last executing test programs: 10.877413094s ago: executing program 1 (id=178): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="34008900", @ANYRES16=0x0, @ANYBLOB="000025bd7000fcdbdf25440000000a00180003030303030300000400cc0008000d003800000008"], 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x8004) r4 = socket(0x400000000010, 0x3, 0x0) write(r4, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x7, 0x0, 0x0, 0x4, 0xb49, 0x9, 0x8, 0x0, 0x9b}, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_open_dev$sndpcmp(0x0, 0x2, 0x800) r6 = syz_io_uring_setup(0x31c7, &(0x7f0000000140)={0x0, 0x0, 0x2}, &(0x7f00000001c0), &(0x7f00000005c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x0, 0x27, 0x0, 0x0, 0x0, r6}, &(0x7f00000002c0), &(0x7f0000000300)) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) bind$can_raw(r3, &(0x7f0000000140), 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x1, &(0x7f0000002240)) lseek(r5, 0x1, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') read$FUSE(r8, &(0x7f00000001c0)={0x2020}, 0x2020) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000002300)=@mangle={'mangle\x00', 0x1f, 0x6, 0x638, 0x534, 0x3c4, 0x534, 0x3c4, 0x0, 0x5ec, 0x5ec, 0x5ec, 0x5ec, 0x5ec, 0x6, 0x0, {[{{@ip={@empty, @loopback, 0xffffff00, 0xffffff00, 'dvmrp0\x00', 'hsr0\x00', {0xff}, {}, 0x1, 0x1, 0x10}, 0x0, 0x2a0, 0x2c4, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x24, [{0x8, 0x2, 0x93, 0x4}, {0x7, 0xbe, 0x1, 0x4}, {0xb, 0x7, 0x8, 0x8}, {0x6, 0xfc, 0x1, 0x5}, {0x3, 0x8f, 0x4, 0x1000}, {0x3, 0xa, 0x57, 0x7}, {0x5b, 0x0, 0x1, 0x9}, {0xf04, 0x10, 0x80, 0x5}, {0x7ff, 0x3, 0x5, 0x80}, {0x1, 0xff, 0x30, 0x8}, {0x3, 0x7f, 0xbf, 0x842}, {0x5, 0xac, 0x7, 0x2}, {0x7, 0x4, 0x4, 0x100}, {0x5, 0x7f, 0x2, 0x8}, {0x7, 0x44, 0x8, 0xffff8001}, {0x8, 0x9, 0x5, 0x5}, {0x7, 0x8, 0x9, 0x9}, {0xd5, 0x6, 0x7, 0x1}, {0x11, 0x5, 0x0, 0x2}, {0x0, 0x0, 0x2, 0x100}, {0x3, 0x5, 0x5, 0x3870}, {0x800, 0x2, 0x3, 0x3}, {0xd, 0x0, 0x97, 0xfffffff7}, {0x8, 0x4, 0xf6, 0x8}, {0x3, 0x1, 0x9, 0x1}, {0x1a, 0x7, 0x6, 0x1}, {0x1, 0x8, 0x0, 0x3a6}, {0x0, 0xf5, 0x1, 0x9}, {0xfff9, 0x4, 0x81, 0x1}, {0x1, 0x3, 0x1, 0x54f}, {0x43, 0x6, 0x36, 0x8}, {0x228, 0x8, 0x4, 0x9}, {0xc, 0x67, 0xd, 0x98}, {0x1, 0xff, 0x0, 0x81}, {0x8, 0x0, 0xfa, 0x800}, {0x6, 0x4, 0x2c, 0x40}, {0x6, 0x4, 0x7, 0x5}, {0xd2, 0xf, 0x4, 0x7}, {0x400, 0x7f, 0x2, 0xffffffff}, {0x4, 0x8, 0x1, 0x5409}, {0x9dcd, 0x0, 0x7, 0xa33}, {0xfff9, 0x1, 0x8, 0x1}, {0x3, 0x1, 0x3d, 0x7fff}, {0x3, 0x3, 0xfd, 0x3}, {0x4, 0x40, 0x9, 0xf2f}, {0x9, 0xb3, 0x0, 0xc}, {0xd, 0x61, 0x4, 0x9}, {0xd, 0x0, 0x4, 0x2}, {0x4d0, 0x0, 0x8, 0x8}, {0x26a, 0x3, 0xb, 0x3}, {0x6, 0x80, 0x6, 0x6}, {0x5, 0x7, 0xef, 0xfffffffe}, {0x0, 0x6, 0x5, 0x7fff}, {0x87b, 0x8, 0x7, 0x7ff}, {0x3, 0x1, 0x5, 0x8}, {0x222, 0x8, 0x4, 0x8}, {0xfff, 0x8, 0x2, 0x10}, {0x8, 0x9, 0x2, 0x5}, {0x3, 0x8, 0x1, 0x2}, {0xcb50, 0x2, 0x1, 0x5}, {0x0, 0x45, 0x2, 0x5}, {0x5, 0x5, 0xa, 0xa39}, {0x3, 0x8, 0x8, 0x7b}, {0x2, 0x82, 0x3, 0x1}], {0x5}}}]}, @ECN={0x24, 'ECN\x00', 0x0, {0x30}}}, {{@uncond, 0x0, 0xb8, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x1}}, @common=@ttl={{0x24}, {0x0, 0x7}}]}, @inet=@TOS={0x24, 'TOS\x00', 0x0, {0x2}}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0xff, 'syz_tun\x00', 'veth0_vlan\x00', {}, {0xff}, 0x16, 0x1, 0x8}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x6, 0x6, 0x2, 0x0, 0x4], 0x1, 0x3}, {0x4, [0x2, 0x6, 0x1, 0x2, 0x6], 0x0, 0x1}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xfffffffe, 0x2, @multicast2, 0x4e24}}}, {{@ip={@remote, @multicast2, 0x0, 0xffffffff, 'vlan1\x00', 'gretap0\x00', {}, {}, 0xff, 0x1, 0x5}, 0x0, 0x70, 0x94}, @TTL={0x24, 'TTL\x00', 0x0, {0x1, 0xc}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x694) 9.015407823s ago: executing program 1 (id=182): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x48582, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0xfff3, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x38, 0x2, [@TCA_FW_ACT={0x34, 0x4, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x24000800) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="0000000000000062e78756adf66232ce7a7413a4b6debfb4eb61c024c699dcf5aaf946597c50a50f945969d48dcef4c8da37503212b52a7a0d98140cc6f435b20778277c2020ce011dc5eef886904b1c552b", 0x52}], 0x1, 0x0, 0x0, 0x4090}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000022c00)={0x0, 0x0, 0x0}, 0x10120) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmmsg(r0, &(0x7f0000009c40)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000002c0)="9f6202c09fea89c1a4a4cef7e89ada6b5f27e50afc2bd575a075a6f86ae4a431af0b2c2dc979a5e158a39284ecc2fba581519070679d61ae883a07d08e3e380e6aeeaf952272ca7c4753e6a220f9062151b41f46e23cae16c6b7f6d87b0f18ed625c40703dafa35fad161355c9f23e00b4df2366fceb1883f793bc04c0a29e76611be211a242f9b738381e06d367e92774fd", 0x92}, {&(0x7f00000006c0)="f08ea19bee03b15024577f9ed546c919c1424da7930a534956e9a8e41867f9ff2d1f78ee724cc2ae22d4ba584025c76da7bfd634165af08b956983b4db24877de43bd343585101baa8761d44cfa9cb08a2291e85d2a2f66fda4e461886c39fdcbe609b9ccb9770d2f530e3ca3b9a6d9ceba0186ac1fd888cf55afe63ead88c07ae78f1af5093cc70e96288808ace2d56e4c41ae6bfc4c9fda19fb8cb96bec16e94a5b3c37c52633681cdbac405a6fbe03870ba5dba46cf762ddf71b76dd6d7af6a12bd953927e784ab5fb2003fb6a6ebe4bb2696c7343a314d8ed656c6852ea2", 0xe0}, {&(0x7f0000000040)="97fcbded3090ed4704b5d4", 0xb}, {&(0x7f0000000900)="de1f8b9d45be1defd1115f88b4927e054f2179e5f8d81614c0d36908a8558414c803f39e5ffa3f58550a7920761d93a2cace968db3c690fd7d33195894ba7d34fad07eaa9815ecb6d2afc872cb30e4399aa5f3a65ca7402bcee5ce591fcf1b09ec02a842ab226a5f6d53a28c3191995d9578b20dab830b55479e09b959d258355d55dd43f3b625c375fc91895de784ab2a20f3a96f018ef077ccf8f2d2e17da0ef8b46623c3aab38624289adb144267d4b487c201553adad4ade44e5b3528848e8bd494c19625f77ce57903a87c07fd3b92e76c2382bb66163310f815e16bedae54ab2d1c059", 0xe6}, {&(0x7f00000005c0)="2c356e9994263b068c89116eab33892a672fcc9aa87341fd67c20671d67432598fd6e333259603b5940e9fce0b994e792195b7e1543940a241bfa8566cabd36b5e76d272c531ca82a536be23ba82f4bbf60b1b98170b73c0a4504e24d4d8822f5bf2a5e1e3e985e434fd422e2e7f36f3b09f6ef150b61c", 0x77}], 0x5}}], 0x1, 0x48800) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000006800010003001000fedbdf25000000000000000049000200010000001500000004000c807c37e80f00594798ad1dd53206b6afdabe694fcea8a98c095665eb8e0377e223c9871757230cde0bb16f9a4947fe7947fa82f1252637d35ec5e095d626570a724b1c5d33d6acef3a9ddf8231d9"], 0x28}, 0x1, 0x0, 0x0, 0x4008018}, 0x4004084) 7.615333159s ago: executing program 1 (id=186): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x32) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = accept4(r1, 0x0, 0x0, 0x0) write(r4, &(0x7f0000000040)="cb", 0xfffffdef) 7.296387662s ago: executing program 0 (id=188): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$nl_route(r0, 0x0, 0x0) 7.190798594s ago: executing program 3 (id=189): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@delneigh={0x24, 0x1d, 0x10, 0x70bd2d, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x1, 0x11, 0x8}, [@NDA_NH_ID={0x8, 0xd, 0x101}]}, 0x24}, 0x1, 0x0, 0x0, 0x24048094}, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000340)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x38}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}], {0x95, 0x0, 0x1200}}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010000000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffdbdf250a"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 6.986628643s ago: executing program 0 (id=190): socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x1d, 0x2, 0x6) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x80) fcntl$notify(r0, 0x402, 0x26) fcntl$notify(r0, 0x402, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x2, 0x7ffffc, 0x8000000000000001, 0x0, 0xc3ad, 0x0, 0x3}, 0x0, 0x0) 6.915729731s ago: executing program 3 (id=191): ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000040)=0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800c48f00000000000064f81e00010008000000", @ANYRES32=0x0, @ANYBLOB="000000000a0002000000000000000000"], 0x28}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={'\x00', 0x7ff, 0x20001, 0xc, 0xb, 0x59c, 0xffffffffffffffff}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000100)=[0x0], 0x1}) syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) r6 = syz_io_uring_setup(0x24fd, &(0x7f0000000f80)={0x0, 0xfffffffb, 0x424, 0x0, 0x80}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000040)=ANY=[@ANYBLOB='1q'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGBITSND(r9, 0x40044591, 0x0) syz_io_uring_setup(0x1e22, &(0x7f0000000200)={0x0, 0x27c2, 0x10100, 0x2, 0x7c}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x3, 0x0, @fd=r6, 0x6, &(0x7f0000000500)=""/253, 0xfd, 0x4, 0x1, {0x0, r12}}) r13 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r14 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE2(r14, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) close_range(r13, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc01c64b9, &(0x7f00000004c0)={0x0, 0x0, 0x0, r5}) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000002c0)) 6.531624596s ago: executing program 0 (id=193): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000bcc000/0x4000)=nil, 0x4000}}) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x769}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ppoll(&(0x7f0000000180)=[{r0, 0x4047, 0x700}], 0x1, 0x0, 0x0, 0x0) close(r0) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x6559, 0x13580, 0x4000003}, &(0x7f0000000040), &(0x7f0000000140)) (fail_nth: 25) 6.432007333s ago: executing program 3 (id=194): symlink(&(0x7f0000000780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') readlink(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)=""/1, 0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002280)={0x2020}, 0x2020) 5.675201291s ago: executing program 3 (id=196): shmget$private(0x0, 0x5000, 0x78000000, &(0x7f0000ff8000/0x5000)=nil) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) r1 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580, 0x1}, &(0x7f0000000100), &(0x7f00000012c0)) io_uring_enter(r1, 0x1, 0x3, 0x29, 0x0, 0x0) timerfd_gettime(r0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f67fe4)={0xa, 0x4e20, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r3 = accept4(r2, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x80, 0x8, 0x9a, 0x101, {{0x24, 0x4, 0x1, 0x7, 0x90, 0x67, 0x0, 0x7, 0x29, 0x0, @loopback, @multicast1, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @noop, @timestamp_addr={0x44, 0x34, 0x82, 0x1, 0x2, [{@remote, 0x1000}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x8}, {@remote, 0x7}, {@private=0xa010102, 0xa003}, {@empty, 0xfffffffe}, {@private=0xa010100, 0x9}]}, @end, @rr={0x7, 0x23, 0x80, [@dev={0xac, 0x14, 0x14, 0x18}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @rand_addr=0x64010100, @broadcast, @empty, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x1a, 0x2, [{0x2, 0x3, "02"}, {0x0, 0x8, "c22d4cebb814"}, {0x0, 0x9, "daa2597080cca1"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000380)={'ip_vti0\x00', r4, 0x40, 0x700, 0x6, 0x7, {{0x5, 0x4, 0x0, 0x13, 0x14, 0x64, 0x0, 0x44, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x12}, @multicast2}}}}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x308, 0x2c, 0x10, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x10, 0xe}, {0x0, 0x2}, {0x3, 0x6}}, [@filter_kind_options=@f_matchall={{0xd}, {0x2cc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffeb, 0x4}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0xa}}, @TCA_MATCHALL_ACT={0x288, 0x2, [@m_simple={0xcc, 0x1d, 0x0, 0x0, {{0xb}, {0xa0, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x9, 0x3, '!($/\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x2528, 0x0, 0x10000000, 0x2dcf21e, 0xfa09}}, @TCA_DEF_PARMS={0x18, 0x2, {0xef, 0x4, 0x4, 0x4}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x17, 0x3, 'nhpoly1305-generic\x00'}, @TCA_DEF_DATA={0x17, 0x3, 'nhpoly1305-generic\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0xfb90, 0x5, 0x1, 0x7}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x1b8, 0x18, 0x0, 0x0, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @random="7ceb41c70159"}, @TCA_IFE_TYPE={0x6, 0x5, 0x2}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffff9, 0xd8, 0x3, 0x4, 0xffff}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x10000, 0xa91, 0x8, 0x8, 0x6}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x9}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x4}, @TCA_IFE_METALST={0x30, 0x6, [@IFE_META_SKBMARK={0x8}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x1}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x1000}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @random="7993e8e6addc"}, @TCA_IFE_DMAC={0xa, 0x3, @random="8f03fdd3845f"}]}, {0xdc, 0x6, "362c7c44503fe5e652b063bffea66b1f1b006c30092ec18b1dbb8bc6ba32c60f3603f056f636690095bd40bfc9c180b104e45624e668bfd588001dbf657765bbba9ce08f9e269fcf97f46ceee8e6bf01cc553b3c61e5482fffeb7ce944226e604b85252407624b9e9296b63a4abe8d29c89b48c1853c1054ef326b4d062dbae3afb7f8ea77ec70b17635c3a046ec9bd306814f201f38af77ddfeb0e89abbac0444585749b14c9b605b053f6a20b80fd19d2f33b49de000cc4bfe90b79d7f864c9367b282a265891fd70efcfd05106e42b6f4d6116cd5f4d1"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8dd77a53edf6b9c, 0x10}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0x7}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x3}}]}, 0x308}}, 0x0) sched_setscheduler(0x0, 0xce46179f0e141374, &(0x7f0000000040)=0xd8) getsockopt$sock_buf(r3, 0x1, 0x1a, 0x0, &(0x7f0000000340)) syz_clone(0x40200400, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2c}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x800) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20104, 0x52895}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x44}}, 0x44000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0) r12 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r12, 0x40047452, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) 5.600960767s ago: executing program 0 (id=197): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x48582, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0xfff3, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x38, 0x2, [@TCA_FW_ACT={0x34, 0x4, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x24000800) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="0000000000000062e78756adf66232ce7a7413a4b6debfb4eb61c024c699dcf5aaf946597c50a50f945969d48dcef4c8da37503212b52a7a0d98140cc6f435b20778277c2020ce011dc5eef886904b1c552b", 0x52}], 0x1, 0x0, 0x0, 0x4090}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000022c00)={0x0, 0x0, 0x0}, 0x10120) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmmsg(r0, &(0x7f0000009c40)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000002c0)="9f6202c09fea89c1a4a4cef7e89ada6b5f27e50afc2bd575a075a6f86ae4a431af0b2c2dc979a5e158a39284ecc2fba581519070679d61ae883a07d08e3e380e6aeeaf952272ca7c4753e6a220f9062151b41f46e23cae16c6b7f6d87b0f18ed625c40703dafa35fad161355c9f23e00b4df2366fceb1883f793bc04c0a29e76611be211a242f9b738381e06d367e92774fd", 0x92}, {&(0x7f00000006c0)="f08ea19bee03b15024577f9ed546c919c1424da7930a534956e9a8e41867f9ff2d1f78ee724cc2ae22d4ba584025c76da7bfd634165af08b956983b4db24877de43bd343585101baa8761d44cfa9cb08a2291e85d2a2f66fda4e461886c39fdcbe609b9ccb9770d2f530e3ca3b9a6d9ceba0186ac1fd888cf55afe63ead88c07ae78f1af5093cc70e96288808ace2d56e4c41ae6bfc4c9fda19fb8cb96bec16e94a5b3c37c52633681cdbac405a6fbe03870ba5dba46cf762ddf71b76dd6d7af6a12bd953927e784ab5fb2003fb6a6ebe4bb2696c7343a314d8ed656c6852ea2", 0xe0}, {&(0x7f0000000040)="97fcbded3090ed4704b5d4", 0xb}, {&(0x7f0000000900)="de1f8b9d45be1defd1115f88b4927e054f2179e5f8d81614c0d36908a8558414c803f39e5ffa3f58550a7920761d93a2cace968db3c690fd7d33195894ba7d34fad07eaa9815ecb6d2afc872cb30e4399aa5f3a65ca7402bcee5ce591fcf1b09ec02a842ab226a5f6d53a28c3191995d9578b20dab830b55479e09b959d258355d55dd43f3b625c375fc91895de784ab2a20f3a96f018ef077ccf8f2d2e17da0ef8b46623c3aab38624289adb144267d4b487c201553adad4ade44e5b3528848e8bd494c19625f77ce57903a87c07fd3b92e76c2382bb66163310f815e16bedae54ab2d1c059", 0xe6}, {&(0x7f00000005c0)="2c356e9994263b068c89116eab33892a672fcc9aa87341fd67c20671d67432598fd6e333259603b5940e9fce0b994e792195b7e1543940a241bfa8566cabd36b5e76d272c531ca82a536be23ba82f4bbf60b1b98170b73c0a4504e24d4d8822f5bf2a5e1e3e985e434fd422e2e7f36f3b09f6ef150b61c", 0x77}], 0x5}}], 0x1, 0x48800) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000006800010003001000fedbdf25000000000000000049000200010000001500000004000c807c37e80f00594798ad1dd53206b6afdabe694fcea8a98c095665eb8e0377e223c9871757230cde0bb16f9a4947fe7947fa82f1252637d35ec5e095d626570a724b1c5d33d6acef3a9ddf8231d9"], 0x28}, 0x1, 0x0, 0x0, 0x4008018}, 0x4004084) 5.309219321s ago: executing program 4 (id=200): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 5.200837828s ago: executing program 2 (id=201): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@delneigh={0x24, 0x1d, 0x10, 0x70bd2d, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x1, 0x11, 0x8}, [@NDA_NH_ID={0x8, 0xd, 0x101}]}, 0x24}, 0x1, 0x0, 0x0, 0x24048094}, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000340)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x38}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}], {0x95, 0x0, 0x1200}}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010000000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffdbdf250a"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 4.811623448s ago: executing program 4 (id=202): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0xedff, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002400128009000100626f6e6400000000140002800500010005ffff0005001b"], 0x44}}, 0x0) 4.70072869s ago: executing program 3 (id=203): syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xf6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf1, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0xff, 0x4, 0x1, {0x22, 0x114}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x7, 0x1}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x8, 0x2, 0x2, 0xff, 0x3}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0xf8a5}}, {0xec, &(0x7f0000000440)=ANY=[@ANYBLOB="ec037a7411f3a808ffb43d2e366faca52070ebde28ff7068e7503ff4f3f6a2d595d396f21bf67f9224ba7677441792ddd6ac844c29e0f183aca0b10baa155ecaeff14c541ad93e5b08f10987bf0bf1904ee265a79a4e1e2883c4c140c21ff37c89d70094162bdc0a362cd271f2510a9ececfa7d002f5f399f7349ce05ac83e78881f9f6f18e5825415edefa97a736ee14f41dcd766c2a0990ef7aa4b7e16c380ac41e21b03da6ed3932b4bf83fead5c1ea6b391d1396263dffd7e629811b992d072130576988aaa2d05ad17a594f5c56d812ddc5625e6241390c508dbef6ebf5e11c346e8e3bd87b0486f00a89eeb43c89ce12ef4892"]}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc09}}]}) socket(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e00440002800600020001000000080001000100000008000300", @ANYRES32], 0x84}}, 0x20008040) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) (async) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) (async, rerun: 64) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 64) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) migrate_pages(0x0, 0x1fc, 0x0, &(0x7f00000003c0)=0x20000000000005) (async, rerun: 64) sendmmsg$inet(r3, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)}, {&(0x7f0000000d40)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d", 0xd3}, {&(0x7f0000000b80)}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet(r3, &(0x7f00000012c0)="09268a92d6fc158785b234f8b358387f1f6588b94b481241ded8974895abfab7511e6e95321202", 0xfffffffffffffdec, 0x11, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00'}) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x4, r5, 0x3}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000005480)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000000206010300000000000000000000000005000100070000000900020073797a3100000036056b9b2ab75d91"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c000180"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 4.469884867s ago: executing program 2 (id=204): ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000040)=0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800c48f00000000000064f81e00010008000000", @ANYRES32=0x0, @ANYBLOB="000000000a0002000000000000000000"], 0x28}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={'\x00', 0x7ff, 0x20001, 0xc, 0xb, 0x59c, 0xffffffffffffffff}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000100)=[0x0], 0x1}) syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) r6 = syz_io_uring_setup(0x24fd, &(0x7f0000000f80)={0x0, 0xfffffffb, 0x424, 0x0, 0x80}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000040)=ANY=[@ANYBLOB='1q'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGBITSND(r9, 0x40044591, 0x0) syz_io_uring_setup(0x1e22, &(0x7f0000000200)={0x0, 0x27c2, 0x10100, 0x2, 0x7c}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x3, 0x0, @fd=r6, 0x6, &(0x7f0000000500)=""/253, 0xfd, 0x4, 0x1, {0x0, r12}}) r13 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r14 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r14, 0x0, 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) close_range(r13, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc01c64b9, &(0x7f00000004c0)={0x0, 0x0, 0x0, r5}) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000002c0)) 4.398338717s ago: executing program 4 (id=205): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x0, {0x0, 0x0, 0x0, 0x20000000000008, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c18e8438ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000304016100"/20, @ANYRES32=0x0, @ANYBLOB="d3ddd1de00000000140012800b0001006d616373656300000400028008000500", @ANYBLOB='\b\x00\n'], 0x44}}, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 4.39672092s ago: executing program 1 (id=206): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000007140)={0x20, 0x16, 0xa01, 0x0, 0x0, {0x2}, [@generic="e2d36a2e44ad24", @nested={0x4, 0x149}]}, 0x20}}, 0x0) 4.250396984s ago: executing program 0 (id=207): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000480)={0x1d, r1}, 0x10) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000180)="9f336d70bf0008000000000000e388fb2c4f7ede37e7de1f2a1cfb06b88038c6ffbf07e70873b0384d86a1ceb4e570554ebc8154bf39", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x4000000000000e7, 0x0) (fail_nth: 4) 4.219663806s ago: executing program 2 (id=208): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000045, 0x0, 0x0) openat2$dir(0xffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x600, 0x181}, 0x18) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1900) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0xfffffffffffffccd) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={0x0, 0x401}, 0x8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f00000003c0)=0xc446806) write$binfmt_aout(r5, &(0x7f0000000280)=ANY=[@ANYRES8], 0xfce1) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000b80)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="b9", 0x1}], 0x1}}], 0x1, 0x240840c4) 4.1426808s ago: executing program 1 (id=209): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xc, @multicast, 'ip6tnl0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000003780), 0x0, 0x4000020) 3.839375344s ago: executing program 1 (id=210): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r3, &(0x7f0000000140)={0x11, 0x10, r4, 0x1, 0x0, 0x6, @remote}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0xfffffff8, 0x2000) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x499f, &(0x7f0000000380)={0x0, 0x1ffffa, 0x400, 0x0, 0x0, 0x0, r6}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x8, 0x2007, @fd, 0x4, &(0x7f00000006c0)=[{&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f0000000500)=""/133, 0x85}, {&(0x7f00000030c0)=""/4096, 0x1000}, {&(0x7f0000000440)=""/79, 0x4f}, {&(0x7f00000005c0)=""/109, 0x6d}, {&(0x7f0000000100)=""/6, 0x6}, {&(0x7f0000000280)=""/10, 0xa}, {&(0x7f0000000640)=""/93, 0x5d}], 0xa, 0x2}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f0000002080)=0x64, 0x23b) socket$nl_xfrm(0x10, 0x3, 0x6) socket$pppl2tp(0x18, 0x1, 0x1) getpid() socket$nl_xfrm(0x10, 0x3, 0x6) r11 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r11, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000340)={{{@in=@remote, @in6=@dev, 0x40, 0x0, 0x3, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x2b}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x3, 0x1, 0x7}}, 0xe4) sendmmsg(r11, &(0x7f0000000480), 0x2e9, 0x0) sendmmsg$sock(r3, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@qipcrtr={0x2a, 0x4, 0x2}, 0x80, 0x0}}], 0x2, 0x4074) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) write(0xffffffffffffffff, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77", 0xa1) 3.83840711s ago: executing program 2 (id=211): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000ffff"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000080)) 3.678664363s ago: executing program 0 (id=212): socket$nl_generic(0x10, 0x3, 0x10) r0 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket(0x10, 0x3, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) read$proc_mixer(r0, &(0x7f0000000040)=""/9, 0x9) listen(r3, 0x0) r4 = syz_io_uring_setup(0x364d, &(0x7f0000000180)={0x0, 0xaa44, 0x13900, 0x0, 0x8}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x308}}) io_uring_enter(r4, 0x2def, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) modify_ldt$write(0x1, &(0x7f0000000240)={0x1000, 0x0, 0x2000}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r10 = syz_open_procfs(0x0, 0x0) pread64(r10, &(0x7f0000019200)=""/102347, 0x18fcb, 0xc2a) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001300000008000300", @ANYRES32=r9, @ANYBLOB="06001200000000000600b50085010200040013000a00060008021100000000000c0043"], 0x48}, 0x1, 0x0, 0x0, 0x45}, 0x0) shutdown(r3, 0x0) 3.65512386s ago: executing program 4 (id=213): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x4, @remote}, {0xa, 0x0, 0x0, @mcast2, 0x1}, 0x1, {[0x0, 0x0, 0x0, 0xfffff490, 0x1]}}, 0x5c) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=@ipv6_newroute={0x3c, 0x18, 0x111, 0xffffffff, 0x0, {0xa, 0x60, 0x0, 0x0, 0xff, 0x0, 0xfd, 0x6}, [@RTA_OIF={0x8}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @private0}}]}, 0x3c}}, 0x84054) r5 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x5]}, 0x8) faccessat2(r5, &(0x7f0000000000)='\x00', 0x2, 0x1100) 3.371532799s ago: executing program 2 (id=214): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@delneigh={0x24, 0x1d, 0x10, 0x70bd2d, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x1, 0x11, 0x8}, [@NDA_NH_ID={0x8, 0xd, 0x101}]}, 0x24}, 0x1, 0x0, 0x0, 0x24048094}, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000340)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x38}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}], {0x95, 0x0, 0x1200}}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010000000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffdbdf250a"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 3.040730961s ago: executing program 4 (id=215): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x0, {0x0, 0x0, 0x0, 0x20000000000008, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c18e8438ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 2.570473405s ago: executing program 2 (id=216): syz_open_procfs$namespace(0x0, &(0x7f0000000580)='ns/mnt\x00') (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 64) syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) (rerun: 64) 2.503890586s ago: executing program 4 (id=217): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x48582, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0xfff3, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x38, 0x2, [@TCA_FW_ACT={0x34, 0x4, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x24000800) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="0000000000000062e78756adf66232ce7a7413a4b6debfb4eb61c024c699dcf5aaf946597c50a50f945969d48dcef4c8da37503212b52a7a0d98140cc6f435b20778277c2020ce011dc5eef886904b1c552b", 0x52}], 0x1, 0x0, 0x0, 0x4090}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000022c00)={0x0, 0x0, 0x0}, 0x10120) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmmsg(r0, &(0x7f0000009c40)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000002c0)="9f6202c09fea89c1a4a4cef7e89ada6b5f27e50afc2bd575a075a6f86ae4a431af0b2c2dc979a5e158a39284ecc2fba581519070679d61ae883a07d08e3e380e6aeeaf952272ca7c4753e6a220f9062151b41f46e23cae16c6b7f6d87b0f18ed625c40703dafa35fad161355c9f23e00b4df2366fceb1883f793bc04c0a29e76611be211a242f9b738381e06d367e92774fd", 0x92}, {&(0x7f00000006c0)="f08ea19bee03b15024577f9ed546c919c1424da7930a534956e9a8e41867f9ff2d1f78ee724cc2ae22d4ba584025c76da7bfd634165af08b956983b4db24877de43bd343585101baa8761d44cfa9cb08a2291e85d2a2f66fda4e461886c39fdcbe609b9ccb9770d2f530e3ca3b9a6d9ceba0186ac1fd888cf55afe63ead88c07ae78f1af5093cc70e96288808ace2d56e4c41ae6bfc4c9fda19fb8cb96bec16e94a5b3c37c52633681cdbac405a6fbe03870ba5dba46cf762ddf71b76dd6d7af6a12bd953927e784ab5fb2003fb6a6ebe4bb2696c7343a314d8ed656c6852ea2", 0xe0}, {&(0x7f0000000040)="97fcbded3090ed4704b5d4", 0xb}, {&(0x7f0000000900)="de1f8b9d45be1defd1115f88b4927e054f2179e5f8d81614c0d36908a8558414c803f39e5ffa3f58550a7920761d93a2cace968db3c690fd7d33195894ba7d34fad07eaa9815ecb6d2afc872cb30e4399aa5f3a65ca7402bcee5ce591fcf1b09ec02a842ab226a5f6d53a28c3191995d9578b20dab830b55479e09b959d258355d55dd43f3b625c375fc91895de784ab2a20f3a96f018ef077ccf8f2d2e17da0ef8b46623c3aab38624289adb144267d4b487c201553adad4ade44e5b3528848e8bd494c19625f77ce57903a87c07fd3b92e76c2382bb66163310f815e16bedae54ab2d1c059", 0xe6}, {&(0x7f00000005c0)="2c356e9994263b068c89116eab33892a672fcc9aa87341fd67c20671d67432598fd6e333259603b5940e9fce0b994e792195b7e1543940a241bfa8566cabd36b5e76d272c531ca82a536be23ba82f4bbf60b1b98170b73c0a4504e24d4d8822f5bf2a5e1e3e985e434fd422e2e7f36f3b09f6ef150b61c", 0x77}], 0x5}}], 0x1, 0x48800) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000006800010003001000fedbdf25000000000000000049000200010000001500000004000c807c37e80f00594798ad1dd53206b6afdabe694fcea8a98c095665eb8e0377e223c9871757230cde0bb16f9a4947fe7947fa82f1252637d35ec5e095d626570a724b1c5d33d6acef3a9ddf8231d9"], 0x28}, 0x1, 0x0, 0x0, 0x4008018}, 0x4004084) 0s ago: executing program 3 (id=218): ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000040)=0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800c48f00000000000064f81e00010008000000", @ANYRES32=0x0, @ANYBLOB="000000000a0002000000000000000000"], 0x28}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={'\x00', 0x7ff, 0x20001, 0xc, 0xb, 0x59c, 0xffffffffffffffff}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000100)=[0x0], 0x1}) syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) r6 = syz_io_uring_setup(0x24fd, &(0x7f0000000f80)={0x0, 0xfffffffb, 0x424, 0x0, 0x80}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000040)=ANY=[@ANYBLOB='1q'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGBITSND(r9, 0x40044591, 0x0) syz_io_uring_setup(0x1e22, &(0x7f0000000200)={0x0, 0x27c2, 0x10100, 0x2, 0x7c}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x3, 0x0, @fd=r6, 0x6, &(0x7f0000000500)=""/253, 0xfd, 0x4, 0x1, {0x0, r12}}) r13 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r14 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r14, 0x0, 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) close_range(r13, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc01c64b9, &(0x7f00000004c0)={0x0, 0x0, 0x0, r5}) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000002c0)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.22' (ED25519) to the list of known hosts. [ 83.451654][ T5820] cgroup: Unknown subsys name 'net' [ 83.581980][ T5820] cgroup: Unknown subsys name 'cpuset' [ 83.593921][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.352409][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.218728][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.236734][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.247251][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.268945][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.277804][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.285045][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.293752][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.302269][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.312956][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.340209][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.374520][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.382655][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.390701][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.405334][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.413195][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.452486][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.460820][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.476676][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.490527][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.499412][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.531813][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.540673][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.552936][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.562215][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.570925][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.119955][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 90.269943][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 90.349007][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 90.463703][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 90.497140][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 90.556912][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.564309][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.572868][ T5842] bridge_slave_0: entered allmulticast mode [ 90.581423][ T5842] bridge_slave_0: entered promiscuous mode [ 90.666613][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.673973][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.681553][ T5842] bridge_slave_1: entered allmulticast mode [ 90.689683][ T5842] bridge_slave_1: entered promiscuous mode [ 90.731996][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.739329][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.746612][ T5838] bridge_slave_0: entered allmulticast mode [ 90.755652][ T5838] bridge_slave_0: entered promiscuous mode [ 90.796248][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.803855][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.811555][ T5838] bridge_slave_1: entered allmulticast mode [ 90.819235][ T5838] bridge_slave_1: entered promiscuous mode [ 90.847295][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.860863][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.032234][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.039941][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.047394][ T5844] bridge_slave_0: entered allmulticast mode [ 91.055248][ T5844] bridge_slave_0: entered promiscuous mode [ 91.068061][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.093083][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.100457][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.108489][ T5845] bridge_slave_0: entered allmulticast mode [ 91.116785][ T5845] bridge_slave_0: entered promiscuous mode [ 91.131565][ T5842] team0: Port device team_slave_0 added [ 91.141416][ T5842] team0: Port device team_slave_1 added [ 91.149076][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.156318][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.163858][ T5840] bridge_slave_0: entered allmulticast mode [ 91.172018][ T5840] bridge_slave_0: entered promiscuous mode [ 91.179811][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.187150][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.194373][ T5844] bridge_slave_1: entered allmulticast mode [ 91.202216][ T5844] bridge_slave_1: entered promiscuous mode [ 91.212213][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.222137][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.229781][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.238305][ T5845] bridge_slave_1: entered allmulticast mode [ 91.246205][ T5845] bridge_slave_1: entered promiscuous mode [ 91.269655][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.277481][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.284696][ T5840] bridge_slave_1: entered allmulticast mode [ 91.292255][ T5840] bridge_slave_1: entered promiscuous mode [ 91.388127][ T5834] Bluetooth: hci1: command tx timeout [ 91.388132][ T5835] Bluetooth: hci0: command tx timeout [ 91.405842][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.418778][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.467553][ T5835] Bluetooth: hci2: command tx timeout [ 91.475732][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.486559][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.494346][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.521253][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.539709][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.557198][ T5835] Bluetooth: hci3: command tx timeout [ 91.574677][ T5838] team0: Port device team_slave_0 added [ 91.583547][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.594132][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.601213][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.630371][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.631679][ T5835] Bluetooth: hci4: command tx timeout [ 91.646077][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.685197][ T5838] team0: Port device team_slave_1 added [ 91.747202][ T5844] team0: Port device team_slave_0 added [ 91.787341][ T5845] team0: Port device team_slave_0 added [ 91.798439][ T5840] team0: Port device team_slave_0 added [ 91.807822][ T5844] team0: Port device team_slave_1 added [ 91.814732][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.822088][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.849103][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.863241][ T5845] team0: Port device team_slave_1 added [ 91.903076][ T5840] team0: Port device team_slave_1 added [ 91.924617][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.931899][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.958880][ T24] cfg80211: failed to load regulatory.db [ 91.965672][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.999679][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.006784][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.034302][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.112025][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.119408][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.147510][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.173232][ T5842] hsr_slave_0: entered promiscuous mode [ 92.181035][ T5842] hsr_slave_1: entered promiscuous mode [ 92.189325][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.196751][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.225592][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.239483][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.247198][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.274900][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.299758][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.306795][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.333486][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.346246][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.353597][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.379805][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.436003][ T5838] hsr_slave_0: entered promiscuous mode [ 92.446491][ T5838] hsr_slave_1: entered promiscuous mode [ 92.454208][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.462205][ T5838] Cannot create hsr debugfs directory [ 92.569993][ T5845] hsr_slave_0: entered promiscuous mode [ 92.576635][ T5845] hsr_slave_1: entered promiscuous mode [ 92.583777][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.592123][ T5845] Cannot create hsr debugfs directory [ 92.746248][ T5844] hsr_slave_0: entered promiscuous mode [ 92.752997][ T5844] hsr_slave_1: entered promiscuous mode [ 92.759940][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.768222][ T5844] Cannot create hsr debugfs directory [ 92.779301][ T5840] hsr_slave_0: entered promiscuous mode [ 92.785784][ T5840] hsr_slave_1: entered promiscuous mode [ 92.792370][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.800002][ T5840] Cannot create hsr debugfs directory [ 93.338494][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.356913][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.369619][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.381766][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.461042][ T5844] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.468970][ T5835] Bluetooth: hci1: command tx timeout [ 93.477482][ T5835] Bluetooth: hci0: command tx timeout [ 93.494123][ T5844] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.541922][ T5844] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.548824][ T5835] Bluetooth: hci2: command tx timeout [ 93.559902][ T5844] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.590980][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.619712][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.627491][ T5835] Bluetooth: hci3: command tx timeout [ 93.636815][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.660627][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.708108][ T5835] Bluetooth: hci4: command tx timeout [ 93.803466][ T5845] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.829575][ T5845] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.845372][ T5845] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.874108][ T5845] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.958843][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.015825][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.032278][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.044122][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.061118][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.075328][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.091252][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.148793][ T3007] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.156455][ T3007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.173274][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.208490][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.215746][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.226760][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.234568][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.259025][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.266277][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.393851][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.419632][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.502520][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.512249][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.565027][ T3007] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.572578][ T3007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.586140][ T3007] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.593400][ T3007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.611944][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.631733][ T3007] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.638947][ T3007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.665920][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.673202][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.693164][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.775214][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.859933][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.881724][ T5838] veth0_vlan: entered promiscuous mode [ 94.904994][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.913392][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.943086][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.950258][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.971916][ T5844] veth0_vlan: entered promiscuous mode [ 95.006076][ T5838] veth1_vlan: entered promiscuous mode [ 95.033297][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.044446][ T5844] veth1_vlan: entered promiscuous mode [ 95.134797][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.191035][ T5838] veth0_macvtap: entered promiscuous mode [ 95.210477][ T5838] veth1_macvtap: entered promiscuous mode [ 95.218881][ T5844] veth0_macvtap: entered promiscuous mode [ 95.262339][ T5842] veth0_vlan: entered promiscuous mode [ 95.275821][ T5844] veth1_macvtap: entered promiscuous mode [ 95.311113][ T5842] veth1_vlan: entered promiscuous mode [ 95.331100][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.363040][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.376295][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.399218][ T5845] veth0_vlan: entered promiscuous mode [ 95.412275][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.432651][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.457881][ T5845] veth1_vlan: entered promiscuous mode [ 95.471950][ T5838] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.481464][ T5838] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.490315][ T5838] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.499570][ T5838] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.514081][ T5844] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.523567][ T5844] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.532668][ T5844] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.542038][ T5844] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.547905][ T5835] Bluetooth: hci0: command tx timeout [ 95.556550][ T5834] Bluetooth: hci1: command tx timeout [ 95.630002][ T5834] Bluetooth: hci2: command tx timeout [ 95.659353][ T5842] veth0_macvtap: entered promiscuous mode [ 95.710524][ T5834] Bluetooth: hci3: command tx timeout [ 95.722284][ T5842] veth1_macvtap: entered promiscuous mode [ 95.780133][ T5840] veth0_vlan: entered promiscuous mode [ 95.793580][ T5834] Bluetooth: hci4: command tx timeout [ 95.808116][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.816216][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.816858][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.842027][ T5845] veth0_macvtap: entered promiscuous mode [ 95.876901][ T3007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.881192][ T5840] veth1_vlan: entered promiscuous mode [ 95.898376][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.906222][ T5845] veth1_macvtap: entered promiscuous mode [ 95.907856][ T3007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.940923][ T5842] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.952760][ T5842] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.961927][ T5842] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.972029][ T5842] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.059572][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.062861][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.073225][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.081427][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.095974][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.172548][ T5840] veth0_macvtap: entered promiscuous mode [ 96.198996][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.214552][ T5840] veth1_macvtap: entered promiscuous mode [ 96.222589][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.264163][ T5845] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.274404][ T5845] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.284588][ T5845] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.295143][ T5845] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.330678][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.425530][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.469677][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.481714][ T5840] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.493565][ T5840] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.499624][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.505794][ T5840] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.524358][ T5840] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.630332][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.848495][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 96.857201][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 96.896002][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.949211][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 96.957998][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.966569][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.177779][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.257070][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 97.627618][ T5834] Bluetooth: hci1: command tx timeout [ 97.647665][ T5835] Bluetooth: hci0: command tx timeout [ 97.664182][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.688030][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.709101][ T5834] Bluetooth: hci2: command tx timeout [ 97.716532][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.794177][ T5834] Bluetooth: hci3: command tx timeout [ 97.876931][ T5834] Bluetooth: hci4: command tx timeout [ 98.001425][ T5901] netlink: 'syz.2.3': attribute type 4 has an invalid length. [ 98.053540][ T3007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.086329][ T5901] netlink: 'syz.2.3': attribute type 4 has an invalid length. [ 98.094665][ T3007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.133251][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.216263][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.270002][ T5901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 98.273779][ T3007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.352024][ T3007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.486526][ T5905] netlink: 'syz.1.6': attribute type 8 has an invalid length. [ 98.545537][ T5905] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.773203][ T5910] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 98.997312][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 99.407440][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 101.428109][ T5951] netlink: 'syz.0.13': attribute type 4 has an invalid length. [ 101.587545][ T5951] netlink: 'syz.0.13': attribute type 4 has an invalid length. [ 101.632844][ T5952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13'. [ 103.368720][ T5974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17'. [ 103.686564][ T5976] netlink: 'syz.4.18': attribute type 1 has an invalid length. [ 104.056903][ T5974] netlink: 60 bytes leftover after parsing attributes in process `syz.1.17'. [ 105.405746][ T5988] bridge_slave_0: left allmulticast mode [ 105.416014][ T5988] bridge_slave_0: left promiscuous mode [ 105.426780][ T5988] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.525882][ T5988] bridge_slave_1: left allmulticast mode [ 105.532787][ T5988] bridge_slave_1: left promiscuous mode [ 105.574075][ T5988] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.915045][ T5988] bond0: (slave bond_slave_0): Releasing backup interface [ 106.012891][ T5988] bond0: (slave bond_slave_1): Releasing backup interface [ 106.021638][ T976] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 106.226648][ T5988] team0: Port device team_slave_0 removed [ 106.398096][ T5988] team0: Port device team_slave_1 removed [ 106.406426][ T5988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.414822][ T5988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.423384][ T976] usb 3-1: Using ep0 maxpacket: 32 [ 106.460766][ T5988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.501770][ T5988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.518297][ T976] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.680504][ T976] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 107.007393][ T976] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 107.016685][ T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.067639][ T976] usb 3-1: config 0 descriptor?? [ 107.573323][ T5986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.591351][ T5986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.691078][ T6011] netlink: 'syz.1.26': attribute type 4 has an invalid length. [ 107.798937][ T1207] usb 3-1: USB disconnect, device number 2 [ 107.868296][ T6014] netlink: 'syz.1.26': attribute type 4 has an invalid length. [ 108.308534][ T6011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.26'. [ 108.811496][ T6016] netlink: 16 bytes leftover after parsing attributes in process `syz.1.27'. [ 109.388251][ T6027] netlink: 'syz.4.30': attribute type 23 has an invalid length. [ 109.433486][ T6027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.30'. [ 110.167112][ T5883] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 110.605383][ T5883] usb 2-1: config 0 has no interfaces? [ 110.649787][ T5883] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 110.705973][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.773801][ T5883] usb 2-1: Product: syz [ 110.779181][ T5883] usb 2-1: Manufacturer: syz [ 110.784201][ T5883] usb 2-1: SerialNumber: syz [ 110.800465][ T30] audit: type=1326 audit(1747476175.167:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.0.28" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f87558 code=0x7ffc0000 [ 110.809068][ T5883] usb 2-1: config 0 descriptor?? [ 111.017039][ T30] audit: type=1326 audit(1747476175.167:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.0.28" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f87558 code=0x7ffc0000 [ 111.483410][ T30] audit: type=1326 audit(1747476175.167:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.0.28" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87539 code=0x7ffc0000 [ 111.635714][ T30] audit: type=1326 audit(1747476175.167:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.0.28" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f87558 code=0x7ffc0000 [ 111.835748][ T30] audit: type=1326 audit(1747476175.167:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.0.28" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87539 code=0x7ffc0000 [ 111.925494][ T30] audit: type=1326 audit(1747476175.167:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.0.28" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f87558 code=0x7ffc0000 [ 112.173315][ T30] audit: type=1326 audit(1747476175.167:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.0.28" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87539 code=0x7ffc0000 [ 112.357244][ T30] audit: type=1326 audit(1747476175.167:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.0.28" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f87558 code=0x7ffc0000 [ 112.409574][ T30] audit: type=1326 audit(1747476175.167:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.0.28" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87539 code=0x7ffc0000 [ 112.452342][ T30] audit: type=1326 audit(1747476175.167:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.0.28" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87539 code=0x7ffc0000 [ 112.565652][ T6050] netlink: 'syz.2.35': attribute type 4 has an invalid length. [ 112.725553][ T6050] netlink: 'syz.2.35': attribute type 4 has an invalid length. [ 112.814452][ T6050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.35'. [ 112.866015][ T6050] netlink: 12 bytes leftover after parsing attributes in process `syz.2.35'. [ 113.466709][ T6057] netlink: 28 bytes leftover after parsing attributes in process `syz.3.37'. [ 113.476114][ T6057] netlink: 28 bytes leftover after parsing attributes in process `syz.3.37'. [ 113.587091][ T5881] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 113.768349][ T5881] usb 1-1: config 0 has no interfaces? [ 113.812466][ T5881] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 113.821818][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.841616][ T5881] usb 1-1: Product: syz [ 113.854493][ T5881] usb 1-1: Manufacturer: syz [ 113.867084][ T5881] usb 1-1: SerialNumber: syz [ 114.168187][ T5881] usb 1-1: config 0 descriptor?? [ 114.417543][ T6058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.429794][ T6058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.100110][ T6074] netlink: 16 bytes leftover after parsing attributes in process `syz.3.41'. [ 115.257188][ T5883] usb 2-1: USB disconnect, device number 2 [ 115.667300][ T6080] netlink: 'syz.1.43': attribute type 1 has an invalid length. [ 116.322570][ T6087] netlink: 28 bytes leftover after parsing attributes in process `syz.3.45'. [ 116.739569][ T5883] usb 1-1: USB disconnect, device number 2 [ 116.818665][ T6092] blktrace: Concurrent blktraces are not allowed on sg0 [ 116.996289][ T6094] netlink: 72 bytes leftover after parsing attributes in process `syz.0.48'. [ 117.137837][ T6096] Zero length message leads to an empty skb [ 117.221610][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 117.336379][ T24] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 117.393566][ T6102] netlink: 24 bytes leftover after parsing attributes in process `syz.4.47'. [ 119.607211][ T6109] netlink: 'syz.3.51': attribute type 4 has an invalid length. [ 119.632826][ T6111] blktrace: Concurrent blktraces are not allowed on sg0 [ 119.675079][ T6114] bridge1: entered promiscuous mode [ 119.703158][ T6118] netlink: 'syz.3.51': attribute type 4 has an invalid length. [ 119.822264][ T6109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.51'. [ 119.864247][ T6109] netlink: 12 bytes leftover after parsing attributes in process `syz.3.51'. [ 120.098010][ T6123] IPv6: NLM_F_REPLACE set, but no existing node found! [ 120.622174][ T6137] netlink: 28 bytes leftover after parsing attributes in process `syz.4.58'. [ 121.367086][ T5885] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 121.607082][ T5885] usb 5-1: device descriptor read/64, error -71 [ 121.862965][ T5885] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 122.044507][ T5885] usb 5-1: device descriptor read/64, error -71 [ 122.203515][ T5885] usb usb5-port1: attempt power cycle [ 122.662912][ T6160] netlink: 24 bytes leftover after parsing attributes in process `syz.0.63'. [ 122.937591][ T5885] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 122.968791][ T5885] usb 5-1: device descriptor read/8, error -71 [ 123.247064][ T5885] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 123.277842][ T5885] usb 5-1: device descriptor read/8, error -71 [ 123.404624][ T5885] usb usb5-port1: unable to enumerate USB device [ 123.895011][ T6169] netlink: 'syz.2.64': attribute type 1 has an invalid length. [ 124.477713][ T6175] netlink: 72 bytes leftover after parsing attributes in process `syz.4.66'. [ 124.692859][ T5881] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 124.789652][ T5881] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 125.827113][ T5885] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 126.242197][ T5885] usb 2-1: Using ep0 maxpacket: 16 [ 126.295560][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.365445][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.406525][ T5885] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 126.656539][ T5885] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 126.807031][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.856274][ T5885] usb 2-1: config 0 descriptor?? [ 126.913883][ T6188] bridge1: entered promiscuous mode [ 126.928798][ T5885] usb 2-1: can't set config #0, error -71 [ 126.962535][ T5885] usb 2-1: USB disconnect, device number 3 [ 127.497086][ T5885] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 127.619641][ T1207] IPVS: starting estimator thread 0... [ 127.727068][ T5885] usb 2-1: Invalid ep0 maxpacket: 64 [ 127.799056][ T6205] IPVS: using max 36 ests per chain, 86400 per kthread [ 127.887062][ T5885] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 128.484497][ T6210] FAULT_INJECTION: forcing a failure. [ 128.484497][ T6210] name failslab, interval 1, probability 0, space 0, times 1 [ 128.583315][ T5885] usb 2-1: Invalid ep0 maxpacket: 64 [ 128.612791][ T6210] CPU: 1 UID: 0 PID: 6210 Comm: syz.2.77 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 128.612822][ T6210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 128.612840][ T6210] Call Trace: [ 128.612855][ T6210] [ 128.612865][ T6210] dump_stack_lvl+0x189/0x250 [ 128.612905][ T6210] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.612936][ T6210] ? __pfx__printk+0x10/0x10 [ 128.612960][ T6210] ? __pfx___might_resched+0x10/0x10 [ 128.612981][ T6210] ? fs_reclaim_acquire+0x7d/0x100 [ 128.613019][ T6210] should_fail_ex+0x414/0x560 [ 128.613047][ T6210] should_failslab+0xa8/0x100 [ 128.613078][ T6210] __kmalloc_noprof+0xcb/0x4f0 [ 128.613105][ T6210] ? ethnl_default_start+0x141/0x570 [ 128.613138][ T6210] ethnl_default_start+0x141/0x570 [ 128.613171][ T6210] genl_start+0x4c3/0x6c0 [ 128.613213][ T6210] __netlink_dump_start+0x469/0x7e0 [ 128.613247][ T6210] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 128.613284][ T6210] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 128.613315][ T6210] ? genl_get_cmd+0x67f/0x910 [ 128.613351][ T6210] ? __pfx_genl_start+0x10/0x10 [ 128.613379][ T6210] ? __pfx_genl_dumpit+0x10/0x10 [ 128.613408][ T6210] ? __pfx_genl_done+0x10/0x10 [ 128.613463][ T6210] genl_rcv_msg+0x5da/0x790 [ 128.613502][ T6210] ? __pfx_genl_rcv_msg+0x10/0x10 [ 128.613532][ T6210] ? __pfx_ethnl_default_start+0x10/0x10 [ 128.613556][ T6210] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 128.613588][ T6210] ? __pfx_ethnl_default_done+0x10/0x10 [ 128.613616][ T6210] ? ref_tracker_free+0x63a/0x7d0 [ 128.613639][ T6210] ? __copy_skb_header+0xa7/0x550 [ 128.613680][ T6210] netlink_rcv_skb+0x21c/0x490 [ 128.613707][ T6210] ? __pfx_genl_rcv_msg+0x10/0x10 [ 128.613740][ T6210] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 128.613792][ T6210] ? down_read+0x1ad/0x2e0 [ 128.613833][ T6210] genl_rcv+0x28/0x40 [ 128.613862][ T6210] netlink_unicast+0x758/0x8d0 [ 128.613898][ T6210] netlink_sendmsg+0x805/0xb30 [ 128.613935][ T6210] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.613964][ T6210] ? __import_iovec+0x5d4/0x7f0 [ 128.613992][ T6210] ? aa_sock_msg_perm+0x94/0x160 [ 128.614019][ T6210] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 128.614043][ T6210] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.614070][ T6210] __sock_sendmsg+0x219/0x270 [ 128.614096][ T6210] ____sys_sendmsg+0x505/0x830 [ 128.614133][ T6210] ? __pfx_____sys_sendmsg+0x10/0x10 [ 128.614186][ T6210] ___sys_sendmsg+0x21f/0x2a0 [ 128.614219][ T6210] ? __pfx____sys_sendmsg+0x10/0x10 [ 128.614291][ T6210] ? __fget_files+0x2a/0x420 [ 128.614318][ T6210] ? __fget_files+0x3a0/0x420 [ 128.614359][ T6210] __sys_sendmsg+0x164/0x220 [ 128.614391][ T6210] ? __pfx___sys_sendmsg+0x10/0x10 [ 128.614438][ T6210] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 128.614468][ T6210] ? lockdep_hardirqs_on+0x9c/0x150 [ 128.614497][ T6210] __do_fast_syscall_32+0xb4/0x110 [ 128.614527][ T6210] ? lockdep_hardirqs_on+0x9c/0x150 [ 128.614558][ T6210] do_fast_syscall_32+0x34/0x80 [ 128.614595][ T6210] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 128.614621][ T6210] RIP: 0023:0xf708e539 [ 128.614645][ T6210] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 128.614662][ T6210] RSP: 002b:00000000f507e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 128.614691][ T6210] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800006c0 [ 128.614705][ T6210] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 128.614717][ T6210] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 128.614728][ T6210] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 128.614740][ T6210] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 128.614771][ T6210] [ 128.992438][ T5885] usb usb2-port1: attempt power cycle [ 129.337062][ T5885] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 129.465878][ T5885] usb 2-1: Invalid ep0 maxpacket: 64 [ 129.632791][ T5885] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 129.741061][ T5885] usb 2-1: Invalid ep0 maxpacket: 64 [ 129.767969][ T5885] usb usb2-port1: unable to enumerate USB device [ 129.834516][ T6220] netdevsim netdevsim2: Direct firmware load for ..€ failed with error -2 [ 129.885539][ T6220] netdevsim netdevsim2: Falling back to sysfs fallback for: ..€ [ 130.169891][ T6223] binder: 6222:6223 ioctl c020aa07 80000000 returned -22 [ 130.389017][ T6227] FAULT_INJECTION: forcing a failure. [ 130.389017][ T6227] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 130.457690][ T6227] CPU: 1 UID: 0 PID: 6227 Comm: syz.3.85 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 130.457723][ T6227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 130.457733][ T6227] Call Trace: [ 130.457739][ T6227] [ 130.457747][ T6227] dump_stack_lvl+0x189/0x250 [ 130.457774][ T6227] ? __lock_acquire+0xaac/0xd20 [ 130.457798][ T6227] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.457820][ T6227] ? __pfx__printk+0x10/0x10 [ 130.457835][ T6227] ? __might_fault+0xb0/0x130 [ 130.457863][ T6227] should_fail_ex+0x414/0x560 [ 130.457883][ T6227] _copy_from_user+0x2d/0xb0 [ 130.457906][ T6227] kstrtouint_from_user+0xc4/0x170 [ 130.457927][ T6227] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 130.457957][ T6227] proc_fail_nth_write+0x88/0x240 [ 130.457980][ T6227] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 130.458006][ T6227] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 130.458029][ T6227] vfs_write+0x27b/0xa90 [ 130.458054][ T6227] ? __pfx_vfs_write+0x10/0x10 [ 130.458073][ T6227] ? __fget_files+0x2a/0x420 [ 130.458097][ T6227] ? __fget_files+0x3a0/0x420 [ 130.458116][ T6227] ? __fget_files+0x2a/0x420 [ 130.458143][ T6227] ksys_write+0x145/0x250 [ 130.458162][ T6227] ? __pfx_ksys_write+0x10/0x10 [ 130.458181][ T6227] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 130.458203][ T6227] ? lockdep_hardirqs_on+0x9c/0x150 [ 130.458224][ T6227] __do_fast_syscall_32+0xb4/0x110 [ 130.458245][ T6227] ? lockdep_hardirqs_on+0x9c/0x150 [ 130.458267][ T6227] do_fast_syscall_32+0x34/0x80 [ 130.458287][ T6227] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 130.458306][ T6227] RIP: 0023:0xf7ff2539 [ 130.458319][ T6227] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 130.458331][ T6227] RSP: 002b:00000000f5116590 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 130.458347][ T6227] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5116620 [ 130.458357][ T6227] RDX: 0000000000000001 RSI: 00000000f7482ff4 RDI: 0000000000000000 [ 130.458366][ T6227] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 130.458374][ T6227] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 130.458382][ T6227] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 130.458403][ T6227] [ 131.267629][ T6234] netlink: 'syz.3.87': attribute type 4 has an invalid length. [ 131.494945][ T6234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.87'. [ 131.638543][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 131.681104][ T6225] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 131.855763][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 131.931839][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.958636][ T6243] netlink: 'syz.3.90': attribute type 4 has an invalid length. [ 132.007185][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.007335][ T6243] netlink: 'syz.3.90': attribute type 4 has an invalid length. [ 132.119221][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 132.148989][ T6243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.90'. [ 132.193158][ T6246] blktrace: Concurrent blktraces are not allowed on sg0 [ 132.203711][ T24] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 132.274009][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.333240][ T24] usb 1-1: config 0 descriptor?? [ 132.744992][ T6256] fuse: Bad value for 'user_id' [ 132.764793][ T6256] fuse: Bad value for 'user_id' [ 132.780999][ T6258] FAULT_INJECTION: forcing a failure. [ 132.780999][ T6258] name failslab, interval 1, probability 0, space 0, times 0 [ 132.842362][ T6258] CPU: 0 UID: 0 PID: 6258 Comm: syz.4.95 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 132.842395][ T6258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 132.842409][ T6258] Call Trace: [ 132.842417][ T6258] [ 132.842427][ T6258] dump_stack_lvl+0x189/0x250 [ 132.842467][ T6258] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.842499][ T6258] ? __pfx__printk+0x10/0x10 [ 132.842534][ T6258] ? __pfx___might_resched+0x10/0x10 [ 132.842561][ T6258] should_fail_ex+0x414/0x560 [ 132.842590][ T6258] should_failslab+0xa8/0x100 [ 132.842621][ T6258] kmem_cache_alloc_noprof+0x73/0x3c0 [ 132.842649][ T6258] ? getname_flags+0xb8/0x540 [ 132.842683][ T6258] getname_flags+0xb8/0x540 [ 132.842719][ T6258] __ia32_sys_mkdirat+0x7a/0xa0 [ 132.842746][ T6258] __do_fast_syscall_32+0xb4/0x110 [ 132.842777][ T6258] ? lockdep_hardirqs_on+0x9c/0x150 [ 132.842806][ T6258] do_fast_syscall_32+0x34/0x80 [ 132.842836][ T6258] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 132.842864][ T6258] RIP: 0023:0xf707e539 [ 132.842883][ T6258] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 132.842899][ T6258] RSP: 002b:00000000f506e3c8 EFLAGS: 00000206 ORIG_RAX: 0000000000000128 [ 132.842920][ T6258] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000100 [ 132.842934][ T6258] RDX: 00000000000001ff RSI: 0000000080000140 RDI: 0000000000000000 [ 132.842947][ T6258] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 132.842955][ T6258] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 132.842964][ T6258] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 132.842984][ T6258] [ 133.023048][ C0] vkms_vblank_simulate: vblank timer overrun [ 133.064702][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.071701][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.205129][ T24] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0003/input/input5 [ 133.313623][ T6270] netlink: 'syz.1.98': attribute type 8 has an invalid length. [ 133.366025][ T6268] fuse: Bad value for 'user_id' [ 133.420924][ T6268] fuse: Bad value for 'user_id' [ 133.452961][ T24] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 133.453641][ T6274] netlink: 'syz.3.100': attribute type 4 has an invalid length. [ 133.752572][ T6274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.100'. [ 134.064431][ T6281] netlink: 'syz.2.102': attribute type 4 has an invalid length. [ 134.093771][ T6281] netlink: 'syz.2.102': attribute type 4 has an invalid length. [ 134.101814][ T6284] blktrace: Concurrent blktraces are not allowed on sg0 [ 134.790562][ T5887] usb 1-1: USB disconnect, device number 3 [ 135.497569][ T6307] netlink: 'syz.0.113': attribute type 4 has an invalid length. [ 135.540189][ T6307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.113'. [ 135.571529][ T6312] netlink: 'syz.4.115': attribute type 4 has an invalid length. [ 135.589149][ T6304] IPv6: NLM_F_REPLACE set, but no existing node found! [ 135.624973][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 135.624994][ T30] audit: type=1326 audit(1747476199.997:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6306 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 135.655096][ T6316] netlink: 'syz.4.115': attribute type 4 has an invalid length. [ 135.676332][ T6314] blktrace: Concurrent blktraces are not allowed on sg0 [ 135.777352][ T30] audit: type=1326 audit(1747476199.997:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6306 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 135.799118][ C0] vkms_vblank_simulate: vblank timer overrun [ 135.863977][ T6312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.115'. [ 135.865627][ T30] audit: type=1326 audit(1747476199.997:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6306 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=40000003 syscall=435 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 135.894868][ C0] vkms_vblank_simulate: vblank timer overrun [ 136.007830][ T30] audit: type=1326 audit(1747476200.047:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6315 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 136.029682][ C0] vkms_vblank_simulate: vblank timer overrun [ 136.051841][ T6324] fuse: Bad value for 'fd' [ 136.062905][ T6324] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-xor(2) [ 136.099737][ T30] audit: type=1326 audit(1747476200.047:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6306 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 136.216061][ T30] audit: type=1326 audit(1747476200.047:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6306 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 136.238834][ T30] audit: type=1326 audit(1747476200.117:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6306 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 136.260937][ C0] vkms_vblank_simulate: vblank timer overrun [ 136.288383][ T30] audit: type=1326 audit(1747476200.117:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6306 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 136.343363][ T30] audit: type=1326 audit(1747476200.117:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6306 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 136.399607][ T976] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 136.419739][ T30] audit: type=1326 audit(1747476200.117:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6306 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=40000003 syscall=270 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 136.448878][ T5883] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 136.579330][ T976] usb 4-1: Using ep0 maxpacket: 8 [ 136.590492][ T976] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 136.606507][ T976] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.628020][ T5883] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 136.646695][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.661766][ T976] usb 4-1: config 0 has no interface number 0 [ 136.675114][ T976] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 136.688042][ T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.688133][ T5883] usb 1-1: config 0 descriptor?? [ 136.701633][ T976] usb 4-1: Product: syz [ 136.705866][ T976] usb 4-1: Manufacturer: syz [ 136.713281][ T976] usb 4-1: SerialNumber: syz [ 136.729662][ T976] usb 4-1: config 0 descriptor?? [ 136.788256][ T5885] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 136.960964][ T5885] usb 5-1: config index 0 descriptor too short (expected 31, got 27) [ 136.991115][ T5885] usb 5-1: config 1 interface 0 altsetting 253 endpoint 0x1 has invalid wMaxPacketSize 0 [ 137.002565][ T5885] usb 5-1: config 1 interface 0 has no altsetting 0 [ 137.013636][ T6324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.029488][ T5885] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 137.040537][ T6324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.052503][ T5885] usb 5-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 137.063042][ T5885] usb 5-1: Product: syz [ 137.067696][ T5885] usb 5-1: Manufacturer: syz [ 137.072872][ T5885] usb 5-1: SerialNumber: syz [ 137.131852][ T6324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.119'. [ 137.236717][ T5881] usb 4-1: USB disconnect, device number 2 [ 137.323716][ T6348] batman_adv: batadv0: Adding interface: dummy0 [ 137.331714][ T6348] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.358584][ T6348] batman_adv: batadv0: Interface activated: dummy0 [ 137.394042][ T6348] : entered promiscuous mode [ 137.418363][ T6348] batadv0: mtu less than device minimum [ 137.425907][ T6348] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 137.438784][ T6348] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 137.450743][ T6348] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 137.462701][ T6348] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 137.475222][ T6348] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 137.487570][ T6348] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 137.499785][ T6348] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 137.511716][ T6348] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 137.523881][ T6348] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 137.698215][ T6353] validate_nla: 2 callbacks suppressed [ 137.698237][ T6353] netlink: 'syz.1.127': attribute type 4 has an invalid length. [ 137.720929][ T6353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.127'. [ 137.966236][ T6358] blktrace: Concurrent blktraces are not allowed on sg0 [ 137.991218][ T6360] netlink: 'syz.3.130': attribute type 8 has an invalid length. [ 138.230188][ T6363] netlink: 24 bytes leftover after parsing attributes in process `syz.3.132'. [ 138.268134][ T6365] netlink: 'syz.1.131': attribute type 4 has an invalid length. [ 138.304037][ T6365] netlink: 'syz.1.131': attribute type 4 has an invalid length. [ 138.455223][ T6366] netlink: 28 bytes leftover after parsing attributes in process `syz.2.128'. [ 138.531128][ T6366] netlink: 28 bytes leftover after parsing attributes in process `syz.2.128'. [ 138.819951][ T6356] netlink: 4388 bytes leftover after parsing attributes in process `syz.2.128'. [ 139.349759][ T5885] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 139.450033][ T5885] usb 5-1: USB disconnect, device number 6 [ 139.500650][ T5989] udevd[5989]: setting owner of /dev/usb/lp0 to uid=0, gid=7 failed: No such file or directory [ 139.513352][ T5885] usblp0: removed [ 139.578409][ T6388] FAULT_INJECTION: forcing a failure. [ 139.578409][ T6388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.616723][ T6388] CPU: 1 UID: 0 PID: 6388 Comm: syz.4.138 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 139.616754][ T6388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 139.616768][ T6388] Call Trace: [ 139.616776][ T6388] [ 139.616786][ T6388] dump_stack_lvl+0x189/0x250 [ 139.616821][ T6388] ? __lock_acquire+0xaac/0xd20 [ 139.616855][ T6388] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.616886][ T6388] ? __pfx__printk+0x10/0x10 [ 139.616908][ T6388] ? __might_fault+0xb0/0x130 [ 139.616951][ T6388] should_fail_ex+0x414/0x560 [ 139.616986][ T6388] _copy_from_iter+0x1db/0x15a0 [ 139.617017][ T6388] ? _copy_from_iter+0x24c/0x15a0 [ 139.617047][ T6388] ? sock_alloc_send_pskb+0x875/0x990 [ 139.617080][ T6388] ? __pfx__copy_from_iter+0x10/0x10 [ 139.617110][ T6388] ? __pfx__copy_from_iter+0x10/0x10 [ 139.617142][ T6388] ? page_copy_sane+0x16a/0x280 [ 139.617172][ T6388] copy_page_from_iter+0x7b/0x100 [ 139.617203][ T6388] skb_copy_datagram_from_iter+0x306/0x720 [ 139.617250][ T6388] tun_get_user+0x1533/0x3c20 [ 139.617303][ T6388] ? aa_file_perm+0x11f/0xed0 [ 139.617330][ T6388] ? __pfx_tun_get_user+0x10/0x10 [ 139.617360][ T6388] ? aa_file_perm+0x11f/0xed0 [ 139.617386][ T6388] ? aa_file_perm+0x3e7/0xed0 [ 139.617425][ T6388] ? ref_tracker_alloc+0x318/0x460 [ 139.617452][ T6388] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 139.617483][ T6388] ? tun_get+0x1c/0x2f0 [ 139.617521][ T6388] ? tun_get+0x1c/0x2f0 [ 139.617551][ T6388] ? tun_get+0x1c/0x2f0 [ 139.617587][ T6388] tun_chr_write_iter+0x113/0x200 [ 139.617622][ T6388] vfs_write+0x548/0xa90 [ 139.617653][ T6388] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 139.617685][ T6388] ? __pfx_vfs_write+0x10/0x10 [ 139.617721][ T6388] ? __fget_files+0x2a/0x420 [ 139.617760][ T6388] ksys_write+0x145/0x250 [ 139.617788][ T6388] ? __pfx_ksys_write+0x10/0x10 [ 139.617816][ T6388] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 139.617846][ T6388] ? lockdep_hardirqs_on+0x9c/0x150 [ 139.617875][ T6388] __do_fast_syscall_32+0xb4/0x110 [ 139.617905][ T6388] ? lockdep_hardirqs_on+0x9c/0x150 [ 139.617936][ T6388] do_fast_syscall_32+0x34/0x80 [ 139.617979][ T6388] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 139.618005][ T6388] RIP: 0023:0xf707e539 [ 139.618023][ T6388] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 139.618041][ T6388] RSP: 002b:00000000f506e520 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 139.618063][ T6388] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000000 [ 139.618078][ T6388] RDX: 000000000000fdef RSI: 00000000f73e2ff4 RDI: 0000000000000000 [ 139.618091][ T6388] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 139.618103][ T6388] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 139.618115][ T6388] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 139.618144][ T6388] [ 140.509239][ T6373] bridge0: port 3(veth1_to_bridge) entered blocking state [ 140.518419][ T6373] bridge0: port 3(veth1_to_bridge) entered disabled state [ 140.526053][ T6373] veth1_to_bridge: entered allmulticast mode [ 140.535243][ T6373] veth1_to_bridge: entered promiscuous mode [ 140.541601][ T6373] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 140.556038][ T6373] bridge0: port 3(veth1_to_bridge) entered blocking state [ 140.563605][ T6373] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 140.633635][ T5883] usb 1-1: Cannot read MAC address [ 140.636554][ T6397] netlink: 'syz.4.139': attribute type 4 has an invalid length. [ 140.643777][ T5883] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 140.663137][ T6397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.139'. [ 140.791339][ T5883] usb 1-1: USB disconnect, device number 4 [ 140.837240][ T5881] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 140.997135][ T5881] usb 4-1: Using ep0 maxpacket: 32 [ 141.016023][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.028095][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.028220][ T6401] blktrace: Concurrent blktraces are not allowed on sg0 [ 141.048180][ T5881] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 141.067153][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.129118][ T5881] usb 4-1: config 0 descriptor?? [ 141.343969][ T6390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.137'. [ 141.488532][ T6404] netlink: 'syz.1.143': attribute type 8 has an invalid length. [ 142.056523][ T6407] netlink: 'syz.4.144': attribute type 4 has an invalid length. [ 142.169303][ T6410] netlink: 'syz.4.144': attribute type 4 has an invalid length. [ 142.238105][ T6407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.144'. [ 142.549266][ T5881] usbhid 4-1:0.0: can't add hid device: -71 [ 142.555386][ T5881] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 142.628544][ T5881] usb 4-1: USB disconnect, device number 3 [ 143.885813][ T6430] netlink: 'syz.1.151': attribute type 4 has an invalid length. [ 143.925173][ T6430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.151'. [ 144.023035][ T6432] blktrace: Concurrent blktraces are not allowed on sg0 [ 144.077045][ T5887] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 144.129919][ T6434] IPv6: NLM_F_REPLACE set, but no existing node found! [ 144.504935][ T5881] IPVS: starting estimator thread 0... [ 144.583926][ T5887] usb 3-1: config 0 has no interfaces? [ 144.621186][ T6445] IPVS: using max 26 ests per chain, 62400 per kthread [ 144.673950][ T5887] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 144.703547][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.729853][ T5887] usb 3-1: Product: syz [ 144.776813][ T5887] usb 3-1: Manufacturer: syz [ 144.784965][ T5887] usb 3-1: SerialNumber: syz [ 144.793724][ T5887] usb 3-1: config 0 descriptor?? [ 145.122348][ T6429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.169730][ T6429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.507647][ T6451] netlink: 'syz.1.159': attribute type 4 has an invalid length. [ 145.570840][ T6452] netlink: 'syz.1.159': attribute type 4 has an invalid length. [ 145.648287][ T6451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.159'. [ 146.020321][ T6460] netlink: 'syz.0.163': attribute type 16 has an invalid length. [ 146.056907][ T6460] netlink: 'syz.0.163': attribute type 17 has an invalid length. [ 146.118372][ T6463] capability: warning: `syz.0.163' uses deprecated v2 capabilities in a way that may be insecure [ 146.165348][ T6464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.194458][ T6466] netlink: 'syz.4.165': attribute type 4 has an invalid length. [ 146.421394][ T6465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.165'. [ 146.583918][ T6463] tipc: Started in network mode [ 146.607105][ T6463] tipc: Node identity ac1414aa, cluster identity 4711 [ 146.623960][ T6463] tipc: Enabling of bearer rejected, failed to enable media [ 146.694486][ T5881] usb 3-1: USB disconnect, device number 3 [ 147.001764][ T6475] blktrace: Concurrent blktraces are not allowed on sg0 [ 147.166362][ T6477] netlink: 16 bytes leftover after parsing attributes in process `syz.2.168'. [ 147.465953][ T6484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.170'. [ 147.631801][ T6486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.171'. [ 147.648535][ T5881] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 147.850416][ T5881] usb 1-1: device descriptor read/64, error -71 [ 147.939763][ T5887] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 148.097606][ T5881] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 148.131762][ T5887] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 148.150658][ T5887] usb 3-1: config 0 has no interface number 0 [ 148.213506][ T5887] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 148.232122][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.243115][ T5887] usb 3-1: Product: syz [ 148.256240][ T5881] usb 1-1: device descriptor read/64, error -71 [ 148.262979][ T5887] usb 3-1: Manufacturer: syz [ 148.272550][ T5887] usb 3-1: SerialNumber: syz [ 148.298842][ T5887] usb 3-1: config 0 descriptor?? [ 148.381443][ T5881] usb usb1-port1: attempt power cycle [ 148.421310][ T6503] netlink: 'syz.3.176': attribute type 4 has an invalid length. [ 148.450981][ T6503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.176'. [ 148.717428][ T1207] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 148.755660][ T5881] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 148.798152][ T5881] usb 1-1: device descriptor read/8, error -71 [ 148.902236][ T6514] netlink: 666 bytes leftover after parsing attributes in process `syz.1.178'. [ 148.917142][ T5887] usb 3-1: Firmware version (0.0) predates our first public release. [ 148.942260][ T5887] usb 3-1: Please update to version 0.2 or newer [ 148.965678][ T1207] usb 5-1: Using ep0 maxpacket: 32 [ 148.985073][ T1207] usb 5-1: config 4 has an invalid interface number: 208 but max is 1 [ 148.999446][ T1207] usb 5-1: config 4 has an invalid interface number: 199 but max is 1 [ 149.076134][ T1207] usb 5-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 149.086613][ T1207] usb 5-1: config 4 has an invalid interface number: 15 but max is 1 [ 149.102288][ T1207] usb 5-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 149.112147][ T1207] usb 5-1: config 4 has an invalid descriptor of length 128, skipping remainder of the config [ 149.122984][ T5881] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 149.481813][ T5887] usb 3-1: Firmware: build 9í [ 149.512492][ T5881] usb 1-1: device descriptor read/8, error -71 [ 149.529737][ T1207] usb 5-1: config 4 has 3 interfaces, different from the descriptor's value: 2 [ 149.540969][ T1207] usb 5-1: config 4 has no interface number 0 [ 149.547442][ T1207] usb 5-1: config 4 has no interface number 1 [ 149.553830][ T1207] usb 5-1: config 4 has no interface number 2 [ 149.563744][ T1207] usb 5-1: config 4 interface 208 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 15 [ 149.594301][ T1207] usb 5-1: too many endpoints for config 4 interface 199 altsetting 71: 119, using maximum allowed: 30 [ 149.606295][ T1207] usb 5-1: config 4 interface 199 altsetting 71 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 149.617813][ T1207] usb 5-1: config 4 interface 199 altsetting 71 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 149.629574][ T1207] usb 5-1: config 4 interface 199 altsetting 71 has an invalid descriptor for endpoint zero, skipping [ 149.641101][ T1207] usb 5-1: config 4 interface 199 altsetting 71 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 149.652712][ T5881] usb usb1-port1: unable to enumerate USB device [ 149.653284][ T6520] blktrace: Concurrent blktraces are not allowed on sg0 [ 149.660292][ T1207] usb 5-1: config 4 interface 199 altsetting 71 has a duplicate endpoint with address 0x3, skipping [ 149.677221][ T1207] usb 5-1: config 4 interface 199 altsetting 71 has a duplicate endpoint with address 0x6, skipping [ 149.690101][ T1207] usb 5-1: config 4 interface 199 altsetting 71 has a duplicate endpoint with address 0xF, skipping [ 149.701288][ T1207] usb 5-1: config 4 interface 199 altsetting 71 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 149.712865][ T1207] usb 5-1: config 4 interface 199 altsetting 71 has a duplicate endpoint with address 0xF, skipping [ 149.740250][ T1207] usb 5-1: config 4 interface 199 altsetting 71 has an invalid descriptor for endpoint zero, skipping [ 149.777073][ T1207] usb 5-1: config 4 interface 199 altsetting 71 has a duplicate endpoint with address 0xC, skipping [ 149.826493][ T5887] usb 3-1: USB disconnect, device number 4 [ 149.899122][ T1207] usb 5-1: config 4 interface 199 altsetting 71 has 14 endpoint descriptors, different from the interface descriptor's value: 119 [ 149.925824][ T1207] usb 5-1: config 4 interface 15 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 149.946108][ T1207] usb 5-1: config 4 interface 199 has no altsetting 0 [ 149.959085][ T1207] usb 5-1: config 4 interface 15 has no altsetting 0 [ 149.979802][ T1207] usb 5-1: New USB device found, idVendor=2001, idProduct=3a05, bcdDevice=e5.22 [ 149.991062][ T1207] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.034047][ T1207] usb 5-1: Product: syz [ 150.050109][ T1207] usb 5-1: Manufacturer: syz [ 150.054768][ T1207] usb 5-1: SerialNumber: syz [ 150.063549][ T6522] netlink: 'syz.3.181': attribute type 16 has an invalid length. [ 150.106299][ T6522] netlink: 'syz.3.181': attribute type 17 has an invalid length. [ 150.539582][ T6523] tipc: Started in network mode [ 150.585450][ T6523] tipc: Node identity ac1414aa, cluster identity 4711 [ 150.621040][ T6523] tipc: Enabling of bearer rejected, failed to enable media [ 150.939592][ T6533] netlink: 16 bytes leftover after parsing attributes in process `syz.1.182'. [ 152.294058][ T6552] netlink: 'syz.3.189': attribute type 4 has an invalid length. [ 152.315307][ T6552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.189'. [ 152.356553][ T6536] netlink: 24 bytes leftover after parsing attributes in process `syz.2.184'. [ 152.634050][ T6557] blktrace: Concurrent blktraces are not allowed on sg0 [ 152.691073][ T1207] usb 5-1: Could not find all expected endpoints [ 152.738192][ T1207] usb 5-1: Could not find all expected endpoints [ 152.803659][ T1207] usb 5-1: Could not find all expected endpoints [ 152.877386][ T1207] usb 5-1: USB disconnect, device number 7 [ 152.991307][ T6563] FAULT_INJECTION: forcing a failure. [ 152.991307][ T6563] name failslab, interval 1, probability 0, space 0, times 0 [ 153.037382][ T6563] CPU: 1 UID: 0 PID: 6563 Comm: syz.0.193 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 153.037413][ T6563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 153.037426][ T6563] Call Trace: [ 153.037435][ T6563] [ 153.037444][ T6563] dump_stack_lvl+0x189/0x250 [ 153.037483][ T6563] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.037514][ T6563] ? __pfx__printk+0x10/0x10 [ 153.037538][ T6563] ? __pfx___might_resched+0x10/0x10 [ 153.037559][ T6563] ? fs_reclaim_acquire+0x7d/0x100 [ 153.037598][ T6563] should_fail_ex+0x414/0x560 [ 153.037626][ T6563] should_failslab+0xa8/0x100 [ 153.037657][ T6563] __kmalloc_cache_noprof+0x70/0x3d0 [ 153.037684][ T6563] ? io_wq_create+0xbd/0x820 [ 153.037711][ T6563] io_wq_create+0xbd/0x820 [ 153.037737][ T6563] io_uring_alloc_task_context+0x275/0x590 [ 153.037763][ T6563] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 153.037794][ T6563] ? __pfx_io_wq_submit_work+0x10/0x10 [ 153.037825][ T6563] ? __pfx_io_wq_free_work+0x10/0x10 [ 153.037862][ T6563] ? alloc_anon_inode+0x1be/0x360 [ 153.037888][ T6563] ? bpf_lsm_inode_init_security_anon+0x9/0x20 [ 153.037918][ T6563] __io_uring_add_tctx_node+0x33e/0x4e0 [ 153.037955][ T6563] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 153.038006][ T6563] io_uring_create+0x71a/0xb60 [ 153.038032][ T6563] __se_sys_io_uring_setup+0x264/0x270 [ 153.038053][ T6563] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 153.038091][ T6563] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 153.038119][ T6563] ? lockdep_hardirqs_on+0x9c/0x150 [ 153.038146][ T6563] __do_fast_syscall_32+0xb4/0x110 [ 153.038175][ T6563] ? lockdep_hardirqs_on+0x9c/0x150 [ 153.038205][ T6563] do_fast_syscall_32+0x34/0x80 [ 153.038233][ T6563] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 153.038259][ T6563] RIP: 0023:0xf7f87539 [ 153.038276][ T6563] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 153.038293][ T6563] RSP: 002b:00000000f508550c EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 153.038315][ T6563] RAX: ffffffffffffffda RBX: 0000000000001f87 RCX: 0000000080000080 [ 153.038329][ T6563] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 153.038341][ T6563] RBP: 0000000080000040 R08: 0000000000000000 R09: 0000000000000000 [ 153.038353][ T6563] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 153.038365][ T6563] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 153.038393][ T6563] [ 154.243806][ T6584] netlink: 16 bytes leftover after parsing attributes in process `syz.0.197'. [ 154.374200][ T6588] netlink: 'syz.2.201': attribute type 4 has an invalid length. [ 154.441055][ T6588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.201'. [ 154.784578][ T6591] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (4) [ 154.928799][ T6594] blktrace: Concurrent blktraces are not allowed on sg0 [ 154.937198][ T5885] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 155.019490][ T6598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.206'. [ 155.100316][ T5885] usb 4-1: Invalid ep0 maxpacket: 16 [ 155.184238][ T6601] FAULT_INJECTION: forcing a failure. [ 155.184238][ T6601] name failslab, interval 1, probability 0, space 0, times 0 [ 155.226204][ T6601] CPU: 1 UID: 0 PID: 6601 Comm: syz.0.207 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 155.226240][ T6601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 155.226253][ T6601] Call Trace: [ 155.226262][ T6601] [ 155.226271][ T6601] dump_stack_lvl+0x189/0x250 [ 155.226311][ T6601] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.226352][ T6601] ? __pfx__printk+0x10/0x10 [ 155.226379][ T6601] ? __pfx___might_resched+0x10/0x10 [ 155.226399][ T6601] ? fs_reclaim_acquire+0x7d/0x100 [ 155.226436][ T6601] should_fail_ex+0x414/0x560 [ 155.226465][ T6601] should_failslab+0xa8/0x100 [ 155.226496][ T6601] __kmalloc_cache_noprof+0x70/0x3d0 [ 155.226524][ T6601] ? bcm_rx_setup+0x488/0x19a0 [ 155.226560][ T6601] ? __local_bh_enable_ip+0x12d/0x1c0 [ 155.226586][ T6601] bcm_rx_setup+0x488/0x19a0 [ 155.226631][ T6601] bcm_sendmsg+0x255/0x6a0 [ 155.226666][ T6601] ? __pfx_bcm_sendmsg+0x10/0x10 [ 155.226701][ T6601] ? __import_iovec+0x40e/0x7f0 [ 155.226729][ T6601] ? aa_sock_msg_perm+0x94/0x160 [ 155.226755][ T6601] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 155.226780][ T6601] ? __pfx_bcm_sendmsg+0x10/0x10 [ 155.226809][ T6601] __sock_sendmsg+0x219/0x270 [ 155.226836][ T6601] ____sys_sendmsg+0x52d/0x830 [ 155.226872][ T6601] ? __pfx_____sys_sendmsg+0x10/0x10 [ 155.226924][ T6601] ___sys_sendmsg+0x21f/0x2a0 [ 155.226956][ T6601] ? __pfx____sys_sendmsg+0x10/0x10 [ 155.227023][ T6601] ? __fget_files+0x2a/0x420 [ 155.227052][ T6601] ? __fget_files+0x3a0/0x420 [ 155.227093][ T6601] __sys_sendmmsg+0x28e/0x430 [ 155.227130][ T6601] ? __pfx___sys_sendmmsg+0x10/0x10 [ 155.227171][ T6601] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 155.227220][ T6601] ? ksys_write+0x1f0/0x250 [ 155.227258][ T6601] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 155.227290][ T6601] __do_fast_syscall_32+0xb4/0x110 [ 155.227321][ T6601] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.227359][ T6601] do_fast_syscall_32+0x34/0x80 [ 155.227388][ T6601] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 155.227414][ T6601] RIP: 0023:0xf7f87539 [ 155.227431][ T6601] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 155.227448][ T6601] RSP: 002b:00000000f50a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 155.227469][ T6601] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001b00 [ 155.227483][ T6601] RDX: 00000000000000e7 RSI: 0000000000000000 RDI: 0000000000000000 [ 155.227494][ T6601] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 155.227505][ T6601] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 155.227517][ T6601] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 155.227546][ T6601] [ 155.287437][ T5885] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 155.757081][ T5885] usb 4-1: Invalid ep0 maxpacket: 16 [ 155.781299][ T5885] usb usb4-port1: attempt power cycle [ 155.998727][ T6611] IPv6: NLM_F_REPLACE set, but no existing node found! [ 156.208478][ T6622] netlink: 'syz.2.214': attribute type 4 has an invalid length. [ 156.250343][ T6622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.214'. [ 156.325703][ T5885] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 156.358092][ T5885] usb 4-1: Invalid ep0 maxpacket: 16 [ 156.717369][ T5885] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 156.737859][ T5885] usb 4-1: Invalid ep0 maxpacket: 16 [ 156.743711][ T5885] usb usb4-port1: unable to enumerate USB device [ 157.190693][ T6631] netlink: 16 bytes leftover after parsing attributes in process `syz.4.217'. [ 157.229113][ C0] net_ratelimit: 10 callbacks suppressed [ 157.229135][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 157.247700][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 157.260235][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 157.272624][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 157.285711][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 157.298320][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 157.310784][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 157.323130][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 157.335596][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 157.347950][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 157.454608][ T5883] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 158.326270][ T5883] usb 3-1: Using ep0 maxpacket: 16 [ 161.266011][ T5883] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 161.345935][ C0] sched: DL replenish lagged too much [ 162.237297][ C0] net_ratelimit: 10989 callbacks suppressed [ 162.237320][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 162.255884][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 162.268617][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.281170][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.293784][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 162.306284][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 162.318828][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.331308][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.343968][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 162.356597][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 162.610471][ T5883] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 162.636007][ T5883] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 162.885204][ T5883] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 167.246990][ C0] net_ratelimit: 10375 callbacks suppressed [ 167.247013][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 167.265593][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.278030][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.290537][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 167.302954][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 167.315460][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.327901][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.340431][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 167.352875][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 167.365378][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.111027][ T5883] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 169.712462][ T5883] usb 3-1: config 1 interface 0 has no altsetting 0 [ 169.734404][ T5883] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 172.257022][ C0] net_ratelimit: 11324 callbacks suppressed [ 172.257045][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.275484][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 172.287847][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 172.300308][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.312806][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.325314][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 172.337801][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 172.350311][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.362684][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.375302][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 177.267288][ C0] net_ratelimit: 11719 callbacks suppressed [ 177.267311][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 177.285725][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 177.298681][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.311086][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.323567][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 177.335985][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 177.348551][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.360927][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.373585][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 177.386068][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 182.277194][ C0] net_ratelimit: 11835 callbacks suppressed [ 182.277218][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 182.295799][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.308174][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.320644][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 182.333116][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 182.345616][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.358043][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.370501][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 182.382877][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 182.395530][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.287160][ C0] net_ratelimit: 11456 callbacks suppressed [ 187.287183][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.305842][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 187.318329][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 187.330826][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.343303][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.355813][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 187.368228][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 187.380713][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.393048][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.405494][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 192.297286][ C0] net_ratelimit: 11168 callbacks suppressed [ 192.297309][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 192.315752][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.328122][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.340590][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 192.353183][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 192.365766][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.378270][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.390804][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 192.403187][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 192.415789][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.542703][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.565791][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.307174][ C0] net_ratelimit: 11854 callbacks suppressed [ 197.307197][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 197.325684][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.338163][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.351154][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 197.363851][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 197.376348][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.388750][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.401327][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 197.413893][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 197.426552][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.317080][ C0] net_ratelimit: 12213 callbacks suppressed [ 202.317102][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 202.335268][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 202.347978][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.360476][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.373063][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 202.385541][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 202.398208][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.410784][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.423298][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 202.435551][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 207.327140][ C0] net_ratelimit: 12871 callbacks suppressed [ 207.327164][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 207.346030][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.358596][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.371157][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 207.383815][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 207.396425][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.408972][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.421857][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 207.434125][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 207.446768][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.337006][ C0] net_ratelimit: 12980 callbacks suppressed [ 212.337028][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.355393][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 212.367967][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 212.380713][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.393289][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.405951][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 212.418537][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 212.430998][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.443587][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.456120][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 217.347228][ C0] net_ratelimit: 12928 callbacks suppressed [ 217.347252][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 217.367016][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.379404][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.391913][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 217.404766][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 217.417489][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.430244][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.442992][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 217.455281][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 217.467946][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.357100][ C0] net_ratelimit: 12004 callbacks suppressed [ 222.357123][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 222.375790][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.388337][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.400885][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 222.413583][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 222.426070][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 222.439191][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.451849][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.464554][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 222.477137][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 227.367128][ C0] net_ratelimit: 10909 callbacks suppressed [ 227.367152][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 227.385466][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 227.398005][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.410530][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.423153][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 227.435617][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 227.448068][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 227.460627][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 227.473190][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.485589][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.377123][ C0] net_ratelimit: 12046 callbacks suppressed [ 232.377146][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 232.395544][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.408020][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.420685][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 232.433442][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.445788][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.458429][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 232.470998][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 232.483592][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 232.496055][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.387273][ C0] net_ratelimit: 12753 callbacks suppressed [ 237.387296][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 237.405768][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.418148][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.430626][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 237.443111][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 237.455583][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 237.468291][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.480666][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.493151][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 237.505574][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.396985][ C0] net_ratelimit: 12795 callbacks suppressed [ 242.397011][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 242.415769][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.428192][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.440694][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 242.453251][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.465493][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.478444][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 242.490922][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 242.503404][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 242.515842][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.407062][ C0] net_ratelimit: 12025 callbacks suppressed [ 247.407087][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 247.426056][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.438598][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.451199][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 247.464295][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 247.476997][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 247.489491][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.501937][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.514529][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 247.527378][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.416934][ C0] net_ratelimit: 11910 callbacks suppressed [ 252.416958][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 252.435693][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.448071][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.460686][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 252.473711][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 252.486142][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 252.498706][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.511081][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.523557][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 252.536208][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.427245][ C0] net_ratelimit: 12946 callbacks suppressed [ 257.427268][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 257.445802][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 257.458375][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.470956][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.484204][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 257.496657][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.509043][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.521691][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 257.534229][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 257.546449][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 262.437182][ C0] net_ratelimit: 12950 callbacks suppressed [ 262.437205][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 262.456042][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 262.468567][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.481238][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.494182][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 262.506791][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.519149][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.531694][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 262.544203][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 262.556578][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 267.447090][ C0] net_ratelimit: 12796 callbacks suppressed [ 267.447113][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.466238][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 267.478930][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 267.491513][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 267.503904][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.516656][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.529145][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 267.541733][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.554282][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.567170][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 272.457131][ C0] net_ratelimit: 12785 callbacks suppressed [ 272.457154][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 272.475591][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.488233][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.500789][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 272.513353][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.525775][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.538404][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 272.550991][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 272.563470][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 272.575866][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.467186][ C0] net_ratelimit: 13007 callbacks suppressed [ 277.467211][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.485665][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.498137][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 277.510646][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.523126][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.535638][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 277.548205][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 277.560680][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 277.573987][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.586596][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.477031][ C0] net_ratelimit: 13022 callbacks suppressed [ 282.477054][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.495534][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.508264][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 282.520745][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.533269][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.545610][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 282.558126][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 282.570795][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 282.583605][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.595990][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.487126][ C0] net_ratelimit: 12984 callbacks suppressed [ 287.487148][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 287.505683][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.518063][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.530923][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 287.543427][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 287.555846][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 287.568310][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.580701][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.593214][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 287.605659][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.822297][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.497325][ C0] net_ratelimit: 11619 callbacks suppressed [ 292.497348][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 292.515679][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.528192][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.540867][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 292.553346][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.565722][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.578211][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 292.590672][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 292.603111][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 292.615672][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.447878][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 293.466792][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 297.506983][ C0] net_ratelimit: 10991 callbacks suppressed [ 297.507006][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.525484][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.537952][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 297.550426][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.562830][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.575479][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 297.588215][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 297.600633][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 297.613183][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.625565][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.517228][ C0] net_ratelimit: 11633 callbacks suppressed [ 302.517250][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.535678][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.548131][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 302.560640][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 302.573101][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 302.585516][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.598063][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.610532][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 302.623300][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.635863][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.686893][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 302.693908][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6606/1:b..l [ 302.702323][ C0] rcu: (detected by 0, t=10503 jiffies, g=17269, q=2030 ncpus=2) [ 302.710187][ C0] task:syz.1.210 state:R running task stack:24136 pid:6606 tgid:6606 ppid:5838 task_flags:0x400040 flags:0x20004006 [ 302.724711][ C0] Call Trace: [ 302.728225][ C0] [ 302.731196][ C0] __schedule+0x16e2/0x4cd0 [ 302.735756][ C0] ? do_raw_spin_unlock+0x61/0x240 [ 302.740919][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 302.746850][ C0] ? preempt_schedule_irq+0xb5/0x150 [ 302.752224][ C0] ? __pfx___schedule+0x10/0x10 [ 302.757130][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 302.762371][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 302.768329][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 302.773664][ C0] preempt_schedule_irq+0xb5/0x150 [ 302.778847][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 302.784604][ C0] ? check_noncircular+0xe0/0x160 [ 302.789675][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 302.795516][ C0] irqentry_exit+0x6f/0x90 [ 302.799974][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 302.805997][ C0] RIP: 0010:lock_acquire+0x175/0x360 [ 302.811341][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 6b 4f d7 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 302.831341][ C0] RSP: 0018:ffffc9000b28f438 EFLAGS: 00000206 [ 302.837988][ C0] RAX: 866cdb3eba3a5b00 RBX: 0000000000000000 RCX: 866cdb3eba3a5b00 [ 302.845999][ C0] RDX: 0000000000000000 RSI: ffffffff8d9374a8 RDI: ffffffff8bc1d9a0 [ 302.854090][ C0] RBP: ffffffff8171ca05 R08: 0000000000000000 R09: 0000000000000000 [ 302.862100][ C0] R10: 0000000000000000 R11: ffffffff8171ca05 R12: 0000000000000002 [ 302.870211][ C0] R13: ffffffff8df3dce0 R14: 0000000000000000 R15: 0000000000000246 [ 302.878272][ C0] ? unwind_next_frame+0xa5/0x2390 [ 302.883433][ C0] ? unwind_next_frame+0xa5/0x2390 [ 302.888608][ C0] ? unwind_next_frame+0xa5/0x2390 [ 302.893782][ C0] ? __alloc_skb+0x142/0x2d0 [ 302.898420][ C0] ? unwind_next_frame+0xa5/0x2390 [ 302.903660][ C0] unwind_next_frame+0xc2/0x2390 [ 302.908728][ C0] ? unwind_next_frame+0xa5/0x2390 [ 302.913900][ C0] ? unwind_next_frame+0xa5/0x2390 [ 302.919153][ C0] ? kmalloc_reserve+0xbd/0x290 [ 302.924110][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 302.930395][ C0] arch_stack_walk+0x11c/0x150 [ 302.935210][ C0] ? __alloc_skb+0x142/0x2d0 [ 302.939848][ C0] stack_trace_save+0x9c/0xe0 [ 302.944564][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 302.950131][ C0] save_stack+0xf7/0x1f0 [ 302.954420][ C0] ? __pfx_save_stack+0x10/0x10 [ 302.959315][ C0] ? __free_frozen_pages+0xb0e/0xcd0 [ 302.964640][ C0] ? __put_partials+0x161/0x1c0 [ 302.969623][ C0] ? put_cpu_partial+0x17c/0x250 [ 302.974677][ C0] ? __slab_free+0x2f7/0x400 [ 302.979306][ C0] ? qlist_free_all+0x9a/0x140 [ 302.984111][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 302.989792][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 302.994863][ C0] ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 303.000969][ C0] ? kmalloc_reserve+0xbd/0x290 [ 303.005865][ C0] ? __alloc_skb+0x142/0x2d0 [ 303.010723][ C0] __reset_page_owner+0x71/0x1f0 [ 303.015673][ C0] __free_frozen_pages+0xb0e/0xcd0 [ 303.021073][ C0] __put_partials+0x161/0x1c0 [ 303.025801][ C0] put_cpu_partial+0x17c/0x250 [ 303.030595][ C0] ? put_cpu_partial+0x6d/0x250 [ 303.035495][ C0] __slab_free+0x2f7/0x400 [ 303.040061][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 303.045993][ C0] ? __phys_addr+0xba/0x170 [ 303.050642][ C0] qlist_free_all+0x9a/0x140 [ 303.055256][ C0] kasan_quarantine_reduce+0x148/0x160 [ 303.060730][ C0] __kasan_slab_alloc+0x22/0x80 [ 303.065608][ C0] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 303.071702][ C0] ? kmalloc_reserve+0xbd/0x290 [ 303.076574][ C0] kmalloc_reserve+0xbd/0x290 [ 303.081296][ C0] __alloc_skb+0x142/0x2d0 [ 303.085910][ C0] alloc_uevent_skb+0x7d/0x230 [ 303.090693][ C0] kobject_uevent_net_broadcast+0x2fa/0x560 [ 303.096605][ C0] kobject_uevent_env+0x55b/0x8c0 [ 303.101662][ C0] kvm_uevent_notify_change+0x301/0x3a0 [ 303.107281][ C0] ? __pfx_kvm_vm_release+0x10/0x10 [ 303.112502][ C0] kvm_put_kvm+0xa8/0x1650 [ 303.116936][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 303.122163][ C0] ? kvm_irqfd_release+0x196/0x1c0 [ 303.127302][ C0] ? evm_file_release+0x108/0x1e0 [ 303.132342][ C0] ? __pfx_kvm_vm_release+0x10/0x10 [ 303.137547][ C0] kvm_vm_release+0x43/0x50 [ 303.142053][ C0] __fput+0x44c/0xa70 [ 303.146186][ C0] task_work_run+0x1d4/0x260 [ 303.150784][ C0] ? __pfx_task_work_run+0x10/0x10 [ 303.156007][ C0] resume_user_mode_work+0x5e/0x80 [ 303.161125][ C0] syscall_exit_to_user_mode+0x9a/0x120 [ 303.166678][ C0] __do_fast_syscall_32+0xc1/0x110 [ 303.171795][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 303.177056][ C0] do_fast_syscall_32+0x34/0x80 [ 303.182433][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 303.188868][ C0] RIP: 0023:0xf7f52539 [ 303.192948][ C0] RSP: 002b:00000000f753fadc EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 303.201476][ C0] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 303.209489][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 303.217485][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 303.225479][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 303.233551][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 303.241542][ C0] [ 307.527211][ C0] net_ratelimit: 8263 callbacks suppressed [ 307.527234][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.545737][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 307.558432][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 307.570915][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 307.583321][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.595762][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.608275][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 307.620869][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.633371][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.645949][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 312.537063][ C0] net_ratelimit: 10503 callbacks suppressed [ 312.537086][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 312.555868][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 312.568340][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 312.580700][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.593269][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.605734][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 312.618192][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.630657][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.643211][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:81:c0:ba:eb:b3, vlan:0) [ 312.655789][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)