last executing test programs: 16.221457458s ago: executing program 0 (id=1175): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x7fffffffffffffff, 0x2) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000040)=0x9) (async) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000140), 0x4) (async) r2 = syz_open_dev$radio(&(0x7f0000000180), 0x1, 0x2) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000002c0)=0xffffffffffffffff) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000300)=@multiplanar_userptr={0xc2f, 0x6, 0x4, 0x0, 0x2, {0x77359400}, {0x3, 0x2, 0x75, 0x1, 0x8, 0x2, "afcaddc5"}, 0x10000, 0x2, {&(0x7f0000000240)=[{0xe, 0x3, {&(0x7f00000001c0)}, 0x4}, {0x82b, 0x1182, {&(0x7f0000000200)}, 0x1}]}, 0x8, 0x0, r3}) r4 = syz_open_dev$mouse(&(0x7f0000000380), 0x6, 0x400) ioctl$PTP_PEROUT_REQUEST2(r4, 0x40383d0c, &(0x7f00000003c0)={{0x8, 0x8001}, {0x7}, 0x2, 0x1}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) connect$inet(r4, &(0x7f0000000400)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) (async) syz_open_dev$admmidi(&(0x7f0000000440), 0xd, 0x1) (async) r5 = syz_usb_connect$uac1(0x2, 0xd6, &(0x7f0000000480)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc4, 0x3, 0x1, 0x5, 0xb0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x3}, [@processing_unit={0xd, 0x24, 0x7, 0x6, 0x1, 0x7, "a8a5dfde19b4"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x80, 0x2, 0x4, "4c240fabbfb4"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x4, 0x5, 0x2, "1bd8", '^'}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x4, 0x4, 0x9, 0x8, "03ef41d066c2"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xf, 0x3, 0x4, 0xf1}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x0, 0x2, 0x5, 0x5, "3dccbf"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x6, 0x2, 0x3, {0x7, 0x25, 0x1, 0x80, 0x80, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x4, 0x3, 0x0, 0x2, "8cfdc1be9c"}, @as_header={0x7, 0x24, 0x1, 0x58, 0x4, 0x2}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x2, 0x3, 0x8, 0xff, "", "01"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x1, 0x5, 0x5, {0x7, 0x25, 0x1, 0x3, 0x8, 0xb6fa}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x250, 0x9, 0x7, 0x3, 0x20}, 0x116, &(0x7f00000005c0)={0x5, 0xf, 0x116, 0x6, [@generic={0xd6, 0x10, 0xb, "5741ce5d0cd7ab3861fec78eebb02dc88e298368d6114ece1ca1542fea865ce32156130b0ca1e2eecf4537f08eacb55dd87af583e832f0f9511485d86203610e67972c8acf3b6f5e4c5259f477d44c365570d3c6df3d95e367255d5f0e958dc375e994c17b83a3994cb90c3c0d7d9b1db07411f54e1514b5e4c5711891847e7d246dd7dbcfbaaa0a56ad8348c6bfb836b06724691f0d5a9458239601a117d24ffb6b214f22a04f8da573ea086039394dff502bb3a0fe7a7074e59b826ffc6c57491e3e1f6d344c826dcddbcfa2b6d404a27f95"}, @ssp_cap={0x10, 0x10, 0xa, 0xff, 0x1, 0x2, 0xf0f, 0x8001, [0x3ff0]}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "02b5f1f150ebd8c0d9e7f698221f9b73"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x2, 0x55, 0x800}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x5, 0x8, 0x2be}]}, 0x2, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x406}}]}) syz_usb_control_io$uac1(r5, &(0x7f0000000900)={0x14, &(0x7f00000007c0)={0x40, 0x11, 0xd5, {0xd5, 0x23, "461fce845df850d15ca23e1cdec1deb9628f9e84ec52e075189cc19b73d8ee5a08907a2b34078e882151744ae7396b1f17f38e210f5cc356646e51fdeb45b254ec4191dfd089b66038f3bbde358c47f9b4bfaa6eff72fdfd71a6591fcb8810bebafe4ca9091f1c4cd22d5cdd4cf75529e8c2108eafc1b1d08e5f918a894894cb47217ab0fa8dd58b4838a36f21feb57539f75a53b85b61d0a6dfcc138d720b7cb76539aefd795a9b0ad01cc3b0a2dbd55993305a016273abaf2d557cf5aa0ee144eea95cbce15f9c4ffe451fce9a1e79c0ffa1"}}, &(0x7f00000008c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40f}}}, &(0x7f0000000bc0)={0x44, &(0x7f0000000940)={0x0, 0x16, 0x7e, "29787b3ea842918487206c346c9db3e33fb1eddd447ba1806f04c6012cc77127a1a14eb591dbe9b614f036512b70674cc895094d30ebd23c9a58aee677d174e6a3f5faf0fec5fd81408586925fb69b9253e1e115c948961d8fdbf2ddd3ccb6f2c4e9b3c47ce68aaeba9be8aebd158369d56f6c7401397a523cbb0aa90ebf"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000a80)={0x20, 0x81, 0x3, "75c9cf"}, &(0x7f0000000ac0)={0x20, 0x82, 0x2, "82a8"}, &(0x7f0000000b00)={0x20, 0x83, 0x2, "1ee9"}, &(0x7f0000000b40)={0x20, 0x84, 0x3, "9001a9"}, &(0x7f0000000b80)={0x20, 0x85, 0x3, "ed9743"}}) (async) ioctl$IMDELTIMER(r4, 0x80044941, &(0x7f0000000c40)=0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000c80)='geneve1\x00', 0x10) (async) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000cc0)={r4}, 0x8) ioctl$HIDIOCGNAME(r6, 0x80404806, &(0x7f0000000d00)) bind$packet(r6, &(0x7f0000000d40)={0x11, 0xb, 0x0, 0x1, 0x3, 0x6, @random="9bdad7d40d78"}, 0x14) (async) timer_settime(0x0, 0x0, &(0x7f0000000d80)={{0x0, 0x3938700}}, &(0x7f0000000dc0)) bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=@base={0xc, 0x5, 0xd943, 0x0, 0x20, r4, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001140)={r4, 0xe0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000e80)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x9, &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7e, &(0x7f0000000f40)=[{}, {}], 0x10, 0x10, &(0x7f0000000f80), &(0x7f0000000fc0), 0x8, 0x45, 0x8, 0x8, &(0x7f0000001000)}}, 0x10) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000001180)={r7, 0x1, 0x6, @local}, 0x10) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, &(0x7f00000011c0)=0x1, 0x4) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000001200)={{0x1, 0x1, 0x18, r6, {0x3}}, './file0\x00'}) (async) fsetxattr$trusted_overlay_redirect(r6, &(0x7f0000001240), &(0x7f0000001280)='./file0\x00', 0x8, 0x2) ioctl$SOUND_PCM_READ_RATE(0xffffffffffffffff, 0x80045002, &(0x7f00000012c0)) (async) ioctl$BLKSECTGET(r4, 0x1267, &(0x7f0000001300)) (async) getsockopt$bt_hci(r6, 0x0, 0x1, &(0x7f0000001340)=""/83, &(0x7f00000013c0)=0x53) 14.266839473s ago: executing program 2 (id=1186): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x30, 0x4, 0x0, 0x0, 0xc0, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x0, [0x401, 0x5, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x0, [{@rand_addr=0x64010100}, {@multicast1}, {@remote}, {@dev, 0x659}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x15}}, {@multicast2, 0x7}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffffe}]}, @noop, @noop, @rr={0x7, 0x17, 0x0, [@empty, @private=0xa010100, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0xa) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r6 = accept$alg(r5, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x114, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_USERDATA={0xfd, 0x6, "1d9d51a80f1ecd9317d715ba14be3527bd31a6001da46dc8d5187aad80357f451288c8f05f435386506f2576ad706892ffe623d926752d1901516b3197fbd52d1c0278c0b9e42ff2f7d909811ef1a10ea5df465aea57a12cfe65f6bdf345601f5df1446a962efcdab01a9aa5c5d6855d5710f565bba3621fb9e6edd733ce899d1946cb2de2988c911d5ae0511e88b2380d1b33fef7db68bf4aaf81368ac4de87e4d579be05f94c923aa148b116f5df98d490cd4e0ea741fb5936c39365e13361a0605011802f314d1180e43e3fc0e51a2b57b661d5847274017ae9afa9222dd848dcd5da85cc3d1913e570dd72d3512b8c0d3e62b3b926eb45"}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9100}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x19c}}, 0x0) write$binfmt_elf64(r6, &(0x7f00000003c0)=ANY=[], 0x100000530) r8 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$cgroup_pressure(r8, &(0x7f00000001c0)={'some'}, 0x4cdad095) unlink(0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) lseek(r8, 0x9, 0x4) syz_usb_connect(0x0, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000005c0)=[{{0x0, 0xf07, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x1, 0x0, 0xf, 0x7000000}}], 0x1, 0x0, 0x0) 13.12161806s ago: executing program 0 (id=1192): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000380)=0x42) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x61}}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) timer_create(0x0, &(0x7f0000000300)={0x0, 0x3f, 0x0, @tid=r1}, &(0x7f0000000340)) syz_io_uring_setup(0x331b, &(0x7f0000002fc0)={0x0, 0x10, 0x1000}, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x8, &(0x7f0000000040)=0xf97, 0x4) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000380)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x1, 'e'}, 0x0, &(0x7f00000002c0)={0x0, 0x8, 0x1}, 0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0xc9) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x8, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) syz_usb_control_io(r4, &(0x7f00000004c0)={0x2c, &(0x7f00000005c0)={0x0, 0x24, 0xa0, {0xa0, 0x22, "84d161b6a75a1318221cc5505994d751e30e9f65cfc3352b426d400c02ba75aa356c0ca200c392c3348463fbb879ced4d1a86dc24fb3afbbd2d3e472b351c7c080f2c790b03b823b93f146d6aaabc5d95b1194d83a4242aedd5f7999d8ed53e677c8044c1a3b5866b28d298578940dc9faeb7c173ac608cccb751cfa0bedd42f292015470ec57b74c7036af0ede346873e0fcc63451f34d4b7d086503f5e"}}, &(0x7f0000000780)={0x0, 0x3, 0x8c, @string={0x8c, 0x3, "f643478140dcdb05f0131cdea3df2d8cab757a735d0e832f096559acb9f2a2286ccea83a9fcb863bff4f92959c63a725de561e8207854f060f1bd11a08bca2f5a990651fd6f7f5e01202c82118378fefc02efe0150c420137e4f7c01277dd1f7d193df736acf77e4ad94b4c8d35bf50702ab13d5e6ed39c712f46b5953cd6f0bca08c3e0fb3921bd8e51"}}, &(0x7f0000000840)={0x0, 0xf, 0x8c, {0x5, 0xf, 0x8c, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x4, 0x100}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x9, 0x3, 0x80}, @wireless={0xb, 0x10, 0x1, 0x8, 0x34, 0x7, 0x1f, 0x910a, 0xff}, @generic={0x64, 0x10, 0x1, "921055e72a12eabf98157ecc988b30e90e2a24848dcd3547b26c57d16da9d9650c0b61c9969a3604230e6fabea6790e8e10cc29054bfbfcaf3a24131a501d53d689c4def90b88bfd6e597ae142f87de5e98f8fdaccecefb8bc5471c98b8de1dcf2"}]}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x18, 0xf7, 0x5, "1d0aa90e", "26c429a9"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1f, 0x3, 0x80, 0x6, 0x4, 0x1, 0xf001}}}, &(0x7f0000000d40)={0x84, &(0x7f0000000900)={0x20, 0xf, 0xa1, "354bdec68838dd3d7c6a107296bec19c3a93e66d52e234210a0830406e002233a9a2547b2a6c065276c8c9de1a7be80390fd827ed06217057d96fc0ffd5bf58a07723fe83f9db825bbff9911efac87d44f75ac80b280bf6de6c43d9b4c79bf3ed62e433ba6c2f9db582ca9f704cac2fb7d0bfb56d28161eec5bd84fad25fdda1182bc482174e3eea173c7660838af4cfe0f2b975d406d9b91eb5f8a96bc52a4ce3"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000009c0)={0x0, 0x8, 0x1}, &(0x7f0000000a00)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000a40)={0x20, 0x0, 0x4, {0x1e0, 0x1}}, &(0x7f0000000a80)={0x40, 0x7, 0x2, 0x48}, &(0x7f0000000ac0)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000b00)={0x40, 0xb, 0x2, "c478"}, &(0x7f0000000b40)={0x40, 0xf, 0x2, 0xffff}, &(0x7f0000000b80)={0x40, 0x13, 0x6, @local}, &(0x7f0000000bc0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000c00)={0x40, 0x19, 0x2, "860b"}, &(0x7f0000000c40)={0x40, 0x1a, 0x2, 0x7f}, &(0x7f0000000c80)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000cc0)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000d00)={0x40, 0x21, 0x1, 0x9}}) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x12, &(0x7f0000000e80)=@conn_svc_rsp={0x0, 0x0, 0xa, "01892120", {0x3, 0x101, 0x0, 0xc, 0x8001, 0x0, 0x3}}) unshare(0x4040400) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r6, 0x4068aea3, &(0x7f0000000e00)={0x9f, 0x0, 0x1}) syz_usb_control_io$printer(r4, &(0x7f0000000f80)={0x14, &(0x7f0000000ec0)={0x40, 0x22, 0x5d, {0x5d, 0xa, "fd81b1405da1467a06bc2749ceff8f577e46138c0ceca931f254759c04ab88db03b880144961da7b8bdfeee4c470a74e4d1693ee9692c3f800490ef620b6bea6d2e40dc20654e0d9a3dccdcca27229fd7ea34a8ded562fc99665a7"}}, &(0x7f0000000f40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1401}}}, &(0x7f0000001180)={0x34, &(0x7f0000000fc0)={0x40, 0x14, 0x61, "132c491eb7c22c97d6e1e038b7ebd8d3f6b2fa265f56b80e92b4dadf2582cdfa3458dacd4d63c955857f4b17dc311a3055dc2acfa9cdb02566c952f305a47653a38421abfae6dc722b2ccd519238d43039d9c22409de1ffbed856b6769bb5f49d5"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0xaa}, &(0x7f00000010c0)={0x20, 0x0, 0xa, {0x8, "93cbbf086790d8e2"}}, &(0x7f0000001100)={0x20, 0x1, 0x1, 0x48}, &(0x7f0000001140)={0x20, 0x0, 0x1, 0x7d}}) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @private}, "240086ddffff0000"}}}}}, 0x0) syz_emit_ethernet(0x2b, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1, '\x00'}}}}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000010085c40b4040200b16a0102030109021b0001000000000904000001f3970a0009050c"], 0x0) accept4(r3, &(0x7f0000000200)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000000280)=0x80, 0x0) syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x2000) ptrace$getenv(0x4201, r1, 0xbb5c, &(0x7f00000000c0)) 13.076862288s ago: executing program 1 (id=1193): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x4, @sdr={0x32314d59, 0x1f30}}) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0xd01, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) (async) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$FBIOGETCMAP(r2, 0x4604, &(0x7f0000000ac0)={0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) read$fb(r3, &(0x7f0000004fc0)=""/192, 0xc0) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000001c0)=""/175) write$UHID_INPUT(r3, &(0x7f0000000400)={0x8, {"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", 0x1000}}, 0x1006) 13.0068363s ago: executing program 1 (id=1194): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) (async, rerun: 32) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000500), 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, &(0x7f00000013c0)={0x2c, &(0x7f0000001100), 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (rerun: 32) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x1, "a1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) r3 = gettid() (rerun: 32) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0xa300, 0x0) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x100021, 0x800000000004, @tid=r3}, 0x0) (async) write$binfmt_misc(r1, &(0x7f0000000640)=ANY=[], 0xff79) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40141, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 12.621706629s ago: executing program 3 (id=1195): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)={0x44, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "fc0100"}]}, 0x44}, 0x1, 0x0, 0x0, 0x5200}, 0x0) 12.513223362s ago: executing program 3 (id=1196): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2, &(0x7f0000000200)=0xc5, 0x4) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000180)) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r5, 0x0, r4, 0x0, 0x406f413, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r7 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @private}, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x8003}}]}, 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES32=r8, @ANYRES16=r9], 0x3c}}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000380)={0x8, {{0xa, 0x4e20, 0xfff, @remote, 0xa}}, {{0xa, 0x4e22, 0x4, @loopback, 0x7}}}, 0x108) 12.297954235s ago: executing program 4 (id=1197): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x4c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x28, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{0x1}, [@remote]}}}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_FLOW={0x8, 0xb, 0x12f}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x3c}]}, 0x2c}}, 0x0) 12.153564737s ago: executing program 4 (id=1198): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='attr/prev\x00') writev(r1, &(0x7f00000006c0)=[{&(0x7f00000004c0)='\n', 0x1}], 0x1) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x1, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r6, 0x3b85, &(0x7f0000000100)={0x28, 0x3, r7, 0x0, 0x0}) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x10000, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x1fb, 0xffffffff}}, 0xe8) sendmmsg(r4, &(0x7f0000000180), 0x400000000000077, 0x7600) 11.564033988s ago: executing program 1 (id=1199): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2e, 0x4, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@dev={0xac, 0x14, 0x14, 0xb}}, {@remote}, {@dev, 0x659}, {@broadcast}, {@multicast2, 0xffd200}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0xfd}}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x852b1}, {@multicast2}]}, @noop, @noop, @noop, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) 11.44356995s ago: executing program 3 (id=1200): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0x9}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000200)=0xa0000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000004900)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x7dca, &(0x7f0000000440)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r7, r6, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=@rc, 0x80, &(0x7f0000000780)=[{&(0x7f0000000180)="c4dddf3831826dc7b0ca", 0xa}, {&(0x7f0000000680)="a2269c2b5d6751f63ac7d31548f244280fba3fb299b236eb078b6c8f7051cf8bbf9cb7174d82a7cdaf3ea9929f7f8ada96ffd493f82c9c4b82480ff650c470403268a73a1e1469c9c172aad4cdaa6611809b906477ad44a1f497636bf5f3e9abff47ec5f26f8adf0ab8d7136c9c08214c644025ea73a", 0x76}, {0x0}, {&(0x7f0000000700)="0c2b895921b423f5f1e1ff2cf7394e2ab87b58f3a53d414fe7c16a144333912f50764fc6d4fc92315418c022b397bdf4da92eb4b3813b6c2cd3ede8f866c2e61e27e34eaa185af9d7b66cabdd4b0d25ac423706261de27b333a659b76cdcd574474c548c741cc9c10186be", 0x6b}, {&(0x7f0000002f00)="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", 0x1000}], 0x5, &(0x7f00000008c0)=ANY=[@ANYBLOB="2000000000000000080000000300000042cc8b4f17d34295761208712100000090000000000000000c01000080000000ef4ba6af7b6f2329cb31cb258c42af6f475b06a25b778b29230bac2b5e826fddd4726c51b77bb2cba23f1db17ceb4227d740859c749532d6a3d7a34da70627829513358cfe7d4a2a7c78770000b99df377a49d6371e1556a10901b000cc15119ae95da8239aad3bde1a00ba67d10e517f69fca360140dda3b6a6f6d4dc2cff20ff00000000000000"], 0xb0}, 0x0, 0x4004886}) io_uring_enter(r5, 0x184c, 0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e20, 0x3, @private1, 0x7}, 0x1c) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001500010300000000000001000b00"], 0x14}}, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000280)={@local}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003895cb811857020e5d04ed65671a4738623f334e0f7efeba4a1e6eb9bdb29d898dc7f15d847113da60b59b408c1d7ded293aa0b02899b4", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000046568000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000000000000000000000000000181100", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b9af8ff0000000026090200760000007b9af0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb50200000800000018280000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000001400000076000000bf9100000000000007080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000001340)={{@local}, @any, 0x0, 0x4}) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r10, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r10, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r10, &(0x7f00000001c0)="8e77ca3389787867582dd0b9999e5e7ce579fc6b2977bf71ab517f68a8ddb58b93c91675a4b5dde502242a66491162f75f9b28f59cd9746ff7140fde3923b99bcc4c2cc72443169b2ab2f90a0f03dd842adba400500327de779dc66f3ebd32a81ebea8b89c9cc7e0f46e28fc1ff127a0", 0x70, 0x0, 0x0, 0x0) sendto$inet(r10, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) recvmsg(r10, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0xa, 0x0, 0x46, 0x407006}, 0x104) shutdown(r10, 0x1) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r1, 0x7a9, 0x0) 11.233698508s ago: executing program 4 (id=1201): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x38012, r1, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) r2 = syz_open_dev$evdev(&(0x7f00000010c0), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffffe, "00207d2000000000201b14700c1e0ac74f000000001200000000000900"}) 11.211170409s ago: executing program 1 (id=1202): socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000400)='vlan1\x00', 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={0x84, 0x80, 0x100000}, 0x20) r2 = syz_clone(0x2002000, 0x0, 0x3e, 0x0, 0x0, 0x0) ptrace(0x10, r2) wait4(0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000280)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x60) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x220) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) socket$inet6(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r6, &(0x7f00000020c0)={0x2020}, 0x2020) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000080)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) read(r8, &(0x7f00000000c0)=""/138, 0x8a) socket$nl_route(0x10, 0x3, 0x0) 11.034890146s ago: executing program 2 (id=1203): r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x40045017, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x7fff}, 0x80, 0x0}, 0x0) 10.733767704s ago: executing program 2 (id=1204): r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x7fff}, 0x80, 0x0}, 0x0) (fail_nth: 1) 10.211346483s ago: executing program 4 (id=1205): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r0, 0x84, 0x85, 0x0, &(0x7f00000000c0)) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setgid(0x0) getsockopt$inet6_opts(r2, 0x29, 0x49, 0xffffffffffffffff, &(0x7f0000000340)) fanotify_init(0x13, 0x8000) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r4, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0xff41) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) fadvise64(r3, 0x0, 0x0, 0x4) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x604402, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r6, 0xc0044d0a, &(0x7f0000010180)) close(r0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x23, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x6}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r8, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r7, 0x0, r9, 0x0, 0x4ffe6, 0x0) 10.023335789s ago: executing program 2 (id=1206): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000900000801000080000000000101090244000101000000090400001202060000052406000005240000000d240f01000000000000000000090581030002ee0009090582021000000000090503020002"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000200)={0xfffffffd, 0x4, 0x4, 0x2, 0x0, 0x1}) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x23, {[@global=@item_4={0x3, 0x1, 0x2, "3fb9ee10"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x1, 0x2, 0x2, 'p'}, @global=@item_4={0x3, 0x1, 0x8, "0600"}, @main=@item_4={0x3, 0x0, 0x8}, @main=@item_4={0x3, 0x0, 0x8, "c1587c55"}, @local=@item_4]}}, 0x0}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x203, 0x0) fcntl$dupfd(r7, 0x0, r7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) fsopen(&(0x7f0000000080)='incremental-fs\x00', 0x0) ioprio_get$pid(0x0, 0xffffffffffffffff) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x101081) dup2(r5, r4) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r9 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r9, 0xc058565d, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r8, 0x7ab, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r8, 0x7ac, &(0x7f0000000200)={0x0}) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(r2, &(0x7f0000000040)={0xcd, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a0000000e9255bb992464e73a02159d3720df19f7a1dfec30000000003000600000000000200000000000000000000000000000002000100000000fffffffbfd00000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x20, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xef2d, 0x7c}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4001800) 9.905779123s ago: executing program 3 (id=1207): ptrace(0x4206, 0x0) tkill(0x0, 0x12) set_mempolicy(0x3, &(0x7f0000000040)=0x9, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ptrace(0x10, r0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000680)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x40045b17, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x20001, 0x0) 9.842543836s ago: executing program 1 (id=1208): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r3, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r3, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000700)="a8", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000480)="ec", 0x1}], 0x1}}], 0x2, 0x4004441) syz_usb_disconnect(r0) pwritev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)="9b", 0x1}], 0x1, 0x0, 0x0) 9.391573816s ago: executing program 0 (id=1209): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}], 0x1, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_int(r0, 0x0, 0x15, 0x0, &(0x7f0000000a40)) write(r0, &(0x7f0000000040)="240000001a005f0214f9f407000904001f000000fe0000000008000008000fa51bd5026bdf1b0a41d9985ba6d74e8e2715f106e3018c7bf9989240d7bd4876c5ba196102b57fc679b44d8bd9e4a39e8520cb8ca120c39e51a0231623afa443571ae2afe166e97c46ea8ca5bc31b2644fdbeb86eecea4ea1ff911f77de28fecf720e6c94925edceaba0ad813efb64d9aa804266de7d98f2ecc4ebac69fe3dac93d77fab8158e9bd5162b604f1b6c7ea81d32aa1574748dbd7d165a7f2ecddad1e1a51c492fc6e5c980e6d7ada48e19478c39871faabbfc817e09228febddcd52a9730428586b9", 0xe6) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042bbd7000fddbdf2502000000080003000100000005000600ecd4080000000800030004000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x45) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0xb7, &(0x7f0000000340)={@multicast, @random="72018a436c20", @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x4, 0x1, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x79, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @dest_unreach={0x1, 0x6, 0x0, 0x0, '\x00', {0x0, 0x6, "f43395", 0x0, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [], "caa7c1b7f4c336af671ce1dc7bf6e96eeed901c3f8f3de4440556d525c1a714c272418c894a926fb4984e0bca0bf7a37015e6bd48f637d72b7233da4d9b9000355ed962840a72c7b5f"}}}}}}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="000000000000000014001a"], 0x34}}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYRES32=r1, @ANYRES32=r0], 0xfe33) 8.985760029s ago: executing program 4 (id=1210): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffffd4, 0x0, 0x0, 0x20}, [], {0x95, 0x0, 0x0, 0x1800}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 8.984345676s ago: executing program 0 (id=1211): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x53564d41, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x3, 0x6, 0xf62, 0x9, 0x4, 0x6, 0x4, 0x7, 0x637e5110, 0x7fffffff, 0x9, 0x1, 0x8000000000000000, 0x81, 0x9, 0x9], 0x4000, 0x240}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xff, 0xff, 0x2, '\x00', 0x8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) prctl$PR_SCHED_CORE(0x53564d41, 0x0, 0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) userfaultfd(0x1) (async) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x3, 0x6, 0xf62, 0x9, 0x4, 0x6, 0x4, 0x7, 0x637e5110, 0x7fffffff, 0x9, 0x1, 0x8000000000000000, 0x81, 0x9, 0x9], 0x4000, 0x240}) (async) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xff, 0xff, 0x2, '\x00', 0x8}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 8.682987498s ago: executing program 4 (id=1212): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2e, 0x4, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@dev={0xac, 0x14, 0x14, 0xb}}, {@remote}, {@dev, 0x659}, {@broadcast}, {@multicast2, 0xffd200}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0xfd}}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x852b1}, {@multicast2}]}, @noop, @noop, @noop, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) 7.926529848s ago: executing program 0 (id=1213): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x27) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000540)=@mgmt_frame=@beacon={{{}, {}, @device_b}, 0x0, @default, 0x21, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x2, [{0xb}, {0x16, 0x1}]}, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0xffffffffffffffff}}, @void}, 0x41) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a00000000000000000000000000000500010073797a30000000003c000000090a000000000007000000000000000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000003c0000000e0a00000000000000000000000000000900020073797a32000000000900010073797a3000000000100003800c00008008000180040003"], 0xc0}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000003b0007010000000000000000027c00000400000014000180060006008847000008001c"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c040002", @ANYRES16=r3, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000500)) (async) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x640401, 0x0) r9 = dup(r8) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f0000000000)={0x0, r9}) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000bc0)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) (async) syz_80211_inject_frame(&(0x7f00000005c0)=@device_b, &(0x7f0000000c00)=@data_frame={@msdu=@type01={{0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {}, @device_b, @random="e3b017c45a9a", @broadcast, {0x1, 0x8}}, @a_msdu=[{@broadcast, @device_a, 0xb3, "a55f95cc9a6d5ae9081bc017a3fba6a4e994428088adb796a48cf730ea6fdd2392855b8c001632f5c66c4ad717f56ab3d6b98928c8894c658122f5a8e942758ab5aad8eb3ed01d468633a039e2ae413de7a193bef9c3b6e4e09aa4e8ebdd363cc719cf93f094a2bc9b8202278fb6d7dd56609db2cf7b0c323fcac2bb09b574f40e660f5671d973e68eb65a5b27830041cbd1cf9b3f22cc599ac43c2867a21d546e8e783d4d5f39605d5941dbf4331878a34b7b"}, {@device_b, @device_a, 0x1c, "7e14cbde8e69c700baff4c919e41030a5029c384de41abdcffc9a2a7"}, {@broadcast, @device_a, 0xa8, "39344b0496b3793a14a89aace4b7de2fed1fbff8315f1ec19f2e99e243cd892309bad109b12bac6f348960a73f9afdfe1ee9969dc95457c448ebfa3b4759e223f474c0603872db6674b097faa07570fc9a77e5d684215079955923db14fd6b6051048d38997160793d264f488d82d63acdad783983c401e6bba00c976663cd66a55ce1e74e10b0c0f295286c3daa62ed21b84df6daaf48e3c604e0402e3d77ba50575b44c7a89754"}, {@device_b, @broadcast, 0x1c, "f6027297e05fffd56ebc92f80d281b05395be37bb25932ace82a1e33"}, {@device_b, @device_b, 0xae, "2db3f0f0062d81c9c1ec1f77a34ac2032f336dea3c4069c58bc173fe26d4e2c63b0a45de1a980854c7024ab707c693829d9a44bfd3ff7222f1bc1385b74f5f34bf656b338078ffb411c5dd599f50a406040ef4300d21ecd966b7517728915cd264fd174df648bfddcaa9e6594026a8537b8f19cd02131c463048fae82fc1b0d3b2d999997033db237a40600e139fc9bc6b9f86ae19cdc674fb854fe4105e078b2bc1c6fbee6b3582a8d9cf6fa305"}, {@device_b, @device_b, 0x50, "6ca704c14dd582667385e3f5b599553415b019f541077a18e83865b8d2db682190e05660323d279b2e733a315c6e0d5718d22a685b84948d8849414af9723cd1f966ec227fe2161ceb3be0ee2512bfc6"}, {@device_b, @device_b, 0x70, "12938a95ef195efffdb43846373a56a5ebcef0ed64d01f9c6817d39bd9a45ed26e4910a1d6a1bdc9bc11b1c65e386df68429fb1a2e26f6223388e455538e810118ff3070a9dfa2d166346cd2dd9d0440646b4d72e9151ff1de5b9df204ce52efe312e22c84b186dd85a833ebdf68ab5e"}, {@device_b, @device_a, 0x51, "e154c7222f129c8f682f831e5b13cde575ca8e9cb55508a8bf83819b9b8da56e11fe2692bd257d7df2a1d4154fcb80cdf81d602f170d58d04b45e13987ba4ddc77f99a23a3c193408cb400e7e4424a42c6"}]}, 0x3ea) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r11], 0x40}}, 0x0) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r12, 0x5, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000000000063aa87ff00000000b5090000000000007b8af0ff00000000bfa100000000000407010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 7.765695355s ago: executing program 1 (id=1214): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x88a9fde5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async) fchdir(r0) openat2$dir(0xffffff9c, &(0x7f0000000140)='./cgroup\x00', &(0x7f00000000c0)={0x200, 0x0, 0x1}, 0x53) 6.398363957s ago: executing program 0 (id=1216): openat$sysfs(0xffffff9c, &(0x7f0000000740)='/sys/kernel/crash_elfcorehdr_size', 0x0, 0x81) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000080000000080000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fcffffff00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0xd, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000300)="b86ab39db553d2d75b2d65efcd00b03e577a9af57e811ae68f9e15708c505fc86f6524786cf837b6f4ca99ca7c16b82a985f9453480afb28e9567e9b25e23207e38b15449d24c47201ee93745d539a1726d11d981e0248c9ad14e95ada5e25fb7c5b03906fe00daa11b8a89894d23705bbcf691ae81d351f9535a324af95779f", 0x80}, {&(0x7f0000000100)}, {&(0x7f00000001c0)="c2eaf0646607e9d1f814d5454aaae7da0a7a9117c021662255c9cc83d94f04204f4e35cd2f3a4389e5907ace7a008615ae0c971934c556a03c6d9b424f8a064f58ef3f8032694ba85094a5f3039a14be746a3a4503631f9af093f98956978db3b4937b1550c33f65cd4758162561691dd208a62360e90a4a2902350a20b865b9d97865a259fdb22ac3cab037f96cd552", 0x90}, {&(0x7f0000000400)="af3a46e3e1024469a4d56a3bbdfd037e18f1661dde99de1d6033a44fee585a9113dfb97f099adcb9c060cf6cbc913a80fc2554a115455096a39f1c20ff99f780bfddcfe929347cd78a6674124fcdf0ae06b59550adf7070524c50371c9ff2e6f1c4dcf299c7b259a63537b42488849b973aa2b467994e6f79e0f8d1a4e202d67b384b676992b4ac076bc955c22e7e090e9e90040c38e40417072a48960ae6522e069a3b2fc858ba493c11d00a3c4f5fc0d101990e6980f0903a2edcba2973c968e4e44", 0xc3}], 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="1100000000000000000000040100000001000000007fcb5f5e3600000011000000000000000000000001000000cf9400000000000000000000000700000044106840ffffff87a1fd953715b455839597ba8e7cf60000000400000000443c3c81ffffffff00000040ac1e010100000002e0000001000000a40000400000000002ac1414aa00000005ac1e010100000006ac141435000000074418cc60010000000000010100000017fffffffc00000101940401008307f67f0000018313430a0101026401010164010100e000000100000000000011000000000000000000000001000000080000000000000014000000000000000000000001000000ff0000"], 0xf8}, 0x4001c000) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) socket$inet6(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000780)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10, 0x2}, 0x9c) sendmmsg$inet6(r3, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7000000000000007d0000000000000004000000030000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x32) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, 0x0, 0x16, 0x0, @void}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000840)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x10, &(0x7f0000000280)={r5}, &(0x7f00000002c0)=0x8) mremap(&(0x7f0000e95000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) add_key$user(&(0x7f0000000280), &(0x7f0000000000)={'syz', 0x3}, &(0x7f00000000c0), 0x0, 0xfffffffffffffffe) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 6.242391915s ago: executing program 2 (id=1217): r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x7fff}, 0x80, 0x0}, 0x0) (fail_nth: 2) 6.241494049s ago: executing program 3 (id=1218): r0 = socket$kcm(0x10, 0x2, 0x10) (async, rerun: 64) r1 = socket$inet6(0xa, 0x80002, 0x0) (rerun: 64) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast1}}, 0x14) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000140)=0x400, 0x4) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @local}}, 0x14) (async) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000400)) (async) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRESDEC=r0, @ANYRES64=r4], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='cpuacct.usage_sys\x00', 0x0, 0x0) (async) close(r1) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e20, 0x5, @private1, 0x40f}}, 0x0, 0x0, 0xffff, 0x0, "6606ca7ce41b346ac33efec0b518269fd4c21a897da3d787c49dcb8216a272aea67961649d1590065253e05bd0b461b349eb64746d76c42fb2623034078188f0009f9f10d5f000"}, 0xd8) (async) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f00000004c0), 0xc, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="280000001800080028bd7000cc01df251c140009ff00ff0b000800000c00090c01001006", @ANYRES32, @ANYRES32=r1], 0x28}, 0x1, 0x0, 0x0, 0x4040054}, 0x20000000) (async, rerun: 32) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000640)={@in={{0x2, 0x4e20, @rand_addr=0x64010101}}, 0x0, 0x0, 0x2b, 0x0, "23343bec488cf1ff83c5cfdc97156ae83e245eb20e80e9617c9ade203eee486a2a4c8d5fea2d247081ca0f672f56582ecb04d7311737a7c344633e2924025545d368aff65f8f602fb5993f0ed6d55eb2"}, 0xd8) (rerun: 32) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x890b, &(0x7f00000002c0)={'ip_vti0\x00', 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) r8 = dup(r1) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x2e0, 0x178, 0xa, 0x1000000, 0x178, 0x0, 0x248, 0x230, 0x230, 0x248, 0x223, 0x3, 0x0, {[{{@ip={@broadcast, @multicast2, 0x0, 0x0, 'veth0_to_bridge\x00', 'veth1_to_hsr\x00'}, 0x0, 0x158, 0x178, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "085636820d6a60ff49677edc0f9111e7ccf795de83ae8e43a61945080891864007e5e0629b793e905f513cc4de3c1daad988425cfd560125160c8169789570a8a1324f192aad0900020000bbb30400000000000081fc44155aebbdf1ab66e929f2925cc90955436f7f220c7251f48f56f3e8c906b0424a32fc956bdb1a52c0e8", 0x1d}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'ipvlan0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x340) (async, rerun: 64) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYRES32, @ANYBLOB="08000400ac1e01010800080001000000", @ANYRES8=r6], 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'veth1_to_bond\x00'}) (async) futex_waitv(&(0x7f0000000ac0)=[{0x0, 0x0, 0x82}], 0x1, 0x0, &(0x7f0000000800)={0x77359400}, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000300)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e370c0c18800cac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) 5.457620483s ago: executing program 3 (id=1219): sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x24008880) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xcf88, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='gretap0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r5, 0xae80, 0x0) 0s ago: executing program 2 (id=1220): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000000)=@x86={0xc1, 0x8, 0x4b, 0x0, 0x5, 0xf, 0x2, 0x5, 0x6, 0xf1, 0x6, 0x3, 0x0, 0xffffff98, 0x8, 0x2, 0x1, 0x96, 0x3, '\x00', 0x0, 0x2}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000040)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000240)={{0x0, 0x4735, 0xffffffffffffffff, 0xfffffffffffffff9, 0x4, 0x7, 0x6e7d573, 0x4, 0x2, 0x400, 0x7, 0x10000, 0x10001, 0x8, 0x8}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001240)={r1, r2, "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", "01b56ea64d0ed463b63afdfbbc3ce4a89189eafad9929c4a77af093977a5c50582c98e5446705bffcea7412adc98427b7f487639086218816ce66ebaae88dc6b11db5a488d297e0937bd9bebeaf22707dc07d511cbb5593ef26632783d2b9c129b2b963c0b8a9dd8fcb3249510427aeb3106fb3c25570a8935c77fe53d3c11deb49b8404d8d73274f5a0f0162e1d6fdabbc4f8849c94db4ae7925245f55e3cbaeb20379614f16db3c870d3b9b2ae9646a015598680945a933432a94e3552d3a410ccca77271fef0e960a53f04b3c4ee5750f870a9897eeaef09fe635ca4926ddb1d0db67f747099a2756fd3113fe9e4f8618f17d64d12afbe455e9acf100a4750845c0123646eb764d5ee0733814a7dfe55080df4d437146a5b56ea517ddd251b4f3de5fd1ac9365cf63e972af2de30507ca2c6d996b40f584d1f5abcd121d1f3aab72ceacc52be40604c2c8d073d9c7b1a13412f49745925de44419ab8cea5c9e890c66fda9cdbdfccd86e6b75ade11687e81fbc3458f1e619671f4eaa3fe65658116406fedc615de5f33ca380dfbe8a865179f2e115cc4e043d7ff894966cd77f452482a93d39a7de8438ad091b509b67ea2e1a5b55f9f82a6cc625477e6605b465e014ccfa26d57a248688f115b586aae9a2a733eba1bcfff217a10aa3602ab61b1d843a18c412f0c90febf06107e50900dd495e48ceb3ca019b2ff56e05b89b44c1f7e7d4450a954a6316aa54e4314fae9c15fba7d7e5002fef39dac66f1f7e1aa8699901d9e8bcecaa0ce24b52cd88d106d9c37e5ad587665ecf914cdc2065dc104268a3ba82a9bce913e9caca8c630c63fad41941a4596f8738e8cfbda7d1f478121c9fbfbcc5be0005590357ce68984e6f99af4456c0506fe8c7d6060daf7d3c86c1f445dc5a2c04d8d2d1f7daddcbb1fa3886f32fc4c19e15214780cc402aea4c8ac1b93827b2fc2f2b05042d54d051dfd84d2c601b06080b56da451344dbbae6b428e5b52a73bdda5ce631766578283595759d734d68785a4a0ef10f3eeb27302a6b2b0bcc0164f987f85f2c6a3e64d6d1eec74d48252865cfcc1fb9f872721c50297555b1059cc60969d8170e23accb4d810798352a2dc833e4a5e0fde7210e04fc91389a4f24a2feb92db007fec431d883e0d3d720395eaf40167fdb4f507b4a5d20d0455a879eb986353dbf8db25d551851ffd1348bf91e212b5ed8742fd8699b8e17826093187356ce02bfdff94c59310a0b13b00f7de28e1ea6fc5e955928c00c4a95677b62c7082672b06656c33ac15c92fba4d8e60ab4c5a291faa68e4ce6c7536be14ea552cdc2aadf815a33c0e3f7878c694da4edd0defcbe2b302c7cb41ce93889718db947e0dd0b6487ef3fb61eff1c39c2580a334c9987d98f1701f6c373767a0c0929f8998750a8de0855e6b92f393bf9f99fe4dfce619eb11e140b9695c170d2318120677794269ccd724a11afc2773ae4346f6f9c7cee4879b5645671ccbbb31edde97b40caa09e54e9a6b9812aa1e03f466ed3d3db1572fe5a9ca6d19ce70c39cfa7352f70b888aeb41910ead1e08a8cfccf3ed07271759a31aa22e73a344b365e02627b0d748a2b8031809e47719a7ddee2764c2d6849924e2319c6f7cdbcf1b9454ba787f32858c783a583a0f4270cbf93289c5ec0b8bf76f543f65fd4b8b2b0c53138aef5f58a978e8b20b2f31a37650075949f57a376c370a0cd358c7ea6b8359f4784fc8ac9dbc11aed39a8723953bf45904a37eb59e38592691b2112952a021e1a6549c3b7adf5269835149f3d40bac4d9b24af568da0f2ed0e2256b250ea40224aec37e995b307bb1abd98c290bc643ac434f0d40f6680f4c13704187da75e5d504a523ddef52e7a3da4505fd2ddee8aa2bf1e0b8c014b275829fab7827a59b4e124fec54ed11e9ef06c54cdc05df612da1f2d4d8d8397ed1f06ea683e6d4d63d042f3cc31b39325811680c8f2af3e350622e829f28116a1add6c1499270ca27e3ae19a12262ef6f0e7211c5c41dfb526e6d87e72b5e853faee2882d082f4c0d81a012e0dd7c8f5253adbddd6e3dc2419acdede5f2625a61d91560b9d8e3303257498a3fcb7cd7bb47d44fa6124c6dc9b961a55a399d80ba044b51b39318a320606910b261b30188e0df4071d49ffb4a0151bc800ae7558928983b9e20b1365a46b1c7ec64cd186ab4a2fda48f5ed90c05feeffeb5d7829b43b1d573560eca34f10db3e3cf705572b85d5d85bbb170f6dae83cc35c4b2c66e2de64e3ff5c75649530a0a369f7933ebb18c893b5d07740cecd35e006083b7bb6fd8f6ce0c6d4705443ec05722f9d931592b52eaf35661532b4c98f23771aaff03c476da689644be00f0837c45d1a294cccd9b6b080ae07d93bdeff4becd0093d7f36adc0376ff35df6f87228bc6d325db68a58fafb1c543599f9b5fa7fab02f6986122bd94657218e36fa5e80a6b3ed8f3bc3ea70047f309dbe2ae21fc18463823a46b3a6606e549ebe731d274f5bbca47bc1cacc6a1680c6bf50722b6f367862c6a6c7e28b2853960a966f9f39960b8593bb2ef270b8050c0e833236fd9ecc27b8c6828e952525bcdab8cbbc6865536cbd46bae4b68cfd86fc2511c2996e724c987b026dc92164a7624b6a3afb4b0b72bd238efabaa108845862d435ce5a16011cb197df6f3c12c05b6cb930dc355384ec01f29450199a54418fb6bf3235fca1aaa32d50d93b75f85f2a88452f25853419c1a4b9513070aff1b95380f85725246835c3009358f2bd7002dd1698bc176914df60bb6494a128b4485f5bfaa8d39481fc9c5475fec9728652b698da52c19766053d2fcca6b94010d6226ffab18159a3c4faf71272ba1237d0511116b27b94ae9688835b97553d0d2129058b4a39d5275c54cf9d422081f4bd384b1084714430ad9a940694c5326459bc85354737619131495205a62c9daffb3b0fb2b21c112219eb496b20bb30027e5293b818ba1877e6883516bc839e92224051eb177c6653a5c4f2126936707f72e9df838dc48f2caf2ea2506f0c15031ebfa5cc699445eb65a775702f8bf1b046ca215a907070ec1162ef37af2a75828e86bc165dbbd289f66e346046d9f9b484ff3b0b8d437b7259b76c0faa837aaa2858ccc4d408b1bda382ca749035c61b706350ce441bf05fe2ebddf279e8efe90b7b49252bf1fee76ceff2c5d92a161b789a2843d956960e407dc3647aa7a9d38d1c04029f7e4ef51edcf5d7900678022c9f1e21ba8a7f0f8a99ff829176c4b42fbcffe8b115a28ab6fc1694e09bc02d446532fb4fedf7566c86d0eb28230c3cc2ea533922d663358ba14dd13633eac8821b0c9426344657d5b05bb7cfbf69a32fa591ef74bd25ea42b2e24ba78342ff044dbf98537a431d1b98402a760f4116df0213759f13684a5b91af5a556b1aa84545bd4498914d1c6df43caa95ec56aa7bf32296bdfd2db79706197c252616aaa451102a88aa544d9c642765d4fe4c351ebfea8606fff09f0144720d182edbed8e6e1726eae525635582f1f697608132c4b14f8621d907f252773be79cce3a6fafcaad8f21dd9c9214cdc92e3bc1793093bdb94dc91d7057a2f9cef3e51aa963270e145b37c3e684b82f605eca5d868adf3337ca3913af5e70360e9433ca2b1d038ba798bc55979f270b72155e531222d3ed4f85ccd7540c838c4387947833d25f22e514ca8c8a382072c3c09b586bcb19a331bf1fbae2dcd0691bf31cfccc9adc3530ec2949e4723f1250247c397800275f5e4409a7baf0b7bf9ed4ffa8739ad364476aad00b49983bd974586f30b15d345086f50a9b36707b75f6d55d5fed4fd1fbb3b40d675144fdc1cd5ffc3c848eb063c27a6fefdfa029e8690ac556dbf2efe43784a962cafbdb3a4e1192d31faad342a70bb20c08b1acaf321728910c7fce61beff692b5195541bedb020240c8e65be10b4af4679300492e0ff83585fe2fcec94681449fca1f1ef969876fc4c1bbf3d2e853e9819a1782940084906906fe30017be62963823a4e38787d13a336885ca0d38aab3d047f19d14b3f747e8abd0c2128ec62e5947a46f0ce3f4e5bb0fe5325749319719905264a53d7035a985a27c4ec499eca6d66dffbbd69d1a0ec47cc1de201dbd49b7e55a730c03c56cc656a4aae31f0fe277788aac707fbe5368536ad7a310036304ad19edd8961bb9d20dfe92ea396f19927537f1f1ccf791e8a9f0f2ff866b0c7c72227c45942b2cc86aa9e9fa1fa1c199242b8fcafed6c4cc13263d29bb2d078316d0e0a4c23c577405a78c302083d3e8f4765990dd9339ccb2f7cc9dd245a5c2f7ebde40128bcf51a068669a59f31f3f737bf02fe446aa4be1a44c03681d3911e912c1198634d532fc31abddd795cd71d09793b7115c32dc83db62354ee2bc6096625c536b773530135dbd2b1274d51c238380d0cb8b502487649fa366cca988e494ae5e8d8a172cf02ae6d38899e29b8757514b15d8e39db81f20dfff8ed3a9375742f7794eea467ff54da37996afba6e06af593d25f3aa9b4f01775860d81a3cb104f4f3bde34696a5b67f6bb3866a31e922a25f53cd540629f08e98663d1f243468c0bd95a4553bb7b2879ece8ffda175693fdc142ea1be4ee98376ceac3c92127a8a513884fa1189d00d3405c6435d8b284fd5749a8cc48b9c96cc56f34e5eea4cb6efcae30ac766abd9042389a284c44bda7c96197fb463e3d68a39944927dc85b586c039992f1829f6663219144c372353eda5dfa875a43d5deae046792102afbc481edb013d41dbcb61a077107b84127d7877069bee23116c728ba5daaf048203292b6d4c101bcdb3ec636d9a787b2c245ad9a6d7691eb0246ca13b5ac5c8609a51a647c79dd0de837638b1778cbedf1332acb770118c2ef8574adea05782baa7a026d1c36cadddc7a5b1a87d8a4894f8d9aeccc979eeeee8168544d8cfd72793d808d870d154ee897a3e3dab1edf0b05dbcc5a21171ad7d044e785745715816d0548da844669310992584625c63f82fa48a5a1d764e82de111980a745c4a63bf6b8f46a88b5775d506e5e969854fdc18ad81b28cfaba653245119ffcc40009df05a95f84289d5d02774cd2b974b7a7848c4a8c4cc06d41e5246eb630e52cdbe6904419e44f02d55de1bdc83bf07a938c4f82ea8df80adfad1006626ffb59c4250847c8a60355be6b5f91cb18559f34674ad3774ff15d1f35d1267456ac3995b2592f0ca20914fc87ba39130bf2587f72f78382cba2ff052c65329848d9e9124a8b67ddcbcdceb8406d2c660223d8538632f04b58270b5044934f3a8d1238a62183f1dbbcf35fc27682f920cb3020223c6bbca6918ff134ed174ee7740260d68454c613d91664bd5166f4a2f47b076fbf93"}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000002240)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f0000002280)={0x1, 0x3, 0x7, 0x1, 0xc1}) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000022c0), 0x311000, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000002300)={0x0, "0d7cb15a2bd0dd70eb98a1b4d50b2626"}) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000003340)={0x1, &(0x7f0000003300)=[{}]}) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000003380)={0x2, 0x4, {0x7, @usage=0x10001, r5, 0xa, 0x9, 0x4b48, 0x100, 0x7, 0x448, @struct={0x3, 0x10}, 0xfffffffb, 0xffff, [0x1, 0x3, 0x3, 0x80, 0x3, 0x9]}, {0x8, @usage=0x9, r5, 0x1a3, 0x0, 0xffffffffffffffff, 0x7, 0x4, 0x0, @usage=0x100000001, 0xd, 0x3, [0x9, 0x40, 0x7, 0x8, 0x100, 0x8]}, {0x2, @usage=0x316, r5, 0x2, 0x10, 0x5, 0xfffffffffffff709, 0xfffffffffffffffd, 0xc5, @usage=0xfffffffffffffffd, 0x1, 0xb74, [0x3b977310, 0x3c24, 0x2, 0x101, 0xff, 0x7]}, {0x7, 0x8, 0xffffffffffffffff}}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000038c0)={&(0x7f00000037c0)=[0x0, 0x0], &(0x7f0000003800)=[0x0, 0x0, 0x0], &(0x7f0000003840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x3, 0x8, 0x6}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000003900)={&(0x7f0000003780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, r6, 0x0}) ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, &(0x7f00000039c0)={0x5, 0x20, '\x00', 0x0, &(0x7f0000003980)=[0x0, 0x0, 0x0, 0x0]}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000003a00)) r8 = accept$inet6(r3, &(0x7f0000003a40)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000003a80)=0x1c) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f0000003ac0)=0x3, 0x4) setxattr$security_evm(&(0x7f0000003b00)='./file0\x00', &(0x7f0000003b40), &(0x7f0000003b80)=@sha1={0x1, "d61af4fee48cabdc7e879c0531dcf70435ad5dd7"}, 0x15, 0x2) sync() ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f0000003bc0)) syz_usb_connect$uac1(0x2, 0xba, &(0x7f0000003c00)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa8, 0x3, 0x1, 0x9, 0x90, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x81, 0x4, 0xe, 0x2, "258ca4"}, @as_header={0x7, 0x24, 0x1, 0x1, 0x2, 0x1}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x3ff, 0x8, 0x3, "93738770"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x9, 0x7, {0x7, 0x25, 0x1, 0x0, 0x2, 0xfb57}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x2, 0x1, 0x9, 0xfe}, @as_header={0x7, 0x24, 0x1, 0xf6, 0x4, 0x1001}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x10, 0x4, 0x2, 0x0, '9'}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x10, 0x8, 0xff, "f2d8a9301e2de0c1b3"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x5, 0x3, {0x7, 0x25, 0x1, 0x80, 0x1, 0x6}}}}}}}]}}, &(0x7f0000003e40)={0xa, &(0x7f0000003cc0)={0xa, 0x6, 0x110, 0xe, 0x3, 0x7f, 0xdf}, 0x5d, &(0x7f0000003d00)={0x5, 0xf, 0x5d, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0xa5, 0x2, 0x6, 0x8, 0x5}, @ptm_cap={0x3}, @generic={0x3c, 0x10, 0xb, "12b8fc5515462b49a4903c9a9df2b9887e250c14634a355e9e0ab02df94741f65f91f813076801f83c6d2ceb936756781d0d6fc85bbcb5fcd6"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x2, 0x5, 0x2, 0x8}]}, 0x3, [{0x4, &(0x7f0000003d80)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f0000003dc0)=@lang_id={0x4, 0x3, 0x430}}, {0x4, &(0x7f0000003e00)=@lang_id={0x4, 0x3, 0x40d}}]}) sync() sync() ioctl$F2FS_IOC_RESIZE_FS(r4, 0x4008f510, &(0x7f0000003e80)=0xffffffff) preadv(r3, &(0x7f0000004280)=[{&(0x7f0000003ec0)=""/127, 0x7f}, {&(0x7f0000003f40)=""/202, 0xca}, {&(0x7f0000004040)=""/210, 0xd2}, {&(0x7f0000004140)=""/161, 0xa1}, {&(0x7f0000004200)=""/86, 0x56}], 0x5, 0x7f, 0x624e) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000004300)={r7, 0x6, 0x80000001, 0x4, 0x1, [0x0], [0x9, 0x4, 0x65e6], [0x8, 0xffffff98, 0x401, 0x7fffffff], [0x8, 0x4, 0x100000000, 0x1]}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000004380), 0x640000, 0x0) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f00000043c0)={0xffffffffffffffff, 0x1, 0x2000, 0x100000000}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000004400)={r9}) kernel console output (not intermixed with test programs): T5276] usb 5-1: Manufacturer: syz [ 368.215701][ T5276] usb 5-1: SerialNumber: syz [ 368.241644][ T5276] cdc_ncm 5-1:1.0: skipping garbage [ 368.246963][ T5276] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing [ 368.255048][ T5276] cdc_ncm 5-1:1.0: bind() failure [ 368.263910][ T5235] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 368.275618][ T5276] usbtest 5-1:1.0: couldn't get endpoints, -22 [ 368.286450][ T5276] usbtest 5-1:1.0: probe with driver usbtest failed with error -22 [ 368.297005][ T6882] team0 (unregistering): Port device team_slave_0 removed [ 368.298242][ T5276] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 368.311568][ T5276] cdc_ncm 5-1:1.1: bind() failure [ 368.319839][ T5276] usbtest 5-1:1.1: couldn't get endpoints, -22 [ 368.326339][ T5276] usbtest 5-1:1.1: probe with driver usbtest failed with error -22 [ 368.362607][T10702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.381359][T10702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.067578][T10700] netlink: 'syz.4.1090': attribute type 10 has an invalid length. [ 369.098828][T10700] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1090'. [ 369.108142][ T1175] usb 4-1: Can not set alternate setting to 1, error: -71 [ 369.122809][ T1175] synaptics_usb 4-1:0.52: probe with driver synaptics_usb failed with error -71 [ 369.133604][T10700] bridge0: port 3(syz_tun) entered blocking state [ 369.140205][T10700] bridge0: port 3(syz_tun) entered disabled state [ 369.150860][ T1175] usb 4-1: USB disconnect, device number 84 [ 369.164727][T10700] syz_tun: entered allmulticast mode [ 369.186376][T10700] syz_tun: entered promiscuous mode [ 369.198419][T10700] bridge0: port 3(syz_tun) entered blocking state [ 369.205098][T10700] bridge0: port 3(syz_tun) entered forwarding state [ 369.257304][T10518] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 369.279486][T10518] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 369.321400][T10518] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 369.334840][T10518] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 369.396440][T10421] veth0_vlan: entered promiscuous mode [ 369.412410][ T5235] Bluetooth: hci2: command tx timeout [ 369.468277][T10421] veth1_vlan: entered promiscuous mode [ 369.676627][T10421] veth0_macvtap: entered promiscuous mode [ 369.714791][T10421] veth1_macvtap: entered promiscuous mode [ 369.824439][T10421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.843440][T10421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.863896][T10421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.876811][T10421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.895798][T10421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.989578][T10518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.008812][T10518] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.016642][T10421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.036168][T10421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.046810][T10421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.067519][T10421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.082036][T10421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.090702][ T5280] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 370.093639][T10421] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.107869][T10421] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.118892][T10421] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.127992][T10421] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.163898][ T6878] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.171141][ T6878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.184794][ T6878] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.192021][ T6878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.256524][T10599] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 370.266439][ T5280] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 370.285738][T10599] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 370.292842][ T5280] usb 4-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 370.302491][ T5280] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.315152][T10599] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 370.324857][ T5280] usb 4-1: config 0 descriptor?? [ 370.362246][T10599] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 370.496195][ T7455] usb 5-1: USB disconnect, device number 89 [ 370.523431][ T6863] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.550999][ T6863] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.698097][ T6882] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.712600][ T6882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.724969][T10518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.777518][T10712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.823010][T10712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.891829][T10712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.921033][T10712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.929277][T10599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.970884][ T5275] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 370.991532][T10599] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.006628][ T6882] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.013921][ T6882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.039372][T10518] veth0_vlan: entered promiscuous mode [ 371.063884][ T6863] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.071112][ T6863] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.141463][ T5275] usb 5-1: config 0 has no interfaces? [ 371.150351][ T5275] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 371.170031][T10518] veth1_vlan: entered promiscuous mode [ 371.180629][ T5275] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.200018][ T5275] usb 5-1: config 0 descriptor?? [ 371.322173][T10518] veth0_macvtap: entered promiscuous mode [ 371.366983][T10518] veth1_macvtap: entered promiscuous mode [ 371.422209][T10599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.443141][T10746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.492907][T10746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.509146][ T5280] usbhid 4-1:0.0: can't add hid device: -71 [ 371.516732][ T5280] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 371.540233][T10518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.551212][T10518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.561423][T10518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.572031][T10518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.581997][T10518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.592977][ T5276] usb 5-1: USB disconnect, device number 90 [ 371.598997][T10518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.611757][T10518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.621813][T10518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.632411][T10518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.642684][T10518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.653282][T10518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.663518][T10518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.674075][T10518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.685559][T10518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.697006][T10518] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.705967][T10518] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.714920][T10518] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.723841][T10518] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.151538][ T5275] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 372.322936][ T5275] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 372.368959][ T5275] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 372.400358][ T5275] usb 5-1: New USB device found, idVendor=468c, idProduct=90ea, bcdDevice=99.6d [ 372.427974][ T5275] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.455482][ T5275] usb 5-1: Product: syz [ 372.468885][ T5275] usb 5-1: Manufacturer: syz [ 372.485290][ T5275] usb 5-1: SerialNumber: syz [ 372.511883][ T5275] usb 5-1: config 0 descriptor?? [ 372.545583][ T5275] usb 5-1: Found UVC 0.00 device syz (468c:90ea) [ 372.575422][ T5275] usb 5-1: No valid video chain found. [ 372.680986][ T5280] usb 4-1: USB disconnect, device number 85 [ 374.396123][T10599] veth0_vlan: entered promiscuous mode [ 374.421275][T10756] netlink: 'syz.0.1097': attribute type 10 has an invalid length. [ 374.477313][T10756] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.493003][T10756] bond0: (slave team0): Enslaving as an active interface with an up link [ 374.508781][T10761] netlink: 'syz.0.1097': attribute type 10 has an invalid length. [ 374.532041][T10761] bond0: (slave team0): Releasing backup interface [ 374.554805][T10761] bridge0: port 3(team0) entered blocking state [ 374.571720][ T5275] usb 5-1: USB disconnect, device number 91 [ 374.593240][T10761] bridge0: port 3(team0) entered disabled state [ 374.599702][T10761] team0: entered allmulticast mode [ 374.626580][T10761] team_slave_0: entered allmulticast mode [ 374.633566][T10761] team_slave_1: entered allmulticast mode [ 374.644414][T10761] team0: entered promiscuous mode [ 374.649547][T10761] team_slave_0: entered promiscuous mode [ 374.658518][T10761] team_slave_1: entered promiscuous mode [ 374.676230][T10599] veth1_vlan: entered promiscuous mode [ 374.998256][T10599] veth0_macvtap: entered promiscuous mode [ 375.015531][T10599] veth1_macvtap: entered promiscuous mode [ 375.041307][ T6863] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.049210][ T6863] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.090144][T10599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.130534][T10599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.170515][T10599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.190530][T10599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.227353][T10599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.260246][T10599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.290093][T10599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.310831][T10599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.333734][T10599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.358801][ T6880] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.378583][T10599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.411094][ T6880] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.420997][T10599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.448657][T10599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.474653][T10599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.506591][T10599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.518343][T10599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.540500][T10599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.560769][T10599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.592206][T10599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.615990][T10599] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.659851][T10599] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.680766][T10599] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.705374][T10599] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.956426][ T1124] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.158849][ T1124] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.457801][ T1124] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.540167][ T6878] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.576769][ T6878] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.721814][ T6878] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.736718][ T6878] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.765663][ T4620] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 376.776893][ T4620] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 376.786155][ T4620] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 376.795722][ T4620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 376.804386][ T4620] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 376.813044][ T4620] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 377.201230][ T1124] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.933593][T10848] chnl_net:caif_netlink_parms(): no params data found [ 377.942041][ T7455] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 378.023221][ T1124] team0: left allmulticast mode [ 378.028464][ T1124] team_slave_0: left allmulticast mode [ 378.046954][ T1124] team_slave_1: left allmulticast mode [ 378.055321][ T1124] team0: left promiscuous mode [ 378.060302][ T1124] team_slave_0: left promiscuous mode [ 378.072746][ T1124] team_slave_1: left promiscuous mode [ 378.078597][ T1124] bridge0: port 3(team0) entered disabled state [ 378.103078][ T1124] bridge_slave_1: left allmulticast mode [ 378.109088][ T1124] bridge_slave_1: left promiscuous mode [ 378.123170][ T7455] usb 3-1: config 97 has an invalid interface descriptor of length 3, skipping [ 378.140589][ T7455] usb 3-1: config 97 has an invalid descriptor of length 0, skipping remainder of the config [ 378.153463][ T1124] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.171264][ T7455] usb 3-1: config 97 has 0 interfaces, different from the descriptor's value: 1 [ 378.182092][ T1124] bridge_slave_0: left allmulticast mode [ 378.188058][ T1124] bridge_slave_0: left promiscuous mode [ 378.204820][ T7455] usb 3-1: New USB device found, idVendor=0480, idProduct=d010, bcdDevice=17.4d [ 378.225339][ T1124] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.251113][ T7455] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.486159][T10867] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1108'. [ 378.519622][ T7455] usb 3-1: string descriptor 0 read error: -71 [ 378.560826][ T7455] usb 3-1: USB disconnect, device number 78 [ 378.926930][ T5235] Bluetooth: hci1: command tx timeout [ 378.964376][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.970869][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.869765][ T1124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.946643][ T1124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 380.018934][ T1124] bond0 (unregistering): Released all slaves [ 380.280984][ T1175] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 380.310829][ T5276] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 380.392215][T10848] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.407888][T10848] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.416788][T10848] bridge_slave_0: entered allmulticast mode [ 380.432837][T10848] bridge_slave_0: entered promiscuous mode [ 380.442620][ T1175] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.461935][T10848] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.476473][ T1175] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.501725][ T5276] usb 2-1: Using ep0 maxpacket: 32 [ 380.507197][ T1175] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 380.523349][ T5276] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 380.533542][ T5276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.560703][T10848] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.568108][T10848] bridge_slave_1: entered allmulticast mode [ 380.584631][ T1175] usb 3-1: New USB device found, idVendor=056a, idProduct=0314, bcdDevice= 0.00 [ 380.602328][T10848] bridge_slave_1: entered promiscuous mode [ 380.618202][ T1175] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.657844][ T5276] usb 2-1: config 0 descriptor?? [ 380.664367][ T1175] usb 3-1: config 0 descriptor?? [ 380.691093][ T5276] as10x_usb: device has been detected [ 380.707532][ T5276] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 380.833871][T10848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.850877][ T5276] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 380.917422][T10848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.002359][ T5235] Bluetooth: hci1: command tx timeout [ 381.027922][ T5276] as10x_usb: error during firmware upload part1 [ 381.046376][ T5276] Registered device nBox DVB-T Dongle [ 381.062063][ T5276] usb 2-1: USB disconnect, device number 87 [ 381.117117][ T5276] Unregistered device nBox DVB-T Dongle [ 381.130777][ T5276] as10x_usb: device has been disconnected [ 381.166425][ T1175] usbhid 3-1:0.0: can't add hid device: -71 [ 381.173025][ T1175] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 381.192689][ T1175] usb 3-1: USB disconnect, device number 79 [ 381.255347][T10848] team0: Port device team_slave_0 added [ 381.279187][T10848] team0: Port device team_slave_1 added [ 381.339058][T10848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.349278][T10848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.384841][T10848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.406370][T10848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.417082][T10848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.451051][ T5276] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 381.465887][T10848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.567229][T10848] hsr_slave_0: entered promiscuous mode [ 381.578159][T10848] hsr_slave_1: entered promiscuous mode [ 381.621003][ T5276] usb 2-1: Using ep0 maxpacket: 32 [ 381.631783][ T5276] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 381.656244][ T5276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.691462][ T5276] usb 2-1: config 0 descriptor?? [ 381.734101][ T5276] as10x_usb: device has been detected [ 381.769079][ T5276] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 381.846015][ T5276] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 381.898755][ T5276] as10x_usb: error during firmware upload part1 [ 381.961989][ T5276] Registered device nBox DVB-T Dongle [ 382.421932][ T1175] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 382.445378][ T4620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 382.457156][ T4620] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 382.470284][ T4620] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 382.497964][ T4620] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 382.511424][ T4620] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 382.519040][ T4620] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 382.610890][ T1175] usb 3-1: device descriptor read/64, error -71 [ 382.784915][ T1124] hsr_slave_0: left promiscuous mode [ 382.798794][ T1124] hsr_slave_1: left promiscuous mode [ 382.809272][ T1124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.825796][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.836655][ T1124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.858403][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.880864][ T1175] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 382.906080][ T1124] veth1_macvtap: left promiscuous mode [ 382.920928][ T1124] veth0_macvtap: left promiscuous mode [ 382.926633][ T1124] veth1_vlan: left promiscuous mode [ 382.938393][ T1124] veth0_vlan: left promiscuous mode [ 383.030620][ T1175] usb 3-1: device descriptor read/64, error -71 [ 383.080639][ T4620] Bluetooth: hci1: command tx timeout [ 383.152639][ T1175] usb usb3-port1: attempt power cycle [ 383.490791][ T1175] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 383.519126][ T5276] usb 2-1: USB disconnect, device number 88 [ 383.544879][ T5276] Unregistered device nBox DVB-T Dongle [ 383.545465][ T1175] usb 3-1: device descriptor read/8, error -71 [ 383.572130][ T5276] as10x_usb: device has been disconnected [ 383.767209][ T1124] team0 (unregistering): Port device team_slave_1 removed [ 383.810902][ T1175] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 383.836485][ T1124] team0 (unregistering): Port device team_slave_0 removed [ 383.841463][ T1175] usb 3-1: device descriptor read/8, error -71 [ 383.957203][ T5276] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 383.965576][ T1175] usb usb3-port1: unable to enumerate USB device [ 384.120648][ T5276] usb 2-1: Using ep0 maxpacket: 8 [ 384.127684][ T5276] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 384.136680][ T5276] usb 2-1: can't read configurations, error -61 [ 384.277096][ T5276] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 384.444895][ T5276] usb 2-1: Using ep0 maxpacket: 8 [ 384.476336][ T5276] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 384.484614][ T5276] usb 2-1: can't read configurations, error -61 [ 384.499937][ T5276] usb usb2-port1: attempt power cycle [ 384.602460][ T4620] Bluetooth: hci3: command tx timeout [ 384.706243][T10848] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 384.741595][T10892] chnl_net:caif_netlink_parms(): no params data found [ 384.766429][T10848] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 384.860091][T10848] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 384.881350][ T5276] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 384.884011][T10848] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 384.918496][ T5276] usb 2-1: Using ep0 maxpacket: 8 [ 384.955520][ T5276] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 384.963528][ T5276] usb 2-1: can't read configurations, error -61 [ 384.989144][T10892] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.996938][T10892] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.005335][T10892] bridge_slave_0: entered allmulticast mode [ 385.012938][T10892] bridge_slave_0: entered promiscuous mode [ 385.036598][T10892] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.077882][T10892] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.090234][T10892] bridge_slave_1: entered allmulticast mode [ 385.112188][T10892] bridge_slave_1: entered promiscuous mode [ 385.130867][ T5276] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 385.182909][ T4620] Bluetooth: hci1: command tx timeout [ 385.244433][ T5276] usb 2-1: Using ep0 maxpacket: 8 [ 385.268719][ T5276] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 385.284567][ T5276] usb 2-1: can't read configurations, error -61 [ 385.290767][T10892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.303428][T10892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.317733][ T5276] usb usb2-port1: unable to enumerate USB device [ 385.365909][T10892] team0: Port device team_slave_0 added [ 385.377108][T10892] team0: Port device team_slave_1 added [ 385.440320][T10892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.470687][T10892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.508558][T10892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.525576][T10892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.532852][T10892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.559254][T10892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.705705][ T1124] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.827341][T10892] hsr_slave_0: entered promiscuous mode [ 385.843972][T10892] hsr_slave_1: entered promiscuous mode [ 385.857216][T10892] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 385.866796][T10892] Cannot create hsr debugfs directory [ 385.893857][ T1124] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.985657][ T1124] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.030677][T10848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.080267][ T1124] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.136591][T10848] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.149555][ T6869] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.156814][ T6869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.181543][ T6878] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.188716][ T6878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.386497][T10848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.396810][ T1124] bridge_slave_1: left allmulticast mode [ 386.412145][ T1124] bridge_slave_1: left promiscuous mode [ 386.420476][ T1124] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.431077][ T1124] bridge_slave_0: left allmulticast mode [ 386.436802][ T1124] bridge_slave_0: left promiscuous mode [ 386.444308][ T1124] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.680668][ T4620] Bluetooth: hci3: command tx timeout [ 386.711322][T10940] dccp_close: ABORT with 32 bytes unread [ 387.121699][ T5315] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 387.200400][ T1124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.218483][ T1124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.231711][T10956] netlink: 'syz.2.1126': attribute type 11 has an invalid length. [ 387.250203][ T1124] bond0 (unregistering): Released all slaves [ 387.311698][ T5315] usb 2-1: Using ep0 maxpacket: 16 [ 387.337780][ T5315] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 387.380725][ T5315] usb 2-1: config 0 has no interface number 0 [ 387.386918][ T5315] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 387.464678][ T5315] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=3e.04 [ 387.476299][ T5315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.498788][ T5315] usb 2-1: Product: syz [ 387.503274][ T5315] usb 2-1: Manufacturer: syz [ 387.507941][ T5315] usb 2-1: SerialNumber: syz [ 387.530804][ T5315] usb 2-1: config 0 descriptor?? [ 387.576496][T10958] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1127'. [ 387.688196][T10848] veth0_vlan: entered promiscuous mode [ 387.968292][T10978] bridge1: entered promiscuous mode [ 387.977815][ T5280] usb 2-1: USB disconnect, device number 93 [ 387.986402][T10978] bridge1: entered allmulticast mode [ 388.082858][T10848] veth1_vlan: entered promiscuous mode [ 388.216886][T10988] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.1131'. [ 388.279944][ T1124] hsr_slave_0: left promiscuous mode [ 388.317003][ T1124] hsr_slave_1: left promiscuous mode [ 388.347643][ T1124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.392991][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.422616][ T1124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.450168][ T5315] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 388.461031][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.606819][ T1124] veth1_macvtap: left promiscuous mode [ 388.618109][ T1124] veth0_macvtap: left promiscuous mode [ 388.631183][ T1124] veth1_vlan: left promiscuous mode [ 388.639017][ T1124] veth0_vlan: left promiscuous mode [ 388.645548][ T5315] usb 5-1: Using ep0 maxpacket: 32 [ 388.662882][ T5315] usb 5-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 388.684485][ T5315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.708529][ T5315] usb 5-1: config 0 descriptor?? [ 388.725959][ T5315] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 388.771645][ T4620] Bluetooth: hci3: command tx timeout [ 388.927814][ T5315] gspca_sunplus: reg_w_riv err -71 [ 388.933203][ T5315] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 388.952402][ T5315] usb 5-1: USB disconnect, device number 92 [ 389.390565][ T7455] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 389.570559][ T7455] usb 3-1: Using ep0 maxpacket: 8 [ 389.581937][ T7455] usb 3-1: config 0 has an invalid interface number: 151 but max is 1 [ 389.600466][ T7455] usb 3-1: config 0 has no interface number 1 [ 389.606755][ T7455] usb 3-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 389.670697][ T7455] usb 3-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 389.690531][ T7455] usb 3-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 389.720531][ T7455] usb 3-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 389.750581][ T7455] usb 3-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 389.770567][ T7455] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 389.790534][ T7455] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 389.947291][ T5281] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 389.961972][ T7455] usb 3-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 389.971267][ T7455] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.979306][ T7455] usb 3-1: Product: syz [ 389.992030][ T7455] usb 3-1: Manufacturer: syz [ 389.996711][ T7455] usb 3-1: SerialNumber: syz [ 390.007537][ T9] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 390.008640][ T7455] usb 3-1: config 0 descriptor?? [ 390.026518][T11001] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 390.060045][ T7455] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 390.072195][ T7455] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 390.079467][ T7455] usb 3-1: invalid MIDI in EP 0 [ 390.122391][ T5281] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.134945][ T5281] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 390.138996][ T1124] team0 (unregistering): Port device team_slave_1 removed [ 390.156127][ T5281] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 390.179979][ T5281] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.183708][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 390.192340][ T7455] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 390.210989][ T5281] usb 2-1: config 0 descriptor?? [ 390.220118][ T5281] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 390.231259][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 390.254307][ T9] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 390.281568][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 390.322143][ T9] usb 5-1: SerialNumber: syz [ 390.357827][ T1124] team0 (unregistering): Port device team_slave_0 removed [ 390.546997][ T9] usb 5-1: 0:2 : does not exist [ 390.555044][ T9] usb 5-1: unit 5: unexpected type 0x03 [ 390.575202][ T9] usb 5-1: unit 4 not found! [ 390.603083][ T5278] usb 2-1: USB disconnect, device number 94 [ 390.636049][ T9] usb 5-1: USB disconnect, device number 93 [ 390.661172][ T5336] udevd[5336]: setting mode of /dev/bus/usb/005/093 to 020664 failed: No such file or directory [ 390.680813][ T5336] udevd[5336]: setting owner of /dev/bus/usb/005/093 to uid=0, gid=0 failed: No such file or directory [ 390.738633][ T5340] udevd[5340]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 390.845636][ T4620] Bluetooth: hci3: command tx timeout [ 391.256895][T10892] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 391.305100][T10892] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 391.362562][T10892] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 391.384965][T10892] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 391.525199][T10848] veth0_macvtap: entered promiscuous mode [ 391.546001][T11012] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1137'. [ 391.596683][T11012] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.607354][T11012] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.636218][T10848] veth1_macvtap: entered promiscuous mode [ 391.767210][T10892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.814864][T10848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.840749][T10848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.843676][ T938] usb 3-1: USB disconnect, device number 84 [ 391.853042][T10848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.867976][T10848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.902308][T10848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.915233][T10848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.965512][T10848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.987036][T10848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.030911][ T5278] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 392.065979][T10848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.089617][T10848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.107064][T10848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.123472][T10848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.134552][T10848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.146507][T10848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.187189][T10848] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.203143][ T5278] usb 2-1: Using ep0 maxpacket: 32 [ 392.216125][T10848] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.226015][T10848] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.235343][ T5278] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 392.247208][ T5278] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 392.258658][T10848] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.268350][ T5278] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 392.302175][ T5278] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 392.318102][ T5278] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.334549][T10892] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.350584][ T5278] usb 2-1: config 0 descriptor?? [ 392.350653][ T938] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 392.371620][T11021] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 392.387968][ T5278] hub 2-1:0.0: USB hub found [ 392.446880][ T6882] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.454096][ T6882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.479394][ T6882] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.486606][ T6882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.554465][ T938] usb 3-1: Using ep0 maxpacket: 32 [ 392.579142][ T6882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.588584][ T938] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 392.604092][ T5278] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 392.607489][ T938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 392.626684][ T6882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.635690][ T938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 392.653894][ T938] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 392.667141][ T938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.683042][ T938] usb 3-1: config 0 descriptor?? [ 392.691466][T11028] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 392.711767][ T938] hub 3-1:0.0: USB hub found [ 392.757328][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.785437][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.820019][T10892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.930532][T11028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.943643][T10892] veth0_vlan: entered promiscuous mode [ 392.961094][ T9] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 392.969283][T11028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.019289][ T5278] hid-generic 0003:046D:C314.0012: item fetching failed at offset 0/1 [ 393.028624][T10892] veth1_vlan: entered promiscuous mode [ 393.046001][ T5278] hid-generic 0003:046D:C314.0012: probe with driver hid-generic failed with error -22 [ 393.058850][T11028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1140'. [ 393.110697][T11028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1140'. [ 393.168170][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 393.185055][ T9] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 393.216939][T11021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.225273][ T938] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 393.231079][ T938] usbhid 3-1:0.0: can't add hid device: -71 [ 393.239272][ T9] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 393.239308][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 393.239362][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 393.263381][T10892] veth0_macvtap: entered promiscuous mode [ 393.274548][ T938] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 393.293431][T10892] veth1_macvtap: entered promiscuous mode [ 393.316277][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 393.328549][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 393.344207][ T9] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 393.354624][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.376965][T11021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.413406][ T938] usb 3-1: USB disconnect, device number 85 [ 393.419233][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.437066][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.447172][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.457939][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.467871][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.478403][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.488571][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.499176][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.511658][T10892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.513898][ T5280] usb 2-1: USB disconnect, device number 95 [ 393.520828][ T9] usb 5-1: config 0 descriptor?? [ 393.537452][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.548117][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.558200][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.569937][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.580849][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.591478][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.601701][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.614319][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.627572][T10892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.644186][T10892] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.657897][T10892] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.666848][T10892] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.675738][T10892] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.831717][ T9] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 94 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 393.845504][ T9] usb 5-1: USB disconnect, device number 94 [ 393.855454][ T9] usblp0: removed [ 393.951953][ T6878] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.959855][ T6878] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.006163][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.015399][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.301148][ T5278] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 394.308847][T11068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1114'. [ 394.487976][T11084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1147'. [ 394.511496][ T5278] usb 5-1: Using ep0 maxpacket: 32 [ 394.518691][ T5278] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 394.567501][ T5278] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 394.658301][ T5278] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 394.682162][ T5278] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 394.702876][ T5278] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 394.741407][ T5278] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 394.781412][ T5278] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 394.790714][ T5278] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.823445][ T5278] usb 5-1: config 0 descriptor?? [ 395.044271][T11037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.053099][ T5278] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 95 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 395.110146][T11099] netlink: 444 bytes leftover after parsing attributes in process `syz.0.1151'. [ 395.129385][T11037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.177681][ T5276] usb 5-1: USB disconnect, device number 95 [ 395.195166][ T5276] usblp0: removed [ 395.317938][T11112] netlink: 'syz.0.1155': attribute type 23 has an invalid length. [ 395.390717][ T5278] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 395.413449][T11037] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1142'. [ 395.551799][ T5278] usb 4-1: Using ep0 maxpacket: 16 [ 395.575446][ T5278] usb 4-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 395.589958][ T5278] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.599540][ T5278] usb 4-1: Product: syz [ 395.603990][ T5278] usb 4-1: Manufacturer: syz [ 395.614864][ T5278] usb 4-1: SerialNumber: syz [ 395.624407][ T5278] usb 4-1: config 0 descriptor?? [ 395.687486][ T5340] udevd[5340]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 395.865783][ T5281] usb 4-1: USB disconnect, device number 86 [ 395.992613][T11144] netlink: 444 bytes leftover after parsing attributes in process `syz.4.1165'. [ 396.020706][ T5278] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 396.045524][T11146] netlink: 1260 bytes leftover after parsing attributes in process `syz.4.1166'. [ 396.090735][ T938] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 396.177969][ T5278] usb 2-1: Using ep0 maxpacket: 16 [ 396.222801][ T5278] usb 2-1: descriptor type invalid, skip [ 396.228652][ T5278] usb 2-1: no configurations [ 396.247641][ T5278] usb 2-1: can't read configurations, error -22 [ 396.260614][ T938] usb 1-1: Using ep0 maxpacket: 8 [ 396.270287][ T938] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 396.279019][ T938] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 396.289392][ T938] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 396.299597][ T938] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 396.312133][ T938] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 396.331678][ T938] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 396.341526][ T29] audit: type=1326 audit(1727026508.452:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11155 comm="syz.4.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9417def9 code=0x7ffc0000 [ 396.364996][ T938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.383018][ T5278] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 396.384956][ T29] audit: type=1326 audit(1727026508.452:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11155 comm="syz.4.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9417def9 code=0x7ffc0000 [ 396.425941][ T29] audit: type=1326 audit(1727026508.452:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11155 comm="syz.4.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbb9417def9 code=0x7ffc0000 [ 396.450693][ T29] audit: type=1326 audit(1727026508.452:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11155 comm="syz.4.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9417def9 code=0x7ffc0000 [ 396.476195][ T29] audit: type=1326 audit(1727026508.452:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11155 comm="syz.4.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9417def9 code=0x7ffc0000 [ 396.499992][ T29] audit: type=1326 audit(1727026508.452:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11155 comm="syz.4.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbb9417def9 code=0x7ffc0000 [ 396.523470][ T29] audit: type=1326 audit(1727026508.452:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11155 comm="syz.4.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9417def9 code=0x7ffc0000 [ 396.552921][ T29] audit: type=1326 audit(1727026508.452:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11155 comm="syz.4.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9417def9 code=0x7ffc0000 [ 396.570588][ T5278] usb 2-1: Using ep0 maxpacket: 16 [ 396.584761][ T938] usb 1-1: GET_CAPABILITIES returned 0 [ 396.591541][ T938] usbtmc 1-1:16.0: can't read capabilities [ 396.607601][ T5278] usb 2-1: descriptor type invalid, skip [ 396.613775][ T5278] usb 2-1: no configurations [ 396.618777][ T5278] usb 2-1: can't read configurations, error -22 [ 396.621894][ T29] audit: type=1326 audit(1727026508.452:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11155 comm="syz.4.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbb9417def9 code=0x7ffc0000 [ 396.626785][ T5278] usb usb2-port1: attempt power cycle [ 396.648269][ T29] audit: type=1326 audit(1727026508.452:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11155 comm="syz.4.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9417def9 code=0x7ffc0000 [ 396.792001][T11137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1163'. [ 396.801548][ T9] usb 5-1: new full-speed USB device number 96 using dummy_hcd [ 396.823127][ T5281] usb 1-1: USB disconnect, device number 84 [ 396.962658][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 396.974115][ T9] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 396.983460][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.996031][ T9] usb 5-1: Product: syz [ 397.000277][ T9] usb 5-1: Manufacturer: syz [ 397.005022][ T9] usb 5-1: SerialNumber: syz [ 397.010852][ T5278] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 397.020858][ T9] usb 5-1: config 0 descriptor?? [ 397.041321][ T5278] usb 2-1: Using ep0 maxpacket: 16 [ 397.049245][ T5278] usb 2-1: descriptor type invalid, skip [ 397.055214][ T5276] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 397.063989][ T5278] usb 2-1: no configurations [ 397.068622][ T5278] usb 2-1: can't read configurations, error -22 [ 397.211187][ T5278] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 397.220220][ T5276] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 397.235860][ T5276] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.247569][ T5278] usb 2-1: Using ep0 maxpacket: 16 [ 397.259228][ T5278] usb 2-1: descriptor type invalid, skip [ 397.265828][ T5276] usb 4-1: config 0 descriptor?? [ 397.271068][ T5278] usb 2-1: no configurations [ 397.275698][ T5278] usb 2-1: can't read configurations, error -22 [ 397.282742][ T5278] usb usb2-port1: unable to enumerate USB device [ 397.415654][T11171] bridge0: port 3(veth0_to_bridge) entered blocking state [ 397.424108][T11171] bridge0: port 3(veth0_to_bridge) entered disabled state [ 397.432444][T11171] veth0_to_bridge: entered allmulticast mode [ 397.439897][T11171] veth0_to_bridge: entered promiscuous mode [ 397.446740][T11171] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 397.462165][T11171] bridge0: port 3(veth0_to_bridge) entered blocking state [ 397.469966][T11171] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 397.698599][ T5276] gs_usb 4-1:0.0: Configuring for 126 interfaces [ 397.706397][ T5276] gs_usb 4-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 397.714749][ T5276] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -22 [ 397.850689][ T938] usb 1-1: new full-speed USB device number 85 using dummy_hcd [ 397.990660][ T938] usb 1-1: device descriptor read/64, error -71 [ 398.088829][T11182] fuse: Bad value for 'group_id' [ 398.094682][T11182] fuse: Bad value for 'group_id' [ 398.240577][ T938] usb 1-1: new full-speed USB device number 86 using dummy_hcd [ 398.381415][ T938] usb 1-1: device descriptor read/64, error -71 [ 398.495918][ T938] usb usb1-port1: attempt power cycle [ 398.835635][T11193] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1179'. [ 398.845699][ T938] usb 1-1: new full-speed USB device number 87 using dummy_hcd [ 398.871270][ T938] usb 1-1: device descriptor read/8, error -71 [ 398.956451][T11202] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1181'. [ 398.966147][T11202] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1181'. [ 398.976616][T11202] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1181'. [ 399.110587][ T938] usb 1-1: new full-speed USB device number 88 using dummy_hcd [ 399.141956][ T938] usb 1-1: device descriptor read/8, error -71 [ 399.249480][T11209] fuse: Bad value for 'fd' [ 399.264214][ T938] usb usb1-port1: unable to enumerate USB device [ 399.270991][ T5281] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 399.335169][T11213] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 399.342050][T11213] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 399.355228][T11213] vhci_hcd vhci_hcd.0: Device attached [ 399.363927][T11213] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(8) [ 399.370488][T11213] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 399.379044][T11213] vhci_hcd vhci_hcd.0: Device attached [ 399.390738][T11213] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(72) [ 399.397422][T11213] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 399.407557][T11213] vhci_hcd vhci_hcd.0: Device attached [ 399.416055][T11213] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(75) [ 399.422715][T11213] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 399.433315][T11213] vhci_hcd vhci_hcd.0: Device attached [ 399.462471][ T5281] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 399.477813][T11222] vhci_hcd: connection closed [ 399.477902][T11219] vhci_hcd: connection closed [ 399.483929][ T6882] vhci_hcd: stop threads [ 399.500051][ T5281] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.512635][ T5281] usb 2-1: config 0 descriptor?? [ 399.520040][ T6882] vhci_hcd: release socket [ 399.534322][ T6882] vhci_hcd: disconnect device [ 399.542017][ T6882] vhci_hcd: stop threads [ 399.551513][T11217] vhci_hcd: connection closed [ 399.554445][T11215] vhci_hcd: connection closed [ 399.570680][ T6882] vhci_hcd: release socket [ 399.584674][ T5280] usb 5-1: USB disconnect, device number 96 [ 399.591867][ T9] usb 13-1: new low-speed USB device number 2 using vhci_hcd [ 399.592662][ T6882] vhci_hcd: disconnect device [ 399.610243][ T6882] vhci_hcd: stop threads [ 399.618527][T11216] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 399.657456][ T6882] vhci_hcd: release socket [ 399.666802][ T6882] vhci_hcd: disconnect device [ 399.684526][ T6882] vhci_hcd: stop threads [ 399.689024][ T6882] vhci_hcd: release socket [ 399.699321][ T6882] vhci_hcd: disconnect device [ 399.907581][ T5278] usb 4-1: USB disconnect, device number 87 [ 400.184629][ T5281] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 400.203414][T11241] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1189'. [ 400.229562][ T5281] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 400.252594][ T5281] [drm:udl_init] *ERROR* Selecting channel failed [ 400.284672][ T5281] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 400.293935][ T5281] [drm] Initialized udl on minor 2 [ 400.311207][ T5281] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 400.331678][ T5281] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 400.338521][ T938] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 400.354008][ T938] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 400.362446][ T5281] usb 2-1: USB disconnect, device number 100 [ 400.380656][ T938] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 401.090564][ T5281] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 401.173595][ T938] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 401.260785][ T5281] usb 1-1: Using ep0 maxpacket: 8 [ 401.272439][ T5281] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.309746][ T5281] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 401.320186][ T5281] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.336052][ T5281] usb 1-1: config 0 descriptor?? [ 401.350561][ T938] usb 2-1: Using ep0 maxpacket: 8 [ 401.357531][ T5281] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 401.381664][ T938] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 401.392588][ T938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.402227][ T938] usb 2-1: Product: syz [ 401.406966][ T938] usb 2-1: Manufacturer: syz [ 401.417266][ T938] usb 2-1: SerialNumber: syz [ 401.438437][ T938] usb 2-1: config 0 descriptor?? [ 401.648941][ T938] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 401.888515][ T938] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 402.256559][ T5278] usb 2-1: USB disconnect, device number 101 [ 402.569576][T11254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.589491][T11254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.877033][ T5281] gspca_vc032x: reg_w err -110 [ 402.895190][ T5281] vc032x 1-1:0.0: probe with driver vc032x failed with error -110 [ 403.135749][T11299] FAULT_INJECTION: forcing a failure. [ 403.135749][T11299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 403.180732][T11299] CPU: 1 UID: 0 PID: 11299 Comm: syz.2.1204 Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 403.191263][T11299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 403.201377][T11299] Call Trace: [ 403.204708][T11299] [ 403.207682][T11299] dump_stack_lvl+0x241/0x360 [ 403.212413][T11299] ? __pfx_dump_stack_lvl+0x10/0x10 [ 403.217641][T11299] ? __pfx__printk+0x10/0x10 [ 403.222251][T11299] ? __pfx_lock_release+0x10/0x10 [ 403.227303][T11299] should_fail_ex+0x3b0/0x4e0 [ 403.232031][T11299] _copy_from_user+0x2f/0xe0 [ 403.236663][T11299] copy_msghdr_from_user+0xae/0x680 [ 403.241899][T11299] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 403.247756][T11299] __sys_sendmsg+0x237/0x390 [ 403.250755][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 403.252383][T11299] ? __pfx___sys_sendmsg+0x10/0x10 [ 403.265292][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 403.269451][T11299] ? vfs_write+0x7bf/0xc90 [ 403.282045][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 403.285902][T11299] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 403.298535][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 403.304282][T11299] ? do_syscall_64+0x100/0x230 [ 403.304325][T11299] ? do_syscall_64+0xb6/0x230 [ 403.304357][T11299] do_syscall_64+0xf3/0x230 [ 403.316800][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 403.321074][T11299] ? clear_bhb_loop+0x35/0x90 [ 403.321111][T11299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.326300][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 403.330327][T11299] RIP: 0033:0x7fa4b037def9 [ 403.342791][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 403.346953][T11299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.353253][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 403.364790][T11299] RSP: 002b:00007fa4b1163038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 403.364821][T11299] RAX: ffffffffffffffda RBX: 00007fa4b0535f80 RCX: 00007fa4b037def9 [ 403.364840][T11299] RDX: 0000000000000000 RSI: 0000000020001540 RDI: 0000000000000003 [ 403.369618][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 403.381212][T11299] RBP: 00007fa4b1163090 R08: 0000000000000000 R09: 0000000000000000 [ 403.381231][T11299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.381246][T11299] R13: 0000000000000000 R14: 00007fa4b0535f80 R15: 00007fa4b065fa28 [ 403.381280][T11299] [ 403.401287][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 404.128568][ T1175] usb 1-1: USB disconnect, device number 89 [ 404.280673][ T938] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 404.350685][ T5281] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 404.471231][ T938] usb 3-1: Using ep0 maxpacket: 8 [ 404.476833][T11291] coredump: 88(syz.1.1202): interrupted: fatal signal pending [ 404.498023][ T938] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 404.530646][T11291] coredump: 88(syz.1.1202): written to core: VMAs: 35, size 97345536; core: 16851966 bytes, pos 17481728 [ 404.543707][ T5281] usb 4-1: Using ep0 maxpacket: 8 [ 404.564742][ T938] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 404.594264][ T5281] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 404.630605][ T938] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 404.662000][ T5281] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 404.714501][ T5281] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 404.725815][ T938] usb 3-1: New USB device found, idVendor=0001, idProduct=8000, bcdDevice= 0.00 [ 404.768228][ T938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 404.787420][ T5281] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 404.821867][ T938] usb 3-1: SerialNumber: syz [ 404.847539][ T5281] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 404.858461][T11305] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 404.919137][ T9] vhci_hcd: vhci_device speed not set [ 404.925891][ T938] hub 3-1:1.0: bad descriptor, ignoring hub [ 404.934179][ T5281] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.958362][ T938] hub 3-1:1.0: probe with driver hub failed with error -5 [ 405.127672][T11305] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 405.218622][ T5281] usb 4-1: GET_CAPABILITIES returned 0 [ 405.272841][ T5281] usbtmc 4-1:16.0: can't read capabilities [ 405.386467][T11305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.427000][T11307] random: crng reseeded on system resumption [ 405.465320][T11305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.952677][ T6880] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.159075][T11331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 406.830976][ T6880] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.492883][ T5280] usb 4-1: USB disconnect, device number 88 [ 407.530780][ T938] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 407.681288][ T938] usb 3-1: USB disconnect, device number 86 [ 407.802182][T11352] FAULT_INJECTION: forcing a failure. [ 407.802182][T11352] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.877060][T11352] CPU: 1 UID: 0 PID: 11352 Comm: syz.2.1217 Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 407.887591][T11352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 407.897693][T11352] Call Trace: [ 407.901014][T11352] [ 407.903982][T11352] dump_stack_lvl+0x241/0x360 [ 407.908716][T11352] ? __pfx_dump_stack_lvl+0x10/0x10 [ 407.914025][T11352] ? __pfx__printk+0x10/0x10 [ 407.918667][T11352] should_fail_ex+0x3b0/0x4e0 [ 407.923405][T11352] _copy_from_user+0x2f/0xe0 [ 407.928046][T11352] move_addr_to_kernel+0x82/0x150 [ 407.933121][T11352] copy_msghdr_from_user+0x43e/0x680 [ 407.938455][T11352] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 407.944321][T11352] __sys_sendmsg+0x237/0x390 [ 407.948978][T11352] ? __pfx___sys_sendmsg+0x10/0x10 [ 407.954137][T11352] ? vfs_write+0x7bf/0xc90 [ 407.958640][T11352] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 407.965029][T11352] ? do_syscall_64+0x100/0x230 [ 407.969845][T11352] ? do_syscall_64+0xb6/0x230 [ 407.974576][T11352] do_syscall_64+0xf3/0x230 [ 407.979125][T11352] ? clear_bhb_loop+0x35/0x90 [ 407.983850][T11352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.989795][T11352] RIP: 0033:0x7fa4b037def9 [ 407.994252][T11352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.013911][T11352] RSP: 002b:00007fa4b1163038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 408.022382][T11352] RAX: ffffffffffffffda RBX: 00007fa4b0535f80 RCX: 00007fa4b037def9 [ 408.030405][T11352] RDX: 0000000000000000 RSI: 0000000020001540 RDI: 0000000000000003 [ 408.038432][T11352] RBP: 00007fa4b1163090 R08: 0000000000000000 R09: 0000000000000000 [ 408.046538][T11352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.054555][T11352] R13: 0000000000000000 R14: 00007fa4b0535f80 R15: 00007fa4b065fa28 [ 408.062592][T11352] [ 408.260482][ C0] net_ratelimit: 12189 callbacks suppressed [ 408.260507][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.278801][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.292187][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 408.305384][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 408.317793][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.330555][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.343141][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 408.356262][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 408.368742][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.381205][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.470099][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 408.491543][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 408.546923][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 408.558039][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 408.566471][ T5235] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 408.574678][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 410.681887][ T5235] Bluetooth: hci0: command tx timeout [ 413.270941][ C0] net_ratelimit: 14533 callbacks suppressed [ 413.270961][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 413.289189][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.301518][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.313857][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 413.326541][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 413.338821][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.351155][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.363395][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 413.375398][ C0] sched: DL replenish lagged too much [ 413.381505][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 413.393881][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.620576][ T5235] Bluetooth: hci0: command tx timeout [ 414.230726][ T5280] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 414.395384][ T5280] usb 3-1: not running at top speed; connect to a high speed hub [ 414.411309][ T5280] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 414.420286][ T5280] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 414.439881][ T5280] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 414.459699][ T5280] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 414.469307][ T5280] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.484473][ T5280] usb 3-1: Product: Ѝ [ 414.488629][ T5280] usb 3-1: Manufacturer: а [ 414.497696][ T5280] usb 3-1: SerialNumber: syz [ 414.775989][ T5280] usb 3-1: 0:2 : does not exist [ 414.810664][ T5280] usb 3-1: USB disconnect, device number 87 [ 414.863562][T11366] udevd[11366]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 415.640555][ T5235] Bluetooth: hci0: command tx timeout [ 416.226742][ T4620] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 416.238941][ T4620] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 416.248872][ T4620] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 416.259719][ T4620] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 416.269384][ T4620] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 416.277362][ T4620] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 417.720726][ T5235] Bluetooth: hci0: command tx timeout [ 418.280550][ C0] net_ratelimit: 12995 callbacks suppressed [ 418.280576][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.299184][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.311705][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 418.324803][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 418.337225][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.349856][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.362362][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 418.374520][ T5235] Bluetooth: hci4: command tx timeout [ 418.375488][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 418.392656][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.405158][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.551706][ T4620] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 418.568808][ T4620] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 418.577713][ T4620] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 418.586516][ T4620] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 418.603027][ T4620] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 418.610566][ T4620] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 419.608540][ T5235] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 419.627212][ T5235] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 419.646562][ T5235] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 419.655394][ T5235] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 419.671606][ T5235] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 419.679240][ T5235] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 420.440556][ T4620] Bluetooth: hci4: command tx timeout [ 420.681903][ T4620] Bluetooth: hci6: command tx timeout [ 421.722209][ T4620] Bluetooth: hci7: command tx timeout [ 422.520573][ T4620] Bluetooth: hci4: command tx timeout [ 422.762915][ T4620] Bluetooth: hci6: command tx timeout [ 423.290476][ C0] net_ratelimit: 14929 callbacks suppressed [ 423.290502][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 423.309586][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 423.322150][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.334582][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 423.347038][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.359424][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.371805][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 423.384377][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.396797][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 423.409629][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 423.800731][ T4620] Bluetooth: hci7: command tx timeout [ 424.579777][ T5235] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 424.608449][ T5235] Bluetooth: hci4: command tx timeout [ 424.618006][ T5235] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 424.715389][ T6880] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.736206][ T5235] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 424.750756][ T5235] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 424.767675][ T5235] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 424.775473][ T5235] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 424.840766][ T5235] Bluetooth: hci6: command tx timeout [ 425.880801][ T5235] Bluetooth: hci7: command tx timeout [ 426.840620][ T5235] Bluetooth: hci8: command tx timeout [ 426.923499][ T5235] Bluetooth: hci6: command tx timeout [ 427.965483][ T5235] Bluetooth: hci7: command tx timeout [ 428.300514][ C0] net_ratelimit: 14711 callbacks suppressed [ 428.300541][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 428.319382][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.332032][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 428.344670][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.357086][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.369541][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 428.382009][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.394524][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 428.407719][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 428.420077][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.920751][ T5235] Bluetooth: hci8: command tx timeout [ 431.006117][ T4620] Bluetooth: hci8: command tx timeout [ 432.206548][ T4620] Bluetooth: hci5: command 0x0406 tx timeout [ 433.080569][ T4620] Bluetooth: hci8: command tx timeout [ 433.310865][ C0] net_ratelimit: 14390 callbacks suppressed [ 433.310894][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 433.329169][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.341797][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 433.354319][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.367227][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.379634][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 433.391894][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.404320][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 433.417596][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 433.429817][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.320657][ C0] net_ratelimit: 14625 callbacks suppressed [ 438.320693][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.339293][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.351691][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 438.364210][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.376721][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 438.390437][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 438.402851][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.415324][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 438.427831][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.440203][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 440.367100][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.379553][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.331416][ C0] net_ratelimit: 14395 callbacks suppressed [ 443.331443][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 443.349840][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.362570][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 443.375073][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.387495][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.399901][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 443.412341][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.424895][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 443.438294][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 443.450720][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.340489][ C0] net_ratelimit: 14488 callbacks suppressed [ 448.340516][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 448.358882][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.371306][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.383702][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 448.396229][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.408731][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 448.422357][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 448.434774][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.447492][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 448.460030][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.350638][ C0] net_ratelimit: 14068 callbacks suppressed [ 453.350667][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 453.369711][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 453.382107][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.394577][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 453.407071][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.419486][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.431900][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 453.444360][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.456829][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 453.470295][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 458.361054][ C0] net_ratelimit: 15478 callbacks suppressed [ 458.361081][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 458.379981][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 458.392405][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.404811][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.417258][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.429750][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 458.442211][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.454644][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.467074][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 458.479492][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.371244][ C0] net_ratelimit: 15340 callbacks suppressed [ 463.371273][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 463.390198][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 463.402575][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.414950][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.428189][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.440742][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 463.453289][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.465719][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.478136][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 463.490580][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 467.704630][T10846] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 467.714886][T10846] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 467.723790][T10846] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 467.731876][T10846] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 467.740726][T10846] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 467.758998][T10846] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 468.381382][ C0] net_ratelimit: 14022 callbacks suppressed [ 468.381408][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.399776][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 468.412245][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.424669][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.436998][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 468.449250][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 468.461648][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.474108][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 468.487100][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 468.499866][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 473.390613][ C0] net_ratelimit: 14259 callbacks suppressed [ 473.390653][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 473.409015][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.421460][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.433897][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 473.446337][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 473.458832][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.471373][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 473.484270][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 473.496954][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 473.510223][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 477.164742][T11395] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 477.180706][T11395] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 477.190583][T11395] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 477.198783][T11395] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 477.206780][T11395] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 477.214758][T11395] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 478.401089][ C0] net_ratelimit: 13630 callbacks suppressed [ 478.401118][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 478.419476][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 478.431889][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 478.445058][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 478.457553][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 478.470043][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 478.482336][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 478.494697][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 478.506947][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 478.519313][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 479.589630][T11400] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 479.603559][T11400] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 479.612655][T11400] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 479.623033][T11400] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 479.631271][T11400] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 479.638842][T11400] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 480.135494][T11388] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 480.146158][T11388] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 480.155457][T11388] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 480.164957][T11388] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 480.174696][T11388] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 480.182625][T11388] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 483.410449][ C0] net_ratelimit: 12881 callbacks suppressed [ 483.410478][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.428980][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 483.441483][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.453910][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.466384][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 483.478633][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 483.491041][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.503533][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 483.516329][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 483.529285][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 484.663702][T11408] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 484.674257][T11408] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 484.687800][T11408] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 484.696605][T11408] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 484.705522][T11408] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 484.713630][T11408] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 488.420694][ C0] net_ratelimit: 13418 callbacks suppressed [ 488.420714][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 488.439042][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 488.451388][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 488.463770][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 488.476000][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 488.488266][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 488.500857][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 488.513228][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 488.526028][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 488.538727][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 493.430479][ C0] net_ratelimit: 13821 callbacks suppressed [ 493.430505][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 493.449537][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 493.462608][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 493.475168][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.487588][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.501072][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.513655][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 493.526178][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.538625][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.550946][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 498.441373][ C0] net_ratelimit: 13747 callbacks suppressed [ 498.441401][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.459772][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 498.472269][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.484708][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.497556][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 498.509971][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 498.522424][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.534905][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 498.547990][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 498.561104][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 501.812678][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.819049][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.450541][ C0] net_ratelimit: 13987 callbacks suppressed [ 503.450561][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 503.468910][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 503.481427][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 503.494666][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 503.507706][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 503.520004][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 503.532321][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 503.545563][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 503.557967][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 503.570546][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 503.960727][T11418] Bluetooth: hci1: command 0x0406 tx timeout [ 508.460616][ C0] net_ratelimit: 14351 callbacks suppressed [ 508.460647][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 508.479115][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 508.492210][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 508.504718][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 508.517835][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 508.530286][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 508.542755][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 508.555876][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 508.568387][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 508.580864][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.470824][ C0] net_ratelimit: 14448 callbacks suppressed [ 513.470845][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 513.489172][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 513.502247][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 513.514739][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.527188][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.540699][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.553377][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 513.565886][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.578474][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.590854][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 518.480561][ C0] net_ratelimit: 14411 callbacks suppressed [ 518.480587][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.499610][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.512115][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 518.524599][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.537075][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.549502][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 518.561895][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 518.574349][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.587043][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 518.600683][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 523.490440][ C0] net_ratelimit: 14483 callbacks suppressed [ 523.490466][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 523.508929][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.521386][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.533889][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 523.546299][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 523.558844][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.571326][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 523.584424][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 523.596912][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 523.609981][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 528.501124][ C0] net_ratelimit: 14817 callbacks suppressed [ 528.501152][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 528.519578][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 528.532658][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 528.545267][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.557663][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.570867][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.583287][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.595815][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.608302][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 528.620824][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.831654][T11421] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 528.845410][T11421] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 528.854437][T11421] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 528.869548][T11421] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 528.878658][T11421] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 528.887064][T11421] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 533.510423][ C0] net_ratelimit: 14886 callbacks suppressed [ 533.510446][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.528741][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.541224][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 533.553676][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.566009][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.578313][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 533.590680][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 533.603110][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.615566][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 533.628589][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 534.612379][T11425] Bluetooth: hci0: command 0x0406 tx timeout [ 537.796387][T11403] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 537.807343][T11403] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 537.816317][T11403] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 537.824672][T11403] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 537.832514][T11403] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 537.839986][T11403] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 538.520581][ C0] net_ratelimit: 15366 callbacks suppressed [ 538.520625][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.539483][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.551951][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 538.564456][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.576875][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.589133][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 538.601386][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 538.613806][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.626260][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 538.639028][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 539.720690][T11427] Bluetooth: hci4: command 0x0406 tx timeout [ 540.406947][T11429] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 540.418029][T11429] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 540.430106][T11429] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 540.438747][T11429] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 540.449942][T11429] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 540.457954][T11429] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 540.597549][T11436] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 540.609622][T11436] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 540.618923][T11436] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 540.627170][T11436] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 540.644790][T11436] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 540.661112][T11436] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 543.530779][ C0] net_ratelimit: 14703 callbacks suppressed [ 543.530806][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 543.549153][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 543.561922][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 543.574599][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 543.586985][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.599229][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.612528][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.624999][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.638157][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.650644][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 544.932946][T11438] Bluetooth: hci6: command 0x0406 tx timeout [ 544.939049][T11438] Bluetooth: hci7: command 0x0406 tx timeout [ 545.179172][T11442] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 545.191444][T11442] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 545.200441][T11442] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 545.211670][T11442] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 545.225433][T11442] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 545.233082][T11442] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 548.540829][ C0] net_ratelimit: 13612 callbacks suppressed [ 548.540857][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.559193][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.571517][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.583955][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 548.596312][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.608676][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.620936][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 548.633266][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 548.645759][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.658071][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 550.040621][T11438] Bluetooth: hci8: command 0x0406 tx timeout [ 553.550560][ C0] net_ratelimit: 14075 callbacks suppressed [ 553.550588][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.569008][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 553.581442][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 553.593985][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.606355][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 553.619281][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 553.631810][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 553.644635][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 553.657324][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 553.669746][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.560600][ C0] net_ratelimit: 13899 callbacks suppressed [ 558.560628][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 558.579033][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 558.591835][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 558.604761][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 558.617056][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.629399][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.642552][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.654962][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.667261][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.679719][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 563.244708][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.251178][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.570697][ C0] net_ratelimit: 14675 callbacks suppressed [ 563.570728][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 563.589253][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.601755][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 563.614862][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 563.627353][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 563.640126][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 563.652777][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 563.665162][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.677480][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.690936][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.580765][ C0] net_ratelimit: 14479 callbacks suppressed [ 568.580784][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.599168][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.611627][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.624071][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 568.636537][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.648952][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.661327][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 568.673715][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 568.686184][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.698819][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 573.590581][ C0] net_ratelimit: 14100 callbacks suppressed [ 573.590609][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.609031][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.622798][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.635226][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.647663][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.660222][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 573.672714][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.685149][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.697607][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 573.709972][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 577.320719][ T30] INFO: task syz-executor:9672 blocked for more than 143 seconds. [ 577.328709][ T30] Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 577.360441][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 577.369196][ T30] task:syz-executor state:D stack:20992 pid:9672 tgid:9672 ppid:1 flags:0x00004006 [ 577.470523][ T30] Call Trace: [ 577.473941][ T30] [ 577.476919][ T30] __schedule+0x1895/0x4b30 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 577.590938][ T30] ? __pfx___schedule+0x10/0x10 [ 577.595913][ T30] ? __pfx_lock_release+0x10/0x10 [ 577.670503][ T30] ? schedule+0x90/0x320 [ 577.674865][ T30] schedule+0x14b/0x320 [ 577.679090][ T30] schedule_timeout+0xb0/0x310 [ 577.706766][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 577.718654][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 577.726975][ T30] ? wait_for_completion+0x2fe/0x620 [ 577.738631][ T30] ? wait_for_completion+0x2fe/0x620 [ 577.744440][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 577.750298][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 577.755816][ T30] ? wait_for_completion+0x2fe/0x620 [ 577.767893][ T30] wait_for_completion+0x355/0x620 [ 577.773499][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 577.779218][ T30] ? __flush_work+0xe7/0xc50 [ 577.790434][ T30] __flush_work+0xa37/0xc50 [ 577.795035][ T30] ? __flush_work+0xe7/0xc50 [ 577.799695][ T30] ? __pfx___flush_work+0x10/0x10 [ 577.810959][ T30] ? __pfx_wq_barrier_func+0x10/0x10 [ 577.816358][ T30] ? __pfx___cancel_work+0x10/0x10 [ 577.828866][ T30] ? enable_work+0x2e3/0x360 [ 577.833952][ T30] ? __pfx_enable_work+0x10/0x10 [ 577.838965][ T30] __cancel_work_sync+0xbc/0x110 [ 577.854622][ T30] hci_cmd_sync_clear+0x30/0x220 [ 577.859672][ T30] hci_unregister_dev+0x181/0x510 [ 577.870157][ T30] vhci_release+0x80/0xd0 [ 577.876158][ T30] ? __pfx_vhci_release+0x10/0x10 [ 577.886826][ T30] __fput+0x23f/0x880 [ 577.892484][ T30] task_work_run+0x24f/0x310 [ 577.897151][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 577.907811][ T30] ? __pfx_task_work_run+0x10/0x10 [ 577.914606][ T30] ? do_exit+0xa2a/0x28e0 [ 577.919010][ T30] ? kmem_cache_free+0x1a2/0x420 [ 577.930439][ T30] ? do_exit+0xa2a/0x28e0 [ 577.934866][ T30] do_exit+0xa2f/0x28e0 [ 577.939088][ T30] ? __pfx_do_exit+0x10/0x10 [ 577.949632][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 577.955544][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 577.970752][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 577.977193][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 577.988837][ T30] do_group_exit+0x207/0x2c0 [ 577.993925][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 577.999197][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 578.010435][ T30] get_signal+0x176f/0x1810 [ 578.015051][ T30] ? __pfx_get_signal+0x10/0x10 [ 578.019970][ T30] arch_do_signal_or_restart+0x96/0x860 [ 578.037217][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 578.047603][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 578.057074][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 578.066917][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 578.075341][ T30] do_syscall_64+0x100/0x230 [ 578.080023][ T30] ? clear_bhb_loop+0x35/0x90 [ 578.088827][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.098088][ T30] RIP: 0033:0x7fbb94174157 [ 578.106527][ T30] RSP: 002b:00007fbb9445fd90 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 578.117928][ T30] RAX: fffffffffffffe00 RBX: 00000000000000d8 RCX: 00007fbb94174157 [ 578.134356][ T30] RDX: 0000000040000000 RSI: 00007fbb9445fdec RDI: 00000000ffffffff [ 578.145584][ T30] RBP: 00007fbb9445fdec R08: 0000000000000000 R09: 7fffffffffffffff [ 578.158275][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 000055557a4555eb [ 578.169060][ T30] R13: 000055557a455590 R14: 0000000000062f3d R15: 00007fbb9445fe40 [ 578.180860][ T30] [ 578.186444][ T30] INFO: task syz-executor:11361 blocked for more than 144 seconds. [ 578.199095][ T30] Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 578.216847][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 578.226059][ T30] task:syz-executor state:D stack:25856 pid:11361 tgid:11361 ppid:1 flags:0x00004006 [ 578.246948][ T30] Call Trace: [ 578.250308][ T30] [ 578.254342][ T30] __schedule+0x1895/0x4b30 [ 578.259653][ T30] ? __pfx___schedule+0x10/0x10 [ 578.268298][ T30] ? __pfx_lock_release+0x10/0x10 [ 578.291497][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 578.297069][ T30] ? schedule+0x90/0x320 [ 578.306902][ T30] schedule+0x14b/0x320 [ 578.311475][ T30] schedule_preempt_disabled+0x13/0x30 [ 578.316998][ T30] __mutex_lock+0x6a7/0xd70 [ 578.327949][ T30] ? __mutex_lock+0x52a/0xd70 [ 578.333105][ T30] ? ip_tunnel_init_net+0x20e/0x720 [ 578.339855][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 578.351398][ T30] ? read_word_at_a_time+0xe/0x20 [ 578.356509][ T30] ? sized_strscpy+0x8d/0x220 [ 578.367037][ T30] ip_tunnel_init_net+0x20e/0x720 [ 578.376909][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 578.387534][ T30] ? ops_init+0x75/0x590 [ 578.393385][ T30] ops_init+0x31e/0x590 [ 578.397710][ T30] setup_net+0x287/0x9e0 [ 578.405907][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 578.414633][ T30] ? __pfx_setup_net+0x10/0x10 [ 578.419495][ T30] copy_net_ns+0x33f/0x570 [ 578.426864][ T30] create_new_namespaces+0x425/0x7b0 [ 578.436156][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 578.446188][ T30] ksys_unshare+0x619/0xc10 [ 578.454687][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 578.460500][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 578.466578][ T30] ? do_syscall_64+0x100/0x230 [ 578.478116][ T30] __x64_sys_unshare+0x38/0x40 [ 578.483368][ T30] do_syscall_64+0xf3/0x230 [ 578.487941][ T30] ? clear_bhb_loop+0x35/0x90 [ 578.499007][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.505405][ T30] RIP: 0033:0x7fb6c9b7f6f7 [ 578.509897][ T30] RSP: 002b:00007fb6c9e5ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 578.524696][ T30] RAX: ffffffffffffffda RBX: 00007fb6c9bf22ec RCX: 00007fb6c9b7f6f7 [ 578.534513][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 578.549211][ T30] RBP: 0000000000000000 R08: 00007fb6ca867d60 R09: 0000000000000000 [ 578.567883][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 578.577609][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 578.590793][ T30] [ 578.595549][ T30] INFO: task syz-executor:11373 blocked for more than 144 seconds. [ 578.600637][ C0] net_ratelimit: 12651 callbacks suppressed [ 578.600658][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 578.609606][ T30] Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 578.621808][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.634941][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 578.641167][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.657481][ T30] task:syz-executor state:D [ 578.662058][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 578.668123][ T30] stack:26048 pid:11373 tgid:11373 ppid:1 flags:0x00004006 [ 578.679170][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 578.692833][ T30] Call Trace: [ 578.700041][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.714468][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 578.719724][ T30] [ 578.727627][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 578.730208][ T30] __schedule+0x1895/0x4b30 [ 578.741929][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 578.758978][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 578.770932][ T30] ? __pfx___schedule+0x10/0x10 [ 578.775903][ T30] ? __pfx_lock_release+0x10/0x10 [ 578.787656][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 578.794166][ T30] ? schedule+0x90/0x320 [ 578.798481][ T30] schedule+0x14b/0x320 [ 578.808955][ T30] schedule_preempt_disabled+0x13/0x30 [ 578.814936][ T30] __mutex_lock+0x6a7/0xd70 [ 578.819519][ T30] ? __mutex_lock+0x52a/0xd70 [ 578.830395][ T30] ? ip_tunnel_init_net+0x20e/0x720 [ 578.835685][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 578.849170][ T30] ? read_word_at_a_time+0xe/0x20 [ 578.854680][ T30] ? sized_strscpy+0x8d/0x220 [ 578.859439][ T30] ip_tunnel_init_net+0x20e/0x720 [ 578.870396][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 578.877198][ T30] ? ops_init+0x75/0x590 [ 578.894348][ T30] ops_init+0x31e/0x590 [ 578.898619][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 578.910681][ T30] setup_net+0x287/0x9e0 [ 578.915004][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 578.927042][ T30] ? __pfx_setup_net+0x10/0x10 [ 578.932239][ T30] copy_net_ns+0x33f/0x570 [ 578.936728][ T30] create_new_namespaces+0x425/0x7b0 [ 578.948418][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 578.956200][ T30] ksys_unshare+0x619/0xc10 [ 578.967064][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 578.973308][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 578.979388][ T30] ? do_syscall_64+0x100/0x230 [ 578.990811][ T30] __x64_sys_unshare+0x38/0x40 [ 578.995668][ T30] do_syscall_64+0xf3/0x230 [ 579.000241][ T30] ? clear_bhb_loop+0x35/0x90 [ 579.010435][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.016436][ T30] RIP: 0033:0x7f84bad7f6f7 [ 579.027088][ T30] RSP: 002b:00007f84bb05ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 579.035999][ T30] RAX: ffffffffffffffda RBX: 00007f84badf22ec RCX: 00007f84bad7f6f7 [ 579.050388][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 579.060036][ T30] RBP: 0000000000000000 R08: 00007f84bba67d60 R09: 0000000000000000 [ 579.078077][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 579.088662][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 579.103116][ T30] [ 579.106375][ T30] INFO: task syz-executor:11379 blocked for more than 145 seconds. [ 579.117866][ T30] Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 579.129218][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 579.144705][ T30] task:syz-executor state:D stack:24784 pid:11379 tgid:11379 ppid:1 flags:0x00004006 [ 579.158104][ T30] Call Trace: [ 579.166932][ T30] [ 579.170020][ T30] __schedule+0x1895/0x4b30 [ 579.176951][ T30] ? __pfx___schedule+0x10/0x10 [ 579.187119][ T30] ? __pfx_lock_release+0x10/0x10 [ 579.194029][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 579.199566][ T30] ? schedule+0x90/0x320 [ 579.208910][ T30] schedule+0x14b/0x320 [ 579.214799][ T30] schedule_preempt_disabled+0x13/0x30 [ 579.220757][ T30] __mutex_lock+0x6a7/0xd70 [ 579.225341][ T30] ? __mutex_lock+0x52a/0xd70 [ 579.230077][ T30] ? ip_tunnel_init_net+0x20e/0x720 [ 579.250922][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 579.258735][ T30] ? read_word_at_a_time+0xe/0x20 [ 579.270477][ T30] ? sized_strscpy+0x8d/0x220 [ 579.275253][ T30] ip_tunnel_init_net+0x20e/0x720 [ 579.287319][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 579.293451][ T30] ? ops_init+0x75/0x590 [ 579.297831][ T30] ops_init+0x31e/0x590 [ 579.308271][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 579.314264][ T30] setup_net+0x287/0x9e0 [ 579.318567][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 579.330481][ T30] ? __pfx_setup_net+0x10/0x10 [ 579.335349][ T30] copy_net_ns+0x33f/0x570 [ 579.339825][ T30] create_new_namespaces+0x425/0x7b0 [ 579.351923][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 579.357901][ T30] ksys_unshare+0x619/0xc10 [ 579.369196][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 579.375978][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 579.387630][ T30] ? do_syscall_64+0x100/0x230 [ 579.394237][ T30] __x64_sys_unshare+0x38/0x40 [ 579.399084][ T30] do_syscall_64+0xf3/0x230 [ 579.412801][ T30] ? clear_bhb_loop+0x35/0x90 [ 579.417660][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.429888][ T30] RIP: 0033:0x7f519297f6f7 [ 579.434914][ T30] RSP: 002b:00007f5192c5ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 579.449505][ T30] RAX: ffffffffffffffda RBX: 00007f51929f22ec RCX: 00007f519297f6f7 [ 579.457999][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 579.470495][ T30] RBP: 0000000000000000 R08: 00007f5193667d60 R09: 0000000000000000 [ 579.478552][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 579.492894][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 579.504894][ T30] [ 579.508037][ T30] INFO: task syz-executor:11384 blocked for more than 145 seconds. [ 579.518960][ T30] Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 579.530466][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 579.539378][ T30] task:syz-executor state:D stack:25744 pid:11384 tgid:11384 ppid:1 flags:0x00004006 [ 579.554970][ T30] Call Trace: [ 579.558318][ T30] [ 579.563137][ T30] __schedule+0x1895/0x4b30 [ 579.569354][ T30] ? __pfx___schedule+0x10/0x10 [ 579.585054][ T30] ? __pfx_lock_release+0x10/0x10 [ 579.595753][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 579.602827][ T30] ? schedule+0x90/0x320 [ 579.607130][ T30] schedule+0x14b/0x320 [ 579.616584][ T30] schedule_preempt_disabled+0x13/0x30 [ 579.624184][ T30] __mutex_lock+0x6a7/0xd70 [ 579.628776][ T30] ? __mutex_lock+0x52a/0xd70 [ 579.638758][ T30] ? ip_tunnel_init_net+0x20e/0x720 [ 579.646140][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 579.656248][ T30] ? read_word_at_a_time+0xe/0x20 [ 579.662984][ T30] ? sized_strscpy+0x8d/0x220 [ 579.669291][ T30] ip_tunnel_init_net+0x20e/0x720 [ 579.679538][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 579.687892][ T30] ? ops_init+0x75/0x590 [ 579.697358][ T30] ops_init+0x31e/0x590 [ 579.703246][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 579.708698][ T30] setup_net+0x287/0x9e0 [ 579.718374][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 579.726062][ T30] ? __pfx_setup_net+0x10/0x10 [ 579.735903][ T30] copy_net_ns+0x33f/0x570 [ 579.743315][ T30] create_new_namespaces+0x425/0x7b0 [ 579.748693][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 579.764494][ T30] ksys_unshare+0x619/0xc10 [ 579.772364][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 579.777484][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 579.788796][ T30] ? do_syscall_64+0x100/0x230 [ 579.796298][ T30] __x64_sys_unshare+0x38/0x40 [ 579.806472][ T30] do_syscall_64+0xf3/0x230 [ 579.812607][ T30] ? clear_bhb_loop+0x35/0x90 [ 579.817362][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.828580][ T30] RIP: 0033:0x7fbb7a77f6f7 [ 579.834604][ T30] RSP: 002b:00007fbb7aa5ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 579.848141][ T30] RAX: ffffffffffffffda RBX: 00007fbb7a7f22ec RCX: 00007fbb7a77f6f7 [ 579.857790][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 579.873527][ T30] RBP: 0000000000000000 R08: 00007fbb7b467d60 R09: 0000000000000000 [ 579.888001][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 579.898937][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 579.914207][ T30] [ 579.917320][ T30] [ 579.917320][ T30] Showing all locks held in the system: [ 579.927133][ T30] 3 locks held by kworker/0:1/9: [ 579.940462][ T30] 1 lock held by khungtaskd/30: [ 579.945385][ T30] #0: ffffffff8e937ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 579.960971][ T30] 5 locks held by kworker/0:3/1175: [ 579.966350][ T30] 4 locks held by kworker/u9:1/4620: [ 579.978311][ T30] #0: ffff8880608e4948 ((wq_completion)hci9#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 579.991285][ T30] #1: ffffc9000de0fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 580.009150][ T30] #2: ffff88805fdf4078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 580.021254][ T30] #3: ffffffff8fe379a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 580.036972][ T30] 2 locks held by getty/4985: [ 580.048015][ T30] #0: ffff88802e1940a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 580.064016][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 580.077500][ T30] 5 locks held by kworker/u9:5/5235: [ 580.087928][ T30] #0: ffff88805e29f148 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 580.105760][ T30] #1: ffffc90003807d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 580.128419][ T30] #2: ffff888078058d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 580.139800][ T30] #3: ffff888078058078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 580.155872][ T30] #4: ffffffff8fe379a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 580.166231][ T30] 3 locks held by kworker/0:5/5276: [ 580.178549][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 580.197140][ T30] #1: ffffc90003a1fd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 580.209789][ T30] #2: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 580.225877][ T30] 2 locks held by kworker/1:6/5315: [ 580.231521][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 580.249341][ T30] #1: ffffc90003fb7d00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 580.260570][ T30] 3 locks held by kworker/u8:9/6863: [ 580.265907][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 580.292015][ T30] #1: ffffc90004677d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 580.308398][ T30] #2: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 580.323011][ T30] 3 locks held by kworker/u8:11/6869: [ 580.328453][ T30] #0: ffff88814bd50148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 580.343093][ T30] #1: ffffc9000431fd00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 580.360699][ T30] #2: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 580.379568][ T30] 7 locks held by kworker/u8:15/6880: [ 580.387043][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 580.404423][ T30] #1: ffffc90003defd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 580.417533][ T30] #2: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 580.433257][ T30] #3: ffff888061e000e8 (&dev->mutex){....}-{3:3}, at: devlink_pernet_pre_exit+0x13b/0x440 [ 580.446294][ T30] #4: ffff888061e05250 (&devlink->lock_key#23){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x14d/0x440 [ 580.464563][ T30] #5: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 580.479303][ T30] #6: ffffffff8e93d478 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 580.498244][ T30] 4 locks held by kworker/u9:0/10846: [ 580.504083][ T30] #0: ffff88805f97b948 ((wq_completion)hci11#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 580.523287][ T30] #1: ffffc900041c7d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 580.539490][ T30] #2: ffff88807b110078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 580.555850][ T30] #3: ffffffff8fe379a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 580.566838][ T30] 1 lock held by syz.0.1216/11347: [ 580.578794][ T30] 2 locks held by syz.3.1219/11362: [ 580.584552][ T30] #0: ffff8880628a4d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 580.600512][ T30] #1: ffff8880628a4078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 580.620972][ T30] 2 locks held by syz-executor/11361: [ 580.626423][ T30] #0: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 580.646483][ T30] #1: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 580.660245][ T30] 3 locks held by syz.2.1220/11367: [ 580.668461][ T30] #0: ffff8880543d0d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 580.685768][ T30] #1: ffff8880543d0078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 580.698777][ T30] #2: ffffffff8fe379a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 580.715963][ T30] 2 locks held by syz-executor/11373: [ 580.721793][ T30] #0: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 580.737583][ T30] #1: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 580.747687][ T30] 2 locks held by syz-executor/11376: [ 580.759447][ T30] #0: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 580.769665][ T30] #1: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 580.785362][ T30] 2 locks held by syz-executor/11379: [ 580.791847][ T30] #0: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 580.810448][ T30] #1: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 580.820054][ T30] 2 locks held by syz-executor/11384: [ 580.832162][ T30] #0: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 580.845644][ T30] #1: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 580.858129][ T30] 4 locks held by kworker/u9:2/11388: [ 580.867403][ T30] #0: ffff888046d47948 ((wq_completion)hci12#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 580.884790][ T30] #1: ffffc90004bffd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 580.915655][ T30] #2: ffff88803160c078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 580.927869][ T30] #3: ffffffff8fe379a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 580.944956][ T30] 2 locks held by syz-executor/11391: [ 580.951922][ T30] #0: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 580.966592][ T30] #1: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 580.978323][ T30] 4 locks held by kworker/u9:3/11395: [ 580.990514][ T30] #0: ffff888078b7d948 ((wq_completion)hci10#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 581.014670][ T30] #1: ffffc90003fa7d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 581.029104][ T30] #2: ffff88807d340078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 581.045577][ T30] #3: ffffffff8fe379a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 581.056663][ T30] 2 locks held by syz-executor/11397: [ 581.068365][ T30] #0: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 581.078406][ T30] #1: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 581.097389][ T30] 4 locks held by kworker/u9:4/11400: [ 581.104909][ T30] #0: ffff888058965948 ((wq_completion)hci13#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 581.121288][ T30] #1: ffffc90003e2fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 581.139732][ T30] #2: ffff88802e284078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 581.150286][ T30] #3: ffffffff8fe379a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 581.170315][ T30] 2 locks held by syz-executor/11401: [ 581.182100][ T30] #0: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 581.197863][ T30] #1: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 581.223516][ T30] 4 locks held by kworker/u9:6/11403: [ 581.229639][ T30] #0: ffff888057a27148 ((wq_completion)hci15#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 581.247840][ T30] #1: ffffc90004c2fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 581.266454][ T30] #2: ffff888034180078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 581.276963][ T30] #3: ffffffff8fe379a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 581.293986][ T30] 2 locks held by syz-executor/11405: [ 581.299433][ T30] #0: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 581.316335][ T30] #1: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 581.337604][ T30] 5 locks held by kworker/u9:7/11408: [ 581.347937][ T30] #0: ffff88807c3f4948 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 581.364547][ T30] #1: ffffc90003dbfd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 581.378869][ T30] #2: ffff888063c64d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 581.395232][ T30] #3: ffff888063c64078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 581.410524][ T30] #4: ffffffff8fe379a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 581.430104][ T30] 2 locks held by syz-executor/11410: [ 581.436001][ T30] #0: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 581.450468][ T30] #1: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 581.466551][ T30] 1 lock held by dhcpcd/11412: [ 581.471840][ T30] #0: ffff888026ca6258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 581.487914][ T30] 1 lock held by dhcpcd/11413: [ 581.493210][ T30] #0: ffff888067a16258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 581.510468][ T30] 1 lock held by dhcpcd/11414: [ 581.515315][ T30] #0: ffff88802f642258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 581.537050][ T30] 1 lock held by dhcpcd/11415: [ 581.546938][ T30] #0: ffff888011b86258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 581.558478][ T30] 1 lock held by dhcpcd/11416: [ 581.568348][ T30] #0: ffff8880241f8258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 581.590553][ T30] 1 lock held by dhcpcd/11417: [ 581.595481][ T30] #0: ffff88807c99c258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 581.617218][ T30] 5 locks held by kworker/u9:8/11418: [ 581.623023][ T30] #0: ffff88814278e948 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 581.640284][ T30] #1: ffffc900001f7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 581.663593][ T30] #2: ffff888030ff0d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 581.676407][ T30] #3: ffff888030ff0078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 581.690537][ T30] #4: ffffffff8fe379a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 581.706105][ T30] 4 locks held by kworker/u9:9/11421: [ 581.712083][ T30] #0: ffff888077682148 ((wq_completion)hci14#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 581.735184][ T30] #1: ffffc9000349fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 581.754572][ T30] #2: ffff888040a78078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 581.766261][ T30] #3: ffffffff8fe379a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 581.780414][ T30] 2 locks held by syz-executor/11424: [ 581.785875][ T30] #0: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 581.804970][ T30] #1: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 581.820737][ T30] 5 locks held by kworker/u9:10/11425: [ 581.826272][ T30] #0: ffff8880265df948 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 581.908086][ T30] #1: ffffc9000348fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 581.928825][ T30] #2: ffff888027200d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 581.939198][ T30] #3: ffff888027200078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 581.955920][ T30] #4: ffffffff8fe379a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 581.967516][ T30] 4 locks held by kworker/u9:11/11427: [ 581.979532][ T30] #0: ffff888045abb948 ((wq_completion)hci17#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 581.997021][ T30] #1: ffffc9000350fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 582.009582][ T30] #2: ffff888039b38078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 582.027891][ T30] #3: ffffffff8fe379a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 582.039003][ T30] 4 locks held by kworker/u9:12/11429: [ 582.051626][ T30] #0: ffff888058964148 ((wq_completion)hci16#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 582.067908][ T30] #1: ffffc9000347fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 582.090052][ T30] #2: ffff888037a58078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 582.100613][ T30] #3: ffffffff8fe379a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 582.117517][ T30] 2 locks held by syz-executor/11431: [ 582.127101][ T30] #0: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 582.143646][ T30] #1: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 582.157278][ T30] 5 locks held by kworker/u9:13/11436: [ 582.166666][ T30] #0: ffff888022f66148 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 582.184638][ T30] #1: ffffc900031bfd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 582.199010][ T30] #2: ffff88807e524d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 582.215574][ T30] #3: ffff88807e524078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 582.227495][ T30] #4: ffffffff8fe379a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 582.241167][ T30] 2 locks held by syz-executor/11437: [ 582.246614][ T30] #0: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 582.267649][ T30] #1: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 582.284345][ T30] 2 locks held by syz-executor/11440: [ 582.289880][ T30] #0: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 582.305938][ T30] #1: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 582.316743][ T30] 5 locks held by kworker/u9:15/11441: [ 582.329518][ T30] #0: ffff888061c2d948 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 582.346075][ T30] #1: ffffc9000309fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 582.360250][ T30] #2: ffff88806c3f4d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 582.370282][ T30] #3: ffff88806c3f4078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 582.396308][ T30] #4: ffffffff8fe379a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 582.406768][ T30] 4 locks held by kworker/u9:16/11442: [ 582.418561][ T30] #0: ffff888079de3148 ((wq_completion)hci18#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 582.446239][ T30] #1: ffffc9000308fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 582.469496][ T30] #2: ffff888042c90078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 582.480014][ T30] #3: ffffffff8fe379a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 582.496909][ T30] 5 locks held by kworker/u9:17/11444: [ 582.502823][ T30] #0: ffff88807b595148 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 582.520047][ T30] #1: ffffc9000345fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 582.540419][ T30] #2: ffff8880565f8d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 582.555896][ T30] #3: ffff8880565f8078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 582.566817][ T30] #4: ffffffff8fe379a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 582.583547][ T30] 2 locks held by syz-executor/11447: [ 582.589033][ T30] #0: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 582.600797][ T30] #1: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 582.654905][ T30] [ 582.657319][ T30] ============================================= [ 582.657319][ T30] [ 582.678501][ T30] NMI backtrace for cpu 1 [ 582.682905][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 582.693106][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 582.703212][ T30] Call Trace: [ 582.706529][ T30] [ 582.709505][ T30] dump_stack_lvl+0x241/0x360 [ 582.714240][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 582.719502][ T30] ? __pfx__printk+0x10/0x10 [ 582.724166][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 582.729180][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 582.734703][ T30] ? _printk+0xd5/0x120 [ 582.738915][ T30] ? __pfx__printk+0x10/0x10 [ 582.743557][ T30] ? __wake_up_klogd+0xcc/0x110 [ 582.748462][ T30] ? __pfx__printk+0x10/0x10 [ 582.753116][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 582.758201][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 582.764241][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 582.770295][ T30] watchdog+0xff4/0x1040 [ 582.774597][ T30] ? watchdog+0x1ea/0x1040 [ 582.779075][ T30] ? __pfx_watchdog+0x10/0x10 [ 582.783805][ T30] kthread+0x2f0/0x390 [ 582.787917][ T30] ? __pfx_watchdog+0x10/0x10 [ 582.792642][ T30] ? __pfx_kthread+0x10/0x10 [ 582.797280][ T30] ret_from_fork+0x4b/0x80 [ 582.801751][ T30] ? __pfx_kthread+0x10/0x10 [ 582.806384][ T30] ret_from_fork_asm+0x1a/0x30 [ 582.811218][ T30] [ 582.815287][ T30] Sending NMI from CPU 1 to CPUs 0: [ 582.821277][ C0] NMI backtrace for cpu 0 [ 582.821293][ C0] CPU: 0 UID: 0 PID: 1175 Comm: kworker/0:3 Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 582.821316][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 582.821330][ C0] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 582.821365][ C0] RIP: 0010:find_match+0xbf/0xc10 [ 582.821391][ C0] Code: bb c0 00 00 00 48 03 18 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 64 5c 96 f7 4c 8b 23 6c 24 5a 01 89 c3 31 ff 89 c6 e8 51 07 2d f7 85 db 74 1a e8 18 [ 582.821408][ C0] RSP: 0018:ffffc90000006380 EFLAGS: 00000246 [ 582.821424][ C0] RAX: 1ffff1100be9cc18 RBX: ffff88805f4e60c0 RCX: dffffc0000000000 [ 582.821439][ C0] RDX: ffff888026ef8000 RSI: 0000000000000000 RDI: 0000000000000000 [ 582.821453][ C0] RBP: ffff88803089c0b8 R08: ffffffff8a67b62f R09: ffffc900000066b0 [ 582.821468][ C0] R10: ffffc900000066a0 R11: fffff52000000ca2 R12: ffff88802ff7b000 [ 582.821483][ C0] R13: ffff88803089c0cf R14: 1ffff11006113819 R15: 1ffff11006113817 [ 582.821498][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 582.821514][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 582.821528][ C0] CR2: 00007fb1f71a4440 CR3: 000000000e734000 CR4: 00000000003526f0 [ 582.821546][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 582.821558][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 582.821570][ C0] Call Trace: [ 582.821578][ C0] [ 582.821587][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 582.821615][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 582.821645][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 582.821672][ C0] ? nmi_handle+0x2a/0x5a0 [ 582.821698][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 582.821723][ C0] ? nmi_handle+0x14f/0x5a0 [ 582.821741][ C0] ? nmi_handle+0x2a/0x5a0 [ 582.821760][ C0] ? find_match+0xbf/0xc10 [ 582.821782][ C0] ? default_do_nmi+0x63/0x160 [ 582.821811][ C0] ? exc_nmi+0x123/0x1f0 [ 582.821837][ C0] ? end_repeat_nmi+0xf/0x53 [ 582.821863][ C0] ? find_match+0x5f/0xc10 [ 582.821887][ C0] ? find_match+0xbf/0xc10 [ 582.821910][ C0] ? find_match+0xbf/0xc10 [ 582.821934][ C0] ? find_match+0xbf/0xc10 [ 582.821957][ C0] [ 582.821964][ C0] [ 582.821976][ C0] __find_rr_leaf+0x275/0x8e0 [ 582.822007][ C0] ? __pfx___find_rr_leaf+0x10/0x10 [ 582.822031][ C0] ? __pfx_fib6_node_lookup+0x10/0x10 [ 582.822057][ C0] fib6_table_lookup+0x413/0xbb0 [ 582.822095][ C0] ? __pfx_fib6_table_lookup+0x10/0x10 [ 582.822130][ C0] ip6_pol_route+0x273/0x15d0 [ 582.822159][ C0] ? ip6_pol_route+0x198/0x15d0 [ 582.822188][ C0] ? __pfx_ip6_pol_route+0x10/0x10 [ 582.822221][ C0] ? br_nf_dev_queue_xmit+0x4f8/0x22e0 [ 582.822256][ C0] fib6_rule_lookup+0x58c/0x790 [ 582.822284][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 582.822307][ C0] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 582.822336][ C0] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 582.822367][ C0] ? __pfx_validate_chain+0x10/0x10 [ 582.822387][ C0] ? __pfx_lock_release+0x10/0x10 [ 582.822417][ C0] ip6_route_input+0x859/0xd90 [ 582.822434][ C0] ? mark_lock+0x9a/0x360 [ 582.822454][ C0] ? __pfx_ip6_route_input+0x10/0x10 [ 582.822486][ C0] ? ip6_rcv_finish_core+0x20f/0x410 [ 582.822511][ C0] ip6_rcv_finish+0x144/0x180 [ 582.822533][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 582.822556][ C0] ip_sabotage_in+0x203/0x290 [ 582.822582][ C0] ? __pfx_ip_sabotage_in+0x10/0x10 [ 582.822605][ C0] nf_hook_slow+0xc3/0x220 [ 582.822624][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 582.822646][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 582.822668][ C0] NF_HOOK+0x29e/0x450 [ 582.822689][ C0] ? skb_orphan+0xae/0xd0 [ 582.822713][ C0] ? NF_HOOK+0x9a/0x450 [ 582.822735][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 582.822758][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 582.822784][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 582.822807][ C0] __netif_receive_skb+0x1ea/0x650 [ 582.822837][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 582.822863][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 582.822898][ C0] ? netif_receive_skb+0x131/0x890 [ 582.822924][ C0] ? netif_receive_skb+0x131/0x890 [ 582.822951][ C0] netif_receive_skb+0x1e8/0x890 [ 582.822978][ C0] ? __pfx_lock_release+0x10/0x10 [ 582.823005][ C0] ? __pfx_netif_receive_skb+0x10/0x10 [ 582.823035][ C0] ? br_netif_receive_skb+0x130/0x1a0 [ 582.823063][ C0] NF_HOOK+0x9e/0x400 [ 582.823088][ C0] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 582.823113][ C0] ? NF_HOOK+0xfc/0x400 [ 582.823137][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 582.823163][ C0] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 582.823191][ C0] ? br_pass_frame_up+0x297/0x430 [ 582.823224][ C0] br_handle_frame_finish+0x18ed/0x1fe0 [ 582.823257][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 582.823283][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 582.823307][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 582.823331][ C0] ? ip6t_do_table+0x205/0x18a0 [ 582.823348][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 582.823376][ C0] ? ip6t_do_table+0x205/0x18a0 [ 582.823395][ C0] ? nf_hook_slow+0x175/0x220 [ 582.823413][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 582.823440][ C0] br_nf_hook_thresh+0x472/0x590 [ 582.823468][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 582.823494][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 582.823523][ C0] ? skb_push+0x97/0x100 [ 582.823551][ C0] br_nf_pre_routing_finish_ipv6+0xaa0/0xdd0 [ 582.823577][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 582.823609][ C0] br_nf_pre_routing_ipv6+0x379/0x770 [ 582.823636][ C0] ? br_nf_pre_routing_ipv6+0x41e/0x770 [ 582.823662][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 582.823690][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 582.823716][ C0] ? br_nf_pre_routing+0x70e/0x1470 [ 582.823739][ C0] ? ip6_mc_input+0xa1f/0xc30 [ 582.823765][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 582.823789][ C0] br_handle_frame+0x9fd/0x1530 [ 582.823819][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 582.823846][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 582.823871][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 582.823902][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 582.823928][ C0] __netif_receive_skb_core+0x13e8/0x4570 [ 582.823961][ C0] ? ip6_mc_input+0xa1f/0xc30 [ 582.823987][ C0] ? ip6_mc_input+0xa1f/0xc30 [ 582.824013][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 582.824043][ C0] ? mark_lock+0x9a/0x360 [ 582.824062][ C0] ? __lock_acquire+0x1384/0x2050 [ 582.824100][ C0] __netif_receive_skb+0x12f/0x650 [ 582.824129][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 582.824156][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 582.824183][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 582.824209][ C0] ? __pfx_lock_release+0x10/0x10 [ 582.824241][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 582.824266][ C0] process_backlog+0x662/0x15b0 [ 582.824288][ C0] ? process_backlog+0x33b/0x15b0 [ 582.824310][ C0] ? __pfx_process_backlog+0x10/0x10 [ 582.824327][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 582.824355][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 582.824386][ C0] __napi_poll+0xcb/0x490 [ 582.824414][ C0] net_rx_action+0x89b/0x1240 [ 582.824443][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 582.824461][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 582.824505][ C0] handle_softirqs+0x2c5/0x980 [ 582.824531][ C0] ? do_softirq+0x11b/0x1e0 [ 582.824555][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 582.824584][ C0] do_softirq+0x11b/0x1e0 [ 582.824606][ C0] [ 582.824612][ C0] [ 582.824620][ C0] ? __pfx_do_softirq+0x10/0x10 [ 582.824643][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 582.824671][ C0] ? rcu_is_watching+0x15/0xb0 [ 582.824693][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 582.824717][ C0] ? wg_packet_tx_worker+0x25f/0x810 [ 582.824745][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 582.824768][ C0] ? rcu_read_lock_bh_held+0x7e/0x120 [ 582.824789][ C0] ? __pfx_rcu_read_lock_bh_held+0x10/0x10 [ 582.824814][ C0] ? wg_packet_tx_worker+0x25f/0x810 [ 582.824842][ C0] wg_packet_tx_worker+0x5ef/0x810 [ 582.824870][ C0] ? wg_packet_tx_worker+0x25f/0x810 [ 582.824899][ C0] ? process_scheduled_works+0x976/0x1850 [ 582.824924][ C0] process_scheduled_works+0xa63/0x1850 [ 582.824962][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 582.824991][ C0] ? assign_work+0x364/0x3d0 [ 582.825018][ C0] worker_thread+0x870/0xd30 [ 582.825046][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 582.825069][ C0] ? __kthread_parkme+0x169/0x1d0 [ 582.825097][ C0] ? __pfx_worker_thread+0x10/0x10 [ 582.825122][ C0] kthread+0x2f0/0x390 [ 582.825139][ C0] ? __pfx_worker_thread+0x10/0x10 [ 582.825163][ C0] ? __pfx_kthread+0x10/0x10 [ 582.825181][ C0] ret_from_fork+0x4b/0x80 [ 582.825207][ C0] ? __pfx_kthread+0x10/0x10 [ 582.825228][ C0] ret_from_fork_asm+0x1a/0x30 [ 582.825262][ C0] [ 583.610564][ C0] net_ratelimit: 10204 callbacks suppressed [ 583.610590][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:09:f1:b1:52:a6, vlan:0) [ 583.646396][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 583.646419][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 583.646449][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 583.646467][ T30] Call Trace: [ 583.646476][ T30] [ 583.646488][ T30] dump_stack_lvl+0x241/0x360 [ 583.646528][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 583.646561][ T30] ? __pfx__printk+0x10/0x10 [ 583.646587][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 583.646632][ T30] ? vscnprintf+0x5d/0x90 [ 583.646669][ T30] panic+0x349/0x880 [ 583.646699][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 583.646737][ T30] ? __pfx_panic+0x10/0x10 [ 583.646764][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 583.646790][ T30] ? __irq_work_queue_local+0x137/0x410 [ 583.646823][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 583.646850][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 583.646885][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 583.646924][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 583.646963][ T30] watchdog+0x1033/0x1040 [ 583.646998][ T30] ? watchdog+0x1ea/0x1040 [ 583.647036][ T30] ? __pfx_watchdog+0x10/0x10 [ 583.647067][ T30] kthread+0x2f0/0x390 [ 583.647091][ T30] ? __pfx_watchdog+0x10/0x10 [ 583.647122][ T30] ? __pfx_kthread+0x10/0x10 [ 583.647147][ T30] ret_from_fork+0x4b/0x80 [ 583.647188][ T30] ? __pfx_kthread+0x10/0x10 [ 583.647213][ T30] ret_from_fork_asm+0x1a/0x30 [ 583.647261][ T30] [ 583.652058][ T30] Kernel Offset: disabled