last executing test programs: 25.479782319s ago: executing program 2 (id=288): syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) socket$inet6(0xa, 0x400000000001, 0x0) open(&(0x7f00000000c0)='.\x00', 0x800, 0xd0) socket(0x2, 0x80805, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x2000200) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x5, 0xfffffffffffffffc, 0x0, 0x2, 0x8000000000000001, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x9, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x1c, 0x5, 0x3, 0x2, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x1, 0x7ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1]}) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) recvmsg$qrtr(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/147, 0x93}, {&(0x7f00000002c0)=""/4096, 0x1000}], 0x2, &(0x7f00000012c0)=[{0x9c, 0x0, 0x0, ""/144}, {0x94, 0x0, 0x0, ""/133}, {0x4c, 0x0, 0x0, ""/62}, {0xac, 0x0, 0x0, ""/157}, {0x78, 0x0, 0x0, ""/107}, {0x108, 0x0, 0x0, ""/252}, {0x1c, 0x0, 0x0, ""/13}, {0x100c, 0x0, 0x0, ""/4096}], 0x13d0, 0x20}, 0x1c, 0x40000100) openat$mice(0xffffffffffffff9c, &(0x7f0000000280), 0x109001) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') socket$inet6_udp(0xa, 0x2, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000"], 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000280)={&(0x7f0000000600)=[{0x208, 0x4000, 0x0, 0x0}], 0x1}) ioctl$I2C_SLAVE_FORCE(r6, 0x706, 0x3dd) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000b00)=0x5) ioctl$SOUND_MIXER_WRITE_RECSRC(r7, 0xc0044dff, &(0x7f0000000080)=0x3ff) ioctl$SOUND_MIXER_WRITE_RECSRC(r7, 0xc0044dff, &(0x7f0000000100)=0x4) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) 23.926546942s ago: executing program 1 (id=296): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)) r1 = inotify_init() readv(r1, &(0x7f0000000140)=[{&(0x7f0000000340)=""/263, 0x107}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setstatus(r1, 0x4, 0x42800) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80803, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) pselect6(0x40, &(0x7f0000000240)={0x6, 0x4, 0x100000000, 0x10, 0x3ff, 0xfffffffffffffff9, 0x0, 0x9}, &(0x7f00000002c0)={0xd9, 0x7ff, 0x9, 0x4, 0x1, 0x0, 0x7, 0x8000000000000000}, &(0x7f0000000500)={0xd, 0x1ff, 0xe, 0x8, 0x8, 0x2, 0x7f, 0x2}, &(0x7f0000000540)={0x0, 0x989680}, &(0x7f00000005c0)={&(0x7f0000000580)={[0x2, 0xfffffffc]}, 0x8}) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) connect$unix(r4, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) write(r3, 0x0, 0x0) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000200)={0x24, &(0x7f0000000080)={0x20, 0xa, 0x9, {0x9, 0x9, "0dd5caa8776609"}}, 0x0, 0x0, 0x0}, 0x0) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000480)={0x0, 0xfb, 0x73, 0xe, 0x5, "3b6863470a7c6029b5fca28e0bf8729d", "429869fe3ca52484dd51485f0d16add2d7e91201502359137b1f80346df073ebe558c51585f35a1d118315b18ad3664f5fd4548adf26f50eb79d07da80592f815e66be48a0d130b16fdaf52db6cb65f0f8690f53f3c6fc646e66c4527155"}, 0x73, 0x2) 22.315645694s ago: executing program 2 (id=300): r0 = socket$inet6(0xa, 0x80002, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafc0d8c560a8447608004", 0x16}], 0x1) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9beb01031800000000000000000000008000000002"], 0x0, 0x1a}, 0x28) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) connect$inet6(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x10, @scatter={0x0, 0xcc, 0x0}, &(0x7f0000000240)="a28d7acf0800", 0x0, 0x0, 0x0, 0xffffffff, 0x0}) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x9, 0x48000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) fsync(0xffffffffffffffff) clock_adjtime(0xffffffd3, &(0x7f0000000340)) r5 = landlock_create_ruleset(&(0x7f0000000000)={0x25, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000080)={0x12}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) 20.668290325s ago: executing program 1 (id=304): pipe(0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001d000724ab09254ec1", 0xd) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000c80), 0x0, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0xde}], 0x5}, 0x96) 20.333736098s ago: executing program 2 (id=306): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000001c0)=0x3) ioctl$PPPIOCGIDLE(r1, 0x541b, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000010900020073797a310000000008000440040002000900010073797a30000000000800034000000004"], 0x64}}, 0x0) 19.931419252s ago: executing program 2 (id=307): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x21) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x8000000000000001) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) connect$unix(r4, &(0x7f00000011c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x4, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x4, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r6) r7 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x800) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000500)=0xfffffffc, 0x4) setsockopt$sock_linger(r8, 0x1, 0xd, 0x0, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0xfffd, @local}, 0x10) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r7, 0x80dc5521, &(0x7f00000001c0)=""/4096) r9 = syz_open_dev$swradio(0x0, 0x1, 0x2) ioctl$VIDIOC_QUERYCTRL(r9, 0xc0445624, &(0x7f0000000040)={0x8098f908, 0x0, "60055808889f90ac0600000500fdfd9ab67e1db9c9a431078d40f722e600"}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0x6a9f0eede9332711}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) 19.822969666s ago: executing program 3 (id=308): ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000580)={0x0, 0x80, 0x0, &(0x7f0000000180)=[0x6bd1a312, 0x2ec66, 0xc, 0x8, 0x7, 0x800000000000008, 0x0, 0x1, 0x10000, 0x100, 0x9004, 0x40000000000000, 0x3, 0x5, 0x5, 0x49, 0x3ff, 0x2, 0x0, 0xb, 0x8000000008, 0x40, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0xffffffff, 0xffffffff00000000, 0xe, 0x1, 0x7, 0x23b, 0x3, 0x2, 0x888f, 0x8, 0x8, 0x6, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x5c3e, 0x400, 0x1, 0x5, 0xfffffffffffffff7, 0x1, 0xe, 0x7, 0x4, 0x100000000, 0x200000000000101, 0x5, 0x9, 0x1000000000066, 0x6, 0x7, 0x40000005, 0xbffffffeffffffff, 0xa, 0x5, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x7, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x9, 0x4, 0x6, 0xab6, 0x0, 0x4, 0xfff, 0xffffffffffffff81, 0x9, 0xff, 0x8, 0xff8, 0x5, 0x400000000008061d, 0x6, 0x8, 0xf6, 0x7, 0x6, 0x200, 0x7, 0xe53e, 0x2c, 0x2, 0x2293332f, 0x6, 0x5, 0x40000000000, 0xd, 0x2, 0x5, 0x2, 0x2, 0x6, 0x81, 0xfffd, 0x10, 0x8, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0x3ffc00000, 0x8, 0x5]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19.572147502s ago: executing program 1 (id=309): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000300)={0x0, 0x0, 0x80000}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r2, r3], 0x2}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x882, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0xfffffffffffffd6b) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f000000cffc)=0x2, 0xa, 0x100000, 0x0, 0x0, 0x3000000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r11, @ANYBLOB="140004006e854467e446024e7000000000000000080005000a000000"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x2400c890) 18.748641345s ago: executing program 3 (id=313): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="17090010000000000000010000000500070000000000080009000000000008000a0000080000060002000000000014001f00000000000000000000000000000000001400200000000000000000000000ffffac1414bb06001b004e230000050021"], 0x6c}}, 0x0) (fail_nth: 8) 18.742559809s ago: executing program 0 (id=314): openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40000000010205000000000000000000020000002c0002801400018008000100ac1414aa08000200ac1414bb06000340000000000c000280040001"], 0x40}}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x2, 0x0, 0x3, 0xfffffffdffffffff, 0x100000008, 0x0, 0x2}, 0x0) io_setup(0x8, &(0x7f0000000040)=0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x3, "421ae3753785259249154c944c28ad063ff47d3bd7a8a45d6bb4c78a3ab4c981"}) io_submit(r3, 0x1, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0xfffffffffffffff8}]) ioctl$SW_SYNC_IOC_INC(r4, 0x40045701, &(0x7f0000000080)=0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) syz_open_dev$usbfs(&(0x7f0000000140), 0xee6, 0x101301) socket$nl_sock_diag(0x10, 0x3, 0x4) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0xfd}, 0x18) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private}, 0x10) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000380)='./file0\x00') unshare(0x60040400) 17.460033293s ago: executing program 3 (id=315): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee6, 0x0, 0x2, 0x30b}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) (async) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000000200)) r9 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40081}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 16.940824008s ago: executing program 2 (id=316): r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socket(0x2c, 0x3, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) syz_usb_connect(0x6, 0x3b, &(0x7f0000000100)=ANY=[], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000001540), 0x1, 0x1800) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r5, 0x80084121, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x1, 0x2, 0x1, 0xfdfdffff, 0x6}) 16.552238201s ago: executing program 3 (id=318): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r1, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000800)="3aae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dea658eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc7158", 0x283}, {&(0x7f0000000bc0)="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", 0x1e6}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df70e1607d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e", 0x9f}, {&(0x7f0000000200)="f610e61fc81cc3edc86f0500194d27a5a42cf1880b0dfd1ecda0fd0ed9", 0x1d}, {&(0x7f0000000140)="008e1d620ca7ea7fef26a8545ddd6173b62d035595c38060085344d20414858b2881f1ff5d721e934ca5bcd0", 0x2c}], 0x5, 0x0, 0x0, 0x900}}], 0x2, 0x0) 16.104610104s ago: executing program 1 (id=319): pipe(0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001d000724ab09254ec1", 0xd) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0xde}], 0x5}, 0x96) 15.867074558s ago: executing program 3 (id=320): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30}, [@jmp={0x5, 0x1, 0x5, 0x9, 0x6, 0x8, 0x10}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000140), &(0x7f0000001300)=0x4) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_root(0xffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, r2, 0x3, 0x0, @void}, 0x10) 15.528508244s ago: executing program 0 (id=322): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000200)={r2, 0xfffe, 0x20}, &(0x7f00000001c0)=0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = epoll_create1(0x0) r4 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000000), 0x40080, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {r5}}, './file0\x00'}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}) write$sndseq(r6, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x95ffffff]}}], 0xffc8) epoll_wait(r3, &(0x7f0000000140)=[{}], 0x1, 0x1000) pivot_root(0x0, 0x0) 14.976170749s ago: executing program 1 (id=323): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001a000100000000000000000002000000ef0000000000000008000100e000000108000308c6a7e3ad4bf07fd924e6289e7e01e2b048b93d6878a42b8338de74e5fb51042f", @ANYRES32], 0x34}}, 0x400c840) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x3, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904800000ff"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="2018020000009a3307bc084580161ed5bc31f5d61eeaab5db648a19675442820de39c449db96d5c8c40635445acb0f3370a4a89ff6b6db5bb6e24ed85f74301cd8f734f4f07c016faa9556945a536af04c86ab35f3993f85d84a9457fce6db62bebf6673515f481f57599c6f5935fbcb00705281c322fa7c3d70570fcbad8d1fd80e7ae8cea875b65e29893d04161211a8e6995a35b08cd93ade7b6a43d6f99278c065c8037d"], 0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000440)) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) 14.455700581s ago: executing program 4 (id=325): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x10102) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0xa928, 0x40}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000080)={0x3, r2, 0x401, 0xfffffffb, 0xa, 0x809, 0x6}) r3 = semget$private(0x0, 0x0, 0x609) semctl$SEM_STAT(r3, 0x2, 0x12, &(0x7f0000000480)=""/174) socket(0x10, 0x0, 0x7ff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) r6 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000000)={r6}) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r7, 0xc0cc5640, &(0x7f00000002c0)={0x9, @raw_data="0c208dd0f4abb3db4f4b879d67d68f67131b51a9957e2e59a1792fa60e00018303150d5c51746de08ffa708ef04a14c5babcce8e25c834211de0de86993b2cb0c060be8f46688115b9b9cda2fedf8d47cd0fa2fb0f989132725799260e049e7ef3cd8f1a2081de8850d95fabce9e9714dc823ddbaabe7a3d687c7ffacaa7eb1152fe74578a96f2a96930533fb7becdfc4b4c685d9bd0eec93898df4c0838aba8368957413c49b79b64b321bd80641c7518ddaef59e8b71e6d11fcc8621f88eb7db369c3fff75f654"}) migrate_pages(0x0, 0xf, &(0x7f00000001c0)=0x8, &(0x7f0000000240)=0x3) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newtclass={0x44, 0x28, 0x200, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0x1}, {0x7}, {0x4, 0xfff3}}, [@tclass_kind_options=@c_sfb={0x8}, @TCA_RATE={0x6, 0x5, {0x9, 0x5}}, @TCA_RATE={0x6, 0x5, {0x5f, 0xf5}}, @TCA_RATE={0x6, 0x5, {0x2, 0x4}}]}, 0x44}}, 0x10) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xb6a0, 0x0, 0x0, 0x232}, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000000000000002"]) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000077000000430000000100000000000000", @ANYRES32, @ANYBLOB="00000000a54ee8e429caad78b9ca000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001600), 0x1, r9}, 0x38) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000140)={r9, 0xe0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0xfffffec6, 0x0, 0x0, 0x0, 0x80003ffc, 0x8, 0x0, 0x0}}, 0x10) write$eventfd(r6, &(0x7f00000000c0)=0x33482a89, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x6, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES8=r2, @ANYRES32=r8, @ANYRES32=r11, @ANYRES16], 0x34}}, 0x0) 14.132267212s ago: executing program 3 (id=326): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x27b, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x40085507, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) accept4$unix(r3, 0x0, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x1000000, &(0x7f0000000000), 0x8) unshare(0x50060a80) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix_mp={0x600, 0x500, 0x47425247, 0x8, 0xd, [{}, {}, {0x8000000, 0x3}, {}, {}, {0x0, 0x20008}, {}, {0x0, 0x2}], 0x0, 0x0, 0x0, 0x0, 0x3}}) unshare(0x28000600) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) fanotify_mark(0xffffffffffffffff, 0x1, 0x8000018, r5, 0x0) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', 0x0, 0x24, 0x4) 13.913336819s ago: executing program 4 (id=327): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000bc0)="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", 0x1c8}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df70e1607d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e", 0x9f}, {&(0x7f0000000200)="f610e61fc81cc3edc86f0500194d27a5a42cf1880b0dfd1ecda0fd0ed9", 0x1d}, {&(0x7f0000000140)}], 0x5, 0x0, 0x0, 0x900}}], 0x2, 0x0) 13.544819543s ago: executing program 0 (id=328): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) socket(0xa, 0x6, 0x3a) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc8902, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000004e40)={0x0, 0x0, &(0x7f0000004e00)={&(0x7f0000002d00)={0x1c, 0x0, 0x5, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000140)={0x80fd, 0x1}) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f00000000c0)={'ip6gre0\x00', {0x2, 0x4e20, @rand_addr=0x64010102}}) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x7, 0x8}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_mr_cache\x00') setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001880)=@raw={'raw\x00', 0x8, 0x3, 0x23c, 0x15c, 0x11, 0x148, 0x15c, 0x10, 0x22c, 0x2a8, 0x2a8, 0x22c, 0x2a8, 0xac, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'veth1_vlan\x00', 'sit0\x00'}, 0x10, 0x70, 0xd8, 0x1c}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1a, 0xcd, 0x9, 0x8, 'snmp_trap\x00', 'syz0\x00', {0x1}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x0, 0x5, 0x7, 0x6, 0x1], 0x5, 0x3}, {0x3, [0x2, 0x2, 0x3, 0x6, 0x2, 0x3], 0x2, 0x3}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x298) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x20008001) syz_io_uring_setup(0x83f, 0x0, 0x0, &(0x7f0000000280)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000140)={0x2, 0x0, [{0x10, 0x0, 0xfffffffffffffff0}, {0x10, 0x0, 0x3fb}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) fcntl$getflags(r1, 0x408) r8 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r8, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d) execveat(r8, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 13.544576452s ago: executing program 4 (id=329): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000100)=""/53, 0x35}], 0x1}, 0xff}], 0x1, 0x40010000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000011c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fcdbdf253000000008000300", @ANYRES32=r4, @ANYBLOB="060036"], 0x3c}, 0x1, 0x0, 0x0, 0x4805}, 0x24040000) 12.818838566s ago: executing program 1 (id=330): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000300)={0x0, 0x0, 0x80000}) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x882, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0xfffffffffffffd6b) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f000000cffc)=0x2, 0xa, 0x100000, 0x0, 0x0, 0x3000000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r10, @ANYBLOB="140004006e854467e446024e7000000000000000080005000a000000"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x2400c890) 12.81813292s ago: executing program 4 (id=331): r0 = socket$packet(0x11, 0x2, 0x300) signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x5]}, 0x8) socket(0x10, 0x3, 0x0) socket(0x2b, 0x80801, 0x1) set_mempolicy(0x2, 0x0, 0xf5) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000e80)="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", 0x26f}, {&(0x7f0000000580)="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", 0x201}], 0x2, 0x0, 0x0, 0x4090}, 0x0) sendmsg$alg(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) clock_settime(0xfffffff5, &(0x7f0000000040)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x38, 0x3a, 0x0, @private1, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "0bae2b", 0x0, 0x2f, 0x0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@fragment={0x87}]}}}}}}}, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x11, 0x1, 0x8, 0x6, 0x4, 0x4, 0x18da188d}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 12.811549735s ago: executing program 2 (id=332): openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40000000010205000000000000000000020000002c0002801400018008000100ac1414aa08000200ac1414bb06000340000000000c000280040001"], 0x40}}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x2, 0x0, 0x3, 0xfffffffdffffffff, 0x100000008, 0x0, 0x2}, 0x0) io_setup(0x8, &(0x7f0000000040)=0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x3, "421ae3753785259249154c944c28ad063ff47d3bd7a8a45d6bb4c78a3ab4c981"}) io_submit(r3, 0x1, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0xfffffffffffffff8}]) ioctl$SW_SYNC_IOC_INC(r4, 0x40045701, &(0x7f0000000080)=0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) syz_open_dev$usbfs(&(0x7f0000000140), 0xee6, 0x101301) socket$nl_sock_diag(0x10, 0x3, 0x4) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0xfd}, 0x18) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private}, 0x10) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000380)='./file0\x00') unshare(0x60040400) 10.94390483s ago: executing program 0 (id=333): pipe(0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001d000724ab09254ec1", 0xd) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0xde}], 0x5}, 0x96) 8.76339707s ago: executing program 4 (id=334): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r3, r4], 0x2}) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x882, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0xfffffffffffffd6b) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f000000cffc)=0x2, 0xa, 0x100000, 0x0, 0x0, 0x3000000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r12, @ANYBLOB="140004006e854467e446024e7000000000000000080005000a000000"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x2400c890) 8.711743331s ago: executing program 0 (id=335): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='batadv_slave_1\x00', 0x10) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000580)={0x1c, r3, 0x917, 0x0, 0xffffffe4, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x1c}}, 0x4000) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x60, r3, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2e}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x10000}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x6e20, @broadcast}, 0x10) r5 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x3232, 0x100, 0x0, 0x3de}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, 0x0, 0x0, 0x4) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') r8 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r8, 0x40045532, &(0x7f0000000040)) r9 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) r10 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_DRAIN(r10, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r10, 0x40044149, &(0x7f0000000000)=0x6) read$FUSE(r7, &(0x7f0000000400)={0x2020}, 0x2020) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000006c0)={0x29f0, r11, 0x220, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x3c}}}}, [@NL80211_ATTR_NAN_FUNC={0x1418, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x4}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x13fc, 0xe, 0x0, 0x1, [{0xcd, 0x0, "da84c0c3f53c8dd640b7200709dd077ca3e6a6cad1c5032f795c363dc81942143570a4273dcc6ff59631f8bdc5cc9a0585d3df6c825135d1791d6d85c7fc8f22b08208aef49522f49e008aa21326fa8a576081dea2f4edca2af8f2c63d6434c598888f2907c8d2c8d0af08fdf7af89ebc823ea7b21944ee744c597db3c249c1cbd849c58dc6f2a35298dacb79ccd56a4f3c269961d51a04620c3f8725385f705f61f6600ae6f0f4ddc8ec9462e5154823442f032407191732241229768a5e92905799a1aa50b81b6e1"}, {0xf5, 0x0, "9ab02581abdb5be8ac21a9f9c1b491f423893b472cf3efb5101e66f7477f5dc749082c219573c407f676c8311e1f80b9457876f98ffabdaef388b9013c334a3e0993d1d218adb1692fa3d9a5a6c4d586e0ce8961dcf3305c201a46b9087c4e15d373b04a32298fb7e1d7bf219dc28e8e95d15a4d650d1eb2e3e0d113e634fe106e107a6e2e771d89bfa36b517be2566f6ca74f1add67f8b6237e9e7679075d96467e86238360098826721fe0fa32a2c4eba7eb911050c8ffdcb0f74b82739df395ff1358d935206017556ce644592a0700b6f18624fd4b6d5d95b4bc6657663abf43d69539e99b3793075ea888dbf0b934"}, {0xd9, 0x0, "ec6d9694af941b50037b0e08d40b91d45540a9981b54dd44e7f52830a1834c3d95b49a192193f4f534b581abfcc51b83512a93c084aa4b4c451dc195e60c0cce7d7e205d121bc883269da6e90d938845bf0397ab5a239c321a676c90f1a851ebf2398c4141734e87829649ceb39979e032eea47d9d705fc6d8e50365efdd1186373cf3c13ec368815c2ece75781c008e94e065055cc7e6c231dfd949943b3123b3aa5f005b8b5885bf5eec108ef5e5af2cfbe59ddad5b341219faa7cef2a4ac12d787dbda4179ec0fe3cc9717bcbfe92a2fed055cd"}, {0x30, 0x0, "1545821b07cdcb4354b555f6885780249258167365c6f23937878ea782a4bb9a0058cb66bf40b26eff63b667"}, {0xa8, 0x0, "fdb4938470693b55da5a467057749f97cb8d70646e437f76d326c70c7a113e991bf20a19698f35fbbbdd1a05477a2cbb77cb62c5c9f361776f4f4df0799d99a0f6d7d73e4c400ef1429e34b3312910c6ac63a8ae2d5041ba791bf93efd23b41791129c83acd39e5b353a0228df7ba61f8515e08d6995420c0b75e5efbc8d22ee30868550d68e2db3bcf25ce3e93ba2a7446f0817be3c88691f0799fb30003b72aa1bade9"}, {0x1004, 0x0, "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"}, {0x25, 0x0, "73ccb643259d2a52529014dc3f5f851763e42c8367e16cfbafa3da2d935711af8e"}, {0x4d, 0x0, "e49cb8411978bd99bd3a10825fda8de943cb696d8e78522636cadc47ea1c755e34cd328e7e22cb4022bb0b2c40aae569ec0467772d339367c2873060474a07e36797fb276b09638e7f"}]}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x3a8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x78, 0xd, 0x0, 0x1, [{0x74, 0x0, "fd39d042d197742c92e1e8c4691d31b316b583adc8a43fc3473fd8c66ccd379a4d0eb89f9feeaa2043ddb9f28c79b24f881f71979bd140d89eca0eb2ef52c3e25a1006e7e09f27f1ffb3b169d3d80a47814711eb73c26167780868921cb77c775869e42783a0aff0c9e8044afa82e7bf"}]}, @NL80211_NAN_FUNC_SRF={0x10c, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}]}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x77}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x7f}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x6}, @NL80211_NAN_FUNC_SERVICE_INFO={0xb5, 0xb, "daabe3dffdd3f7ede286876d13af5d09b46e746917b383893d48cd21e4ea4ca52b24b731710d0f69957f5677d43a0f2007b450734d86c8314d6b192066758966543aa1a505b898a5a3bbf434282c8fde0da78d07fc299aadd1a375cccc4eeda9d8ebb1b6f9bc8e02df21962767ebe25f5db72796d1265a2cbd75f9f4f8724ef5232a4e7b48f2c00937faceed015fdcf56ca15292eb9665a43a2736b4acbdbde4da4617968d371d54282158165bda172adb"}, @NL80211_NAN_FUNC_SRF={0x148, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x28, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x3}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x2}]}]}, @NL80211_ATTR_NAN_FUNC={0xa34, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0xbb, 0xb, "ad6ec859cbf7489e5e2c9ccb03a1396dbdaa3918d6f8ae5ec5f0b42a4765af1a7680c67f8f71736a87518586ba1ca65024e112c156f9d214d3eb7df8f23cbd5677d7d42ade9ea0c4091fb9ecc6d58a9cce3a28789141bd891d8b97aeb4c96c17156a10b5885251e07eb0dc6a9cfea7d42ddc4c5afc0685a2cadd6d2141b27df4d3269f9e9521f1080cc5e83cb7f98d8809976ce6dec24118df0494ae58f9a16a20b06f61bf82e4d2dd9cb5f4a632d5a179b88fc9c83230"}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x3}, @NL80211_NAN_FUNC_SRF={0x134, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x28, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa}]}]}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x16c, 0xd, 0x0, 0x1, [{0xdf, 0x0, "9697e8d987a79278c60d17f4e30274b8a821f207e90ebc676189dac654572b3589ab0d6f3cac59350ad4f903c6702e4ab85a0bf15de80b8cde9edea997f52f1d114ac28084d42f8b2916c166113e5e60a9aed156c7146845c66b554467da565d0d903775ab7c909ec053d0afb4fc0d05e365f43f22be046609fe2a58ad33f2fddf018ee503826b36c73d9f43c810386735ef87ff8a037b14703c9aff2e718b4c045e1f4521a2cd5acd06eea461048c0abb641b32ca46eed8117e0a2e1dd9ea171cb2ee71c30feae9e7454654a5d363abb502bb566d0707cb1b013f"}, {0x7, 0x0, "1213f2"}, {0x33, 0x0, "cd03edb6d0655eaf67daf75c8e24a1163548e3261a3cefe2aba1cbe5d5da77bad95d3a36e8ca56d0d03ccabe7a015f"}, {0x4c, 0x0, "86ca4786e5be6fe6195ed3b4df4bfc64d5b3d040e09b3dd5267972c5fafa062f2f60e6cf1e085f3cedd93dcb6076e89db4859e2bd5ee13a6b85bff9a509aba0bd19afacc0c70c591"}]}, @NL80211_NAN_FUNC_SRF={0x49c, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "3feda4173a9bb4da6c9a477b8e3101bcafd23f680d30af8f94845304a6bb7772c8c19158af4382db7158024df7528f250c232d9de55da1070fec287fae6750dfd11b581e165738e21f2f1b3755d8d64286e748a76f3d7bf815b8dd5bb8145b69f620283b0d6fa77c318055b9524c75d6f3b17db393c0dc5271e4b7dee7999b8cf77596cea40f55625aee6091274798b861f69260408e9560db348f848d9f0cf3d8b3b8076027312a599e531129c577bac151db6e47ab48be66a687a5e03f9b6b17e5c082313888073870ccc8b63af17f0c490a999a3560e4c6a2e7462e2de0ba5297a95c1b85081cb27afde2fb6311965eda2e04ff91f329973726af1d8e80"}, @NL80211_NAN_SRF_MAC_ADDRS={0x40, 0x4, 0x0, 0x1, [{0xa}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_MAC_ADDRS={0x40, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}]}]}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x220, 0xe, 0x0, 0x1, [{0x9b, 0x0, "8301b38866cb4a5374f5eec00192d47ba0b23bb5ac66916f20bfd49d206e44d3d809290f24b07a18f203e800e13ba48a7aa8e14b961ae1652f73a928a84614b49ad168424b078ff36839dce24dcb8bd96d3e3675e703cb901669de550619d1c01a6913a782144e4fe75540d3eb5d9ade7da403ab35c85998ff3d1456ba2819810f470a981f4687c9b896fb9168590f8a498616c30a0819"}, {0x9a, 0x0, "fde636c509e51401910263510bb2a2c19cb451ceb591367f66734b30a891f615805eea10552ad24f5a712fe8409e465ca47793010759245c493e40333467f9dfb2fc642a575da5261dcddd016c22dea14481f4301ccca797d86ff7f7bcd3d7c1254d3d036f7c660fc003868445761ae72cf85865c53248e5eda32b5c1d138ea35333b74210df9fe0cde70246498d5a1c19af9f469088"}, {0xe4, 0x0, "29a786873c0487f61cfc426972a4465e6441a1ccac769f98a4d9a6f496df316530fa77260561fb32dbb83e5a8e93fd5b04733599f98d5cf2a803a1515c4ef151c948fd0d1d2ea471f54874c42be74337011531bd690f0c758f5802f9884cb207631b297bb36f4ff3ab1740fcac92af186ec4d85ff928252ece7d6bdca661d290f9b1e7e632462a535ec28e45ee86c69a7c5a022f4926a92361ca177baebea11d78a6a645cd0285b62f6d1f3ee5de7a77c93a6cd7c6a8693655aa63a7afbfb7033de633c4c5e772aed4eb6e6451f3f3f5ff146e4dd4a321b04e99ce579514bf95"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5}]}, @NL80211_ATTR_NAN_FUNC={0x460, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x3c}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "8145dd256026"}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "8fb965da5474"}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x2c4, 0xd, 0x0, 0x1, [{0xff, 0x0, "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"}, {0xc5, 0x0, "47706c14ff36cbe914787efd2f433bc22791a7d7fc4eee721dfd8e85a2ecb58b8b5b4e7788b22dd4c2eef76cb60a1e63ec690818c0548d9528a7edf2b1ca546d017650ef2a2e079c64a2a42de908406bd00549c79ab655582476f50ba0e6c3fd6dc5b1d6e29f44db49e00c62b364719cbbc205a2eaea8aed61500c786a755c0fe87601d55245c7f120bdeee174cb78d868f6e7d08336a25dfc4dfba886fe8b55a7fd1abc2640b23075f90666a1ce9acd2bfbdaadacac1865c50c421cbaf6d6bb3a"}, {0xf6, 0x0, "ab0f74915fbb7ea0c054ab7657f0fc1ef41adc5224bc4e7d5ec23bd76e5ab9ad719977798aceb146aa940b22f837163fb0314699aa94759adfe41b0b07e80c13480f0c11421b6c512faa656821baaecd8d61fdd40df8ac0cf17c58711881673a05c13560a3f95a25f37a09cbe0f954e776064d4fe8efac495ef583ddf21f2e42996abb88cefcf1b2ec779c13050a5405837b95dd8b724ec504d9ba423c656d27e5b0ba4dfbcf32881eec95a23c8363d6944bd16f4d8826fa372b048df3d054179a00f92a5a51449b734b69bba4ed727b052337e96655563325de888cb7f731447be8edd8f26a457e0a54d3a1267ba673f595"}]}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x16c, 0xe, 0x0, 0x1, [{0x29, 0x0, "e223e53dbe7621742ebb6babb0a94b1a969f9ac82b26c554f0f975edf9aac6eca28a99d1ce"}, {0xfe, 0x0, "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"}, {0x3a, 0x0, "65c5edc562a1aebc25c03c2ecbdb09cb43f957455d0804090daec36d05b48ed6f74da453767c1b97fce58b3b69f625865cb05abac9ce"}]}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x80}]}, @NL80211_ATTR_NAN_FUNC={0x37c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x6}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "765525b44b7f"}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x7}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x3}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x214, 0xe, 0x0, 0x1, [{0xfe, 0x0, "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"}, {0x21, 0x0, "9412bc51782c10ee4ec1cf3aad5fcfb4ffdaa0c3d8094fcd3631f8f1be"}, {0xea, 0x0, "1f290dea3c635a2c979b47bff10a3acf0f564c5b9f09ace4e0451a05459c8471c355cbe9897a011f2fc15175043f2c27c1d4323bf9afb1cc031fc337e9c1210c03f19c8ddcbc525aeb1c1497e49fc0f66ffe2f193df4351b3e6d8a066fe88bc708a246f570efea6adcfe906c170b672c9bcb3b19d4dd009357dd7c554acd4e9a662338e1af2042aa557505db82ff8761c51a3d7bc59e77389a9ad0e4ce3b0eda5dc41a01691b642b4ded64c4c98acbbd12b9c3fb2352d44db3e9d1d604b700faf26a67dcb93f293a80b997e0914db691802000748352d80ec1b120eb94ca91cd2bb761857419"}]}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xc}, @NL80211_NAN_FUNC_SRF={0x128, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa}]}]}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0xa8}]}]}, 0x29f0}, 0x1, 0x0, 0x0, 0x5}, 0x80) syz_emit_ethernet(0x86, &(0x7f0000000140)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x4400, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x1, "93c9691928972925723d55c712e63c92b492a3c50c9c3d27093a79585e8b73b3", "8aa4c506a2ba17a29171ce08a1e0f09d", {"c952a7f1f0443ce3114cee3518bfb345"}}}}}}}, 0x0) 7.8326368s ago: executing program 0 (id=336): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000480)={0x0, 0x57, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0905e4c0d5dffddbdf25520000000500890000000000050088000500000004002a0006004800200000002474dae84030d4422602ecdcb2fee7ed139ace378d848514612cd0ba6354150abf04f35dead40f582aa44b9dc562f2c3fe8a172274b09a1f96a5bb71e2e2ee20ac7e06c0f1562c5e972a31a2530c7a1e3da09021255ccd4572138351afd4aa4b0b359904a4edaa061e4e0f"], 0x30}}, 0x40) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r2, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xb}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xb3}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0x1) 0s ago: executing program 4 (id=337): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r2 = dup(r1) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x400, 0x1, 0x21d, 0x0, r2}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000000)={0xf0f046}) read$FUSE(r2, &(0x7f0000008180)={0x2020}, 0xfffffdfc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, 0x0, 0x0) connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) openat$userio(0xffffff9c, &(0x7f0000000140), 0x101000, 0x0) openat$btrfs_control(0xffffff9c, 0x0, 0x200, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f00000002c0)="3e660f383c5700660f38de040fc79e0d000f7e0166b9f20b00000f320f0dd8660f383dbbc431a10f0066b8000000000f23c80f21f866350c00b0000f23f80f115004", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) kernel console output (not intermixed with test programs): an invalid length. [ 112.200598][ T6112] dvmrp0: entered allmulticast mode [ 112.654902][ T30] audit: type=1326 audit(1757043545.102:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.2.29" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 113.267613][ T30] audit: type=1326 audit(1757043545.112:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.2.29" exe="/root/syz-executor" sig=0 arch=40000003 syscall=235 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 113.299626][ T30] audit: type=1326 audit(1757043545.112:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.2.29" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 113.321212][ C0] vkms_vblank_simulate: vblank timer overrun [ 113.559936][ T30] audit: type=1326 audit(1757043545.112:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.2.29" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 113.654014][ T6121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.30'. [ 113.703943][ T30] audit: type=1326 audit(1757043545.112:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.2.29" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 113.750054][ T6121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.30'. [ 113.878075][ T30] audit: type=1326 audit(1757043545.112:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.2.29" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 113.899922][ C0] vkms_vblank_simulate: vblank timer overrun [ 114.007103][ T30] audit: type=1326 audit(1757043545.112:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.2.29" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 114.963775][ T6133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.999767][ T6133] netlink: 148 bytes leftover after parsing attributes in process `syz.0.32'. [ 115.901247][ T6144] netlink: 'syz.4.33': attribute type 1 has an invalid length. [ 117.301532][ T6155] netlink: 'syz.1.35': attribute type 1 has an invalid length. [ 117.325499][ T6154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.36'. [ 117.341453][ T6154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.36'. [ 117.375462][ T6155] dvmrp0: entered allmulticast mode [ 118.309938][ T6133] syz.0.32 (6133): drop_caches: 2 [ 118.512695][ T6161] netlink: 'syz.3.37': attribute type 10 has an invalid length. [ 118.545442][ T6161] netlink: 40 bytes leftover after parsing attributes in process `syz.3.37'. [ 118.813401][ T6168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.38'. [ 118.822496][ T6168] netlink: 12 bytes leftover after parsing attributes in process `syz.0.38'. [ 119.024696][ T6170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.39'. [ 119.034228][ T6170] netlink: 12 bytes leftover after parsing attributes in process `syz.4.39'. [ 119.273455][ T6161] debugfs: 'netdev:n…DgäFNp' already exists in 'phy9' [ 119.862303][ T6175] netlink: 'syz.1.40': attribute type 10 has an invalid length. [ 119.886674][ T6175] netlink: 40 bytes leftover after parsing attributes in process `syz.1.40'. [ 120.496132][ T6175] team0: Port device geneve0 added [ 120.540710][ T6185] netlink: 'syz.3.42': attribute type 1 has an invalid length. [ 122.559116][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 122.696155][ T6194] netlink: 'syz.4.45': attribute type 10 has an invalid length. [ 122.751690][ T6194] netlink: 40 bytes leftover after parsing attributes in process `syz.4.45'. [ 122.868901][ T10] usb 1-1: config 0 has no interfaces? [ 122.893889][ T10] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 122.903340][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.914210][ T10] usb 1-1: Product: syz [ 122.933716][ T10] usb 1-1: Manufacturer: syz [ 122.990685][ T6199] loop7: detected capacity change from 0 to 7 [ 123.020286][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 123.029597][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 123.053691][ T10] usb 1-1: SerialNumber: syz [ 123.058882][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 123.068120][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 123.088729][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 123.097977][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 123.117027][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 123.126224][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 123.135495][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 123.144696][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 123.157720][ T10] usb 1-1: config 0 descriptor?? [ 123.165179][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 123.174711][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 123.205867][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 123.216983][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 123.226166][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 123.238312][ T6199] ldm_validate_partition_table(): Disk read failed. [ 123.245922][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 123.255128][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 123.278025][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 123.287371][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 123.448530][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 123.456996][ T6199] Dev loop7: unable to read RDB block 0 [ 123.537738][ T6199] loop7: unable to read partition table [ 123.551871][ T6199] loop7: partition table beyond EOD, truncated [ 123.559391][ T6199] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 125.737062][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 126.022595][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 126.046489][ T9] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 126.096231][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 126.096256][ T6229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.143538][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.157522][ T6229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.210810][ T6227] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 126.255000][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 126.257232][ T5958] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 126.378620][ T6234] netlink: 60 bytes leftover after parsing attributes in process `syz.4.50'. [ 126.397641][ T6234] netlink: 60 bytes leftover after parsing attributes in process `syz.4.50'. [ 126.740318][ T10] usb 1-1: USB disconnect, device number 4 [ 127.002622][ T6239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.51'. [ 127.033320][ T6239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.51'. [ 127.615280][ T6249] netlink: 'syz.1.52': attribute type 1 has an invalid length. [ 128.326858][ T6251] netlink: 'syz.4.53': attribute type 10 has an invalid length. [ 128.335521][ T6251] netlink: 40 bytes leftover after parsing attributes in process `syz.4.53'. [ 128.535900][ T9] usb 4-1: USB disconnect, device number 2 [ 128.881055][ T6255] netlink: 'syz.3.54': attribute type 10 has an invalid length. [ 128.902122][ T6257] netlink: 'syz.2.55': attribute type 10 has an invalid length. [ 128.908236][ T6260] debugfs: 'netdev:n…DgäFNp' already exists in 'phy3' [ 128.916808][ T6255] netlink: 40 bytes leftover after parsing attributes in process `syz.3.54'. [ 128.926518][ T6257] netlink: 40 bytes leftover after parsing attributes in process `syz.2.55'. [ 129.910544][ T6266] debugfs: 'netdev:n…DgäFNp' already exists in 'phy9' [ 130.319612][ T6275] netlink: 'syz.1.57': attribute type 1 has an invalid length. [ 130.350762][ T6276] netlink: 'syz.0.58': attribute type 1 has an invalid length. [ 135.024336][ T6310] netlink: 'syz.1.63': attribute type 1 has an invalid length. [ 137.601944][ T6335] netlink: 'syz.0.69': attribute type 10 has an invalid length. [ 137.638959][ T6335] netlink: 40 bytes leftover after parsing attributes in process `syz.0.69'. [ 138.064444][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.091649][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.361018][ T6339] netlink: 'syz.2.70': attribute type 10 has an invalid length. [ 138.408409][ T6339] netlink: 40 bytes leftover after parsing attributes in process `syz.2.70'. [ 139.863461][ T6359] netlink: 'syz.4.72': attribute type 1 has an invalid length. [ 140.006319][ T6366] netlink: 'syz.1.75': attribute type 10 has an invalid length. [ 140.017237][ T6366] netlink: 40 bytes leftover after parsing attributes in process `syz.1.75'. [ 140.267037][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 140.540295][ T24] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 140.555245][ T24] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 140.566142][ T24] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 140.586494][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.914345][ T6361] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 140.937367][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 140.969126][ T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 141.237236][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 141.257329][ T10] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 141.271742][ T10] usb 3-1: config 0 has no interface number 0 [ 141.323846][ T10] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 141.458910][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.481520][ T10] usb 3-1: Product: syz [ 141.507662][ T10] usb 3-1: Manufacturer: syz [ 141.512324][ T10] usb 3-1: SerialNumber: syz [ 141.546844][ T10] usb 3-1: config 0 descriptor?? [ 141.609368][ T10] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 141.893836][ T6373] netlink: 'syz.2.76': attribute type 3 has an invalid length. [ 142.048429][ T6373] netlink: 132 bytes leftover after parsing attributes in process `syz.2.76'. [ 142.102180][ T6380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.149390][ T6380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.388271][ T10] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 142.557849][ T10] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 142.601035][ T6380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.612371][ T6380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.727157][ T6385] netlink: 'syz.1.79': attribute type 10 has an invalid length. [ 142.734883][ T6385] netlink: 40 bytes leftover after parsing attributes in process `syz.1.79'. [ 142.973690][ T6388] FAULT_INJECTION: forcing a failure. [ 142.973690][ T6388] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 143.008951][ T6388] CPU: 0 UID: 0 PID: 6388 Comm: syz.4.80 Not tainted syzkaller #0 PREEMPT(full) [ 143.008972][ T6388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 143.008995][ T6388] Call Trace: [ 143.009001][ T6388] [ 143.009008][ T6388] dump_stack_lvl+0x189/0x250 [ 143.009037][ T6388] ? __pfx____ratelimit+0x10/0x10 [ 143.009059][ T6388] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.009076][ T6388] ? __pfx__printk+0x10/0x10 [ 143.009096][ T6388] ? __might_fault+0xb0/0x130 [ 143.009124][ T6388] should_fail_ex+0x414/0x560 [ 143.009147][ T6388] _copy_from_user+0x2d/0xb0 [ 143.009165][ T6388] generic_map_update_batch+0x51b/0x7f0 [ 143.009189][ T6388] ? __pfx_generic_map_update_batch+0x10/0x10 [ 143.009205][ T6388] ? __fget_files+0x2a/0x420 [ 143.009222][ T6388] ? __pfx_generic_map_update_batch+0x10/0x10 [ 143.009237][ T6388] bpf_map_do_batch+0x369/0x5f0 [ 143.009261][ T6388] __sys_bpf+0x6af/0x870 [ 143.009282][ T6388] ? __pfx___sys_bpf+0x10/0x10 [ 143.009310][ T6388] ? ksys_write+0x22a/0x250 [ 143.009337][ T6388] __ia32_sys_bpf+0x7c/0x90 [ 143.009355][ T6388] __do_fast_syscall_32+0xb6/0x2b0 [ 143.009369][ T6388] ? lockdep_hardirqs_on+0x9c/0x150 [ 143.009393][ T6388] do_fast_syscall_32+0x34/0x80 [ 143.009407][ T6388] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 143.009424][ T6388] RIP: 0023:0xf7fb5539 [ 143.009442][ T6388] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 143.009454][ T6388] RSP: 002b:00000000f54c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 143.009469][ T6388] RAX: ffffffffffffffda RBX: 000000000000001a RCX: 00000000800001c0 [ 143.009479][ T6388] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000 [ 143.009487][ T6388] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 143.009495][ T6388] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 143.009503][ T6388] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 143.009523][ T6388] [ 144.125332][ T5947] usb 4-1: USB disconnect, device number 3 [ 144.302288][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 144.311430][ T10] usb 3-1: USB disconnect, device number 2 [ 144.361799][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 144.403587][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 144.508708][ T6401] netlink: 60 bytes leftover after parsing attributes in process `syz.3.82'. [ 144.524890][ T6401] netlink: 60 bytes leftover after parsing attributes in process `syz.3.82'. [ 144.597564][ T10] quatech2 3-1:0.51: device disconnected [ 145.351200][ T6418] netlink: 'syz.2.85': attribute type 1 has an invalid length. [ 145.597628][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 145.790167][ T6419] dvmrp0: entered allmulticast mode [ 146.497027][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 146.576994][ T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 146.642752][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 146.887236][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.938824][ T6411] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 147.030525][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 147.721700][ T6431] netlink: 'syz.1.87': attribute type 10 has an invalid length. [ 147.769872][ T6431] netlink: 40 bytes leftover after parsing attributes in process `syz.1.87'. [ 148.033062][ T9] usb 5-1: USB disconnect, device number 4 [ 148.219417][ T6445] netlink: 'syz.0.89': attribute type 1 has an invalid length. [ 149.472043][ T6452] netlink: 'syz.4.91': attribute type 1 has an invalid length. [ 151.587185][ T6466] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 151.593996][ T6466] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 151.608251][ T6466] vhci_hcd vhci_hcd.0: Device attached [ 151.627187][ T6467] netlink: 'syz.1.95': attribute type 10 has an invalid length. [ 151.676143][ T6470] vhci_hcd: connection closed [ 151.686719][ T3537] vhci_hcd: stop threads [ 151.697491][ T3537] vhci_hcd: release socket [ 151.708734][ T3537] vhci_hcd: disconnect device [ 152.108162][ T6475] FAULT_INJECTION: forcing a failure. [ 152.108162][ T6475] name failslab, interval 1, probability 0, space 0, times 1 [ 152.157082][ T6475] CPU: 0 UID: 0 PID: 6475 Comm: syz.2.96 Not tainted syzkaller #0 PREEMPT(full) [ 152.157110][ T6475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 152.157123][ T6475] Call Trace: [ 152.157131][ T6475] [ 152.157140][ T6475] dump_stack_lvl+0x189/0x250 [ 152.157168][ T6475] ? __pfx____ratelimit+0x10/0x10 [ 152.157198][ T6475] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.157223][ T6475] ? __pfx__printk+0x10/0x10 [ 152.157254][ T6475] ? __lock_acquire+0xab9/0xd20 [ 152.157302][ T6475] should_fail_ex+0x414/0x560 [ 152.157335][ T6475] should_failslab+0xa8/0x100 [ 152.157367][ T6475] kmem_cache_alloc_noprof+0x73/0x3c0 [ 152.157393][ T6475] ? skb_clone+0x212/0x3a0 [ 152.157422][ T6475] skb_clone+0x212/0x3a0 [ 152.157450][ T6475] __netlink_deliver_tap+0x404/0x850 [ 152.157496][ T6475] ? netlink_deliver_tap+0x2e/0x1b0 [ 152.157529][ T6475] netlink_deliver_tap+0x19c/0x1b0 [ 152.157561][ T6475] netlink_unicast+0x7fa/0x9e0 [ 152.157599][ T6475] ? __pfx_netlink_unicast+0x10/0x10 [ 152.157630][ T6475] ? netlink_sendmsg+0x642/0xb30 [ 152.157647][ T6475] ? skb_put+0x11b/0x210 [ 152.157671][ T6475] netlink_sendmsg+0x805/0xb30 [ 152.157701][ T6475] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.157724][ T6475] ? __import_iovec+0x5d4/0x7f0 [ 152.157745][ T6475] ? aa_sock_msg_perm+0xf1/0x1d0 [ 152.157767][ T6475] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 152.157790][ T6475] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.157810][ T6475] __sock_sendmsg+0x21c/0x270 [ 152.157842][ T6475] ____sys_sendmsg+0x505/0x830 [ 152.157871][ T6475] ? __pfx_____sys_sendmsg+0x10/0x10 [ 152.157912][ T6475] ___sys_sendmsg+0x21f/0x2a0 [ 152.157937][ T6475] ? __pfx____sys_sendmsg+0x10/0x10 [ 152.158000][ T6475] ? __fget_files+0x2a/0x420 [ 152.158017][ T6475] ? __fget_files+0x3a0/0x420 [ 152.158046][ T6475] __sys_sendmsg+0x164/0x220 [ 152.158071][ T6475] ? __pfx___sys_sendmsg+0x10/0x10 [ 152.158112][ T6475] ? lockdep_hardirqs_on+0x9c/0x150 [ 152.158147][ T6475] __do_fast_syscall_32+0xb6/0x2b0 [ 152.158167][ T6475] ? lockdep_hardirqs_on+0x9c/0x150 [ 152.158202][ T6475] do_fast_syscall_32+0x34/0x80 [ 152.158221][ T6475] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 152.158246][ T6475] RIP: 0023:0xf70fe539 [ 152.158269][ T6475] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 152.158286][ T6475] RSP: 002b:00000000f54ee55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 152.158307][ T6475] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000340 [ 152.158320][ T6475] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 152.158332][ T6475] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 152.158343][ T6475] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 152.158359][ T6475] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 152.158390][ T6475] [ 153.065276][ T6485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.101'. [ 153.135528][ T6485] netlink: 104 bytes leftover after parsing attributes in process `syz.1.101'. [ 153.173637][ T6485] netlink: 104 bytes leftover after parsing attributes in process `syz.1.101'. [ 153.247221][ T5947] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 153.537564][ T5947] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 153.623813][ T5947] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 153.634353][ T5947] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 153.646982][ T5947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.663004][ T6484] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 153.686828][ T5947] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 153.731732][ T1225] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 153.835049][ T6498] netlink: 'syz.3.105': attribute type 2 has an invalid length. [ 153.931653][ T1225] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.953655][ T1225] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 153.965404][ T1225] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.980531][ T1225] usb 2-1: config 0 descriptor?? [ 154.226370][ T1225] usbhid 2-1:0.0: can't add hid device: -71 [ 154.244499][ T1225] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 154.520810][ T1225] usb 2-1: USB disconnect, device number 3 [ 155.148627][ T1225] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 155.318267][ T1225] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.319956][ T6513] process 'syz.3.107' launched './file0' with NULL argv: empty string added [ 155.358097][ T1225] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 155.400783][ T1225] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.436245][ T1225] usb 2-1: config 0 descriptor?? [ 155.845386][ T6518] bond_slave_0: entered promiscuous mode [ 155.851301][ T6518] bond_slave_1: entered promiscuous mode [ 155.862402][ T6518] vlan2: entered promiscuous mode [ 155.872942][ T6518] bond0: entered promiscuous mode [ 155.927484][ T1225] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 155.963852][ T1225] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0001/input/input5 [ 156.103944][ T5958] usb 1-1: USB disconnect, device number 5 [ 156.218011][ T6525] netlink: 'syz.0.113': attribute type 10 has an invalid length. [ 156.226354][ T6525] netlink: 40 bytes leftover after parsing attributes in process `syz.0.113'. [ 156.378958][ T1225] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 156.534049][ T6533] netlink: 'syz.3.111': attribute type 1 has an invalid length. [ 157.808571][ T24] usb 2-1: USB disconnect, device number 4 [ 159.134791][ T6563] netlink: 12 bytes leftover after parsing attributes in process `syz.2.121'. [ 159.227549][ T6563] vlan2: entered promiscuous mode [ 159.258755][ T6563] team0: entered promiscuous mode [ 159.286569][ T6563] team_slave_0: entered promiscuous mode [ 159.301849][ T6563] team_slave_1: entered promiscuous mode [ 159.317596][ T6563] geneve0: entered promiscuous mode [ 160.523524][ T6583] binder: 6579:6583 unknown command 0 [ 160.529623][ T6583] binder: 6579:6583 ioctl c0306201 80000080 returned -22 [ 160.538684][ T6583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.128'. [ 160.557327][ T6583] binder: BINDER_SET_CONTEXT_MGR already set [ 160.564708][ T6583] binder: 6579:6583 ioctl 4018620d 80000040 returned -16 [ 160.909754][ T6590] netlink: 'syz.2.129': attribute type 10 has an invalid length. [ 160.921238][ T6590] netlink: 40 bytes leftover after parsing attributes in process `syz.2.129'. [ 161.146051][ T6592] debugfs: 'netdev:n…DgäFNp' already exists in 'phy7' [ 161.641325][ T30] audit: type=1326 audit(1757043594.112:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6597 comm="syz.1.131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 161.787002][ T30] audit: type=1326 audit(1757043594.162:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6597 comm="syz.1.131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 161.846104][ T6603] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 161.866151][ T30] audit: type=1326 audit(1757043594.192:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6597 comm="syz.1.131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=399 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 161.926757][ T30] audit: type=1326 audit(1757043594.192:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6597 comm="syz.1.131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 161.984649][ T30] audit: type=1326 audit(1757043594.192:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6597 comm="syz.1.131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 162.065403][ T30] audit: type=1326 audit(1757043594.232:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6597 comm="syz.1.131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=400 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 162.087070][ T5958] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 162.118308][ T30] audit: type=1326 audit(1757043594.232:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6597 comm="syz.1.131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 162.186484][ T30] audit: type=1326 audit(1757043594.232:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6597 comm="syz.1.131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 162.210014][ T30] audit: type=1326 audit(1757043594.232:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6597 comm="syz.1.131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 162.232445][ T30] audit: type=1326 audit(1757043594.232:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6597 comm="syz.1.131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 162.261105][ T5958] usb 4-1: Using ep0 maxpacket: 16 [ 162.272167][ T5958] usb 4-1: too many configurations: 123, using maximum allowed: 8 [ 162.286362][ T5958] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.306190][ T5958] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.327945][ T5958] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.351850][ T5958] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.410337][ T5958] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.432421][ T5958] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.458208][ T5958] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.503374][ T5958] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.538892][ T5958] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 162.574728][ T5958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 162.612461][ T5958] usb 4-1: SerialNumber: syz [ 162.658140][ T5958] usb 4-1: config 0 descriptor?? [ 162.749497][ T5958] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input6 [ 163.046235][ T6602] input: syz1 as /devices/virtual/input/input7 [ 163.102407][ T6626] netlink: 'syz.2.140': attribute type 2 has an invalid length. [ 163.284237][ T5221] bcm5974 4-1:0.0: could not read from device [ 163.517798][ T5221] bcm5974 4-1:0.0: could not read from device [ 163.545062][ T5958] usb 4-1: USB disconnect, device number 4 [ 164.215984][ T6636] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 164.532711][ T6643] loop7: detected capacity change from 0 to 7 [ 164.659936][ T6643] Dev loop7: unable to read RDB block 7 [ 164.665579][ T6643] loop7: unable to read partition table [ 164.764027][ T6648] netlink: 'syz.1.148': attribute type 10 has an invalid length. [ 164.783327][ T6648] netlink: 40 bytes leftover after parsing attributes in process `syz.1.148'. [ 164.787340][ T6643] loop7: partition table beyond EOD, truncated [ 164.826961][ T6643] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…0ýÞý©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 164.977856][ T5947] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 165.157089][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 165.168055][ T5947] usb 4-1: config 0 has an invalid interface number: 23 but max is 0 [ 165.176501][ T5947] usb 4-1: config 0 has no interface number 0 [ 165.183031][ T5947] usb 4-1: config 0 interface 23 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 165.193539][ T5947] usb 4-1: config 0 interface 23 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 165.195874][ T6648] debugfs: 'netdev:n…DgäFNp' already exists in 'phy11' [ 165.206665][ T5947] usb 4-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 165.220460][ T5947] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.228540][ T5947] usb 4-1: Product: syz [ 165.236982][ T5947] usb 4-1: Manufacturer: syz [ 165.250920][ T5947] usb 4-1: SerialNumber: syz [ 165.269249][ T5236] Dev loop7: unable to read RDB block 7 [ 165.276240][ T5947] usb 4-1: config 0 descriptor?? [ 165.287566][ T5236] loop7: unable to read partition table [ 165.293802][ T6646] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 165.301460][ T5236] loop7: partition table beyond EOD, truncated [ 165.305559][ T6646] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 165.334432][ T5947] ums-usbat 4-1:0.23: USB Mass Storage device detected [ 165.348622][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 165.360448][ T9] usb 1-1: config 1 has an invalid interface number: 236 but max is 0 [ 165.369381][ T9] usb 1-1: config 1 has no interface number 0 [ 165.375662][ T9] usb 1-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 1024 [ 165.411254][ T9] usb 1-1: config 1 interface 236 has no altsetting 0 [ 165.430648][ T9] usb 1-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 165.440368][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.452482][ T9] usb 1-1: Product: syz [ 165.456716][ T9] usb 1-1: Manufacturer: syz [ 165.463621][ T9] usb 1-1: SerialNumber: syz [ 165.486479][ T6651] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 165.529021][ T9] ti_usb_3410_5052 1-1:1.236: TI USB 5052 2 port adapter converter detected [ 166.308827][ T1225] usb 1-1: USB disconnect, device number 6 [ 166.427219][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 166.666996][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 166.720363][ T9] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 166.782917][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.826469][ T9] usb 2-1: config 0 descriptor?? [ 166.955989][ T6677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.155'. [ 166.965075][ T6677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.155'. [ 167.064325][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 167.195058][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 167.220236][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 167.239750][ T9] usb 2-1: media controller created [ 167.365335][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 167.382291][ T6679] bond_slave_0: entered promiscuous mode [ 167.388126][ T6679] bond_slave_1: entered promiscuous mode [ 167.441993][ T6679] vlan2: entered promiscuous mode [ 167.451222][ T6679] bond0: entered promiscuous mode [ 168.071848][ T5947] ums-usbat 4-1:0.23: probe with driver ums-usbat failed with error -5 [ 168.285835][ T6695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.158'. [ 168.297923][ T6692] netlink: 'syz.4.157': attribute type 1 has an invalid length. [ 168.327188][ T6695] netlink: 12 bytes leftover after parsing attributes in process `syz.0.158'. [ 168.630472][ T5947] usb 4-1: USB disconnect, device number 5 [ 169.389274][ T9] az6027: usb out operation failed. (-71) [ 169.445916][ T9] az6027: usb out operation failed. (-71) [ 169.527632][ T9] stb0899_attach: Driver disabled by Kconfig [ 169.710925][ T9] az6027: no front-end attached [ 169.710925][ T9] [ 169.737916][ T9] az6027: usb out operation failed. (-71) [ 169.758067][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 169.830391][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8 [ 169.951479][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 169.977174][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 170.043685][ T9] usb 2-1: USB disconnect, device number 5 [ 170.077066][ T1225] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 170.277204][ T1225] usb 3-1: Using ep0 maxpacket: 32 [ 170.317805][ T1225] usb 3-1: config 1 has an invalid interface number: 236 but max is 0 [ 170.336278][ T1225] usb 3-1: config 1 has no interface number 0 [ 170.356540][ T1225] usb 3-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 1024 [ 170.381508][ T1225] usb 3-1: config 1 interface 236 has no altsetting 0 [ 170.416798][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 170.474505][ T6718] sctp: [Deprecated]: syz.0.167 (pid 6718) Use of int in maxseg socket option. [ 170.474505][ T6718] Use struct sctp_assoc_value instead [ 170.520747][ T1225] usb 3-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 170.537730][ T1225] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.575102][ T1225] usb 3-1: Product: syz [ 170.586987][ T1225] usb 3-1: Manufacturer: syz [ 170.597381][ T1225] usb 3-1: SerialNumber: syz [ 170.669770][ T6710] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 170.878463][ T1225] ti_usb_3410_5052 3-1:1.236: TI USB 5052 2 port adapter converter detected [ 171.337091][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 171.488164][ T10] usb 1-1: device descriptor read/64, error -71 [ 171.546266][ T24] usb 3-1: USB disconnect, device number 3 [ 171.747638][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 171.797085][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 171.901069][ T10] usb 1-1: device descriptor read/64, error -71 [ 171.937147][ T9] usb 2-1: device descriptor read/64, error -71 [ 172.022514][ T10] usb usb1-port1: attempt power cycle [ 172.177057][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 172.327140][ T9] usb 2-1: device descriptor read/64, error -71 [ 172.367605][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 172.388357][ T10] usb 1-1: device descriptor read/8, error -71 [ 172.647290][ T9] usb usb2-port1: attempt power cycle [ 172.700853][ T6746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.176'. [ 172.802542][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 172.831098][ T6746] netlink: 12 bytes leftover after parsing attributes in process `syz.3.176'. [ 172.892344][ T10] usb 1-1: device descriptor read/8, error -71 [ 173.026446][ T10] usb usb1-port1: unable to enumerate USB device [ 173.087060][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 173.108110][ T9] usb 2-1: device descriptor read/8, error -71 [ 173.467200][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 173.492378][ T9] usb 2-1: device descriptor read/8, error -71 [ 173.607347][ T9] usb usb2-port1: unable to enumerate USB device [ 173.677212][ T5958] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 173.860607][ T5958] usb 3-1: config 0 has no interfaces? [ 173.871914][ T5958] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 173.881339][ T5958] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.935200][ T5958] usb 3-1: Product: syz [ 173.953792][ T5958] usb 3-1: Manufacturer: syz [ 173.977133][ T5958] usb 3-1: SerialNumber: syz [ 174.010661][ T5958] usb 3-1: config 0 descriptor?? [ 174.517038][ T5957] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 174.714116][ T5957] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 174.747022][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 174.812723][ T6748] veth0_vlan: left promiscuous mode [ 174.826085][ T6748] veth0_vlan: entered promiscuous mode [ 174.861943][ T5957] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 174.998605][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 175.024378][ T5957] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 175.083135][ T9] usb 1-1: too many configurations: 123, using maximum allowed: 8 [ 175.099904][ T5957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.113182][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.168246][ T6758] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 175.185227][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.207054][ T1225] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 175.207071][ T5957] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 175.242151][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.289725][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.319821][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.351587][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.369373][ T1225] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.401157][ T1225] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.412654][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.419503][ T1225] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 175.530438][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.534348][ T1225] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.577599][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 175.594059][ T1225] usb 5-1: config 0 descriptor?? [ 175.615984][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 175.650244][ T9] usb 1-1: SerialNumber: syz [ 175.678080][ T9] usb 1-1: config 0 descriptor?? [ 175.737996][ T9] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input9 [ 175.952162][ T6761] input: syz1 as /devices/virtual/input/input10 [ 175.981397][ T1225] usbhid 5-1:0.0: can't add hid device: -71 [ 175.997205][ T1225] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 176.031234][ T1225] usb 5-1: USB disconnect, device number 5 [ 176.051595][ T5221] bcm5974 1-1:0.0: could not read from device [ 176.090411][ T5221] bcm5974 1-1:0.0: could not read from device [ 176.136883][ T5221] bcm5974 1-1:0.0: could not read from device [ 176.148760][ T9] usb 1-1: USB disconnect, device number 11 [ 176.157201][ T5957] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 176.193433][ T5221] bcm5974 1-1:0.0: could not read from device [ 176.357446][ T5957] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 176.397975][ T5957] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.434660][ T1225] usb 3-1: USB disconnect, device number 4 [ 176.439893][ T5957] usb 2-1: New USB device found, idVendor=0c70, idProduct=f012, bcdDevice= 0.00 [ 176.467993][ T5957] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.542389][ T5957] usb 2-1: config 0 descriptor?? [ 176.552378][ T6778] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 177.049564][ T5957] aquacomputer_d5next 0003:0C70:F012.0002: hidraw0: USB HID v1.05 Device [HID 0c70:f012] on usb-dummy_hcd.1-1/input0 [ 177.168722][ T10] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 177.205162][ T5958] usb 4-1: USB disconnect, device number 6 [ 177.355772][ T6798] Zero length message leads to an empty skb [ 177.370086][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 177.393283][ T10] usb 1-1: config 1 interface 0 has no altsetting 0 [ 177.414755][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 177.443862][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.469399][ T10] usb 1-1: Product: syz [ 177.473701][ T10] usb 1-1: Manufacturer: syz [ 177.480395][ T10] usb 1-1: SerialNumber: syz [ 177.792527][ T6790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.191'. [ 177.850099][ T10] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input11 [ 177.862657][ T5221] bcm5974 1-1:1.0: could not read from device [ 177.899046][ T5221] bcm5974 1-1:1.0: could not read from device [ 177.922347][ T10] usb 1-1: USB disconnect, device number 12 [ 177.931666][ T5221] bcm5974 1-1:1.0: could not read from device [ 177.952728][ T5221] bcm5974 1-1:1.0: could not read from device [ 178.408243][ T5957] usb 2-1: reset full-speed USB device number 10 using dummy_hcd [ 178.476881][ T6778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.487733][ T6778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.540718][ T6812] netlink: 92 bytes leftover after parsing attributes in process `syz.0.198'. [ 178.553052][ T6816] mmap: syz.3.197 (6816) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 178.662261][ T1225] IPVS: starting estimator thread 0... [ 178.777052][ T6818] IPVS: using max 25 ests per chain, 60000 per kthread [ 178.836411][ T6821] tipc: Started in network mode [ 178.843664][ T6821] tipc: Node identity 96eb367f8974, cluster identity 4711 [ 178.859735][ T6821] tipc: Enabled bearer , priority 0 [ 178.878334][ T6821] syzkaller0: entered promiscuous mode [ 178.883885][ T6821] syzkaller0: entered allmulticast mode [ 178.931505][ T6823] IPVS: sed: SCTP 172.20.20.187:0 - no destination available [ 178.933106][ T6816] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 178.993208][ T6821] tipc: Resetting bearer [ 179.100785][ T6829] tipc: Resetting bearer [ 179.175705][ T6829] tipc: Disabling bearer [ 179.548727][ T6839] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 179.634816][ T121] usb 2-1: USB disconnect, device number 10 [ 179.700690][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 179.847079][ T9] usb 4-1: device descriptor read/64, error -71 [ 180.211692][ T6845] FAULT_INJECTION: forcing a failure. [ 180.211692][ T6845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.247054][ T6845] CPU: 1 UID: 0 PID: 6845 Comm: syz.1.205 Not tainted syzkaller #0 PREEMPT(full) [ 180.247083][ T6845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 180.247096][ T6845] Call Trace: [ 180.247104][ T6845] [ 180.247112][ T6845] dump_stack_lvl+0x189/0x250 [ 180.247141][ T6845] ? __pfx____ratelimit+0x10/0x10 [ 180.247171][ T6845] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.247195][ T6845] ? __pfx__printk+0x10/0x10 [ 180.247235][ T6845] should_fail_ex+0x414/0x560 [ 180.247266][ T6845] _copy_to_user+0x31/0xb0 [ 180.247292][ T6845] simple_read_from_buffer+0xe1/0x170 [ 180.247326][ T6845] proc_fail_nth_read+0x1b3/0x220 [ 180.247351][ T6845] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 180.247376][ T6845] ? rw_verify_area+0x2a6/0x4d0 [ 180.247401][ T6845] ? __lock_acquire+0xab9/0xd20 [ 180.247428][ T6845] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 180.247451][ T6845] vfs_read+0x1fd/0xa30 [ 180.247476][ T6845] ? fdget_pos+0x247/0x320 [ 180.247498][ T6845] ? __pfx___mutex_lock+0x10/0x10 [ 180.247517][ T6845] ? __pfx_vfs_read+0x10/0x10 [ 180.247544][ T6845] ? __fget_files+0x2a/0x420 [ 180.247566][ T6845] ? __fget_files+0x3a0/0x420 [ 180.247582][ T6845] ? __fget_files+0x2a/0x420 [ 180.247610][ T6845] ksys_read+0x145/0x250 [ 180.247639][ T6845] ? __pfx_ksys_read+0x10/0x10 [ 180.247677][ T6845] ? lockdep_hardirqs_on+0x9c/0x150 [ 180.247712][ T6845] __do_fast_syscall_32+0xb6/0x2b0 [ 180.247732][ T6845] ? lockdep_hardirqs_on+0x9c/0x150 [ 180.247766][ T6845] do_fast_syscall_32+0x34/0x80 [ 180.247786][ T6845] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 180.247810][ T6845] RIP: 0023:0xf7f12539 [ 180.247829][ T6845] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 180.247845][ T6845] RSP: 002b:00000000f5426590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 180.247866][ T6845] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5426620 [ 180.247880][ T6845] RDX: 000000000000000f RSI: 00000000f73a4ff4 RDI: 0000000000000000 [ 180.247892][ T6845] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 180.247903][ T6845] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 180.247915][ T6845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 180.247945][ T6845] [ 180.484894][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 180.857336][ T9] usb 4-1: device descriptor read/64, error -71 [ 180.920955][ T6851] netlink: 'syz.2.207': attribute type 1 has an invalid length. [ 180.970581][ T9] usb usb4-port1: attempt power cycle [ 181.296857][ T6861] netlink: 'syz.1.209': attribute type 1 has an invalid length. [ 181.317807][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 181.369804][ T9] usb 4-1: device descriptor read/8, error -71 [ 181.888553][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 181.937595][ T9] usb 4-1: device descriptor read/8, error -71 [ 182.077001][ T9] usb usb4-port1: unable to enumerate USB device [ 182.336507][ T6864] netlink: 'syz.0.210': attribute type 2 has an invalid length. [ 182.577227][ T1225] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 182.727081][ T1225] usb 5-1: Using ep0 maxpacket: 16 [ 182.734553][ T1225] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.746277][ T1225] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 182.763080][ T1225] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 182.778271][ T1225] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.791537][ T1225] usb 5-1: config 0 descriptor?? [ 183.122433][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 183.122450][ T30] audit: type=1326 audit(1757043615.562:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6873 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 183.164039][ T30] audit: type=1326 audit(1757043615.562:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6873 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 183.217306][ T30] audit: type=1326 audit(1757043615.562:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6873 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 183.239823][ T30] audit: type=1326 audit(1757043615.562:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6873 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=40000003 syscall=118 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 183.356343][ T30] audit: type=1326 audit(1757043615.562:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6873 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 183.446868][ T30] audit: type=1326 audit(1757043615.562:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6873 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 183.594767][ T30] audit: type=1326 audit(1757043615.562:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6873 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=40000003 syscall=343 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 183.597679][ T6883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.217'. [ 183.617492][ T30] audit: type=1326 audit(1757043615.562:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6873 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 183.756640][ T30] audit: type=1326 audit(1757043615.562:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6873 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=40000003 syscall=444 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 183.857448][ T30] audit: type=1326 audit(1757043615.562:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6873 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 183.922954][ T6894] netlink: 32 bytes leftover after parsing attributes in process `syz.0.220'. [ 183.997276][ T5958] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 184.162479][ T5958] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 184.174524][ T5958] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.184154][ T5958] usb 3-1: Product: syz [ 184.189151][ T5958] usb 3-1: Manufacturer: syz [ 184.194433][ T5958] usb 3-1: SerialNumber: syz [ 184.486093][ T6905] netlink: 'syz.3.225': attribute type 2 has an invalid length. [ 184.495480][ T44] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 184.647082][ T44] usb 1-1: Using ep0 maxpacket: 8 [ 184.660980][ T44] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 184.674594][ T44] usb 1-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice= 0.00 [ 184.687159][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.703629][ T44] usb 1-1: config 0 descriptor?? [ 184.730014][ T44] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input12 [ 184.827660][ T5958] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 184.873208][ T5958] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 184.913026][ T5958] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 184.930799][ T6897] netlink: 9 bytes leftover after parsing attributes in process `syz.0.221'. [ 184.965572][ T6897] 0·: renamed from hsr0 (while UP) [ 184.979049][ T5958] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 184.993657][ T6897] 0·: entered allmulticast mode [ 185.008897][ T6897] hsr_slave_0: entered allmulticast mode [ 185.019359][ T5958] usb 3-1: USB disconnect, device number 5 [ 185.035773][ T6897] hsr_slave_1: entered allmulticast mode [ 185.055336][ T6897] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 185.145718][ T5221] bcm5974 1-1:0.0: could not read from device [ 185.211770][ T5221] bcm5974 1-1:0.0: could not read from device [ 185.224182][ T44] usb 1-1: USB disconnect, device number 13 [ 185.281934][ T6236] bcm5974 1-1:0.0: could not read from device [ 185.377126][ T1225] usbhid 5-1:0.0: can't add hid device: -71 [ 185.398859][ T1225] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 185.431551][ T6236] udevd[6236]: Error opening device "/dev/input/event4": No such device [ 185.450328][ T1225] usb 5-1: USB disconnect, device number 6 [ 185.457235][ T6236] udevd[6236]: Unable to EVIOCGABS device "/dev/input/event4" [ 185.464875][ T6236] udevd[6236]: Unable to EVIOCGABS device "/dev/input/event4" [ 185.475488][ T6236] udevd[6236]: Unable to EVIOCGABS device "/dev/input/event4" [ 185.487337][ T6236] udevd[6236]: Unable to EVIOCGABS device "/dev/input/event4" [ 185.513280][ T6921] sctp: [Deprecated]: syz.4.229 (pid 6921) Use of int in max_burst socket option. [ 185.513280][ T6921] Use struct sctp_assoc_value instead [ 185.536964][ T6912] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 185.571746][ T6916] IPVS: sed: SCTP 172.20.20.187:0 - no destination available [ 185.595325][ T6925] netlink: 'syz.3.228': attribute type 1 has an invalid length. [ 185.873969][ T6931] netlink: 'syz.1.232': attribute type 1 has an invalid length. [ 185.966410][ T6931] 8021q: adding VLAN 0 to HW filter on device bond1 [ 186.008219][ T6937] bond1: (slave ip6gretap1): making interface the new active one [ 186.018334][ T6937] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 186.097034][ T1225] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 186.137777][ T6941] loop6: detected capacity change from 0 to 524287999 [ 186.262750][ T1225] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.278980][ T1225] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 186.391341][ T1225] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 186.406211][ T1225] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 186.423495][ T1225] usb 3-1: SerialNumber: syz [ 186.489310][ T6942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.235'. [ 186.694183][ T1225] usb 3-1: 0:2 : does not exist [ 186.703220][ T6947] FAULT_INJECTION: forcing a failure. [ 186.703220][ T6947] name failslab, interval 1, probability 0, space 0, times 0 [ 186.729718][ T6947] CPU: 0 UID: 0 PID: 6947 Comm: syz.3.237 Not tainted syzkaller #0 PREEMPT(full) [ 186.729741][ T6947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 186.729750][ T6947] Call Trace: [ 186.729757][ T6947] [ 186.729764][ T6947] dump_stack_lvl+0x189/0x250 [ 186.729789][ T6947] ? __pfx____ratelimit+0x10/0x10 [ 186.729815][ T6947] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.729836][ T6947] ? __pfx__printk+0x10/0x10 [ 186.729861][ T6947] ? __lock_acquire+0xab9/0xd20 [ 186.729892][ T6947] should_fail_ex+0x414/0x560 [ 186.729919][ T6947] should_failslab+0xa8/0x100 [ 186.729944][ T6947] kmem_cache_alloc_noprof+0x73/0x3c0 [ 186.729966][ T6947] ? skb_clone+0x212/0x3a0 [ 186.729989][ T6947] skb_clone+0x212/0x3a0 [ 186.730011][ T6947] __netlink_deliver_tap+0x404/0x850 [ 186.730048][ T6947] ? netlink_deliver_tap+0x2e/0x1b0 [ 186.730083][ T6947] netlink_deliver_tap+0x19c/0x1b0 [ 186.730124][ T6947] netlink_unicast+0x7fa/0x9e0 [ 186.730153][ T6947] ? __pfx_netlink_unicast+0x10/0x10 [ 186.730178][ T6947] ? netlink_sendmsg+0x642/0xb30 [ 186.730191][ T6947] ? skb_put+0x11b/0x210 [ 186.730209][ T6947] netlink_sendmsg+0x805/0xb30 [ 186.730233][ T6947] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.730250][ T6947] ? __import_iovec+0x5d4/0x7f0 [ 186.730268][ T6947] ? aa_sock_msg_perm+0xf1/0x1d0 [ 186.730284][ T6947] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 186.730303][ T6947] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.730320][ T6947] __sock_sendmsg+0x21c/0x270 [ 186.730347][ T6947] ____sys_sendmsg+0x505/0x830 [ 186.730372][ T6947] ? __pfx_____sys_sendmsg+0x10/0x10 [ 186.730405][ T6947] ___sys_sendmsg+0x21f/0x2a0 [ 186.730426][ T6947] ? __pfx____sys_sendmsg+0x10/0x10 [ 186.730478][ T6947] ? __fget_files+0x2a/0x420 [ 186.730493][ T6947] ? __fget_files+0x3a0/0x420 [ 186.730518][ T6947] __sys_sendmsg+0x164/0x220 [ 186.730540][ T6947] ? __pfx___sys_sendmsg+0x10/0x10 [ 186.730574][ T6947] ? lockdep_hardirqs_on+0x9c/0x150 [ 186.730604][ T6947] __do_fast_syscall_32+0xb6/0x2b0 [ 186.730625][ T6947] ? lockdep_hardirqs_on+0x9c/0x150 [ 186.730657][ T6947] do_fast_syscall_32+0x34/0x80 [ 186.730677][ T6947] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 186.730700][ T6947] RIP: 0023:0xf70be539 [ 186.730718][ T6947] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 186.730734][ T6947] RSP: 002b:00000000f54ae55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 186.730753][ T6947] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000340 [ 186.730766][ T6947] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 186.730777][ T6947] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 186.730788][ T6947] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 186.730799][ T6947] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 186.730827][ T6947] [ 186.769316][ T1225] usb 3-1: USB disconnect, device number 6 [ 186.772235][ C0] vkms_vblank_simulate: vblank timer overrun [ 187.032487][ C0] vkms_vblank_simulate: vblank timer overrun [ 187.038483][ C0] hrtimer: interrupt took 301584343 ns [ 187.138542][ C0] vkms_vblank_simulate: vblank timer overrun [ 187.161775][ T6236] udevd[6236]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 187.219014][ T6957] FAULT_INJECTION: forcing a failure. [ 187.219014][ T6957] name failslab, interval 1, probability 0, space 0, times 0 [ 187.231944][ T6957] CPU: 0 UID: 0 PID: 6957 Comm: syz.1.239 Not tainted syzkaller #0 PREEMPT(full) [ 187.231971][ T6957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 187.231983][ T6957] Call Trace: [ 187.231992][ T6957] [ 187.232000][ T6957] dump_stack_lvl+0x189/0x250 [ 187.232029][ T6957] ? __pfx____ratelimit+0x10/0x10 [ 187.232067][ T6957] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.232090][ T6957] ? __pfx__printk+0x10/0x10 [ 187.232124][ T6957] ? __pfx___might_resched+0x10/0x10 [ 187.232143][ T6957] ? fs_reclaim_acquire+0x7d/0x100 [ 187.232179][ T6957] should_fail_ex+0x414/0x560 [ 187.232212][ T6957] should_failslab+0xa8/0x100 [ 187.232245][ T6957] __kmalloc_cache_noprof+0x70/0x3d0 [ 187.232273][ T6957] ? allocate_file_region_entries+0x1e7/0x5a0 [ 187.232304][ T6957] allocate_file_region_entries+0x1e7/0x5a0 [ 187.232339][ T6957] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 187.232377][ T6957] region_chg+0x2c4/0x3c0 [ 187.232416][ T6957] __vma_reservation_common+0x328/0x6e0 [ 187.232446][ T6957] alloc_hugetlb_folio+0x2d2/0x16a0 [ 187.232471][ T6957] ? filemap_get_entry+0xad/0x2f0 [ 187.232490][ T6957] ? filemap_get_entry+0xad/0x2f0 [ 187.232506][ T6957] ? filemap_get_entry+0xad/0x2f0 [ 187.232526][ T6957] ? filemap_get_entry+0x28f/0x2f0 [ 187.232545][ T6957] ? __pfx_filemap_get_entry+0x10/0x10 [ 187.232564][ T6957] ? __pfx_alloc_hugetlb_folio+0x10/0x10 [ 187.232604][ T6957] ? __filemap_get_folio+0x9a6/0xaf0 [ 187.232639][ T6957] hugetlb_mfill_atomic_pte+0xc7f/0x14c0 [ 187.232683][ T6957] mfill_atomic_copy+0xdec/0x1390 [ 187.232732][ T6957] ? __pfx_mfill_atomic_copy+0x10/0x10 [ 187.232777][ T6957] userfaultfd_ioctl+0x29fb/0x4c80 [ 187.232824][ T6957] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 187.232879][ T6957] ? kasan_quarantine_put+0xdd/0x220 [ 187.232915][ T6957] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 187.232946][ T6957] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 187.232985][ T6957] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 187.233027][ T6957] ? __lock_acquire+0xab9/0xd20 [ 187.233085][ T6957] ? __fget_files+0x2a/0x420 [ 187.233109][ T6957] ? __fget_files+0x3a0/0x420 [ 187.233125][ T6957] ? __fget_files+0x2a/0x420 [ 187.233147][ T6957] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 187.233177][ T6957] __ia32_compat_sys_ioctl+0x543/0x840 [ 187.233207][ T6957] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 187.233233][ T6957] ? __fget_files+0x3a0/0x420 [ 187.233259][ T6957] ? fput+0xa0/0xd0 [ 187.233281][ T6957] ? ksys_write+0x22a/0x250 [ 187.233318][ T6957] ? lockdep_hardirqs_on+0x9c/0x150 [ 187.233353][ T6957] __do_fast_syscall_32+0xb6/0x2b0 [ 187.233372][ T6957] ? lockdep_hardirqs_on+0x9c/0x150 [ 187.233405][ T6957] do_fast_syscall_32+0x34/0x80 [ 187.233425][ T6957] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 187.233449][ T6957] RIP: 0023:0xf7f12539 [ 187.233465][ T6957] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 187.233481][ T6957] RSP: 002b:00000000f542655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 187.233501][ T6957] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c028aa03 [ 187.233514][ T6957] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 187.233525][ T6957] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 187.233536][ T6957] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 187.233547][ T6957] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 187.233577][ T6957] [ 187.252022][ T6949] macvtap1: entered promiscuous mode [ 187.596462][ T6949] vlan0: entered promiscuous mode [ 187.602168][ T6949] macvtap1: entered allmulticast mode [ 187.609189][ T6949] vlan0: entered allmulticast mode [ 187.614423][ T6949] veth0_vlan: entered allmulticast mode [ 187.634890][ T6958] macvtap2: entered promiscuous mode [ 187.643867][ T6958] macvtap2: entered allmulticast mode [ 188.237033][ T44] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 188.389337][ T6981] netlink: 'syz.4.246': attribute type 1 has an invalid length. [ 188.457146][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 188.518939][ T44] usb 2-1: config 0 has no interfaces? [ 188.536842][ T44] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 188.546419][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.554957][ T44] usb 2-1: Product: syz [ 188.645412][ T44] usb 2-1: Manufacturer: syz [ 188.696460][ T44] usb 2-1: SerialNumber: syz [ 188.727566][ T44] usb 2-1: config 0 descriptor?? [ 188.837571][ T9] usb 4-1: config 0 has no interfaces? [ 188.865489][ T9] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 188.884213][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.914152][ T9] usb 4-1: Product: syz [ 188.945990][ T9] usb 4-1: Manufacturer: syz [ 188.984110][ T9] usb 4-1: SerialNumber: syz [ 189.082104][ T6989] debugfs: 'netdev:n…DgäFNp' already exists in 'phy7' [ 189.139025][ T9] usb 4-1: config 0 descriptor?? [ 189.361140][ T44] usb 2-1: USB disconnect, device number 11 [ 189.698575][ T6976] veth0_vlan: left promiscuous mode [ 189.709850][ T6976] veth0_vlan: entered promiscuous mode [ 189.941302][ T6992] FAULT_INJECTION: forcing a failure. [ 189.941302][ T6992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.964420][ T6992] CPU: 1 UID: 0 PID: 6992 Comm: syz.4.248 Not tainted syzkaller #0 PREEMPT(full) [ 189.964448][ T6992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 189.964461][ T6992] Call Trace: [ 189.964469][ T6992] [ 189.964486][ T6992] dump_stack_lvl+0x189/0x250 [ 189.964517][ T6992] ? __pfx____ratelimit+0x10/0x10 [ 189.964547][ T6992] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.964571][ T6992] ? __pfx__printk+0x10/0x10 [ 189.964613][ T6992] should_fail_ex+0x414/0x560 [ 189.964650][ T6992] strncpy_from_user+0x36/0x290 [ 189.964681][ T6992] getname_flags+0xf3/0x540 [ 189.964706][ T6992] __ia32_sys_getxattr+0x1b2/0x210 [ 189.964733][ T6992] ? __pfx___ia32_sys_getxattr+0x10/0x10 [ 189.964789][ T6992] ? lockdep_hardirqs_on+0x9c/0x150 [ 189.964824][ T6992] __do_fast_syscall_32+0xb6/0x2b0 [ 189.964844][ T6992] ? lockdep_hardirqs_on+0x9c/0x150 [ 189.964879][ T6992] do_fast_syscall_32+0x34/0x80 [ 189.964899][ T6992] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 189.964923][ T6992] RIP: 0023:0xf7fb5539 [ 189.964940][ T6992] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 189.964956][ T6992] RSP: 002b:00000000f54c655c EFLAGS: 00000206 ORIG_RAX: 00000000000000e5 [ 189.964977][ T6992] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000040 [ 189.964991][ T6992] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 189.965002][ T6992] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 189.965013][ T6992] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 189.965024][ T6992] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 189.965053][ T6992] [ 190.847106][ T44] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 190.999306][ T44] usb 5-1: config 8 has an invalid interface number: 177 but max is 0 [ 191.010099][ T44] usb 5-1: config 8 has no interface number 0 [ 191.032714][ T44] usb 5-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 191.063096][ T44] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x88 has invalid maxpacket 1023, setting to 64 [ 191.101829][ T44] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 191.125379][ T44] usb 5-1: config 8 interface 177 has no altsetting 0 [ 191.151006][ T44] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 191.176878][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.237332][ T6994] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 191.260086][ T7017] netlink: 'syz.0.257': attribute type 1 has an invalid length. [ 191.607029][ T6994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.654317][ T7025] netlink: 'syz.1.258': attribute type 1 has an invalid length. [ 191.683992][ T5940] usb 4-1: USB disconnect, device number 12 [ 191.702450][ T6994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.758749][ T7026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.259'. [ 191.779224][ T7026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.259'. [ 191.813671][ T44] usb 5-1: string descriptor 0 read error: -71 [ 191.832114][ T44] ir_toy 5-1:8.177: required endpoints not found [ 191.895133][ T44] usb 5-1: USB disconnect, device number 7 [ 192.280646][ T7039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.263'. [ 192.289667][ T7039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.263'. [ 193.163040][ T7046] netlink: 'syz.4.264': attribute type 10 has an invalid length. [ 193.223112][ T7046] netlink: 40 bytes leftover after parsing attributes in process `syz.4.264'. [ 195.074940][ T7066] bridge0: port 3(veth0_to_bridge) entered blocking state [ 195.225458][ T7066] bridge0: port 3(veth0_to_bridge) entered disabled state [ 195.262329][ T7066] veth0_to_bridge: entered allmulticast mode [ 195.339694][ T7066] veth0_to_bridge: entered promiscuous mode [ 195.356457][ T7066] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 195.384328][ T7066] bridge0: port 3(veth0_to_bridge) entered blocking state [ 195.392647][ T7066] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 195.837086][ T5940] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 196.005439][ T5940] usb 5-1: Using ep0 maxpacket: 16 [ 196.021762][ T5940] usb 5-1: config 0 has an invalid descriptor of length 186, skipping remainder of the config [ 196.036001][ T5940] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 196.091577][ T5940] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 196.110160][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.131771][ T5940] usb 5-1: Product: syz [ 196.136050][ T5940] usb 5-1: Manufacturer: syz [ 196.141820][ T5940] usb 5-1: SerialNumber: syz [ 196.151540][ T5940] usb 5-1: config 0 descriptor?? [ 196.180303][ T7080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.273'. [ 196.228325][ T7080] netlink: 24 bytes leftover after parsing attributes in process `syz.0.273'. [ 196.485625][ T7089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.275'. [ 196.609777][ T7089] misc userio: The device must be registered before sending interrupts [ 196.710832][ T7076] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 197.809408][ T7108] netlink: 'syz.1.280': attribute type 1 has an invalid length. [ 199.006570][ T5940] usb 5-1: USB disconnect, device number 8 [ 199.490876][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.505814][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.857191][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 200.037495][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.051823][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 200.086147][ T9] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 200.096808][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.205328][ T9] usb 5-1: Product: syz [ 200.242726][ T9] usb 5-1: Manufacturer: syz [ 200.253537][ T9] usb 5-1: SerialNumber: syz [ 200.274166][ T7120] random: crng reseeded on system resumption [ 200.327978][ T9] usb 5-1: config 0 descriptor?? [ 200.507106][ T5958] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 200.671093][ T5958] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.684763][ T5958] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 200.705687][ T5958] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 200.725808][ T5958] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.734247][ T5958] usb 3-1: Product: syz [ 200.739944][ T5958] usb 3-1: Manufacturer: syz [ 200.744661][ T5958] usb 3-1: SerialNumber: syz [ 200.753084][ T5958] usb 3-1: config 0 descriptor?? [ 200.948780][ T7148] netlink: 76 bytes leftover after parsing attributes in process `syz.3.293'. [ 201.263131][ T7152] netlink: 72 bytes leftover after parsing attributes in process `syz.1.294'. [ 202.367311][ T5940] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 202.446083][ T5958] usb 5-1: USB disconnect, device number 9 [ 202.551773][ T5940] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 202.568679][ T5940] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.585761][ T5940] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 202.606264][ T5940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.636101][ T5940] hub 2-1:4.0: USB hub found [ 202.787093][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 202.830653][ T5940] hub 2-1:4.0: 13 ports detected [ 202.845703][ T5940] usb 2-1: selecting invalid altsetting 1 [ 202.852961][ T5940] hub 2-1:4.0: Using single TT (err -22) [ 202.866854][ T5940] hub 2-1:4.0: insufficient power available to use all downstream ports [ 202.984731][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 203.000288][ T9] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 203.014541][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 203.030229][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.062640][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 203.074860][ T9] usb 4-1: invalid MIDI out EP 0 [ 203.210125][ T5957] usb 3-1: USB disconnect, device number 7 [ 203.317491][ T6536] udevd[6536]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 203.352446][ T9] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 203.747420][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 203.747442][ T30] audit: type=1326 audit(1757043636.132:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.2.300" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 204.010035][ T30] audit: type=1326 audit(1757043636.132:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.2.300" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 204.042113][ T5940] hub 2-1:4.0: hub_hub_status failed (err = -32) [ 204.187599][ T5940] hub 2-1:4.0: config failed, can't get hub status (err -32) [ 204.217172][ T30] audit: type=1326 audit(1757043636.132:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.2.300" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 204.523903][ T30] audit: type=1326 audit(1757043636.132:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.2.300" exe="/root/syz-executor" sig=0 arch=40000003 syscall=118 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 204.635634][ T30] audit: type=1326 audit(1757043636.132:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.2.300" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 204.696844][ T30] audit: type=1326 audit(1757043636.132:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.2.300" exe="/root/syz-executor" sig=0 arch=40000003 syscall=343 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 204.795431][ T30] audit: type=1326 audit(1757043636.132:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.2.300" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 205.037266][ T9] usb 2-1: USB disconnect, device number 12 [ 205.118568][ T30] audit: type=1326 audit(1757043636.132:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.2.300" exe="/root/syz-executor" sig=0 arch=40000003 syscall=444 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 205.125907][ T7188] netlink: 12 bytes leftover after parsing attributes in process `syz.0.305'. [ 205.221286][ T30] audit: type=1326 audit(1757043636.132:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.2.300" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 205.332196][ T30] audit: type=1326 audit(1757043636.132:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.2.300" exe="/root/syz-executor" sig=0 arch=40000003 syscall=446 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 205.575735][ T7193] netlink: 'syz.2.306': attribute type 2 has an invalid length. [ 205.725785][ T5940] usb 4-1: USB disconnect, device number 13 [ 205.906597][ T7199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.307'. [ 205.917232][ T7199] netlink: 12 bytes leftover after parsing attributes in process `syz.2.307'. [ 206.294137][ T7206] FAULT_INJECTION: forcing a failure. [ 206.294137][ T7206] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.319352][ T7206] CPU: 0 UID: 0 PID: 7206 Comm: syz.0.310 Not tainted syzkaller #0 PREEMPT(full) [ 206.319382][ T7206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 206.319394][ T7206] Call Trace: [ 206.319402][ T7206] [ 206.319413][ T7206] dump_stack_lvl+0x189/0x250 [ 206.319435][ T7206] ? __pfx____ratelimit+0x10/0x10 [ 206.319458][ T7206] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.319475][ T7206] ? __pfx__printk+0x10/0x10 [ 206.319504][ T7206] should_fail_ex+0x414/0x560 [ 206.319527][ T7206] _copy_to_user+0x31/0xb0 [ 206.319546][ T7206] simple_read_from_buffer+0xe1/0x170 [ 206.319571][ T7206] proc_fail_nth_read+0x1b3/0x220 [ 206.319590][ T7206] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 206.319608][ T7206] ? rw_verify_area+0x2a6/0x4d0 [ 206.319626][ T7206] ? __lock_acquire+0xab9/0xd20 [ 206.319646][ T7206] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 206.319663][ T7206] vfs_read+0x1fd/0xa30 [ 206.319680][ T7206] ? fdget_pos+0x247/0x320 [ 206.319696][ T7206] ? __pfx___mutex_lock+0x10/0x10 [ 206.319709][ T7206] ? __pfx_vfs_read+0x10/0x10 [ 206.319729][ T7206] ? __fget_files+0x2a/0x420 [ 206.319744][ T7206] ? __fget_files+0x3a0/0x420 [ 206.319755][ T7206] ? __fget_files+0x2a/0x420 [ 206.319774][ T7206] ksys_read+0x145/0x250 [ 206.319794][ T7206] ? __pfx_ksys_read+0x10/0x10 [ 206.319815][ T7206] ? lockdep_hardirqs_on+0x9c/0x150 [ 206.319839][ T7206] __do_fast_syscall_32+0xb6/0x2b0 [ 206.319853][ T7206] ? lockdep_hardirqs_on+0x9c/0x150 [ 206.319877][ T7206] do_fast_syscall_32+0x34/0x80 [ 206.319891][ T7206] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 206.319909][ T7206] RIP: 0023:0xf70ee539 [ 206.319922][ T7206] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 206.319933][ T7206] RSP: 002b:00000000f54de590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 206.319948][ T7206] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54de620 [ 206.319958][ T7206] RDX: 000000000000000f RSI: 00000000f7464ff4 RDI: 0000000000000000 [ 206.319966][ T7206] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 206.319974][ T7206] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 206.319982][ T7206] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 206.320002][ T7206] [ 206.555420][ C0] vkms_vblank_simulate: vblank timer overrun [ 206.757205][ T7202] debugfs: 'netdev:n…DgäFNp' already exists in 'phy11' [ 207.090155][ T7220] FAULT_INJECTION: forcing a failure. [ 207.090155][ T7220] name failslab, interval 1, probability 0, space 0, times 0 [ 207.103354][ T7220] CPU: 1 UID: 0 PID: 7220 Comm: syz.3.313 Not tainted syzkaller #0 PREEMPT(full) [ 207.103381][ T7220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 207.103394][ T7220] Call Trace: [ 207.103403][ T7220] [ 207.103412][ T7220] dump_stack_lvl+0x189/0x250 [ 207.103443][ T7220] ? __pfx____ratelimit+0x10/0x10 [ 207.103474][ T7220] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.103500][ T7220] ? __pfx__printk+0x10/0x10 [ 207.103542][ T7220] should_fail_ex+0x414/0x560 [ 207.103576][ T7220] should_failslab+0xa8/0x100 [ 207.103609][ T7220] kmem_cache_alloc_noprof+0x73/0x3c0 [ 207.103637][ T7220] ? radix_tree_node_alloc+0x7e/0x3a0 [ 207.103671][ T7220] radix_tree_node_alloc+0x7e/0x3a0 [ 207.103702][ T7220] ? arch_stack_walk+0xfc/0x150 [ 207.103731][ T7220] idr_get_free+0x2b3/0xa70 [ 207.103774][ T7220] idr_alloc_u32+0x159/0x2d0 [ 207.103808][ T7220] ? __pfx_idr_alloc_u32+0x10/0x10 [ 207.103840][ T7220] ? net_generic+0x1e/0x240 [ 207.103862][ T7220] ? l2tp_tunnel_register+0x11c/0x1320 [ 207.103885][ T7220] l2tp_tunnel_register+0x136/0x1320 [ 207.103910][ T7220] ? do_raw_spin_lock+0x121/0x290 [ 207.103946][ T7220] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 207.103972][ T7220] ? __pfx_l2tp_tunnel_register+0x10/0x10 [ 207.104008][ T7220] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 207.104037][ T7220] ? lockdep_hardirqs_on+0x9c/0x150 [ 207.104069][ T7220] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 207.104097][ T7220] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 207.104136][ T7220] ? l2tp_tunnel_create+0x249/0x3e0 [ 207.104153][ T7220] ? l2tp_tunnel_create+0x2d3/0x3e0 [ 207.104178][ T7220] l2tp_nl_cmd_tunnel_create+0x331/0x950 [ 207.104213][ T7220] ? __pfx_l2tp_nl_cmd_tunnel_create+0x10/0x10 [ 207.104246][ T7220] ? __nla_parse+0x40/0x60 [ 207.104281][ T7220] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 207.104323][ T7220] genl_family_rcv_msg_doit+0x212/0x300 [ 207.104356][ T7220] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 207.104397][ T7220] ? bpf_lsm_capable+0x9/0x20 [ 207.104424][ T7220] ? security_capable+0x7e/0x2e0 [ 207.104461][ T7220] genl_rcv_msg+0x60e/0x790 [ 207.104493][ T7220] ? __pfx_genl_rcv_msg+0x10/0x10 [ 207.104517][ T7220] ? __pfx_l2tp_nl_cmd_tunnel_create+0x10/0x10 [ 207.104547][ T7220] ? __asan_memcpy+0x40/0x70 [ 207.104570][ T7220] ? __pfx_ref_tracker_free+0x10/0x10 [ 207.104608][ T7220] netlink_rcv_skb+0x208/0x470 [ 207.104637][ T7220] ? __lock_acquire+0xab9/0xd20 [ 207.104667][ T7220] ? __pfx_genl_rcv_msg+0x10/0x10 [ 207.104693][ T7220] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 207.104746][ T7220] ? down_read+0x1ad/0x2e0 [ 207.104770][ T7220] genl_rcv+0x28/0x40 [ 207.104792][ T7220] netlink_unicast+0x82f/0x9e0 [ 207.104829][ T7220] ? __pfx_netlink_unicast+0x10/0x10 [ 207.104861][ T7220] ? netlink_sendmsg+0x642/0xb30 [ 207.104877][ T7220] ? skb_put+0x11b/0x210 [ 207.104902][ T7220] netlink_sendmsg+0x805/0xb30 [ 207.104939][ T7220] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.104962][ T7220] ? __import_iovec+0x5d4/0x7f0 [ 207.104984][ T7220] ? aa_sock_msg_perm+0xf1/0x1d0 [ 207.105005][ T7220] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 207.105027][ T7220] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.105047][ T7220] __sock_sendmsg+0x21c/0x270 [ 207.105078][ T7220] ____sys_sendmsg+0x505/0x830 [ 207.105108][ T7220] ? __pfx_____sys_sendmsg+0x10/0x10 [ 207.105149][ T7220] ___sys_sendmsg+0x21f/0x2a0 [ 207.105174][ T7220] ? __pfx____sys_sendmsg+0x10/0x10 [ 207.105238][ T7220] ? __fget_files+0x2a/0x420 [ 207.105255][ T7220] ? __fget_files+0x3a0/0x420 [ 207.105286][ T7220] __sys_sendmsg+0x164/0x220 [ 207.105310][ T7220] ? __pfx___sys_sendmsg+0x10/0x10 [ 207.105352][ T7220] ? lockdep_hardirqs_on+0x9c/0x150 [ 207.105386][ T7220] __do_fast_syscall_32+0xb6/0x2b0 [ 207.105406][ T7220] ? lockdep_hardirqs_on+0x9c/0x150 [ 207.105441][ T7220] do_fast_syscall_32+0x34/0x80 [ 207.105461][ T7220] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 207.105484][ T7220] RIP: 0023:0xf70be539 [ 207.105502][ T7220] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 207.105518][ T7220] RSP: 002b:00000000f54ae55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 207.105539][ T7220] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 207.105553][ T7220] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 207.105564][ T7220] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 207.105576][ T7220] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 207.105587][ T7220] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 207.105618][ T7220] [ 208.402503][ T7223] netlink: 'syz.0.314': attribute type 1 has an invalid length. [ 208.997668][ T7235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.316'. [ 210.265926][ T7250] bridge0: port 3(veth0_to_bridge) entered blocking state [ 210.275058][ T7250] bridge0: port 3(veth0_to_bridge) entered disabled state [ 210.313558][ T7250] veth0_to_bridge: entered allmulticast mode [ 210.365979][ T7250] veth0_to_bridge: entered promiscuous mode [ 210.396286][ T7250] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 210.687365][ T7250] bridge0: port 3(veth0_to_bridge) entered blocking state [ 210.694801][ T7250] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 211.067145][ T44] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 211.269845][ T44] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 211.278507][ T44] usb 2-1: config 0 has no interface number 0 [ 211.305943][ T44] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 211.334922][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.365249][ T44] usb 2-1: Product: syz [ 211.382182][ T44] usb 2-1: Manufacturer: syz [ 211.408531][ T44] usb 2-1: SerialNumber: syz [ 211.454502][ T44] usb 2-1: config 0 descriptor?? [ 211.497151][ T7261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.325'. [ 211.557430][ T7261] netlink: 24 bytes leftover after parsing attributes in process `syz.4.325'. [ 211.807404][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 211.813622][ T5876] Bluetooth: hci1: command 0x0406 tx timeout [ 211.813670][ T5874] Bluetooth: hci0: command 0x0406 tx timeout [ 211.819768][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 211.832542][ T5186] Bluetooth: hci2: command 0x0406 tx timeout [ 212.128849][ T7257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.323'. [ 212.142287][ T44] usb 2-1: Firmware version (0.0) predates our first public release. [ 212.179378][ T44] usb 2-1: Please update to version 0.2 or newer [ 212.239712][ T44] usb 2-1: USB disconnect, device number 13 [ 212.307274][ T7278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.329'. [ 213.190340][ T7288] netlink: 'syz.1.330': attribute type 10 has an invalid length. [ 213.252880][ T7288] netlink: 40 bytes leftover after parsing attributes in process `syz.1.330'. [ 213.965129][ T7286] debugfs: 'netdev:n…DgäFNp' already exists in 'phy11' [ 214.020922][ T7295] netlink: 'syz.2.332': attribute type 1 has an invalid length. [ 214.852560][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 214.865157][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 214.877520][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 214.889791][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 214.902052][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 214.914354][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 214.926721][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 214.939017][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 214.951293][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 214.963617][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 217.620304][ T7300] netlink: 'syz.4.334': attribute type 10 has an invalid length. [ 217.653447][ T7300] netlink: 40 bytes leftover after parsing attributes in process `syz.4.334'. [ 219.857173][ C1] net_ratelimit: 16120 callbacks suppressed [ 219.857192][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 219.875606][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 219.887919][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 219.900220][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 219.912489][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 219.924734][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 219.937023][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 219.949261][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 219.961529][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 219.974057][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 224.866996][ C0] net_ratelimit: 23187 callbacks suppressed [ 224.867018][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.867030][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:2b:f9:99:e0:f1, vlan:0) [ 224.867408][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 224.873477][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.885471][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:2b:f9:99:e0:f1, vlan:0) [ 224.897365][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.909261][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 224.921406][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.933388][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:2b:f9:99:e0:f1, vlan:0) [ 224.945193][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.597725][ C0] sched: DL replenish lagged too much [ 229.877111][ C1] net_ratelimit: 23676 callbacks suppressed [ 229.877134][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:82:a6:20:17:03, vlan:0) [ 229.877335][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.883533][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:2b:f9:99:e0:f1, vlan:0) [ 229.895466][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.907479][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 229.920206][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.931469][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.943355][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.955834][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.967840][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.887060][ C1] net_ratelimit: 20472 callbacks suppressed [ 234.887082][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:82:a6:20:17:03, vlan:0) [ 234.887271][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.893488][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:2b:f9:99:e0:f1, vlan:0) [ 234.905408][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.917468][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.929654][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.941448][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.953271][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.966600][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.977419][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.896923][ C0] net_ratelimit: 17588 callbacks suppressed [ 239.896947][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.896955][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.897369][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.905462][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.915625][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.927485][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:82:a6:20:17:03, vlan:0) [ 239.939431][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.951374][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:2b:f9:99:e0:f1, vlan:0) [ 239.963618][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.975580][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.907030][ C0] net_ratelimit: 18462 callbacks suppressed [ 244.907054][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.908020][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.913412][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.925517][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:82:a6:20:17:03, vlan:0) [ 244.938016][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.949858][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:2b:f9:99:e0:f1, vlan:0) [ 244.961754][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.973731][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.985978][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.997706][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.916965][ C0] net_ratelimit: 18607 callbacks suppressed [ 249.916990][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.918053][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.923317][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.935421][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:82:a6:20:17:03, vlan:0) [ 249.947407][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.959640][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:2b:f9:99:e0:f1, vlan:0) [ 249.971674][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.983468][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.995491][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.007551][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.927050][ C0] net_ratelimit: 17951 callbacks suppressed [ 254.927074][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.929326][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.933449][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.945393][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:82:a6:20:17:03, vlan:0) [ 254.957626][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.969523][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:2b:f9:99:e0:f1, vlan:0) [ 254.981988][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.993509][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 255.005600][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 255.017466][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.936923][ C0] net_ratelimit: 15265 callbacks suppressed [ 259.936947][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.938314][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.943551][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.955376][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:82:a6:20:17:03, vlan:0) [ 259.967396][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.979432][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:2b:f9:99:e0:f1, vlan:0) [ 259.991631][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 260.003363][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 260.015568][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.027401][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.947006][ C0] net_ratelimit: 15343 callbacks suppressed [ 264.947030][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.948526][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.953548][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.965613][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:82:a6:20:17:03, vlan:0) [ 264.977685][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.989629][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:2b:f9:99:e0:f1, vlan:0) [ 265.001557][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.013506][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 265.025639][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 265.037728][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.956935][ C0] net_ratelimit: 15335 callbacks suppressed [ 269.956957][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.957073][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.963496][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.975330][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.987279][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.001434][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.011300][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 270.023137][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:82:a6:20:17:03, vlan:0) [ 270.035249][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.047079][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:2b:f9:99:e0:f1, vlan:0) [ 274.966977][ C1] net_ratelimit: 15362 callbacks suppressed [ 274.967000][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.967000][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.969545][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.973345][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.985374][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:82:a6:20:17:03, vlan:0) [ 274.997372][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.009371][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:2b:f9:99:e0:f1, vlan:0) [ 275.021448][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.033602][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.045590][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.976974][ C0] net_ratelimit: 15320 callbacks suppressed [ 279.976997][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.978147][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.983456][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.995348][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:82:a6:20:17:03, vlan:0) [ 280.007471][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.019751][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:2b:f9:99:e0:f1, vlan:0) [ 280.031714][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.043743][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.055867][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.067823][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.986959][ C0] net_ratelimit: 15340 callbacks suppressed [ 284.986983][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.987097][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.993482][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.005745][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.017663][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.031970][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.041833][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 285.053907][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:82:a6:20:17:03, vlan:0) [ 285.066067][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.077874][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:2b:f9:99:e0:f1, vlan:0) [ 289.997053][ C0] net_ratelimit: 15367 callbacks suppressed [ 289.997076][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.997666][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.003464][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.015644][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:82:a6:20:17:03, vlan:0) [ 290.027637][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 290.039540][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:2b:f9:99:e0:f1, vlan:0) [ 290.051642][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.063370][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 290.075414][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.087435][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.006958][ C0] net_ratelimit: 15336 callbacks suppressed [ 295.006982][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.008383][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.013525][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.025636][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:82:a6:20:17:03, vlan:0) [ 295.037770][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 295.049726][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:2b:f9:99:e0:f1, vlan:0) [ 295.061853][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.073541][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 295.085627][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.097608][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.017021][ C0] net_ratelimit: 15319 callbacks suppressed [ 300.017045][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.017482][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.023470][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.035679][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:82:a6:20:17:03, vlan:0) [ 300.047719][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.059697][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:2b:f9:99:e0:f1, vlan:0) [ 300.072096][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.083842][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.095899][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.107917][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.027204][ C0] net_ratelimit: 15338 callbacks suppressed [ 305.027227][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.027486][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.033703][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.045598][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:82:a6:20:17:03, vlan:0) [ 305.057926][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.069790][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:2b:f9:99:e0:f1, vlan:0) [ 305.087085][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.094363][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.106440][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.118369][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.037089][ C0] net_ratelimit: 15310 callbacks suppressed [ 310.037112][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.038924][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.043583][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.055548][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:82:a6:20:17:03, vlan:0) [ 310.067767][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.079674][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:2b:f9:99:e0:f1, vlan:0) [ 310.091566][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.103763][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.116009][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.128446][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.047002][ C1] net_ratelimit: 15315 callbacks suppressed [ 315.047027][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.047337][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.055504][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.065347][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.078033][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:82:a6:20:17:03, vlan:0) [ 315.090350][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.102368][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:2b:f9:99:e0:f1, vlan:0) [ 315.114496][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.126356][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.138400][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.056939][ C1] net_ratelimit: 15275 callbacks suppressed [ 320.056963][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.056982][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.065556][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.075618][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.087498][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:82:a6:20:17:03, vlan:0) [ 320.099506][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.111528][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:2b:f9:99:e0:f1, vlan:0) [ 320.123549][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.135351][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.147562][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.067111][ C0] net_ratelimit: 15319 callbacks suppressed [ 325.067135][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.067511][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.073555][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.085593][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:82:a6:20:17:03, vlan:0) [ 325.097645][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 325.109512][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:2b:f9:99:e0:f1, vlan:0) [ 325.121629][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.133362][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 325.145436][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.157451][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.077026][ C0] net_ratelimit: 15700 callbacks suppressed [ 330.077038][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:2b:f9:99:e0:f1, vlan:0) [ 330.077051][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.077454][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.083340][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 330.095535][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 330.107538][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.119514][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.132358][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 330.143198][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.156291][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.086879][ C0] net_ratelimit: 15961 callbacks suppressed [ 335.086904][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 335.086911][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:2b:f9:99:e0:f1, vlan:0) [ 335.087255][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 335.093578][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.105653][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.117734][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.130757][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 335.141768][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 335.154750][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.165673][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.096932][ C0] net_ratelimit: 15853 callbacks suppressed [ 340.096955][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.097542][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.103345][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.115397][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:82:a6:20:17:03, vlan:0) [ 340.127442][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 340.139338][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:2b:f9:99:e0:f1, vlan:0) [ 340.151471][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.163196][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 340.175245][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.187334][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.107016][ C0] net_ratelimit: 15855 callbacks suppressed [ 345.107039][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 345.108200][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 345.113609][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.126651][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.137336][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.149491][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:82:a6:20:17:03, vlan:0) [ 345.161549][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 345.173405][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:2b:f9:99:e0:f1, vlan:0) [ 345.185518][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.197255][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 350.116923][ C1] net_ratelimit: 16211 callbacks suppressed [ 350.116939][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 350.116945][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:2b:f9:99:e0:f1, vlan:0) [ 350.117295][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 350.123456][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.135261][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.147311][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.160485][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:2b:f9:99:e0:f1, vlan:0) [ 350.171286][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 350.183090][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 350.195192][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.126921][ C0] net_ratelimit: 16816 callbacks suppressed [ 355.126931][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:2b:f9:99:e0:f1, vlan:0) [ 355.126943][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.127415][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.133214][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 355.145632][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.157418][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.169341][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 355.182469][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:82:a6:20:17:03, vlan:0) [ 355.193423][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.205348][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:2b:f9:99:e0:f1, vlan:0) [ 357.786844][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 357.793841][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P1151/1:b..l P3514/1:b..l P5225/1:b..l P5530/1:b..l P5860/1:b..l [ 357.806854][ C0] rcu: (detected by 0, t=10504 jiffies, g=22721, q=1759 ncpus=2) [ 357.814704][ C0] task:syz-executor state:R running task stack:24104 pid:5860 tgid:5860 ppid:5854 task_flags:0x40050c flags:0x20004004 [ 357.829267][ C0] Call Trace: [ 357.832579][ C0] [ 357.835539][ C0] __schedule+0x1798/0x4cc0 [ 357.840100][ C0] ? __pfx_get_page_from_freelist+0x10/0x10 [ 357.846030][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 357.851268][ C0] ? __pfx___schedule+0x10/0x10 [ 357.856172][ C0] ? memcg_rstat_updated+0xee/0x220 [ 357.861583][ C0] ? memcg_rstat_updated+0x10f/0x220 [ 357.866907][ C0] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 357.872484][ C0] ? preempt_schedule+0xae/0xc0 [ 357.877397][ C0] preempt_schedule_common+0x83/0xd0 [ 357.882733][ C0] preempt_schedule+0xae/0xc0 [ 357.887445][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 357.892856][ C0] ? __folio_rmap_sanity_checks+0x454/0x7d0 [ 357.898778][ C0] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 357.904364][ C0] preempt_schedule_thunk+0x16/0x30 [ 357.909625][ C0] _raw_spin_unlock+0x3f/0x50 [ 357.914346][ C0] unmap_page_range+0x3a79/0x4370 [ 357.919459][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 357.924957][ C0] ? mas_find+0xb0e/0xd30 [ 357.929674][ C0] ? unmap_vmas+0x144/0x580 [ 357.934250][ C0] unmap_vmas+0x399/0x580 [ 357.938790][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 357.943784][ C0] exit_mmap+0x248/0xb50 [ 357.948067][ C0] ? uprobe_clear_state+0x20f/0x290 [ 357.953301][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 357.958094][ C0] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 357.963786][ C0] ? __pfx_exit_aio+0x10/0x10 [ 357.968516][ C0] ? uprobe_clear_state+0x274/0x290 [ 357.973752][ C0] __mmput+0x118/0x420 [ 357.977871][ C0] exit_mm+0x1da/0x2c0 [ 357.981980][ C0] ? __pfx_exit_mm+0x10/0x10 [ 357.986695][ C0] ? rcu_is_watching+0x15/0xb0 [ 357.991515][ C0] do_exit+0x648/0x2300 [ 357.995715][ C0] ? do_raw_spin_lock+0x121/0x290 [ 358.000784][ C0] ? __pfx_do_exit+0x10/0x10 [ 358.005430][ C0] do_group_exit+0x21c/0x2d0 [ 358.010053][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 358.015296][ C0] get_signal+0x1286/0x1340 [ 358.019851][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 358.025436][ C0] ? __pfx___ia32_compat_sys_wait4+0x10/0x10 [ 358.031459][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 358.037666][ C0] ? exit_to_user_mode_loop+0x40/0x110 [ 358.043164][ C0] exit_to_user_mode_loop+0x75/0x110 [ 358.048494][ C0] __do_fast_syscall_32+0x1f4/0x2b0 [ 358.053820][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 358.059161][ C0] do_fast_syscall_32+0x34/0x80 [ 358.064145][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 358.070511][ C0] RIP: 0023:0xf7f12539 [ 358.074610][ C0] RSP: 002b:00000000ff88c6f0 EFLAGS: 00000206 ORIG_RAX: 0000000000000072 [ 358.083064][ C0] RAX: fffffffffffffe00 RBX: 00000000ffffffff RCX: 00000000ff88c7bc [ 358.091067][ C0] RDX: 0000000040000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 358.099065][ C0] RBP: 00000000ff88c7bc R08: 0000000000000000 R09: 0000000000000000 [ 358.107067][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 358.115077][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 358.123097][ C0] [ 358.126138][ C0] task:dhcpcd state:R running task stack:24936 pid:5530 tgid:5530 ppid:1 task_flags:0x400140 flags:0x00004002 [ 358.139678][ C0] Call Trace: [ 358.142986][ C0] [ 358.145950][ C0] __schedule+0x1798/0x4cc0 [ 358.150525][ C0] ? __pfx___schedule+0x10/0x10 [ 358.155438][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 358.160764][ C0] preempt_schedule_irq+0xb5/0x150 [ 358.165917][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 358.171682][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 358.177611][ C0] irqentry_exit+0x6f/0x90 [ 358.182062][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 358.188079][ C0] RIP: 0010:kasan_check_range+0x1dd/0x2c0 [ 358.193860][ C0] Code: e4 49 0f 49 dc 48 83 e3 f8 49 29 dc 74 12 41 80 3b 00 0f 85 b8 00 00 00 49 ff c3 49 ff cc 75 ee 5b 41 5c 41 5d 41 5e 41 5f 5d cc cc cc cc cc 45 84 ff 75 63 41 f7 c7 00 ff 00 00 75 5f 41 f7 [ 358.213495][ C0] RSP: 0018:ffffc90003636e90 EFLAGS: 00000256 [ 358.219606][ C0] RAX: 1ffff920006c6d01 RBX: 0000000000000010 RCX: ffffffff8172cd88 [ 358.227611][ C0] RDX: 0000000000000001 RSI: 0000000000000010 RDI: ffffc90003636fd8 [ 358.235800][ C0] RBP: 0000000000000000 R08: ffffc90003636fe7 R09: 1ffff920006c6dfc [ 358.243974][ C0] R10: dffffc0000000000 R11: fffff520006c6dfd R12: ffffc90003637468 [ 358.251978][ C0] R13: ffffc90003636fd8 R14: ffffc90003636fd8 R15: ffffc90003636fd0 [ 358.259988][ C0] ? unwind_next_frame+0xc98/0x2390 [ 358.265228][ C0] __asan_memset+0x22/0x50 [ 358.269681][ C0] unwind_next_frame+0xc98/0x2390 [ 358.274846][ C0] ? unwind_next_frame+0xa5/0x2390 [ 358.280164][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 358.285240][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 358.291437][ C0] arch_stack_walk+0x11c/0x150 [ 358.296250][ C0] ? __kmalloc_node_track_caller_noprof+0x216/0x4e0 [ 358.302910][ C0] stack_trace_save+0x9c/0xe0 [ 358.307628][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 358.313045][ C0] save_stack+0xf5/0x1f0 [ 358.317333][ C0] ? __pfx_save_stack+0x10/0x10 [ 358.322218][ C0] ? __free_frozen_pages+0xbc4/0xd30 [ 358.327540][ C0] ? __put_partials+0x156/0x1a0 [ 358.332422][ C0] ? put_cpu_partial+0x17c/0x250 [ 358.337398][ C0] ? __slab_free+0x2d5/0x3c0 [ 358.342024][ C0] ? qlist_free_all+0x97/0x140 [ 358.346829][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 358.352485][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 358.357552][ C0] ? page_ext_put+0x97/0xc0 [ 358.362099][ C0] __reset_page_owner+0x71/0x1f0 [ 358.367077][ C0] __free_frozen_pages+0xbc4/0xd30 [ 358.372234][ C0] __put_partials+0x156/0x1a0 [ 358.376945][ C0] put_cpu_partial+0x17c/0x250 [ 358.381744][ C0] ? put_cpu_partial+0x6d/0x250 [ 358.386813][ C0] __slab_free+0x2d5/0x3c0 [ 358.391266][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 358.397196][ C0] ? __phys_addr+0xd3/0x180 [ 358.401745][ C0] qlist_free_all+0x97/0x140 [ 358.406381][ C0] kasan_quarantine_reduce+0x148/0x160 [ 358.411885][ C0] __kasan_slab_alloc+0x22/0x80 [ 358.416787][ C0] __kmalloc_node_track_caller_noprof+0x216/0x4e0 [ 358.423239][ C0] ? __alloc_skb+0x142/0x2d0 [ 358.427870][ C0] ? __alloc_skb+0x142/0x2d0 [ 358.432489][ C0] kmalloc_reserve+0x136/0x290 [ 358.437325][ C0] __alloc_skb+0x142/0x2d0 [ 358.441774][ C0] alloc_skb_with_frags+0xca/0x890 [ 358.446928][ C0] ? try_to_wake_up+0x7f5/0x12b0 [ 358.452004][ C0] sock_alloc_send_pskb+0x857/0x990 [ 358.457265][ C0] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 358.463028][ C0] ? sock_def_readable+0xbe/0x550 [ 358.468097][ C0] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 358.474205][ C0] unix_dgram_sendmsg+0x461/0x1850 [ 358.479369][ C0] ? kernel_text_address+0xa5/0xe0 [ 358.484543][ C0] ? __lock_acquire+0xab9/0xd20 [ 358.489617][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 358.495206][ C0] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 358.501661][ C0] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 358.507248][ C0] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 358.513207][ C0] __sock_sendmsg+0x21c/0x270 [ 358.517929][ C0] sock_write_iter+0x258/0x330 [ 358.522734][ C0] ? __pfx_sock_write_iter+0x10/0x10 [ 358.528076][ C0] do_iter_readv_writev+0x61c/0x8b0 [ 358.533316][ C0] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 358.539069][ C0] ? common_file_perm+0x1b5/0x230 [ 358.544128][ C0] ? bpf_lsm_file_permission+0x9/0x20 [ 358.549531][ C0] ? security_file_permission+0x75/0x290 [ 358.555330][ C0] ? rw_verify_area+0x255/0x4d0 [ 358.560247][ C0] vfs_writev+0x31a/0x960 [ 358.564614][ C0] ? __pfx_vfs_writev+0x10/0x10 [ 358.569536][ C0] do_writev+0x14d/0x2d0 [ 358.573844][ C0] ? __pfx_do_writev+0x10/0x10 [ 358.578647][ C0] ? __secure_computing+0xe2/0x2a0 [ 358.583852][ C0] do_syscall_64+0xfa/0x3b0 [ 358.588455][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.594557][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 358.600219][ C0] ? clear_bhb_loop+0x60/0xb0 [ 358.604931][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.610853][ C0] RIP: 0033:0x7f15b6bf8407 [ 358.615293][ C0] RSP: 002b:00007ffd91fdb360 EFLAGS: 00000202 ORIG_RAX: 0000000000000014 [ 358.623822][ C0] RAX: ffffffffffffffda RBX: 00007f15b6b6e740 RCX: 00007f15b6bf8407 [ 358.631824][ C0] RDX: 0000000000000005 RSI: 00007ffd91fdb3c0 RDI: 000000000000000a [ 358.639827][ C0] RBP: 000055f047d85870 R08: 0000000000000000 R09: 0000000000000000 [ 358.647827][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 000055f048e55060 [ 358.655828][ C0] R13: 000000000000012c R14: 0000000000004801 R15: 000055f048e51f64 [ 358.663859][ C0] [ 358.666907][ C0] task:klogd state:R running task stack:24104 pid:5225 tgid:5225 ppid:1 task_flags:0x400100 flags:0x00004002 [ 358.680521][ C0] Call Trace: [ 358.683831][ C0] [ 358.686789][ C0] __schedule+0x1798/0x4cc0 [ 358.691365][ C0] ? __pfx___schedule+0x10/0x10 [ 358.696286][ C0] ? preempt_schedule+0xae/0xc0 [ 358.701181][ C0] preempt_schedule_common+0x83/0xd0 [ 358.706503][ C0] preempt_schedule+0xae/0xc0 [ 358.711213][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 358.716636][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 358.722578][ C0] preempt_schedule_thunk+0x16/0x30 [ 358.727825][ C0] _raw_spin_unlock_irqrestore+0xfd/0x110 [ 358.733585][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 358.739956][ C0] ? autoremove_wake_function+0x39/0x100 [ 358.745629][ C0] __wake_up_common_lock+0x190/0x1f0 [ 358.750955][ C0] sock_def_readable+0x1fb/0x550 [ 358.755931][ C0] ? sock_def_readable+0xbe/0x550 [ 358.760995][ C0] unix_dgram_sendmsg+0xe05/0x1850 [ 358.766151][ C0] ? kasan_quarantine_put+0xdd/0x220 [ 358.771503][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 358.777100][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 358.782503][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 358.788091][ C0] __sock_sendmsg+0x21c/0x270 [ 358.792897][ C0] __sys_sendto+0x3bd/0x520 [ 358.797443][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 358.802599][ C0] ? __rseq_handle_notify_resume+0x37e/0x11f0 [ 358.808721][ C0] ? rcu_is_watching+0x15/0xb0 [ 358.813522][ C0] __x64_sys_sendto+0xde/0x100 [ 358.818321][ C0] do_syscall_64+0xfa/0x3b0 [ 358.822852][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.828959][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 358.834628][ C0] ? clear_bhb_loop+0x60/0xb0 [ 358.839340][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.845258][ C0] RIP: 0033:0x7ffa02713407 [ 358.849875][ C0] RSP: 002b:00007ffd4ae91980 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 358.858319][ C0] RAX: ffffffffffffffda RBX: 00007ffa025c3c80 RCX: 00007ffa02713407 [ 358.866313][ C0] RDX: 0000000000000055 RSI: 00007ffd4ae91ac0 RDI: 0000000000000003 [ 358.874306][ C0] RBP: 00007ffd4ae91ef0 R08: 0000000000000000 R09: 0000000000000000 [ 358.882306][ C0] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffd4ae91f08 [ 358.890300][ C0] R13: 00007ffd4ae91ac0 R14: 000000000000003a R15: 00007ffd4ae91ac0 [ 358.898412][ C0] [ 358.901477][ C0] task:kworker/u8:8 state:R running task stack:21368 pid:3514 tgid:3514 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 358.915090][ C0] Workqueue: iou_exit io_ring_exit_work [ 358.920684][ C0] Call Trace: [ 358.923994][ C0] [ 358.926957][ C0] __schedule+0x1798/0x4cc0 [ 358.931526][ C0] ? __pfx___schedule+0x10/0x10 [ 358.936429][ C0] ? __lock_acquire+0xab9/0xd20 [ 358.941327][ C0] preempt_schedule_notrace+0xd1/0x110 [ 358.946827][ C0] ? __pfx_preempt_schedule_notrace+0x10/0x10 [ 358.952941][ C0] preempt_schedule_notrace_thunk+0x16/0x30 [ 358.958949][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 358.965224][ C0] ? unwind_next_frame+0xa5/0x2390 [ 358.970370][ C0] rcu_is_watching+0x7f/0xb0 [ 358.974987][ C0] ? debug_object_activate+0x383/0x420 [ 358.980482][ C0] ? unwind_next_frame+0xa5/0x2390 [ 358.985707][ C0] unwind_next_frame+0xd4/0x2390 [ 358.990681][ C0] ? unwind_next_frame+0xa5/0x2390 [ 358.995822][ C0] ? fill_pool+0x100/0x570 [ 359.000273][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 359.006460][ C0] arch_stack_walk+0x11c/0x150 [ 359.011261][ C0] ? debug_object_activate+0x383/0x420 [ 359.016758][ C0] stack_trace_save+0x9c/0xe0 [ 359.021467][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 359.026877][ C0] ? __lock_acquire+0xab9/0xd20 [ 359.031769][ C0] kasan_save_track+0x3e/0x80 [ 359.036477][ C0] ? kasan_save_track+0x3e/0x80 [ 359.041352][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 359.046417][ C0] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 359.052077][ C0] ? fill_pool+0x100/0x570 [ 359.056526][ C0] ? debug_object_activate+0x383/0x420 [ 359.062076][ C0] ? fill_pool+0x100/0x570 [ 359.066530][ C0] __kasan_slab_alloc+0x6c/0x80 [ 359.071423][ C0] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 359.076912][ C0] ? fill_pool+0x100/0x570 [ 359.081365][ C0] fill_pool+0x100/0x570 [ 359.085650][ C0] ? debug_object_activate+0x35a/0x420 [ 359.091138][ C0] ? __pfx_fill_pool+0x10/0x10 [ 359.096023][ C0] ? __io_req_caches_free+0x8f/0x140 [ 359.101338][ C0] ? io_ring_exit_work+0x415/0x930 [ 359.106494][ C0] ? worker_thread+0x8a0/0xda0 [ 359.111289][ C0] ? debug_object_activate+0x35a/0x420 [ 359.116781][ C0] debug_object_activate+0x383/0x420 [ 359.122544][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 359.128727][ C0] ? __io_req_caches_free+0x8f/0x140 [ 359.134044][ C0] call_rcu+0xaa/0x9c0 [ 359.138166][ C0] ? __pfx_call_rcu+0x10/0x10 [ 359.142889][ C0] ? __io_req_caches_free+0x8f/0x140 [ 359.148210][ C0] kmem_cache_free+0x309/0x400 [ 359.153025][ C0] __io_req_caches_free+0x8f/0x140 [ 359.158186][ C0] io_req_caches_free+0x21/0x60 [ 359.163075][ C0] io_ring_exit_work+0x415/0x930 [ 359.168077][ C0] ? __pfx_io_ring_exit_work+0x10/0x10 [ 359.173586][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 359.178824][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 359.184566][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 359.190318][ C0] process_scheduled_works+0xae1/0x17b0 [ 359.195919][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 359.201945][ C0] worker_thread+0x8a0/0xda0 [ 359.206607][ C0] kthread+0x70e/0x8a0 [ 359.210711][ C0] ? __pfx_worker_thread+0x10/0x10 [ 359.215848][ C0] ? __pfx_kthread+0x10/0x10 [ 359.220544][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 359.225783][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 359.231019][ C0] ? __pfx_kthread+0x10/0x10 [ 359.235640][ C0] ret_from_fork+0x3fc/0x770 [ 359.240257][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 359.245405][ C0] ? __switch_to_asm+0x39/0x70 [ 359.250202][ C0] ? __switch_to_asm+0x33/0x70 [ 359.254994][ C0] ? __pfx_kthread+0x10/0x10 [ 359.259616][ C0] ret_from_fork_asm+0x1a/0x30 [ 359.264436][ C0] [ 359.267471][ C0] task:kworker/u8:6 state:R running task stack:22232 pid:1151 tgid:1151 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 359.281090][ C0] Workqueue: iou_exit io_ring_exit_work [ 359.286688][ C0] Call Trace: [ 359.289987][ C0] [ 359.292945][ C0] __schedule+0x1798/0x4cc0 [ 359.297540][ C0] ? __pfx___schedule+0x10/0x10 [ 359.302429][ C0] ? unwind_next_frame+0xa5/0x2390 [ 359.307585][ C0] ? __lock_acquire+0xab9/0xd20 [ 359.312481][ C0] preempt_schedule_notrace+0xd1/0x110 [ 359.317980][ C0] ? __pfx_preempt_schedule_notrace+0x10/0x10 [ 359.324106][ C0] preempt_schedule_notrace_thunk+0x16/0x30 [ 359.330025][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 359.336211][ C0] ? unwind_next_frame+0xa5/0x2390 [ 359.341352][ C0] rcu_is_watching+0x7f/0xb0 [ 359.345974][ C0] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 359.351638][ C0] ? unwind_next_frame+0xa5/0x2390 [ 359.356774][ C0] unwind_next_frame+0xd4/0x2390 [ 359.361745][ C0] ? unwind_next_frame+0xa5/0x2390 [ 359.366886][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 359.371944][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 359.378133][ C0] arch_stack_walk+0x11c/0x150 [ 359.382932][ C0] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 359.388598][ C0] stack_trace_save+0x9c/0xe0 [ 359.393301][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 359.398718][ C0] kasan_save_track+0x3e/0x80 [ 359.403424][ C0] ? kasan_save_track+0x3e/0x80 [ 359.408299][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 359.413359][ C0] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 359.419093][ C0] __kasan_slab_alloc+0x6c/0x80 [ 359.423982][ C0] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 359.429477][ C0] ? fill_pool+0x100/0x570 [ 359.434097][ C0] fill_pool+0x100/0x570 [ 359.438388][ C0] ? debug_object_activate+0x35a/0x420 [ 359.443878][ C0] ? __pfx_fill_pool+0x10/0x10 [ 359.448675][ C0] ? __io_req_caches_free+0x8f/0x140 [ 359.453988][ C0] ? io_ring_exit_work+0x415/0x930 [ 359.459126][ C0] ? worker_thread+0x8a0/0xda0 [ 359.463925][ C0] ? debug_object_activate+0x35a/0x420 [ 359.469415][ C0] debug_object_activate+0x383/0x420 [ 359.474912][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 359.481096][ C0] ? __io_req_caches_free+0x8f/0x140 [ 359.486410][ C0] call_rcu+0xaa/0x9c0 [ 359.490607][ C0] ? __pfx_call_rcu+0x10/0x10 [ 359.495326][ C0] ? __io_req_caches_free+0x8f/0x140 [ 359.500650][ C0] kmem_cache_free+0x309/0x400 [ 359.505461][ C0] __io_req_caches_free+0x8f/0x140 [ 359.510608][ C0] io_req_caches_free+0x21/0x60 [ 359.515507][ C0] io_ring_exit_work+0x415/0x930 [ 359.520493][ C0] ? __pfx_io_ring_exit_work+0x10/0x10 [ 359.526007][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 359.531236][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 359.536982][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 359.542819][ C0] process_scheduled_works+0xae1/0x17b0 [ 359.548426][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 359.554449][ C0] worker_thread+0x8a0/0xda0 [ 359.559092][ C0] kthread+0x70e/0x8a0 [ 359.563200][ C0] ? __pfx_worker_thread+0x10/0x10 [ 359.568428][ C0] ? __pfx_kthread+0x10/0x10 [ 359.573057][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 359.578284][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 359.583523][ C0] ? __pfx_kthread+0x10/0x10 [ 359.588147][ C0] ret_from_fork+0x3fc/0x770 [ 359.592771][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 359.597923][ C0] ? __switch_to_asm+0x39/0x70 [ 359.602724][ C0] ? __switch_to_asm+0x33/0x70 [ 359.607529][ C0] ? __pfx_kthread+0x10/0x10 [ 359.612155][ C0] ret_from_fork_asm+0x1a/0x30 [ 359.616974][ C0] [ 359.620018][ C0] rcu: rcu_preempt kthread starved for 10476 jiffies! g22721 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 359.631362][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 359.641357][ C0] rcu: RCU grace-period kthread stack dump: [ 359.647279][ C0] task:rcu_preempt state:R running task stack:27224 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 359.660817][ C0] Call Trace: [ 359.664122][ C0] [ 359.667080][ C0] __schedule+0x1798/0x4cc0 [ 359.671644][ C0] ? __lock_acquire+0xab9/0xd20 [ 359.676536][ C0] ? __pfx___schedule+0x10/0x10 [ 359.681441][ C0] ? schedule+0x91/0x360 [ 359.685727][ C0] schedule+0x165/0x360 [ 359.689918][ C0] schedule_timeout+0x12b/0x270 [ 359.694799][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 359.700198][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 359.706135][ C0] ? __pfx_process_timeout+0x10/0x10 [ 359.711543][ C0] ? prepare_to_swait_event+0x341/0x380 [ 359.717128][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 359.722031][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 359.728230][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 359.733558][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 359.738886][ C0] ? finish_swait+0xcd/0x1f0 [ 359.743515][ C0] rcu_gp_kthread+0x99/0x390 [ 359.748154][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 359.753390][ C0] ? __kthread_parkme+0x7b/0x200 [ 359.758358][ C0] ? __kthread_parkme+0x1a1/0x200 [ 359.763421][ C0] kthread+0x70e/0x8a0 [ 359.767525][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 359.772777][ C0] ? __pfx_kthread+0x10/0x10 [ 359.777401][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 359.782631][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 359.787873][ C0] ? __pfx_kthread+0x10/0x10 [ 359.792501][ C0] ret_from_fork+0x3fc/0x770 [ 359.797121][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 359.802271][ C0] ? __switch_to_asm+0x39/0x70 [ 359.807066][ C0] ? __switch_to_asm+0x33/0x70 [ 359.811858][ C0] ? __pfx_kthread+0x10/0x10 [ 359.816483][ C0] ret_from_fork_asm+0x1a/0x30 [ 359.821296][ C0] [ 359.824334][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 359.830690][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 359.839654][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 359.849738][ C0] RIP: 0010:is_bpf_text_address+0x26e/0x2b0 [ 359.855764][ C0] Code: e8 47 07 f1 ff c6 05 ce b3 be 0d 01 48 c7 c7 e0 dd 90 8b be 66 03 00 00 48 c7 c2 80 de 90 8b e8 48 e1 ce ff 48 85 db 0f 95 c0 <48> 81 fb 20 02 00 00 40 0f 95 c5 40 20 c5 48 c7 c7 20 9f 13 8e 48 [ 359.875405][ C0] RSP: 0018:ffffc90000006330 EFLAGS: 00000246 [ 359.881513][ C0] RAX: ffffffff81cea600 RBX: 0000000000000000 RCX: ffffffff8de95100 [ 359.889517][ C0] RDX: 0000000000000100 RSI: ffffffff8be33860 RDI: ffffffff8be33820 [ 359.897516][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff81cea4e6 [ 359.905510][ C0] R10: ffffc90000006418 R11: fffff52000000c85 R12: 0000000000000004 [ 359.913509][ C0] R13: dffffc0000000000 R14: ffffffff910bf293 R15: 0000000000000000 [ 359.921512][ C0] FS: 0000000000000000(0000) GS:ffff888125c18000(0000) knlGS:0000000000000000 [ 359.930816][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 359.937423][ C0] CR2: 00000000f74fed1c CR3: 000000007e432000 CR4: 00000000003526f0 [ 359.945426][ C0] DR0: 000000000000000a DR1: 0000000000000002 DR2: 0000000000000003 [ 359.953422][ C0] DR3: 0000000080000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 359.961425][ C0] Call Trace: [ 359.964729][ C0] [ 359.967598][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 359.972832][ C0] ? x86_64_start_kernel+0x143/0x1c0 [ 359.978147][ C0] kernel_text_address+0xa5/0xe0 [ 359.983125][ C0] ? x86_64_start_kernel+0x143/0x1c0 [ 359.988436][ C0] __kernel_text_address+0xd/0x40 [ 359.993496][ C0] unwind_get_return_address+0x4d/0x90 [ 359.998995][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 360.005180][ C0] arch_stack_walk+0xfc/0x150 [ 360.009900][ C0] ? x86_64_start_kernel+0x143/0x1c0 [ 360.015217][ C0] stack_trace_save+0x9c/0xe0 [ 360.019932][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 360.025329][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 360.030738][ C0] ? __lock_acquire+0xab9/0xd20 [ 360.035633][ C0] kasan_save_track+0x3e/0x80 [ 360.040337][ C0] ? kasan_save_track+0x3e/0x80 [ 360.045218][ C0] ? kasan_save_free_info+0x46/0x50 [ 360.050448][ C0] ? __kasan_slab_free+0x5b/0x80 [ 360.055415][ C0] ? kmem_cache_free+0x18f/0x400 [ 360.060401][ C0] ? br_nf_dev_queue_xmit+0x4ee/0x24a0 [ 360.065892][ C0] ? NF_HOOK+0x618/0x6b0 [ 360.070168][ C0] ? br_nf_post_routing+0xb66/0xfe0 [ 360.075398][ C0] ? nf_hook_slow+0xc5/0x220 [ 360.080013][ C0] ? NF_HOOK+0x215/0x3c0 [ 360.084295][ C0] ? br_forward_finish+0xd3/0x130 [ 360.089356][ C0] ? br_nf_forward_finish+0xa40/0xe60 [ 360.094756][ C0] ? NF_HOOK+0x618/0x6b0 [ 360.099024][ C0] ? br_nf_forward_ip+0x647/0x7e0 [ 360.104079][ C0] ? nf_hook_slow+0xc5/0x220 [ 360.108691][ C0] ? NF_HOOK+0x215/0x3c0 [ 360.112966][ C0] ? __br_forward+0x41e/0x600 [ 360.117685][ C0] ? maybe_deliver+0xb5/0x160 [ 360.122396][ C0] ? br_flood+0x31a/0x6a0 [ 360.126757][ C0] ? br_handle_frame_finish+0x14b4/0x19b0 [ 360.132504][ C0] ? br_nf_hook_thresh+0x3c3/0x4a0 [ 360.136964][ C1] net_ratelimit: 12359 callbacks suppressed [ 360.136989][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 360.137640][ C0] ? br_nf_pre_routing_finish_ipv6+0x948/0xd00 [ 360.144105][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.155458][ C0] ? br_nf_pre_routing_ipv6+0x37e/0x6b0 [ 360.155486][ C0] ? br_handle_frame+0x982/0x14c0 [ 360.155506][ C0] ? __netif_receive_skb_core+0x10b6/0x4020 [ 360.163326][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:82:a6:20:17:03, vlan:0) [ 360.173549][ C0] ? __netif_receive_skb+0x72/0x380 [ 360.173581][ C0] ? process_backlog+0x60e/0x14f0 [ 360.179654][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:2b:f9:99:e0:f1, vlan:0) [ 360.184161][ C0] ? __napi_poll+0xc4/0x360 [ 360.190516][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 360.202098][ C0] ? net_rx_action+0x707/0xe30 [ 360.202131][ C0] ? handle_softirqs+0x283/0x870 [ 360.208945][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.212347][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 360.224833][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:82:a6:20:17:03, vlan:0) [ 360.229080][ C0] ? irq_exit_rcu+0x9/0x30 [ 360.229103][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 360.241558][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:2b:f9:99:e0:f1, vlan:0) [ 360.245766][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 360.251242][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 360.262764][ C0] ? pv_native_safe_halt+0x13/0x20 [ 360.262797][ C0] ? default_idle+0x13/0x20 [ 360.262817][ C0] ? default_idle_call+0x74/0xb0 [ 360.268069][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.279624][ C0] ? do_idle+0x1e8/0x510 [ 360.279646][ C0] ? cpu_startup_entry+0x44/0x60 [ 360.279665][ C0] ? rest_init+0x2de/0x300 [ 360.359934][ C0] ? start_kernel+0x3a9/0x410 [ 360.364649][ C0] ? x86_64_start_reservations+0x24/0x30 [ 360.370332][ C0] ? br_nf_dev_queue_xmit+0x4ee/0x24a0 [ 360.375821][ C0] kasan_save_free_info+0x46/0x50 [ 360.380876][ C0] __kasan_slab_free+0x5b/0x80 [ 360.385676][ C0] kmem_cache_free+0x18f/0x400 [ 360.390471][ C0] ? __skb_ext_put+0x218/0x2e0 [ 360.395290][ C0] br_nf_dev_queue_xmit+0x4ee/0x24a0 [ 360.400617][ C0] ? NF_HOOK+0x9e/0x6b0 [ 360.404798][ C0] NF_HOOK+0x618/0x6b0 [ 360.408897][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 360.413520][ C0] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 360.419276][ C0] ? net_generic+0x1e/0x240 [ 360.423803][ C0] ? net_generic+0x1e/0x240 [ 360.428332][ C0] ? net_generic+0x1e/0x240 [ 360.433161][ C0] ? skb_pull+0xc1/0x1d0 [ 360.437447][ C0] br_nf_post_routing+0xb66/0xfe0 [ 360.442506][ C0] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 360.448373][ C0] ? __pfx_br_nf_post_routing+0x10/0x10 [ 360.454045][ C0] nf_hook_slow+0xc5/0x220 [ 360.458494][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 360.464430][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 360.470369][ C0] NF_HOOK+0x215/0x3c0 [ 360.474482][ C0] ? NF_HOOK+0x9e/0x3c0 [ 360.478672][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 360.483299][ C0] ? net_generic+0x1e/0x240 [ 360.487830][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 360.493770][ C0] ? net_generic+0x1e/0x240 [ 360.498309][ C0] br_forward_finish+0xd3/0x130 [ 360.503193][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 360.509179][ C0] br_nf_forward_finish+0xa40/0xe60 [ 360.514419][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 360.520169][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 360.525760][ C0] ? NF_HOOK+0x9e/0x6b0 [ 360.529947][ C0] ? NF_HOOK+0x9e/0x6b0 [ 360.534172][ C0] NF_HOOK+0x618/0x6b0 [ 360.538282][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 360.542903][ C0] ? net_generic+0x1e/0x240 [ 360.547449][ C0] br_nf_forward_ip+0x647/0x7e0 [ 360.552329][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 360.558077][ C0] ? __pfx_br_nf_forward+0x10/0x10 [ 360.563222][ C0] nf_hook_slow+0xc5/0x220 [ 360.567672][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 360.573165][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 360.578661][ C0] NF_HOOK+0x215/0x3c0 [ 360.582773][ C0] ? NF_HOOK+0x9e/0x3c0 [ 360.586966][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 360.591620][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 360.597124][ C0] __br_forward+0x41e/0x600 [ 360.601662][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 360.607163][ C0] ? __pfx___br_forward+0x10/0x10 [ 360.612319][ C0] ? skb_clone+0x246/0x3a0 [ 360.616772][ C0] maybe_deliver+0xb5/0x160 [ 360.621323][ C0] br_flood+0x31a/0x6a0 [ 360.625540][ C0] br_handle_frame_finish+0x14b4/0x19b0 [ 360.631117][ C0] ? stack_depot_save_flags+0x40/0x860 [ 360.636720][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 360.642655][ C0] ? br_handle_frame+0x982/0x14c0 [ 360.647713][ C0] ? __netif_receive_skb+0x72/0x380 [ 360.653033][ C0] ? process_backlog+0x60e/0x14f0 [ 360.658099][ C0] ? __napi_poll+0xc4/0x360 [ 360.662728][ C0] ? handle_softirqs+0x283/0x870 [ 360.667697][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 360.672496][ C0] ? irq_exit_rcu+0x9/0x30 [ 360.676951][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 360.683223][ C0] ? pv_native_safe_halt+0x13/0x20 [ 360.688376][ C0] ? default_idle+0x13/0x20 [ 360.693010][ C0] ? resolve_default_seg+0x330/0x480 [ 360.698334][ C0] ? do_idle+0x1e8/0x510 [ 360.702612][ C0] ? do_idle+0x4f3/0x510 [ 360.706875][ C0] ? rest_init+0x2de/0x300 [ 360.711333][ C0] ? start_kernel+0x3a9/0x410 [ 360.716045][ C0] ? x86_64_start_reservations+0x24/0x30 [ 360.721714][ C0] ? x86_64_start_kernel+0x143/0x1c0 [ 360.727033][ C0] ? common_startup_64+0x13e/0x147 [ 360.732184][ C0] ? nf_hook_slow+0x176/0x220 [ 360.736891][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 360.742818][ C0] br_nf_hook_thresh+0x3c3/0x4a0 [ 360.747796][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 360.753285][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 360.759217][ C0] br_nf_pre_routing_finish_ipv6+0x948/0xd00 [ 360.765231][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 360.771166][ C0] ? br_nf_pre_routing_ipv6+0x42f/0x6b0 [ 360.776741][ C0] br_nf_pre_routing_ipv6+0x37e/0x6b0 [ 360.782145][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 360.788081][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 360.794611][ C0] ? br_nf_pre_routing+0x720/0x1470 [ 360.799851][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 360.805342][ C0] br_handle_frame+0x982/0x14c0 [ 360.810232][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 360.815554][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 360.821572][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 360.826974][ C0] __netif_receive_skb_core+0x10b6/0x4020 [ 360.832746][ C0] ? ip6_mc_input+0x8f4/0xaf0 [ 360.837468][ C0] ? ip6_mc_input+0x8f4/0xaf0 [ 360.842211][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 360.847283][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 360.853386][ C0] ? ip6_rcv_finish+0x29e/0x2e0 [ 360.858278][ C0] ? NF_HOOK+0x309/0x3a0 [ 360.862558][ C0] ? skb_orphan+0xaf/0xd0 [ 360.866933][ C0] ? __lock_acquire+0xab9/0xd20 [ 360.871826][ C0] ? process_backlog+0x2d5/0x14f0 [ 360.876899][ C0] ? process_backlog+0x2d5/0x14f0 [ 360.882030][ C0] __netif_receive_skb+0x72/0x380 [ 360.887101][ C0] ? process_backlog+0x2d5/0x14f0 [ 360.892174][ C0] process_backlog+0x60e/0x14f0 [ 360.897089][ C0] ? __pfx_process_backlog+0x10/0x10 [ 360.902428][ C0] ? xdp_do_check_flushed+0x21b/0x240 [ 360.907838][ C0] __napi_poll+0xc4/0x360 [ 360.912202][ C0] ? net_rx_action+0x46d/0xe30 [ 360.917011][ C0] net_rx_action+0x707/0xe30 [ 360.921662][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 360.926815][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 360.932060][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 360.937408][ C0] handle_softirqs+0x283/0x870 [ 360.942208][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 360.947011][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 360.952595][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 360.957837][ C0] __irq_exit_rcu+0xca/0x1f0 [ 360.962476][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 360.967714][ C0] irq_exit_rcu+0x9/0x30 [ 360.971979][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 360.977648][ C0] [ 360.980603][ C0] [ 360.983562][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 360.989576][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 360.995340][ C0] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 57 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 361.014980][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 361.021093][ C0] RAX: ab5d97d5829be100 RBX: ffffffff819683f8 RCX: ab5d97d5829be100 [ 361.029359][ C0] RDX: 0000000000000001 RSI: ffffffff8d9b8acb RDI: ffffffff8be33880 [ 361.037359][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 361.045365][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa39630 [ 361.053367][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20 [ 361.061373][ C0] ? do_idle+0x1e8/0x510 [ 361.065674][ C0] default_idle+0x13/0x20 [ 361.070064][ C0] default_idle_call+0x74/0xb0 [ 361.074860][ C0] do_idle+0x1e8/0x510 [ 361.078968][ C0] ? __pfx_do_idle+0x10/0x10 [ 361.083610][ C0] cpu_startup_entry+0x44/0x60 [ 361.088397][ C0] rest_init+0x2de/0x300 [ 361.092670][ C0] start_kernel+0x3a9/0x410 [ 361.097209][ C0] x86_64_start_reservations+0x24/0x30 [ 361.102699][ C0] x86_64_start_kernel+0x143/0x1c0 [ 361.107840][ C0] common_startup_64+0x13e/0x147 [ 361.112826][ C0] [ 365.146958][ C0] net_ratelimit: 17020 callbacks suppressed [ 365.146984][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.147096][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:82:a6:20:17:03, vlan:0) [ 365.154141][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.165380][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:2b:f9:99:e0:f1, vlan:0) [ 365.177550][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.189299][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 365.201278][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 365.213385][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.225346][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.238363][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:82:a6:20:17:03, vlan:0)