00007f2882286038 R14: 00007f2882285fa0 R15: 00007ffc08baa548 [ 623.821452][ T8598] [ 624.297357][ T8604] comedi comedi0: Minor 3 could not be opened [ 624.566861][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.567287][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.046958][ T8335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 625.046976][ T8335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 625.047271][ T8335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 625.523894][ T8610] FAULT_INJECTION: forcing a failure. [ 625.523894][ T8610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 625.523925][ T8610] CPU: 0 UID: 0 PID: 8610 Comm: syz.0.543 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 625.523946][ T8610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 625.523956][ T8610] Call Trace: [ 625.523963][ T8610] [ 625.523971][ T8610] dump_stack_lvl+0x189/0x250 [ 625.524000][ T8610] ? __pfx____ratelimit+0x10/0x10 [ 625.524025][ T8610] ? __pfx_dump_stack_lvl+0x10/0x10 [ 625.524049][ T8610] ? __pfx__printk+0x10/0x10 [ 625.524084][ T8610] should_fail_ex+0x46c/0x600 [ 625.524122][ T8610] _copy_to_user+0x31/0xb0 [ 625.524146][ T8610] simple_read_from_buffer+0xe1/0x170 [ 625.524175][ T8610] proc_fail_nth_read+0x1b6/0x220 [ 625.524196][ T8610] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 625.524219][ T8610] ? rw_verify_area+0x2ac/0x4e0 [ 625.524239][ T8610] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 625.524259][ T8610] vfs_read+0x206/0xa30 [ 625.524289][ T8610] ? __pfx_vfs_read+0x10/0x10 [ 625.524307][ T8610] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 625.524337][ T8610] ? mutex_lock_nested+0x154/0x1d0 [ 625.524356][ T8610] ? fdget_pos+0x253/0x320 [ 625.524389][ T8610] ksys_read+0x14b/0x260 [ 625.524413][ T8610] ? __pfx_ksys_read+0x10/0x10 [ 625.524440][ T8610] ? do_syscall_64+0xbe/0x3b0 [ 625.524461][ T8610] do_syscall_64+0xfa/0x3b0 [ 625.524476][ T8610] ? lockdep_hardirqs_on+0x9c/0x150 [ 625.524499][ T8610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.524517][ T8610] ? clear_bhb_loop+0x60/0xb0 [ 625.524540][ T8610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.524554][ T8610] RIP: 0033:0x7f288203d5bc [ 625.524570][ T8610] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 625.524584][ T8610] RSP: 002b:00007f28802a6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 625.524603][ T8610] RAX: ffffffffffffffda RBX: 00007f2882285fa0 RCX: 00007f288203d5bc [ 625.524616][ T8610] RDX: 000000000000000f RSI: 00007f28802a60a0 RDI: 0000000000000003 [ 625.524627][ T8610] RBP: 00007f28802a6090 R08: 0000000000000000 R09: 0000000000000000 [ 625.524638][ T8610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 625.524649][ T8610] R13: 00007f2882286038 R14: 00007f2882285fa0 R15: 00007ffc08baa548 [ 625.524680][ T8610] [ 625.852750][ T8335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 625.852766][ T8335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 625.852790][ T8335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 625.905656][ T8366] hsr_slave_0: entered promiscuous mode [ 625.918931][ T8366] hsr_slave_1: entered promiscuous mode [ 625.928817][ T8366] debugfs: 'hsr0' already exists in 'hsr' [ 625.928846][ T8366] Cannot create hsr debugfs directory [ 626.232400][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 626.262411][ T45] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 626.415023][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.415055][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 626.415100][ T45] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 626.415122][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.422361][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 626.427554][ T45] usb 1-1: config 0 descriptor?? [ 626.435858][ T9] usb 5-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 247, changing to 11 [ 626.435890][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 626.497058][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice= 0.40 [ 626.497087][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.497106][ T9] usb 5-1: Product: syz [ 626.497119][ T9] usb 5-1: Manufacturer: syz [ 626.497132][ T9] usb 5-1: SerialNumber: syz [ 626.727055][ T6011] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 626.813347][ T8617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.830405][ T8617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.930736][ T9] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input5 [ 626.957537][ T8335] hsr_slave_0: entered promiscuous mode [ 626.958882][ T8335] hsr_slave_1: entered promiscuous mode [ 626.959796][ T8335] debugfs: 'hsr0' already exists in 'hsr' [ 626.959820][ T8335] Cannot create hsr debugfs directory [ 626.972404][ T6011] usb 2-1: Using ep0 maxpacket: 8 [ 626.982668][ T6011] usb 2-1: config 0 has an invalid interface number: 176 but max is 2 [ 626.982694][ T6011] usb 2-1: config 0 has an invalid interface number: 49 but max is 2 [ 626.982711][ T6011] usb 2-1: config 0 has no interface number 1 [ 626.982726][ T6011] usb 2-1: config 0 has no interface number 2 [ 626.982797][ T6011] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 626.982818][ T6011] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.068164][ T6011] usb 2-1: config 0 descriptor?? [ 627.102436][ T6011] qmi_wwan 2-1:0.0: probe with driver qmi_wwan failed with error -22 [ 627.136897][ T9] usb 5-1: USB disconnect, device number 3 [ 627.568151][ T8625] netlink: 'syz.1.546': attribute type 29 has an invalid length. [ 627.710880][ T45] uclogic 0003:256C:006D.0001: interface is invalid, ignoring [ 627.717787][ C0] vkms_vblank_simulate: vblank timer overrun [ 628.071379][ C0] vkms_vblank_simulate: vblank timer overrun [ 628.171937][ T45] usb 1-1: USB disconnect, device number 4 [ 628.357402][ T8635] netlink: 'syz.1.546': attribute type 29 has an invalid length. [ 628.434864][ T8636] netlink: 'syz.1.546': attribute type 29 has an invalid length. [ 628.472839][ T3643] bridge_slave_1: left allmulticast mode [ 628.472874][ T3643] bridge_slave_1: left promiscuous mode [ 628.474766][ T3643] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.732115][ T3643] bridge_slave_0: left allmulticast mode [ 628.732146][ T3643] bridge_slave_0: left promiscuous mode [ 628.742682][ T3643] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.763514][ C0] vkms_vblank_simulate: vblank timer overrun [ 630.094423][ T8655] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 630.746824][ T3643] bond0 (unregistering): Released all slaves [ 630.912219][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 630.932666][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 630.934400][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 630.954854][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 630.972717][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 631.703709][ T3643] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 631.863265][ T3643] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 631.906087][ T8660] sctp: failed to load transform for md5: -4 [ 631.965915][ T3643] bond0 (unregistering): Released all slaves [ 632.150529][ T8638] netlink: 'syz.1.546': attribute type 29 has an invalid length. [ 632.172530][ T8655] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 632.176199][ T6011] usb 2-1: Could not set interface, error -110 [ 632.176298][ T8587] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 632.256451][ T31] usb 2-1: USB disconnect, device number 8 [ 632.373502][ T8587] usb 5-1: config 4 has an invalid interface number: 63 but max is 1 [ 632.373538][ T8587] usb 5-1: config 4 has an invalid interface number: 97 but max is 1 [ 632.373557][ T8587] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 632.373575][ T8587] usb 5-1: config 4 has no interface number 0 [ 632.373591][ T8587] usb 5-1: config 4 has no interface number 1 [ 632.373665][ T8587] usb 5-1: config 4 interface 97 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 632.373690][ T8587] usb 5-1: config 4 interface 63 has no altsetting 0 [ 632.373707][ T8587] usb 5-1: config 4 interface 97 has no altsetting 0 [ 632.380476][ T8587] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=2c.2c [ 632.380504][ T8587] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.380543][ T8587] usb 5-1: Product: syz [ 632.380557][ T8587] usb 5-1: Manufacturer: syz [ 632.380570][ T8587] usb 5-1: SerialNumber: syz [ 633.052554][ T5851] Bluetooth: hci2: command tx timeout [ 633.209999][ T3643] hsr_slave_0: left promiscuous mode [ 633.252660][ T3643] hsr_slave_1: left promiscuous mode [ 633.260862][ T3643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 633.314314][ T3643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 633.587996][ T8587] usb 5-1: USB disconnect, device number 4 [ 633.656985][ T8697] netlink: 'syz.1.555': attribute type 1 has an invalid length. [ 635.040978][ T8620] udevd[8620]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:4.63/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 635.145918][ T5851] Bluetooth: hci2: command 0x041b tx timeout [ 635.533971][ T8709] netlink: 'syz.0.560': attribute type 21 has an invalid length. [ 635.637937][ T8714] netlink: 'syz.0.560': attribute type 21 has an invalid length. [ 635.638164][ T8714] netlink: 6 bytes leftover after parsing attributes in process `syz.0.560'. [ 635.733482][ T6011] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 635.945151][ T6011] usb 2-1: Using ep0 maxpacket: 16 [ 635.947422][ T6011] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 635.947452][ T6011] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 635.985071][ T6011] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 635.985101][ T6011] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.985130][ T6011] usb 2-1: Product: syz [ 635.985144][ T6011] usb 2-1: Manufacturer: syz [ 635.985156][ T6011] usb 2-1: SerialNumber: syz [ 635.990639][ T6011] usb 2-1: config 0 descriptor?? [ 636.108660][ T6011] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 636.108693][ T6011] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 636.393286][ T8587] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 636.433186][ T3643] team0 (unregistering): Port device team_slave_1 removed [ 636.558383][ T8587] usb 1-1: config 0 has an invalid interface number: 162 but max is 0 [ 636.558412][ T8587] usb 1-1: config 0 has no interface number 0 [ 636.558527][ T8587] usb 1-1: config 0 interface 162 altsetting 0 endpoint 0x8 has invalid maxpacket 511, setting to 64 [ 636.558554][ T8587] usb 1-1: config 0 interface 162 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 636.558575][ T8587] usb 1-1: config 0 interface 162 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 636.558600][ T8587] usb 1-1: config 0 interface 162 altsetting 0 endpoint 0x7 has invalid maxpacket 520, setting to 64 [ 636.558682][ T8587] usb 1-1: config 0 interface 162 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 636.558707][ T8587] usb 1-1: config 0 interface 162 altsetting 0 endpoint 0x8A has an invalid bInterval 143, changing to 11 [ 636.558731][ T8587] usb 1-1: config 0 interface 162 altsetting 0 endpoint 0x8A has invalid maxpacket 41892, setting to 1024 [ 636.558756][ T8587] usb 1-1: config 0 interface 162 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 636.558778][ T8587] usb 1-1: config 0 interface 162 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 636.558851][ T8587] usb 1-1: config 0 interface 162 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 636.558873][ T8587] usb 1-1: config 0 interface 162 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 636.558894][ T8587] usb 1-1: config 0 interface 162 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 636.558916][ T8587] usb 1-1: config 0 interface 162 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 636.558935][ T8587] usb 1-1: config 0 interface 162 altsetting 0 has 13 endpoint descriptors, different from the interface descriptor's value: 12 [ 636.574825][ T8587] usb 1-1: New USB device found, idVendor=19d2, idProduct=0070, bcdDevice=f7.71 [ 636.574852][ T8587] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.574871][ T8587] usb 1-1: Product: syz [ 636.574885][ T8587] usb 1-1: Manufacturer: syz [ 636.588355][ T8587] usb 1-1: SerialNumber: syz [ 636.608241][ T6011] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 636.679089][ T6011] em28xx 2-1:0.0: Config register raw data: 0xbd [ 636.679112][ T6011] em28xx 2-1:0.0: I2S Audio (3 sample rate(s)) [ 636.679127][ T6011] em28xx 2-1:0.0: No AC97 audio processor [ 637.774643][ T8587] usb 1-1: config 0 descriptor?? [ 638.651260][ T59] Bluetooth: hci2: command 0x041b tx timeout [ 638.674403][ T8587] option 1-1:0.162: GSM modem (1-port) converter detected [ 638.764077][ T3643] team0 (unregistering): Port device team_slave_0 removed [ 639.079833][ T8728] FAULT_INJECTION: forcing a failure. [ 639.079833][ T8728] name failslab, interval 1, probability 0, space 0, times 0 [ 639.079866][ T8728] CPU: 1 UID: 0 PID: 8728 Comm: syz.4.562 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 639.079886][ T8728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 639.079896][ T8728] Call Trace: [ 639.079903][ T8728] [ 639.079911][ T8728] dump_stack_lvl+0x189/0x250 [ 639.079941][ T8728] ? __pfx____ratelimit+0x10/0x10 [ 639.079966][ T8728] ? __pfx_dump_stack_lvl+0x10/0x10 [ 639.079990][ T8728] ? __pfx__printk+0x10/0x10 [ 639.080016][ T8728] ? __pfx___might_resched+0x10/0x10 [ 639.080033][ T8728] ? fs_reclaim_acquire+0x7d/0x100 [ 639.080055][ T8728] should_fail_ex+0x46c/0x600 [ 639.080085][ T8728] should_failslab+0xa8/0x100 [ 639.080110][ T8728] __kmalloc_cache_noprof+0x6e/0x320 [ 639.080132][ T8728] ? virtio_transport_do_socket_init+0x57/0x310 [ 639.080160][ T8728] virtio_transport_do_socket_init+0x57/0x310 [ 639.080185][ T8728] vsock_assign_transport+0x5ab/0x770 [ 639.080215][ T8728] vsock_connect+0x5ab/0xe20 [ 639.080250][ T8728] ? __might_fault+0xb0/0x130 [ 639.080274][ T8728] ? __pfx_vsock_connect+0x10/0x10 [ 639.080301][ T8728] ? __pfx_autoremove_wake_function+0x10/0x10 [ 639.080332][ T8728] ? bpf_lsm_socket_connect+0x9/0x20 [ 639.080354][ T8728] __sys_connect+0x320/0x450 [ 639.080385][ T8728] ? __pfx___sys_connect+0x10/0x10 [ 639.080422][ T8728] ? __pfx_ksys_write+0x10/0x10 [ 639.080441][ T8728] ? rcu_is_watching+0x15/0xb0 [ 639.080475][ T8728] __x64_sys_connect+0x7a/0x90 [ 639.080499][ T8728] do_syscall_64+0xfa/0x3b0 [ 639.080515][ T8728] ? lockdep_hardirqs_on+0x9c/0x150 [ 639.080538][ T8728] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.080556][ T8728] ? clear_bhb_loop+0x60/0xb0 [ 639.080584][ T8728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.080601][ T8728] RIP: 0033:0x7fa1864aeba9 [ 639.080617][ T8728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 639.080631][ T8728] RSP: 002b:00007fa18470e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 639.080650][ T8728] RAX: ffffffffffffffda RBX: 00007fa1866f5fa0 RCX: 00007fa1864aeba9 [ 639.080664][ T8728] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000007 [ 639.080675][ T8728] RBP: 00007fa18470e090 R08: 0000000000000000 R09: 0000000000000000 [ 639.080685][ T8728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 639.080696][ T8728] R13: 00007fa1866f6038 R14: 00007fa1866f5fa0 R15: 00007ffef12d8628 [ 639.080726][ T8728] [ 640.063572][ T8709] netlink: 156 bytes leftover after parsing attributes in process `syz.0.560'. [ 640.212067][ T6011] usb 1-1: USB disconnect, device number 5 [ 640.482661][ T9] usb 2-1: USB disconnect, device number 9 [ 640.523642][ T6011] option 1-1:0.162: device disconnected [ 640.652750][ T59] Bluetooth: hci2: command 0x041b tx timeout [ 640.939612][ T8748] FAULT_INJECTION: forcing a failure. [ 640.939612][ T8748] name failslab, interval 1, probability 0, space 0, times 0 [ 640.939675][ T8748] CPU: 0 UID: 0 PID: 8748 Comm: syz.4.568 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 640.939697][ T8748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 640.939708][ T8748] Call Trace: [ 640.939715][ T8748] [ 640.939723][ T8748] dump_stack_lvl+0x189/0x250 [ 640.939752][ T8748] ? __pfx____ratelimit+0x10/0x10 [ 640.939778][ T8748] ? __pfx_dump_stack_lvl+0x10/0x10 [ 640.939803][ T8748] ? __pfx__printk+0x10/0x10 [ 640.939828][ T8748] ? __pfx___might_resched+0x10/0x10 [ 640.939846][ T8748] ? fs_reclaim_acquire+0x7d/0x100 [ 640.939867][ T8748] should_fail_ex+0x46c/0x600 [ 640.939897][ T8748] should_failslab+0xa8/0x100 [ 640.939922][ T8748] __kmalloc_cache_node_noprof+0x78/0x340 [ 640.939946][ T8748] ? __get_vm_area_node+0x172/0x350 [ 640.939968][ T8748] ? __pfx___schedule+0x10/0x10 [ 640.940001][ T8748] __get_vm_area_node+0x172/0x350 [ 640.940030][ T8748] __vmalloc_node_range_noprof+0x301/0x12f0 [ 640.940054][ T8748] ? bpf_prog_alloc_no_stats+0x4a/0x510 [ 640.940078][ T8748] ? rcu_is_watching+0x15/0xb0 [ 640.940100][ T8748] ? trace_irq_disable+0x37/0x110 [ 640.940124][ T8748] ? lockdep_hardirqs_on+0x9c/0x150 [ 640.940146][ T8748] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 640.940162][ T8748] ? bpf_prog_alloc_no_stats+0x4a/0x510 [ 640.940186][ T8748] ? bpf_prog_alloc_no_stats+0x4a/0x510 [ 640.940201][ T8748] __vmalloc_noprof+0xb1/0xf0 [ 640.940218][ T8748] ? bpf_prog_alloc_no_stats+0x4a/0x510 [ 640.940236][ T8748] bpf_prog_alloc_no_stats+0x4a/0x510 [ 640.940256][ T8748] bpf_prog_alloc+0x3c/0x1a0 [ 640.940273][ T8748] bpf_prog_load+0x735/0x1930 [ 640.940298][ T8748] ? __pfx_bpf_prog_load+0x10/0x10 [ 640.940330][ T8748] ? bpf_lsm_bpf+0x9/0x20 [ 640.940343][ T8748] ? security_bpf+0x7e/0x300 [ 640.940362][ T8748] __sys_bpf+0x528/0x870 [ 640.940379][ T8748] ? __pfx___sys_bpf+0x10/0x10 [ 640.940392][ T8748] ? preempt_schedule_irq+0xde/0x150 [ 640.940431][ T8748] __x64_sys_bpf+0x7c/0x90 [ 640.940446][ T8748] do_syscall_64+0xfa/0x3b0 [ 640.940459][ T8748] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.940472][ T8748] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 640.940484][ T8748] ? clear_bhb_loop+0x60/0xb0 [ 640.940500][ T8748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.940512][ T8748] RIP: 0033:0x7fa1864aeba9 [ 640.940525][ T8748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 640.940535][ T8748] RSP: 002b:00007fa1846cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 640.940550][ T8748] RAX: ffffffffffffffda RBX: 00007fa1866f6180 RCX: 00007fa1864aeba9 [ 640.940559][ T8748] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 640.940568][ T8748] RBP: 00007fa1846cc090 R08: 0000000000000000 R09: 0000000000000000 [ 640.940576][ T8748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 640.940584][ T8748] R13: 00007fa1866f6218 R14: 00007fa1866f6180 R15: 00007ffef12d8628 [ 640.940605][ T8748] [ 640.940891][ T8748] syz.4.568: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 640.944665][ T8748] CPU: 0 UID: 0 PID: 8748 Comm: syz.4.568 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 640.944687][ T8748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 640.944698][ T8748] Call Trace: [ 640.944706][ T8748] [ 640.944714][ T8748] dump_stack_lvl+0x189/0x250 [ 640.944741][ T8748] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 640.944765][ T8748] ? __pfx_dump_stack_lvl+0x10/0x10 [ 640.944790][ T8748] ? __pfx__printk+0x10/0x10 [ 640.944810][ T8748] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 640.944829][ T8748] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 640.944856][ T8748] warn_alloc+0x22e/0x3b0 [ 640.944882][ T8748] ? should_fail_ex+0x344/0x600 [ 640.944911][ T8748] ? __pfx_warn_alloc+0x10/0x10 [ 640.944938][ T8748] ? __get_vm_area_node+0x172/0x350 [ 640.944966][ T8748] ? __get_vm_area_node+0x2e2/0x350 [ 640.944997][ T8748] __vmalloc_node_range_noprof+0x326/0x12f0 [ 640.945023][ T8748] ? rcu_is_watching+0x15/0xb0 [ 640.945048][ T8748] ? trace_irq_disable+0x37/0x110 [ 640.945080][ T8748] ? lockdep_hardirqs_on+0x9c/0x150 [ 640.945109][ T8748] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 640.945128][ T8748] ? bpf_prog_alloc_no_stats+0x4a/0x510 [ 640.945152][ T8748] ? bpf_prog_alloc_no_stats+0x4a/0x510 [ 640.945166][ T8748] __vmalloc_noprof+0xb1/0xf0 [ 640.945184][ T8748] ? bpf_prog_alloc_no_stats+0x4a/0x510 [ 640.945202][ T8748] bpf_prog_alloc_no_stats+0x4a/0x510 [ 640.945221][ T8748] bpf_prog_alloc+0x3c/0x1a0 [ 640.945239][ T8748] bpf_prog_load+0x735/0x1930 [ 640.945264][ T8748] ? __pfx_bpf_prog_load+0x10/0x10 [ 640.945295][ T8748] ? bpf_lsm_bpf+0x9/0x20 [ 640.945310][ T8748] ? security_bpf+0x7e/0x300 [ 640.945328][ T8748] __sys_bpf+0x528/0x870 [ 640.945345][ T8748] ? __pfx___sys_bpf+0x10/0x10 [ 640.945358][ T8748] ? preempt_schedule_irq+0xde/0x150 [ 640.945396][ T8748] __x64_sys_bpf+0x7c/0x90 [ 640.945412][ T8748] do_syscall_64+0xfa/0x3b0 [ 640.945426][ T8748] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.945438][ T8748] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 640.945451][ T8748] ? clear_bhb_loop+0x60/0xb0 [ 640.945467][ T8748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.945480][ T8748] RIP: 0033:0x7fa1864aeba9 [ 640.945492][ T8748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 640.945503][ T8748] RSP: 002b:00007fa1846cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 640.945516][ T8748] RAX: ffffffffffffffda RBX: 00007fa1866f6180 RCX: 00007fa1864aeba9 [ 640.945526][ T8748] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 640.945534][ T8748] RBP: 00007fa1846cc090 R08: 0000000000000000 R09: 0000000000000000 [ 640.945542][ T8748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 640.945550][ T8748] R13: 00007fa1866f6218 R14: 00007fa1866f6180 R15: 00007ffef12d8628 [ 640.945571][ T8748] [ 640.945639][ T8748] Mem-Info: [ 640.945704][ T8748] active_anon:299 inactive_anon:6567 isolated_anon:0 [ 640.945704][ T8748] active_file:5819 inactive_file:37606 isolated_file:0 [ 640.945704][ T8748] unevictable:779 dirty:144 writeback:0 [ 640.945704][ T8748] slab_reclaimable:11822 slab_unreclaimable:100507 [ 640.945704][ T8748] mapped:29941 shmem:1385 pagetables:1466 [ 640.945704][ T8748] sec_pagetables:0 bounce:0 [ 640.945704][ T8748] kernel_misc_reclaimable:0 [ 640.945704][ T8748] free:1337432 free_pcp:3829 free_cma:0 [ 640.945777][ T8748] Node 0 active_anon:1196kB inactive_anon:26268kB active_file:23080kB inactive_file:150424kB unevictable:1580kB isolated(anon):0kB isolated(file):0kB mapped:119764kB dirty:576kB writeback:0kB shmem:4004kB kernel_stack:13280kB pagetables:5692kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 640.945842][ T8748] Node 1 active_anon:0kB inactive_anon:0kB active_file:196kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:80kB pagetables:172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 640.945905][ T8748] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 640.946030][ T8748] lowmem_reserve[]: 0 2512 2513 2513 2513 [ 640.946224][ T8748] Node 0 DMA32 free:1432032kB boost:0kB min:3940kB low:6484kB high:9028kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1192kB inactive_anon:26220kB active_file:22072kB inactive_file:150352kB unevictable:1580kB writepending:576kB present:3129332kB managed:2572300kB mlocked:44kB bounce:0kB free_pcp:15284kB local_pcp:4116kB free_cma:0kB [ 640.946349][ T8748] lowmem_reserve[]: 0 0 1 1 1 [ 640.946402][ T8748] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:48kB active_file:1008kB inactive_file:72kB unevictable:0kB writepending:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 640.946449][ T8748] lowmem_reserve[]: 0 0 0 0 0 [ 640.946512][ T8748] Node 1 Normal free:3902336kB boost:0kB min:6364kB low:10472kB high:14580kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:196kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:0kB free_cma:0kB [ 640.946612][ T8748] lowmem_reserve[]: 0 0 0 0 0 [ 640.946810][ T8748] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 640.947341][ T8748] Node 0 DMA32: 442*4kB (UME) 263*8kB (UME) 382*16kB (UME) 530*32kB (UME) 238*64kB (UME) 66*128kB (UME) 154*256kB (UME) 59*512kB (UME) 15*1024kB (UME) 1*2048kB (E) 316*4096kB (UM) = 1432000kB [ 640.947887][ T8748] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 640.948321][ T8748] Node 1 Normal: 228*4kB (UME) 56*8kB (UME) 39*16kB (UME) 212*32kB (UME) 78*64kB (UME) 32*128kB (UME) 14*256kB (UM) 6*512kB (UME) 5*1024kB (UME) 1*2048kB (U) 945*4096kB (ME) = 3902400kB [ 640.948827][ T8748] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 640.948865][ T8748] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 640.948903][ T8748] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 640.948941][ T8748] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 640.948978][ T8748] 44806 total pagecache pages [ 640.949035][ T8748] 0 pages in swap cache [ 640.949064][ T8748] Free swap = 124996kB [ 640.949093][ T8748] Total swap = 124996kB [ 640.949124][ T8748] 2097051 pages RAM [ 640.949153][ T8748] 0 pages HighMem/MovableOnly [ 640.949182][ T8748] 422078 pages reserved [ 640.949211][ T8748] 0 pages cma reserved [ 641.799821][ T6011] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 641.913073][ T8762] ntfs3(nullb0): Primary boot signature is not NTFS. [ 641.916731][ T8762] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 641.955170][ T6011] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 641.955199][ T6011] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.051626][ T6011] usb 1-1: config 0 descriptor?? [ 642.739182][ T8765] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 643.354962][ T59] Bluetooth: hci2: command 0x041b tx timeout [ 645.025623][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 645.026042][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 645.026453][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 645.026846][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 645.027245][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 645.027641][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 645.028059][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 645.028498][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 645.028935][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 645.029334][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 645.449144][ T8668] chnl_net:caif_netlink_parms(): no params data found [ 645.508894][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 645.508910][ T37] audit: type=1326 audit(1757732323.931:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8784 comm="syz.4.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1864aeba9 code=0x7ffc0000 [ 645.508952][ T37] audit: type=1326 audit(1757732323.931:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8784 comm="syz.4.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1864aeba9 code=0x7ffc0000 [ 645.511018][ T37] audit: type=1326 audit(1757732323.931:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8784 comm="syz.4.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa1864ad510 code=0x7ffc0000 [ 645.613918][ T37] audit: type=1326 audit(1757732323.931:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8784 comm="syz.4.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa1864ad65f code=0x7ffc0000 [ 645.665380][ T8789] FAULT_INJECTION: forcing a failure. [ 645.665380][ T8789] name failslab, interval 1, probability 0, space 0, times 0 [ 645.665415][ T8789] CPU: 1 UID: 0 PID: 8789 Comm: syz.4.575 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 645.665436][ T8789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 645.665447][ T8789] Call Trace: [ 645.665453][ T8789] [ 645.665461][ T8789] dump_stack_lvl+0x189/0x250 [ 645.665491][ T8789] ? __pfx____ratelimit+0x10/0x10 [ 645.665516][ T8789] ? __pfx_dump_stack_lvl+0x10/0x10 [ 645.665539][ T8789] ? __pfx__printk+0x10/0x10 [ 645.665564][ T8789] ? __pfx___might_resched+0x10/0x10 [ 645.665582][ T8789] ? fs_reclaim_acquire+0x7d/0x100 [ 645.665602][ T8789] should_fail_ex+0x46c/0x600 [ 645.665631][ T8789] ? __alloc_skb+0x112/0x2d0 [ 645.665653][ T8789] should_failslab+0xa8/0x100 [ 645.665677][ T8789] ? __alloc_skb+0x112/0x2d0 [ 645.665698][ T8789] kmem_cache_alloc_node_noprof+0x77/0x330 [ 645.665721][ T8789] ? audit_log_start+0x126/0x850 [ 645.665743][ T8789] __alloc_skb+0x112/0x2d0 [ 645.665771][ T8789] audit_log_start+0x152/0x850 [ 645.665794][ T8789] ? __pfx_audit_log_start+0x10/0x10 [ 645.665838][ T8789] ? migrate_enable+0x29c/0x3c0 [ 645.665861][ T8789] ? __lock_acquire+0xab9/0xd20 [ 645.665884][ T8789] ? __pfx_migrate_enable+0x10/0x10 [ 645.665910][ T8789] audit_seccomp+0x64/0x190 [ 645.665940][ T8789] __seccomp_filter+0x9aa/0x1a40 [ 645.665981][ T8789] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 645.666008][ T8789] ? __pfx___seccomp_filter+0x10/0x10 [ 645.666032][ T8789] ? __pfx_vfs_write+0x10/0x10 [ 645.666051][ T8789] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 645.666074][ T8789] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 645.666094][ T8789] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 645.666138][ T8789] ? __secure_computing+0xe2/0x2a0 [ 645.666165][ T8789] syscall_trace_enter+0xaa/0x160 [ 645.666192][ T8789] do_syscall_64+0xd3/0x3b0 [ 645.666207][ T8789] ? lockdep_hardirqs_on+0x9c/0x150 [ 645.666230][ T8789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.666247][ T8789] ? clear_bhb_loop+0x60/0xb0 [ 645.666269][ T8789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.666286][ T8789] RIP: 0033:0x7fa1864aeba9 [ 645.666301][ T8789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 645.666315][ T8789] RSP: 002b:00007fa18470e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f3 [ 645.666334][ T8789] RAX: ffffffffffffffda RBX: 00007fa1866f5fa0 RCX: 00007fa1864aeba9 [ 645.666348][ T8789] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 645.666363][ T8789] RBP: 00007fa18470e090 R08: 0000000000000000 R09: 0000000000000000 [ 645.666373][ T8789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 645.666383][ T8789] R13: 00007fa1866f6038 R14: 00007fa1866f5fa0 R15: 00007ffef12d8628 [ 645.666411][ T8789] [ 645.666539][ T8789] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 645.666553][ T8789] audit: out of memory in audit_log_start [ 645.729322][ T6011] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 645.733307][ T37] audit: type=1326 audit(1757732324.091:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8784 comm="syz.4.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fa1864ad5bc code=0x7ffc0000 [ 645.733354][ T37] audit: type=1326 audit(1757732324.161:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8784 comm="syz.4.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa1864ad65f code=0x7ffc0000 [ 645.733392][ T37] audit: type=1326 audit(1757732324.161:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8784 comm="syz.4.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa1864ad80a code=0x7ffc0000 [ 645.733431][ T37] audit: type=1326 audit(1757732324.161:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8784 comm="syz.4.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1864aeba9 code=0x7ffc0000 [ 645.796186][ T6011] [drm:udl_init] *ERROR* Selecting channel failed [ 645.891050][ T6011] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 645.891073][ T6011] [drm] Initialized udl on minor 2 [ 646.927674][ T6011] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 646.930548][ T6011] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 648.057348][ T6011] usb 1-1: USB disconnect, device number 6 [ 648.121944][ T5913] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 649.284621][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 649.288065][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 649.289316][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 649.291504][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 649.292745][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 650.032527][ C0] net_ratelimit: 7583 callbacks suppressed [ 650.032548][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 650.032959][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 650.033368][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 650.033762][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 650.034181][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 650.034592][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 650.035021][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 650.035430][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 650.035829][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 650.036239][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 653.723867][ C0] sched: DL replenish lagged too much [ 653.903498][ T6202] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 654.061788][ T6202] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 654.061815][ T6202] usb 5-1: config 0 has no interface number 0 [ 654.080456][ T6202] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 654.080485][ T6202] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.080504][ T6202] usb 5-1: Product: syz [ 654.080517][ T6202] usb 5-1: Manufacturer: syz [ 654.080531][ T6202] usb 5-1: SerialNumber: syz [ 654.160149][ T6202] usb 5-1: config 0 descriptor?? [ 654.379635][ T6202] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 654.446879][ T6202] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 654.447720][ T6202] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 654.447801][ T6202] usb 5-1: media controller created [ 654.548558][ T6202] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 655.042669][ C0] net_ratelimit: 15412 callbacks suppressed [ 655.042689][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 655.043092][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 655.043481][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 655.043870][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 655.044319][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 655.044709][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 655.045127][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 655.045523][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 655.045913][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 655.046390][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 655.092504][ T6202] usb 5-1: USB disconnect, device number 5 [ 655.532558][ T59] Bluetooth: hci3: command tx timeout [ 657.612705][ T59] Bluetooth: hci3: command tx timeout [ 659.854419][ T59] Bluetooth: hci3: command tx timeout [ 660.052304][ C0] net_ratelimit: 20131 callbacks suppressed [ 660.052325][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 660.052611][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 660.052824][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 660.053042][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 660.053287][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 660.053496][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 660.053705][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 660.053918][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 660.054127][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 660.054358][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 661.945245][ T59] Bluetooth: hci3: command tx timeout [ 664.064131][ T8856] FAULT_INJECTION: forcing a failure. [ 664.064131][ T8856] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 664.064164][ T8856] CPU: 1 UID: 0 PID: 8856 Comm: syz.4.587 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 664.064185][ T8856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 664.064196][ T8856] Call Trace: [ 664.064203][ T8856] [ 664.064211][ T8856] dump_stack_lvl+0x189/0x250 [ 664.064240][ T8856] ? __pfx____ratelimit+0x10/0x10 [ 664.064265][ T8856] ? __pfx_dump_stack_lvl+0x10/0x10 [ 664.064289][ T8856] ? __pfx__printk+0x10/0x10 [ 664.064324][ T8856] should_fail_ex+0x46c/0x600 [ 664.064354][ T8856] _copy_to_user+0x31/0xb0 [ 664.064377][ T8856] simple_read_from_buffer+0xe1/0x170 [ 664.064406][ T8856] proc_fail_nth_read+0x1b6/0x220 [ 664.064427][ T8856] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 664.064449][ T8856] ? rw_verify_area+0x2ac/0x4e0 [ 664.064470][ T8856] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 664.064489][ T8856] vfs_read+0x206/0xa30 [ 664.064528][ T8856] ? __pfx_vfs_read+0x10/0x10 [ 664.064545][ T8856] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 664.064576][ T8856] ? mutex_lock_nested+0x154/0x1d0 [ 664.064595][ T8856] ? fdget_pos+0x253/0x320 [ 664.064628][ T8856] ksys_read+0x14b/0x260 [ 664.064651][ T8856] ? __pfx_ksys_read+0x10/0x10 [ 664.064678][ T8856] ? do_syscall_64+0xbe/0x3b0 [ 664.064698][ T8856] do_syscall_64+0xfa/0x3b0 [ 664.064713][ T8856] ? lockdep_hardirqs_on+0x9c/0x150 [ 664.064737][ T8856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.064755][ T8856] ? clear_bhb_loop+0x60/0xb0 [ 664.064776][ T8856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.064793][ T8856] RIP: 0033:0x7fa1864ad5bc [ 664.064809][ T8856] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 664.064822][ T8856] RSP: 002b:00007fa18470e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 664.064842][ T8856] RAX: ffffffffffffffda RBX: 00007fa1866f5fa0 RCX: 00007fa1864ad5bc [ 664.064855][ T8856] RDX: 000000000000000f RSI: 00007fa18470e0a0 RDI: 0000000000000003 [ 664.064866][ T8856] RBP: 00007fa18470e090 R08: 0000000000000000 R09: 0000000000000000 [ 664.064877][ T8856] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 664.064888][ T8856] R13: 00007fa1866f6038 R14: 00007fa1866f5fa0 R15: 00007ffef12d8628 [ 664.064918][ T8856] [ 664.574940][ T8858] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 664.898796][ T5851] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 664.924476][ T5851] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 664.925728][ T5851] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 664.927082][ T5851] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 664.931953][ T5851] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 665.062624][ C0] net_ratelimit: 16008 callbacks suppressed [ 665.062647][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 665.063040][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 665.063467][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 665.063846][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 665.064289][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 665.064673][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 665.065054][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 665.065449][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 665.065869][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 665.066296][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 667.052724][ T5851] Bluetooth: hci5: command tx timeout [ 668.373312][ T8862] FAULT_INJECTION: forcing a failure. [ 668.373312][ T8862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 668.373345][ T8862] CPU: 1 UID: 0 PID: 8862 Comm: syz.4.589 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 668.373366][ T8862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 668.373377][ T8862] Call Trace: [ 668.373384][ T8862] [ 668.373392][ T8862] dump_stack_lvl+0x189/0x250 [ 668.373422][ T8862] ? __pfx____ratelimit+0x10/0x10 [ 668.373448][ T8862] ? __pfx_dump_stack_lvl+0x10/0x10 [ 668.373472][ T8862] ? __pfx__printk+0x10/0x10 [ 668.373492][ T8862] ? __might_fault+0xb0/0x130 [ 668.373527][ T8862] should_fail_ex+0x46c/0x600 [ 668.373558][ T8862] _copy_from_user+0x2d/0xb0 [ 668.373580][ T8862] __sys_sendto+0x262/0x520 [ 668.373609][ T8862] ? __pfx___sys_sendto+0x10/0x10 [ 668.373658][ T8862] ? exc_page_fault+0x76/0xf0 [ 668.373686][ T8862] ? do_user_addr_fault+0xc8a/0x1390 [ 668.373713][ T8862] __x64_sys_sendto+0xde/0x100 [ 668.373741][ T8862] do_syscall_64+0xfa/0x3b0 [ 668.373756][ T8862] ? lockdep_hardirqs_on+0x9c/0x150 [ 668.373780][ T8862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.373797][ T8862] ? clear_bhb_loop+0x60/0xb0 [ 668.373818][ T8862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.373835][ T8862] RIP: 0033:0x7fa1864b0a3c [ 668.373851][ T8862] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 668.373865][ T8862] RSP: 002b:00007fa18470cec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 668.373886][ T8862] RAX: ffffffffffffffda RBX: 00007fa18470cfc0 RCX: 00007fa1864b0a3c [ 668.373900][ T8862] RDX: 0000000000000020 RSI: 00007fa18470d010 RDI: 0000000000000004 [ 668.373911][ T8862] RBP: 0000000000000000 R08: 00007fa18470cf14 R09: 000000000000000c [ 668.373923][ T8862] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 668.373934][ T8862] R13: 00007fa18470cf68 R14: 00007fa18470d010 R15: 0000000000000000 [ 668.373963][ T8862] [ 669.143245][ T5851] Bluetooth: hci5: command tx timeout [ 670.072641][ C0] net_ratelimit: 10893 callbacks suppressed [ 670.072670][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 670.073069][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 670.073453][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 670.073852][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 670.074229][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 670.074659][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 670.075081][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 670.075470][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 670.075879][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 670.076269][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 670.362681][ T45] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 670.544138][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 670.544170][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 670.544192][ T45] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 670.544246][ T45] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 670.544269][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.638789][ T45] usb 5-1: config 0 descriptor?? [ 671.212665][ T5851] Bluetooth: hci5: command tx timeout [ 671.261398][ T8871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.267945][ T8871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.345141][ T45] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 671.345180][ T45] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 671.345207][ T45] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 671.345233][ T45] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 671.345260][ T45] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 671.345287][ T45] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 671.345314][ T45] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 671.345341][ T45] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 671.345368][ T45] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 671.345395][ T45] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 671.605532][ T45] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 671.753224][ T45] usb 5-1: USB disconnect, device number 6 [ 672.021359][ T8876] fido_id[8876]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 673.822408][ T5851] Bluetooth: hci5: command tx timeout [ 675.082553][ C0] net_ratelimit: 11154 callbacks suppressed [ 675.082568][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 675.082783][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 675.083032][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 675.083251][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 675.083477][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 675.083686][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 675.083895][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 675.084103][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 675.084336][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 675.084561][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 680.092442][ C0] net_ratelimit: 22540 callbacks suppressed [ 680.092456][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 680.092668][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 680.092887][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 680.093139][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 680.093352][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 680.093561][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 680.093775][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 680.093987][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 680.094216][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 680.094440][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 685.102468][ C0] net_ratelimit: 22725 callbacks suppressed [ 685.102483][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 685.102697][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 685.102908][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 685.103133][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 685.103359][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vl[ 685.103359][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 685.103573][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 685.103782][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 685.104053][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 685.104817][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 685.105065][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 685.975856][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.975933][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.112323][ C0] net_ratelimit: 22828 callbacks suppressed [ 690.112346][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 690.112582][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 690.112802][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 690.113039][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 690.113251][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 690.113463][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 690.113692][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 690.113910][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 690.114178][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 690.114402][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 695.122351][ C0] net_ratelimit: 22538 callbacks suppressed [ 695.122373][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 695.122625][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 695.122839][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 695.123048][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 695.123277][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 695.123513][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 695.123738][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 695.123965][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 695.124181][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 695.124414][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 700.132452][ C0] net_ratelimit: 22609 callbacks suppressed [ 700.132467][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 700.132686][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 700.132925][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 700.133135][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 700.133362][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 700.133572][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 700.133788][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 700.133997][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 700.134222][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 700.134446][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 705.142520][ C0] net_ratelimit: 22680 callbacks suppressed [ 705.142540][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 705.142789][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 705.143016][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 705.143225][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 705.143441][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 705.143654][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 705.143867][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 705.144115][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 705.144333][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 705.144548][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 710.152506][ C0] net_ratelimit: 22723 callbacks suppressed [ 710.152525][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 710.152940][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 710.153366][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 710.153614][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 710.154037][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 710.154276][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 710.154491][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 710.154703][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 710.154951][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 710.155173][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 715.162359][ C0] net_ratelimit: 22561 callbacks suppressed [ 715.162380][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 715.163613][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 715.163850][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 715.164065][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 715.164275][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 715.164511][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 715.164725][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 715.164935][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 715.165144][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 715.165354][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 720.172430][ C0] net_ratelimit: 22915 callbacks suppressed [ 720.172445][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 720.172677][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 720.172899][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 720.173110][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 720.173335][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 720.173553][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 720.173786][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 720.174007][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 720.174217][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 720.174434][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 725.182516][ C0] net_ratelimit: 22895 callbacks suppressed [ 725.182531][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 725.182752][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 725.182984][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 725.183211][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 725.183421][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 725.183631][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 725.183847][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 725.184056][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 725.184295][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 725.184506][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 730.192496][ C0] net_ratelimit: 22549 callbacks suppressed [ 730.192510][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 730.192723][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 730.192963][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 730.193173][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 730.193406][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 730.193616][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 730.193825][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 730.194034][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 730.194265][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 730.194490][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 735.202562][ C0] net_ratelimit: 22505 callbacks suppressed [ 735.202577][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 735.202828][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 735.203058][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 735.203289][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 735.203571][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 735.203799][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 735.204082][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 735.204656][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 735.204884][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 735.205100][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 740.212443][ C0] net_ratelimit: 22703 callbacks suppressed [ 740.212460][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 740.212685][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 740.212907][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 740.213143][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 740.213356][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 740.213585][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 740.213799][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 740.214024][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 740.214253][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 740.214465][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 745.222369][ C0] net_ratelimit: 22569 callbacks suppressed [ 745.222385][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 745.222625][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 745.222837][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 745.223046][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 745.223256][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 745.223481][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 745.223696][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 745.223921][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 745.224131][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 745.224340][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 750.232321][ C0] net_ratelimit: 22648 callbacks suppressed [ 750.232341][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 750.232580][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 750.232799][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 750.233025][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 750.233242][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 750.233452][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 750.233661][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 750.233886][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 750.234123][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 750.234348][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 755.242435][ C0] net_ratelimit: 22578 callbacks suppressed [ 755.242452][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 755.242667][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 755.242902][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 755.243112][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 755.243321][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 755.243546][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 755.243773][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 755.244000][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 755.244210][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 755.244419][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 760.252445][ C0] net_ratelimit: 22694 callbacks suppressed [ 760.252459][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 760.252691][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 760.252918][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 760.253134][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 760.253356][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 760.253567][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 760.253776][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 760.254016][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 760.254232][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 760.254448][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 765.262414][ C0] net_ratelimit: 22748 callbacks suppressed [ 765.262428][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 765.262672][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 765.262883][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 765.263108][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 765.263658][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 765.263874][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 765.264099][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 765.264310][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 765.264519][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 765.264751][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 770.272446][ C0] net_ratelimit: 22691 callbacks suppressed [ 770.272461][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 770.272676][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 770.272902][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 770.273112][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 770.273345][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 770.273557][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 770.273767][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 770.273994][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 770.274227][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 770.274452][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 775.282507][ C0] net_ratelimit: 22671 callbacks suppressed [ 775.282531][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 775.282758][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 775.282975][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 775.283187][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 775.283416][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 775.283633][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 775.283861][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 775.284072][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 775.284283][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 775.284494][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 777.932294][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 777.932313][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8891/1:b..l [ 777.932339][ C0] rcu: (detected by 0, t=10502 jiffies, g=22193, q=509 ncpus=2) [ 777.932350][ C0] task:syz.4.596 state:R running task stack:27912 pid:8891 tgid:8889 ppid:5839 task_flags:0x400040 flags:0x00004006 [ 777.932381][ C0] Call Trace: [ 777.932384][ C0] [ 777.932392][ C0] __schedule+0x16f3/0x4c20 [ 777.932423][ C0] ? __pfx___schedule+0x10/0x10 [ 777.932443][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 777.932456][ C0] preempt_schedule_irq+0xb5/0x150 [ 777.932468][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 777.932484][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 777.932499][ C0] irqentry_exit+0x6f/0x90 [ 777.932510][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 777.932521][ C0] RIP: 0010:lock_acquire+0x175/0x360 [ 777.932534][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 1b 2c 5a 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 777.932542][ C0] RSP: 0018:ffffc900040d7478 EFLAGS: 00000206 [ 777.932550][ C0] RAX: 8ca86e2ab97c2a00 RBX: 0000000000000000 RCX: 8ca86e2ab97c2a00 [ 777.932556][ C0] RDX: 0000000000000000 RSI: ffffffff8d21a92c RDI: ffffffff8b621500 [ 777.932563][ C0] RBP: ffffffff8172c165 R08: 0000000000000000 R09: ffffffff8172c165 [ 777.932571][ C0] R10: ffffc900040d7638 R11: ffffffff81aaf310 R12: 0000000000000002 [ 777.932580][ C0] R13: ffffffff8d9a8d80 R14: 0000000000000000 R15: 0000000000000246 [ 777.932588][ C0] ? unwind_next_frame+0xa5/0x2390 [ 777.932600][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 777.932610][ C0] ? unwind_next_frame+0xa5/0x2390 [ 777.932629][ C0] ? unwind_next_frame+0xa5/0x2390 [ 777.932640][ C0] ? do_syscall_64+0xfa/0x3b0 [ 777.932649][ C0] ? unwind_next_frame+0xa5/0x2390 [ 777.932659][ C0] unwind_next_frame+0xc2/0x2390 [ 777.932670][ C0] ? unwind_next_frame+0xa5/0x2390 [ 777.932683][ C0] ? unwind_next_frame+0xa5/0x2390 [ 777.932694][ C0] ? __se_sys_ioctl+0x47/0x170 [ 777.932707][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 777.932716][ C0] arch_stack_walk+0x11c/0x150 [ 777.932732][ C0] ? do_syscall_64+0xfa/0x3b0 [ 777.932742][ C0] stack_trace_save+0x9c/0xe0 [ 777.932751][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 777.932766][ C0] save_stack+0xf7/0x1f0 [ 777.932778][ C0] ? __pfx_save_stack+0x10/0x10 [ 777.932787][ C0] ? __free_frozen_pages+0xb59/0xce0 [ 777.932799][ C0] ? __slab_free+0x2db/0x390 [ 777.932807][ C0] ? qlist_free_all+0x97/0x140 [ 777.932815][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 777.932824][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 777.932834][ C0] ? __kmalloc_noprof+0x1a5/0x430 [ 777.932844][ C0] ? tomoyo_encode+0x28b/0x550 [ 777.932856][ C0] ? tomoyo_realpath_from_path+0x58d/0x5d0 [ 777.932866][ C0] ? tomoyo_path_number_perm+0x1e8/0x5a0 [ 777.932875][ C0] ? security_file_ioctl+0xcb/0x2d0 [ 777.932885][ C0] ? __se_sys_ioctl+0x47/0x170 [ 777.932892][ C0] ? do_syscall_64+0xfa/0x3b0 [ 777.932903][ C0] ? page_ext_put+0x97/0xc0 [ 777.932917][ C0] __reset_page_owner+0x71/0x1f0 [ 777.932928][ C0] __free_frozen_pages+0xb59/0xce0 [ 777.932945][ C0] ? __pfx___free_frozen_pages+0x10/0x10 [ 777.932958][ C0] ? mod_node_state+0xea/0x160 [ 777.932972][ C0] __slab_free+0x2db/0x390 [ 777.932988][ C0] ? qlist_free_all+0x8c/0x140 [ 777.933002][ C0] qlist_free_all+0x97/0x140 [ 777.933013][ C0] kasan_quarantine_reduce+0x148/0x160 [ 777.933024][ C0] __kasan_slab_alloc+0x22/0x80 [ 777.933035][ C0] __kmalloc_noprof+0x1a5/0x430 [ 777.933046][ C0] ? tomoyo_encode+0x28b/0x550 [ 777.933059][ C0] tomoyo_encode+0x28b/0x550 [ 777.933073][ C0] tomoyo_realpath_from_path+0x58d/0x5d0 [ 777.933086][ C0] ? tomoyo_domain+0xda/0x130 [ 777.933100][ C0] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 777.933110][ C0] tomoyo_path_number_perm+0x1e8/0x5a0 [ 777.933122][ C0] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 777.933140][ C0] ? __lock_acquire+0xab9/0xd20 [ 777.933161][ C0] ? __fget_files+0x2a/0x420 [ 777.933195][ C0] ? __fget_files+0x2a/0x420 [ 777.933206][ C0] ? __fget_files+0x3a6/0x420 [ 777.933216][ C0] ? __fget_files+0x2a/0x420 [ 777.933229][ C0] security_file_ioctl+0xcb/0x2d0 [ 777.933241][ C0] __se_sys_ioctl+0x47/0x170 [ 777.933252][ C0] do_syscall_64+0xfa/0x3b0 [ 777.933261][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.933269][ C0] ? __switch_to_asm+0x39/0x70 [ 777.933277][ C0] ? clear_bhb_loop+0x60/0xb0 [ 777.933289][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.933297][ C0] RIP: 0033:0x7fa1864ae7ab [ 777.933305][ C0] RSP: 002b:00007fa18470e050 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 777.933314][ C0] RAX: ffffffffffffffda RBX: 00007fa1866f6038 RCX: 00007fa1864ae7ab [ 777.933325][ C0] RDX: 0000000000000000 RSI: 0000000000006364 RDI: 00000000000000d8 [ 777.933331][ C0] RBP: 0000000000000000 R08: 00007ffef12d8627 R09: 0000000000000000 [ 777.933336][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 777.933341][ C0] R13: 00007fa1866f6038 R14: 00007ffef12d8540 R15: 00007ffef12d8628 [ 777.933356][ C0] [ 777.933364][ C0] rcu: rcu_preempt kthread starved for 8786 jiffies! g22193 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 777.933375][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 777.933379][ C0] rcu: RCU grace-period kthread stack dump: [ 777.933383][ C0] task:rcu_preempt state:R running task stack:27224 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00004000 [ 777.933409][ C0] Call Trace: [ 777.933413][ C0] [ 777.933418][ C0] __schedule+0x16f3/0x4c20 [ 777.933442][ C0] ? __pfx___schedule+0x10/0x10 [ 777.933460][ C0] ? schedule+0x91/0x360 [ 777.933473][ C0] schedule+0x165/0x360 [ 777.933485][ C0] schedule_timeout+0x12b/0x270 [ 777.933496][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 777.933506][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 777.933518][ C0] ? __pfx_process_timeout+0x10/0x10 [ 777.933531][ C0] ? prepare_to_swait_event+0x341/0x380 [ 777.933544][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 777.933568][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 777.933579][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 777.933593][ C0] ? finish_swait+0xcd/0x1f0 [ 777.933604][ C0] rcu_gp_kthread+0x99/0x390 [ 777.933617][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 777.933628][ C0] ? __kthread_parkme+0x7b/0x200 [ 777.933639][ C0] ? __kthread_parkme+0x1a1/0x200 [ 777.933653][ C0] kthread+0x70e/0x8a0 [ 777.933666][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 777.933677][ C0] ? __pfx_kthread+0x10/0x10 [ 777.933691][ C0] ? __pfx_kthread+0x10/0x10 [ 777.933702][ C0] ret_from_fork+0x439/0x7d0 [ 777.933715][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 777.933730][ C0] ? __switch_to_asm+0x39/0x70 [ 777.933739][ C0] ? __switch_to_asm+0x33/0x70 [ 777.933747][ C0] ? __pfx_kthread+0x10/0x10 [ 777.933758][ C0] ret_from_fork_asm+0x1a/0x30 [ 777.933778][ C0] [ 777.933781][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 777.933791][ C0] Sending NMI from CPU 0 to CPUs 1: [ 777.933827][ C1] NMI backtrace for cpu 1 [ 777.933843][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 777.933860][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 777.933869][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 777.933890][ C1] Code: 13 b3 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 56 11 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 777.933903][ C1] RSP: 0018:ffffc900001d7de0 EFLAGS: 000002c6 [ 777.933916][ C1] RAX: 96a836950d837400 RBX: ffffffff81955f48 RCX: 96a836950d837400 [ 777.933928][ C1] RDX: 0000000000000001 RSI: ffffffff8d03a8d9 RDI: ffffffff8b621500 [ 777.933945][ C1] RBP: ffffc900001d7f20 R08: ffff8880b893341b R09: 1ffff11017126683 [ 777.933957][ C1] R10: dffffc0000000000 R11: ffffed1017126684 R12: ffffffff8f1d5f30 [ 777.933968][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110038d2b28 [ 777.933979][ C1] FS: 0000000000000000(0000) GS:ffff8881269bd000(0000) knlGS:0000000000000000 [ 777.933992][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 777.934003][ C1] CR2: 0000200000002000 CR3: 00000000625e2000 CR4: 00000000003526f0 [ 777.934017][ C1] Call Trace: [ 777.934023][ C1] [ 777.934035][ C1] default_idle+0x13/0x20 [ 777.934050][ C1] default_idle_call+0x74/0xb0 [ 777.934065][ C1] do_idle+0x1e8/0x510 [ 777.934083][ C1] ? __pfx_do_idle+0x10/0x10 [ 777.934095][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 777.934122][ C1] cpu_startup_entry+0x44/0x60 [ 777.934137][ C1] start_secondary+0x101/0x110 [ 777.934153][ C1] common_startup_64+0x13e/0x147 [ 777.934176][ C1] [ 780.292463][ C0] net_ratelimit: 22693 callbacks suppressed [ 780.292478][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 780.292723][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 780.292934][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 780.293171][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 780.293380][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 780.293589][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 780.293798][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 780.294043][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 780.294259][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 780.294468][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 785.302410][ C0] net_ratelimit: 22947 callbacks suppressed [ 785.302426][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 785.303607][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 785.303841][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 785.304054][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 785.304278][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 785.304487][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 785.304704][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 785.304914][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 785.305126][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 785.305336][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 787.305653][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 787.305729][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 790.312479][ C0] net_ratelimit: 22165 callbacks suppressed [ 790.312494][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 790.313192][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 790.313419][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 790.313641][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 790.313867][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 790.314077][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 790.314294][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 790.314524][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 790.314733][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 790.314942][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 795.322499][ C0] net_ratelimit: 21910 callbacks suppressed [ 795.322514][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 795.322729][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 795.322962][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 795.323172][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 795.323381][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 795.323589][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 795.323820][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 795.324030][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 795.324254][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 795.324463][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 800.332298][ C0] net_ratelimit: 22424 callbacks suppressed [ 800.332319][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 800.332575][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 800.332786][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 800.332996][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 800.333205][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 800.333423][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 800.333647][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 800.333879][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 800.334089][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 800.334305][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 805.342459][ C0] net_ratelimit: 22661 callbacks suppressed [ 805.342474][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 805.342686][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 805.342912][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 805.343130][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 805.343355][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 805.343564][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 805.343773][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 805.343982][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 805.344212][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 805.344436][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 810.352418][ C0] net_ratelimit: 22551 callbacks suppressed [ 810.352433][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 810.352658][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 810.352869][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 810.353095][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 810.353305][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 810.353534][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 810.353746][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 810.353954][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 810.354621][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 810.354850][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 815.362514][ C0] net_ratelimit: 22945 callbacks suppressed [ 815.362529][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 815.362742][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 815.362958][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 815.363184][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 815.363408][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 815.363618][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 815.363832][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 815.364042][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 815.364250][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 815.364474][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 820.372437][ C0] net_ratelimit: 22892 callbacks suppressed [ 820.372455][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 820.372676][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 820.372887][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 820.373097][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 820.373345][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 820.374035][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 820.374248][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 820.374463][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 820.374686][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 820.374912][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 824.143408][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 824.143485][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 825.382474][ C0] net_ratelimit: 22821 callbacks suppressed [ 825.382490][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 825.382705][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 825.382922][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 825.383165][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 825.383376][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 825.383586][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 825.383795][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 825.384012][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 825.384238][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 825.384464][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 830.148073][ T38] INFO: task kworker/u8:16:4604 blocked for more than 142 seconds. [ 830.148099][ T38] Not tainted syzkaller #0 [ 830.148119][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 830.148140][ T38] task:kworker/u8:16 state:D stack:19720 pid:4604 tgid:4604 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 830.148187][ T38] Workqueue: events_unbound linkwatch_event [ 830.148235][ T38] Call Trace: [ 830.148243][ T38] [ 830.148255][ T38] __schedule+0x16f3/0x4c20 [ 830.148309][ T38] ? __pfx___schedule+0x10/0x10 [ 830.148353][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 830.148382][ T38] rt_mutex_schedule+0x77/0xf0 [ 830.148401][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 830.148422][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 830.148461][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 830.148485][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 830.148507][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 830.148539][ T38] ? linkwatch_event+0xe/0x60 [ 830.148572][ T38] ? linkwatch_event+0xe/0x60 [ 830.148588][ T38] mutex_lock_nested+0x16a/0x1d0 [ 830.148608][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 830.148633][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 830.148665][ T38] linkwatch_event+0xe/0x60 [ 830.148682][ T38] process_scheduled_works+0xade/0x17b0 [ 830.148735][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 830.148776][ T38] worker_thread+0x8a0/0xda0 [ 830.148802][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 830.148836][ T38] ? __kthread_parkme+0x7b/0x200 [ 830.148870][ T38] kthread+0x70e/0x8a0 [ 830.148900][ T38] ? __pfx_worker_thread+0x10/0x10 [ 830.148921][ T38] ? __pfx_kthread+0x10/0x10 [ 830.148952][ T38] ? __pfx_kthread+0x10/0x10 [ 830.148978][ T38] ret_from_fork+0x439/0x7d0 [ 830.149005][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 830.149036][ T38] ? __switch_to_asm+0x39/0x70 [ 830.149053][ T38] ? __switch_to_asm+0x33/0x70 [ 830.149069][ T38] ? __pfx_kthread+0x10/0x10 [ 830.149095][ T38] ret_from_fork_asm+0x1a/0x30 [ 830.149129][ T38] [ 830.149143][ T38] INFO: task dhcpcd:5504 blocked for more than 142 seconds. [ 830.149160][ T38] Not tainted syzkaller #0 [ 830.149170][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 830.149179][ T38] task:dhcpcd state:D stack:19656 pid:5504 tgid:5504 ppid:5503 task_flags:0x400140 flags:0x00004002 [ 830.149220][ T38] Call Trace: [ 830.149226][ T38] [ 830.149237][ T38] __schedule+0x16f3/0x4c20 [ 830.149289][ T38] ? __pfx___schedule+0x10/0x10 [ 830.149317][ T38] ? preempt_schedule+0xae/0xc0 [ 830.149352][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 830.149377][ T38] rt_mutex_schedule+0x77/0xf0 [ 830.149395][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 830.149416][ T38] ? task_blocks_on_rt_mutex+0x78c/0x1380 [ 830.149455][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 830.149478][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 830.149501][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 830.149532][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 830.149563][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 830.149598][ T38] ? inet_rtm_newroute+0x109/0x210 [ 830.149618][ T38] mutex_lock_nested+0x16a/0x1d0 [ 830.149638][ T38] ? inet_rtm_newroute+0x109/0x210 [ 830.149670][ T38] inet_rtm_newroute+0x109/0x210 [ 830.149691][ T38] ? __lock_acquire+0xab9/0xd20 [ 830.149716][ T38] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 830.149759][ T38] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 830.149780][ T38] rtnetlink_rcv_msg+0x7cc/0xb70 [ 830.149803][ T38] ? __lock_acquire+0xab9/0xd20 [ 830.149832][ T38] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 830.149855][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 830.149896][ T38] netlink_rcv_skb+0x208/0x470 [ 830.149919][ T38] ? __lock_acquire+0xab9/0xd20 [ 830.149942][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 830.149967][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 830.150004][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 830.150036][ T38] netlink_unicast+0x846/0xa10 [ 830.150069][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 830.150093][ T38] ? netlink_sendmsg+0x642/0xb30 [ 830.150115][ T38] ? skb_put+0x11b/0x210 [ 830.150144][ T38] netlink_sendmsg+0x805/0xb30 [ 830.150168][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 830.150197][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 830.150224][ T38] ? __lock_acquire+0xab9/0xd20 [ 830.150249][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 830.150271][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 830.150296][ T38] __sock_sendmsg+0x21c/0x270 [ 830.150323][ T38] ____sys_sendmsg+0x508/0x820 [ 830.150347][ T38] ? __pfx_____sys_sendmsg+0x10/0x10 [ 830.150377][ T38] ? import_iovec+0x74/0xa0 [ 830.150402][ T38] ___sys_sendmsg+0x21f/0x2a0 [ 830.150423][ T38] ? __pfx____sys_sendmsg+0x10/0x10 [ 830.150497][ T38] __x64_sys_sendmsg+0x1a1/0x260 [ 830.150519][ T38] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 830.150557][ T38] ? do_syscall_64+0xbe/0x3b0 [ 830.150579][ T38] do_syscall_64+0xfa/0x3b0 [ 830.150598][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.150615][ T38] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 830.150634][ T38] ? clear_bhb_loop+0x60/0xb0 [ 830.150666][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.150686][ T38] RIP: 0033:0x7fd074ae2407 [ 830.150706][ T38] RSP: 002b:00007ffc9a856540 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 830.150725][ T38] RAX: ffffffffffffffda RBX: 00007fd074a58740 RCX: 00007fd074ae2407 [ 830.150739][ T38] RDX: 0000000000000000 RSI: 00007ffc9a86a720 RDI: 0000000000000004 [ 830.150752][ T38] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 830.150762][ T38] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffc9a87a950 [ 830.150775][ T38] R13: 00007fd074a586c8 R14: 000000000000003c R15: 00007ffc9a86a720 [ 830.150806][ T38] [ 830.150855][ T38] INFO: task syz-executor:8668 blocked for more than 142 seconds. [ 830.150868][ T38] Not tainted syzkaller #0 [ 830.150877][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 830.150886][ T38] task:syz-executor state:D stack:22632 pid:8668 tgid:8668 ppid:8641 task_flags:0x400140 flags:0x00004000 [ 830.150929][ T38] Call Trace: [ 830.150934][ T38] [ 830.150946][ T38] __schedule+0x16f3/0x4c20 [ 830.150991][ T38] ? __kernel_text_address+0xd/0x40 [ 830.151014][ T38] ? __pfx___schedule+0x10/0x10 [ 830.151057][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 830.151085][ T38] rt_mutex_schedule+0x77/0xf0 [ 830.151103][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 830.151124][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 830.151164][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 830.151188][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 830.151210][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 830.151229][ T38] ? __lock_acquire+0xab9/0xd20 [ 830.151264][ T38] ? rtnl_newlink+0x8db/0x1c70 [ 830.151289][ T38] ? safesetid_security_capable+0xa9/0x1a0 [ 830.151313][ T38] ? bpf_lsm_capable+0x9/0x20 [ 830.151334][ T38] ? security_capable+0x7e/0x2e0 [ 830.151363][ T38] ? rtnl_newlink+0x8db/0x1c70 [ 830.151383][ T38] mutex_lock_nested+0x16a/0x1d0 [ 830.151409][ T38] rtnl_newlink+0x8db/0x1c70 [ 830.151430][ T38] ? rcu_is_watching+0x15/0xb0 [ 830.151469][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 830.151493][ T38] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 830.151514][ T38] ? irqentry_exit+0x74/0x90 [ 830.151545][ T38] ? __lock_acquire+0xab9/0xd20 [ 830.151636][ T38] ? __lock_acquire+0xab9/0xd20 [ 830.151692][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 830.151715][ T38] rtnetlink_rcv_msg+0x7cc/0xb70 [ 830.151737][ T38] ? __lock_acquire+0xab9/0xd20 [ 830.151762][ T38] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 830.151785][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 830.151826][ T38] netlink_rcv_skb+0x208/0x470 [ 830.151847][ T38] ? __lock_acquire+0xab9/0xd20 [ 830.151870][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 830.151895][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 830.151932][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 830.151964][ T38] netlink_unicast+0x846/0xa10 [ 830.151995][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 830.152018][ T38] ? netlink_sendmsg+0x6a2/0xb30 [ 830.152049][ T38] netlink_sendmsg+0x805/0xb30 [ 830.152083][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 830.152116][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 830.152134][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 830.152159][ T38] __sock_sendmsg+0x21c/0x270 [ 830.152184][ T38] __sys_sendto+0x3c7/0x520 [ 830.152212][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 830.392431][ C0] net_ratelimit: 22656 callbacks suppressed [ 830.392451][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 830.392709][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 830.392970][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 830.393190][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 830.393406][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 830.393616][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 830.393833][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 830.394048][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 830.394303][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 830.394514][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 835.062452][ T38] __x64_sys_sendto+0xde/0x100 [ 835.062500][ T38] do_syscall_64+0xfa/0x3b0 [ 835.062520][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.062540][ T38] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 835.062558][ T38] ? clear_bhb_loop+0x60/0xb0 [ 835.062580][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.062599][ T38] RIP: 0033:0x7fd7db3e0a3c [ 835.062615][ T38] RSP: 002b:00007ffc717fc190 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 835.062637][ T38] RAX: ffffffffffffffda RBX: 00007fd7dc154620 RCX: 00007fd7db3e0a3c [ 835.062651][ T38] RDX: 000000000000006c RSI: 00007fd7dc154670 RDI: 0000000000000003 [ 835.062663][ T38] RBP: 0000000000000000 R08: 00007ffc717fc1e4 R09: 000000000000000c [ 835.062676][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 835.062687][ T38] R13: 0000000000000000 R14: 00007fd7dc154670 R15: 0000000000000000 [ 835.062717][ T38] [ 835.062733][ T38] INFO: task syz.1.580:8806 blocked for more than 147 seconds. [ 835.062747][ T38] Not tainted syzkaller #0 [ 835.062757][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 835.062766][ T38] task:syz.1.580 state:D stack:20792 pid:8806 tgid:8803 ppid:5838 task_flags:0x400140 flags:0x00004006 [ 835.062808][ T38] Call Trace: [ 835.062815][ T38] [ 835.062827][ T38] __schedule+0x16f3/0x4c20 [ 835.062877][ T38] ? __pfx___schedule+0x10/0x10 [ 835.062920][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 835.062948][ T38] rt_mutex_schedule+0x77/0xf0 [ 835.062966][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 835.062987][ T38] ? task_blocks_on_rt_mutex+0x78c/0x1380 [ 835.063026][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 835.063051][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 835.063073][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 835.063106][ T38] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 835.063135][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 835.063166][ T38] ? mpls_net_exit+0x79/0x270 [ 835.063182][ T38] mutex_lock_nested+0x16a/0x1d0 [ 835.063203][ T38] ? mpls_net_exit+0x79/0x270 [ 835.063245][ T38] mpls_net_exit+0x79/0x270 [ 835.063267][ T38] ops_undo_list+0x49a/0x990 [ 835.063299][ T38] ? __pfx_ops_undo_list+0x10/0x10 [ 835.063320][ T38] ? ops_init+0x469/0x5c0 [ 835.063354][ T38] setup_net+0x2d3/0x320 [ 835.063380][ T38] ? __pfx_setup_net+0x10/0x10 [ 835.063414][ T38] copy_net_ns+0x31b/0x4d0 [ 835.063442][ T38] create_new_namespaces+0x3f3/0x720 [ 835.063469][ T38] ? security_capable+0x7e/0x2e0 [ 835.063498][ T38] ? copy_namespaces+0x5c/0x4b0 [ 835.063519][ T38] copy_namespaces+0x438/0x4b0 [ 835.063542][ T38] ? copy_process+0x979/0x3ae0 [ 835.063565][ T38] copy_process+0x1731/0x3ae0 [ 835.063601][ T38] ? copy_process+0x979/0x3ae0 [ 835.063637][ T38] ? __pfx_copy_process+0x10/0x10 [ 835.063665][ T38] ? _copy_from_user+0x94/0xb0 [ 835.063694][ T38] kernel_clone+0x224/0x7c0 [ 835.063723][ T38] ? __pfx_kernel_clone+0x10/0x10 [ 835.063744][ T38] ? futex_wake+0x4b5/0x560 [ 835.063788][ T38] __se_sys_clone3+0x256/0x2d0 [ 835.063817][ T38] ? __pfx___se_sys_clone3+0x10/0x10 [ 835.063839][ T38] ? do_futex+0x395/0x420 [ 835.063894][ T38] ? rcu_is_watching+0x15/0xb0 [ 835.063925][ T38] ? do_syscall_64+0xbe/0x3b0 [ 835.063947][ T38] do_syscall_64+0xfa/0x3b0 [ 835.063963][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 835.063986][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.064004][ T38] ? clear_bhb_loop+0x60/0xb0 [ 835.064027][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.064044][ T38] RIP: 0033:0x7f1d86cdeba9 [ 835.064060][ T38] RSP: 002b:00007f1d84f45f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 835.064078][ T38] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f1d86cdeba9 [ 835.064091][ T38] RDX: 00007f1d84f45f20 RSI: 0000000000000058 RDI: 00007f1d84f45f20 [ 835.064105][ T38] RBP: 00007f1d86d61e19 R08: 0000000000000000 R09: 0000000000000058 [ 835.064117][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 835.064129][ T38] R13: 00007f1d86f26038 R14: 00007f1d86f25fa0 R15: 00007ffcfed31d88 [ 835.064160][ T38] [ 835.064171][ T38] INFO: task syz-executor:8859 blocked for more than 147 seconds. [ 835.064184][ T38] Not tainted syzkaller #0 [ 835.064193][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 835.064202][ T38] task:syz-executor state:D stack:24856 pid:8859 tgid:8859 ppid:8852 task_flags:0x400140 flags:0x00004000 [ 835.064256][ T38] Call Trace: [ 835.064262][ T38] [ 835.064273][ T38] __schedule+0x16f3/0x4c20 [ 835.064319][ T38] ? __kernel_text_address+0xd/0x40 [ 835.064343][ T38] ? __pfx___schedule+0x10/0x10 [ 835.064386][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 835.064414][ T38] rt_mutex_schedule+0x77/0xf0 [ 835.064432][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 835.064453][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 835.064492][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 835.064516][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 835.064538][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 835.064557][ T38] ? __lock_acquire+0xab9/0xd20 [ 835.064593][ T38] ? rtnl_newlink+0x8db/0x1c70 [ 835.064617][ T38] ? safesetid_security_capable+0xa9/0x1a0 [ 835.064641][ T38] ? bpf_lsm_capable+0x9/0x20 [ 835.064661][ T38] ? security_capable+0x7e/0x2e0 [ 835.064686][ T38] ? rtnl_newlink+0x8db/0x1c70 [ 835.064706][ T38] mutex_lock_nested+0x16a/0x1d0 [ 835.064732][ T38] rtnl_newlink+0x8db/0x1c70 [ 835.064770][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 835.064800][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 835.064834][ T38] ? __lock_acquire+0xab9/0xd20 [ 835.064870][ T38] ? __lock_acquire+0xab9/0xd20 [ 835.064911][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 835.064938][ T38] ? is_bpf_text_address+0x292/0x2b0 [ 835.064959][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 835.064989][ T38] ? __lock_acquire+0xab9/0xd20 [ 835.065036][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 835.065057][ T38] rtnetlink_rcv_msg+0x7cc/0xb70 [ 835.065080][ T38] ? __lock_acquire+0xab9/0xd20 [ 835.065103][ T38] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 835.065126][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 835.065168][ T38] netlink_rcv_skb+0x208/0x470 [ 835.065190][ T38] ? __lock_acquire+0xab9/0xd20 [ 835.065219][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 835.065243][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 835.065279][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 835.065311][ T38] netlink_unicast+0x846/0xa10 [ 835.065342][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 835.065366][ T38] ? netlink_sendmsg+0x642/0xb30 [ 835.065388][ T38] ? skb_put+0x11b/0x210 [ 835.065418][ T38] netlink_sendmsg+0x805/0xb30 [ 835.065452][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 835.065485][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 835.065504][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 835.065529][ T38] __sock_sendmsg+0x21c/0x270 [ 835.065555][ T38] __sys_sendto+0x3c7/0x520 [ 835.065583][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 835.065621][ T38] ? fput_close_sync+0x119/0x200 [ 835.065659][ T38] ? rcu_is_watching+0x15/0xb0 [ 835.065691][ T38] __x64_sys_sendto+0xde/0x100 [ 835.065720][ T38] do_syscall_64+0xfa/0x3b0 [ 835.065736][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 835.065760][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.065778][ T38] ? clear_bhb_loop+0x60/0xb0 [ 835.065800][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.065819][ T38] RIP: 0033:0x7f591b060a3c [ 835.065834][ T38] RSP: 002b:00007fff6bda93c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 835.065853][ T38] RAX: ffffffffffffffda RBX: 00007f591bdd4620 RCX: 00007f591b060a3c [ 835.065867][ T38] RDX: 000000000000002c RSI: 00007f591bdd4670 RDI: 0000000000000003 [ 835.065880][ T38] RBP: 0000000000000000 R08: 00007fff6bda9414 R09: 000000000000000c [ 835.065892][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 835.065903][ T38] R13: 0000000000000000 R14: 00007f591bdd4670 R15: 0000000000000000 [ 835.065933][ T38] [ 835.065956][ T38] [ 835.065956][ T38] Showing all locks held in the system: [ 835.065964][ T38] 1 lock held by kthreadd/2: [ 835.065976][ T38] 4 locks held by kworker/u8:0/12: [ 835.065988][ T38] 4 locks held by kworker/u8:1/13: [ 835.065998][ T38] 7 locks held by ktimers/0/16: [ 835.066009][ T38] 4 locks held by pr/legacy/17: [ 835.066022][ T38] 1 lock held by khungtaskd/38: [ 835.066032][ T38] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 835.066077][ T38] 4 locks held by kworker/1:1/45: [ 835.066088][ T38] 3 locks held by kworker/u8:3/57: [ 835.066098][ T38] 4 locks held by kworker/u9:0/59: [ 835.066106][ T38] #0: ffff888033e30938 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 835.066150][ T38] #1: ffffc9000125fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 835.066196][ T38] #2: ffff888060090e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 835.066245][ T38] #3: ffff8880600900a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 835.066295][ T38] 3 locks held by kworker/u8:4/67: [ 835.066325][ T38] 5 locks held by kworker/u8:8/1301: [ 835.066349][ T38] 2 locks held by kworker/u8:9/3558: [ 835.066360][ T38] 3 locks held by kworker/u8:10/3572: [ 835.066370][ T38] 2 locks held by kworker/u8:11/3594: [ 835.066381][ T38] 5 locks held by kworker/u8:12/3622: [ 835.066392][ T38] 3 locks held by kworker/u8:14/3643: [ 835.066402][ T38] #0: ffff88801a6f4138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 835.066448][ T38] #1: ffffc9000d427bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 835.066494][ T38] #2: ffffffff8ecc6600 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 835.066541][ T38] 3 locks held by kworker/u8:15/3655: [ 835.066552][ T38] #0: ffff88802fd7e938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 835.066599][ T38] #1: ffffc9000e387bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 835.066645][ T38] #2: ffffffff8ecd34f8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 835.066691][ T38] 3 locks held by kworker/u8:16/4604: [ 835.066702][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 835.066747][ T38] #1: ffffc9000fa67bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 835.066793][ T38] #2: ffffffff8ecd34f8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 835.066836][ T38] 1 lock held by klogd/5198: [ 835.066847][ T38] 4 locks held by udevd/5209: [ 835.066858][ T38] 1 lock held by dhcpcd/5504: [ 835.066868][ T38] #0: ffffffff8ecd34f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newroute+0x109/0x210 [ 835.066915][ T38] 2 locks held by getty/5597: [ 835.066924][ T38] #0: ffff88823bf3e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 835.066975][ T38] #1: ffffc90003e7e2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 835.067022][ T38] 3 locks held by syz-executor/5828: [ 835.067034][ T38] 6 locks held by kworker/u9:4/5851: [ 835.067044][ T38] #0: ffff888038cac138 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 835.067090][ T38] #1: ffffc90004c6fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 835.067135][ T38] #2: ffff88805c930e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 835.067177][ T38] #3: ffff88805c9300a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 835.067230][ T38] #4: ffffffff8ee3afd8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 835.067280][ T38] #5: ffff888030ac5358 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 835.067333][ T38] 2 locks held by syz-executor/5856: [ 835.067343][ T38] #0: ffffffff8dac55a8 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 835.067387][ T38] #1: ffff8880b89458b8 ((&c->lock)){+.+.}-{3:3}, at: put_cpu_partial+0x3d/0x100 [ 835.067434][ T38] 3 locks held by kworker/1:9/6202: [ 835.067445][ T38] 2 locks held by kworker/u8:17/6397: [ 835.067455][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 835.067502][ T38] #1: ffffc90009087bc0 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 835.067549][ T38] 3 locks held by kworker/u8:18/7993: [ 835.067562][ T38] 2 locks held by syz-executor/8668: [ 835.067573][ T38] #0: ffffffff8e43b720 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 835.067625][ T38] #1: ffffffff8ecd34f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 835.067672][ T38] 2 locks held by syz.1.580/8806: [ 835.067682][ T38] #0: ffffffff8ecc6600 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 835.067749][ T38] #1: ffffffff8ecd34f8 (rtnl_mutex){+.+.}-{4:4}, at: mpls_net_exit+0x79/0x270 [ 835.067792][ T38] 4 locks held by syz-executor/8813: [ 835.067804][ T38] 1 lock held by syz-executor/8859: [ 835.067814][ T38] #0: ffffffff8ecd34f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 835.067861][ T38] 2 locks held by udevd/8875: [ 835.067871][ T38] 2 locks held by udevd/8878: [ 835.067881][ T38] 3 locks held by syz.0.595/8888: [ 835.067891][ T38] 1 lock held by syz.0.595/8890: [ 835.067901][ T38] #0: ffff88803be5f2d0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 [ 835.067942][ T38] 1 lock held by syz.0.595/8892: [ 835.067952][ T38] 3 locks held by syz.4.596/8891: [ 835.067963][ T38] [ 835.067967][ T38] ============================================= [ 835.067967][ T38] [ 835.067977][ T38] NMI backtrace for cpu 1 [ 835.067994][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 835.068043][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 835.068069][ T38] Call Trace: [ 835.068084][ T38] [ 835.068097][ T38] dump_stack_lvl+0x189/0x250 [ 835.068125][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 835.068150][ T38] ? __pfx__printk+0x10/0x10 [ 835.068181][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 835.068206][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 835.068237][ T38] ? __pfx__printk+0x10/0x10 [ 835.068260][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 835.068284][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 835.068308][ T38] watchdog+0xf93/0xfe0 [ 835.068336][ T38] ? watchdog+0x1de/0xfe0 [ 835.068363][ T38] kthread+0x70e/0x8a0 [ 835.068391][ T38] ? __pfx_watchdog+0x10/0x10 [ 835.068412][ T38] ? __pfx_kthread+0x10/0x10 [ 835.068441][ T38] ? __pfx_kthread+0x10/0x10 [ 835.068466][ T38] ret_from_fork+0x439/0x7d0 [ 835.068496][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 835.068524][ T38] ? __switch_to_asm+0x39/0x70 [ 835.068539][ T38] ? __switch_to_asm+0x33/0x70 [ 835.068555][ T38] ? __pfx_kthread+0x10/0x10 [ 835.068581][ T38] ret_from_fork_asm+0x1a/0x30 [ 835.068613][ T38] [ 835.068620][ T38] Sending NMI from CPU 1 to CPUs 0: [ 835.068646][ C0] NMI backtrace for cpu 0 [ 835.068664][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 835.068696][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 835.068705][ C0] RIP: 0010:lock_release+0x295/0x3e0 [ 835.068725][ C0] Code: 5c 24 08 48 c7 c7 2c a9 21 8d e8 06 e6 5a 09 b8 ff ff ff ff 65 0f c1 05 69 5a 5a 10 83 f8 01 75 51 48 c7 44 24 20 00 00 00 00 <9c> 8f 44 24 20 f7 44 24 20 00 02 00 00 75 56 f7 c3 00 02 00 00 74 [ 835.068738][ C0] RSP: 0018:ffffc90000157278 EFLAGS: 00000046 [ 835.068751][ C0] RAX: 0000000000000001 RBX: 0000000000000206 RCX: 9e30a216c4977300 [ 835.068763][ C0] RDX: 0000000000000005 RSI: ffffffff8d21a92c RDI: ffffffff8b621500 [ 835.068774][ C0] RBP: ffff88801ae86528 R08: 0000000000000000 R09: 0000000000000100 [ 835.068784][ C0] R10: 0000000000000100 R11: 0000000000000003 R12: 0000000000000005 [ 835.068794][ C0] R13: 0000000000000005 R14: ffffffff8d9a8d80 R15: ffff88801ae85940 [ 835.068805][ C0] FS: 0000000000000000(0000) GS:ffff8881268bd000(0000) knlGS:0000000000000000 [ 835.068818][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 835.068828][ C0] CR2: 0000200000001000 CR3: 00000000625e2000 CR4: 00000000003526f0 [ 835.068843][ C0] Call Trace: [ 835.068849][ C0] [ 835.068856][ C0] ? br_nf_pre_routing_ipv6+0x42f/0x6b0 [ 835.068873][ C0] ? br_nf_pre_routing_ipv6+0x42f/0x6b0 [ 835.068888][ C0] br_nf_pre_routing_ipv6+0x65e/0x6b0 [ 835.068905][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 835.068922][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 835.068936][ C0] ? br_nf_pre_routing+0x720/0x1470 [ 835.068966][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 835.068985][ C0] br_handle_frame+0x982/0x14d0 [ 835.069004][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 835.069016][ C0] ? try_to_take_rt_mutex+0x840/0xb00 [ 835.069035][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 835.069059][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 835.069074][ C0] __netif_receive_skb_core+0x10b6/0x4020 [ 835.069091][ C0] ? __lock_acquire+0xab9/0xd20 [ 835.069113][ C0] ? do_raw_spin_lock+0x121/0x290 [ 835.069133][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 835.069153][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 835.069171][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 835.069191][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 835.069213][ C0] ? __lock_acquire+0xab9/0xd20 [ 835.069236][ C0] ? process_backlog+0x27b/0x900 [ 835.069255][ C0] ? process_backlog+0x27b/0x900 [ 835.069271][ C0] __netif_receive_skb+0x72/0x380 [ 835.069288][ C0] ? rt_spin_unlock+0x65/0x80 [ 835.069306][ C0] ? process_backlog+0x27b/0x900 [ 835.069323][ C0] process_backlog+0x31e/0x900 [ 835.069346][ C0] __napi_poll+0xb3/0x540 [ 835.069365][ C0] net_rx_action+0x707/0xe00 [ 835.069391][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 835.069411][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 835.069434][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 835.069455][ C0] handle_softirqs+0x22f/0x710 [ 835.069477][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 835.069499][ C0] run_ktimerd+0xcf/0x190 [ 835.069517][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 835.069534][ C0] ? schedule+0x91/0x360 [ 835.069555][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 835.069571][ C0] smpboot_thread_fn+0x53f/0xa60 [ 835.069589][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 835.069609][ C0] kthread+0x70e/0x8a0 [ 835.069630][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 835.069647][ C0] ? __pfx_kthread+0x10/0x10 [ 835.069668][ C0] ? __pfx_kthread+0x10/0x10 [ 835.069688][ C0] ret_from_fork+0x439/0x7d0 [ 835.069707][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 835.069727][ C0] ? __switch_to_asm+0x39/0x70 [ 835.069740][ C0] ? __switch_to_asm+0x33/0x70 [ 835.069753][ C0] ? __pfx_kthread+0x10/0x10 [ 835.069772][ C0] ret_from_fork_asm+0x1a/0x30 [ 835.069793][ C0] [ 835.070653][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 835.070668][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 835.070689][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 835.070699][ T38] Call Trace: [ 835.070706][ T38] [ 835.070713][ T38] dump_stack_lvl+0x99/0x250 [ 835.070739][ T38] ? __asan_memcpy+0x40/0x70 [ 835.070758][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 835.070783][ T38] ? __pfx__printk+0x10/0x10 [ 835.070813][ T38] vpanic+0x281/0x750 [ 835.070841][ T38] ? __pfx_vpanic+0x10/0x10 [ 835.070862][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 835.070881][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 835.070915][ T38] panic+0xb9/0xc0 [ 835.070938][ T38] ? __pfx_panic+0x10/0x10 [ 835.070964][ T38] ? irq_work_queue+0xc3/0x140 [ 835.070990][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 835.071014][ T38] watchdog+0xfd2/0xfe0 [ 835.071040][ T38] ? watchdog+0x1de/0xfe0 [ 835.071068][ T38] kthread+0x70e/0x8a0 [ 835.071095][ T38] ? __pfx_watchdog+0x10/0x10 [ 835.071116][ T38] ? __pfx_kthread+0x10/0x10 [ 835.071146][ T38] ? __pfx_kthread+0x10/0x10 [ 835.071171][ T38] ret_from_fork+0x439/0x7d0 [ 835.071196][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 835.071230][ T38] ? __switch_to_asm+0x39/0x70 [ 835.071246][ T38] ? __switch_to_asm+0x33/0x70 [ 835.071262][ T38] ? __pfx_kthread+0x10/0x10 [ 835.071287][ T38] ret_from_fork_asm+0x1a/0x30 [ 835.071319][ T38] [ 835.071474][ T38] Kernel Offset: disabled