last executing test programs: 6m28.829922232s ago: executing program 4 (id=256): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x7800, 0x8000, 0x80000001, 0x5, {{0x5, 0x4, 0x3, 0x0, 0x14, 0x64, 0x0, 0x4, 0x29, 0x0, @empty, @loopback}}}}) socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x3a) mount$tmpfs(0x0, 0x0, 0x0, 0x2b00b8, &(0x7f00000002c0)={[{@huge_never}]}) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f00000002c0)='cache=none') setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0xa, 0x4) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'geneve0\x00'}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f00000034c0)={0x2020}, 0xcac) 6m28.511300717s ago: executing program 4 (id=257): r0 = syz_clone(0x8080a000, &(0x7f0000000000)="5a5b3bb4d5f6bd875584ab0eb12001162ea3883ddada9768433b38aecbf9977e455b3e00de2ef440c3cfb93172dfa27e5d343ca9f96f27836f2674bc31ba3a5862d43ab1a4146af29c8684e72cb8c36d643e3e1e13a4f4f212bf85a5d6c4df1368939f6b411d8aceccef225bb3b00b22ff20362082951153a65e5852dfce86ebc92e55700c9cac44f4d051c57c8e6f0bcb1cf6262ca641815c5b8ee891719efb8406acfb348051f34f72a35e3d9cc032e577329255183c3a1c7da4c550759cc67995645b6b96023cef46c1e5f20e0ede78ae209b71316934808d9328acf119ee7502983f8edb", 0xe6, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="639e6b12904f2ea9446cd100905199171c8034e0ea15b6e46ed3492e59032acc17bd37e95bdf9addeb8bbe33f00f78119668f33ef6577128cfa408c98445c061a8c92f7182f8ab8bcb6a938c5c842bc51c9d") (async, rerun: 64) r1 = memfd_secret(0x80000) (rerun: 64) listen(r1, 0x8) r2 = shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x1000) shmdt(r2) (async) userfaultfd(0x80001) (async, rerun: 64) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000200)={0x0, 'veth0\x00', {0x1}, 0x4c2}) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000002c0)={0xfffffffb, 0x0, &(0x7f0000000280)=[r1, r1, 0xffffffffffffffff, r3]}, 0x4) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f00000006c0)={0x0, 0x1, 0x0, &(0x7f0000000300)=[{0x80000000}], 0x6, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000640)=[{}], 0x1, 0x0, &(0x7f0000000680)=[{}]}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f0000000bc0)={0x0, 0x2, 0x0, &(0x7f0000000740)=[{}, {}], 0x5, 0x0, &(0x7f0000000800)=[{}, {}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000a40)=[{0x0, 0x80000000, 0x0, {0x0}}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000b00)=[{}, {}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000d00)={0x80000000, &(0x7f0000000c40)=[{}, {0x80000000}], &(0x7f0000000c80)=[{{}, {0x80000000}}]}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000001240)={0x0, 0x3, 0x0, &(0x7f0000000d40)=[{}, {}, {0x80000000}], 0x6, 0x0, &(0x7f0000000e80)=[{}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000001140)=[{}, {0x0, 0x80000000, 0x0, {0x0}}, {}], 0x2, 0x0, &(0x7f00000011c0)=[{}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f00000012c0)={{r4, r5, 0x0, [0x5, 0x5]}, {r6, r9, 0x5, [0xfff, 0x6]}, 0x0, [0x1000]}) r10 = syz_open_dev$radio(&(0x7f0000001300), 0x1, 0x2) ioctl$VIDIOC_S_SELECTION(r10, 0xc040565f, &(0x7f0000001340)={0xc, 0x100, 0x3, {0x4, 0x3, 0x8479, 0xf}}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000001440)={r8, &(0x7f0000001380), &(0x7f00000013c0)}) (async) sched_setscheduler(r0, 0x5, &(0x7f0000001480)=0x5) (async, rerun: 32) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f0000001500)={0x0, 0x8, '\x00', 0x0, &(0x7f00000014c0)=[0x0]}) (rerun: 32) r11 = socket(0x18, 0x5, 0xf) setsockopt$inet6_int(r1, 0x29, 0xa, &(0x7f0000001540)=0xe9, 0x4) r12 = shmget(0x2, 0x2000, 0x4, &(0x7f0000ffd000/0x2000)=nil) shmat(r12, &(0x7f0000ffc000/0x1000)=nil, 0x5c808afe5e52ede6) (async) bind$llc(r11, &(0x7f0000001580)={0x1a, 0x10, 0xff, 0x6, 0x5, 0xba, @random="9b241bed8faf"}, 0x10) (async, rerun: 32) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000015c0)="34733ed3ff5b640018b012a7333ba033870fcd60daf3faf53919b9a1c2e3bd100d9f72d2af05cc9f1bafbdfa1bfc5afe4498a6728d7c326097403ad5c377f8b5917b4e2c5c3fda7c08dd3e1ae842dc9a0f08e41180140b58ad8f9e23ca7d2d42cd2285f104c81df6900c820075b1a6b576b31d1ca3a2c39343a93b6cb23b71a35567492e94af2a5431", 0x89) (async, rerun: 32) openat$binderfs(0xffffffffffffff9c, &(0x7f0000001680)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000001780)={r7, &(0x7f00000016c0), &(0x7f0000001700)}) shmctl$IPC_INFO(r12, 0x3, &(0x7f00000017c0)=""/3) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000018c0)=@urb_type_bulk={0x3, {0x0, 0x1}, 0x1, 0x7, &(0x7f0000001800)="e3247c385a83a6bf6447c1647a7948dea3ecc5472d96551b1cb8c39295a4bb5cf92224eb1d5956753536", 0x2a, 0x8, 0x3, 0x1, 0x2, 0x3, &(0x7f0000001840)="50a4c65158cf96057f46ded649e4c274bf13beec75514ab64ca42b4f5aaec2db9880924b36eb2267630c30f2974a3c2d5498959dbf1b7c259261348862cb4df4f26f342edce81f99215463ca48a491bdb1e6e9e7dcbbbb"}) 6m27.801256175s ago: executing program 4 (id=260): syz_usb_connect(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x63, 0x82, 0x1e, 0x20, 0xccd, 0x10b6, 0xf6e3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x87, 0x70, 0x7, [{{0x9, 0x4, 0xef, 0x1, 0x2, 0x74, 0xc0, 0xda, 0xb5, [], [{{0x9, 0x5, 0xe81eb71784d4b393, 0x2, 0x400, 0x9, 0x5, 0x2e}}, {{0x9, 0x5, 0x4, 0x2, 0x3ff, 0x7, 0x9, 0x5}}]}}]}}]}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x101, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3, 0x4}, 0x20) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, 0x0, &(0x7f0000000040)) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2, &(0x7f0000000500)=[&(0x7f0000454000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil], 0x0, &(0x7f0000000000), 0x2) r2 = userfaultfd(0x801) r3 = syz_open_dev$swradio(&(0x7f0000000380), 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f0000000000)={0xf0f040, 0x8}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x48c}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) 6m21.853828338s ago: executing program 4 (id=272): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000000c0)={0x2c, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x8, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e22}, 0x6e) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 6m18.152953157s ago: executing program 4 (id=280): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x7800, 0x8000, 0x80000001, 0x5, {{0x5, 0x4, 0x3, 0x0, 0x14, 0x64, 0x0, 0x4, 0x29, 0x0, @empty, @loopback}}}}) r0 = socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x3a) mount$tmpfs(0x0, 0x0, 0x0, 0x2b00b8, &(0x7f00000002c0)={[{@huge_never}]}) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f00000002c0)='cache=none') setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0xa, 0x4) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'geneve0\x00'}) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0xcac) 6m16.729460693s ago: executing program 4 (id=285): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r2], 0x3c}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) epoll_create(0x5) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x7, 0x5, 0x77}, {@private=0xa010101, 0x4e23, 0x1, 0xcd, 0x12d5f, 0x3}}, 0x44) 6m1.433022665s ago: executing program 32 (id=285): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r2], 0x3c}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) epoll_create(0x5) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x7, 0x5, 0x77}, {@private=0xa010101, 0x4e23, 0x1, 0xcd, 0x12d5f, 0x3}}, 0x44) 5m29.787430229s ago: executing program 5 (id=320): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x141000, 0x57) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x1e, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000098000000000000000100", @ANYBLOB="0000000000000000b702000014000000b7030400000000008500000083000000bf09000000000000550901000000000095000000000000008520000002000000d72b10000000000095000000000000001811", @ANYRES32=r3], &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x2, 0x9, 0x5, 0xb}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000380)=[{0x0, 0x2, 0x10, 0x1}, {0x4, 0x5, 0x4, 0x4}, {0x2, 0x5, 0xd}, {0x5, 0x4, 0x1, 0x8}, {0x4, 0x4, 0x2, 0xc}], 0x10, 0x3ff, @void, @value}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5m29.068367462s ago: executing program 5 (id=402): socket$inet6(0xa, 0x80002, 0x0) (async) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @local}, 0x1c) (async) sendto$inet6(r0, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @local}, 0x1c) sendto$inet6(r0, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x4a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000600)="b9ff03076844268cb89e14f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) dup(r6) (async) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}}) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x4, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0xfffffffe}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x4, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0xfffffffe}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) 5m13.034772415s ago: executing program 33 (id=402): socket$inet6(0xa, 0x80002, 0x0) (async) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @local}, 0x1c) (async) sendto$inet6(r0, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @local}, 0x1c) sendto$inet6(r0, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x4a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000600)="b9ff03076844268cb89e14f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) dup(r6) (async) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}}) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x4, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0xfffffffe}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x4, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0xfffffffe}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) 3m4.123825852s ago: executing program 6 (id=742): socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x10, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000084) (async) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00'}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r3, 0x6, 0x1f, &(0x7f00000002c0)="dbec83c9", 0x4) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x10, &(0x7f0000000000)=0x8c, 0x4) (async) syz_usb_connect$cdc_ecm(0x0, 0x61, &(0x7f0000000200)=ANY=[@ANYRESHEX=r3], 0x0) 3m3.456713531s ago: executing program 6 (id=744): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000400)={0x2, 0x0, {0x0, 0xfffffffffffffe8f, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000002080)={0x2, 0x0, {&(0x7f0000000340)=""/154, 0x9a, 0x0, 0x0, 0x2}}, 0x48) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x7, 0x200000084}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x12}, 0x20048004) connect$unix(r3, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000700)={'bond0\x00'}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x59b83, 0x0) r7 = dup(r6) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000006, 0x80010, r3, 0xffe000) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x8, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x9d, &(0x7f0000000480)=""/157, 0x41100, 0x8c, '\x00', 0x0, @cgroup_skb, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) write$P9_RGETLOCK(r7, &(0x7f0000000000)=ANY=[], 0x20) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000013b80)=ANY=[@ANYBLOB="280000001b14010000000000000000000800030001fc0000080001000000000008003f"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r7, 0x0, 0x17, &(0x7f0000000040), &(0x7f00000010c0)=0x4) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000800), 0x8000, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x43403d0e, &(0x7f00000002c0)=""/101) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) 3m1.99330864s ago: executing program 6 (id=747): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000380)='rxrpc\x00', 0x0, &(0x7f00000003c0)="0100000000", 0x5, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="00042bbd7000ffa600000b00000008000300", @ANYRES32=0x0, @ANYBLOB="fd52e27286211383498da961a0f5e08561875f75f52946914129304489414294f8b2f61f95ac000b58f52f3515ed7bbd89dcb3e204745c023b8cea9eb6f0f2d0e4a26009b60202c59fc1410444d70238f63332b0199f2e8394ed28d40ce2b6d423aadc4eba41cbaaaedb548796392e0b07d019373f39f143f374353a"], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='ns\x00') r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r8 = syz_open_dev$MSR(&(0x7f0000000200), 0x8, 0x0) read$msr(r8, &(0x7f0000002700)=""/102392, 0x18ff8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r7, 0x0, 0x0) r11 = openat$cgroup_subtree(r10, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r11, &(0x7f0000000280)=ANY=[@ANYBLOB="2b72646d6120accf1dbe7909239f8eb702133329b4239b6c52836d6a0434b2c9d7a6a3d2f93e0e737163ea1b0951b7c06ae8638e16c47f3fa9721aa2e0eeff16a1eb014e4c3cca9c4154fcb56b3b1362c9ff60b349b145c44957f6f75698"], 0x6) socket$inet6(0xa, 0x800000000000002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34000000140009050000000000000000020100fe", @ANYRES32=r5, @ANYBLOB="08000400000000001400060002f7ff000700004c8a9874caa100ffffff7f05000000"], 0x34}}, 0x80) 3m1.228820898s ago: executing program 6 (id=752): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='attr/prev\x00') mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x100010, r1, 0xf06d2000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) preadv2(r6, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0xc4, 0x0, 0x0, 0x9) r8 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000180)={0x24, 0x1, 0x2, "810000000001005c15000000000000f85946eda7796caf19e300000400", 0x32525942}) 2m58.97400724s ago: executing program 6 (id=755): socket$inet6_mptcp(0xa, 0x1, 0x106) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x103002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = syz_io_uring_setup(0x4075, &(0x7f000001ab40)={0x0, 0x0, 0x10100, 0x280, 0xfffffffd}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='tmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x21, &(0x7f00000002c0)={[{@quota}]}) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_LINKAT={0x27, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c, 0x400, 0xa87b6ecabf3deedd, {0x0, r8}}) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x7, 0x0, 0x0, 0x0, 0x1, {0x0, r8}}) io_uring_enter(r2, 0x3516, 0x0, 0x4, 0x0, 0x0) 2m56.508483638s ago: executing program 6 (id=759): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x2, &(0x7f0000000240)=[{0x6, 0xd, 0x8, 0x7fffffff}, {0xa, 0x9, 0x3, 0x9}]}) getgid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @local, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@rand_addr, 0x4e210000}]}, @timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@private, 0x4}, {@broadcast}, {@multicast2}, {@dev}]}]}}}}}}}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000600)={0xa0000013}) ppoll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x81}], 0x1f, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='xfs\x00', 0x400080, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) socket(0x8, 0x1, 0xf6c) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1, {0xa, 0x4e21, 0x4, @empty, 0x1f}}}, 0x3a) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair(0x18, 0x0, 0x2, &(0x7f0000004080)) 2m55.96441545s ago: executing program 34 (id=759): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x2, &(0x7f0000000240)=[{0x6, 0xd, 0x8, 0x7fffffff}, {0xa, 0x9, 0x3, 0x9}]}) getgid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @local, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@rand_addr, 0x4e210000}]}, @timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@private, 0x4}, {@broadcast}, {@multicast2}, {@dev}]}]}}}}}}}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000600)={0xa0000013}) ppoll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x81}], 0x1f, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='xfs\x00', 0x400080, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) socket(0x8, 0x1, 0xf6c) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1, {0xa, 0x4e21, 0x4, @empty, 0x1f}}}, 0x3a) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair(0x18, 0x0, 0x2, &(0x7f0000004080)) 41.120499604s ago: executing program 3 (id=1101): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) geteuid() r4 = socket$inet(0x2, 0x1, 0x0) r5 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r5, 0x0, 0x60, &(0x7f00001e3000)=""/30, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0xb, 0x0, 0xf0, 0xf8, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00', {}, {}, 0x11}, 0xb000000, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = dup(r7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[], [], 0x6b}}) (fail_nth: 1) 39.884710032s ago: executing program 3 (id=1103): signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000018c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x1, [{0xfbfffffa}]}}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) process_mrelease(0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 38.393377689s ago: executing program 7 (id=1108): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000041c0), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000004200)={0x3, 0x2, 0x4, {0x9, @pix_mp={0x5, 0xf9d, 0x50424752, 0xa3b21d64ef0f94f8, 0x8, [{0x5, 0xc}, {0x7, 0x8001}, {0xfd5a, 0xa0000001}, {0x7, 0xe}, {0x9, 0x6fc520a5}, {0xc7e4, 0xac}, {0xffff9dd8, 0x400}, {0x8}], 0x7, 0x6, 0x6, 0x2, 0x5}}, 0x8000}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r2 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r2, &(0x7f0000002ec0)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="00000000e5c06417e58f2aaa43f325e4ae709296", 0x14}], 0x1}}, {{&(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x7, 0x2}]}}}], 0x18}}], 0x2, 0x20004086) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000180)={0x200000, 0x200000}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000100)=ANY=[@ANYRES32=r1, @ANYBLOB="545eba8db027464dbfe9e8716d6622edebd4b0c1db5ddd318eee6dbc6efc46394e9405e8dae58d78826fe0b0942ebdc43bada7f21668034f62552afa6ab9fbc23730ac63466a52ce792a745fc302", @ANYRES16=r1, @ANYRES64=r1, @ANYRES32=r3], 0x0, 0x0}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, 0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 35.467374879s ago: executing program 3 (id=1113): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8200, {0x0, 0x0, 0x0, r3, {0x8, 0x3}, {}, {0xd, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) dup(0xffffffffffffffff) ioperm(0x0, 0x8, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) memfd_create(0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r9, r8, 0x26, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) ioctl$sock_SIOCSPGRP(r7, 0x8902, &(0x7f0000000300)=r4) socket$nl_netfilter(0x10, 0x3, 0xc) 34.125546004s ago: executing program 7 (id=1116): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000980), 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000), 0x4) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="5aa4fb370454ca830000aadc94338298e079000000"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x1, "9d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0x6, 0x7a, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x2, 0x1, 0x80, 0x20, 0xb1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xe}, {0xd, 0x24, 0xf, 0x1, 0x3ff, 0xfe45, 0x0, 0x40}, {0x6, 0x24, 0x1a, 0x8, 0x6}, [@mbim={0xc, 0x24, 0x1b, 0x7, 0x0, 0x1, 0x8, 0x7, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x3, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x8, 0x81, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xc0, 0x9c, 0x4}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x2d, 0x24, 0x81, 0xff, 0xa}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0xa, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x449}}, {0x50, &(0x7f00000002c0)=@string={0x50, 0x3, "98574ce1e5e3ca5070b73b7e164943dc2ce027469bfff0f3b0eb8de03cc732d576a52671574257c0dbf53ae172a0c049478491623e4e29d012453f68a2f7266a92db52d7a3a5e90904921e22be39"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x418}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x415}}, {0xa0, &(0x7f00000003c0)=@string={0xa0, 0x3, "79e0f25f15752199bec8b7d4d9be6204951b9e509468feeb653a5375039f2c59b22a01e533cd058752230af399be4873c51522f49f135621baa055059beef6a3a10201e3a1ec141b5f45fd002c3c8a37c0769d21724dc382684fe889ec2aa0cd6d333217f25be8b0c004681c0c961cbe99f8a2529ea424c0b34831b371eb37885ac1db10bd463ee4c23cfabbdb2673d55c140547a0fdec35a351459d6841"}}, {0x4d, &(0x7f00000004c0)=@string={0x4d, 0x3, "9ff2c39cb83ced6f697e6a84bfa2fe032d01d7abc7bc0bd62f69d7505bd81c5e0129c8ab0076ab1a03db3186c20048f9144844994904c864527389701fddc975a7053a960722b5517234a6"}}, {0x8f, &(0x7f0000000580)=@string={0x8f, 0x3, "3133e23ed4681b378dec9c6fd18c12022ab2e7ae96fc105fc1f047de737912f1b23c53ebfc5f465dbdba261f31b7d179b9cbf6d959d4909a1cac0f922e6921ea4c59f24f811a5cf858f39aa2bb9e41eaacf2f6f2ee5dc031bbf66ec635fe2f031ebd5f3b13cb16819ccca1cdaeec2e262127278f08f94d403828d6c2177b0e71bad8d5cdc45a9be85da50e7cdb"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x380a}}]}) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) readv(r2, &(0x7f0000000480)=[{&(0x7f0000000cc0)=""/4091, 0xffb}], 0x1) ioctl$HIDIOCSFLAG(r2, 0x4004480f, &(0x7f0000000000)=0x3) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, 0x0) 32.631232082s ago: executing program 3 (id=1119): syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r0, 0x0, 0x0) 31.89142561s ago: executing program 0 (id=1122): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80602, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r1, 0x5016, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)=0xffa) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000400)={{0x1409, 0x2, 0x5, 0x80, 'syz0\x00', 0x72870b9c}, 0x3, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 'syz1\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000240)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000540)=0x80) mkdir(&(0x7f0000000280)='./bus/file0\x00', 0x1a1) mount$overlay(0x0, &(0x7f0000006200)='./bus\x00', &(0x7f0000000000), 0x4002, &(0x7f0000000240)={[{@uuid_auto}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@upperdir}]}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x11a) mknodat(r6, &(0x7f00000003c0)='./file0\x00', 0x800, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fsync(r7) close_range(r3, 0xffffffffffffffff, 0x2) connect$vsock_stream(r2, &(0x7f0000000640), 0x10) r8 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) setsockopt$RDS_RECVERR(r8, 0x114, 0x5, &(0x7f0000000140)=0x1, 0x4) shutdown(r5, 0x0) 31.8073253s ago: executing program 2 (id=1123): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none, 0x4}, 0xe) syz_usb_connect(0x3, 0x3d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010102ae299820fc0d0100ac240102030109022b86c41f3e10170904510302ffffff010905071008000608080705933a"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x20000) listen(r0, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, '|P3', 0x1}}}, 0xd) 31.797714629s ago: executing program 3 (id=1124): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x4d8a43, 0x0) r2 = syz_io_uring_setup(0x1006042, &(0x7f00000000c0)={0x0, 0x29ee, 0x4, 0x3, 0x8002b0}, 0x0, &(0x7f00000012c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0x9, 0x0, 0x4) io_uring_enter(r2, 0x3516, 0x2, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYRES32, @ANYRES32], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x4001e) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000280)='oom_adj\x00', 0x40, 0x40, &(0x7f0000000240)={0x5, 0x0, 0x8000000000000cb, 0x2}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x2000000) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_RESET(r6, 0x4141, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r6, 0xc06c4124, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 31.501014371s ago: executing program 1 (id=1125): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r2, 0x1, &(0x7f0000002340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000180)={0x0, 0xffc2, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800084000000008140005"], 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 31.499940425s ago: executing program 0 (id=1126): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x10000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="00012bbd7000ffdbdf254100000008000300", @ANYRES32=r3, @ANYBLOB="0c0099000010000075000000080022011c00000005001901080000000800a1000200000005001801200000000800a1000100000008002201df03000005001901050000000800a10003000000"], 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r4 = socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) clock_gettime(0x0, &(0x7f00000023c0)) recvmmsg(r4, &(0x7f0000002280)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000002c0)=""/197, 0xc5}, {0x0}], 0x2}, 0x9}, {{0x0, 0x0, &(0x7f0000000d80)=[{0x0}, {&(0x7f0000000880)=""/80, 0x50}], 0x2}, 0x81}], 0x2, 0x42, 0x0) epoll_create1(0x80000) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) poll(&(0x7f0000000380)=[{r6, 0x2201}], 0x1, 0x1) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000400)={0xf0f021}) accept(r5, &(0x7f00000005c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000340)=0x80) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x80, &(0x7f0000000080)={[{@quota}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x38]}}]}) r9 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x40) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r9, 0xc1004111, &(0x7f0000000040)={0x8, [0x0, 0x1], [{0x8, 0x2c5280cd}, {0x36a, 0xa, 0x1, 0x0, 0x1}, {0x8, 0xff, 0x1, 0x0, 0x0, 0x1}, {0x8, 0x3, 0x0, 0x0, 0x0, 0x1}, {0xc30, 0x8, 0x0, 0x0, 0x0, 0x1}, {0xd663, 0x7, 0x0, 0x1, 0x0, 0x1}, {0x3, 0x1, 0x1, 0x1, 0x1}, {0x6, 0x4, 0x1, 0x0, 0x0, 0x1}, {0x1827, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xb, 0x420004, 0x1, 0x0, 0x1}, {0x2, 0x3, 0x1, 0x1}, {0xe, 0x6, 0x0, 0x0, 0x1, 0x1}], 0x7fff}) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r10, &(0x7f0000003480)={0x2020}, 0x2020) socket$kcm(0x29, 0x7, 0x0) bind$netlink(r8, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="21f206c29d946d707317ab04000300", @ANYRES32=r1, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4008}, 0x0) futex(&(0x7f0000000500)=0x1, 0x9, 0x1, &(0x7f0000000580), 0x0, 0x0) 30.968286687s ago: executing program 0 (id=1127): syz_open_dev$I2C(&(0x7f00000002c0), 0x0, 0x0) 30.914570713s ago: executing program 3 (id=1128): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000440)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) close_range(r3, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000180)={0xb8, 0x34324142, 0x2, @stepwise={0x4, 0x1, 0x469, 0x4, 0x3, 0x40}}) r4 = epoll_create1(0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)) r7 = dup3(r6, r5, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)={0x20000000}) rt_sigaction(0x3f, &(0x7f0000000100)={0x0, 0x0, 0x0, {[0x100000000]}}, 0x0, 0x8, &(0x7f0000000240)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x20800, 0x39, '\x00', 0x0, @fallback=0x28, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x2, 0x3, 0xd, 0x20000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r8], 0x4c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r8, @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 30.759613681s ago: executing program 1 (id=1129): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r3 = syz_io_uring_setup(0x10d2, &(0x7f0000000300)={0x0, 0x7736, 0x80, 0xfffffffc, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) 30.758985099s ago: executing program 7 (id=1130): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8200, {0x0, 0x0, 0x0, r3, {0x8, 0x3}, {}, {0xd, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) dup(0xffffffffffffffff) ioperm(0x0, 0x8, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) memfd_create(0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r10, r9, 0x26, 0x0, 0x0, @void, @value}, 0x20) recvmsg$unix(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) ioctl$sock_SIOCSPGRP(r8, 0x8902, &(0x7f0000000300)=r4) socket$nl_netfilter(0x10, 0x3, 0xc) 30.716774235s ago: executing program 0 (id=1131): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) lgetxattr(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)=@known='trusted.overlay.upper\x00', 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x3}, {0xa4}, {0x6}]}) 28.739149523s ago: executing program 0 (id=1132): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x48000, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0xac}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0xffffffff, 0x0]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r7 = syz_io_uring_setup(0x92, &(0x7f0000000300)={0x0, 0x7736, 0x0, 0x3, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @private}, &(0x7f0000000240)=0xc) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x74, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xffffffff}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1ff}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x2000c005}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}}) io_uring_enter(r7, 0x47bc, 0x0, 0x0, 0x0, 0x0) 28.201479674s ago: executing program 1 (id=1133): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10004}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000000)=""/203, 0xcb}, {&(0x7f0000000340)=""/257, 0x101}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x4}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000005080)=""/4093, 0xffd}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000000480)=""/101, 0x65}], 0x5}, 0xb0}, {{0x0, 0x0, 0x0}, 0xa}], 0x8, 0x0, 0x0) (fail_nth: 1) 28.136878407s ago: executing program 2 (id=1134): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_setup(0x246d, 0x0) io_uring_setup(0x2a5a, &(0x7f0000000600)={0x0, 0x52c4, 0x4000, 0xfffffffb, 0x51}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs$namespace(0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x15, 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) ptrace$ARCH_SHSTK_ENABLE(0x1e, r2, 0x1, 0x5001) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0xa, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_getscheduler(0xffffffffffffffff) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pwrite64(0xffffffffffffffff, &(0x7f0000000000)="db1033f8c89ad399bc10ed501da24e64794d6e8abdfb003284ee187f8946c39cc107407e2fb719fc4d1af5e249af71885b4945f5b133", 0x36, 0x1caf) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106, 0x9}}, 0x20) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) sendmsg$IPSET_CMD_TEST(r0, 0x0, 0x4000002) userfaultfd(0x800) 27.165208263s ago: executing program 2 (id=1135): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, 0x0, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x2a, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x1, 0x0, @time={0xffffffff}, {0x4}, {0x0, 0x4}, @time=@tick=0x3}, {0xff, 0x0, 0x0, 0x0, @time={0x7}, {0x0, 0x3}, {}, @control={0x0, 0x0, 0x800}}, {0x0, 0x0, 0x0, 0x7, @tick, {}, {0x0, 0x4}, @raw32={[0x0, 0xffffffff, 0x5df]}}, {0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0x3}, {}, @quote={{0x0, 0xfe}}}, {0x0, 0x0, 0x0, 0x5, @time, {0x2}, {0x0, 0x9}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x1, 0x1, 0x0, @tick=0x401, {}, {}, @connect}], 0xc4) read$snapshot(r1, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x44) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) ptrace(0x4207, r4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) munmap(&(0x7f0000e29000/0x1000)=nil, 0x1000) socket(0x10, 0x2, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f00000004c0)={0x28, 0x7, r7, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r9, 0x3ba0, &(0x7f0000000400)={0x48, 0x7, r8, 0x0, 0x10000, 0x0, 0x4000002, 0x258bd4, 0x2e7883}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f00000008c0)={0x48, 0x7, r8, 0x0, 0x10000, 0x0, 0x8, 0x0, 0x334e8b}) sendfile(r2, r3, &(0x7f0000000080), 0x31) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 26.702335456s ago: executing program 7 (id=1136): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_setup(0x246d, 0x0) io_uring_setup(0x2a5a, &(0x7f0000000600)={0x0, 0x52c4, 0x4000, 0xfffffffb, 0x51}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs$namespace(0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x15, 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) ptrace$ARCH_SHSTK_ENABLE(0x1e, r2, 0x1, 0x5001) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0xa, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_getscheduler(0xffffffffffffffff) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pwrite64(0xffffffffffffffff, &(0x7f0000000000)="db1033f8c89ad399bc10ed501da24e64794d6e8abdfb003284ee187f8946c39cc107407e2fb719fc4d1af5e249af71885b4945f5b133", 0x36, 0x1caf) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106, 0x9}}, 0x20) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) write$rfkill(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x1c, 0xb, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000002) userfaultfd(0x800) 26.54506292s ago: executing program 1 (id=1137): ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000080)={0x1f443c183709eeb5, 0x2fe, 0x7, 0xc80, 0xffffffffffffffff}) ioctl$DMA_BUF_SET_NAME_A(r0, 0x40046201, &(0x7f00000000c0)='\x00') (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@arm64={0x4, 0xed, 0x7, '\x00', 0x6}) write$usbip_server(r2, &(0x7f0000000040)=@ret_unlink={{0x4, 0x101, 0x0, 0x1, 0x6}, {0x5}}, 0x30) 26.034442504s ago: executing program 0 (id=1138): ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@my=0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r0) recvmsg$unix(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000380)=""/68, 0x44}], 0x1, &(0x7f0000000780)}, 0x2000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = openat$sequencer(0xffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r3, 0xc0046d00, &(0x7f0000001500)) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x143ffe, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000000c0)={r7, &(0x7f0000000180), 0x0}, 0x20) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r10, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r8, 0x2, &(0x7f0000000380)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x9, r9, 0x0, 0x0, 0x8, 0x0, 0x7}]) pipe2$9p(&(0x7f0000000080), 0x0) 25.034951047s ago: executing program 2 (id=1139): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x7800, 0x8000, 0x80000001, 0x5, {{0x5, 0x4, 0x3, 0x0, 0x14, 0x64, 0x0, 0x4, 0x29, 0x0, @empty, @loopback}}}}) socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x3a) mount$tmpfs(0x0, 0x0, 0x0, 0x2b00b8, &(0x7f00000002c0)={[{@huge_never}]}) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f00000002c0)='cache=none') setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0xa, 0x4) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'geneve0\x00'}) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) 24.872894266s ago: executing program 1 (id=1140): memfd_secret(0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x47, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x3, 0x8}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000004c0)="7fb6835752fbc5cbc563d840f3da791176d27a90922c33ad285841e9a6c431c186795a35886f31f064ef7916f73b6469576ad4d34d2ad9a3cc9bcf33598743e6a752049e5ee868eb54a89cab10bc73666aba74a7a593cb7c9e8a64291ebf6db06dc7045b475be2a8559523dff30841783039011c2edfdbe0378a", 0x7a}], 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r4, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendto$inet(r2, &(0x7f0000000100)="ab", 0x34000, 0x40048c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) r5 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x400000001, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000280)={'bond0\x00', @random="68be862236df"}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0xfffffffe, @mcast2}, r7}}, 0x48) write$UHID_INPUT(r1, &(0x7f0000000b80)={0x8, {"31023a0178df72bb9d09a0af57e565e109f367b6ac07bd9382d1f42ade0d56d49945cd0673360268c3edc0b331915208a87b92f73286e7dcb02448a121283e6d0dfe7f71771a0f045ea1251107514e6ab5179fecf01e8ec671815884e860438190009ab44cd10a4097302ed70d3db85aa990773c94609c584c5107820421d868d445fcc784a5495af236806f88ee235bd4297c6228dd91cdc1f8b08b36794020dff0ef73116c800e555ef47fdf36d37a6f2b709866679f1424eb5c48450e347a56c50988e8a5fbe2dcb921eb886f1e82dcf5fd28a2803c8e59fe14f59e44c09dbb7e00bb8f28cc286c7d2c4cd89e90ec10c37c0048bbfb2366d62e348a9289f331cf4d57df35ffa9c18a3d684197f6e0fd8be806387b216213cabbb21b6cd8fd8d5c0e24a31648637747630c92875d01034a7156ca0032f0ac2422ca07707efd65ad4b56355750b34bb7a62b8a48aa18d5bdd05aeb58bd4dfd69b2ceb7efdccf3a31b100fcd4a1b9462f0aa9973a77db2af59c1ce33103f0f0ea1f4a9f59552c7c9e9bd98ccc791dec9735c7666f310810851eccc33c5f622e84f7ffbf1874a2b525db04d6fba37bd1064713f0fe0aee1e01626c6eb1351ecd9f5209513a6b258ab17abc8e1a8cc4f4ecd33384460b07585a647d29f1e7044dc1c717e534160a89d893100bb5afec1d80446d1a32732d1e7da07c3bef53fba4bb820b53ba6324eb3031618d3b22e9c297b24036a98d2c4668db411e9270c88c3b8c688ab736b37f0dd771b25d6ead79f797bb0aed91bcb14fa3aac4192c7c01856b07d5c05e568c8ad2a18075b753d6c18f3e1130dce95ff354b52167d5273d84c67f8936eadc1a10be48395e145a569d190ab41dd0e6c2a1e85e08b967238a3a5ae9b7ee0f1120f8fc1053e599c7deb19d50dbf161fea80f96cd6074a82941353956efa5dd3e0690f795e7d240be045396ff500d832aba5411cc2264c214fd2a8b2f73337f9befb9b6ae3e79f1cd4ffc7660460a9415b502ed0f1c2a73d815fb6fd7545daedf4d5422e923734bd93bce305005098feb33053abbee9c8270e4cd0b7ae75a53531d0ef0b2e9bbfea859993a61422734d3505bc997c82d4f46d51fdff74e6b23e4f14ff1c4e719754c82ad2715d8a83a13a97d3679f1efecc7ac8dec35ffca8a4c3ab20a33d3904199fa2dd144a666ac6e19088b1b5c7b991d2a05f519d19a230db9ac4a33eb201096b17aec08178016e7670316f6c35bc12724125034768c1a5d42d1c68b74501dde6aee47ed7114ef125b924ec71085d645eb017ba4c059efc7abf465cb25b128f4e0e860c39e9abdb3fcd6eae3eea4203d28b6224eee2dddbd5b6c540da1c31e094407d3226aeb0faa908bd699df4169e1b86e4615ba9c3711b351db7adb95475f704bc2d6478565bf656b21e52583d6795e32cdf0697aac44100f0a11b7911853772ce0fc79f1497154807b5f631fdacb47aca28c9cae4cbf84cb1757b254f14433a853643e59737c3f56cd1bb5ce1dc20d49c50d4aefb2c3eb3c8e422fa0dc0947f0fb066873f8a9cadb2e4523268be6547c3924ff0a8a989f4b6a18577e655bb5dc452cc35ec76a7595ee69c65be99dd23ee377bf4e3396f53e74c95431093a1ebccd5a210749ccade67c8aa5a1cd1e63d6f61dadcf6b7b9c2e33cf3cc8d9ac077b3f8cd49c434ebaffaa8733fad86678a767eafa8876d8c3ba1f244202ff77db41c0d76bbf13a05f44ca5dc709e7a9449ff18b1079fc30a28d9b297f7909489355bf22071c9adf21491e3cef84bf8994a9a1b27b24c46c505d0108b86641dacdf5321efdeca4669922dc2d7679a6157e025c5430f88c382a0b2eb9d855ed29c8be0de99630c302c172da3481252d073fa380a7c1ed39c1d1613ff08e01a758913e9aca16d9dae6c926f77cdfb111c0d7536be360bbc616b8bb8e180121cfe57f8ede7c4b33dedbf468e33246a7c53a7b95d49398e643b8ba6759d5823ba76b4af953bb1ffa61dc132cb866b940f9b5c80af1cd25ab54847eb71a4f1ae63ac74c351b9c835a3d85832749904ad5e504b1fd951127f8a9fdfb053395a8449189e065af7f6a1070dedcdab1e380032923892b753764861d567125d03eade4e752988b8c62a0008b57c2f154acae55bff5490efa807cf6e346d4861544ed18799f71f56d404c39d8c0433b41efadd8a36991f043204cdaaa00d2ed307df19483ea1d5225c63f3fa21dc300a40efb4237a5980fd4c785cd4277539dedb6cac9849d520179c72d27ac9f2df2476473657a068b5e2e0345c21eebf6d337af0ef70589edb84fe4d5a92d1b96331bf238dbed1691221b7a2a98f363a60bc0958737ebf8e2cff912ed0c63820e87820fa4a0feb5b50f079daad2bd4d18a16ee706964a41a5c3105a411d541f5fadfc3d75a6cd8e4486591aa70ef2dcd0ed40a00eb0319be0f62a586fee631f92e96ef9f192e163c7c4dc6fcd9da6651d50a40615893d48e05786963ead52ca3cedb075df7a034b298ea93a310c7b2885f5c091748801c670899bcf1cc0449d467e0e483ec57ef247d9df67c9c2129b7b626083f2ac4f7faa52c7aee05f7a09449d4bf886d93ec78a0fdd363f3b6f44aa5f2a2387048bcafb5731dbe320ad63c072d9dd3a89531947f4b4f5ecf294fdfd2efbffcab53f48fcbd7d2cf0ea28b70dd301ad29b40d838c490c80dc61e25827c4edf4472505b5d59f0bb2abed9bb4d5814042bab53f2a9b6277bbff27cd34e44d7811104cf88ff44fda1d7785b98673101e4d991856229410a7711608330cdbeec6fe5e448b4d1d2302a54e85eae745b3208647d4eaad30b589c33fb3a71d87ecbff13499fe2c5d1b80fc692f7aba91d5b65d470e3e0552d124ab429331d081563dcb5c1a425081442b2c956f91ff4fcf850b675a8cb2c4069ac2c8c6bd40a27914b68dcf4f5e57f65949783aa1ee762d45e0871cd0d9ab20892b34fdb6ec2f14dcf8dc6e2cd65317727e36ca933136ff0bd97947fad4d8f5d7add2c76682ead6b6c7f5b329c50fb435002fc4b3d7393f1ea9d76e1ed1383fdec9069aebfba53d51f242ac9f2bd6b10f4cbf7f7fa559cbd3e8377ecb9ec4aa67917fee64ee51c3370a0b3f52912c152aa4e3acc6fa272bb2ec768b5283ee235320df9670b05aaac02c459fa244dae4f47c1b4324c940f6e0fed94c5b1d6f399e2c3e41e891f20549a8be33cccd7c2ac776cfa235b5a509fb6391324eb33c64b92bcf277c935b00bdbdf3914fe4c9632c65c997b3917d7e94b27129a886d7da5fd23a884b62ed907094bb98f56da8ee5f0ab12ce65029117205496e331723346626e71e9fbe3e1a345a6ac464b03031b7c8d887c7f3dadf8abb73e0ba5565fc52a38ab1f21927f69180617a0e6b5e73c5f46e1764ac01f91ff58c73a5709eee1cfec341602f3a99c3105627eec923ffeebe2981a42f99f036d7cb8073293ab3e74f882fc42a0483ef5bedc248c6f6f5864ab22d5225612ba172945f599986e00b169777aac428232a7da1b6d34e416b4f440a084e7d835b58e9e053232e8de764d1defd9b4b8e2dea2724df0131bd7beb4a1ad9f6be123348045dfe5d672ff3e6c79d9cd619031d1b0baf89c24303178131b089aeefa47a4e57d64ab3e4f470d4426dfca38e80447cf3f7fd76c6aad980ad58246f91160e17b768a546262232b19ebd59496d3ce902a79f479b9033a431d05562d93194f5777b69a8cab78254ddf95b0a57484a17aae6d6b5303b9a9128e7131bb142e8ad01f8daee2dd271f9368ebb2b57072515b0acc5dcd2fd67f73894386430d65d807a4a2c270099eaad2b23bbdf6dd44475e91246f856c740ac311d1a1b61fa2a105c68a2e79720bccea3581218af3cfb18f29626bd24684ebbe03adb4b4fe30346cc02ecc0870c8e1f3555def504f4bbd44e9a95807ef9e09d3324505da3f416611521a5ef7dc5db240d6b387ec847824a3e5444b090897d5998c9746496fe45b60a9196020db066573761c72139099a64a693f7788e8ec9e9edf08592c6e4846042563f531ae6ff4806beee40b562975fb7d5ea3572c250eaa98040f30fef77374c93daedfbd7f4ecd000f8d1f6343252b36b0db98d941aaebaa6910f9cd5c7deca1c0f7e3c0716f963636f5f7e9ed35842bd91d05cd5c1d003e8baa17c8119981bf91bf8f4f532ce1e20b3d8226ef091dbe40f90d831cba17503aa82d247b3ce315cf3014dbcc39250bccf0c3589f0bb90bee2b052f59482c2117076c5b0351a0d7f09cc2ec3576abaa47c3b7a8a7dc657232ada8aab0c7ddd5ed783259de5f1ac1a1b09aab9adc8edbb541488a87706bc02e3edb673bb626fc0988aa4297323bdd2b39d49166a88702f411e28bf217034ab4869514e1cb59b4269169fbc65f24d87e61aa71c752ebbcbed20dd54116f8767354185d762ea932197e4fec895df6315d4489da2b636b2461d170d130d9342fc1d9c31feef761d8189a6c19aae80a989b6c19d8205eef028a3359d1c1943d2c2198644e6e196a6bc88dff094adea10ab62d7f67f08736ec141030fb86a1b3fba40b689279a639e74838c0ab664680d448dda475a85a89bd10e02cb1c5e5eb50712243ce84dec7a64d7804f1e36f2b36bac1082c3eeca107e3dc77eebc6e6c7d25cdbc995bb8ffef308ac11d70af710834a2b73745937a0983e44576a12ce04f31272d1eb66dee607d7b50fb2b8d46e5eea7b0e72415fbb81d947c79f4165b9e38fd70697d24bc24b7a91022c06ee72206cd075df6e520b79386e0a5a90b38de307651387baa9530b289015f4b527902d56b30660fc7055cba05f2c8112d333a8c564d21afc4e0026abb31652c91724d9ff2a4d975527d7e5a2c3af5bff5513a002454f666bf2df76ba6919217c5c991115346d442fe85595fc3d4187f464c0fbe0d59a4769b1f3afb551f387f0b7af19a83b8e7e136a64964679c13c0817d41afd1a6e6209404f2ce0abd892fb297bc4854e2b53e1b150eac3561f227679af443c09e54494f2b3ca1fba489784e1dfe2cb50d1fc63d9b0b2cb2b1b0269e6db1f14225c3e16ce3b4b1b108b0b39432bf8f4602e947eb79ab5140d3eff6d4992510f3c70a2f404712bf89ef8fdba4fe5c3afbe9a5d018cef3f86f51b7ff25d119dfaf67b815d4bb0e2fd5e0cef4c3dcea8edb11ec14fa765a720b0388dfa712a741b0c27c2c36b30ee5644899fa4d0a5e6450e7a3ca26c7e4245d37338c2fdc36c4250796a4df16941fb417f144e4ddcfabba962c59526bdcc9797bd2b9104c3cf529a0cd02fc209ed7afb06d766587994447d78507e1bf711c7c264001a33b3ccb6d93a7df431ebee3d071370bcb2a18adc9b9c7451fa68f2617dc7f2d5cdeb944bca350dea886dd8c9b3eacc0d8724121b3288eeb703b3f4ce2f72b3b3c39c209954776c5f024e333ed6e27f6b762b68f95c7de1e7b2a0494de72dea6aee4b3e1c31497b81f81b7236632b75f220b53f6192005f6d0482aef3768abee38122419e795355ed007ff7eb98cd257603e15cc86d6bd4b9fde4ef2754c91ebe5130e11bbe9c849f36ae3d5c2f62f16169d014ef297f69217eec09361ee4cb055db335be4ba64c8765b8f9d347007a26351d2f3db830e7bc596ba2b0059c10c8db30e45fcf301c6fe832e65dac8b725321311a8359fb0840848ea94ca77c19ab99003ef81698749e7e42a3c5dd152d173f0cb2f7037190a4cc168db1ec6313c5d053a3d02c0208673070235b7b9f444e6fdf00c9b80f65f53f1e6a160b3bdf", 0x1000}}, 0x1006) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000780), r7, 0x2}}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000031000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000180)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x23, 0x0, 0x0, 0x0, 0xb, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a00000000000061118000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 24.786827022s ago: executing program 7 (id=1141): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xd4) 24.198951774s ago: executing program 7 (id=1142): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001d906e20501dc6609b620103000109021b0001000010000904f7000176246700090582020002"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) 24.178436316s ago: executing program 2 (id=1143): ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@my=0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r0) recvmsg$unix(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000380)=""/68, 0x44}], 0x1, &(0x7f0000000780)}, 0x2000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = openat$sequencer(0xffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r3, 0xc0046d00, &(0x7f0000001500)) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x143ffe, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000000c0)={r7, &(0x7f0000000180), 0x0}, 0x20) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r10, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r8, 0x2, &(0x7f0000000380)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x9, r9, 0x0, 0x0, 0x8, 0x0, 0x7}]) pipe2$9p(&(0x7f0000000080), 0x0) 23.987254483s ago: executing program 1 (id=1144): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1}, {@in6=@loopback, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x0, 0x0, @in6=@private1}}]}, 0x154}}, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4008000) 21.873497986s ago: executing program 2 (id=1145): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000000c0)={0x0, r1, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000000c0)={0x0, r1, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, r1, r4, 0x0, 0x7, 0x0, 0x7, {0x1fffe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5, 0xff, 0x8, 0x0, "d20bddda92e75aec79ff0300d28001000b0000000000001000000900"}}) 0s ago: executing program 35 (id=1128): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000440)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) close_range(r3, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000180)={0xb8, 0x34324142, 0x2, @stepwise={0x4, 0x1, 0x469, 0x4, 0x3, 0x40}}) r4 = epoll_create1(0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)) r7 = dup3(r6, r5, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)={0x20000000}) rt_sigaction(0x3f, &(0x7f0000000100)={0x0, 0x0, 0x0, {[0x100000000]}}, 0x0, 0x8, &(0x7f0000000240)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x20800, 0x39, '\x00', 0x0, @fallback=0x28, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x2, 0x3, 0xd, 0x20000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r8], 0x4c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r8, @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) kernel console output (not intermixed with test programs): 35] [ 431.325384][ T9335] dump_stack_lvl+0x189/0x250 [ 431.325420][ T9335] ? __pfx____ratelimit+0x10/0x10 [ 431.325452][ T9335] ? __pfx_dump_stack_lvl+0x10/0x10 [ 431.325483][ T9335] ? __pfx__printk+0x10/0x10 [ 431.325517][ T9335] should_fail_ex+0x414/0x560 [ 431.325550][ T9335] _copy_to_user+0x31/0xb0 [ 431.325585][ T9335] simple_read_from_buffer+0xe1/0x170 [ 431.325615][ T9335] proc_fail_nth_read+0x1df/0x250 [ 431.325646][ T9335] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 431.325674][ T9335] ? rw_verify_area+0x258/0x650 [ 431.325695][ T9335] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 431.325725][ T9335] vfs_read+0x200/0x980 [ 431.325755][ T9335] ? __pfx_vfs_read+0x10/0x10 [ 431.325781][ T9335] ? do_sys_openat2+0x154/0x1c0 [ 431.325809][ T9335] ? kmem_cache_free+0x18f/0x400 [ 431.325859][ T9335] ksys_read+0x145/0x250 [ 431.325882][ T9335] ? __pfx_ksys_read+0x10/0x10 [ 431.325900][ T9335] ? rcu_is_watching+0x15/0xb0 [ 431.325930][ T9335] ? do_syscall_64+0xbe/0x3b0 [ 431.325975][ T9335] do_syscall_64+0xfa/0x3b0 [ 431.325992][ T9335] ? lockdep_hardirqs_on+0x9c/0x150 [ 431.326030][ T9335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.326065][ T9335] ? clear_bhb_loop+0x60/0xb0 [ 431.326086][ T9335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.326104][ T9335] RIP: 0033:0x7f287998d33c [ 431.326119][ T9335] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 431.326135][ T9335] RSP: 002b:00007f287a7c9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 431.326154][ T9335] RAX: ffffffffffffffda RBX: 00007f2879bb5fa0 RCX: 00007f287998d33c [ 431.326167][ T9335] RDX: 000000000000000f RSI: 00007f287a7c90a0 RDI: 0000000000000004 [ 431.326178][ T9335] RBP: 00007f287a7c9090 R08: 0000000000000000 R09: 0000000000000000 [ 431.326189][ T9335] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 431.326200][ T9335] R13: 0000000000000000 R14: 00007f2879bb5fa0 R15: 00007ffcf27d0018 [ 431.326230][ T9335] [ 431.341865][ T9329] xt_CT: No such helper "snmp" [ 431.353825][ T8978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.589208][ T5888] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 431.701020][ T9341] FAULT_INJECTION: forcing a failure. [ 431.701020][ T9341] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 431.742517][ T9341] CPU: 1 UID: 0 PID: 9341 Comm: syz.3.842 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 431.742546][ T9341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 431.742559][ T9341] Call Trace: [ 431.742567][ T9341] [ 431.742575][ T9341] dump_stack_lvl+0x189/0x250 [ 431.742611][ T9341] ? __pfx____ratelimit+0x10/0x10 [ 431.742641][ T9341] ? __pfx_dump_stack_lvl+0x10/0x10 [ 431.742670][ T9341] ? __pfx__printk+0x10/0x10 [ 431.742691][ T9341] ? __might_fault+0xb0/0x130 [ 431.742735][ T9341] should_fail_ex+0x414/0x560 [ 431.742767][ T9341] _copy_from_user+0x2d/0xb0 [ 431.742787][ T9341] ___sys_sendmsg+0x158/0x2a0 [ 431.742817][ T9341] ? __pfx____sys_sendmsg+0x10/0x10 [ 431.742900][ T9341] ? __fget_files+0x2a/0x420 [ 431.742928][ T9341] ? __fget_files+0x3a0/0x420 [ 431.742969][ T9341] __x64_sys_sendmsg+0x19b/0x260 [ 431.743010][ T9341] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 431.743046][ T9341] ? __pfx_ksys_write+0x10/0x10 [ 431.743085][ T9341] ? rcu_is_watching+0x15/0xb0 [ 431.743122][ T9341] ? do_syscall_64+0xbe/0x3b0 [ 431.743146][ T9341] do_syscall_64+0xfa/0x3b0 [ 431.743183][ T9341] ? lockdep_hardirqs_on+0x9c/0x150 [ 431.743215][ T9341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.743237][ T9341] ? clear_bhb_loop+0x60/0xb0 [ 431.743264][ T9341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.743286][ T9341] RIP: 0033:0x7f287998e929 [ 431.743306][ T9341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.743324][ T9341] RSP: 002b:00007f287a7c9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 431.743348][ T9341] RAX: ffffffffffffffda RBX: 00007f2879bb5fa0 RCX: 00007f287998e929 [ 431.743365][ T9341] RDX: 0000000000040080 RSI: 0000200000000200 RDI: 0000000000000003 [ 431.743379][ T9341] RBP: 00007f287a7c9090 R08: 0000000000000000 R09: 0000000000000000 [ 431.743393][ T9341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.743406][ T9341] R13: 0000000000000000 R14: 00007f2879bb5fa0 R15: 00007ffcf27d0018 [ 431.743440][ T9341] [ 431.939997][ T8978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.962178][ T8978] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.972379][ T8978] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.981421][ T5888] usb 3-1: Using ep0 maxpacket: 16 [ 431.988621][ T8978] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.999076][ T8978] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.009011][ T5888] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 432.037900][ T5888] usb 3-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 432.591973][ T5995] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 432.616120][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.751377][ T5888] usb 3-1: config 0 descriptor?? [ 432.778702][ T5995] usb 2-1: Using ep0 maxpacket: 32 [ 432.910359][ T5995] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.090177][ T5995] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.233256][ T5995] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 433.266485][ T5995] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.333154][ T5995] hub 2-1:4.0: USB hub found [ 433.490527][ T5888] usbhid 3-1:0.0: can't add hid device: -71 [ 433.504354][ T5888] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 433.753982][ T5995] hub 2-1:4.0: 2 ports detected [ 433.850275][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.970198][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.997874][ T5888] usb 3-1: USB disconnect, device number 19 [ 434.087338][ T9344] xt_l2tp: v2 doesn't support IP mode [ 434.130820][ T5995] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 434.164873][ T5995] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 434.204999][ T6497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.225089][ T6497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.238974][ T5995] usb 2-1: USB disconnect, device number 22 [ 434.425419][ T9364] CIFS mount error: No usable UNC path provided in device string! [ 434.425419][ T9364] [ 434.443159][ T9364] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 434.576687][ T5914] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 434.779154][ T5914] usb 3-1: Using ep0 maxpacket: 16 [ 434.820077][ T5914] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 434.846175][ T5914] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 434.892485][ T5914] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 434.942202][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.116180][ T5914] usb 3-1: config 0 descriptor?? [ 435.647004][ T5940] usb 3-1: USB disconnect, device number 20 [ 435.899162][ T9384] veth0_vlan: entered allmulticast mode [ 436.077261][ T5914] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 436.079372][ T9387] veth0_vlan: left promiscuous mode [ 436.104238][ T9387] veth0_vlan: entered promiscuous mode [ 436.206709][ T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 436.276816][ T5914] usb 1-1: device descriptor read/64, error -71 [ 436.449820][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 436.506337][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 436.547240][ T10] usb 2-1: config 0 has no interface number 0 [ 436.586475][ T5914] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 436.586796][ T10] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 436.625373][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.641379][ T10] usb 2-1: Product: syz [ 436.645614][ T10] usb 2-1: Manufacturer: syz [ 436.671826][ T10] usb 2-1: SerialNumber: syz [ 436.687704][ T10] usb 2-1: config 0 descriptor?? [ 436.735363][ T10] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 436.737687][ T5914] usb 1-1: device descriptor read/64, error -71 [ 436.785892][ T10] usb 2-1: selecting invalid altsetting 1 [ 436.816482][ T10] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 436.890105][ T10] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 436.962428][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 437.079546][ T5914] usb usb1-port1: attempt power cycle [ 437.103892][ T10] usb 2-1: media controller created [ 437.900006][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 437.998598][ T10] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 438.016440][ T10] zl10353_read_register: readreg error (reg=127, ret==-71) [ 438.026886][ T10] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 438.126593][ T5914] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 438.170660][ T5914] usb 1-1: device descriptor read/8, error -71 [ 438.267560][ T10] usb 2-1: USB disconnect, device number 23 [ 438.456906][ T5914] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 438.542441][ T5914] usb 1-1: device descriptor read/8, error -71 [ 438.744654][ T5914] usb usb1-port1: unable to enumerate USB device [ 439.474178][ T9407] CIFS mount error: No usable UNC path provided in device string! [ 439.474178][ T9407] [ 439.562543][ T9407] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 440.345219][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.356529][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.099145][ T9426] random: crng reseeded on system resumption [ 441.136833][ T9425] bridge0: port 3(veth0_to_bridge) entered blocking state [ 441.526731][ T9425] bridge0: port 3(veth0_to_bridge) entered disabled state [ 441.986800][ T9425] veth0_to_bridge: entered allmulticast mode [ 441.995436][ T9425] veth0_to_bridge: entered promiscuous mode [ 442.004750][ T9425] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 442.024983][ T9425] bridge0: port 3(veth0_to_bridge) entered blocking state [ 442.032573][ T9425] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 442.954932][ T9443] FAULT_INJECTION: forcing a failure. [ 442.954932][ T9443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 443.029456][ T9443] CPU: 0 UID: 0 PID: 9443 Comm: syz.2.869 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 443.029490][ T9443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 443.029504][ T9443] Call Trace: [ 443.029513][ T9443] [ 443.029523][ T9443] dump_stack_lvl+0x189/0x250 [ 443.029561][ T9443] ? __pfx____ratelimit+0x10/0x10 [ 443.029618][ T9443] ? __pfx_dump_stack_lvl+0x10/0x10 [ 443.029651][ T9443] ? __pfx__printk+0x10/0x10 [ 443.029688][ T9443] should_fail_ex+0x414/0x560 [ 443.029723][ T9443] _copy_to_user+0x31/0xb0 [ 443.029748][ T9443] simple_read_from_buffer+0xe1/0x170 [ 443.029784][ T9443] proc_fail_nth_read+0x1df/0x250 [ 443.029820][ T9443] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 443.029861][ T9443] ? rw_verify_area+0x258/0x650 [ 443.029885][ T9443] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 443.029918][ T9443] vfs_read+0x200/0x980 [ 443.029949][ T9443] ? __pfx___mutex_lock+0x10/0x10 [ 443.029971][ T9443] ? __pfx_vfs_read+0x10/0x10 [ 443.029998][ T9443] ? __fget_files+0x2a/0x420 [ 443.030032][ T9443] ? __fget_files+0x3a0/0x420 [ 443.030060][ T9443] ? __fget_files+0x2a/0x420 [ 443.030100][ T9443] ksys_read+0x145/0x250 [ 443.030128][ T9443] ? __pfx_ksys_read+0x10/0x10 [ 443.030152][ T9443] ? rcu_is_watching+0x15/0xb0 [ 443.030185][ T9443] ? trace_sys_enter+0x25/0x120 [ 443.030220][ T9443] do_syscall_64+0xfa/0x3b0 [ 443.030239][ T9443] ? lockdep_hardirqs_on+0x9c/0x150 [ 443.030270][ T9443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.030292][ T9443] ? clear_bhb_loop+0x60/0xb0 [ 443.030319][ T9443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.030340][ T9443] RIP: 0033:0x7f244858d33c [ 443.030359][ T9443] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 443.030378][ T9443] RSP: 002b:00007f24463f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 443.030402][ T9443] RAX: ffffffffffffffda RBX: 00007f24487b5fa0 RCX: 00007f244858d33c [ 443.030418][ T9443] RDX: 000000000000000f RSI: 00007f24463f60a0 RDI: 0000000000000005 [ 443.030432][ T9443] RBP: 00007f24463f6090 R08: 0000000000000000 R09: 0000000000000000 [ 443.030445][ T9443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.030458][ T9443] R13: 0000000000000000 R14: 00007f24487b5fa0 R15: 00007ffd28e2d388 [ 443.030497][ T9443] [ 443.416519][ T10] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 443.575970][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 443.596503][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 443.608501][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 443.620411][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 443.700453][ T30] audit: type=1326 audit(1749881408.523:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9445 comm="syz.2.871" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f244858e929 code=0x0 [ 444.251570][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 444.260889][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.271998][ T10] usb 1-1: config 0 descriptor?? [ 444.278208][ T9444] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 445.770123][ T9467] xt_addrtype: ipv6 does not support BROADCAST matching [ 446.271764][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 446.302268][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 446.337757][ T10] usb 1-1: USB disconnect, device number 27 [ 447.653493][ T9485] 9pnet_fd: Insufficient options for proto=fd [ 447.781335][ T9487] FAULT_INJECTION: forcing a failure. [ 447.781335][ T9487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 447.826022][ T9487] CPU: 1 UID: 0 PID: 9487 Comm: syz.0.879 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 447.826054][ T9487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 447.826068][ T9487] Call Trace: [ 447.826077][ T9487] [ 447.826086][ T9487] dump_stack_lvl+0x189/0x250 [ 447.826123][ T9487] ? __pfx____ratelimit+0x10/0x10 [ 447.826156][ T9487] ? __pfx_dump_stack_lvl+0x10/0x10 [ 447.826187][ T9487] ? __pfx__printk+0x10/0x10 [ 447.826214][ T9487] ? __might_fault+0xb0/0x130 [ 447.826251][ T9487] should_fail_ex+0x414/0x560 [ 447.826281][ T9487] _copy_from_user+0x2d/0xb0 [ 447.826305][ T9487] ___sys_sendmsg+0x158/0x2a0 [ 447.826333][ T9487] ? __pfx____sys_sendmsg+0x10/0x10 [ 447.826404][ T9487] ? __fget_files+0x2a/0x420 [ 447.826431][ T9487] ? __fget_files+0x3a0/0x420 [ 447.826472][ T9487] __x64_sys_sendmsg+0x19b/0x260 [ 447.826503][ T9487] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 447.826541][ T9487] ? __pfx_ksys_write+0x10/0x10 [ 447.826563][ T9487] ? rcu_is_watching+0x15/0xb0 [ 447.826599][ T9487] ? do_syscall_64+0xbe/0x3b0 [ 447.826623][ T9487] do_syscall_64+0xfa/0x3b0 [ 447.826641][ T9487] ? lockdep_hardirqs_on+0x9c/0x150 [ 447.826672][ T9487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.826693][ T9487] ? clear_bhb_loop+0x60/0xb0 [ 447.826718][ T9487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.826739][ T9487] RIP: 0033:0x7ff1cc58e929 [ 447.826758][ T9487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.826776][ T9487] RSP: 002b:00007ff1cd324038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 447.826798][ T9487] RAX: ffffffffffffffda RBX: 00007ff1cc7b5fa0 RCX: 00007ff1cc58e929 [ 447.826832][ T9487] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000d [ 447.826846][ T9487] RBP: 00007ff1cd324090 R08: 0000000000000000 R09: 0000000000000000 [ 447.826860][ T9487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.826873][ T9487] R13: 0000000000000000 R14: 00007ff1cc7b5fa0 R15: 00007fff4eec3b28 [ 447.826908][ T9487] [ 447.865006][ T9492] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 449.951287][ T5995] IPVS: starting estimator thread 0... [ 450.278058][ T9510] IPVS: using max 29 ests per chain, 69600 per kthread [ 451.186620][ T10] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 452.226414][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 452.255494][ T9525] loop6: detected capacity change from 0 to 524287999 [ 452.288916][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.316859][ T10] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 452.349897][ T10] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 452.391203][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.430439][ T10] usb 1-1: config 0 descriptor?? [ 452.866579][ T10] usb 1-1: USB disconnect, device number 28 [ 457.740477][ T9568] netlink: 'syz.3.901': attribute type 10 has an invalid length. [ 457.765973][ T9572] FAULT_INJECTION: forcing a failure. [ 457.765973][ T9572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 457.767319][ T9568] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.786597][ T9568] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.838648][ T9572] CPU: 0 UID: 0 PID: 9572 Comm: syz.7.903 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 457.838681][ T9572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 457.838695][ T9572] Call Trace: [ 457.838704][ T9572] [ 457.838713][ T9572] dump_stack_lvl+0x189/0x250 [ 457.838752][ T9572] ? __pfx____ratelimit+0x10/0x10 [ 457.838785][ T9572] ? __pfx_dump_stack_lvl+0x10/0x10 [ 457.838816][ T9572] ? __pfx__printk+0x10/0x10 [ 457.838839][ T9572] ? __might_fault+0xb0/0x130 [ 457.838878][ T9572] should_fail_ex+0x414/0x560 [ 457.838912][ T9572] _copy_from_user+0x2d/0xb0 [ 457.838936][ T9572] ___sys_sendmsg+0x158/0x2a0 [ 457.838969][ T9572] ? __pfx____sys_sendmsg+0x10/0x10 [ 457.839040][ T9572] ? __fget_files+0x2a/0x420 [ 457.839067][ T9572] ? __fget_files+0x3a0/0x420 [ 457.839109][ T9572] __x64_sys_sendmsg+0x19b/0x260 [ 457.839141][ T9572] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 457.839181][ T9572] ? __pfx_ksys_write+0x10/0x10 [ 457.839204][ T9572] ? rcu_is_watching+0x15/0xb0 [ 457.839249][ T9572] ? do_syscall_64+0xbe/0x3b0 [ 457.839274][ T9572] do_syscall_64+0xfa/0x3b0 [ 457.839294][ T9572] ? lockdep_hardirqs_on+0x9c/0x150 [ 457.839326][ T9572] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.839348][ T9572] ? clear_bhb_loop+0x60/0xb0 [ 457.839375][ T9572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.839397][ T9572] RIP: 0033:0x7f949218e929 [ 457.839415][ T9572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.839434][ T9572] RSP: 002b:00007f9492f53038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 457.839457][ T9572] RAX: ffffffffffffffda RBX: 00007f94923b5fa0 RCX: 00007f949218e929 [ 457.839473][ T9572] RDX: 0000000000008084 RSI: 0000200000000180 RDI: 0000000000000003 [ 457.839488][ T9572] RBP: 00007f9492f53090 R08: 0000000000000000 R09: 0000000000000000 [ 457.839502][ T9572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.839514][ T9572] R13: 0000000000000000 R14: 00007f94923b5fa0 R15: 00007ffe3f860d58 [ 457.839547][ T9572] [ 457.871465][ T9568] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.976652][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 457.979187][ T9568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.079096][ T9568] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.086318][ T9568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.130011][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 458.143111][ T9568] team0: Port device bridge0 added [ 458.154624][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 458.183539][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 458.255048][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 458.305373][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 458.423806][ T10] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 459.156489][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.164563][ T10] usb 2-1: Product: syz [ 459.293922][ T10] usb 2-1: Manufacturer: syz [ 459.298668][ T10] usb 2-1: SerialNumber: syz [ 459.307692][ T10] usb 2-1: config 0 descriptor?? [ 459.313347][ T9570] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 459.644413][ T9590] use of bytesused == 0 is deprecated and will be removed in the future, [ 459.653375][ T9590] use the actual size instead. [ 459.995326][ T9590] binder: 9588:9590 ioctl c0306201 0 returned -14 [ 460.025053][ T9589] xt_CT: No such helper "snmp" [ 460.035266][ T9570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.080693][ T9570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.124832][ T10] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 460.187977][ T10] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input24 [ 460.623303][ C0] powermate: config urb returned -71 [ 460.629409][ C0] powermate: config urb returned -71 [ 460.634937][ C0] powermate: config urb returned -71 [ 460.640846][ T5910] usb 2-1: USB disconnect, device number 24 [ 460.646863][ C0] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 462.402743][ T9621] Driver unsupported XDP return value 0 on prog (id 258) dev N/A, expect packet loss! [ 464.506220][ T9645] xt_addrtype: ipv6 does not support BROADCAST matching [ 465.383934][ T44] IPVS: starting estimator thread 0... [ 466.799862][ T9655] IPVS: using max 30 ests per chain, 72000 per kthread [ 467.745158][ T9678] No control pipe specified [ 470.137085][ T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 470.430944][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 470.499014][ T10] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 470.511140][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 470.549334][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 470.577257][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 470.711280][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 470.771053][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 470.784356][ T9704] xt_addrtype: ipv6 does not support BROADCAST matching [ 471.851476][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.999728][ T10] usb 3-1: usb_control_msg returned -71 [ 472.022527][ T10] usbtmc 3-1:16.0: can't read capabilities [ 472.289916][ T10] usb 3-1: USB disconnect, device number 21 [ 474.876870][ T9746] xt_addrtype: ipv6 does not support BROADCAST matching [ 476.044964][ T9748] veth0_vlan: left promiscuous mode [ 476.051003][ T9748] veth0_vlan: entered promiscuous mode [ 477.083647][ T9767] autofs: Unknown parameter '0x0000000000000000' [ 477.900247][ T5995] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 479.143228][ T5995] usb 2-1: Using ep0 maxpacket: 32 [ 479.162392][ T5995] usb 2-1: unable to get BOS descriptor or descriptor too short [ 479.177844][ T5995] usb 2-1: config 20 has an invalid interface number: 100 but max is 0 [ 479.186146][ T5995] usb 2-1: config 20 has no interface number 0 [ 479.216617][ T5995] usb 2-1: config 20 interface 100 has no altsetting 0 [ 479.228212][ T5995] usb 2-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=53.13 [ 479.242850][ T5995] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.276637][ T5995] usb 2-1: Product: syz [ 479.280858][ T5995] usb 2-1: Manufacturer: syz [ 479.426656][ T5995] usb 2-1: SerialNumber: syz [ 480.472362][ T5914] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 481.218780][ T5914] usb 4-1: Using ep0 maxpacket: 32 [ 481.244509][ T5914] usb 4-1: config 0 has an invalid interface number: 30 but max is 0 [ 481.269557][ T5914] usb 4-1: config 0 has no interface number 0 [ 481.288751][ T5914] usb 4-1: New USB device found, idVendor=061d, idProduct=c180, bcdDevice=fc.f0 [ 481.467191][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.508975][ T5914] usb 4-1: Product: syz [ 481.529093][ T5914] usb 4-1: Manufacturer: syz [ 481.534264][ T5914] usb 4-1: SerialNumber: syz [ 481.977570][ T5914] usb 4-1: config 0 descriptor?? [ 482.158262][ T5995] ftdi_sio 2-1:20.100: FTDI USB Serial Device converter detected [ 482.175526][ T5914] quatech2 4-1:0.30: Quatech 2nd gen USB to Serial Driver converter detected [ 482.195322][ T9785] syz.3.961: attempt to access beyond end of device [ 482.195322][ T9785] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 482.209674][ T9785] hpfs: hpfs_map_sector(): read error [ 482.217934][ T9785] o2cb: This node has not been configured. [ 482.223976][ T9785] o2cb: Cluster check failed. Fix errors before retrying. [ 482.231170][ T9785] (syz.3.961,9785,1):user_dlm_register:674 ERROR: status = -22 [ 482.238772][ T9785] (syz.3.961,9785,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 482.274376][ T5995] ftdi_sio ttyUSB0: unknown device type: 0x5313 [ 482.290071][ T5914] usb 4-1: qt2_attach - failed to power on unit: -71 [ 482.330667][ T5995] usb 2-1: USB disconnect, device number 25 [ 482.743803][ T5914] quatech2 4-1:0.30: probe with driver quatech2 failed with error -71 [ 482.767682][ T5995] ftdi_sio 2-1:20.100: device disconnected [ 482.820583][ T9809] autofs: Unknown parameter '0x0000000000000000' [ 482.931050][ T5914] usb 4-1: USB disconnect, device number 20 [ 482.976949][ T9815] FAULT_INJECTION: forcing a failure. [ 482.976949][ T9815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 483.012308][ T9815] CPU: 1 UID: 0 PID: 9815 Comm: syz.7.969 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 483.012341][ T9815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 483.012355][ T9815] Call Trace: [ 483.012364][ T9815] [ 483.012374][ T9815] dump_stack_lvl+0x189/0x250 [ 483.012412][ T9815] ? __pfx____ratelimit+0x10/0x10 [ 483.012447][ T9815] ? __pfx_dump_stack_lvl+0x10/0x10 [ 483.012480][ T9815] ? __pfx__printk+0x10/0x10 [ 483.012502][ T9815] ? __might_fault+0xb0/0x130 [ 483.012543][ T9815] should_fail_ex+0x414/0x560 [ 483.012577][ T9815] _copy_from_user+0x2d/0xb0 [ 483.012601][ T9815] ___sys_sendmsg+0x158/0x2a0 [ 483.012633][ T9815] ? __pfx____sys_sendmsg+0x10/0x10 [ 483.012711][ T9815] ? __fget_files+0x2a/0x420 [ 483.012738][ T9815] ? __fget_files+0x3a0/0x420 [ 483.012778][ T9815] __x64_sys_sendmsg+0x19b/0x260 [ 483.012808][ T9815] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 483.012847][ T9815] ? __pfx_ksys_write+0x10/0x10 [ 483.012877][ T9815] ? rcu_is_watching+0x15/0xb0 [ 483.012914][ T9815] ? do_syscall_64+0xbe/0x3b0 [ 483.012937][ T9815] do_syscall_64+0xfa/0x3b0 [ 483.012955][ T9815] ? lockdep_hardirqs_on+0x9c/0x150 [ 483.012986][ T9815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.013007][ T9815] ? clear_bhb_loop+0x60/0xb0 [ 483.013034][ T9815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.013054][ T9815] RIP: 0033:0x7f949218e929 [ 483.013074][ T9815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.013092][ T9815] RSP: 002b:00007f9492f53038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 483.013115][ T9815] RAX: ffffffffffffffda RBX: 00007f94923b5fa0 RCX: 00007f949218e929 [ 483.013130][ T9815] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 483.013144][ T9815] RBP: 00007f9492f53090 R08: 0000000000000000 R09: 0000000000000000 [ 483.013157][ T9815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.013170][ T9815] R13: 0000000000000000 R14: 00007f94923b5fa0 R15: 00007ffe3f860d58 [ 483.013203][ T9815] [ 483.302021][ T9819] fuse: Bad value for 'fd' [ 484.067211][ T9830] veth0_vlan: left promiscuous mode [ 484.114199][ T9830] veth0_vlan: entered promiscuous mode [ 485.874534][ T9836] XFS (nullb0): Invalid superblock magic number [ 489.865934][ T9880] FAULT_INJECTION: forcing a failure. [ 489.865934][ T9880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 489.941112][ T9880] CPU: 1 UID: 0 PID: 9880 Comm: syz.0.986 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 489.941143][ T9880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 489.941159][ T9880] Call Trace: [ 489.941171][ T9880] [ 489.941179][ T9880] dump_stack_lvl+0x189/0x250 [ 489.941212][ T9880] ? irqentry_exit+0x74/0x90 [ 489.941241][ T9880] ? __pfx_dump_stack_lvl+0x10/0x10 [ 489.941289][ T9880] should_fail_ex+0x414/0x560 [ 489.941318][ T9880] _copy_from_user+0x2d/0xb0 [ 489.941339][ T9880] __sys_bpf+0x1ed/0x860 [ 489.941365][ T9880] ? __pfx___sys_bpf+0x10/0x10 [ 489.941401][ T9880] ? ksys_write+0x22a/0x250 [ 489.941428][ T9880] ? __pfx_ksys_write+0x10/0x10 [ 489.941457][ T9880] ? rcu_is_watching+0x15/0xb0 [ 489.941494][ T9880] __x64_sys_bpf+0x7c/0x90 [ 489.941518][ T9880] do_syscall_64+0xfa/0x3b0 [ 489.941535][ T9880] ? lockdep_hardirqs_on+0x9c/0x150 [ 489.941564][ T9880] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.941584][ T9880] ? clear_bhb_loop+0x60/0xb0 [ 489.941608][ T9880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.941627][ T9880] RIP: 0033:0x7ff1cc58e929 [ 489.941645][ T9880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.941663][ T9880] RSP: 002b:00007ff1cd324038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 489.941684][ T9880] RAX: ffffffffffffffda RBX: 00007ff1cc7b5fa0 RCX: 00007ff1cc58e929 [ 489.941699][ T9880] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 489.941712][ T9880] RBP: 00007ff1cd324090 R08: 0000000000000000 R09: 0000000000000000 [ 489.941725][ T9880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.941737][ T9880] R13: 0000000000000000 R14: 00007ff1cc7b5fa0 R15: 00007fff4eec3b28 [ 489.941768][ T9880] [ 492.098389][ T30] audit: type=1326 audit(2000000023.640:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9884 comm="syz.1.988" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa9a078e929 code=0x0 [ 495.587526][ T9926] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 495.609658][ T9926] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 495.651161][ T9931] FAULT_INJECTION: forcing a failure. [ 495.651161][ T9931] name failslab, interval 1, probability 0, space 0, times 0 [ 495.677577][ T9931] CPU: 1 UID: 0 PID: 9931 Comm: syz.1.1001 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 495.677606][ T9931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 495.677618][ T9931] Call Trace: [ 495.677625][ T9931] [ 495.677633][ T9931] dump_stack_lvl+0x189/0x250 [ 495.677666][ T9931] ? __pfx____ratelimit+0x10/0x10 [ 495.677695][ T9931] ? __pfx_dump_stack_lvl+0x10/0x10 [ 495.677723][ T9931] ? __pfx__printk+0x10/0x10 [ 495.677748][ T9931] ? __pfx___might_resched+0x10/0x10 [ 495.677774][ T9931] ? fs_reclaim_acquire+0x7d/0x100 [ 495.677804][ T9931] should_fail_ex+0x414/0x560 [ 495.677833][ T9931] should_failslab+0xa8/0x100 [ 495.677883][ T9931] __kmalloc_noprof+0xcb/0x4f0 [ 495.677905][ T9931] ? kfree+0x4d/0x440 [ 495.677923][ T9931] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 495.677959][ T9931] tomoyo_realpath_from_path+0xe3/0x5d0 [ 495.677991][ T9931] ? tomoyo_domain+0xda/0x130 [ 495.678027][ T9931] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 495.678052][ T9931] tomoyo_path_number_perm+0x1e8/0x5a0 [ 495.678080][ T9931] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 495.678124][ T9931] ? __lock_acquire+0xab9/0xd20 [ 495.678172][ T9931] ? __fget_files+0x2a/0x420 [ 495.678202][ T9931] ? __fget_files+0x2a/0x420 [ 495.678227][ T9931] ? __fget_files+0x3a0/0x420 [ 495.678252][ T9931] ? __fget_files+0x2a/0x420 [ 495.678284][ T9931] security_file_ioctl+0xcb/0x2d0 [ 495.678314][ T9931] __se_sys_ioctl+0x47/0x170 [ 495.678356][ T9931] do_syscall_64+0xfa/0x3b0 [ 495.678375][ T9931] ? lockdep_hardirqs_on+0x9c/0x150 [ 495.678407][ T9931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.678429][ T9931] ? clear_bhb_loop+0x60/0xb0 [ 495.678456][ T9931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.678477][ T9931] RIP: 0033:0x7fa9a078e929 [ 495.678496][ T9931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 495.678515][ T9931] RSP: 002b:00007fa9a1518038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 495.678537][ T9931] RAX: ffffffffffffffda RBX: 00007fa9a09b5fa0 RCX: 00007fa9a078e929 [ 495.678553][ T9931] RDX: 00002000000000c0 RSI: 0000000040505412 RDI: 0000000000000003 [ 495.678572][ T9931] RBP: 00007fa9a1518090 R08: 0000000000000000 R09: 0000000000000000 [ 495.678585][ T9931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.678598][ T9931] R13: 0000000000000000 R14: 00007fa9a09b5fa0 R15: 00007ffe43d958d8 [ 495.678632][ T9931] [ 495.948315][ T9931] ERROR: Out of memory at tomoyo_realpath_from_path. [ 497.619224][ T9948] FAULT_INJECTION: forcing a failure. [ 497.619224][ T9948] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 497.683666][ T9948] CPU: 0 UID: 0 PID: 9948 Comm: syz.2.1005 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 497.683698][ T9948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 497.683711][ T9948] Call Trace: [ 497.683720][ T9948] [ 497.683729][ T9948] dump_stack_lvl+0x189/0x250 [ 497.683766][ T9948] ? __pfx____ratelimit+0x10/0x10 [ 497.683799][ T9948] ? __pfx_dump_stack_lvl+0x10/0x10 [ 497.683830][ T9948] ? __pfx__printk+0x10/0x10 [ 497.683853][ T9948] ? __might_fault+0xb0/0x130 [ 497.683892][ T9948] should_fail_ex+0x414/0x560 [ 497.683926][ T9948] _copy_from_user+0x2d/0xb0 [ 497.683950][ T9948] ___sys_recvmsg+0x12e/0x510 [ 497.683987][ T9948] ? __pfx____sys_recvmsg+0x10/0x10 [ 497.684047][ T9948] ? __fget_files+0x3a0/0x420 [ 497.684090][ T9948] do_recvmmsg+0x307/0x770 [ 497.684130][ T9948] ? __pfx_do_recvmmsg+0x10/0x10 [ 497.684174][ T9948] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 497.684230][ T9948] __x64_sys_recvmmsg+0x190/0x240 [ 497.684270][ T9948] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 497.684304][ T9948] ? rcu_is_watching+0x15/0xb0 [ 497.684342][ T9948] ? do_syscall_64+0xbe/0x3b0 [ 497.684368][ T9948] do_syscall_64+0xfa/0x3b0 [ 497.684387][ T9948] ? lockdep_hardirqs_on+0x9c/0x150 [ 497.684418][ T9948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.684453][ T9948] ? clear_bhb_loop+0x60/0xb0 [ 497.684488][ T9948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.684510][ T9948] RIP: 0033:0x7f244858e929 [ 497.684530][ T9948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.684550][ T9948] RSP: 002b:00007f24463d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 497.684573][ T9948] RAX: ffffffffffffffda RBX: 00007f24487b6080 RCX: 00007f244858e929 [ 497.684590][ T9948] RDX: 0000000000000001 RSI: 0000200000005fc0 RDI: 0000000000000004 [ 497.684604][ T9948] RBP: 00007f24463d5090 R08: 0000000000000000 R09: 0000000000000000 [ 497.684618][ T9948] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 497.684631][ T9948] R13: 0000000000000000 R14: 00007f24487b6080 R15: 00007ffd28e2d388 [ 497.684666][ T9948] [ 497.900006][ C0] vkms_vblank_simulate: vblank timer overrun [ 499.057185][ T9957] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1008'. [ 499.088903][ T9957] overlayfs: failed to resolve './file1': -2 [ 500.410460][ T9979] veth0_vlan: left promiscuous mode [ 500.468707][ T9979] veth0_vlan: entered promiscuous mode [ 500.827523][ T9981] FAULT_INJECTION: forcing a failure. [ 500.827523][ T9981] name failslab, interval 1, probability 0, space 0, times 0 [ 500.846702][ T9981] CPU: 0 UID: 0 PID: 9981 Comm: syz.7.1013 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 500.846733][ T9981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 500.846746][ T9981] Call Trace: [ 500.846755][ T9981] [ 500.846764][ T9981] dump_stack_lvl+0x189/0x250 [ 500.846800][ T9981] ? __pfx____ratelimit+0x10/0x10 [ 500.846833][ T9981] ? __pfx_dump_stack_lvl+0x10/0x10 [ 500.846864][ T9981] ? __pfx__printk+0x10/0x10 [ 500.846894][ T9981] ? __pfx___might_resched+0x10/0x10 [ 500.846924][ T9981] ? fs_reclaim_acquire+0x7d/0x100 [ 500.846972][ T9981] should_fail_ex+0x414/0x560 [ 500.847004][ T9981] should_failslab+0xa8/0x100 [ 500.847032][ T9981] __kmalloc_noprof+0xcb/0x4f0 [ 500.847053][ T9981] ? kfree+0x4d/0x440 [ 500.847072][ T9981] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 500.847106][ T9981] tomoyo_realpath_from_path+0xe3/0x5d0 [ 500.847133][ T9981] ? tomoyo_domain+0xda/0x130 [ 500.847159][ T9981] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 500.847177][ T9981] tomoyo_path_number_perm+0x1e8/0x5a0 [ 500.847198][ T9981] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 500.847228][ T9981] ? __lock_acquire+0xab9/0xd20 [ 500.847261][ T9981] ? __fget_files+0x2a/0x420 [ 500.847283][ T9981] ? __fget_files+0x2a/0x420 [ 500.847300][ T9981] ? __fget_files+0x3a0/0x420 [ 500.847318][ T9981] ? __fget_files+0x2a/0x420 [ 500.847341][ T9981] security_file_ioctl+0xcb/0x2d0 [ 500.847370][ T9981] __se_sys_ioctl+0x47/0x170 [ 500.847393][ T9981] do_syscall_64+0xfa/0x3b0 [ 500.847409][ T9981] ? lockdep_hardirqs_on+0x9c/0x150 [ 500.847436][ T9981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.847461][ T9981] ? clear_bhb_loop+0x60/0xb0 [ 500.847485][ T9981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.847503][ T9981] RIP: 0033:0x7f949218e929 [ 500.847521][ T9981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 500.847537][ T9981] RSP: 002b:00007f9492f53038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 500.847556][ T9981] RAX: ffffffffffffffda RBX: 00007f94923b5fa0 RCX: 00007f949218e929 [ 500.847570][ T9981] RDX: 0000200000000080 RSI: 000000004020565b RDI: 0000000000000005 [ 500.847584][ T9981] RBP: 00007f9492f53090 R08: 0000000000000000 R09: 0000000000000000 [ 500.847596][ T9981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.847609][ T9981] R13: 0000000000000000 R14: 00007f94923b5fa0 R15: 00007ffe3f860d58 [ 500.847640][ T9981] [ 500.847648][ T9981] ERROR: Out of memory at tomoyo_realpath_from_path. [ 502.215648][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.222143][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.583709][ T9991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1017'. [ 504.204571][ T30] audit: type=1326 audit(2000000036.440:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10008 comm="syz.2.1021" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f244858e929 code=0x0 [ 505.241329][T10018] mmap: syz.0.1024 (10018): VmData 37597184 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 506.458964][T10030] FAULT_INJECTION: forcing a failure. [ 506.458964][T10030] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 507.485627][T10030] CPU: 0 UID: 0 PID: 10030 Comm: syz.7.1026 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 507.485660][T10030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 507.485674][T10030] Call Trace: [ 507.485683][T10030] [ 507.485692][T10030] dump_stack_lvl+0x189/0x250 [ 507.485731][T10030] ? __pfx____ratelimit+0x10/0x10 [ 507.485764][T10030] ? __pfx_dump_stack_lvl+0x10/0x10 [ 507.485797][T10030] ? __pfx__printk+0x10/0x10 [ 507.485819][T10030] ? __might_fault+0xb0/0x130 [ 507.485858][T10030] should_fail_ex+0x414/0x560 [ 507.485893][T10030] _copy_from_user+0x2d/0xb0 [ 507.485916][T10030] __sys_connect+0x123/0x440 [ 507.485940][T10030] ? __fget_files+0x3a0/0x420 [ 507.485970][T10030] ? __pfx___sys_connect+0x10/0x10 [ 507.486008][T10030] ? __pfx_ksys_write+0x10/0x10 [ 507.486031][T10030] ? rcu_is_watching+0x15/0xb0 [ 507.486072][T10030] __x64_sys_connect+0x7a/0x90 [ 507.486097][T10030] do_syscall_64+0xfa/0x3b0 [ 507.486114][T10030] ? lockdep_hardirqs_on+0x9c/0x150 [ 507.486146][T10030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.486168][T10030] ? clear_bhb_loop+0x60/0xb0 [ 507.486194][T10030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.486215][T10030] RIP: 0033:0x7f949218e929 [ 507.486234][T10030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.486253][T10030] RSP: 002b:00007f9492f32038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 507.486276][T10030] RAX: ffffffffffffffda RBX: 00007f94923b6080 RCX: 00007f949218e929 [ 507.486293][T10030] RDX: 000000000000000a RSI: 0000200000000000 RDI: 0000000000000007 [ 507.486307][T10030] RBP: 00007f9492f32090 R08: 0000000000000000 R09: 0000000000000000 [ 507.486325][T10030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.486348][T10030] R13: 0000000000000000 R14: 00007f94923b6080 R15: 00007ffe3f860d58 [ 507.486380][T10030] [ 508.099080][T10050] FAULT_INJECTION: forcing a failure. [ 508.099080][T10050] name failslab, interval 1, probability 0, space 0, times 0 [ 508.099162][T10050] CPU: 0 UID: 0 PID: 10050 Comm: syz.0.1031 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 508.099188][T10050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 508.099200][T10050] Call Trace: [ 508.099209][T10050] [ 508.099217][T10050] dump_stack_lvl+0x189/0x250 [ 508.099254][T10050] ? __pfx____ratelimit+0x10/0x10 [ 508.099286][T10050] ? __pfx_dump_stack_lvl+0x10/0x10 [ 508.099316][T10050] ? __pfx__printk+0x10/0x10 [ 508.099340][T10050] ? __pfx___might_resched+0x10/0x10 [ 508.099370][T10050] ? fs_reclaim_acquire+0x7d/0x100 [ 508.099405][T10050] should_fail_ex+0x414/0x560 [ 508.099438][T10050] should_failslab+0xa8/0x100 [ 508.099467][T10050] kmem_cache_alloc_noprof+0x73/0x3c0 [ 508.099490][T10050] ? ima_inode_get+0xeb/0x4e0 [ 508.099523][T10050] ima_inode_get+0xeb/0x4e0 [ 508.099557][T10050] process_measurement+0x3f1/0x1a40 [ 508.099606][T10050] ? __pfx_process_measurement+0x10/0x10 [ 508.099680][T10050] ? rcu_read_lock_any_held+0xb3/0x120 [ 508.099727][T10050] ima_file_mmap+0x1a2/0x1f0 [ 508.099766][T10050] ? __pfx_ima_file_mmap+0x10/0x10 [ 508.099793][T10050] ? ksys_write+0x1cb/0x250 [ 508.099825][T10050] security_mmap_file+0x7a4/0xa60 [ 508.099855][T10050] vm_mmap_pgoff+0x12c/0x4c0 [ 508.099882][T10050] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 508.099905][T10050] ? __fget_files+0x2a/0x420 [ 508.099937][T10050] ? __fget_files+0x3a0/0x420 [ 508.099965][T10050] ? __fget_files+0x2a/0x420 [ 508.099998][T10050] ksys_mmap_pgoff+0x51f/0x760 [ 508.100030][T10050] do_syscall_64+0xfa/0x3b0 [ 508.100049][T10050] ? lockdep_hardirqs_on+0x9c/0x150 [ 508.100081][T10050] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.100102][T10050] ? clear_bhb_loop+0x60/0xb0 [ 508.100129][T10050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.100150][T10050] RIP: 0033:0x7ff1cc58e929 [ 508.100169][T10050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 508.100187][T10050] RSP: 002b:00007ff1ca3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 508.100209][T10050] RAX: ffffffffffffffda RBX: 00007ff1cc7b6080 RCX: 00007ff1cc58e929 [ 508.100225][T10050] RDX: 00000000027ffff7 RSI: 0000000000600000 RDI: 0000200000000000 [ 508.100240][T10050] RBP: 00007ff1ca3f6090 R08: 0000000000000005 R09: 0000000000000000 [ 508.100253][T10050] R10: 0000000004012011 R11: 0000000000000246 R12: 0000000000000001 [ 508.100266][T10050] R13: 0000000000000000 R14: 00007ff1cc7b6080 R15: 00007fff4eec3b28 [ 508.100299][T10050] [ 509.601716][T10072] FAULT_INJECTION: forcing a failure. [ 509.601716][T10072] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 509.601753][T10072] CPU: 0 UID: 0 PID: 10072 Comm: syz.0.1037 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 509.601778][T10072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 509.601791][T10072] Call Trace: [ 509.601799][T10072] [ 509.601808][T10072] dump_stack_lvl+0x189/0x250 [ 509.601844][T10072] ? __pfx____ratelimit+0x10/0x10 [ 509.601877][T10072] ? __pfx_dump_stack_lvl+0x10/0x10 [ 509.601908][T10072] ? __pfx__printk+0x10/0x10 [ 509.601930][T10072] ? __might_fault+0xb0/0x130 [ 509.601968][T10072] should_fail_ex+0x414/0x560 [ 509.602001][T10072] _copy_from_user+0x2d/0xb0 [ 509.602024][T10072] ___sys_sendmsg+0x158/0x2a0 [ 509.602055][T10072] ? __pfx____sys_sendmsg+0x10/0x10 [ 509.602135][T10072] ? __fget_files+0x2a/0x420 [ 509.602160][T10072] ? __fget_files+0x3a0/0x420 [ 509.602197][T10072] __x64_sys_sendmsg+0x19b/0x260 [ 509.602226][T10072] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 509.602261][T10072] ? __pfx_ksys_write+0x10/0x10 [ 509.602299][T10072] ? rcu_is_watching+0x15/0xb0 [ 509.602337][T10072] ? do_syscall_64+0xbe/0x3b0 [ 509.602361][T10072] do_syscall_64+0xfa/0x3b0 [ 509.602379][T10072] ? lockdep_hardirqs_on+0x9c/0x150 [ 509.602411][T10072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.602432][T10072] ? clear_bhb_loop+0x60/0xb0 [ 509.602459][T10072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.602480][T10072] RIP: 0033:0x7ff1cc58e929 [ 509.602498][T10072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 509.602516][T10072] RSP: 002b:00007ff1cd324038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 509.602539][T10072] RAX: ffffffffffffffda RBX: 00007ff1cc7b5fa0 RCX: 00007ff1cc58e929 [ 509.602555][T10072] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000007 [ 509.602574][T10072] RBP: 00007ff1cd324090 R08: 0000000000000000 R09: 0000000000000000 [ 509.602588][T10072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 509.602600][T10072] R13: 0000000000000000 R14: 00007ff1cc7b5fa0 R15: 00007fff4eec3b28 [ 509.602635][T10072] [ 510.969091][T10088] xt_addrtype: ipv6 does not support BROADCAST matching [ 511.920892][T10097] FAULT_INJECTION: forcing a failure. [ 511.920892][T10097] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 511.920919][T10097] CPU: 1 UID: 0 PID: 10097 Comm: syz.3.1046 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 511.920938][T10097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 511.920947][T10097] Call Trace: [ 511.920952][T10097] [ 511.920958][T10097] dump_stack_lvl+0x189/0x250 [ 511.920986][T10097] ? __pfx____ratelimit+0x10/0x10 [ 511.921008][T10097] ? __pfx_dump_stack_lvl+0x10/0x10 [ 511.921031][T10097] ? __pfx__printk+0x10/0x10 [ 511.921046][T10097] ? __might_fault+0xb0/0x130 [ 511.921073][T10097] should_fail_ex+0x414/0x560 [ 511.921096][T10097] _copy_from_iter+0x1db/0x16f0 [ 511.921134][T10097] ? __lock_acquire+0xab9/0xd20 [ 511.921155][T10097] ? __pfx__copy_from_iter+0x10/0x10 [ 511.921185][T10097] ? page_copy_sane+0x4e/0x280 [ 511.921208][T10097] copy_page_from_iter+0xdd/0x170 [ 511.921235][T10097] tun_get_user+0x1c4d/0x3ce0 [ 511.921259][T10097] ? tun_get_user+0x693/0x3ce0 [ 511.921294][T10097] ? __pfx_tun_get_user+0x10/0x10 [ 511.921323][T10097] ? __lock_acquire+0xab9/0xd20 [ 511.921346][T10097] ? ref_tracker_alloc+0x318/0x460 [ 511.921365][T10097] ? __lock_acquire+0xab9/0xd20 [ 511.921386][T10097] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 511.921411][T10097] ? tun_get+0x1c/0x2f0 [ 511.921437][T10097] ? tun_get+0x1c/0x2f0 [ 511.921458][T10097] ? tun_get+0x1c/0x2f0 [ 511.921484][T10097] tun_chr_write_iter+0x113/0x200 [ 511.921508][T10097] vfs_write+0x548/0xa90 [ 511.921528][T10097] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 511.921551][T10097] ? __pfx_vfs_write+0x10/0x10 [ 511.921576][T10097] ? __fget_files+0x2a/0x420 [ 511.921603][T10097] ksys_write+0x145/0x250 [ 511.921642][T10097] ? __pfx_ksys_write+0x10/0x10 [ 511.921657][T10097] ? rcu_is_watching+0x15/0xb0 [ 511.921684][T10097] ? do_syscall_64+0xbe/0x3b0 [ 511.921702][T10097] do_syscall_64+0xfa/0x3b0 [ 511.921715][T10097] ? lockdep_hardirqs_on+0x9c/0x150 [ 511.921741][T10097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.921757][T10097] ? clear_bhb_loop+0x60/0xb0 [ 511.921775][T10097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.921790][T10097] RIP: 0033:0x7f287998d3df [ 511.921803][T10097] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 511.921816][T10097] RSP: 002b:00007f287a7c9000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 511.921832][T10097] RAX: ffffffffffffffda RBX: 00007f2879bb5fa0 RCX: 00007f287998d3df [ 511.921844][T10097] RDX: 000000000000005e RSI: 00002000000004c0 RDI: 00000000000000c8 [ 511.921854][T10097] RBP: 00007f287a7c9090 R08: 0000000000000000 R09: 0000000000000000 [ 511.921863][T10097] R10: 000000000000005e R11: 0000000000000293 R12: 0000000000000001 [ 511.921871][T10097] R13: 0000000000000000 R14: 00007f2879bb5fa0 R15: 00007ffcf27d0018 [ 511.921895][T10097] [ 517.611283][T10048] tty tty35: ldisc open failed (-12), clearing slot 34 [ 517.667864][T10112] tty tty1: ldisc open failed (-12), clearing slot 0 [ 517.961241][T10137] xt_addrtype: ipv6 does not support BROADCAST matching [ 521.842731][T10164] veth0_vlan: left promiscuous mode [ 521.856028][T10164] veth0_vlan: entered promiscuous mode [ 522.540390][T10163] xt_addrtype: ipv6 does not support BROADCAST matching [ 523.667081][T10177] XFS (nullb0): Invalid superblock magic number [ 523.992087][T10174] kvm: kvm [10173]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xfff800000000 [ 524.046602][T10174] kvm: kvm [10173]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 524.276512][ T5832] Bluetooth: hci4: command 0x0406 tx timeout [ 524.640051][T10209] tmpfs: Bad value for 'mpol' [ 525.370445][ T5995] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 525.617869][T10218] CIFS mount error: No usable UNC path provided in device string! [ 525.617869][T10218] [ 525.651647][ T5995] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 525.666713][T10218] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 525.801430][T10223] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 526.056671][ T5995] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.065544][ T5995] usb 1-1: Product: syz [ 526.072740][ T5995] usb 1-1: Manufacturer: syz [ 526.078291][ T5995] usb 1-1: SerialNumber: syz [ 526.091094][ T5995] usb 1-1: config 0 descriptor?? [ 526.349093][ T5995] hso 1-1:0.0: Failed to find INT IN ep [ 526.355968][ T5995] usb-storage 1-1:0.0: USB Mass Storage device detected [ 529.528277][ T5940] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 529.686663][ T5940] usb 3-1: Using ep0 maxpacket: 32 [ 529.723543][ T9359] usb 1-1: USB disconnect, device number 29 [ 529.730148][ T5940] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=66.3d [ 529.786395][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.829510][ T5940] usb 3-1: config 0 descriptor?? [ 529.871638][ T5940] cx82310_eth 3-1:0.0: probe with driver cx82310_eth failed with error -22 [ 529.951440][ T5940] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 529.966406][T10250] wg1 speed is unknown, defaulting to 1000 [ 530.162813][T10250] wg1 speed is unknown, defaulting to 1000 [ 530.190202][T10250] wg1 speed is unknown, defaulting to 1000 [ 531.010736][T10250] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 531.113835][T10250] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 531.283126][T10250] wg1 speed is unknown, defaulting to 1000 [ 531.308017][ T9359] usb 3-1: USB disconnect, device number 22 [ 531.311225][T10250] wg1 speed is unknown, defaulting to 1000 [ 531.358887][T10250] wg1 speed is unknown, defaulting to 1000 [ 531.384371][T10250] wg1 speed is unknown, defaulting to 1000 [ 531.393721][T10250] wg1 speed is unknown, defaulting to 1000 [ 531.403018][T10250] wg1 speed is unknown, defaulting to 1000 [ 531.637489][T10275] FAULT_INJECTION: forcing a failure. [ 531.637489][T10275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 531.788532][T10275] CPU: 1 UID: 0 PID: 10275 Comm: syz.3.1090 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 531.788556][T10275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 531.788567][T10275] Call Trace: [ 531.788573][T10275] [ 531.788580][T10275] dump_stack_lvl+0x189/0x250 [ 531.788609][T10275] ? __pfx____ratelimit+0x10/0x10 [ 531.788634][T10275] ? __pfx_dump_stack_lvl+0x10/0x10 [ 531.788657][T10275] ? __pfx__printk+0x10/0x10 [ 531.788674][T10275] ? __might_fault+0xb0/0x130 [ 531.788702][T10275] should_fail_ex+0x414/0x560 [ 531.788725][T10275] _copy_from_user+0x2d/0xb0 [ 531.788742][T10275] core_sys_select+0x4b7/0xa20 [ 531.788771][T10275] ? __pfx_core_sys_select+0x10/0x10 [ 531.788810][T10275] ? __pfx_set_user_sigmask+0x10/0x10 [ 531.788843][T10275] __se_sys_pselect6+0x27a/0x300 [ 531.788867][T10275] ? __pfx___se_sys_pselect6+0x10/0x10 [ 531.788887][T10275] ? __pfx_ksys_write+0x10/0x10 [ 531.788903][T10275] ? rcu_is_watching+0x15/0xb0 [ 531.788930][T10275] ? __x64_sys_pselect6+0x21/0xf0 [ 531.788952][T10275] do_syscall_64+0xfa/0x3b0 [ 531.788965][T10275] ? lockdep_hardirqs_on+0x9c/0x150 [ 531.788988][T10275] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.789003][T10275] ? clear_bhb_loop+0x60/0xb0 [ 531.789023][T10275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.789037][T10275] RIP: 0033:0x7f287998e929 [ 531.789051][T10275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 531.789065][T10275] RSP: 002b:00007f287a7c9038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 531.789081][T10275] RAX: ffffffffffffffda RBX: 00007f2879bb5fa0 RCX: 00007f287998e929 [ 531.789093][T10275] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 531.789103][T10275] RBP: 00007f287a7c9090 R08: 0000000000000000 R09: 0000000000000000 [ 531.789113][T10275] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 531.789123][T10275] R13: 0000000000000000 R14: 00007f2879bb5fa0 R15: 00007ffcf27d0018 [ 531.789146][T10275] [ 532.385963][T10287] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1095'. [ 532.537488][T10287] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 532.627304][ T5940] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 532.640341][T10290] kvm: kvm [10289]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xfff800000000 [ 532.823106][T10290] kvm: kvm [10289]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 533.578378][ T5995] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 533.586140][ T5940] usb 2-1: device descriptor read/64, error -71 [ 534.180648][ T5995] usb 1-1: config 16 interface 0 altsetting 75 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 534.232101][ T5995] usb 1-1: config 16 interface 0 has no altsetting 0 [ 534.256677][ T5940] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 534.276480][ T5995] usb 1-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a [ 534.312307][ T5995] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.426496][ T5940] usb 2-1: device descriptor read/64, error -71 [ 534.548479][ T5940] usb usb2-port1: attempt power cycle [ 535.009909][ T5940] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 535.017857][ T5995] usb 1-1: string descriptor 0 read error: -71 [ 535.055223][ T5995] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 535.088870][T10316] xt_CT: You must specify a L4 protocol and not use inversions on it [ 535.753135][ T5995] imon 1-1:16.0: unable to initialize intf0, err -19 [ 535.782142][ T5995] imon:imon_probe: failed to initialize context! [ 535.805985][ T5995] imon 1-1:16.0: unable to register, err -19 [ 535.834692][ T5995] usb 1-1: USB disconnect, device number 30 [ 536.736575][T10304] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 536.818081][ T5940] usb 2-1: device descriptor read/8, error -71 [ 536.899227][T10328] FAULT_INJECTION: forcing a failure. [ 536.899227][T10328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 536.923594][T10328] CPU: 1 UID: 0 PID: 10328 Comm: syz.7.1106 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 536.923630][T10328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 536.923643][T10328] Call Trace: [ 536.923652][T10328] [ 536.923662][T10328] dump_stack_lvl+0x189/0x250 [ 536.923699][T10328] ? __pfx____ratelimit+0x10/0x10 [ 536.923732][T10328] ? __pfx_dump_stack_lvl+0x10/0x10 [ 536.923765][T10328] ? __pfx__printk+0x10/0x10 [ 536.923788][T10328] ? __might_fault+0xb0/0x130 [ 536.923827][T10328] should_fail_ex+0x414/0x560 [ 536.923860][T10328] _copy_from_user+0x2d/0xb0 [ 536.923883][T10328] ___sys_sendmsg+0x158/0x2a0 [ 536.923916][T10328] ? __pfx____sys_sendmsg+0x10/0x10 [ 536.923994][T10328] ? __fget_files+0x2a/0x420 [ 536.924021][T10328] ? __fget_files+0x3a0/0x420 [ 536.924063][T10328] __x64_sys_sendmsg+0x19b/0x260 [ 536.924094][T10328] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 536.924134][T10328] ? __pfx_ksys_write+0x10/0x10 [ 536.924156][T10328] ? rcu_is_watching+0x15/0xb0 [ 536.924194][T10328] ? do_syscall_64+0xbe/0x3b0 [ 536.924219][T10328] do_syscall_64+0xfa/0x3b0 [ 536.924237][T10328] ? lockdep_hardirqs_on+0x9c/0x150 [ 536.924269][T10328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.924291][T10328] ? clear_bhb_loop+0x60/0xb0 [ 536.924318][T10328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.924339][T10328] RIP: 0033:0x7f949218e929 [ 536.924358][T10328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 536.924377][T10328] RSP: 002b:00007f9492f53038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 536.924400][T10328] RAX: ffffffffffffffda RBX: 00007f94923b5fa0 RCX: 00007f949218e929 [ 536.924416][T10328] RDX: 0000000000004000 RSI: 0000200000000480 RDI: 0000000000000003 [ 536.924431][T10328] RBP: 00007f9492f53090 R08: 0000000000000000 R09: 0000000000000000 [ 536.924444][T10328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 536.924457][T10328] R13: 0000000000000000 R14: 00007f94923b5fa0 R15: 00007ffe3f860d58 [ 536.924491][T10328] [ 536.987288][ T9359] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 537.058063][T10304] usb 3-1: Using ep0 maxpacket: 8 [ 537.228314][T10304] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 537.248507][T10304] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.325937][T10304] usb 3-1: config 0 descriptor?? [ 537.597224][ T9359] usb 1-1: Using ep0 maxpacket: 16 [ 537.615986][ T9359] usb 1-1: config 0 has an invalid descriptor of length 178, skipping remainder of the config [ 537.644836][ T9359] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 537.666395][ T9359] usb 1-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 537.728243][T10339] veth0_vlan: left promiscuous mode [ 537.736914][T10339] veth0_vlan: entered promiscuous mode [ 538.173047][ T9359] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.317301][ T9359] usb 1-1: config 0 descriptor?? [ 538.466551][T10343] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1110'. [ 538.728706][T10344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.747135][T10344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.804041][T10326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.813352][T10326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.828635][T10326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.837417][T10326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.233829][ T9359] usb 1-1: string descriptor 0 read error: -71 [ 540.270028][ T9359] usb 1-1: USB disconnect, device number 31 [ 540.770745][T10304] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 541.083957][T10304] asix 3-1:0.0: probe with driver asix failed with error -71 [ 541.497759][T10304] usb 3-1: USB disconnect, device number 23 [ 543.173464][T10366] veth0_vlan: left promiscuous mode [ 543.193567][T10366] veth0_vlan: entered promiscuous mode [ 543.308553][T10376] veth0_vlan: left promiscuous mode [ 543.325959][T10376] veth0_vlan: entered promiscuous mode [ 544.286708][T10304] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 544.546714][T10304] usb 3-1: Using ep0 maxpacket: 32 [ 544.569751][T10304] usb 3-1: unable to get BOS descriptor or descriptor too short [ 544.589012][T10304] usb 3-1: config index 0 descriptor too short (expected 34347, got 43) [ 544.611036][T10304] usb 3-1: config 31 has too many interfaces: 196, using maximum allowed: 32 [ 544.620909][T10304] usb 3-1: config 31 has an invalid descriptor of length 0, skipping remainder of the config [ 544.624257][T10394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1125'. [ 544.636906][T10304] usb 3-1: config 31 has 1 interface, different from the descriptor's value: 196 [ 544.655923][T10304] usb 3-1: config 31 has no interface number 0 [ 544.656547][T10394] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1125'. [ 544.665915][T10304] usb 3-1: config 31 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83 [ 544.713708][T10304] usb 3-1: config 31 interface 81 altsetting 3 endpoint 0x83 has invalid wMaxPacketSize 0 [ 544.725311][T10304] usb 3-1: config 31 interface 81 altsetting 3 bulk endpoint 0x83 has invalid maxpacket 0 [ 544.735760][T10304] usb 3-1: config 31 interface 81 has no altsetting 0 [ 544.759321][T10304] usb 3-1: string descriptor 0 read error: -22 [ 544.765680][T10304] usb 3-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 544.790058][T10304] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.837495][T10304] input: USB Touchscreen 0dfc:0001 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:31.81/input/input25 [ 546.060530][ T10] usb 3-1: USB disconnect, device number 24 [ 546.923396][ T30] audit: type=1326 audit(2000000078.450:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10407 comm="syz.0.1131" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff1cc58e929 code=0x0 [ 547.680717][T10416] FAULT_INJECTION: forcing a failure. [ 547.680717][T10416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.801477][T10418] veth0_vlan: left promiscuous mode [ 547.820989][T10418] veth0_vlan: entered promiscuous mode [ 548.146716][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 548.231098][T10416] CPU: 0 UID: 0 PID: 10416 Comm: syz.1.1133 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 548.231121][T10416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 548.231130][T10416] Call Trace: [ 548.231136][T10416] [ 548.231142][T10416] dump_stack_lvl+0x189/0x250 [ 548.231169][T10416] ? __pfx____ratelimit+0x10/0x10 [ 548.231192][T10416] ? __pfx_dump_stack_lvl+0x10/0x10 [ 548.231215][T10416] ? __pfx__printk+0x10/0x10 [ 548.231230][T10416] ? __might_fault+0xb0/0x130 [ 548.231257][T10416] should_fail_ex+0x414/0x560 [ 548.231281][T10416] _copy_from_user+0x2d/0xb0 [ 548.231296][T10416] ___sys_recvmsg+0x12e/0x510 [ 548.231322][T10416] ? __pfx____sys_recvmsg+0x10/0x10 [ 548.231361][T10416] ? __fget_files+0x3a0/0x420 [ 548.231389][T10416] do_recvmmsg+0x307/0x770 [ 548.231416][T10416] ? __pfx_do_recvmmsg+0x10/0x10 [ 548.231446][T10416] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 548.231484][T10416] __x64_sys_recvmmsg+0x190/0x240 [ 548.231507][T10416] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 548.231526][T10416] ? rcu_is_watching+0x15/0xb0 [ 548.231552][T10416] ? do_syscall_64+0xbe/0x3b0 [ 548.231569][T10416] do_syscall_64+0xfa/0x3b0 [ 548.231581][T10416] ? lockdep_hardirqs_on+0x9c/0x150 [ 548.231603][T10416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.231618][T10416] ? clear_bhb_loop+0x60/0xb0 [ 548.231636][T10416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.231651][T10416] RIP: 0033:0x7fa9a078e929 [ 548.231664][T10416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 548.231677][T10416] RSP: 002b:00007fa9a1518038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 548.231693][T10416] RAX: ffffffffffffffda RBX: 00007fa9a09b5fa0 RCX: 00007fa9a078e929 [ 548.231704][T10416] RDX: 0000000000000008 RSI: 0000200000002c00 RDI: 0000000000000003 [ 548.231713][T10416] RBP: 00007fa9a1518090 R08: 0000000000000000 R09: 0000000000000000 [ 548.231723][T10416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.231731][T10416] R13: 0000000000000000 R14: 00007fa9a09b5fa0 R15: 00007ffe43d958d8 [ 548.231761][T10416] [ 550.061793][T10431] veth0_vlan: left promiscuous mode [ 550.075155][T10431] veth0_vlan: entered promiscuous mode [ 550.865074][T10436] CIFS mount error: No usable UNC path provided in device string! [ 550.865074][T10436] [ 550.882945][T10436] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 552.759130][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 552.760497][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.771654][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 552.783637][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.795521][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 552.807838][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.819533][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 552.831563][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.843324][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 552.855453][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 556.106059][ C1] sched: DL replenish lagged too much [ 557.766346][ C1] net_ratelimit: 23399 callbacks suppressed [ 557.766370][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.766458][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 557.772766][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.784811][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 557.796968][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.808848][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 557.820755][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.832864][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 557.844900][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.856862][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 562.776432][ C1] net_ratelimit: 15902 callbacks suppressed [ 562.776455][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.777297][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 562.782756][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.794921][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 562.806875][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.819795][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 562.830763][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.842881][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 562.854842][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.867618][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 563.169403][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.190670][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.786458][ C1] net_ratelimit: 14800 callbacks suppressed [ 567.786481][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.787698][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 567.792894][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.805029][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 567.817135][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.829941][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 567.840803][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.853042][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 567.864940][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.877824][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 572.796502][ C1] net_ratelimit: 14473 callbacks suppressed [ 572.796523][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.796543][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 572.802922][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.816243][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 572.826976][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.838928][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 572.850845][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.864326][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 572.874988][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.886857][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 577.806566][ C1] net_ratelimit: 15401 callbacks suppressed [ 577.806589][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.807458][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 577.813166][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.825235][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 577.837221][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.849996][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 577.860908][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.873032][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 577.884988][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.897896][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 582.816553][ C1] net_ratelimit: 15356 callbacks suppressed [ 582.816576][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.817257][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 582.822994][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.835070][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 582.847373][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.860118][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 582.871103][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.883210][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 582.895142][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.908072][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 587.826417][ C1] net_ratelimit: 16623 callbacks suppressed [ 587.826440][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.826749][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 587.832819][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.846240][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 587.857139][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.869063][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 587.880911][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.894179][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 587.905109][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.916965][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 592.836594][ C0] net_ratelimit: 14968 callbacks suppressed [ 592.836616][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 592.836722][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.844511][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 592.855131][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.867361][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 592.879153][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.892289][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 592.903009][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.915311][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 592.927120][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.846479][ C1] net_ratelimit: 17003 callbacks suppressed [ 597.846502][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.847537][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 597.852842][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.865048][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 597.876896][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.889820][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 597.900577][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.912837][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 597.924700][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.937680][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 602.856530][ C0] net_ratelimit: 16801 callbacks suppressed [ 602.856555][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 602.856658][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.865337][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 602.875051][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.887185][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 602.899031][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.912097][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 602.922792][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.934985][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 602.946811][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 607.866400][ C1] net_ratelimit: 16860 callbacks suppressed [ 607.866418][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 607.866423][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 607.866932][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 607.873914][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 607.885105][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 607.896997][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 607.908900][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 607.921690][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 607.932927][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 607.944773][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 612.876480][ C1] net_ratelimit: 14575 callbacks suppressed [ 612.876505][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 612.877145][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 612.882825][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 612.895019][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 612.906909][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 612.920709][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 612.930688][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 612.942809][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 612.954702][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 612.967680][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 617.886457][ C1] net_ratelimit: 14694 callbacks suppressed [ 617.886480][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 617.886679][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 617.892775][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 617.905011][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 617.916895][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 617.929652][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 617.940610][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 617.952762][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 617.964664][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 617.977557][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 622.896310][ C1] net_ratelimit: 17102 callbacks suppressed [ 622.896333][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.896702][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 622.902689][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.914858][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 622.926809][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.939770][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 622.950506][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.962758][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 622.974713][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.987829][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 624.718924][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 626.188084][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.906488][ C0] net_ratelimit: 15600 callbacks suppressed [ 627.906512][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 627.906604][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 627.914032][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 627.925003][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 627.936904][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 627.948685][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 627.961667][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 627.972878][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 627.984846][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 627.996780][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 632.916302][ C1] net_ratelimit: 17293 callbacks suppressed [ 632.916323][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 632.916634][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 632.922788][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 632.934817][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 632.946516][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 632.959555][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 632.970800][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 632.982857][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 632.994621][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 633.007710][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 637.926590][ C1] net_ratelimit: 17463 callbacks suppressed [ 637.926612][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 637.927118][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 637.932892][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 637.945112][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 637.957503][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 637.970330][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 637.981258][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 637.993432][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 638.005302][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 638.018399][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 642.936423][ C1] net_ratelimit: 17535 callbacks suppressed [ 642.936460][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 642.937378][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 642.942878][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 642.954940][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 642.966597][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 642.979979][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 642.990810][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.002915][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 643.014588][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.027940][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 647.946476][ C1] net_ratelimit: 17935 callbacks suppressed [ 647.946499][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 647.946639][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 647.952828][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 647.965040][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 647.977002][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 647.989882][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 648.000809][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.012962][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 648.024833][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.037708][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 652.956453][ C1] net_ratelimit: 17253 callbacks suppressed [ 652.956477][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.956984][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 652.962945][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.974911][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 652.986667][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.999734][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 653.010891][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.022741][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 653.034556][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.047596][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 657.966966][ C1] net_ratelimit: 17243 callbacks suppressed [ 657.966988][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.967055][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 657.973427][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.985620][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 657.997490][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.010491][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 658.021269][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.033439][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 658.045328][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.058312][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 662.976364][ C1] net_ratelimit: 15225 callbacks suppressed [ 662.976386][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.976575][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 662.982944][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.995010][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 663.006665][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.019591][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 663.030745][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.042696][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 663.054556][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.067570][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 667.986664][ C1] net_ratelimit: 14380 callbacks suppressed [ 667.986688][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 667.986707][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 667.993211][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.005036][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 668.016801][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.029870][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 668.040956][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.052787][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 668.064631][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.077560][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 672.996527][ C1] net_ratelimit: 16998 callbacks suppressed [ 672.996552][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 672.997435][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 673.003008][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.014951][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 673.026674][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.039740][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 673.050790][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.062737][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 673.074520][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.087753][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 678.006398][ C0] net_ratelimit: 17428 callbacks suppressed [ 678.006409][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 678.006421][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 678.012752][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 678.025931][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 678.036926][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 678.048866][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 678.060605][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 678.073812][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 678.084772][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 678.098122][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 683.016460][ C1] net_ratelimit: 16138 callbacks suppressed [ 683.016485][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.017639][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 683.022929][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.034911][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 683.046640][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.059867][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 683.070786][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.082802][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 683.094487][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.107791][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 688.026314][ C0] net_ratelimit: 15600 callbacks suppressed [ 688.026335][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 688.026456][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 688.033702][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 688.044650][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 688.056866][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 688.068725][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 688.081613][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 688.092528][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 688.104682][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 688.116660][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 693.036711][ C1] net_ratelimit: 14247 callbacks suppressed [ 693.036723][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 693.036734][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 693.037085][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 693.043241][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 693.055135][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 693.068120][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 693.078920][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 693.091066][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 693.103034][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 693.116008][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 696.676141][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 696.695944][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 698.046604][ C1] net_ratelimit: 15946 callbacks suppressed [ 698.046628][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 698.047370][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 698.052922][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 698.065099][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 698.077076][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 698.089823][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 698.100874][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 698.112984][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 698.124939][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 698.137724][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 703.056690][ C1] net_ratelimit: 17360 callbacks suppressed [ 703.056713][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 703.057176][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 703.063071][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 703.075239][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 703.087460][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 703.100431][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 703.111238][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 703.123430][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 703.135294][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 703.148469][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 708.066549][ C1] net_ratelimit: 17010 callbacks suppressed [ 708.066573][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 708.067276][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 708.072884][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 708.085136][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 708.097045][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 708.109778][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 708.120834][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 708.133013][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 708.144957][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 708.157652][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 713.076717][ C1] net_ratelimit: 14660 callbacks suppressed [ 713.076743][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 713.077057][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 713.083059][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 713.095231][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 713.107206][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 713.119972][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 713.130894][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 713.143009][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 713.154948][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 713.167716][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 718.086381][ C1] net_ratelimit: 14642 callbacks suppressed [ 718.086404][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 718.086505][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 718.092871][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 718.105864][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 718.116739][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 718.128843][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 718.140731][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 718.153535][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 718.164541][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 718.176649][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 723.096391][ C1] net_ratelimit: 14663 callbacks suppressed [ 723.096415][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 723.097796][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 723.103000][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 723.114983][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 723.126694][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 723.139859][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 723.150859][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 723.162729][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 723.174552][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 723.187476][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 728.106502][ C1] net_ratelimit: 14651 callbacks suppressed [ 728.106524][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 728.106573][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 728.112836][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 728.125021][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 728.136964][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 728.149829][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 728.160703][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 728.172791][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 728.184817][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 728.197693][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 733.116379][ C1] net_ratelimit: 14578 callbacks suppressed [ 733.116404][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 733.117443][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 733.122874][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 733.135094][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 733.147023][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 733.159916][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 733.170881][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 733.183472][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 733.194972][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 733.207748][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 738.126420][ C1] net_ratelimit: 14708 callbacks suppressed [ 738.126443][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 738.127044][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 738.132840][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 738.145087][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 738.157000][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 738.169743][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 738.180791][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 738.192912][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 738.204930][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 738.217804][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 743.136331][ C0] net_ratelimit: 14536 callbacks suppressed [ 743.136361][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 743.136420][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 743.144992][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 743.154902][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 743.166899][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 743.178656][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 743.191680][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 743.202874][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 743.214721][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 743.226599][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 748.146346][ C1] net_ratelimit: 14598 callbacks suppressed [ 748.146370][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 748.147915][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 748.152677][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 748.164899][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 748.176776][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 748.189611][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 748.200554][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 748.212629][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 748.224595][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 748.237350][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 753.156432][ C1] net_ratelimit: 14418 callbacks suppressed [ 753.156455][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 753.156590][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 753.162996][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 753.175785][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 753.186787][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 753.199058][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 753.211055][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 753.223811][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 753.234844][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 753.246879][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 758.166461][ C1] net_ratelimit: 14528 callbacks suppressed [ 758.166482][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 758.167369][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 758.172935][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 758.185101][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 758.197040][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 758.209835][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 758.220738][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 758.233060][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 758.244955][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 758.257815][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 759.716242][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 759.723242][ C0] rcu: (detected by 0, t=10502 jiffies, g=37401, q=306 ncpus=2) [ 759.730973][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 5795 (4295013081-4295007286), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 759.744287][ C0] rcu: rcu_preempt kthread starved for 5796 jiffies! g37401 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 759.755407][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 759.765393][ C0] rcu: RCU grace-period kthread stack dump: [ 759.771293][ C0] task:rcu_preempt state:R running task stack:27128 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 759.784823][ C0] Call Trace: [ 759.788125][ C0] [ 759.791091][ C0] __schedule+0x16a2/0x4cb0 [ 759.795656][ C0] ? schedule+0x165/0x360 [ 759.800024][ C0] ? __pfx___schedule+0x10/0x10 [ 759.804918][ C0] ? schedule+0x91/0x360 [ 759.809186][ C0] schedule+0x165/0x360 [ 759.813382][ C0] schedule_timeout+0x12b/0x270 [ 759.818274][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 759.823676][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 759.829594][ C0] ? __pfx_process_timeout+0x10/0x10 [ 759.834946][ C0] ? prepare_to_swait_event+0x341/0x380 [ 759.840544][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 759.845420][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 759.851600][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 759.856927][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 759.862168][ C0] ? finish_swait+0xcd/0x1f0 [ 759.866780][ C0] rcu_gp_kthread+0x99/0x390 [ 759.871416][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 759.876661][ C0] ? __kthread_parkme+0x7b/0x200 [ 759.881639][ C0] ? __kthread_parkme+0x1a1/0x200 [ 759.886723][ C0] kthread+0x70e/0x8a0 [ 759.890845][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 759.896122][ C0] ? __pfx_kthread+0x10/0x10 [ 759.900762][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 759.905994][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 759.911226][ C0] ? __pfx_kthread+0x10/0x10 [ 759.915851][ C0] ret_from_fork+0x3fc/0x770 [ 759.920489][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 759.925643][ C0] ? __switch_to_asm+0x39/0x70 [ 759.930464][ C0] ? __switch_to_asm+0x33/0x70 [ 759.935284][ C0] ? __pfx_kthread+0x10/0x10 [ 759.939913][ C0] ret_from_fork_asm+0x1a/0x30 [ 759.944730][ C0] [ 759.947773][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 759.954145][ C0] Sending NMI from CPU 0 to CPUs 1: [ 759.959396][ C1] NMI backtrace for cpu 1 [ 759.959412][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 759.959433][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 759.959444][ C1] RIP: 0010:unwind_next_frame+0x12d6/0x2390 [ 759.959476][ C1] Code: 8b 7c 24 18 e8 fb fa ae 00 48 8b 44 24 18 48 8b 10 48 c7 c7 00 3a 88 8b 89 de e8 b5 eb b4 ff e9 43 06 00 00 49 89 d5 48 89 d5 <48> 89 d8 48 29 e8 48 89 c1 48 c1 f9 02 48 c1 e8 3f 48 01 c8 48 83 [ 759.959491][ C1] RSP: 0018:ffffc90000a078d8 EFLAGS: 00000283 [ 759.959508][ C1] RAX: ffffffff900ca804 RBX: ffffffff900ca804 RCX: ffffffff900ca80c [ 759.959522][ C1] RDX: ffffffff900ca7f8 RSI: ffffffff90b461c6 RDI: ffffffff8be1b320 [ 759.959535][ C1] RBP: ffffffff900ca7f8 R08: 0000000000000009 R09: ffffffff81728de5 [ 759.959547][ C1] R10: ffffc90000a079f8 R11: ffffffff81ace8a0 R12: ffffffff89498831 [ 759.959560][ C1] R13: ffffffff900ca7f8 R14: ffffc90000a079a8 R15: ffffffff900ca808 [ 759.959574][ C1] FS: 0000000000000000(0000) GS:ffff888125d84000(0000) knlGS:0000000000000000 [ 759.959588][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 759.959600][ C1] CR2: 0000200000032000 CR3: 00000000674b8000 CR4: 00000000003526f0 [ 759.959615][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 759.959626][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 759.959637][ C1] Call Trace: [ 759.959643][ C1] [ 759.959655][ C1] ? unwind_next_frame+0xa5/0x2390 [ 759.959681][ C1] ? __netif_receive_skb+0x72/0x380 [ 759.959713][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 759.959738][ C1] arch_stack_walk+0x11c/0x150 [ 759.959787][ C1] ? __netif_receive_skb+0x72/0x380 [ 759.959806][ C1] stack_trace_save+0x9c/0xe0 [ 759.959824][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 759.959845][ C1] ? __lock_acquire+0xab9/0xd20 [ 759.959873][ C1] kasan_save_track+0x3e/0x80 [ 759.959892][ C1] ? kasan_save_track+0x3e/0x80 [ 759.959910][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 759.959930][ C1] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 759.959950][ C1] ? skb_ext_add+0x1b6/0x8f0 [ 759.959971][ C1] ? br_nf_forward_ip+0xc6/0x7e0 [ 759.959992][ C1] ? nf_hook_slow+0xc2/0x220 [ 759.960011][ C1] ? NF_HOOK+0x215/0x3c0 [ 759.960026][ C1] ? __br_forward+0x41e/0x600 [ 759.960041][ C1] ? maybe_deliver+0xb5/0x160 [ 759.960057][ C1] ? br_flood+0x31a/0x6a0 [ 759.960071][ C1] ? br_handle_frame_finish+0x14b4/0x19b0 [ 759.960091][ C1] ? br_nf_hook_thresh+0x3c6/0x4a0 [ 759.960110][ C1] ? br_nf_pre_routing_finish_ipv6+0x948/0xd00 [ 759.960133][ C1] ? br_nf_pre_routing_ipv6+0x37e/0x6b0 [ 759.960154][ C1] ? br_handle_frame+0x97f/0x14c0 [ 759.960173][ C1] ? __netif_receive_skb_core+0x10de/0x4180 [ 759.960201][ C1] ? __netif_receive_skb+0x72/0x380 [ 759.960241][ C1] ? net_generic+0x1e/0x240 [ 759.960261][ C1] __kasan_slab_alloc+0x6c/0x80 [ 759.960284][ C1] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 759.960305][ C1] ? skb_ext_add+0x1b6/0x8f0 [ 759.960330][ C1] skb_ext_add+0x1b6/0x8f0 [ 759.960358][ C1] br_nf_forward_ip+0xc6/0x7e0 [ 759.960381][ C1] ? __pfx_br_nf_forward+0x10/0x10 [ 759.960402][ C1] nf_hook_slow+0xc2/0x220 [ 759.960423][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 759.960440][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 759.960457][ C1] NF_HOOK+0x215/0x3c0 [ 759.960475][ C1] ? NF_HOOK+0x9e/0x3c0 [ 759.960491][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 759.960509][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 759.960533][ C1] __br_forward+0x41e/0x600 [ 759.960549][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 759.960570][ C1] ? __pfx___br_forward+0x10/0x10 [ 759.960590][ C1] ? skb_clone+0x246/0x3a0 [ 759.960617][ C1] maybe_deliver+0xb5/0x160 [ 759.960637][ C1] br_flood+0x31a/0x6a0 [ 759.960660][ C1] br_handle_frame_finish+0x14b4/0x19b0 [ 759.960690][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 759.960717][ C1] ? ip6t_do_table+0x1db/0x1550 [ 759.960750][ C1] ? nf_hook_slow+0x176/0x220 [ 759.960771][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 759.960791][ C1] br_nf_hook_thresh+0x3c6/0x4a0 [ 759.960817][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 759.960838][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 759.960857][ C1] ? nf_nat_ipv6_in+0x1fc/0x2b0 [ 759.960880][ C1] br_nf_pre_routing_finish_ipv6+0x948/0xd00 [ 759.960902][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 759.960928][ C1] ? br_nf_pre_routing_ipv6+0x42f/0x6b0 [ 759.960950][ C1] br_nf_pre_routing_ipv6+0x37e/0x6b0 [ 759.960975][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 759.961000][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 759.961022][ C1] ? br_nf_pre_routing+0x720/0x1470 [ 759.961058][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 759.961077][ C1] br_handle_frame+0x97f/0x14c0 [ 759.961102][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 759.961124][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 759.961148][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 759.961169][ C1] __netif_receive_skb_core+0x10de/0x4180 [ 759.961199][ C1] ? ip6_mc_input+0x9c3/0xbe0 [ 759.961223][ C1] ? kmem_cache_free+0x18f/0x400 [ 759.961247][ C1] ? ip6_mc_input+0x9c3/0xbe0 [ 759.961280][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 759.961316][ C1] ? __lock_acquire+0xab9/0xd20 [ 759.961342][ C1] ? process_backlog+0x2d5/0x14f0 [ 759.961361][ C1] ? process_backlog+0x2d5/0x14f0 [ 759.961382][ C1] __netif_receive_skb+0x72/0x380 [ 759.961399][ C1] ? process_backlog+0x2d5/0x14f0 [ 759.961418][ C1] process_backlog+0x60e/0x14f0 [ 759.961435][ C1] ? __lock_acquire+0xab9/0xd20 [ 759.961466][ C1] ? __pfx_process_backlog+0x10/0x10 [ 759.961490][ C1] __napi_poll+0xc4/0x480 [ 759.961504][ C1] ? net_rx_action+0x46d/0xe30 [ 759.961524][ C1] net_rx_action+0x707/0xe30 [ 759.961541][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 759.961576][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 759.961616][ C1] handle_softirqs+0x286/0x870 [ 759.961644][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 759.961672][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 759.961699][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 759.961721][ C1] __irq_exit_rcu+0xca/0x1f0 [ 759.961753][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 759.961784][ C1] irq_exit_rcu+0x9/0x30 [ 759.961806][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 759.961832][ C1] [ 759.961838][ C1] [ 759.961845][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 759.961864][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 759.961889][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 05 29 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 759.961905][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 759.961919][ C1] RAX: 1ed211e39ccbb800 RBX: ffffffff81974f68 RCX: 1ed211e39ccbb800 [ 759.961932][ C1] RDX: 0000000000000001 RSI: ffffffff8d96e035 RDI: ffffffff8be1b380 [ 759.961945][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb [ 759.961958][ C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8f9fe5f0 [ 759.961971][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a52b40 [ 759.961986][ C1] ? do_idle+0x1e8/0x510 [ 759.962018][ C1] default_idle+0x13/0x20 [ 759.962034][ C1] default_idle_call+0x74/0xb0 [ 759.962052][ C1] do_idle+0x1e8/0x510 [ 759.962080][ C1] ? __pfx_do_idle+0x10/0x10 [ 759.962104][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 759.962140][ C1] cpu_startup_entry+0x44/0x60 [ 759.962166][ C1] start_secondary+0x101/0x110 [ 759.962186][ C1] common_startup_64+0x13e/0x147 [ 759.962214][ C1] [ 763.176452][ C1] net_ratelimit: 13499 callbacks suppressed [ 763.176473][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 763.177505][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 763.182982][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 763.195078][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 763.206813][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 763.220038][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 763.230904][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 763.243029][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 763.254744][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 763.267898][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 768.186342][ C1] net_ratelimit: 14115 callbacks suppressed [ 768.186364][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 768.186914][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 768.192796][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 768.205079][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 768.216858][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 768.230040][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 768.240884][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 768.253022][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:84:dc:88:ca:e3, vlan:0) [ 768.264855][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 768.277866][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)