last executing test programs: 45.146102106s ago: executing program 4 (id=664): setrlimit(0x0, &(0x7f0000000180)={0x2, 0x4}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x400c0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r2, &(0x7f0000002b00)=ANY=[], 0x16a) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x2a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r4, @ANYRES64=r1], 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="5800000010000104fcffffff0000000000000000", @ANYRES32=0x0, @ANYRESOCT=r0, @ANYRES16=r1, @ANYRES16, @ANYRES32=r5], 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x8001) r6 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000980)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&#\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\xda\x89\xb7}@\xab\x16\x9c{\x8c\x97\xcc\xe7\xa5\xf5\xeb2\x9a\xed%\xf2\x8f\x97\x18\xce\x92\xc9\xa8\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6H\x80s\xd66y\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n=/o\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90Q\xe8r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495\x12B\x06\xe5\x8f\x83Vb\xf1\xbc\xb9E\x1a\x9bH$\x1f^\x9dX\xd0\xca\xcc\xc9\x86\xaa\xd0\x9c\xc0\x82\xabE\xcc{\xcd\xd3\xdb\x97\x1e.y\xb0\x9f\x8f\xefv\x9c\xbd%\x84\xbf\"\xd9\xb4Vm\t.\x15\xf1)\xd6\xd8\x1cb\xc5\xd9=c\xb5<|+K*\x9f\x01u', 0xfeffffff00000000) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000080)=0x2) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f00000000c0)=0x2) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r7, 0x0) 44.4211083s ago: executing program 2 (id=667): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x3c1, 0x3, 0xb10, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0xa40, 0x2e8, 0x2e8, 0xa40, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0x0, 0xff000000], 'vlan0\x00', 'geneve1\x00', {}, {0xff}}, 0x0, 0x8b0, 0x8e0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@u32={{0x7e0}, {[{[{0xd, 0x3}, {0x10}, {0x6f0e7d3d, 0x1}, {0x1, 0x3}, {0x9}, {0xb, 0x1}, {0x7fffffff, 0x1}, {0x7, 0x3}, {0x1, 0x2}, {0x4, 0x51495059c89c080}, {0x8}], [{0x60, 0x5}, {0x9, 0x3}, {0x800, 0x9d78}, {0x6, 0x81}, {0x5, 0x7}, {0x0, 0x10001}, {0x2, 0x5}, {0xd, 0xfffffffd}, {0x6, 0x800}, {0x4, 0xf}, {0x80, 0xffff}], 0x2, 0x7}, {[{0x7ec5}, {0x6, 0x2}, {0xe0000, 0x2}, {0x1, 0x2}, {0xfffffffd, 0x1}, {0x8000, 0x2}, {0x200, 0x1}, {0x7, 0x2}, {0x7}, {0x4, 0x3}, {0x8, 0x3}], [{0x7, 0x9}, {0x5, 0x4}, {0x2, 0x7}, {0x7fbb, 0x1ff}, {0x2, 0x7}, {0x5, 0x100}, {0x2a, 0xfe}, {0x8, 0x6}, {0x4, 0xfffffd46}, {0x91f, 0x3ff}, {0xc, 0x3}], 0xb, 0xa}, {[{0x7, 0x2}, {0x7}, {0x80000001, 0x1}, {0xafa, 0x1}, {0x3}, {0xfffffff8, 0x3}, {0x85, 0x2}, {0xa4b, 0x2}, {0x3, 0x2}, {0xfffff7f0, 0x1}, {0x100}], [{0xb866, 0x42}, {0x200, 0xffffffff}, {0x5, 0x3}, {0x5, 0x3ff}, {0xf062, 0x2}, {0x80e8, 0x100}, {0xe, 0x9}, {0x7, 0x1}, {0x2, 0x4}, {0x9, 0x80000000}, {0xe1a, 0x3}], 0x2, 0x8}, {[{0x5, 0x1}, {0xcfd, 0x1}, {0x7, 0x1}, {0x3, 0x1}, {0xfffff000}, {0x100, 0x3}, {0x9dc, 0x1}, {0x1, 0x2}, {0x4, 0x2}, {0x2, 0x3}, {0x2}], [{0x9, 0x5}, {0x0, 0x36}, {0x5, 0x3}, {0xfffffff9, 0x7}, {0x7, 0x200}, {0xf91, 0x2}, {0x3ff, 0x8}, {0x9, 0xe}, {0x8, 0x8000006}, {0xf, 0x442b}, {0x9, 0xe1f3}], 0x4, 0xd}, {[{0xe0, 0x2}, {0x1, 0x3}, {0x200, 0x1}, {0xb7b, 0x24ad23d8db3ef6a8}, {0x1, 0x2}, {0x1, 0x1}, {0x2a4a}, {0x101}, {0x3, 0x3}, {0x9, 0x1}, {0x9, 0x1}], [{0x8001, 0x10000}, {0x3, 0xb}, {0x2, 0x1}, {0x5, 0xc}, {0x4, 0xd23c}, {0x7, 0x1}, {0xeb9, 0xa3d0}, {0x6}, {0x0, 0x2}, {0x9, 0xb6}, {0x7, 0x101}], 0x5, 0xb}, {[{0x8, 0x1}, {0x5, 0x3}, {0x100}, {0x5, 0x1}, {0x0, 0x2}, {0x4, 0x3}, {}, {0x1, 0x2}, {0x101, 0x2}, {0x4, 0x3}, {0x81, 0x1}], [{0xfffffffd, 0x6}, {0x9, 0x7}, {0x3e8a2173, 0x6}, {0x5, 0x6}, {0x1, 0x8}, {0x8, 0x6}, {0x9, 0x2}, {0x50bf}, {0x6, 0x3}, {0x1, 0xfffffff7}, {0x2, 0x80000001}], 0x7, 0x1}, {[{0x4, 0x2}, {0x401, 0x3}, {0x5, 0x3}, {0x8, 0x2}, {0x934, 0x1}, {0xfffff9fe}, {0x531, 0x2}, {0x9, 0x1}, {0x3}, {0x75ae, 0x3}, {0x1}], [{0x10, 0x1a}, {0x5}, {0x20000, 0x8001}, {0xfffffff7, 0x8}, {0x80000001, 0x2}, {0xb30d, 0x2}, {0x0, 0x7fffffff}, {0x80, 0x5}, {0xa, 0x8}, {0xee, 0xa}, {0x24c3, 0x437}], 0xb, 0x1}, {[{0x2, 0x1}, {0x9, 0x1}, {}, {0x5, 0x2}, {0xc00}, {0x10001, 0x3}, {0x7f, 0x1}, {0x9, 0x3}, {0x30, 0x1}, {0x5, 0x3}, {0xd}], [{0x7, 0x80000000}, {0x400, 0x3}, {0x9, 0x4}, {0x1, 0x9}, {0x4}, {0x1ff, 0xff}, {0xfd}, {0x5, 0x3}, {0x10002, 0x77}, {0x8, 0xb80}, {0x8, 0x1ff}], 0xa, 0x1}, {[{0x8}, {0xfffffbff}, {0x401}, {0xff, 0x2}, {0xe, 0x2}, {0x9, 0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x509}, {0x9, 0x3}], [{0x8, 0x4}, {0x9, 0x7}, {0x8, 0x4ae1}, {0xfff, 0x4}, {0xa2c, 0x4}, {0x6, 0x6b}, {0x5, 0x5}, {0x7, 0xd76}, {0x2, 0x8}, {0x2ea, 0x9}, {0x5, 0x5}], 0x6, 0x3}, {[{0x8001, 0x1}, {0x3, 0x1}, {0x5, 0x2}, {0x5}, {0x8}, {0xc}, {0x2, 0x2}, {0xffff0001, 0x2}, {0x6, 0x3}, {0xe91}, {0x80000001, 0x3}], [{0x1, 0x81}, {0x9, 0x7}, {0x3, 0x7}, {0x401, 0xec}, {0x10001}, {0x0, 0x2}, {0x70, 0x9}, {0xc6, 0x1000}, {0x7ff, 0x708}, {0x7, 0x5}, {0x2, 0x10000}], 0xb, 0x1}, {[{0x8}, {0x4, 0x1}, {0x7}, {0x6, 0x3}, {0x4}, {0xcc, 0x2}, {0x7ff, 0x2}, {0x4, 0x1}, {0xfffffffb, 0x3}, {0x1, 0x3}, {0x6, 0x2}], [{0x63e2df8a, 0x6}, {0x5, 0x2}, {0x2, 0x401}, {0xff, 0x8}, {0x889c, 0x5f}, {0x7d, 0xa14}, {0x0, 0x5}, {0x3, 0x372}, {0xb, 0x6}, {0x0, 0xcaf}, {0x5, 0x4}], 0x6, 0xa}], 0x8}}, @common=@inet=@dscp={{0x28}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xb70) syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="755ec928f7d496189b15ec02966f87a78e026390", @ANYRES8=r0, @ANYRESOCT=r0, @ANYRESOCT=r0], 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x1) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e06006220"], 0x9) 43.052886842s ago: executing program 4 (id=672): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x3, 0x7, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x7, 0x3e7, 0xb, 0x5, 0x6, 0x2, 0x3, 0x20000008, 0x0, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x9, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x8, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) syz_open_dev$vim2m(0x0, 0x40005, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 43.046446014s ago: executing program 1 (id=673): r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x0, 0x0, 0xff}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000100)=""/56, 0x38}], 0x1, 0x10000006, 0x3) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000600)={{0x0, 0x989680}, {0x77359400}}, 0x0) r3 = socket(0xf, 0x8, 0x0) listen(r3, 0x4) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x500) ioctl$DRM_IOCTL_CONTROL(r4, 0x40086414, &(0x7f00000000c0)={0x0, 0x2}) fsopen(&(0x7f0000000140)='vfat\x00', 0x1) accept4$unix(r3, 0x0, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001ac0)={r5, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) ioctl$LOOP_CLR_FD(r6, 0x4c01) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x6600, 0x0) r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2200, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240080c5}, 0x800) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000000040)=@x86={0x6, 0x3, 0x0, 0x0, 0x5, 0xdf, 0x6, 0x4, 0x2e, 0x4d, 0x0, 0x33, 0x0, 0x40, 0x8, 0x2, 0x7f, 0x0, 0xbb, '\x00', 0x4, 0x403}) ioctl$LOOP_SET_DIRECT_IO(r6, 0x4c08, 0x3) ioctl$TIOCSIG(r2, 0x40045436, 0x15) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000004c0)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 42.709625485s ago: executing program 1 (id=676): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000280)='veth1_virt_wifi\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c000000020603000000bd300f3c2abb61fc0005040004000000000010000300686573683aa52afa54b971b06300078008001300000000030800124000000000050005080a0000000900020073797a3100000000050001000700f300"], 0x5c}, 0x1, 0x0, 0x0, 0x24004010}, 0x4000) r2 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x8, 0x0, 0x2b}, 0xa) r3 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x2000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000100)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x40, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40], [0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) readv(r6, &(0x7f00000018c0)=[{0x0}, {&(0x7f0000001700)=""/221, 0xdd}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r5}, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_GETX(r9, 0x4018920a, &(0x7f00000001c0)={&(0x7f0000000440), &(0x7f0000002d40)=""/4115, 0x1013}) syz_io_uring_setup(0x24ff, &(0x7f0000000580)={0x0, 0x686c, 0x10000, 0x3, 0x298, 0x0, r9}, &(0x7f0000000680), &(0x7f00000006c0)) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000000a0605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aa"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) accept4(r7, 0x0, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r11) 42.499170957s ago: executing program 0 (id=677): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r0, &(0x7f0000000040)={0x0, 0x6000, &(0x7f00000001c0)=[{&(0x7f0000000140)="376cd97cb39285495ddf4bd660c811b4dca74500799dac8f26884d6d4cc781a3b510574bd853ed8eae31de87a5", 0x2d}], 0x1}, 0x0) 42.459704124s ago: executing program 3 (id=678): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r1, 0x0, 0xcf, &(0x7f0000000000)=0x1, 0x4) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$RTC_AIE_ON(r2, 0x7001) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x4, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3ffe9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000f80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x4000044) ioctl$RTC_AIE_OFF(r2, 0x7002) sendmsg$inet6(r0, &(0x7f0000000200)={&(0x7f0000000040)={0xa, 0x4e22, 0xdc, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000029"], 0x30}, 0x4844) 42.310078652s ago: executing program 0 (id=679): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400050000000009040100010300000009210000000122050009058103"], 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x7, 0x2) timer_create(0x9, 0x0, &(0x7f00000000c0)) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f00000000c0)={0xa, 0x1, 0x3, "5e5500bd4814bf6d9687c1fb8e30ff7800", 0x3132564e}) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xe, {[@local=@item_012={0x0, 0x2, 0x4}, @global=@item_012={0x2, 0x1, 0x1, 'O '}, @local=@item_4={0x3, 0x2, 0xa, "f06d4d48"}, @main=@item_4={0x3, 0x0, 0x8, "665284d8"}]}}, 0x0}, 0x0) fsopen(&(0x7f0000000040)='mqueue\x00', 0x1) 42.081686679s ago: executing program 4 (id=680): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x20005e, 0x0, 0x9, 0x4}) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'bridge_slave_0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) close(r1) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e24, 0x1, @local, 0x1}}}, 0x90) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) r5 = fsopen(&(0x7f0000000000)='udf\x00', 0x0) syz_io_uring_setup(0x7d22, &(0x7f0000000240)={0x0, 0x6, 0x20, 0x3, 0x13a}, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x80, &(0x7f0000000300)=0x9, 0x0, 0x4) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) read(r5, 0x0, 0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000180)) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x1, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1, "00820000"}}}}}, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000200)={@host, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x4, 0x20005e}) 42.025218165s ago: executing program 4 (id=681): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f40)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000400)="f2e0b7531e2063b7a6345c67a555f26bf2ef0fbc7006a89c01a5517e64a10b791358670701b411733c3a0934877d466f0cd8cb7f6a170fc7a990fb07b3e8d4c588345e6b8fdf025851f3aadc6c3abde6ba8a4b5ece8598be1d57bd1e85c8e8660cbc", 0x62}], 0x1}}], 0x1, 0x48100) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@bridge_setlink={0x20, 0x13, 0xa29, 0x70bd28, 0x200, {0x7, 0x0, 0x0, r2, 0x18a8, 0x48}}, 0x20}}, 0x40) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x7, 0xf, 0x9, '\x00', 0x5}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (fail_nth: 4) 41.50726915s ago: executing program 3 (id=682): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) unlinkat(0xffffffffffffff9c, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x51) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000001f80)=r1, 0x4) r3 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f00000003c0)="390000001300034700bb65e1c3e5ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) 41.507032719s ago: executing program 4 (id=683): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x2, 0x0, 0x3, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb}, @sadb_x_sa2={0x2, 0x9}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @sadb_x_nat_t_type={0x1}]}, 0x88}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b35, &(0x7f0000000440)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xcc03, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x8) 41.354086393s ago: executing program 1 (id=684): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000001000010400000000000b000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000380012800b00010065727370616e000028"], 0x58}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x24, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast2}, {@empty}, {@broadcast}, {@empty}, {@multicast1}, {@private}]}, @rr={0x7, 0x23, 0x0, [@remote, @empty, @empty, @multicast1, @remote, @dev, @loopback, @rand_addr]}, @noop, @lsrr={0x83, 0x3}, @generic={0x0, 0x2}]}}}}}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="dc01c6ba1cdcc12519250000000000007f007101001300000000000000000000000000000000000000000000000000000000000000dce600000000000000", @ANYRES32=0x0, @ANYBLOB="200100000000000000000000000000020000000032000000fe8000000000000000000000000000bb00"/168], 0x1dc}}, 0x0) r1 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 41.305728143s ago: executing program 2 (id=685): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x3, 0x7, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x7, 0x3e7, 0xb, 0x5, 0x6, 0x2, 0x3, 0x20000008, 0x0, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x9, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x8, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$hidraw(&(0x7f00000002c0), 0x7fffffffffffffff, 0x40000) 41.180760838s ago: executing program 3 (id=686): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0xa100, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4c001}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x118, 0x1, 0x2, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_EXPECT_NAT={0xec, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_NAT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6ae7c2b5fe05a01e}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1b}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x30}}, {0x14, 0x4, @empty}}}]}]}, @CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x10}, 0x4c041) read$FUSE(r0, &(0x7f0000000240)={0x2020}, 0x2020) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000022c0), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000002380)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x1c, r1, 0x301, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040804}, 0x80d4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000024c0)={'ip_vti0\x00', &(0x7f0000002400)={'syztnl1\x00', 0x0, 0x8, 0x8, 0xf, 0x81, {{0x19, 0x4, 0x2, 0x3, 0x64, 0x64, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x2c, 0xab, 0x3, 0x3, [{@rand_addr=0x64010101}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x88}, {@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x315a354}, {@remote, 0x4}]}, @rr={0x7, 0xf, 0x4f, [@broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x8, 0x9b, 0x0, 0x2, [0x7f]}, @timestamp_addr={0x44, 0xc, 0x4f, 0x1, 0x4, [{@loopback, 0x7}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000002500)={'batadv_slave_0\x00', 0x0}) getsockname$packet(r0, &(0x7f0000002540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002580)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000025c0)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000002600)={'wg1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002640)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000002800)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002680)={0x140, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x58, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4c, 0x4, "3d7d1a91ca212887d9893d5013342d088d0fb7c5df925948bd58f0ec27279a27def58a7348230ae90baeed423c707624dbf757e59e4398db90678b34ceacb4cb2f4d0745e86314dc"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xb8}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x4000080}, 0xc1) bind$can_j1939(r0, &(0x7f0000002840)={0x1d, r4, 0x1, {0x1, 0xf0, 0x3}, 0xfe}, 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f0000002880), r0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002900), r0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000002a00)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002940)={0x74, r8, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6a}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xdd7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x800}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x400000c4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000002a40)={'batadv_slave_0\x00'}) write$rfkill(r0, &(0x7f0000002a80)={0x0, 0x7, 0x2}, 0x8) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) clock_gettime(0x0, &(0x7f0000002b80)={0x0, 0x0}) pselect6(0x40, &(0x7f0000002ac0)={0xfffffffffffffffb, 0x8, 0x5, 0x2, 0xfffffffffffffff9, 0x8001, 0x4, 0xfffffffffffffff7}, &(0x7f0000002b00)={0x9, 0x3, 0xd1, 0x2, 0x3b, 0xffffffffffffffff, 0x8, 0x80000000}, &(0x7f0000002b40)={0xc, 0x6, 0x0, 0x9, 0x5, 0x4, 0x1000, 0x3}, &(0x7f0000002bc0)={r9, r10+60000000}, &(0x7f0000002c40)={&(0x7f0000002c00)={[0x7]}, 0x8}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000002d40)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002d00)={&(0x7f0000002cc0)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x840) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, &(0x7f0000002d80)={0x1, 0x1, 0x8, r7, 0x100}, 0xc) r11 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002dc0), 0x40, 0x0) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002e40), r0) sendmsg$L2TP_CMD_SESSION_MODIFY(r11, &(0x7f0000002f40)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002f00)={&(0x7f0000002e80)={0x4c, r12, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfb}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1004}, 0x400c084) sendmsg$NL80211_CMD_RELOAD_REGDB(r11, &(0x7f0000003040)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003000)={&(0x7f0000002fc0)={0x14, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) syncfs(r0) ioctl$BTRFS_IOC_DEV_INFO(r11, 0xd000941e, &(0x7f0000003080)={0x0, "503d57483e18fb46911090c1fcf2ef2d"}) read$midi(r0, &(0x7f0000004080)=""/26, 0x1a) 41.140618131s ago: executing program 1 (id=687): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r1 = syz_io_uring_setup(0x3380, &(0x7f0000000100)={0x0, 0x4, 0x40, 0x0, 0xfffffffc}, &(0x7f0000000380)=0x0, &(0x7f00000000c0)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/meminfo\x00', 0x0, 0x0) bind$qrtr(r6, &(0x7f0000000240)={0x2a, 0x0, 0x8000}, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) r9 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)={0x48080, 0x1, 0x2f}, 0x18) move_mount(r9, &(0x7f0000000440)='./file0\x00', r6, &(0x7f0000000480)='./file0\x00', 0x172) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00012bbd7000fedbdf2510000000080009000400000008000900090000002c0001801400020076657468315f746f5f688d72c4000000001400020076657422e8304024806bfe616d00000008000700040000f63f044e5ac03e5cc905740db4f687d6f2e2143d2ae4235058bdee4aa072322d8e9105000559952b7d6aa93a69000000"], 0x58}, 0x1, 0x0, 0x0, 0x4044011}, 0x4880) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f0000000700)=ANY=[], 0x118) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r11, 0x6, 0x2d, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r12 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x288, 0x258, 0x258, 0x288, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x0, {@ipv4=@remote, 'team_slave_1\x00'}}}, {{@uncond, 0x0, 0xf8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) getrlimit(0xd, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0) r13 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r13, &(0x7f0000000200)='./file0\x00', r5, 0x0, 0x46) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x40007) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x0) 41.042242819s ago: executing program 3 (id=688): r0 = socket(0x2b, 0x80801, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x1d0, 0x290, 0x290, 0x390, 0x0, 0x428, 0x428, 0x60, 0x428, 0x428, 0x6, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0xff, 'netdevsim0\x00', '\x00', {0xff}, {0xff}, 0xb8, 0x0, 0x40}, 0x0, 0x70, 0x428}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="81b035711ec5", 0xfc00, 0xe, [0xa, 0x27, 0x1b, 0x3d, 0x1e, 0xb, 0x2b, 0x0, 0x30, 0x1a, 0x23, 0x6, 0x31, 0x33, 0x36, 0x18], 0x2, 0x4, 0x9}}}, {{@ip={@local, @local, 0xff, 0xffffff00, 'netpci0\x00', 'wg1\x00', {}, {}, 0xc, 0x1, 0xa}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x6}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2b}, @loopback, 0xff000000, 0xff000000, 'wg1\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x11e, 0x6, 0x4b}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0xdc}}}, {{@ip={@multicast2, @rand_addr=0x64010101, 0xff000000, 0xffffffff, 'ipvlan1\x00', 'veth0_macvtap\x00', {0xff}, {}, 0x6c, 0x0, 0x41}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x3, 0xc, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x9b, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 40.930166186s ago: executing program 3 (id=689): syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x2a809018, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) 40.929789398s ago: executing program 1 (id=690): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x3, 0x7, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x7, 0x3e7, 0xb, 0x5, 0x6, 0x2, 0x3, 0x20000008, 0x0, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x9, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x8, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) syz_open_dev$vim2m(0x0, 0x40005, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 40.837682561s ago: executing program 3 (id=691): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x0) lstat(0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101001) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48010}, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x8880}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sysvipc/sem\x00', 0x18, 0x0) preadv(r5, &(0x7f0000000340)=[{&(0x7f0000000380)=""/135, 0x87}], 0x1, 0x154, 0xf5ffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x80000001}) r6 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000080)={0xa002a008}) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 40.586458597s ago: executing program 4 (id=692): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) ioctl$LOOP_CONFIGURE(r2, 0xc0401289, 0x0) r3 = gettid() syz_io_uring_setup(0x4d47, 0x0, &(0x7f0000000080), 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r5, &(0x7f0000000b80)=""/215, 0xd7) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000040)={0x32f, @tick=0xfffffffc, 0x0, {0x4}, 0x1, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r5, 0x80045300, 0x0) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000100)={0x40, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r7, 0x80015b18, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r5, 0xc08c5336, &(0x7f00000000c0)={0x5, 0x0, 0x0, 'queue0\x00', 0x8}) tkill(r3, 0x7) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000001010101"], 0x44}}, 0x0) socket$inet6(0xa, 0x800, 0xfffffff9) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0], 0x1, 0x80000}) read$FUSE(0xffffffffffffffff, &(0x7f0000001500)={0x2020}, 0x2020) socket$inet6_udp(0xa, 0x2, 0x0) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x8000) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r8, 0x40345410, &(0x7f00000004c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r8, 0x80605414, 0xffffffffffffffff) fstat(r0, &(0x7f0000000280)) 40.301780299s ago: executing program 2 (id=693): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe", 0x2c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d", 0x24}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x200000000000000) 40.198105938s ago: executing program 2 (id=694): openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) readv(r4, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) sendmmsg$alg(r4, &(0x7f00000003c0)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="6f2a9367040d261c0e9799dcfad01263", 0x10}], 0x1, 0x0, 0x0, 0xc000}], 0x1, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x4, 0xb3, 0x0, 0x5, 0xff, 0x1f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x7}]}) r5 = accept(r0, &(0x7f0000000140)=@ethernet={0x0, @link_local}, &(0x7f00000000c0)=0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0xfffff) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f00000025c0)) recvmsg(r0, &(0x7f0000000140)={&(0x7f00000000c0)=@tipc=@id, 0x80, &(0x7f0000002540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/214, 0xd6}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/254, 0xfe}, {&(0x7f00000023c0)=""/220, 0xdc}, {&(0x7f00000024c0)=""/98, 0x62}, {&(0x7f00000027c0)=""/4096, 0x1000}], 0x7}, 0x40000000) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r9, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r9, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000040)={0xa, 0x4e22, 0xffffffff, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x12}, 0x1c) setsockopt$inet6_int(r8, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) r11 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x1b32, 0x100, 0x2, 0x335}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r11, 0x9, 0x0, 0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x40, 0x0, @fd=r8, 0xfffffffffffffff7, 0x0, 0x9, 0x2, 0x0, {0x0, r14}}) 40.191398869s ago: executing program 1 (id=695): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) syz_usb_connect(0x0, 0x26, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xaa, 0xbe, 0x1f, 0x20, 0x4e2, 0x1403, 0x1cb2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x78, 0x39, 0x0, [@generic={0x2}]}}]}}]}}, 0x0) setrlimit(0x1, &(0x7f0000000000)) add_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfe95, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000003c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000200)={r2, r3, r4, 0x405, 0x752, 0x80000000, 0x0, 0x0, 0x0, 0xb, 0x200420, 0x200}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f00000016c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x38, 0x1, 0x4, 0x702, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x80000000}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x2}, @NFULA_CFG_MODE={0xa, 0x2, {0xc92}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8081) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r10 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r10, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={0x0, 0x14}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000010401010000000000000000000004000500010001"], 0x1c}}, 0x0) close(0x3) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001540)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x4, @mcast2, 0xffff}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)="9b1786058e5ee91643259efc", 0xc}, {&(0x7f0000000280)="07c8c0f6c75a2b4662865b6810326d5403179bc2145ca279c73103dbcd9626c159c5e0b8b75e8066", 0x28}, {&(0x7f00000002c0)="8939a0fb047f93f4eecf30167c839d256503d87cbce57d2922a56a6890008d42068bd7903c56146b1defbd19570cc1d1f1dcf20247e3a75eb4b929c411e4873b", 0x40}, {&(0x7f00000006c0)="5c973da306ab87cf852193a09af9400a9bb133f10bda1fa33e01f780108db27e5069acfad0f3ec6d424f7960e0d914c764a5cf07a53edc22850ff44520f4099bb56ac28004000000ec9ecfed326792530197fe39c4fd8c3d39abb80c49749bbc765fbc93a83c9519aacca5b7e8ac714accbd08835b968e9bc49a28fdb31e713252983c7404ce1b0a6353274e9d0f0578945b875d774a9d8a99121b1b5e16817ca98a8d04e443a20b9466f4380d67c1c0fdd8cdba76f91cf2f36de64755587e062964bd87cc66797ff53f7359d71ed81d713e8ac936de6c870162b942acda1fdba45d889c9492df41aec51bbea051d27e13", 0xf1}, {&(0x7f0000000380)="12", 0x1}, {&(0x7f00000003c0)="9c2899805281f128852286a1679efe12f642d4cee24cebb837f979c634c092229ef413d9e34eaed0e7c4032520743c", 0x2f}], 0x6}}, {{&(0x7f0000000480)={0xa, 0x4e21, 0x9, @mcast2, 0xfffffffa}, 0x1c, &(0x7f0000000a00)=[{&(0x7f00000004c0)="b631982025aa0fd43a7670347c6366746ae291d79ea9bf8c04391b0154a4583ffc06e6d7f6196a5f3403b44409970762fead1a075b76c1c65475a07d07c2f0069bac6b104bc06f6d0e988d5839589ad2d27ce0ebe65a21794f3a1cc5d0eebd1e795ab65a0e2f1ddacb116ffb5ad49ffd2a", 0x71}, {&(0x7f0000000540)="93ff7d2b45d2b85e6bfeb94e7d4522e1c4a35b5c674b978e09ade91ca90d083d43f39ab3e310749b92f6903205760c6eacec9ed02850af9f63c57481a55a2e500df117f24d744bc8230063b540c82b2abd3107c6f18b5104a5b85a6dce834115b364a2a78eff4692f150ee36765fef93ab3adc067f4c5d2ec60d6b76c56a21225948c97bee30abf286194af7c07650051c9c21c65d7a8e1e3480d5424e65bb269046279629eb0f3c168f8702620fc3a9fec6fb16a69ce949e36fde2dc14b85c6ce5b8aaf6d357bd8fd07b9", 0xcb}, {&(0x7f0000000640)="7b9b5b77c322942ddf7dfd263ef14d384311edc5ba1f34016a627fe0623f8b93aa558c5f9422465568b3a24df0bf95116652729435ac39b528b220f8d14dd953c95e8b8ac6d7568b343fbad30fecbbd149397c86b7b7ffe113c991e57b7f426a67cd1efcaaf833", 0x67}, {&(0x7f0000000a80)="db1c30312d0af5a0639abccee7a4d44dc5c9c84dfd6140ab792f96815ade75d80b2a8b3b457c1f3f95da20c4e0489713d696944c6f1566e873671ecb6c9fe4cdcd99b10d920d9c929a57c2ac8ba1e0fdc8bf4d7511769d132d34676db9ef282b03141e6cf9d3b79934b9c4ba47affc8046b9a35be3b503ba388689fb650c37fbf54d8901c996d056cc9dba0eef89ea9819cb34e252e2c0c148021c5911acfc04c8454738682459f5ba92a93b626e1cd80c1497f422e65868bcfc9af595a436e7c6e654cc211c6b48ff4beb985b6157bc57fb8cedc67be95d6bdcf469b0eef9314a285ad0fbf35a24d54c501a4cf708", 0xef}, {&(0x7f00000007c0)="daab9927e194faecf3c6508c394c212cb74efc23564d274075fa334f0f81dd983aa98ce46404d0817587e056a02e2265c7f30e932dd4aaf65bdb53133ce0d7c5780881685ee3e3f137881078d6a1c0bfb33e5a7852aadc0e1b01dce13a76c45eccb7839f7c497e3828ebfc3b4044c23c40f3cf40c6ab044526b5e105b84c2c67c95f3524fe74ca3b80b64699b4a139a12771de25cbb71fda2e18fbab9e294be3840060b82a7b91a9a33a", 0xaa}, {&(0x7f0000000880)="b1a58441f94c7304190a127e0a8abc9f821e133d08aeb92a7691dc5906b5f18c5058e256e55ade0de9afe493c3e1a5e04c774de8b6dce5c5690efb62913444aa3b2c36284e384b42b8b8f68b619f2bc7f73904803037768fb59c986ee5472c7406623f9b28e3dc39ce5ab50b28c7baeeb92c846b42e1a678e2acbc62bb509b03b2cfce58cfbbf336d699052eaf3d0909c126f3b2a046d7f2b95e71cdb1668852f6b4e6b134dacba2db6a9aa8366a234168863c3ef5a9c1", 0xb7}, {&(0x7f0000000940)="86064e4b8ed11592f48ffac17940e0e33a070f90d088060e8b8a3e550feb40db9ac7819356dec376b7a30fdc5463944feb0060feddad8a38cdee9787450d3e1e3da69ab7df796cc3fdf0170dfd4bc5d253552edb3c498070f2fa5370ea86324e717f38fab3e8a2963c7f36db66525f2f5697a1b6b171d30afc3d3a9b5e98456f39dff8cf19a0d59a004eb14dac3c9206c90a511b1fddc40660187b31f80d8abad5509c0d9b2f", 0xa6}], 0x7, &(0x7f0000001800)=[@dstopts={{0x50, 0x29, 0x37, {0x3c, 0x6, '\x00', [@calipso={0x7, 0x20, {0x3, 0x6, 0x8, 0x8, [0x3774, 0x660a, 0x1]}}, @enc_lim={0x4, 0x1, 0x9d}, @jumbo={0xc2, 0x4, 0x46f2}, @padn={0x1, 0x1, [0x0]}, @pad1, @pad1]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x1, 0x10, 0x1, 0x1, 0x0, [@mcast1, @remote, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private0={0xfc, 0x0, '\x00', 0x1}, @empty]}}}, @flowinfo={{0x14}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}, @dstopts={{0x78, 0x29, 0x37, {0x6c, 0xc, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @generic={0x1, 0x24, "773a374685867311d9d57e6d49eb0c480fdaefea4c3a3f837cf2553dca8fb573b78a46c9"}, @hao={0xc9, 0x10, @empty}, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @jumbo={0xc2, 0x4, 0x6}, @ra={0x5, 0x2, 0x66e0}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x6}}, @hopopts={{0x50, 0x29, 0x36, {0x5e, 0x6, '\x00', [@calipso={0x7, 0x30, {0x1, 0xa, 0x1, 0x7, [0xffff, 0x4d9, 0x100, 0x7fffffff, 0x9]}}]}}}], 0x220}}, {{&(0x7f0000000c80)={0xa, 0x4e23, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, &(0x7f0000001180)}}, {{&(0x7f0000001200)={0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80000000}, 0x1c, &(0x7f0000001380)=[{&(0x7f0000001700)="3bf2b0d122c665afba579bc1087d12b6a5e32a82e256c02cf810894daf0824f51d1f7d73424a29087cac43385c913b64af9b96ce626d6fd759fa9170262cdc8f18810df4b0494c5697be96c5220f7d79e61e27d588b12fc7555aabe6208d08b6d5da6a2df9d04e52059aaaf29eea446768c153558e187339aff2d3a19f98d48bd7cbfbb23496d1b614bbf876efc9b0aaa3af5a7dc2ed112307e1c58ab0bc314e077069db87a76d7deee98acf93431f21cc6b21a4dee68ee407030051aed6ac8ca14d8122d1", 0xc5}, {&(0x7f0000001280)="8781f382358c50f1cff31797bad21fa47effbbae5e7787b473ebd2a04a2f702c26d3ac18a238a554a4c22501c27a57f7249b046ab1da6a5121d09f0696c3df4e8fbda290dc37938d70d177a6159620835f7578835c0226c39ed678f2fd6483a3a95e7cad3227fa0945b65b36cb507128dfce54903893a122fffce1b043ea059b881ca69aca61bb5e47b8c99f0fb409e71873c15ba5b95fdb3f2fae9460dc04dc2c141d77d74823d31a9645c306fcfe3802399ab513328ce97e0c2b9e0fdf063888595156b3ed38df2d7e04ec2390dfda05a0025db80065a8c84710", 0xdb}], 0x2, &(0x7f00000013c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x5}}, @rthdr={{0x38, 0x29, 0x39, {0x11, 0x4, 0x1, 0x72, 0x0, [@mcast1, @remote]}}}, @dstopts_2292={{0x70, 0x29, 0x4, {0x2f, 0xb, '\x00', [@hao={0xc9, 0x10, @mcast1}, @calipso={0x7, 0x20, {0x3, 0x6, 0x6, 0x1, [0xb8, 0x2, 0x0]}}, @hao={0xc9, 0x10, @loopback}, @hao={0xc9, 0x10, @remote}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xfff}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @remote}, r8}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x33, 0x6, 0x0, 0x9, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x3a}, @remote]}}}], 0x160}}], 0x4, 0x400c940) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x5c8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r0], 0x64}}, 0x0) 40.054559519s ago: executing program 0 (id=696): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) unlinkat(0xffffffffffffff9c, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x51) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000001f80)=r1, 0x4) r3 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f00000003c0)="390000001300034700bb65e1c3e5ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) 39.724478942s ago: executing program 2 (id=697): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000001000010400000000000b000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000380012800b00010065727370616e000028"], 0x58}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x24, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast2}, {@empty}, {@broadcast}, {@empty}, {@multicast1}, {@private}]}, @rr={0x7, 0x23, 0x0, [@remote, @empty, @empty, @multicast1, @remote, @dev, @loopback, @rand_addr]}, @noop, @lsrr={0x83, 0x3}, @generic={0x0, 0x2}]}}}}}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="dc01c6ba1cdcc12519250000000000007f007101001300000000000000000000000000000000000000000000000000000000000000dce600000000000000", @ANYRES32=0x0, @ANYBLOB="200100000000000000000000000000020000000032000000fe8000000000000000000000000000bb00"/168], 0x1dc}}, 0x0) r1 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 39.639098476s ago: executing program 0 (id=698): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x890) (async) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000008c0)=ANY=[@ANYBLOB="2b000000150a01030000000002000009"], 0x14}, 0x1, 0x0, 0x0, 0x2000c018}, 0x10800) (async) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) accept$alg(r1, 0x0, 0x0) (async) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) (async) r4 = gettid() (async) sendmsg$kcm(r2, &(0x7f0000000600)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x3, 0x3, 0x0, {0xa, 0x4e22, 0x7fffffff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}}}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000480)="6dde9c8ef4fa38ae528787f5b3c08d8fa1342b2d4628e1705565b84d48f082ff87b6c732045d008cedfb21400459f2a3628cb9b1ed0abff4a7882f9f92e3f78e365cad9d22bb850bcb58049d8c2931f2ab74f1e934dfef9238f007227079b6303a2154af63c0b7b7b66d9d732e82cdc17ea7b444410c5b7153e79a1ea8b01afa99b8ffb9060c82dad99c0656d0bc9b2312c001d6dff0383b5c262a48c9d8d1ea1086", 0xa2}, {&(0x7f0000000540)="7409534db95e32f905290f5e4ee0610f3b8a7ddaa512f377ef955eae063924fe650ebce2c582d29ee70a24137db712862c9bd358dbf565a963b8d953e03f5ccb5db324b30eebbada15979e7ea7052e6c177d5da913f8db1934d3377463e0b64e37583375c6aea5bd6ede36058732a81d920908447c5b81dfdc7c20a5f1cfb0018df7bc6652b758c119390a", 0x8b}, {&(0x7f00000003c0)="3a6f69998292a3587966b5511cd9df7506ed2ee634efae4ce9", 0x19}, {&(0x7f0000000900)="a06b4bcb53f5be58db9723b6af2a5b97f39f29f331fcede1851e0eb84e412130a2a42fbb3be0867f8a37aff6e75e12ad5b4e94f1f2df92951b890914a8764fe3cf44dcc91ae9ec98c910548799b316d44f0d90d499c813c23b5c0a105ad98cedc97e3937c3df3b6656ac858a841887e3c7a575e349f53bde427c979345c141f751d7c427daba0b4ec9db26150c6d9e0979dfa3574862206b753406f50e6d21800c6a084854dbafd0189556988b5a1a", 0xaf}, {&(0x7f0000000840)="782f0e8447aab8ca20327533bff1450962cb36a9bb2ff7197fe1383a66e2ad78075e58da4c253d10bc8d118cf2f78cb612d788a83e4cfdc180a32f9e5010f1d13c3b9ad894cc29d303f24e1388654864c174d70788bb13839ab571059def1c7e07d9c04d", 0x64}, {&(0x7f00000009c0)="621f186a6fb8eb3928ca573a5ade5d36ebd75c013fc321b8596b61c099e1126c8658f0fa4050b60fe80746defc9e873da3b9a9a78c6ddd1a2bf17aecd56ef8642115f214c2e5097fc4fe7a0979b8a6fa2c642c80d38fbc28ebd3e99b8497f31dc44af9b907e548626e59b9245551ad312917b53cf6dc3c9009d77e2ee73ce62766e27de6c909c11b39e07a37399b5bc79b5f4ebfe73f0c919278ced3c8e4021dd2f3889190842ab9da44da", 0xab}, {&(0x7f0000000400)="c4855edd14a965c81ea04b4386ca9c", 0xf}], 0x7, &(0x7f0000000b00)=[{0xf8, 0x6, 0xd, "84761f7d180622377544cc4a6cf56ea3e55b62000cad3b7e4436ef8f99d66ba8b255f1763cccdf0c83e7bfd9ab4477c20f60bc30d9323f72e0e4d3f5a4b1aff7525735b227bda0f746ecd9902bf77b58c7519ac388a22f1e1a78cd2d8372a6d1293263a510ded257af916d90ee5e0d340de3d377ebf0a338f43b0d4965f7456fab2e4a8f87d7c41c6f5ad9a8a9b73076f65a3dc509e4b26da204326157a70fca2103212accba3157ccb44197f65f4c99b7ea6c373a3ec02b8bdaac806dd3f1671b7f06f67ced7b31fc9e59cfac0e7a434bfbd7b8d2acb9274bd4088bcac93cad0f2f3baf"}], 0xf8}, 0x4020000) (async) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r5, &(0x7f0000000200)=""/209, 0xd1) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) (async) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x7, @vifc_lcl_addr=@local, @multicast1}, 0x10) (async) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x810) (async, rerun: 32) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000080)={0x335, @tick, 0x52}) (rerun: 32) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0xc05c5340, &(0x7f0000000440)) (async) tkill(r4, 0x7) (async, rerun: 64) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x1fc, r3, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x171}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8394}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb8f1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8b73}]}, @TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "46cedaf5fd519f73d148870d4462733d643b8106b65c5825b0f82935"}}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x48de}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}]}, 0x1fc}}, 0x81) (rerun: 64) 39.255639065s ago: executing program 2 (id=699): exit(0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) exit(0x210) r3 = fcntl$dupfd(r0, 0x0, r2) io_uring_enter(r3, 0x6505, 0xe84e, 0x8, &(0x7f0000000000)={[0x8]}, 0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 39.126273919s ago: executing program 0 (id=700): openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d80)={0x78, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x39, 0xe, {{{}, {}, @device_b, @broadcast, @from_mac=@device_b}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0x1, 0x0, 0x8b, 0x8}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x158}]]}, 0x78}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@link_local, @random="82341801d5e3", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @remote, @link_local, @remote}}}}, 0x0) 39.040901947s ago: executing program 0 (id=701): openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) socket$rds(0x15, 0x5, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x27) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x0, 0xdc, &(0x7f0000000000)=ANY=[], 0x0) 0s ago: executing program 32 (id=691): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x0) lstat(0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101001) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48010}, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x8880}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sysvipc/sem\x00', 0x18, 0x0) preadv(r5, &(0x7f0000000340)=[{&(0x7f0000000380)=""/135, 0x87}], 0x1, 0x154, 0xf5ffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x80000001}) r6 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000080)={0xa002a008}) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) kernel console output (not intermixed with test programs): .831748][ T5896] usb 2-1: Using ep0 maxpacket: 8 [ 182.847638][ T5896] usb 2-1: config 162 has an invalid interface number: 84 but max is 2 [ 182.857039][ T5896] usb 2-1: config 162 has an invalid interface number: 3 but max is 2 [ 182.864953][ T7415] netlink: 48 bytes leftover after parsing attributes in process `syz.3.458'. [ 182.914954][ T5896] usb 2-1: config 162 has no interface number 0 [ 182.939855][ T5896] usb 2-1: config 162 has no interface number 1 [ 182.956024][ T5896] usb 2-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 183.021577][ T5896] usb 2-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 183.073174][ T5896] usb 2-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 183.098894][ T5896] usb 2-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 183.120602][ T5896] usb 2-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 183.153040][ T5896] usb 2-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 183.173590][ T5896] usb 2-1: config 162 interface 84 has no altsetting 0 [ 183.183257][ T5896] usb 2-1: config 162 interface 2 has no altsetting 0 [ 183.190099][ T5896] usb 2-1: config 162 interface 3 has no altsetting 0 [ 183.222339][ T5896] usb 2-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 183.232406][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.240507][ T5896] usb 2-1: Product: syz [ 183.271260][ T5896] usb 2-1: Manufacturer: syz [ 183.276184][ T5896] usb 2-1: SerialNumber: syz [ 183.411576][ T2153] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 183.561669][ T2153] usb 4-1: Using ep0 maxpacket: 32 [ 183.569417][ T2153] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 183.592131][ T2153] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 183.603286][ T2153] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 183.640845][ T2153] usb 4-1: Product: syz [ 183.683991][ T2153] usb 4-1: Manufacturer: syz [ 183.717407][ T2153] usb 4-1: SerialNumber: syz [ 183.752199][ T2153] usb 4-1: config 0 descriptor?? [ 183.796978][ T7431] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 183.809626][ T2153] hub 4-1:0.0: bad descriptor, ignoring hub [ 183.842697][ T2153] hub 4-1:0.0: probe with driver hub failed with error -5 [ 184.029723][ T55] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 184.056920][ T5896] usb 2-1: USB disconnect, device number 27 [ 184.953787][ T7452] x_tables: ip6_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 185.330467][ T7466] syz_tun: entered allmulticast mode [ 185.481658][ T2153] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 185.584361][ T7467] netlink: 'syz.2.476': attribute type 15 has an invalid length. [ 185.645613][ T7470] syz_tun: left allmulticast mode [ 185.661606][ T2153] usb 1-1: device descriptor read/64, error -71 [ 185.891743][ T5885] usb 4-1: USB disconnect, device number 25 [ 185.902903][ T2153] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 185.989735][ T7473] syz_tun: entered allmulticast mode [ 186.081527][ T2153] usb 1-1: device descriptor read/64, error -71 [ 186.182110][ T7482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.478'. [ 186.226757][ T7480] syz_tun: left allmulticast mode [ 186.271355][ T7480] netlink: 'syz.3.477': attribute type 15 has an invalid length. [ 186.345901][ T2153] usb usb1-port1: attempt power cycle [ 186.367320][ T7479] qrtr: Invalid version 50 [ 186.891545][ T2153] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 187.042271][ T2153] usb 1-1: device descriptor read/8, error -71 [ 187.281549][ T2153] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 187.395757][ T7497] netlink: 'syz.3.483': attribute type 4 has an invalid length. [ 187.405540][ T2153] usb 1-1: device descriptor read/8, error -71 [ 187.521892][ T2153] usb usb1-port1: unable to enumerate USB device [ 187.651728][ T7499] FAULT_INJECTION: forcing a failure. [ 187.651728][ T7499] name failslab, interval 1, probability 0, space 0, times 0 [ 187.731616][ T7499] CPU: 1 UID: 0 PID: 7499 Comm: syz.2.484 Not tainted 6.14.0-syzkaller-07422-gacb4f33713b9 #0 PREEMPT(full) [ 187.731649][ T7499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 187.731660][ T7499] Call Trace: [ 187.731665][ T7499] [ 187.731672][ T7499] dump_stack_lvl+0x241/0x360 [ 187.731697][ T7499] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.731717][ T7499] ? __pfx__printk+0x10/0x10 [ 187.731737][ T7499] ? __pfx___might_resched+0x10/0x10 [ 187.731754][ T7499] should_fail_ex+0x424/0x570 [ 187.731774][ T7499] should_failslab+0xac/0x100 [ 187.731794][ T7499] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 187.731816][ T7499] ? __alloc_skb+0x1c2/0x480 [ 187.731832][ T7499] __alloc_skb+0x1c2/0x480 [ 187.731847][ T7499] ? __pfx___alloc_skb+0x10/0x10 [ 187.731860][ T7499] ? __pfx_rtnl_newlink+0x10/0x10 [ 187.731884][ T7499] ? netlink_ack_tlv_len+0x6e/0x200 [ 187.731906][ T7499] netlink_ack+0x147/0xa70 [ 187.731923][ T7499] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 187.731947][ T7499] ? ref_tracker_free+0x63e/0x7e0 [ 187.731968][ T7499] netlink_rcv_skb+0x296/0x480 [ 187.731989][ T7499] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 187.732010][ T7499] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 187.732038][ T7499] ? netlink_deliver_tap+0x2e/0x1b0 [ 187.732059][ T7499] ? netlink_deliver_tap+0x2e/0x1b0 [ 187.732080][ T7499] netlink_unicast+0x7f8/0x9a0 [ 187.732102][ T7499] ? __pfx_netlink_unicast+0x10/0x10 [ 187.732119][ T7499] ? __virt_addr_valid+0x45f/0x530 [ 187.732138][ T7499] ? __phys_addr_symbol+0x2f/0x70 [ 187.732155][ T7499] ? __check_object_size+0x478/0x720 [ 187.732178][ T7499] netlink_sendmsg+0x8e8/0xce0 [ 187.732213][ T7499] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.732236][ T7499] ? aa_sock_msg_perm+0x91/0x160 [ 187.732254][ T7499] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.732274][ T7499] __sock_sendmsg+0x221/0x270 [ 187.732295][ T7499] ____sys_sendmsg+0x53c/0x870 [ 187.732318][ T7499] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.732332][ T7499] ? __fget_files+0x2a/0x420 [ 187.732347][ T7499] ? __fget_files+0x2a/0x420 [ 187.732364][ T7499] __sys_sendmsg+0x271/0x360 [ 187.732381][ T7499] ? __pfx___sys_sendmsg+0x10/0x10 [ 187.732422][ T7499] ? do_syscall_64+0xb6/0x230 [ 187.732446][ T7499] do_syscall_64+0xf3/0x230 [ 187.732465][ T7499] ? clear_bhb_loop+0x45/0xa0 [ 187.732482][ T7499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.732496][ T7499] RIP: 0033:0x7f9b3fd8d169 [ 187.732509][ T7499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.732521][ T7499] RSP: 002b:00007f9b3dbf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.732537][ T7499] RAX: ffffffffffffffda RBX: 00007f9b3ffa5fa0 RCX: 00007f9b3fd8d169 [ 187.732548][ T7499] RDX: 0000000000040000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 187.732558][ T7499] RBP: 00007f9b3dbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 187.732567][ T7499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 187.732576][ T7499] R13: 0000000000000000 R14: 00007f9b3ffa5fa0 R15: 00007f9b400cfa28 [ 187.732594][ T7499] [ 188.352148][ T10] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 188.491693][ T5888] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 188.530549][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 188.538519][ T7517] syz_tun: entered allmulticast mode [ 188.554434][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 188.584817][ T10] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 188.601840][ T10] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 188.629993][ T10] usb 2-1: Product: syz [ 188.638173][ T10] usb 2-1: Manufacturer: syz [ 188.650957][ T7517] netlink: 'syz.0.491': attribute type 15 has an invalid length. [ 188.658360][ T10] usb 2-1: SerialNumber: syz [ 188.665666][ T7519] syz_tun: left allmulticast mode [ 188.676830][ T10] usb 2-1: config 0 descriptor?? [ 188.690604][ T7506] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 188.704327][ T10] hub 2-1:0.0: bad descriptor, ignoring hub [ 188.713370][ T10] hub 2-1:0.0: probe with driver hub failed with error -5 [ 188.721308][ T5888] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 188.741041][ T5888] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 188.769174][ T5888] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 188.822815][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.848150][ T7513] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 188.864326][ T5888] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 190.091565][ T10] usb 1-1: new low-speed USB device number 38 using dummy_hcd [ 190.193083][ T5896] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 190.243720][ T5888] usb 2-1: USB disconnect, device number 28 [ 190.295186][ T10] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 190.310669][ T10] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 190.321129][ T10] usb 1-1: config 0 has no interface number 0 [ 190.342171][ T10] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 190.392007][ T10] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 190.392180][ T5896] usb 5-1: Using ep0 maxpacket: 8 [ 190.414361][ T10] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 190.423256][ T5896] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 190.434368][ T10] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 190.450033][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.481316][ T5896] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 190.482586][ T10] usb 1-1: config 0 descriptor?? [ 190.512217][ T5896] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 190.527173][ T5896] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 190.547405][ T5896] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 190.579379][ T5896] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 190.605643][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.639882][ T5896] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22 [ 190.748331][ T10] usb 1-1: USB disconnect, device number 38 [ 190.862635][ T7554] Dead loop on virtual device ip6_vti0, fix it urgently! [ 191.259003][ T10] usb 3-1: USB disconnect, device number 19 [ 191.444092][ T7564] syz_tun: entered allmulticast mode [ 191.472083][ T7564] netlink: 'syz.0.506': attribute type 15 has an invalid length. [ 191.492883][ T7565] syz_tun: left allmulticast mode [ 191.562819][ T7567] FAULT_INJECTION: forcing a failure. [ 191.562819][ T7567] name failslab, interval 1, probability 0, space 0, times 0 [ 191.597842][ T7567] CPU: 0 UID: 0 PID: 7567 Comm: syz.2.508 Not tainted 6.14.0-syzkaller-07422-gacb4f33713b9 #0 PREEMPT(full) [ 191.597874][ T7567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 191.597887][ T7567] Call Trace: [ 191.597893][ T7567] [ 191.597902][ T7567] dump_stack_lvl+0x241/0x360 [ 191.597938][ T7567] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.597965][ T7567] ? __pfx__printk+0x10/0x10 [ 191.597993][ T7567] ? __pfx___might_resched+0x10/0x10 [ 191.598045][ T7567] should_fail_ex+0x424/0x570 [ 191.598073][ T7567] should_failslab+0xac/0x100 [ 191.598102][ T7567] __kmalloc_cache_noprof+0x73/0x370 [ 191.598131][ T7567] ? assoc_array_insert+0x523/0x3450 [ 191.598155][ T7567] assoc_array_insert+0x523/0x3450 [ 191.598175][ T7567] ? __mutex_lock+0x380/0x10c0 [ 191.598213][ T7567] ? __pfx_assoc_array_insert+0x10/0x10 [ 191.598240][ T7567] ? __pfx_down_write+0x10/0x10 [ 191.598273][ T7567] __key_link_begin+0xe5/0x1f0 [ 191.598301][ T7567] key_link+0x167/0x460 [ 191.598330][ T7567] ? __pfx_key_link+0x10/0x10 [ 191.598357][ T7567] ? ksys_write+0x24e/0x2d0 [ 191.598383][ T7567] __se_sys_keyctl+0x8af/0x940 [ 191.598416][ T7567] ? __pfx___se_sys_keyctl+0x10/0x10 [ 191.598450][ T7567] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 191.598477][ T7567] ? __fget_files+0x2a/0x420 [ 191.598498][ T7567] ? __fget_files+0x2a/0x420 [ 191.598521][ T7567] ? fput+0x9b/0xd0 [ 191.598538][ T7567] ? ksys_write+0x275/0x2d0 [ 191.598570][ T7567] ? __x64_sys_keyctl+0x20/0xc0 [ 191.598603][ T7567] do_syscall_64+0xf3/0x230 [ 191.598630][ T7567] ? clear_bhb_loop+0x45/0xa0 [ 191.598654][ T7567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.598674][ T7567] RIP: 0033:0x7f9b3fd8d169 [ 191.598692][ T7567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.598709][ T7567] RSP: 002b:00007f9b3dbf6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 191.598732][ T7567] RAX: ffffffffffffffda RBX: 00007f9b3ffa5fa0 RCX: 00007f9b3fd8d169 [ 191.598747][ T7567] RDX: 000000000557b1e8 RSI: 00000000334ee072 RDI: 0000000000000008 [ 191.598760][ T7567] RBP: 00007f9b3dbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 191.598773][ T7567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.598785][ T7567] R13: 0000000000000000 R14: 00007f9b3ffa5fa0 R15: 00007f9b400cfa28 [ 191.598811][ T7567] [ 192.969819][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 192.969836][ T30] audit: type=1326 audit(1743174316.495:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7582 comm="syz.0.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3938d169 code=0x7ffc0000 [ 193.105605][ T30] audit: type=1326 audit(1743174316.495:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7582 comm="syz.0.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f0c3938d169 code=0x7ffc0000 [ 193.136033][ T30] audit: type=1326 audit(1743174316.495:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7582 comm="syz.0.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3938d169 code=0x7ffc0000 [ 193.221544][ T5888] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 193.254421][ T30] audit: type=1326 audit(1743174316.495:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7582 comm="syz.0.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f0c3938d169 code=0x7ffc0000 [ 193.319910][ T30] audit: type=1326 audit(1743174316.495:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7582 comm="syz.0.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0c39384127 code=0x7ffc0000 [ 193.426564][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 193.461709][ T30] audit: type=1326 audit(1743174316.495:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7582 comm="syz.0.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0c39329359 code=0x7ffc0000 [ 193.484882][ T5888] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 193.529139][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 193.577500][ T5888] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 193.608015][ T30] audit: type=1326 audit(1743174316.495:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7582 comm="syz.0.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3938d169 code=0x7ffc0000 [ 193.640935][ T5885] usb 5-1: USB disconnect, device number 29 [ 193.678977][ T5888] usb 1-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 193.724880][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.743379][ T30] audit: type=1326 audit(1743174316.495:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7582 comm="syz.0.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0c3938d169 code=0x7ffc0000 [ 193.796820][ T5888] usb 1-1: Product: syz [ 193.801052][ T5888] usb 1-1: Manufacturer: syz [ 193.821464][ T5888] usb 1-1: SerialNumber: syz [ 193.861924][ T5888] usb 1-1: config 0 descriptor?? [ 193.867106][ T30] audit: type=1326 audit(1743174316.495:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7582 comm="syz.0.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3938d169 code=0x7ffc0000 [ 193.923601][ T5888] kvaser_usb 1-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 193.942023][ T30] audit: type=1326 audit(1743174316.495:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7582 comm="syz.0.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0c3938d169 code=0x7ffc0000 [ 194.119722][ T5888] usb 1-1: USB disconnect, device number 39 [ 194.444938][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.451789][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.652675][ T5888] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 194.682062][ T7609] program syz.4.521 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 194.734550][ T7609] netlink: 56 bytes leftover after parsing attributes in process `syz.4.521'. [ 194.768783][ T7615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.783037][ T7615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.802019][ T7615] syzkaller1: entered promiscuous mode [ 194.810433][ T7615] syzkaller1: entered allmulticast mode [ 194.843173][ T5888] usb 2-1: config index 0 descriptor too short (expected 12592, got 36) [ 194.861979][ T5888] usb 2-1: config 55 has too many interfaces: 55, using maximum allowed: 32 [ 194.909988][ T7620] netlink: 24 bytes leftover after parsing attributes in process `syz.3.515'. [ 194.920963][ T5888] usb 2-1: config 55 has an invalid descriptor of length 55, skipping remainder of the config [ 194.950914][ T5888] usb 2-1: config 55 has 0 interfaces, different from the descriptor's value: 55 [ 194.977437][ T5888] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 195.020168][ T5888] usb 2-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 195.099910][ T5888] usb 2-1: Product: syz [ 195.140864][ T5888] usb 2-1: Manufacturer: syz [ 195.155733][ T5888] usb 2-1: SerialNumber: syz [ 195.381666][ T5888] usb 2-1: USB disconnect, device number 29 [ 195.659438][ T7627] netlink: 'syz.0.524': attribute type 21 has an invalid length. [ 195.667488][ T7627] netlink: 156 bytes leftover after parsing attributes in process `syz.0.524'. [ 197.521888][ T2153] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 197.671658][ T2153] usb 1-1: device descriptor read/64, error -71 [ 197.786128][ T7667] netlink: 68 bytes leftover after parsing attributes in process `syz.2.536'. [ 197.961093][ T2153] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 198.108321][ T2153] usb 1-1: device descriptor read/64, error -71 [ 198.231743][ T2153] usb usb1-port1: attempt power cycle [ 198.611834][ T2153] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 198.633743][ T2153] usb 1-1: device descriptor read/8, error -71 [ 198.872429][ T2153] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 198.956642][ T2153] usb 1-1: device descriptor read/8, error -71 [ 199.071854][ T2153] usb usb1-port1: unable to enumerate USB device [ 199.393445][ T7682] fuse: root generation should be zero [ 199.999274][ T7696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.545'. [ 200.439105][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 200.439122][ T30] audit: type=1800 audit(1743174323.975:663): pid=7708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.551" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 200.510031][ T5885] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 200.731479][ T5885] usb 2-1: Using ep0 maxpacket: 8 [ 200.823876][ T5885] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.100759][ T5885] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 201.250781][ T5885] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 201.280122][ T5885] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 201.308877][ T5885] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 201.331365][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.364881][ T5885] hub 2-1:1.0: bad descriptor, ignoring hub [ 201.374680][ T7724] netlink: 12 bytes leftover after parsing attributes in process `syz.2.556'. [ 201.399209][ T5885] hub 2-1:1.0: probe with driver hub failed with error -5 [ 201.419653][ T5885] cdc_wdm 2-1:1.0: skipping garbage [ 201.436757][ T5885] cdc_wdm 2-1:1.0: skipping garbage [ 201.458265][ T5885] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 201.476010][ T5885] cdc_wdm 2-1:1.0: Unknown control protocol [ 201.502191][ T5888] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 201.559077][ T7700] FAULT_INJECTION: forcing a failure. [ 201.559077][ T7700] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.608776][ T7700] CPU: 1 UID: 0 PID: 7700 Comm: syz.1.547 Not tainted 6.14.0-syzkaller-07422-gacb4f33713b9 #0 PREEMPT(full) [ 201.608809][ T7700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 201.608823][ T7700] Call Trace: [ 201.608831][ T7700] [ 201.608839][ T7700] dump_stack_lvl+0x241/0x360 [ 201.608875][ T7700] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.608903][ T7700] ? __pfx__printk+0x10/0x10 [ 201.608940][ T7700] should_fail_ex+0x424/0x570 [ 201.608968][ T7700] _copy_from_user+0x2d/0xb0 [ 201.608989][ T7700] kstrtouint_from_user+0xd6/0x190 [ 201.609018][ T7700] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 201.609049][ T7700] ? __lock_acquire+0xad5/0xd80 [ 201.609089][ T7700] proc_fail_nth_write+0xac/0x2d0 [ 201.609120][ T7700] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 201.609147][ T7700] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 201.609174][ T7700] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 201.609197][ T7700] vfs_write+0x2bc/0xd10 [ 201.609230][ T7700] ? fdget_pos+0x247/0x310 [ 201.609252][ T7700] ? __pfx_vfs_write+0x10/0x10 [ 201.609279][ T7700] ? __fget_files+0x2a/0x420 [ 201.609299][ T7700] ? __fget_files+0x39d/0x420 [ 201.609317][ T7700] ? __fget_files+0x2a/0x420 [ 201.609343][ T7700] ksys_write+0x19d/0x2d0 [ 201.609367][ T7700] ? __pfx_ksys_write+0x10/0x10 [ 201.609395][ T7700] ? do_syscall_64+0xb6/0x230 [ 201.609426][ T7700] do_syscall_64+0xf3/0x230 [ 201.609454][ T7700] ? clear_bhb_loop+0x45/0xa0 [ 201.609477][ T7700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.609498][ T7700] RIP: 0033:0x7f6f4e78bc1f [ 201.609517][ T7700] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 201.609534][ T7700] RSP: 002b:00007f6f4f588030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 201.609557][ T7700] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6f4e78bc1f [ 201.609572][ T7700] RDX: 0000000000000001 RSI: 00007f6f4f5880a0 RDI: 0000000000000004 [ 201.609585][ T7700] RBP: 00007f6f4f588090 R08: 0000000000000000 R09: 00007f6f4f587987 [ 201.609599][ T7700] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 201.609611][ T7700] R13: 0000000000000000 R14: 00007f6f4e9a5fa0 R15: 00007f6f4eacfa28 [ 201.609637][ T7700] [ 201.833771][ T5888] usb 5-1: device descriptor read/64, error -71 [ 202.077431][ T5889] usb 2-1: USB disconnect, device number 30 [ 202.087012][ T5888] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 202.095921][ T5885] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 202.261697][ T5888] usb 5-1: device descriptor read/64, error -71 [ 202.304533][ T5885] usb 3-1: Using ep0 maxpacket: 8 [ 202.320339][ T5885] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 202.330438][ T5885] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 202.339318][ T5885] usb 3-1: Product: syz [ 202.383347][ T5888] usb usb5-port1: attempt power cycle [ 202.399166][ T5885] usb 3-1: Manufacturer: syz [ 202.402213][ T7732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.559'. [ 202.425076][ T5885] usb 3-1: SerialNumber: syz [ 202.461536][ T5889] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 202.472366][ T5885] usb 3-1: config 0 descriptor?? [ 202.531257][ T5885] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 202.641554][ T5889] usb 2-1: Using ep0 maxpacket: 16 [ 202.664600][ T5889] usb 2-1: config 0 has no interfaces? [ 202.671914][ T5889] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 202.684205][ T7728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.693342][ T7728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.781475][ T5889] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 202.789581][ T5889] usb 2-1: Manufacturer: syz [ 202.819473][ T5888] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 202.837806][ T5889] usb 2-1: config 0 descriptor?? [ 202.873271][ T5888] usb 5-1: device descriptor read/8, error -71 [ 203.151602][ T5888] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 203.155184][ T2153] usb 2-1: USB disconnect, device number 31 [ 203.176389][ T5885] gspca_zc3xx: reg_w_i err -110 [ 203.181947][ T5885] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 203.192237][ T5888] usb 5-1: device descriptor read/8, error -71 [ 203.301678][ T5888] usb usb5-port1: unable to enumerate USB device [ 203.931505][ T5885] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 204.241551][ T5885] usb 2-1: Using ep0 maxpacket: 16 [ 204.291525][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.331782][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.411524][ T5885] usb 2-1: New USB device found, idVendor=1b96, idProduct=0087, bcdDevice= 0.00 [ 204.427993][ T7757] netlink: 20 bytes leftover after parsing attributes in process `syz.3.566'. [ 204.461918][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.489483][ T5885] usb 2-1: config 0 descriptor?? [ 204.547677][ T7762] FAULT_INJECTION: forcing a failure. [ 204.547677][ T7762] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.587567][ T7762] CPU: 0 UID: 0 PID: 7762 Comm: syz.4.568 Not tainted 6.14.0-syzkaller-07422-gacb4f33713b9 #0 PREEMPT(full) [ 204.587601][ T7762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 204.587614][ T7762] Call Trace: [ 204.587622][ T7762] [ 204.587631][ T7762] dump_stack_lvl+0x241/0x360 [ 204.587670][ T7762] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.587698][ T7762] ? __pfx__printk+0x10/0x10 [ 204.587733][ T7762] should_fail_ex+0x424/0x570 [ 204.587760][ T7762] _copy_from_user+0x2d/0xb0 [ 204.587780][ T7762] i2cdev_ioctl_smbus+0x341/0x720 [ 204.587810][ T7762] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 204.587846][ T7762] i2cdev_ioctl+0x6ef/0xa20 [ 204.587868][ T7762] ? __fget_files+0x2a/0x420 [ 204.587887][ T7762] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 204.587924][ T7762] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 204.587949][ T7762] __se_sys_ioctl+0xf1/0x160 [ 204.587975][ T7762] do_syscall_64+0xf3/0x230 [ 204.588004][ T7762] ? clear_bhb_loop+0x45/0xa0 [ 204.588027][ T7762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.588047][ T7762] RIP: 0033:0x7f1bbb18d169 [ 204.588065][ T7762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.588083][ T7762] RSP: 002b:00007f1bbc09a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 204.588105][ T7762] RAX: ffffffffffffffda RBX: 00007f1bbb3a5fa0 RCX: 00007f1bbb18d169 [ 204.588121][ T7762] RDX: 00002000000000c0 RSI: 0000000000000720 RDI: 0000000000000003 [ 204.588134][ T7762] RBP: 00007f1bbc09a090 R08: 0000000000000000 R09: 0000000000000000 [ 204.588147][ T7762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.588159][ T7762] R13: 0000000000000000 R14: 00007f1bbb3a5fa0 R15: 00007f1bbb4cfa28 [ 204.588184][ T7762] [ 204.971789][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 205.134570][ T10] usb 4-1: config 0 has no interfaces? [ 205.144047][ T10] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 205.153616][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.172124][ T2153] usb 3-1: USB disconnect, device number 20 [ 205.190817][ T10] usb 4-1: Product: syz [ 205.203704][ T10] usb 4-1: Manufacturer: syz [ 205.215452][ T10] usb 4-1: SerialNumber: syz [ 205.235268][ T10] usb 4-1: config 0 descriptor?? [ 206.533608][ T5885] usbhid 2-1:0.0: can't add hid device: -71 [ 206.563186][ T5885] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 206.586333][ T5885] usb 2-1: USB disconnect, device number 32 [ 206.689182][ T7780] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 206.721082][ T7780] bond0: (slave lo): Error: Device can not be enslaved while up [ 206.761527][ T5889] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 206.933346][ T5889] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 206.953369][ T5889] usb 3-1: config 0 has no interface number 0 [ 206.968052][ T5889] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 206.992029][ T5889] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 207.006481][ T5889] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 207.017924][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.036139][ T5889] usb 3-1: config 0 descriptor?? [ 207.045691][ T7782] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 207.067510][ T5885] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 207.083080][ T5889] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 207.241586][ T5885] usb 2-1: Using ep0 maxpacket: 32 [ 207.249744][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.271078][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.311654][ T5885] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 207.333029][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.360774][ T5889] usb 4-1: USB disconnect, device number 26 [ 207.362618][ T7803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.585'. [ 207.395758][ T5885] usb 2-1: config 0 descriptor?? [ 207.410210][ T7808] netlink: 16 bytes leftover after parsing attributes in process `syz.2.575'. [ 207.456146][ T7808] netlink: 2 bytes leftover after parsing attributes in process `syz.2.575'. [ 207.510235][ T7782] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 207.528240][ T7782] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 207.547018][ T7782] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 207.569098][ T7782] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 207.581537][ T7782] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 207.846602][ T5885] savu 0003:1E7D:2D5A.0008: hiddev1,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 207.851537][ T2153] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 207.866132][ T5887] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 208.033240][ T7785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.051744][ T2153] usb 5-1: Using ep0 maxpacket: 8 [ 208.063560][ T5887] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 208.085400][ T2153] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 208.094958][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.097748][ T7820] xt_hashlimit: invalid interval [ 208.106874][ T2153] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 208.116526][ T5887] usb 4-1: Product: syz [ 208.150461][ T5885] usb 3-1: USB disconnect, device number 21 [ 208.153824][ T5887] usb 4-1: Manufacturer: syz [ 208.170142][ T2153] usb 5-1: Product: syz [ 208.195956][ T5887] usb 4-1: SerialNumber: syz [ 208.200661][ T2153] usb 5-1: Manufacturer: syz [ 208.220367][ T5887] usb 4-1: config 0 descriptor?? [ 208.229635][ T2153] usb 5-1: SerialNumber: syz [ 208.239328][ T2153] usb 5-1: config 0 descriptor?? [ 208.249986][ T2153] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 208.451752][ T7807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.461852][ T7807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.621627][ T5885] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 208.694187][ T5889] usb 2-1: USB disconnect, device number 33 [ 208.742416][ T47] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 208.751499][ T5885] usb 1-1: device descriptor read/64, error -71 [ 208.763719][ T2153] gspca_zc3xx: reg_w_i err -110 [ 208.769573][ T2153] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 208.916588][ T47] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 208.930662][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.031617][ T5885] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 209.060663][ T47] usb 3-1: config 0 descriptor?? [ 209.112173][ T47] cp210x 3-1:0.0: cp210x converter detected [ 209.172307][ T5885] usb 1-1: device descriptor read/64, error -71 [ 209.261966][ T5887] usb 4-1: non-Atmel transceiver xxxx6300 [ 209.281933][ T5885] usb usb1-port1: attempt power cycle [ 209.481526][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 209.524098][ T47] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 209.537789][ T7836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.598'. [ 209.580186][ T7839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.589925][ T7839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.621826][ T47] usb 3-1: cp210x converter now attached to ttyUSB0 [ 209.629025][ T55] Bluetooth: hci1: command 0x0c1a tx timeout [ 209.633236][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 209.661129][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 209.661559][ T55] Bluetooth: hci4: command 0x0405 tx timeout [ 209.691534][ T5885] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 209.732146][ T5885] usb 1-1: device descriptor read/8, error -71 [ 209.756014][ T30] audit: type=1326 audit(1743174333.295:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7825 comm="syz.2.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b3fd8d169 code=0x7ffc0000 [ 209.778277][ C0] vkms_vblank_simulate: vblank timer overrun [ 209.789477][ T47] usb 3-1: USB disconnect, device number 22 [ 209.816881][ T47] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 209.850153][ T30] audit: type=1326 audit(1743174333.295:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7825 comm="syz.2.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f9b3fd8d169 code=0x7ffc0000 [ 209.916146][ T30] audit: type=1326 audit(1743174333.295:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7825 comm="syz.2.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b3fd8d169 code=0x7ffc0000 [ 210.011507][ T5885] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 210.065160][ T7845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.599'. [ 210.105529][ T5885] usb 1-1: device descriptor read/8, error -71 [ 210.145681][ T7844] qrtr: Invalid version 50 [ 210.176874][ T30] audit: type=1326 audit(1743174333.295:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7825 comm="syz.2.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9b3fd8d169 code=0x7ffc0000 [ 210.231929][ T30] audit: type=1326 audit(1743174333.295:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7825 comm="syz.2.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b3fd8d169 code=0x7ffc0000 [ 210.254990][ T5885] usb usb1-port1: unable to enumerate USB device [ 210.261807][ T47] cp210x 3-1:0.0: device disconnected [ 210.309707][ T5887] usb 4-1: Firmware version (0.0) predates our first public release. [ 210.333548][ T5887] usb 4-1: Please update to version 0.2 or newer [ 210.356031][ T5887] usb 4-1: atusb_probe: initialization failed, error = -19 [ 210.363795][ T30] audit: type=1326 audit(1743174333.295:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7825 comm="syz.2.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b3fd8d169 code=0x7ffc0000 [ 210.921657][ T5885] usb 5-1: USB disconnect, device number 34 [ 211.162690][ T7855] netlink: 12 bytes leftover after parsing attributes in process `syz.2.602'. [ 211.430318][ T5885] usb 4-1: USB disconnect, device number 27 [ 211.627393][ T7866] netlink: 'syz.3.605': attribute type 4 has an invalid length. [ 211.926408][ T7880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.609'. [ 212.160386][ T7886] netlink: 56 bytes leftover after parsing attributes in process `syz.4.613'. [ 212.178048][ T7886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.613'. [ 212.441866][ T5885] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 212.463632][ T7897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.615'. [ 212.523871][ T7897] qrtr: Invalid version 50 [ 212.611724][ T5887] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 212.711893][ T5885] usb 5-1: Using ep0 maxpacket: 16 [ 212.883959][ T5885] usb 5-1: too many configurations: 245, using maximum allowed: 8 [ 212.948207][ T5885] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 212.983157][ T5885] usb 5-1: can't read configurations, error -61 [ 212.989756][ T5887] usb 4-1: Using ep0 maxpacket: 8 [ 213.051670][ T5887] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 213.086478][ T5887] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 213.145177][ T5885] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 213.158739][ T5887] usb 4-1: Product: syz [ 213.182576][ T5887] usb 4-1: Manufacturer: syz [ 213.188561][ T5887] usb 4-1: SerialNumber: syz [ 213.242693][ T5887] usb 4-1: config 0 descriptor?? [ 213.281886][ T5887] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 213.394649][ T5885] usb 5-1: Using ep0 maxpacket: 16 [ 213.421638][ T5885] usb 5-1: too many configurations: 245, using maximum allowed: 8 [ 213.637536][ T7894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.660818][ T7894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.670088][ T5885] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 213.686891][ T5885] usb 5-1: can't read configurations, error -61 [ 213.697783][ T5885] usb usb5-port1: attempt power cycle [ 213.802082][ T5887] gspca_zc3xx: reg_w_i err -110 [ 213.807047][ T5887] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 213.931522][ T10] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 214.082620][ T5885] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 214.112280][ T5885] usb 5-1: Using ep0 maxpacket: 16 [ 214.125228][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 214.136777][ T5885] usb 5-1: too many configurations: 245, using maximum allowed: 8 [ 214.144776][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 214.157595][ T5885] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 214.212984][ T5885] usb 5-1: can't read configurations, error -61 [ 214.230142][ T10] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 214.265821][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.352267][ T10] usb 2-1: config 0 descriptor?? [ 214.364508][ T7905] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 214.396473][ T5885] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 214.446099][ T5885] usb 5-1: Using ep0 maxpacket: 16 [ 214.457183][ T5885] usb 5-1: too many configurations: 245, using maximum allowed: 8 [ 214.480953][ T5885] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 214.489032][ T5885] usb 5-1: can't read configurations, error -61 [ 214.519490][ T5885] usb usb5-port1: unable to enumerate USB device [ 214.791060][ T7905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.800473][ T7905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.592863][ T7916] FAULT_INJECTION: forcing a failure. [ 215.592863][ T7916] name failslab, interval 1, probability 0, space 0, times 0 [ 215.691749][ T7916] CPU: 1 UID: 0 PID: 7916 Comm: syz.2.620 Not tainted 6.14.0-syzkaller-07422-gacb4f33713b9 #0 PREEMPT(full) [ 215.691773][ T7916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 215.691783][ T7916] Call Trace: [ 215.691788][ T7916] [ 215.691794][ T7916] dump_stack_lvl+0x241/0x360 [ 215.691820][ T7916] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.691840][ T7916] ? __pfx__printk+0x10/0x10 [ 215.691860][ T7916] ? __pfx___might_resched+0x10/0x10 [ 215.691879][ T7916] should_fail_ex+0x424/0x570 [ 215.691900][ T7916] should_failslab+0xac/0x100 [ 215.691921][ T7916] __kmalloc_cache_noprof+0x73/0x370 [ 215.691942][ T7916] ? rtnl_newlink+0x144/0x1fe0 [ 215.691965][ T7916] rtnl_newlink+0x144/0x1fe0 [ 215.691985][ T7916] ? stack_depot_save_flags+0x3a/0x970 [ 215.692006][ T7916] ? kasan_save_track+0x51/0x80 [ 215.692022][ T7916] ? kasan_save_track+0x3f/0x80 [ 215.692037][ T7916] ? kasan_save_free_info+0x40/0x50 [ 215.692049][ T7916] ? __kasan_slab_free+0x59/0x70 [ 215.692067][ T7916] ? __pfx_rtnl_newlink+0x10/0x10 [ 215.692086][ T7916] ? __netlink_deliver_tap+0x561/0x7f0 [ 215.692106][ T7916] ? netlink_deliver_tap+0x19d/0x1b0 [ 215.692125][ T7916] ? netlink_unicast+0x7c6/0x9a0 [ 215.692141][ T7916] ? netlink_sendmsg+0x8e8/0xce0 [ 215.692161][ T7916] ? __sock_sendmsg+0x221/0x270 [ 215.692178][ T7916] ? ____sys_sendmsg+0x53c/0x870 [ 215.692193][ T7916] ? __sys_sendmsg+0x271/0x360 [ 215.692206][ T7916] ? do_syscall_64+0xf3/0x230 [ 215.692225][ T7916] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.692257][ T7916] ? kasan_quarantine_put+0xdc/0x230 [ 215.692272][ T7916] ? lockdep_hardirqs_on+0x9d/0x150 [ 215.692292][ T7916] ? nlmon_xmit+0xaf/0x100 [ 215.692309][ T7916] ? __local_bh_enable_ip+0x168/0x200 [ 215.692337][ T7916] ? lockdep_hardirqs_on+0x9d/0x150 [ 215.692359][ T7916] ? aa_get_newest_label+0x101/0x6f0 [ 215.692377][ T7916] ? __lock_acquire+0xad5/0xd80 [ 215.692409][ T7916] ? __pfx_rtnl_newlink+0x10/0x10 [ 215.692430][ T7916] rtnetlink_rcv_msg+0x80f/0xd70 [ 215.692450][ T7916] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 215.692472][ T7916] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 215.692496][ T7916] ? ref_tracker_free+0x63e/0x7e0 [ 215.692517][ T7916] netlink_rcv_skb+0x208/0x480 [ 215.692537][ T7916] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 215.692558][ T7916] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 215.692587][ T7916] ? netlink_deliver_tap+0x2e/0x1b0 [ 215.692608][ T7916] ? netlink_deliver_tap+0x2e/0x1b0 [ 215.692629][ T7916] netlink_unicast+0x7f8/0x9a0 [ 215.692657][ T7916] ? __pfx_netlink_unicast+0x10/0x10 [ 215.692682][ T7916] ? __virt_addr_valid+0x45f/0x530 [ 215.692709][ T7916] ? __phys_addr_symbol+0x2f/0x70 [ 215.692735][ T7916] ? __check_object_size+0x478/0x720 [ 215.692770][ T7916] netlink_sendmsg+0x8e8/0xce0 [ 215.692797][ T7916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.692819][ T7916] ? aa_sock_msg_perm+0x91/0x160 [ 215.692837][ T7916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.692856][ T7916] __sock_sendmsg+0x221/0x270 [ 215.692877][ T7916] ____sys_sendmsg+0x53c/0x870 [ 215.692898][ T7916] ? __pfx_____sys_sendmsg+0x10/0x10 [ 215.692912][ T7916] ? __fget_files+0x2a/0x420 [ 215.692927][ T7916] ? __fget_files+0x2a/0x420 [ 215.692944][ T7916] __sys_sendmsg+0x271/0x360 [ 215.692962][ T7916] ? __pfx___sys_sendmsg+0x10/0x10 [ 215.693002][ T7916] ? do_syscall_64+0xb6/0x230 [ 215.693023][ T7916] do_syscall_64+0xf3/0x230 [ 215.693042][ T7916] ? clear_bhb_loop+0x45/0xa0 [ 215.693059][ T7916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.693073][ T7916] RIP: 0033:0x7f9b3fd8d169 [ 215.693086][ T7916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.693098][ T7916] RSP: 002b:00007f9b3dbf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.693115][ T7916] RAX: ffffffffffffffda RBX: 00007f9b3ffa5fa0 RCX: 00007f9b3fd8d169 [ 215.693126][ T7916] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 215.693135][ T7916] RBP: 00007f9b3dbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 215.693144][ T7916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.693153][ T7916] R13: 0000000000000000 R14: 00007f9b3ffa5fa0 R15: 00007f9b400cfa28 [ 215.693171][ T7916] [ 216.481576][ T5889] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 216.619171][ T5887] usb 4-1: USB disconnect, device number 28 [ 216.664886][ T5889] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 216.678723][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.728746][ T5889] usb 5-1: Product: syz [ 216.751586][ T5889] usb 5-1: Manufacturer: syz [ 216.756265][ T5889] usb 5-1: SerialNumber: syz [ 216.781758][ T30] audit: type=1326 audit(1743174340.315:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.3.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb198d169 code=0x7ffc0000 [ 216.812104][ T7928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.625'. [ 216.833137][ T5889] usb 5-1: config 0 descriptor?? [ 216.890125][ T30] audit: type=1326 audit(1743174340.315:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.3.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f3fb198d169 code=0x7ffc0000 [ 216.971849][ T30] audit: type=1326 audit(1743174340.315:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.3.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb198d169 code=0x7ffc0000 [ 217.077770][ T30] audit: type=1326 audit(1743174340.315:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.3.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb198d169 code=0x7ffc0000 [ 217.256229][ T5885] IPVS: starting estimator thread 0... [ 217.266716][ T7941] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 217.284818][ T7946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.630'. [ 217.341980][ T7946] qrtr: Invalid version 50 [ 217.356376][ T7950] FAULT_INJECTION: forcing a failure. [ 217.356376][ T7950] name failslab, interval 1, probability 0, space 0, times 0 [ 217.390534][ T7950] CPU: 1 UID: 0 PID: 7950 Comm: syz.3.633 Not tainted 6.14.0-syzkaller-07422-gacb4f33713b9 #0 PREEMPT(full) [ 217.390568][ T7950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 217.390582][ T7950] Call Trace: [ 217.390589][ T7950] [ 217.390599][ T7950] dump_stack_lvl+0x241/0x360 [ 217.390634][ T7950] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.390662][ T7950] ? __pfx__printk+0x10/0x10 [ 217.390689][ T7950] ? __pfx___might_resched+0x10/0x10 [ 217.390715][ T7950] should_fail_ex+0x424/0x570 [ 217.390742][ T7950] should_failslab+0xac/0x100 [ 217.390776][ T7950] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 217.390807][ T7950] ? __alloc_skb+0x1c2/0x480 [ 217.390828][ T7950] __alloc_skb+0x1c2/0x480 [ 217.390851][ T7950] ? __pfx___alloc_skb+0x10/0x10 [ 217.390870][ T7950] ? netlink_autobind+0xd6/0x2f0 [ 217.390901][ T7950] ? netlink_autobind+0x2b0/0x2f0 [ 217.390934][ T7950] netlink_sendmsg+0x65c/0xce0 [ 217.390972][ T7950] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.391004][ T7950] ? aa_sock_msg_perm+0x91/0x160 [ 217.391028][ T7950] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.391056][ T7950] __sock_sendmsg+0x221/0x270 [ 217.391085][ T7950] ____sys_sendmsg+0x53c/0x870 [ 217.391113][ T7950] ? __pfx_____sys_sendmsg+0x10/0x10 [ 217.391133][ T7950] ? __fget_files+0x2a/0x420 [ 217.391154][ T7950] ? __fget_files+0x2a/0x420 [ 217.391178][ T7950] __sys_sendmsg+0x271/0x360 [ 217.391203][ T7950] ? __pfx___sys_sendmsg+0x10/0x10 [ 217.391261][ T7950] ? do_syscall_64+0xb6/0x230 [ 217.391292][ T7950] do_syscall_64+0xf3/0x230 [ 217.391319][ T7950] ? clear_bhb_loop+0x45/0xa0 [ 217.391343][ T7950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.391362][ T7950] RIP: 0033:0x7f3fb198d169 [ 217.391379][ T7950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.391395][ T7950] RSP: 002b:00007f3fb282d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.391418][ T7950] RAX: ffffffffffffffda RBX: 00007f3fb1ba5fa0 RCX: 00007f3fb198d169 [ 217.391433][ T7950] RDX: 0000000004040080 RSI: 0000200000001200 RDI: 0000000000000003 [ 217.391446][ T7950] RBP: 00007f3fb282d090 R08: 0000000000000000 R09: 0000000000000000 [ 217.391470][ T7950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.391482][ T7950] R13: 0000000000000000 R14: 00007f3fb1ba5fa0 R15: 00007f3fb1ccfa28 [ 217.391507][ T7950] [ 217.643273][ T7948] IPVS: using max 32 ests per chain, 76800 per kthread [ 217.653749][ T7953] netlink: 28 bytes leftover after parsing attributes in process `syz.1.634'. [ 217.662832][ T7953] netlink: 28 bytes leftover after parsing attributes in process `syz.1.634'. [ 217.675785][ T7953] erspan0: entered promiscuous mode [ 217.682298][ T7953] gretap0: entered promiscuous mode [ 217.941555][ T10] ath6kl: Failed to submit usb control message: -71 [ 217.948382][ T10] ath6kl: unable to send the bmi data to the device: -71 [ 217.992803][ T10] ath6kl: Unable to send get target info: -71 [ 218.289548][ T10] ath6kl: Failed to init ath6kl core: -71 [ 218.313988][ T10] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 218.393398][ T10] usb 2-1: USB disconnect, device number 34 [ 218.623377][ T5889] usb 5-1: Firmware version (0.0) predates our first public release. [ 218.634013][ T5889] usb 5-1: Please update to version 0.2 or newer [ 218.671533][ T5885] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 218.695240][ T5889] usb 5-1: USB disconnect, device number 39 [ 218.831523][ T5885] usb 4-1: Using ep0 maxpacket: 8 [ 218.848197][ T5885] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 218.904030][ T5885] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 218.916460][ T5885] usb 4-1: Product: syz [ 218.920934][ T5885] usb 4-1: Manufacturer: syz [ 218.928852][ T5885] usb 4-1: SerialNumber: syz [ 218.946597][ T5885] usb 4-1: config 0 descriptor?? [ 218.994860][ T5885] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 219.188268][ T7967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.199379][ T7967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.574161][ T5885] gspca_zc3xx: reg_w_i err -110 [ 219.597019][ T5885] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 219.874191][ T30] audit: type=1326 audit(1743174343.405:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7980 comm="syz.0.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3938d169 code=0x7ffc0000 [ 219.921143][ T30] audit: type=1326 audit(1743174343.405:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7980 comm="syz.0.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3938d169 code=0x7ffc0000 [ 219.968977][ T30] audit: type=1326 audit(1743174343.405:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7980 comm="syz.0.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f0c3938d169 code=0x7ffc0000 [ 220.024143][ T30] audit: type=1326 audit(1743174343.405:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7980 comm="syz.0.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3938d169 code=0x7ffc0000 [ 220.070388][ T30] audit: type=1326 audit(1743174343.405:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7980 comm="syz.0.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3938d169 code=0x7ffc0000 [ 220.093269][ T30] audit: type=1326 audit(1743174343.405:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7980 comm="syz.0.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f0c3938d169 code=0x7ffc0000 [ 220.191492][ T5887] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 220.343546][ T5887] usb 5-1: unable to get BOS descriptor or descriptor too short [ 220.352948][ T5887] usb 5-1: not running at top speed; connect to a high speed hub [ 220.365911][ T5887] usb 5-1: config 1 has an invalid interface number: 94 but max is 0 [ 220.383765][ T5887] usb 5-1: config 1 has no interface number 0 [ 220.398851][ T5887] usb 5-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=51.70 [ 220.408435][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.422606][ T5887] usb 5-1: Product: syz [ 220.432493][ T5887] usb 5-1: Manufacturer: syz [ 220.443365][ T5887] usb 5-1: SerialNumber: syz [ 220.670405][ T7989] netlink: 28 bytes leftover after parsing attributes in process `syz.4.645'. [ 220.685382][ T7989] netlink: 28 bytes leftover after parsing attributes in process `syz.4.645'. [ 220.700910][ T7989] batadv0: entered promiscuous mode [ 220.726597][ T7989] batadv_slave_1: entered promiscuous mode [ 220.736843][ T7989] batadv_slave_1: left promiscuous mode [ 220.751500][ T5889] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 220.764869][ T7989] batadv0: left promiscuous mode [ 220.853363][ T5887] usb 5-1: Invalid firmware size=18. [ 220.871523][ T5885] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 220.895084][ T5887] usb 5-1: USB disconnect, device number 40 [ 220.901487][ T5889] usb 2-1: Using ep0 maxpacket: 32 [ 220.908778][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 220.933536][ T5889] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 220.945683][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=15 [ 220.961702][ T5889] usb 2-1: Product: syz [ 220.966133][ T5889] usb 2-1: Manufacturer: syz [ 220.970996][ T5889] usb 2-1: SerialNumber: syz [ 220.991849][ T5889] usb 2-1: config 0 descriptor?? [ 221.022096][ T5885] usb 3-1: Using ep0 maxpacket: 16 [ 221.036229][ T5885] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 221.046032][ T5889] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 221.054598][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 221.071962][ T5885] usb 3-1: Product: syz [ 221.077136][ T5885] usb 3-1: Manufacturer: syz [ 221.088228][ T5889] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 221.098394][ T5885] usb 3-1: SerialNumber: syz [ 221.107047][ T5885] usb 3-1: config 0 descriptor?? [ 221.240320][ T5889] usb 4-1: USB disconnect, device number 29 [ 221.421095][ T10] usb 2-1: USB disconnect, device number 35 [ 221.564172][ T8018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.653'. [ 221.607688][ T5851] udevd[5851]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 221.692370][ T8025] fuse: Unknown parameter '­úÿèýÅäqœà—cg†oupÂ+:900000000000000000000' [ 222.040324][ T8035] FAULT_INJECTION: forcing a failure. [ 222.040324][ T8035] name failslab, interval 1, probability 0, space 0, times 0 [ 222.063226][ T8035] CPU: 0 UID: 0 PID: 8035 Comm: syz.1.658 Not tainted 6.14.0-syzkaller-07422-gacb4f33713b9 #0 PREEMPT(full) [ 222.063258][ T8035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 222.063271][ T8035] Call Trace: [ 222.063279][ T8035] [ 222.063288][ T8035] dump_stack_lvl+0x241/0x360 [ 222.063334][ T8035] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.063359][ T8035] ? __pfx__printk+0x10/0x10 [ 222.063385][ T8035] ? __pfx___might_resched+0x10/0x10 [ 222.063410][ T8035] should_fail_ex+0x424/0x570 [ 222.063435][ T8035] should_failslab+0xac/0x100 [ 222.063462][ T8035] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 222.063491][ T8035] ? __alloc_skb+0x1c2/0x480 [ 222.063512][ T8035] __alloc_skb+0x1c2/0x480 [ 222.063533][ T8035] ? __pfx___alloc_skb+0x10/0x10 [ 222.063552][ T8035] ? netlink_autobind+0xd6/0x2f0 [ 222.063579][ T8035] ? netlink_autobind+0x2b0/0x2f0 [ 222.063610][ T8035] netlink_sendmsg+0x65c/0xce0 [ 222.063644][ T8035] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.063675][ T8035] ? aa_sock_msg_perm+0x91/0x160 [ 222.063699][ T8035] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.063724][ T8035] __sock_sendmsg+0x221/0x270 [ 222.063752][ T8035] ____sys_sendmsg+0x53c/0x870 [ 222.063777][ T8035] ? __pfx_____sys_sendmsg+0x10/0x10 [ 222.063795][ T8035] ? __fget_files+0x2a/0x420 [ 222.063815][ T8035] ? __fget_files+0x2a/0x420 [ 222.063837][ T8035] __sys_sendmsg+0x271/0x360 [ 222.063860][ T8035] ? __pfx___sys_sendmsg+0x10/0x10 [ 222.063919][ T8035] ? do_syscall_64+0xb6/0x230 [ 222.063949][ T8035] do_syscall_64+0xf3/0x230 [ 222.063974][ T8035] ? clear_bhb_loop+0x45/0xa0 [ 222.063996][ T8035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.064014][ T8035] RIP: 0033:0x7f6f4e78d169 [ 222.064032][ T8035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.064048][ T8035] RSP: 002b:00007f6f4f588038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.064070][ T8035] RAX: ffffffffffffffda RBX: 00007f6f4e9a5fa0 RCX: 00007f6f4e78d169 [ 222.064085][ T8035] RDX: 0000000000040000 RSI: 0000200000000280 RDI: 0000000000000003 [ 222.064097][ T8035] RBP: 00007f6f4f588090 R08: 0000000000000000 R09: 0000000000000000 [ 222.064109][ T8035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.064120][ T8035] R13: 0000000000000000 R14: 00007f6f4e9a5fa0 R15: 00007f6f4eacfa28 [ 222.064143][ T8035] [ 222.601638][ T8043] netlink: 6 bytes leftover after parsing attributes in process `syz.1.659'. [ 222.674041][ T8043] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 223.193384][ T8060] syzkaller1: entered promiscuous mode [ 223.199336][ T8060] syzkaller1: entered allmulticast mode [ 223.229609][ T8063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.665'. [ 223.451745][ T10] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 223.816727][ T47] usb 3-1: USB disconnect, device number 23 [ 224.111165][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.122448][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 224.152835][ T10] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 224.163889][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 224.277365][ T10] usb 5-1: SerialNumber: syz [ 224.311603][ T47] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 224.512869][ T47] usb 3-1: device descriptor read/64, error -71 [ 224.551832][ T10] usb 5-1: 0:2 : does not exist [ 224.648729][ T10] usb 5-1: USB disconnect, device number 41 [ 224.751561][ T47] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 224.926786][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 224.931595][ T47] usb 3-1: device descriptor read/64, error -71 [ 225.074723][ T47] usb usb3-port1: attempt power cycle [ 225.087536][ T8076] bridge0: port 3(veth0_to_bridge) entered blocking state [ 225.102491][ T8076] bridge0: port 3(veth0_to_bridge) entered disabled state [ 225.120240][ T8076] veth0_to_bridge: entered allmulticast mode [ 225.127751][ T8076] veth0_to_bridge: entered promiscuous mode [ 225.141685][ T8076] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 225.164131][ T8076] bridge0: port 3(veth0_to_bridge) entered blocking state [ 225.171702][ T8076] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 225.427442][ T8090] loop6: detected capacity change from 0 to 524287999 [ 225.441502][ T47] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 225.472221][ T47] usb 3-1: device descriptor read/8, error -71 [ 225.656059][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 225.656079][ T30] audit: type=1326 audit(1743174349.185:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8092 comm="syz.0.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3938d169 code=0x7ffc0000 [ 225.698047][ T8095] netlink: 'syz.1.676': attribute type 4 has an invalid length. [ 225.731590][ T47] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 225.754162][ T30] audit: type=1326 audit(1743174349.185:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8092 comm="syz.0.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3938d169 code=0x7ffc0000 [ 225.771164][ T8095] input: syz0 as /devices/virtual/input/input13 [ 225.783375][ T47] usb 3-1: device descriptor read/8, error -71 [ 225.822295][ T30] audit: type=1326 audit(1743174349.235:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8092 comm="syz.0.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f0c3938d169 code=0x7ffc0000 [ 225.859370][ T30] audit: type=1326 audit(1743174349.235:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8092 comm="syz.0.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3938d169 code=0x7ffc0000 [ 225.924137][ T47] usb usb3-port1: unable to enumerate USB device [ 225.975767][ T30] audit: type=1326 audit(1743174349.235:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8092 comm="syz.0.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3938d169 code=0x7ffc0000 [ 226.029586][ T30] audit: type=1326 audit(1743174349.235:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8092 comm="syz.0.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f0c3938d169 code=0x7ffc0000 [ 226.032166][ T8106] netlink: 'syz.3.678': attribute type 7 has an invalid length. [ 226.099675][ T30] audit: type=1326 audit(1743174349.235:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8092 comm="syz.0.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3938d169 code=0x7ffc0000 [ 226.150713][ T30] audit: type=1326 audit(1743174349.235:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8092 comm="syz.0.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3938d169 code=0x7ffc0000 [ 226.174347][ T30] audit: type=1326 audit(1743174349.235:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8092 comm="syz.0.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f0c3938d169 code=0x7ffc0000 [ 226.197669][ T30] audit: type=1326 audit(1743174349.235:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8092 comm="syz.0.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3938d169 code=0x7ffc0000 [ 226.331547][ T10] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 226.352312][ T8115] FAULT_INJECTION: forcing a failure. [ 226.352312][ T8115] name failslab, interval 1, probability 0, space 0, times 0 [ 226.366537][ T8115] CPU: 0 UID: 0 PID: 8115 Comm: syz.4.681 Not tainted 6.14.0-syzkaller-07422-gacb4f33713b9 #0 PREEMPT(full) [ 226.366561][ T8115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 226.366571][ T8115] Call Trace: [ 226.366576][ T8115] [ 226.366582][ T8115] dump_stack_lvl+0x241/0x360 [ 226.366609][ T8115] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.366634][ T8115] ? __pfx__printk+0x10/0x10 [ 226.366654][ T8115] ? __pfx___might_resched+0x10/0x10 [ 226.366673][ T8115] should_fail_ex+0x424/0x570 [ 226.366694][ T8115] should_failslab+0xac/0x100 [ 226.366715][ T8115] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 226.366736][ T8115] ? dup_task_struct+0x57/0x8c0 [ 226.366752][ T8115] dup_task_struct+0x57/0x8c0 [ 226.366764][ T8115] ? _raw_spin_unlock_irq+0x23/0x50 [ 226.366781][ T8115] ? lockdep_hardirqs_on+0x9d/0x150 [ 226.366801][ T8115] copy_process+0x5dc/0x3d10 [ 226.366828][ T8115] ? __pfx_copy_process+0x10/0x10 [ 226.366844][ T8115] ? __raw_spin_lock_init+0x45/0x100 [ 226.366867][ T8115] vhost_task_create+0x244/0x320 [ 226.366886][ T8115] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 226.366901][ T8115] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 226.366917][ T8115] ? __pfx_vhost_task_create+0x10/0x10 [ 226.366941][ T8115] ? stack_trace_save+0x11a/0x1d0 [ 226.366963][ T8115] ? __pfx_vhost_task_fn+0x10/0x10 [ 226.366986][ T8115] ? kasan_save_track+0x51/0x80 [ 226.367002][ T8115] ? kasan_save_free_info+0x40/0x50 [ 226.367015][ T8115] ? __kasan_slab_free+0x59/0x70 [ 226.367031][ T8115] ? kfree+0x198/0x430 [ 226.367048][ T8115] ? tomoyo_path_number_perm+0x5fd/0x790 [ 226.367070][ T8115] ? security_file_ioctl+0xc6/0x2a0 [ 226.367092][ T8115] kvm_mmu_post_init_vm+0x14e/0x2c0 [ 226.367110][ T8115] kvm_arch_vcpu_ioctl_run+0xed/0x1910 [ 226.367133][ T8115] ? __lock_acquire+0xad5/0xd80 [ 226.367157][ T8115] ? __mutex_trylock_common+0x184/0x2e0 [ 226.367183][ T8115] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 226.367211][ T8115] ? __pfx___mutex_trylock_common+0x10/0x10 [ 226.367238][ T8115] ? rcu_is_watching+0x15/0xb0 [ 226.367261][ T8115] ? look_up_lock_class+0x7b/0x170 [ 226.367289][ T8115] ? register_lock_class+0x54/0x330 [ 226.367314][ T8115] ? __lock_acquire+0xad5/0xd80 [ 226.367337][ T8115] ? do_raw_write_lock+0x14a/0x4f0 [ 226.367365][ T8115] kvm_vcpu_ioctl+0xa24/0x1030 [ 226.367392][ T8115] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 226.367418][ T8115] ? __lock_acquire+0xad5/0xd80 [ 226.367461][ T8115] ? __fget_files+0x2a/0x420 [ 226.367480][ T8115] ? __fget_files+0x2a/0x420 [ 226.367502][ T8115] ? __fget_files+0x2a/0x420 [ 226.367518][ T8115] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 226.367538][ T8115] __se_sys_ioctl+0xf1/0x160 [ 226.367556][ T8115] do_syscall_64+0xf3/0x230 [ 226.367576][ T8115] ? clear_bhb_loop+0x45/0xa0 [ 226.367592][ T8115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.367607][ T8115] RIP: 0033:0x7f1bbb18d169 [ 226.367620][ T8115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.367632][ T8115] RSP: 002b:00007f1bbc09a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 226.367648][ T8115] RAX: ffffffffffffffda RBX: 00007f1bbb3a5fa0 RCX: 00007f1bbb18d169 [ 226.367659][ T8115] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 226.367668][ T8115] RBP: 00007f1bbc09a090 R08: 0000000000000000 R09: 0000000000000000 [ 226.367678][ T8115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.367688][ T8115] R13: 0000000000000000 R14: 00007f1bbb3a5fa0 R15: 00007f1bbb4cfa28 [ 226.367706][ T8115] [ 226.821946][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 226.830942][ T10] usb 1-1: config 0 has no interface number 0 [ 226.837325][ T10] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.848465][ T10] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.858333][ T10] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 226.867466][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.881302][ T10] usb 1-1: config 0 descriptor?? [ 227.001333][ T8122] netlink: 'syz.3.682': attribute type 4 has an invalid length. [ 227.273336][ T8131] xt_l2tp: v2 doesn't support IP mode [ 227.303012][ T10] uclogic 0003:256C:006D.0009: item fetching failed at offset 4/5 [ 227.311737][ T10] uclogic 0003:256C:006D.0009: parse failed [ 227.321307][ T10] uclogic 0003:256C:006D.0009: probe with driver uclogic failed with error -22 [ 227.637386][ T10] usb 1-1: USB disconnect, device number 49 [ 227.871522][ T5887] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 228.161474][ T5887] usb 4-1: Using ep0 maxpacket: 8 [ 228.172543][ T5887] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 228.182278][ T5887] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 228.190586][ T5887] usb 4-1: Product: syz [ 228.206310][ T5887] usb 4-1: Manufacturer: syz [ 228.210941][ T5887] usb 4-1: SerialNumber: syz [ 228.233174][ T5887] usb 4-1: config 0 descriptor?? [ 228.255680][ T5887] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 228.291628][ T10] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 228.471491][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 228.480999][ T8143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.481206][ T10] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 228.498434][ T8143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.543037][ T8165] netlink: 'syz.0.696': attribute type 4 has an invalid length. [ 228.551120][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 228.552071][ T2153] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 228.581518][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 228.611641][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 228.685986][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 228.741481][ T2153] usb 2-1: Using ep0 maxpacket: 32 [ 228.750761][ T2153] usb 2-1: New USB device found, idVendor=04e2, idProduct=1403, bcdDevice=1c.b2 [ 228.752787][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 228.761317][ T2153] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.784007][ T5887] gspca_zc3xx: reg_w_i err -110 [ 228.797818][ T5887] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 228.812142][ T8170] netlink: 4 bytes leftover after parsing attributes in process `syz.0.698'. [ 228.821286][ T2153] usb 2-1: Product: syz [ 228.824907][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.850323][ T2153] usb 2-1: Manufacturer: syz [ 229.037908][ T2153] usb 2-1: SerialNumber: syz [ 229.081276][ T2153] usb 2-1: config 0 descriptor?? [ 229.112431][ T2153] xr_serial 2-1:0.0: invalid descriptor buffer length [ 229.246607][ T10] usb 5-1: GET_CAPABILITIES returned 0 [ 229.253254][ T10] usbtmc 5-1:16.0: can't read capabilities [ 229.382832][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.395659][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.408365][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.420856][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.433278][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.446239][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.458575][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.470949][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.483350][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.495818][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.579046][ T2153] usb 2-1: USB disconnect, device number 36 [ 229.884795][ T10] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 229.899137][ T8145] netlink: 48 bytes leftover after parsing attributes in process `syz.4.692'. [ 230.460841][ T10] usb 1-1: device descriptor read/64, error -71 [ 231.579729][ T10] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 234.391412][ C0] net_ratelimit: 30180 callbacks suppressed [ 234.391438][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.391692][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.397711][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.409929][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.422024][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.434286][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.446365][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.458427][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.470541][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.482458][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 239.401445][ C1] net_ratelimit: 32079 callbacks suppressed [ 239.401470][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 239.401801][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.407880][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 239.420344][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.432385][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 239.445097][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.456360][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 239.468314][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.480545][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 239.492564][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.060971][ C1] sched: DL replenish lagged too much [ 244.411538][ C0] net_ratelimit: 30962 callbacks suppressed [ 244.411564][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.412136][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.417979][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.429821][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.441672][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.453738][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.465881][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.477780][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.489638][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.501730][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.421507][ C1] net_ratelimit: 31375 callbacks suppressed [ 249.421532][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.421575][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.427819][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.439804][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.451759][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.463654][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.475733][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.487756][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.499703][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.511599][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.431502][ C0] net_ratelimit: 32094 callbacks suppressed [ 254.431525][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.431786][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.437888][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.449796][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.461796][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.473990][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.486082][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.498016][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.509794][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.521859][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 256.770023][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.785544][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.390896][ T10] usb 1-1: device descriptor read/64, error -110 [ 259.441570][ C0] net_ratelimit: 32613 callbacks suppressed [ 259.441594][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.441870][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.448116][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.460186][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.472063][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.484440][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.496462][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.508356][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.520382][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.532400][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 262.235834][ T10] usb usb1-port1: attempt power cycle [ 264.451410][ C1] net_ratelimit: 31262 callbacks suppressed [ 264.451435][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.451531][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.458172][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.470091][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.482200][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.494172][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.506130][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.518190][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.530282][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.542417][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.461416][ C1] net_ratelimit: 31495 callbacks suppressed [ 269.461439][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.461502][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.467766][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.479759][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.491647][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.503754][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.515815][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.527812][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.539672][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.551529][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.471406][ C1] net_ratelimit: 28571 callbacks suppressed [ 274.471430][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.471510][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.477758][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.489959][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.501903][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.513861][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.526138][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.538100][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.550001][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.561826][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.481444][ C1] net_ratelimit: 30247 callbacks suppressed [ 279.481469][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.481573][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.487808][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.499682][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.511944][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.523806][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.535759][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.547600][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.559681][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.571764][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.491470][ C1] net_ratelimit: 32398 callbacks suppressed [ 284.491495][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.491598][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.497913][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.510544][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.522682][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.534882][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.546633][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.558474][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.570623][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.582696][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.501383][ C1] net_ratelimit: 32154 callbacks suppressed [ 289.501408][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.501523][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.507684][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.519580][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.531723][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.544172][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.556026][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.567995][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.580066][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.592168][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.511498][ C1] net_ratelimit: 32438 callbacks suppressed [ 294.511523][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.511840][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.517908][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.529896][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.541968][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.553967][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.565836][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.577707][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.589799][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.601871][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.521428][ C1] net_ratelimit: 33045 callbacks suppressed [ 299.521453][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.521810][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.527835][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.539773][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.551972][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.564005][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.575999][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.588070][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.600199][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.612158][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.531588][ C1] net_ratelimit: 32365 callbacks suppressed [ 304.531626][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.531690][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.537899][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.549806][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.562212][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.574372][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.586240][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.598178][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.610273][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.622258][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.541482][ C0] net_ratelimit: 32455 callbacks suppressed [ 309.541507][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.541531][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.547997][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.560034][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.572128][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.584173][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.595988][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.608065][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.620002][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.632202][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.551408][ C0] net_ratelimit: 32643 callbacks suppressed [ 314.551432][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.551515][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.558619][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.570052][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.581891][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.593956][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.606000][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.617784][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.629637][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.642143][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.561370][ C1] net_ratelimit: 32210 callbacks suppressed [ 319.561394][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.561651][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.567681][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.579696][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.591744][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.603806][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.615611][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.627523][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.639559][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.651832][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.009663][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.025319][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.571531][ C0] net_ratelimit: 32018 callbacks suppressed [ 324.571555][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.571858][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.577820][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.589824][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.601886][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.613667][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.625613][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.637810][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.649785][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:ed:92:11:eb:aa, vlan:0) [ 324.661781][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.581602][ C1] net_ratelimit: 28793 callbacks suppressed [ 329.581626][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.582509][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.588113][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.600048][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.612047][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.624018][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:ed:92:11:eb:aa, vlan:0) [ 329.635865][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.647754][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.659728][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.671719][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.591565][ C1] net_ratelimit: 27066 callbacks suppressed [ 334.591589][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 334.592298][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.597837][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 334.609891][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.621857][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 334.633910][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:ed:92:11:eb:aa, vlan:0) [ 334.645795][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 334.658075][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.670195][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 334.682122][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.601427][ C1] net_ratelimit: 27075 callbacks suppressed [ 339.601452][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 339.602170][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.607740][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 339.619758][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.631797][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 339.643927][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:ed:92:11:eb:aa, vlan:0) [ 339.655685][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 339.667711][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.679819][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 339.691665][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.611474][ C1] net_ratelimit: 27507 callbacks suppressed [ 344.611498][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 344.621687][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.630102][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 344.641991][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.653971][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 344.666124][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:ed:92:11:eb:aa, vlan:0) [ 344.677902][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 344.689906][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.701836][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 344.713820][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.621394][ C1] net_ratelimit: 27949 callbacks suppressed [ 349.621418][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 349.621839][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.627721][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 349.641539][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.651730][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 349.663782][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:ed:92:11:eb:aa, vlan:0) [ 349.675613][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 349.687520][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.699667][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 349.711804][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.631416][ C1] net_ratelimit: 27817 callbacks suppressed [ 354.631447][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 354.632339][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.637710][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 354.649657][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.661708][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 354.673924][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:ed:92:11:eb:aa, vlan:0) [ 354.685754][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 354.697667][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.709916][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 354.721914][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.641460][ C1] net_ratelimit: 27663 callbacks suppressed [ 359.641484][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 359.651580][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.659961][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 359.671902][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.683830][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 359.695873][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:ed:92:11:eb:aa, vlan:0) [ 359.708206][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 359.720136][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.732281][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 359.744484][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.651488][ C0] net_ratelimit: 27718 callbacks suppressed [ 364.651512][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.651646][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 364.658158][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.669981][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 364.681888][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.693941][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 364.706142][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.718181][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 364.731162][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.742184][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 369.661576][ C1] net_ratelimit: 27908 callbacks suppressed [ 369.661600][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 369.671470][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.680001][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 369.691852][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.703829][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 369.715805][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:ed:92:11:eb:aa, vlan:0) [ 369.727965][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 369.739925][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.751946][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 369.764198][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.671446][ C0] net_ratelimit: 27756 callbacks suppressed [ 374.671471][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.671715][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 374.681584][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.690302][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 374.702179][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.714215][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 374.727273][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.738271][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 374.750285][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.762470][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 379.681427][ C0] net_ratelimit: 27932 callbacks suppressed [ 379.681449][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 379.681715][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 379.688606][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 379.700083][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 379.711873][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 379.723941][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 379.736126][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:ed:92:11:eb:aa, vlan:0) [ 379.747954][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 379.759843][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 379.771876][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 384.691470][ C1] net_ratelimit: 27922 callbacks suppressed [ 384.691493][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 384.691543][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.697797][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 384.712267][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.721652][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 384.733548][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.745492][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 384.757639][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:ed:92:11:eb:aa, vlan:0) [ 384.770372][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 384.782250][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 389.701394][ C1] net_ratelimit: 28160 callbacks suppressed [ 389.701418][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 389.702655][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 389.707786][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 389.719900][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 389.732186][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 389.744292][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:ed:92:11:eb:aa, vlan:0) [ 389.756148][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 389.768348][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 389.780624][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 389.792666][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 394.711383][ C0] net_ratelimit: 28011 callbacks suppressed [ 394.711406][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:ed:92:11:eb:aa, vlan:0) [ 394.711521][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 394.717621][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 394.729693][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 394.741756][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 394.753601][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 394.765647][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 394.777544][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 394.789622][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 394.801728][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 399.721604][ C1] net_ratelimit: 28006 callbacks suppressed [ 399.721627][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 399.732116][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 399.739928][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 399.751873][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 399.763871][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 399.775974][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:ed:92:11:eb:aa, vlan:0) [ 399.787870][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 399.799855][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 399.812057][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 399.823977][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.731349][ C1] net_ratelimit: 28013 callbacks suppressed [ 404.731373][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 404.731936][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.737666][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 404.749579][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.761630][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 404.773604][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:ed:92:11:eb:aa, vlan:0) [ 404.785811][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 404.797765][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.809757][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 404.821797][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.741481][ C1] net_ratelimit: 28007 callbacks suppressed [ 409.741512][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 409.741533][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.741910][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.747848][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 409.759747][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.771863][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 409.784880][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.795867][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 409.807785][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.819703][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 414.751355][ C0] net_ratelimit: 28020 callbacks suppressed [ 414.751382][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 414.751574][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 414.761428][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 414.769860][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 414.781627][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 414.793667][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 414.806493][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 414.817680][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 414.829656][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 414.841724][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 419.761456][ C1] net_ratelimit: 27978 callbacks suppressed [ 419.761483][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 419.761528][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:ed:92:11:eb:aa, vlan:0) [ 419.768115][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 419.780053][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 419.791801][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 419.791825][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): [ 419.792165][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 419.792338][ C0] P8141/1:b..l [ 419.792364][ C0] rcu: (detected by 0, t=10503 jiffies, g=29237, q=371 ncpus=2) [ 419.792386][ C0] task:syz.3.691 state:R running task stack:24680 pid:8141 tgid:8139 ppid:5854 task_flags:0x40044c flags:0x00004006 [ 419.792455][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 419.792464][ C0] Call Trace: [ 419.792473][ C0] [ 419.792486][ C0] __schedule+0x1b88/0x5240 [ 419.792541][ C0] ? preempt_schedule_irq+0xfe/0x1c0 [ 419.792569][ C0] ? __pfx___schedule+0x10/0x10 [ 419.792594][ C0] ? __lock_acquire+0xad5/0xd80 [ 419.792630][ C0] ? do_raw_spin_lock+0x151/0x370 [ 419.792662][ C0] ? preempt_schedule_irq+0xf3/0x1c0 [ 419.792747][ C0] preempt_schedule_irq+0xfe/0x1c0 [ 419.792782][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 419.792819][ C0] irqentry_exit+0x5e/0x90 [ 419.792846][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 419.792879][ C0] RIP: 0010:rcu_lockdep_current_cpu_online+0x0/0x120 [ 419.792930][ C0] Code: 8e e8 44 6a 93 03 e9 53 ff ff ff 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 41 57 41 56 53 65 8b 0d 40 dd b9 11 b0 01 f7 c1 00 00 [ 419.792941][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 419.792948][ C0] RSP: 0018:ffffc9001c65f780 EFLAGS: 00000202 [ 419.792962][ C0] [ 419.792974][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffff888032599e00 [ 419.792990][ C0] RDX: 0000000000000000 RSI: ffffffff8ca153e0 RDI: ffffffff8ca153a0 [ 419.793006][ C0] RBP: 00000000000001a0 R08: ffffffff82379aae R09: 0000000000000000 [ 419.793020][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 000000000006dbd0 [ 419.793035][ C0] R13: 0000000000000000 R14: ffffffff823799e0 R15: ffff88801c780000 [ 419.793051][ C0] ? page_ext_get+0x20/0x2a0 [ 419.793082][ C0] ? page_ext_get+0xee/0x2a0 [ 419.793118][ C0] rcu_read_lock_held+0x1e/0x50 [ 419.793149][ C0] page_ext_get+0x192/0x2a0 [ 419.793177][ C0] __reset_page_owner+0x30/0x440 [ 419.793202][ C0] ? mod_memcg_page_state+0x533/0x800 [ 419.793229][ C0] free_frozen_pages+0xe16/0x10f0 [ 419.793258][ C0] vfree+0x1c3/0x360 [ 419.793283][ C0] kcov_close+0x28/0x50 [ 419.793289][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 419.793313][ C0] ? __pfx_kcov_close+0x10/0x10 [ 419.793342][ C0] __fput+0x3e9/0x9f0 [ 419.793369][ C0] task_work_run+0x251/0x310 [ 419.793404][ C0] ? __pfx_task_work_run+0x10/0x10 [ 419.793433][ C0] ? do_exit+0xa0c/0x2950 [ 419.793459][ C0] ? do_exit+0xa0c/0x2950 [ 419.793486][ C0] do_exit+0xa11/0x2950 [ 419.793516][ C0] ? do_raw_spin_lock+0x151/0x370 [ 419.793546][ C0] ? __pfx_do_exit+0x10/0x10 [ 419.793567][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 419.793603][ C0] do_group_exit+0x207/0x2c0 [ 419.793627][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 419.793652][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 419.793682][ C0] get_signal+0x1696/0x1730 [ 419.793724][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 419.793724][ C0] ? __pfx_get_signal+0x10/0x10 [ 419.793761][ C0] arch_do_signal_or_restart+0x98/0x840 [ 419.793798][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 419.793852][ C0] ? syscall_exit_to_user_mode+0xa3/0x340 [ 419.793897][ C0] syscall_exit_to_user_mode+0xce/0x340 [ 419.793931][ C0] do_syscall_64+0x100/0x230 [ 419.793960][ C0] ? clear_bhb_loop+0x45/0xa0 [ 419.793987][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.794009][ C0] RIP: 0033:0x7f3fb198d169 [ 419.794028][ C0] RSP: 002b:00007f3fb280c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 419.794061][ C0] RAX: fffffffffffffe00 RBX: 00007f3fb1ba6088 RCX: 00007f3fb198d169 [ 419.794060][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 419.794079][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3fb1ba6088 [ 419.794094][ C0] RBP: 00007f3fb1ba6080 R08: 0000000000000000 R09: 0000000000000000 [ 419.794109][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3fb1ba608c [ 419.794123][ C0] R13: 0000000000000000 R14: 00007f3fb1ccf940 R15: 00007f3fb1ccfa28 [ 419.794151][ C0] [ 419.794170][ C0] rcu: rcu_preempt kthread starved for 6887 jiffies! g29237 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 419.794196][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 419.794208][ C0] rcu: RCU grace-period kthread stack dump: [ 419.794218][ C0] task:rcu_preempt state:R running task stack:26680 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 419.794288][ C0] Call Trace: [ 419.794296][ C0] [ 419.794308][ C0] __schedule+0x1b88/0x5240 [ 419.794355][ C0] ? schedule+0x163/0x360 [ 419.794383][ C0] ? __pfx___schedule+0x10/0x10 [ 419.794419][ C0] ? schedule+0x90/0x360 [ 419.794445][ C0] ? schedule+0x90/0x360 [ 419.794470][ C0] schedule+0x163/0x360 [ 419.794497][ C0] schedule_timeout+0x15b/0x2b0 [ 419.794520][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 419.794550][ C0] ? __pfx_process_timeout+0x10/0x10 [ 419.794580][ C0] ? prepare_to_swait_event+0x1e5/0x340 [ 419.794607][ C0] ? prepare_to_swait_event+0x308/0x340 [ 419.794639][ C0] rcu_gp_fqs_loop+0x2e1/0x1340 [ 419.794669][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 419.794699][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 419.794718][ C0] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 419.794751][ C0] ? finish_swait+0xdb/0x200 [ 419.794777][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 419.794797][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 419.794820][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 419.794844][ C0] ? __kthread_parkme+0x1a8/0x200 [ 419.794871][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 419.794900][ C0] kthread+0x7b7/0x940 [ 419.794927][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 419.794949][ C0] ? __pfx_kthread+0x10/0x10 [ 419.794974][ C0] ? __pfx_kthread+0x10/0x10 [ 419.795000][ C0] ? __pfx_kthread+0x10/0x10 [ 419.795025][ C0] ? __pfx_kthread+0x10/0x10 [ 419.795051][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 419.795074][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 419.795100][ C0] ? __pfx_kthread+0x10/0x10 [ 419.795127][ C0] ret_from_fork+0x4b/0x80 [ 419.795147][ C0] ? __pfx_kthread+0x10/0x10 [ 419.795173][ C0] ret_from_fork_asm+0x1a/0x30 [ 419.795216][ C0] [ 419.795224][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 419.795242][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.14.0-syzkaller-07422-gacb4f33713b9 #0 PREEMPT(full) [ 419.795275][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 419.795289][ C0] RIP: 0010:vprintk_emit+0x731/0xa40 [ 419.795315][ C0] Code: 00 e8 63 54 21 00 4c 8d bc 24 a0 00 00 00 4d 85 e4 75 07 e8 51 54 21 00 eb 06 e8 4a 54 21 00 fb 49 bc 00 00 00 00 00 fc ff df <48> c7 c7 20 5e c1 8e 31 f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 [ 419.795334][ C0] RSP: 0018:ffffc90000006ce0 EFLAGS: 00000246 [ 419.795355][ C0] RAX: ffffffff81a232e6 RBX: 0000000000000000 RCX: ffffffff8ea96580 [ 419.795372][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 419.795385][ C0] RBP: ffffc90000006df0 R08: ffffffff81a232bf R09: 1ffffffff20bbace [ 419.795401][ C0] R10: dffffc0000000000 R11: fffffbfff20bbacf R12: dffffc0000000000 [ 419.795418][ C0] R13: 1ffff92000000da0 R14: ffffffff81a23112 R15: ffffc90000006d80 [ 419.795435][ C0] FS: 0000000000000000(0000) GS:ffff888124ff1000(0000) knlGS:0000000000000000 [ 419.795454][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 419.795469][ C0] CR2: 00007f601bc00218 CR3: 000000002776e000 CR4: 00000000003526f0 [ 419.795488][ C0] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000 [ 419.795501][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 419.795515][ C0] Call Trace: [ 419.795524][ C0] [ 419.795533][ C0] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 419.795572][ C0] ? print_other_cpu_stall+0x14ab/0x15e0 [ 419.795605][ C0] ? __lock_acquire+0xad5/0xd80 [ 419.795644][ C0] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 419.795687][ C0] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 419.795721][ C0] ? rcu_sched_clock_irq+0xa2a/0x10f0 [ 419.795749][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 419.795788][ C0] ? update_process_times+0x242/0x2f0 [ 419.795819][ C0] ? tick_nohz_handler+0x37c/0x500 [ 419.795854][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 419.795882][ C0] ? __hrtimer_run_queues+0x55c/0xd40 [ 419.795923][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 419.795954][ C0] ? read_tsc+0x9/0x20 [ 419.795983][ C0] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 419.796018][ C0] ? hrtimer_interrupt+0x403/0xa40 [ 419.796061][ C0] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 419.796090][ C0] ? sysvec_apic_timer_interrupt+0x52/0xc0 [ 419.796116][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 419.796139][ C0] ? vprintk_emit+0x552/0xa40 [ 419.796164][ C0] ? vprintk_emit+0x6ff/0xa40 [ 419.796186][ C0] ? vprintk_emit+0x726/0xa40 [ 419.796211][ C0] ? vprintk_emit+0x731/0xa40 [ 419.796238][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 419.796262][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 419.796289][ C0] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 419.796320][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 419.796354][ C0] _printk+0xd5/0x120 [ 419.796382][ C0] ? __pfx__printk+0x10/0x10 [ 419.796407][ C0] ? common_startup_64+0x13e/0x147 [ 419.796437][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 419.796466][ C0] br_fdb_update+0x6d0/0x740 [ 419.796501][ C0] ? br_allowed_ingress+0xd0/0x1030 [ 419.796532][ C0] ? __pfx_br_fdb_update+0x10/0x10 [ 419.796570][ C0] br_handle_frame_finish+0x779/0x1f60 [ 419.796599][ C0] ? ip6t_do_table+0x16c1/0x18c0 [ 419.796630][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 419.796654][ C0] ? ip6t_do_table+0x207/0x18c0 [ 419.796692][ C0] ? nf_hook_slow+0x17a/0x220 [ 419.796730][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 419.796758][ C0] br_nf_hook_thresh+0x482/0x5a0 [ 419.796788][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 419.796811][ C0] ? ip6table_mangle_hook+0x29e/0x7a0 [ 419.796842][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 419.796871][ C0] ? skb_push+0x97/0x100 [ 419.796905][ C0] br_nf_pre_routing_finish_ipv6+0xaa3/0xdd0 [ 419.796932][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 419.796965][ C0] br_nf_pre_routing_ipv6+0x397/0x790 [ 419.796992][ C0] ? br_nf_pre_routing_ipv6+0x449/0x790 [ 419.797018][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 419.797046][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 419.797072][ C0] ? br_nf_pre_routing+0x714/0x1480 [ 419.797100][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 419.797125][ C0] br_handle_frame+0x9fa/0x1530 [ 419.797148][ C0] ? cpu_startup_entry+0x42/0x60 [ 419.797170][ C0] ? x86_64_start_reservations+0x2a/0x30 [ 419.797196][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 419.797223][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 419.797252][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 419.797276][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 419.797300][ C0] __netif_receive_skb_core+0x155a/0x4bb0 [ 419.797329][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 419.797356][ C0] ? ip6_mc_input+0x9e4/0xbd0 [ 419.797389][ C0] ? ip6_mc_input+0x9e4/0xbd0 [ 419.797424][ C0] ? ip6_mc_input+0x9e4/0xbd0 [ 419.797458][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 419.797490][ C0] ? ip6_rcv_finish+0x338/0x3d0 [ 419.797521][ C0] ? NF_HOOK+0x3a0/0x450 [ 419.797548][ C0] ? skb_orphan+0xae/0xd0 [ 419.797579][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 419.797608][ C0] ? NF_HOOK+0x9e/0x450 [ 419.797637][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 419.797669][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 419.797707][ C0] __netif_receive_skb+0x130/0x670 [ 419.797740][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 419.797781][ C0] process_backlog+0x664/0x15c0 [ 419.797815][ C0] ? process_backlog+0x33d/0x15c0 [ 419.797850][ C0] ? __pfx_process_backlog+0x10/0x10 [ 419.797878][ C0] ? __lock_acquire+0xad5/0xd80 [ 419.797918][ C0] ? do_raw_spin_lock+0x151/0x370 [ 419.797946][ C0] __napi_poll+0xcb/0x480 [ 419.797976][ C0] net_rx_action+0x89d/0x1240 [ 419.798020][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 419.798048][ C0] ? __run_timer_base+0x17a/0x8e0 [ 419.798076][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 419.798109][ C0] ? seqcount_lockdep_reader_access+0x1c3/0x230 [ 419.798143][ C0] handle_softirqs+0x2d6/0x9b0 [ 419.798181][ C0] ? __irq_exit_rcu+0xfb/0x220 [ 419.798213][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 419.798248][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 419.798279][ C0] __irq_exit_rcu+0xfb/0x220 [ 419.798309][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 419.798348][ C0] irq_exit_rcu+0x9/0x30 [ 419.798376][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 419.798402][ C0] [ 419.798410][ C0] [ 419.798420][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 419.798443][ C0] RIP: 0010:acpi_safe_halt+0x21/0x30 [ 419.798463][ C0] Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 08 f0 62 93 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d 15 b6 85 00 f3 0f 1e fa fb f4 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 419.798481][ C0] RSP: 0018:ffffffff8ea07ca8 EFLAGS: 00000246 [ 419.798502][ C0] RAX: ffffffff8ea96580 RBX: ffff888021689864 RCX: ffffffff8c25172c [ 419.798519][ C0] RDX: 0000000000000001 RSI: ffff888021689800 RDI: ffff888021689864 [ 419.798535][ C0] RBP: ffffffff93644c78 R08: ffff8880b8632b5b R09: 1ffff110170c656b [ 419.798551][ C0] R10: dffffc0000000000 R11: ffffffff8c253200 R12: ffff88802175a000 [ 419.798567][ C0] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff8f543be0 [ 419.798585][ C0] ? __pfx_acpi_idle_enter+0x10/0x10 [ 419.798619][ C0] ? ct_kernel_exit+0x12c/0x1a0 [ 419.798651][ C0] acpi_idle_enter+0xe4/0x140 [ 419.798685][ C0] cpuidle_enter_state+0x111/0x480 [ 419.798715][ C0] ? __pfx_menu_select+0x10/0x10 [ 419.798749][ C0] cpuidle_enter+0x5d/0xa0 [ 419.798776][ C0] do_idle+0x374/0x5d0 [ 419.798804][ C0] ? __pfx_do_idle+0x10/0x10 [ 419.798826][ C0] ? poll_idle+0x70/0xb0 [ 419.798852][ C0] ? rest_init+0x31/0x300 [ 419.798871][ C0] cpu_startup_entry+0x42/0x60 [ 419.798903][ C0] rest_init+0x2dc/0x300 [ 419.798921][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 419.798945][ C0] start_kernel+0x484/0x510 [ 419.798975][ C0] x86_64_start_reservations+0x2a/0x30 [ 419.798997][ C0] x86_64_start_kernel+0x66/0x70 [ 419.799016][ C0] common_startup_64+0x13e/0x147 [ 419.799054][ C0] [ 423.259544][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 423.274518][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 424.771346][ C1] net_ratelimit: 26093 callbacks suppressed [ 424.771370][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 424.771794][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 424.777759][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 424.789682][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 424.801724][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 424.813834][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:d6:ed:92:11:eb:aa, vlan:0) [ 424.825742][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 424.837897][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 424.850092][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 424.862342][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.781536][ C1] net_ratelimit: 27976 callbacks suppressed [ 429.781559][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 429.791433][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.800011][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)