last executing test programs: 41.800050012s ago: executing program 1 (id=883): socket$inet_tcp(0x2, 0x1, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r0, 0x4, 0x42000) read$FUSE(r0, &(0x7f00000038c0)={0x2020}, 0xffffffffffffff56) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80281, 0x0) pipe(0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000000)={[{0x3cd2ef60, 0x8, 0x1, 0xff, 0x8, 0x80, 0xa, 0xb, 0x90, 0x0, 0x7, 0x7, 0x3c5baf4e}, {0xa9, 0xd9, 0x0, 0x2, 0x7, 0x8, 0x6, 0x6, 0xb, 0x1, 0x3, 0x9, 0xcb}, {0x7fffffff, 0x4, 0xc, 0x2, 0x3, 0x2, 0x7, 0x0, 0x9, 0x4, 0x8, 0x4, 0x1}], 0x7}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r5, 0x4048ae9b, &(0x7f0000000080)={0xd0003, 0x0, {[0x303, 0x6, 0x7, 0xffffffffefffff11, 0x3, 0x0, 0xa99, 0xb37f]}}) ioctl$KVM_RUN(r0, 0xae80, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 41.609618045s ago: executing program 2 (id=886): r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getlink={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg0\x00'}]}, 0x34}}, 0x0) 41.451727049s ago: executing program 2 (id=888): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp', 0x2) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 40.702592971s ago: executing program 0 (id=896): socket$nl_netfilter(0x10, 0x3, 0xc) socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x35, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, 0x0) socket$alg(0x26, 0x5, 0x0) socket(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x0, 0x20004040) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000780)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000311ffc)=0x1, 0x4) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8417f, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x0, 0x0) write$binfmt_script(r5, &(0x7f00000006c0)={'#! ', './file0', [], 0xa, "ecfb2da4955bfd5861d978042a6ad22f6baf924d7bb1f5c47274d2a120e923d6033f5d05901d3dc2bb8087032f8259d85360490a4aa339abd0356bd229401537468c79ba0b2b5d465f3260ed5552"}, 0x59) 40.451043906s ago: executing program 2 (id=897): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0xc00, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 40.392098248s ago: executing program 2 (id=899): r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wg0\x00', &(0x7f0000000000)=@ethtool_eee={0x45, 0x1, 0x659, 0x3, 0x81, 0x0, 0x9, 0x5, [0x4, 0x5]}}) r1 = socket(0x2, 0x80805, 0x0) r2 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x3, 0x0, 0x7, 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) r5 = dup(r4) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x3, r5}) syz_open_procfs$namespace(0x0, &(0x7f0000000680)='ns/pid_for_children\x00') socket$alg(0x26, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r6, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r8}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000100)=@req3={0x7, 0x4, 0x0, 0x2, 0xf, 0x0, 0xfff}, 0x1c) eventfd2(0x1ae8, 0x800) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000140)=0x1) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000500)={r9, 0x3ff}, 0x8) 40.245305036s ago: executing program 3 (id=900): r0 = syz_io_uring_setup(0x4b5, &(0x7f0000000280)={0x0, 0xaef4, 0x1, 0x8, 0xa0}, &(0x7f0000010080), &(0x7f0000000300)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000001000)=""/4096, 0x1000}], 0x2) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f00000000c0)={0x12}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route(r2, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getlink={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg0\x00'}]}, 0x34}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$inet(0x2b, 0x801, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x70bd26, 0x1, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x0, 0x0, {@ip4=@empty}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20000110) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000100)={'gre0\x00', 0x0, 0x8, 0x10, 0x270bc98, 0x7, {{0x13, 0x4, 0x3, 0x13, 0x4c, 0x65, 0x0, 0x1, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x3c}, {[@timestamp={0x44, 0xc, 0xe4, 0x0, 0x9, [0x8, 0x8000]}, @noop, @generic={0x86, 0xc, "3d90578089ffeed960de"}, @ssrr={0x89, 0x7, 0xe, [@rand_addr=0x64010102]}, @end, @lsrr={0x83, 0x17, 0x34, [@multicast2, @dev={0xac, 0x14, 0x14, 0x1f}, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x44}]}]}}}}}) copy_file_range(r3, &(0x7f0000000000)=0x8, r3, 0x0, 0x4, 0x0) 40.244833298s ago: executing program 4 (id=901): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) capset(&(0x7f0000000140)={0x20080522}, &(0x7f0000000000)={0x0, 0x1, 0x101, 0x1, 0xfffffffd, 0x12}) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 40.234743873s ago: executing program 1 (id=902): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x580, 0x0, 0x310, 0x0, 0x0, 0x1d8, 0x4b0, 0x310, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x2b, 0x5, 0x1, 0x18}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xff], [0xffffff00], '\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x1], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@mcast1, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'hsr0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) socket$tipc(0x1e, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000480)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x1fff, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001240)=ANY=[@ANYBLOB="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"/1803], 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="06000000040000005b0000008a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/28], 0x50) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f00000001c0)=0x2001) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$FUSE_INIT(r8, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x81, 0x21004040, 0x5, 0xd65b, 0x1, 0x1850c00, 0x0, 0x0, 0x40, 0xa}}, 0x50) read$FUSE(r8, &(0x7f0000003780)={0x2020}, 0x2020) bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={r6, r7}, 0xc) write(r0, &(0x7f0000000180)="82ff00000000000054aa4d5e8e655395f17502dafa86f416", 0x18) 40.205874474s ago: executing program 4 (id=903): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x580, 0x0, 0x310, 0x0, 0x0, 0x1d8, 0x4b0, 0x310, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x2b, 0x5, 0x1, 0x18}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xff], [0xffffff00], '\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x1], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@mcast1, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'hsr0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) socket$tipc(0x1e, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000480)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x1fff, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001240)=ANY=[@ANYBLOB="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"/1803], 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="06000000040000005b0000008a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/28], 0x50) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f00000001c0)=0x2001) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$FUSE_INIT(r8, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x81, 0x21004040, 0x5, 0xd65b, 0x1, 0x1850c00, 0x0, 0x0, 0x40, 0xa}}, 0x50) read$FUSE(r8, &(0x7f0000003780)={0x2020}, 0x2020) bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={r6, r7}, 0xc) write(r0, &(0x7f0000000180)="82ff00000000000054aa4d5e8e655395f17502dafa86f416", 0x18) 40.132404341s ago: executing program 2 (id=904): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="600000002000010000000000000000000a8010000000000118000100200011"], 0x60}, 0x1, 0x0, 0x0, 0x14}, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x10) ppoll(&(0x7f0000000040)=[{r0, 0x20}], 0x1, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x2a37, &(0x7f0000000280), &(0x7f0000000400), &(0x7f0000000200)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0x19, 0x20000000, 0x0) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000001090400eb010300000009210500000122050009058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00220500000083"], 0x0}, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000180)={0x1, 0x9, 0x5, &(0x7f0000000080)={0xb, "c6c1f7b51030c4a4c54bf28fac0200000000000000bc117b5452b3b94bce47509d"}}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r5, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}, {&(0x7f0000002140)=""/4096, 0x694}], 0x2) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r7, 0x7a9, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0x0, 0x2000, 0x51424752, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0xfe, 0x0}}, 0x1, 0x1, 0x3, 0x0, 0x400, 0x5}, 0x20) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) 40.035341416s ago: executing program 3 (id=905): setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) socket$inet_sctp(0x2, 0x5, 0x84) unshare(0x20000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000004340)={@private1}, 0x14) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x2a8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000280)={0x8, 0x50323234, 0x3, @discrete={0x3, 0x400}}) r2 = creat(&(0x7f0000000240)='./bus\x00', 0xc2) io_setup(0x5, &(0x7f0000000100)=0x0) io_submit(r3, 0x2, &(0x7f0000000200)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, r2, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2, r2}]) r4 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 39.804362257s ago: executing program 3 (id=906): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x44}}, 0x8000) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast1}}}], 0x20}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[], 0x128}}, {{0x0, 0x0, &(0x7f0000000e00), 0x0, 0x0, 0xf0}}], 0x3, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, 0x0, 0x0) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000", 0x36}], 0x1) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x0, 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000b40)) r8 = dup(r7) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000000)={0x1, r8}) ioctl$VHOST_NET_SET_BACKEND(r6, 0xaf02, 0x0) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, 0x0, 0x0) userfaultfd(0x80801) 39.374899268s ago: executing program 0 (id=907): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp', 0x2) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 38.140997797s ago: executing program 0 (id=908): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000019c0)={0x30, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd=r3}, @nested={0xc, 0x1a, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @nested={0x4, 0x37}]}, 0x30}], 0x1}, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000440)={0x1, 0x1, 0x1000, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) semop(0x0, &(0x7f0000000140)=[{0x0, 0xffff}], 0x1) semctl$SETVAL(0x0, 0x0, 0x10, &(0x7f0000000280)=0x6) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, 0x0}], 0x1, 0x29, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc580000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000002c0003800c0000800800034000000002100000800c000180060001"], 0xbc}}, 0x40) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000300)=ANY=[@ANYBLOB='_\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000003000000210001800400028008000300fdffffff0e0001"], 0x68}}, 0x0) 34.263975914s ago: executing program 4 (id=909): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@remote}, {@in, 0x0, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {}, {0x0, 0x0, 0x8000000}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x1a0}}]}, 0x158}}, 0x0) openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r3 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) io_uring_enter(r3, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) 34.191229809s ago: executing program 1 (id=910): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000740)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b4eabdcd0d15d495b9d1974f5902157fe8b178528ef649d2f17724b43b013abfe098986d7028e42ef42b6"], 0x0, 0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xe}, {0xffff, 0xffff}, {0x2, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x81, 0x8}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) getpeername(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x80, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x8001, 0x3151, 0x401, 0x6, 0xaa3c}, 0x3, 0x1, 0x6, 0x6, 0x7, 0x13, 0x11, 0xf, 0x7, 0x7f, {0x6, 0x407c, 0x7, 0x5, 0x2b52, 0x2}}}}, @TCA_RATE={0x6, 0x5, {0x0, 0x5}}]}, 0x80}, 0x1, 0x0, 0x0, 0x400dc}, 0x20000000) 31.850499014s ago: executing program 4 (id=911): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) creat(0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) open$dir(0x0, 0x1e9240, 0x180) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x888) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/18, @ANYRES32=0x0, @ANYBLOB='\x00\t\x00\x00d@\x00\x00\b'], 0x30}}, 0x0) 31.850228766s ago: executing program 0 (id=912): r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) 31.642326918s ago: executing program 2 (id=913): io_setup(0x30, &(0x7f0000000600)) io_submit(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3, &(0x7f0000004240)=0x4, 0x4) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) creat(0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@deltclass={0x44, 0x29, 0x400, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0xd, 0xa}, {0x4, 0x5}, {0xfff3, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x4}}, @tclass_kind_options=@c_hfsc, @tclass_kind_options=@c_fq_codel={0x3c}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$pid(0x0, 0x0, 0x2004) request_key(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x802, 0x0) 29.995721363s ago: executing program 0 (id=914): syz_open_dev$usbfs(0x0, 0x76, 0x101301) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES16=r0], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x18, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SEQ_ADJ_REPLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc4}, 0x4000810) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20}}, 0x6c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f0000000000)={'\x00', 0x1, 0x3, 0x5}) 27.604723675s ago: executing program 3 (id=915): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000080)='./mnt\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x4, 0x0, 0x0, 0x6, 0x21, &(0x7f0000000200)=""/33, 0x41100, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0xffffffffffffffff, 0x10, 0x2}, 0x94) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x1, 0x8001, 0x0, 0xb49, 0x200000000002, 0x9, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) sched_setattr(r3, &(0x7f0000000040)={0x38, 0x0, 0x1, 0xffffffff, 0x1, 0x6, 0xffffffff00000000, 0xd, 0xf22, 0xda}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r5, &(0x7f0000000140)='a', 0x1, 0x9004) lseek(r5, 0x5, 0x4) recvmmsg(r4, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x40010000, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) fsopen(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000060900020073797a30000000005800048054000180090001006d657461000000004400028008000140000056d6080003400000000008000140000000010800014000000009080001400000000b080002400000001e0800014000000015080003"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) unshare(0x40000080) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) readlinkat(0xffffffffffffffff, &(0x7f0000000140)='./mnt\x00', 0x0, 0x0) setitimer(0x2, &(0x7f0000000580)={{0x77359400}}, 0x0) 22.048044749s ago: executing program 4 (id=916): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r0 = epoll_create1(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {r6, 0x10, 0x0, @in={0x2, 0x4e24, @empty}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f0000000700), r6, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r6, 0x1, 0x0, 0x0, 0x0, @ib={0x1b, 0x1, 0x6, {"ec48ec694b96429cea4a1f5d456505d9"}, 0xffffffffffffffff, 0x7, 0x7}, @in={0x2, 0x4e24, @broadcast}}}, 0x118) ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0xc0000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x2, 0x8, 0x18, 0x0, '4-2'}]}, 0x60}, 0x1, 0x7}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000300)='connect aa:aa:aa:aa:aa:11 1', 0x1b) sendmsg$TIPC_NL_PEER_REMOVE(r1, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)=0x100) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x15, 0x301, 0x70bd28, 0x25dfdbfb, {0xc}, [@typed={0xc, 0x4, 0x0, 0x0, @str='\x00\x00\x00\x00\x00\x00\x00\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) socket$inet6(0xa, 0x800, 0xfffffc00) 21.644897123s ago: executing program 0 (id=917): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000080)='./mnt\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x4, 0x0, 0x0, 0x6, 0x21, &(0x7f0000000200)=""/33, 0x41100, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0xffffffffffffffff, 0x10, 0x2}, 0x94) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x1, 0x8001, 0x0, 0xb49, 0x200000000002, 0x9, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) sched_setattr(r3, &(0x7f0000000040)={0x38, 0x0, 0x1, 0xffffffff, 0x1, 0x6, 0xffffffff00000000, 0xd, 0xf22, 0xda}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r5, &(0x7f0000000140)='a', 0x1, 0x9004) lseek(r5, 0x5, 0x4) recvmmsg(r4, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x40010000, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) fsopen(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000060900020073797a30000000005800048054000180090001006d657461000000004400028008000140000056d6080003400000000008000140000000010800014000000009080001400000000b080002400000001e0800014000000015080003"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) unshare(0x40000080) socketpair$unix(0x1, 0x1, 0x0, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000140)='./mnt\x00', 0x0, 0x0) setitimer(0x2, &(0x7f0000000580)={{0x77359400}}, 0x0) 19.78188414s ago: executing program 1 (id=918): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp', 0x2) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 17.370081383s ago: executing program 3 (id=919): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x5422) mmap(&(0x7f000005b000/0x3000)=nil, 0x3000, 0x2000002, 0x8010, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0xdb396e4f2139ada}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f00000001c0)) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0x4e6f, 0x4) mremap(&(0x7f000028c000/0xe000)=nil, 0xe000, 0x4000, 0x889c43c093ffdd93, &(0x7f0000290000/0x4000)=nil) 16.643222152s ago: executing program 1 (id=920): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x580, 0x0, 0x310, 0x0, 0x0, 0x1d8, 0x4b0, 0x310, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x2b, 0x5, 0x1, 0x18}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xff], [0xffffff00], '\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x1], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@mcast1, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'hsr0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) socket$tipc(0x1e, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000480)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x1fff, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001240)=ANY=[@ANYBLOB="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"/1803], 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="06000000040000005b0000008a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/28], 0x50) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f00000001c0)=0x2001) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$FUSE_INIT(r8, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x81, 0x21004040, 0x5, 0xd65b, 0x1, 0x1850c00, 0x0, 0x0, 0x40, 0xa}}, 0x50) read$FUSE(r8, &(0x7f0000003780)={0x2020}, 0x2020) bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={r6, r7}, 0xc) write(r0, &(0x7f0000000180)="82ff00000000000054aa4d5e8e655395f17502dafa86f416", 0x18) 16.325659088s ago: executing program 32 (id=913): io_setup(0x30, &(0x7f0000000600)) io_submit(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3, &(0x7f0000004240)=0x4, 0x4) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) creat(0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@deltclass={0x44, 0x29, 0x400, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0xd, 0xa}, {0x4, 0x5}, {0xfff3, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x4}}, @tclass_kind_options=@c_hfsc, @tclass_kind_options=@c_fq_codel={0x3c}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$pid(0x0, 0x0, 0x2004) request_key(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x802, 0x0) 11.44723574s ago: executing program 1 (id=922): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) timer_create(0x3, &(0x7f0000004a00)={0x0, 0x8, 0x1}, &(0x7f0000004a40)=0x0) timer_settime(r1, 0x1, &(0x7f0000004a80), &(0x7f0000004ac0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/cgroup.procs\x00', 0x2, 0x128) io_setup(0x9, &(0x7f0000001d00)=0x0) io_submit(r3, 0x1ffffffffffffec5, &(0x7f00000000c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x8, r2, &(0x7f0000000100)="331e767999fcd25f16458f4625beb50ccf5f5cefa8fb1e529ba065a5408dce94db48b94aaaf38e5a4a227022569863287447e19719aec40f9bc75aa3e46a465636b066cc1098833cb68b222af67ffef277f2465f770e6d1e6ffee834afce354bbb7e4f", 0x1, 0x7, 0x0, 0x2}]) r4 = syz_open_dev$video4linux(&(0x7f0000000240), 0x2, 0x80400) ioctl$VIDIOC_ENUMSTD(r4, 0xc0485619, &(0x7f0000000380)={0x0, 0x200, "06dab013a177c49358f36cec697405dd17dc631d6c7a9d70", {0x410000, 0x3ff}}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x4000, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x2000810) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_SET_LEDBIT(r8, 0x40045569, 0x2) tee(r6, r4, 0x1000f9, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)=0xffffffffffffffff) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000001c0)=@multiplanar_fd={0x8, 0xc, 0x4, 0x1000, 0x8, {0x0, 0xea60}, {0x5, 0x1, 0xa, 0x7d, 0xd, 0x6, "4c7fc97c"}, 0x6, 0x4, {&(0x7f0000000100)=[{0x2, 0xf4, {r5}, 0x5}, {0x7, 0x8, {r6}, 0x10001}]}, 0x1, 0x0, r9}) 7.714262546s ago: executing program 4 (id=923): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r0 = epoll_create1(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {r6, 0x10, 0x0, @in={0x2, 0x4e24, @empty}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f0000000700), r6, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r6, 0x1, 0x0, 0x0, 0x0, @ib={0x1b, 0x1, 0x6, {"ec48ec694b96429cea4a1f5d456505d9"}, 0xffffffffffffffff, 0x7, 0x7}, @in={0x2, 0x4e24, @broadcast}}}, 0x118) ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0xc0000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x2, 0x8, 0x18, 0x0, '4-2'}]}, 0x60}, 0x1, 0x7}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000300)='connect aa:aa:aa:aa:aa:11 1', 0x1b) sendmsg$TIPC_NL_PEER_REMOVE(r1, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)=0x100) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x15, 0x301, 0x70bd28, 0x25dfdbfb, {0xc}, [@typed={0xc, 0x4, 0x0, 0x0, @str='\x00\x00\x00\x00\x00\x00\x00\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) socket$inet6(0xa, 0x800, 0xfffffc00) 7.424870926s ago: executing program 3 (id=924): r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) 0s ago: executing program 33 (id=917): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000080)='./mnt\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x4, 0x0, 0x0, 0x6, 0x21, &(0x7f0000000200)=""/33, 0x41100, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0xffffffffffffffff, 0x10, 0x2}, 0x94) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x1, 0x8001, 0x0, 0xb49, 0x200000000002, 0x9, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) sched_setattr(r3, &(0x7f0000000040)={0x38, 0x0, 0x1, 0xffffffff, 0x1, 0x6, 0xffffffff00000000, 0xd, 0xf22, 0xda}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r5, &(0x7f0000000140)='a', 0x1, 0x9004) lseek(r5, 0x5, 0x4) recvmmsg(r4, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x40010000, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) fsopen(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000060900020073797a30000000005800048054000180090001006d657461000000004400028008000140000056d6080003400000000008000140000000010800014000000009080001400000000b080002400000001e0800014000000015080003"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) unshare(0x40000080) socketpair$unix(0x1, 0x1, 0x0, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000140)='./mnt\x00', 0x0, 0x0) setitimer(0x2, &(0x7f0000000580)={{0x77359400}}, 0x0) kernel console output (not intermixed with test programs): device number 25 [ 237.775300][ T8405] tipc: Disabling bearer [ 238.653595][ T8493] ksmbd: Unknown IPC event: 0, ignore. [ 238.964658][ T8499] FAULT_INJECTION: forcing a failure. [ 238.964658][ T8499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.004498][ T8499] CPU: 1 UID: 0 PID: 8499 Comm: syz.3.666 Not tainted syzkaller #0 PREEMPT(full) [ 239.004528][ T8499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 239.004539][ T8499] Call Trace: [ 239.004546][ T8499] [ 239.004555][ T8499] dump_stack_lvl+0x189/0x250 [ 239.004574][ T8499] ? __pfx____ratelimit+0x10/0x10 [ 239.004587][ T8499] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.004599][ T8499] ? __pfx__printk+0x10/0x10 [ 239.004609][ T8499] ? __might_fault+0xb0/0x130 [ 239.004624][ T8499] should_fail_ex+0x414/0x560 [ 239.004639][ T8499] _copy_from_user+0x2d/0xb0 [ 239.004649][ T8499] kstrtouint_from_user+0xc4/0x170 [ 239.004663][ T8499] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 239.004684][ T8499] proc_fail_nth_write+0x88/0x200 [ 239.004698][ T8499] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 239.004715][ T8499] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 239.004728][ T8499] vfs_write+0x27e/0xb30 [ 239.004743][ T8499] ? __pfx_vfs_write+0x10/0x10 [ 239.004752][ T8499] ? __fget_files+0x2a/0x420 [ 239.004766][ T8499] ? __fget_files+0x3a0/0x420 [ 239.004775][ T8499] ? __fget_files+0x2a/0x420 [ 239.004795][ T8499] ksys_write+0x145/0x250 [ 239.004806][ T8499] ? __pfx_ksys_write+0x10/0x10 [ 239.004817][ T8499] ? do_syscall_64+0xbe/0xfa0 [ 239.004830][ T8499] do_syscall_64+0xfa/0xfa0 [ 239.004840][ T8499] ? lockdep_hardirqs_on+0x9c/0x150 [ 239.004852][ T8499] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.004862][ T8499] ? clear_bhb_loop+0x60/0xb0 [ 239.004873][ T8499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.004883][ T8499] RIP: 0033:0x7f495a18e1ff [ 239.004893][ T8499] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 239.004902][ T8499] RSP: 002b:00007f495afc6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 239.004914][ T8499] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f495a18e1ff [ 239.004921][ T8499] RDX: 0000000000000001 RSI: 00007f495afc60a0 RDI: 0000000000000004 [ 239.004927][ T8499] RBP: 00007f495afc6090 R08: 0000000000000000 R09: 0000000000000000 [ 239.004933][ T8499] R10: 0000200000001d80 R11: 0000000000000293 R12: 0000000000000001 [ 239.004939][ T8499] R13: 00007f495a3e6128 R14: 00007f495a3e6090 R15: 00007f495a50fa28 [ 239.004955][ T8499] [ 239.903243][ T5888] IPVS: starting estimator thread 0... [ 240.023085][ T8510] @: renamed from vlan0 (while UP) [ 240.040643][ T8509] IPVS: using max 50 ests per chain, 120000 per kthread [ 240.317054][ T8520] openvswitch: netlink: IP tunnel dst address not specified [ 240.330680][ T8512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.673'. [ 240.764430][ T5888] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 240.930726][ T5888] usb 4-1: Using ep0 maxpacket: 32 [ 240.942326][ T5888] usb 4-1: config 0 has an invalid interface number: 83 but max is 0 [ 240.963353][ T5888] usb 4-1: config 0 has no interface number 0 [ 241.124066][ T9] usb 1-1: USB disconnect, device number 28 [ 241.159949][ T5888] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=92.f7 [ 241.220575][ T5883] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 241.241707][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.294841][ T5888] usb 4-1: Product: syz [ 241.316205][ T5888] usb 4-1: Manufacturer: syz [ 241.328926][ T5888] usb 4-1: SerialNumber: syz [ 241.358257][ T5888] usb 4-1: config 0 descriptor?? [ 241.382206][ T5883] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.401378][ T5883] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 241.424524][ T5883] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 241.455373][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.499131][ T5883] usb 2-1: Product: syz [ 241.526737][ T5883] usb 2-1: Manufacturer: syz [ 241.536360][ T5883] usb 2-1: SerialNumber: syz [ 241.782658][ T8528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.794285][ T8537] netlink: 'syz.1.681': attribute type 4 has an invalid length. [ 241.803248][ T8528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.823635][ T5888] peak_usb 4-1:0.83 can0: unable to request usb[type=0 value=0] err=-71 [ 241.881339][ T5888] peak_usb 4-1:0.83: unable to read PCAN-USB Pro bootloader info (err -71) [ 242.271175][ T5888] peak_usb 4-1:0.83: probe with driver peak_usb failed with error -71 [ 242.311681][ T5888] usb 4-1: USB disconnect, device number 26 [ 242.810356][ T8563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.850339][ T8563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.040749][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 243.156751][ T8566] FAULT_INJECTION: forcing a failure. [ 243.156751][ T8566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.208519][ T8566] CPU: 1 UID: 0 PID: 8566 Comm: syz.3.688 Not tainted syzkaller #0 PREEMPT(full) [ 243.208544][ T8566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 243.208569][ T8566] Call Trace: [ 243.208577][ T8566] [ 243.208585][ T8566] dump_stack_lvl+0x189/0x250 [ 243.208612][ T8566] ? __pfx____ratelimit+0x10/0x10 [ 243.208632][ T8566] ? __pfx_dump_stack_lvl+0x10/0x10 [ 243.208652][ T8566] ? __pfx__printk+0x10/0x10 [ 243.208670][ T8566] ? __might_fault+0xb0/0x130 [ 243.208695][ T8566] should_fail_ex+0x414/0x560 [ 243.208719][ T8566] _copy_from_user+0x2d/0xb0 [ 243.208734][ T8566] ? __pfx_do_get_msr+0x10/0x10 [ 243.208749][ T8566] msr_io+0xa2/0x8d0 [ 243.208771][ T8566] ? kvm_arch_vcpu_ioctl+0x11b1/0x2b20 [ 243.208787][ T8566] ? __pfx_msr_io+0x10/0x10 [ 243.208814][ T8566] kvm_arch_vcpu_ioctl+0x11ee/0x2b20 [ 243.208836][ T8566] ? kvm_arch_vcpu_ioctl+0x11b1/0x2b20 [ 243.208855][ T8566] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 243.208875][ T8566] ? __lock_acquire+0xab9/0xd20 [ 243.208911][ T8566] ? is_bpf_text_address+0x26/0x2b0 [ 243.208936][ T8566] ? is_bpf_text_address+0x292/0x2b0 [ 243.208955][ T8566] ? is_bpf_text_address+0x26/0x2b0 [ 243.208975][ T8566] ? kernel_text_address+0xa5/0xe0 [ 243.208999][ T8566] ? __kernel_text_address+0xd/0x40 [ 243.209020][ T8566] ? unwind_get_return_address+0x4d/0x90 [ 243.209039][ T8566] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 243.209061][ T8566] ? arch_stack_walk+0xfc/0x150 [ 243.209094][ T8566] ? __pfx_stack_trace_save+0x10/0x10 [ 243.209119][ T8566] ? stack_depot_save_flags+0x40/0x860 [ 243.209155][ T8566] ? __lock_acquire+0xab9/0xd20 [ 243.209180][ T8566] ? __mutex_trylock_common+0x153/0x260 [ 243.209205][ T8566] ? __pfx___mutex_trylock_common+0x10/0x10 [ 243.209230][ T8566] ? rcu_is_watching+0x15/0xb0 [ 243.209250][ T8566] ? trace_contention_end+0x39/0x120 [ 243.209269][ T8566] ? __mutex_lock+0x335/0x1350 [ 243.209297][ T8566] ? kasan_quarantine_put+0xdd/0x220 [ 243.209313][ T8566] ? lockdep_hardirqs_on+0x9c/0x150 [ 243.209333][ T8566] ? kvm_vcpu_ioctl+0x22e/0xe90 [ 243.209357][ T8566] ? __pfx___mutex_lock+0x10/0x10 [ 243.209375][ T8566] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 243.209397][ T8566] ? do_vfs_ioctl+0xbe8/0x1430 [ 243.209418][ T8566] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 243.209433][ T8566] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 243.209460][ T8566] kvm_vcpu_ioctl+0x74d/0xe90 [ 243.209545][ T8566] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 243.209588][ T8566] ? __fget_files+0x2a/0x420 [ 243.209610][ T8566] ? __fget_files+0x3a0/0x420 [ 243.209627][ T8566] ? __fget_files+0x2a/0x420 [ 243.209648][ T8566] ? bpf_lsm_file_ioctl+0x9/0x20 [ 243.209666][ T8566] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 243.209688][ T8566] __se_sys_ioctl+0xfc/0x170 [ 243.209713][ T8566] do_syscall_64+0xfa/0xfa0 [ 243.209732][ T8566] ? lockdep_hardirqs_on+0x9c/0x150 [ 243.209750][ T8566] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.209767][ T8566] ? clear_bhb_loop+0x60/0xb0 [ 243.209786][ T8566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.209801][ T8566] RIP: 0033:0x7f495a18f749 [ 243.209816][ T8566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.209829][ T8566] RSP: 002b:00007f495b0e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 243.209847][ T8566] RAX: ffffffffffffffda RBX: 00007f495a3e5fa0 RCX: 00007f495a18f749 [ 243.209858][ T8566] RDX: 0000200000000300 RSI: 00000000c008ae88 RDI: 0000000000000005 [ 243.209869][ T8566] RBP: 00007f495b0e8090 R08: 0000000000000000 R09: 0000000000000000 [ 243.209880][ T8566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.209889][ T8566] R13: 00007f495a3e6038 R14: 00007f495a3e5fa0 R15: 00007f495a50fa28 [ 243.209919][ T8566] [ 243.642436][ T8568] netlink: 16 bytes leftover after parsing attributes in process `syz.0.689'. [ 243.657623][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 243.677879][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.737979][ T9] usb 5-1: Product: syz [ 243.765914][ T9] usb 5-1: Manufacturer: syz [ 243.777093][ T9] usb 5-1: SerialNumber: syz [ 244.025853][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 244.074145][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 244.109287][ T8581] netlink: 64 bytes leftover after parsing attributes in process `syz.3.694'. [ 244.118543][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 244.134276][ T5883] usb 2-1: unknown interface protocol 0x71, assuming v1 [ 244.134933][ T8580] binder: 8578:8580 ioctl 3b81 200000000640 returned -22 [ 244.150966][ T5883] usb 2-1: cannot find UAC_HEADER [ 244.156282][ T9] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 244.209670][ T9] usb 5-1: USB disconnect, device number 23 [ 244.256349][ T5883] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 244.320739][ T5883] usb 2-1: USB disconnect, device number 27 [ 244.374923][ T6331] udevd[6331]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 245.740577][ T5938] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 245.943087][ T5938] usb 2-1: Using ep0 maxpacket: 8 [ 245.959796][ T5938] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 246.075832][ T5938] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 65535, setting to 1024 [ 246.244639][ T5938] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 246.286888][ T8615] FAULT_INJECTION: forcing a failure. [ 246.286888][ T8615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.357909][ T5938] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 246.381874][ T8615] CPU: 0 UID: 0 PID: 8615 Comm: syz.4.705 Not tainted syzkaller #0 PREEMPT(full) [ 246.381890][ T8615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 246.381897][ T8615] Call Trace: [ 246.381901][ T8615] [ 246.381907][ T8615] dump_stack_lvl+0x189/0x250 [ 246.381924][ T8615] ? __pfx____ratelimit+0x10/0x10 [ 246.381936][ T8615] ? __pfx_dump_stack_lvl+0x10/0x10 [ 246.381948][ T8615] ? __pfx__printk+0x10/0x10 [ 246.381958][ T8615] ? __might_fault+0xb0/0x130 [ 246.381973][ T8615] should_fail_ex+0x414/0x560 [ 246.381988][ T8615] _copy_from_user+0x2d/0xb0 [ 246.381999][ T8615] ___sys_sendmsg+0x158/0x2a0 [ 246.382014][ T8615] ? __pfx____sys_sendmsg+0x10/0x10 [ 246.382044][ T8615] ? __fget_files+0x2a/0x420 [ 246.382054][ T8615] ? __fget_files+0x3a0/0x420 [ 246.382069][ T8615] __x64_sys_sendmsg+0x19b/0x260 [ 246.382083][ T8615] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 246.382100][ T8615] ? __pfx_ksys_write+0x10/0x10 [ 246.382111][ T8615] ? do_syscall_64+0xbe/0xfa0 [ 246.382124][ T8615] do_syscall_64+0xfa/0xfa0 [ 246.382134][ T8615] ? lockdep_hardirqs_on+0x9c/0x150 [ 246.382145][ T8615] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.382155][ T8615] ? clear_bhb_loop+0x60/0xb0 [ 246.382166][ T8615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.382175][ T8615] RIP: 0033:0x7f099898f749 [ 246.382187][ T8615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.382195][ T8615] RSP: 002b:00007f0999870038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 246.382209][ T8615] RAX: ffffffffffffffda RBX: 00007f0998be5fa0 RCX: 00007f099898f749 [ 246.382216][ T8615] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000003 [ 246.382222][ T8615] RBP: 00007f0999870090 R08: 0000000000000000 R09: 0000000000000000 [ 246.382227][ T8615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.382233][ T8615] R13: 00007f0998be6038 R14: 00007f0998be5fa0 R15: 00007f0998d0fa28 [ 246.382249][ T8615] [ 246.960784][ T5899] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 247.076696][ T5938] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 247.108273][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.176800][ T5938] usb 2-1: Product: syz [ 247.183781][ T5899] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 247.265084][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.290948][ T5938] usb 2-1: Manufacturer: syz [ 247.327817][ T5938] usb 2-1: SerialNumber: syz [ 247.346458][ T5899] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 247.400732][ T43] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 247.415614][ T5938] usb 2-1: can't set config #1, error -71 [ 247.423774][ T5899] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 247.454427][ T5899] usb 4-1: Manufacturer: syz [ 247.466694][ T5938] usb 2-1: USB disconnect, device number 28 [ 247.483638][ T5899] usb 4-1: config 0 descriptor?? [ 247.650730][ T43] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 247.718963][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.750588][ T5899] rc_core: IR keymap rc-hauppauge not found [ 247.760270][ T43] usb 5-1: Product: syz [ 247.766926][ T8613] geneve2: entered promiscuous mode [ 247.790030][ T5899] Registered IR keymap rc-empty [ 247.799849][ T43] usb 5-1: Manufacturer: syz [ 247.842917][ T5899] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 247.853211][ T43] usb 5-1: SerialNumber: syz [ 247.900734][ T5899] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input12 [ 247.915324][ T43] usb 5-1: config 0 descriptor?? [ 248.134075][ T43] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 248.394735][ T8633] fuse: Invalid rootmode [ 248.594132][ T8639] openvswitch: netlink: IP tunnel dst address not specified [ 248.769877][ T8643] FAULT_INJECTION: forcing a failure. [ 248.769877][ T8643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.799863][ T8643] CPU: 0 UID: 0 PID: 8643 Comm: syz.0.713 Not tainted syzkaller #0 PREEMPT(full) [ 248.799888][ T8643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 248.799899][ T8643] Call Trace: [ 248.799907][ T8643] [ 248.799915][ T8643] dump_stack_lvl+0x189/0x250 [ 248.799943][ T8643] ? __pfx____ratelimit+0x10/0x10 [ 248.799963][ T8643] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.799984][ T8643] ? __pfx__printk+0x10/0x10 [ 248.800002][ T8643] ? __might_fault+0xb0/0x130 [ 248.800030][ T8643] should_fail_ex+0x414/0x560 [ 248.800050][ T8643] _copy_from_user+0x2d/0xb0 [ 248.800063][ T8643] core_sys_select+0x609/0xa20 [ 248.800091][ T8643] ? __pfx_core_sys_select+0x10/0x10 [ 248.800131][ T8643] ? __pfx_set_user_sigmask+0x10/0x10 [ 248.800160][ T8643] __se_sys_pselect6+0x27a/0x300 [ 248.800174][ T8643] ? __pfx___se_sys_pselect6+0x10/0x10 [ 248.800184][ T8643] ? __pfx_ksys_write+0x10/0x10 [ 248.800195][ T8643] ? __x64_sys_pselect6+0x21/0xf0 [ 248.800206][ T8643] do_syscall_64+0xfa/0xfa0 [ 248.800219][ T8643] ? lockdep_hardirqs_on+0x9c/0x150 [ 248.800239][ T8643] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.800256][ T8643] ? clear_bhb_loop+0x60/0xb0 [ 248.800277][ T8643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.800294][ T8643] RIP: 0033:0x7f39eeb8f749 [ 248.800338][ T8643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.800351][ T8643] RSP: 002b:00007f39efa93038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 248.800370][ T8643] RAX: ffffffffffffffda RBX: 00007f39eede5fa0 RCX: 00007f39eeb8f749 [ 248.800383][ T8643] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 248.800394][ T8643] RBP: 00007f39efa93090 R08: 0000200000000280 R09: 0000000000000000 [ 248.800404][ T8643] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 248.800415][ T8643] R13: 00007f39eede6038 R14: 00007f39eede5fa0 R15: 00007f39eef0fa28 [ 248.800443][ T8643] [ 248.996738][ C0] vkms_vblank_simulate: vblank timer overrun [ 249.417824][ T5938] usb 4-1: USB disconnect, device number 27 [ 250.562041][ T43] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 250.579666][ T43] usb 5-1: USB disconnect, device number 24 [ 251.259987][ T8679] FAULT_INJECTION: forcing a failure. [ 251.259987][ T8679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.281210][ T8679] CPU: 0 UID: 0 PID: 8679 Comm: syz.4.725 Not tainted syzkaller #0 PREEMPT(full) [ 251.281235][ T8679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 251.281243][ T8679] Call Trace: [ 251.281249][ T8679] [ 251.281253][ T8679] dump_stack_lvl+0x189/0x250 [ 251.281271][ T8679] ? __pfx____ratelimit+0x10/0x10 [ 251.281283][ T8679] ? __pfx_dump_stack_lvl+0x10/0x10 [ 251.281295][ T8679] ? __pfx__printk+0x10/0x10 [ 251.281311][ T8679] should_fail_ex+0x414/0x560 [ 251.281326][ T8679] _copy_to_user+0x31/0xb0 [ 251.281337][ T8679] simple_read_from_buffer+0xe1/0x170 [ 251.281351][ T8679] proc_fail_nth_read+0x1b3/0x220 [ 251.281366][ T8679] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 251.281380][ T8679] ? rw_verify_area+0x2a6/0x4d0 [ 251.281393][ T8679] ? __lock_acquire+0xab9/0xd20 [ 251.281403][ T8679] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 251.281416][ T8679] vfs_read+0x200/0xa30 [ 251.281425][ T8679] ? fdget_pos+0x247/0x320 [ 251.281437][ T8679] ? __pfx___mutex_lock+0x10/0x10 [ 251.281450][ T8679] ? __pfx_vfs_read+0x10/0x10 [ 251.281460][ T8679] ? __fget_files+0x2a/0x420 [ 251.281472][ T8679] ? __fget_files+0x3a0/0x420 [ 251.281481][ T8679] ? __fget_files+0x2a/0x420 [ 251.281496][ T8679] ksys_read+0x145/0x250 [ 251.281506][ T8679] ? __pfx_ksys_read+0x10/0x10 [ 251.281517][ T8679] ? do_syscall_64+0xbe/0xfa0 [ 251.281530][ T8679] do_syscall_64+0xfa/0xfa0 [ 251.281540][ T8679] ? lockdep_hardirqs_on+0x9c/0x150 [ 251.281550][ T8679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.281560][ T8679] ? clear_bhb_loop+0x60/0xb0 [ 251.281571][ T8679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.281580][ T8679] RIP: 0033:0x7f099898e15c [ 251.281590][ T8679] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 251.281598][ T8679] RSP: 002b:00007f0999870030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 251.281609][ T8679] RAX: ffffffffffffffda RBX: 00007f0998be5fa0 RCX: 00007f099898e15c [ 251.281617][ T8679] RDX: 000000000000000f RSI: 00007f09998700a0 RDI: 0000000000000004 [ 251.281623][ T8679] RBP: 00007f0999870090 R08: 0000000000000000 R09: 0000000000000000 [ 251.281628][ T8679] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 251.281634][ T8679] R13: 00007f0998be6038 R14: 00007f0998be5fa0 R15: 00007f0998d0fa28 [ 251.281650][ T8679] [ 251.522196][ C0] vkms_vblank_simulate: vblank timer overrun [ 251.573633][ T8678] netlink: 14 bytes leftover after parsing attributes in process `syz.0.720'. [ 251.857264][ T8685] syzkaller0: entered promiscuous mode [ 251.889415][ T8685] syzkaller0: entered allmulticast mode [ 252.652881][ T8697] netlink: 20 bytes leftover after parsing attributes in process `syz.1.728'. [ 252.910743][ T5899] usb 2-1: new low-speed USB device number 29 using dummy_hcd [ 253.068374][ T5899] usb 2-1: unable to get BOS descriptor or descriptor too short [ 253.089155][ T5899] usb 2-1: config 7 has an invalid interface number: 67 but max is 0 [ 253.103797][ T5899] usb 2-1: config 7 has no interface number 0 [ 253.125776][ T5899] usb 2-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 253.151556][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.176597][ T5899] usb 2-1: Product: 㯑 [ 253.206307][ T5899] usb 2-1: Manufacturer: ë–’ [ 253.452211][ T5899] usb 2-1: USB disconnect, device number 29 [ 253.800647][ T5899] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 253.970729][ T5899] usb 3-1: Using ep0 maxpacket: 8 [ 253.977866][ T5899] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 253.986373][ T5899] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.996966][ T5899] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 254.008874][ T5899] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 254.018305][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.026871][ T5899] usb 3-1: Product: syz [ 254.033327][ T5899] usb 3-1: Manufacturer: syz [ 254.037967][ T5899] usb 3-1: SerialNumber: syz [ 254.047430][ T5899] usb 3-1: config 0 descriptor?? [ 254.279574][ T8699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.288840][ T8699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.304564][ T8699] FAULT_INJECTION: forcing a failure. [ 254.304564][ T8699] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.317982][ T8699] CPU: 1 UID: 0 PID: 8699 Comm: syz.2.729 Not tainted syzkaller #0 PREEMPT(full) [ 254.318005][ T8699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 254.318016][ T8699] Call Trace: [ 254.318023][ T8699] [ 254.318031][ T8699] dump_stack_lvl+0x189/0x250 [ 254.318056][ T8699] ? __pfx____ratelimit+0x10/0x10 [ 254.318076][ T8699] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.318095][ T8699] ? __pfx__printk+0x10/0x10 [ 254.318111][ T8699] ? __might_fault+0xb0/0x130 [ 254.318136][ T8699] should_fail_ex+0x414/0x560 [ 254.318160][ T8699] _copy_from_user+0x2d/0xb0 [ 254.318178][ T8699] ____sys_sendmsg+0x2fe/0x830 [ 254.318204][ T8699] ? __pfx_____sys_sendmsg+0x10/0x10 [ 254.318234][ T8699] ? import_iovec+0x74/0xa0 [ 254.318252][ T8699] ___sys_sendmsg+0x21f/0x2a0 [ 254.318272][ T8699] ? __pfx____sys_sendmsg+0x10/0x10 [ 254.318325][ T8699] ? __might_fault+0xb0/0x130 [ 254.318342][ T8699] __sys_sendmmsg+0x227/0x430 [ 254.318366][ T8699] ? __pfx___sys_sendmmsg+0x10/0x10 [ 254.318394][ T8699] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 254.318432][ T8699] ? ksys_write+0x22a/0x250 [ 254.318451][ T8699] ? __pfx_ksys_write+0x10/0x10 [ 254.318471][ T8699] __x64_sys_sendmmsg+0xa0/0xc0 [ 254.318495][ T8699] do_syscall_64+0xfa/0xfa0 [ 254.318515][ T8699] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.318535][ T8699] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.318564][ T8699] ? clear_bhb_loop+0x60/0xb0 [ 254.318584][ T8699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.318600][ T8699] RIP: 0033:0x7f264658f749 [ 254.318615][ T8699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.318629][ T8699] RSP: 002b:00007f2647444038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 254.318647][ T8699] RAX: ffffffffffffffda RBX: 00007f26467e5fa0 RCX: 00007f264658f749 [ 254.318656][ T8699] RDX: 0000000000000002 RSI: 00002000000020c0 RDI: 0000000000000010 [ 254.318665][ T8699] RBP: 00007f2647444090 R08: 0000000000000000 R09: 0000000000000000 [ 254.318722][ T8699] R10: 0000000000000088 R11: 0000000000000246 R12: 0000000000000001 [ 254.318729][ T8699] R13: 00007f26467e6038 R14: 00007f26467e5fa0 R15: 00007f264690fa28 [ 254.318747][ T8699] [ 254.546328][ T5899] usb 3-1: USB disconnect, device number 31 [ 255.224876][ T8711] FAULT_INJECTION: forcing a failure. [ 255.224876][ T8711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.239476][ T8711] CPU: 0 UID: 0 PID: 8711 Comm: syz.1.733 Not tainted syzkaller #0 PREEMPT(full) [ 255.239492][ T8711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 255.239499][ T8711] Call Trace: [ 255.239503][ T8711] [ 255.239508][ T8711] dump_stack_lvl+0x189/0x250 [ 255.239525][ T8711] ? __pfx____ratelimit+0x10/0x10 [ 255.239537][ T8711] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.239548][ T8711] ? __pfx__printk+0x10/0x10 [ 255.239558][ T8711] ? __might_fault+0xb0/0x130 [ 255.239580][ T8711] should_fail_ex+0x414/0x560 [ 255.239594][ T8711] _copy_from_iter+0x1de/0x1790 [ 255.239611][ T8711] ? rcu_is_watching+0x15/0xb0 [ 255.239624][ T8711] ? __alloc_skb+0x142/0x2d0 [ 255.239635][ T8711] ? __pfx__copy_from_iter+0x10/0x10 [ 255.239649][ T8711] ? __build_skb_around+0x262/0x3f0 [ 255.239661][ T8711] ? netlink_sendmsg+0x642/0xb30 [ 255.239673][ T8711] ? skb_put+0x11b/0x210 [ 255.239686][ T8711] netlink_sendmsg+0x6b2/0xb30 [ 255.239702][ T8711] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.239716][ T8711] ? aa_sock_msg_perm+0xf1/0x1d0 [ 255.239729][ T8711] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 255.239739][ T8711] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.239751][ T8711] __sock_sendmsg+0x21c/0x270 [ 255.239763][ T8711] ____sys_sendmsg+0x505/0x830 [ 255.239778][ T8711] ? __pfx_____sys_sendmsg+0x10/0x10 [ 255.239795][ T8711] ? import_iovec+0x74/0xa0 [ 255.239806][ T8711] ___sys_sendmsg+0x21f/0x2a0 [ 255.239819][ T8711] ? __pfx____sys_sendmsg+0x10/0x10 [ 255.239851][ T8711] ? __fget_files+0x2a/0x420 [ 255.239861][ T8711] ? __fget_files+0x3a0/0x420 [ 255.239876][ T8711] __x64_sys_sendmsg+0x19b/0x260 [ 255.239890][ T8711] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 255.239907][ T8711] ? __pfx_ksys_write+0x10/0x10 [ 255.239918][ T8711] ? do_syscall_64+0xbe/0xfa0 [ 255.239931][ T8711] do_syscall_64+0xfa/0xfa0 [ 255.239942][ T8711] ? lockdep_hardirqs_on+0x9c/0x150 [ 255.239953][ T8711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.239962][ T8711] ? clear_bhb_loop+0x60/0xb0 [ 255.239974][ T8711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.239983][ T8711] RIP: 0033:0x7f80d158f749 [ 255.239992][ T8711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.240001][ T8711] RSP: 002b:00007f80d23ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.240012][ T8711] RAX: ffffffffffffffda RBX: 00007f80d17e5fa0 RCX: 00007f80d158f749 [ 255.240019][ T8711] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 255.240025][ T8711] RBP: 00007f80d23ef090 R08: 0000000000000000 R09: 0000000000000000 [ 255.240031][ T8711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.240037][ T8711] R13: 00007f80d17e6038 R14: 00007f80d17e5fa0 R15: 00007f80d190fa28 [ 255.240052][ T8711] [ 255.839196][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.845856][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.870884][ T8723] binder: BINDER_SET_CONTEXT_MGR already set [ 255.891476][ T8723] binder: 8722:8723 ioctl 4018620d 200000000040 returned -16 [ 256.270606][ T7230] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 256.410662][ T7230] usb 3-1: device descriptor read/64, error -71 [ 256.680632][ T7230] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 256.907525][ T7230] usb 3-1: device descriptor read/64, error -71 [ 257.122149][ T7230] usb usb3-port1: attempt power cycle [ 257.404212][ T8744] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 257.420281][ T8744] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 257.428766][ T8744] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 257.436896][ T8744] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 257.482124][ T8744] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 257.500628][ T7230] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 257.556153][ T7230] usb 3-1: device descriptor read/8, error -71 [ 257.830546][ T7230] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 257.877603][ T7230] usb 3-1: device descriptor read/8, error -71 [ 257.991279][ T7230] usb usb3-port1: unable to enumerate USB device [ 258.194789][ T30] audit: type=1326 audit(1764643356.999:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8754 comm="syz.4.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099898f749 code=0x7ffc0000 [ 258.274878][ T30] audit: type=1326 audit(1764643356.999:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8754 comm="syz.4.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099898f749 code=0x7ffc0000 [ 258.344963][ T30] audit: type=1326 audit(1764643357.029:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8754 comm="syz.4.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f099898f749 code=0x7ffc0000 [ 258.402845][ T30] audit: type=1326 audit(1764643357.029:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8754 comm="syz.4.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099898f749 code=0x7ffc0000 [ 258.473507][ T30] audit: type=1326 audit(1764643357.029:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8754 comm="syz.4.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099898f749 code=0x7ffc0000 [ 258.523152][ T30] audit: type=1326 audit(1764643357.039:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8754 comm="syz.4.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f099898df90 code=0x7ffc0000 [ 258.600890][ T30] audit: type=1326 audit(1764643357.039:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8754 comm="syz.4.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099898f749 code=0x7ffc0000 [ 258.674728][ T30] audit: type=1326 audit(1764643357.039:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8754 comm="syz.4.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099898f749 code=0x7ffc0000 [ 258.817501][ T30] audit: type=1326 audit(1764643357.039:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8754 comm="syz.4.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f099898f749 code=0x7ffc0000 [ 258.874068][ T30] audit: type=1326 audit(1764643357.049:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8754 comm="syz.4.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099898f749 code=0x7ffc0000 [ 259.086473][ T8773] FAULT_INJECTION: forcing a failure. [ 259.086473][ T8773] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.160723][ T8773] CPU: 1 UID: 0 PID: 8773 Comm: syz.1.749 Not tainted syzkaller #0 PREEMPT(full) [ 259.160741][ T8773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 259.160747][ T8773] Call Trace: [ 259.160752][ T8773] [ 259.160757][ T8773] dump_stack_lvl+0x189/0x250 [ 259.160774][ T8773] ? __pfx____ratelimit+0x10/0x10 [ 259.160786][ T8773] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.160798][ T8773] ? __pfx__printk+0x10/0x10 [ 259.160808][ T8773] ? __might_fault+0xb0/0x130 [ 259.160824][ T8773] should_fail_ex+0x414/0x560 [ 259.160839][ T8773] _copy_from_user+0x2d/0xb0 [ 259.160850][ T8773] kstrtouint_from_user+0xc4/0x170 [ 259.160867][ T8773] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 259.160888][ T8773] proc_fail_nth_write+0x88/0x200 [ 259.160903][ T8773] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 259.160919][ T8773] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 259.160933][ T8773] vfs_write+0x27e/0xb30 [ 259.160954][ T8773] ? __pfx_vfs_write+0x10/0x10 [ 259.160971][ T8773] ? __fget_files+0x2a/0x420 [ 259.160994][ T8773] ? __fget_files+0x3a0/0x420 [ 259.161010][ T8773] ? __fget_files+0x2a/0x420 [ 259.161037][ T8773] ksys_write+0x145/0x250 [ 259.161055][ T8773] ? __pfx_ksys_write+0x10/0x10 [ 259.161076][ T8773] ? do_syscall_64+0xbe/0xfa0 [ 259.161098][ T8773] do_syscall_64+0xfa/0xfa0 [ 259.161115][ T8773] ? lockdep_hardirqs_on+0x9c/0x150 [ 259.161135][ T8773] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.161153][ T8773] ? clear_bhb_loop+0x60/0xb0 [ 259.161173][ T8773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.161190][ T8773] RIP: 0033:0x7f80d158e1ff [ 259.161205][ T8773] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 259.161220][ T8773] RSP: 002b:00007f80d23ef030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 259.161239][ T8773] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f80d158e1ff [ 259.161251][ T8773] RDX: 0000000000000001 RSI: 00007f80d23ef0a0 RDI: 0000000000000004 [ 259.161261][ T8773] RBP: 00007f80d23ef090 R08: 0000000000000000 R09: 0000000000000000 [ 259.161272][ T8773] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 259.161282][ T8773] R13: 00007f80d17e6038 R14: 00007f80d17e5fa0 R15: 00007f80d190fa28 [ 259.161312][ T8773] [ 259.440892][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 259.510633][ T5834] Bluetooth: hci1: command 0x0c1a tx timeout [ 259.516683][ T5834] Bluetooth: hci4: command 0x0c1a tx timeout [ 259.522757][ T5834] Bluetooth: hci3: command 0x0c1a tx timeout [ 259.528753][ T5834] Bluetooth: hci2: command 0x0c1a tx timeout [ 260.485079][ T8793] FAULT_INJECTION: forcing a failure. [ 260.485079][ T8793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.522584][ T8793] CPU: 1 UID: 0 PID: 8793 Comm: syz.0.757 Not tainted syzkaller #0 PREEMPT(full) [ 260.522604][ T8793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 260.522610][ T8793] Call Trace: [ 260.522615][ T8793] [ 260.522620][ T8793] dump_stack_lvl+0x189/0x250 [ 260.522637][ T8793] ? __pfx____ratelimit+0x10/0x10 [ 260.522648][ T8793] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.522661][ T8793] ? __pfx__printk+0x10/0x10 [ 260.522671][ T8793] ? __might_fault+0xb0/0x130 [ 260.522685][ T8793] should_fail_ex+0x414/0x560 [ 260.522700][ T8793] _copy_from_iter+0x1de/0x1790 [ 260.522717][ T8793] ? rcu_is_watching+0x15/0xb0 [ 260.522730][ T8793] ? kmalloc_reserve+0xbd/0x290 [ 260.522743][ T8793] ? __pfx__copy_from_iter+0x10/0x10 [ 260.522756][ T8793] ? __build_skb_around+0x262/0x3f0 [ 260.522769][ T8793] ? netlink_sendmsg+0x642/0xb30 [ 260.522781][ T8793] ? skb_put+0x11b/0x210 [ 260.522794][ T8793] netlink_sendmsg+0x6b2/0xb30 [ 260.522810][ T8793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.522824][ T8793] ? aa_sock_msg_perm+0xf1/0x1d0 [ 260.522837][ T8793] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 260.522847][ T8793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.522859][ T8793] __sock_sendmsg+0x21c/0x270 [ 260.522871][ T8793] ____sys_sendmsg+0x52d/0x830 [ 260.522888][ T8793] ? __pfx_____sys_sendmsg+0x10/0x10 [ 260.522904][ T8793] ? import_iovec+0x74/0xa0 [ 260.522915][ T8793] ___sys_sendmsg+0x21f/0x2a0 [ 260.522928][ T8793] ? __pfx____sys_sendmsg+0x10/0x10 [ 260.522957][ T8793] ? __fget_files+0x2a/0x420 [ 260.522967][ T8793] ? __fget_files+0x3a0/0x420 [ 260.522982][ T8793] __sys_sendmmsg+0x227/0x430 [ 260.522997][ T8793] ? __pfx___sys_sendmmsg+0x10/0x10 [ 260.523014][ T8793] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 260.523035][ T8793] ? ksys_write+0x22a/0x250 [ 260.523045][ T8793] ? __pfx_ksys_write+0x10/0x10 [ 260.523056][ T8793] __x64_sys_sendmmsg+0xa0/0xc0 [ 260.523070][ T8793] do_syscall_64+0xfa/0xfa0 [ 260.523081][ T8793] ? lockdep_hardirqs_on+0x9c/0x150 [ 260.523092][ T8793] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.523101][ T8793] ? clear_bhb_loop+0x60/0xb0 [ 260.523113][ T8793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.523122][ T8793] RIP: 0033:0x7f39eeb8f749 [ 260.523132][ T8793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.523140][ T8793] RSP: 002b:00007f39efa93038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 260.523151][ T8793] RAX: ffffffffffffffda RBX: 00007f39eede5fa0 RCX: 00007f39eeb8f749 [ 260.523158][ T8793] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 260.523165][ T8793] RBP: 00007f39efa93090 R08: 0000000000000000 R09: 0000000000000000 [ 260.523171][ T8793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.523177][ T8793] R13: 00007f39eede6038 R14: 00007f39eede5fa0 R15: 00007f39eef0fa28 [ 260.523192][ T8793] [ 261.321348][ T8801] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 261.891358][ T8805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.758'. [ 262.894387][ T8836] usb usb8: usbfs: process 8836 (syz.4.771) did not claim interface 0 before use [ 263.260302][ T8844] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 263.268978][ T8844] FAULT_INJECTION: forcing a failure. [ 263.268978][ T8844] name failslab, interval 1, probability 0, space 0, times 0 [ 263.283790][ T8844] CPU: 0 UID: 0 PID: 8844 Comm: syz.4.773 Not tainted syzkaller #0 PREEMPT(full) [ 263.283813][ T8844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 263.283823][ T8844] Call Trace: [ 263.283831][ T8844] [ 263.283838][ T8844] dump_stack_lvl+0x189/0x250 [ 263.283865][ T8844] ? __pfx____ratelimit+0x10/0x10 [ 263.283885][ T8844] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.283907][ T8844] ? __pfx__printk+0x10/0x10 [ 263.283922][ T8844] ? netlink_sendmsg+0x805/0xb30 [ 263.283944][ T8844] ? __x64_sys_sendmsg+0x19b/0x260 [ 263.283975][ T8844] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.284002][ T8844] should_fail_ex+0x414/0x560 [ 263.284032][ T8844] should_failslab+0xa8/0x100 [ 263.284055][ T8844] kmem_cache_alloc_noprof+0x74/0x6e0 [ 263.284079][ T8844] ? skb_clone+0x212/0x3a0 [ 263.284109][ T8844] skb_clone+0x212/0x3a0 [ 263.284135][ T8844] __netlink_deliver_tap+0x404/0x850 [ 263.284170][ T8844] ? netlink_deliver_tap+0x2e/0x1b0 [ 263.284193][ T8844] netlink_deliver_tap+0x19c/0x1b0 [ 263.284216][ T8844] netlink_sendskb+0x68/0x140 [ 263.284238][ T8844] netlink_unicast+0x397/0x9e0 [ 263.284255][ T8844] ? __asan_memcpy+0x40/0x70 [ 263.284286][ T8844] ? __pfx_netlink_unicast+0x10/0x10 [ 263.284316][ T8844] netlink_rcv_skb+0x28c/0x470 [ 263.284336][ T8844] ? __lock_acquire+0xab9/0xd20 [ 263.284354][ T8844] ? __pfx_genl_rcv_msg+0x10/0x10 [ 263.284375][ T8844] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 263.284415][ T8844] ? down_read+0x1ad/0x2e0 [ 263.284441][ T8844] genl_rcv+0x28/0x40 [ 263.284456][ T8844] netlink_unicast+0x82f/0x9e0 [ 263.284485][ T8844] ? __pfx_netlink_unicast+0x10/0x10 [ 263.284508][ T8844] ? netlink_sendmsg+0x642/0xb30 [ 263.284527][ T8844] ? skb_put+0x11b/0x210 [ 263.284552][ T8844] netlink_sendmsg+0x805/0xb30 [ 263.284584][ T8844] ? __pfx_netlink_sendmsg+0x10/0x10 [ 263.284609][ T8844] ? aa_sock_msg_perm+0xf1/0x1d0 [ 263.284631][ T8844] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 263.284650][ T8844] ? __pfx_netlink_sendmsg+0x10/0x10 [ 263.284681][ T8844] __sock_sendmsg+0x21c/0x270 [ 263.284702][ T8844] ____sys_sendmsg+0x505/0x830 [ 263.284731][ T8844] ? __pfx_____sys_sendmsg+0x10/0x10 [ 263.284762][ T8844] ? import_iovec+0x74/0xa0 [ 263.284783][ T8844] ___sys_sendmsg+0x21f/0x2a0 [ 263.284809][ T8844] ? __pfx____sys_sendmsg+0x10/0x10 [ 263.284863][ T8844] ? __fget_files+0x2a/0x420 [ 263.284881][ T8844] ? __fget_files+0x3a0/0x420 [ 263.284907][ T8844] __x64_sys_sendmsg+0x19b/0x260 [ 263.284931][ T8844] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 263.284959][ T8844] ? __pfx_ksys_write+0x10/0x10 [ 263.284985][ T8844] ? do_syscall_64+0xbe/0xfa0 [ 263.285010][ T8844] do_syscall_64+0xfa/0xfa0 [ 263.285028][ T8844] ? lockdep_hardirqs_on+0x9c/0x150 [ 263.285049][ T8844] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.285066][ T8844] ? clear_bhb_loop+0x60/0xb0 [ 263.285088][ T8844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.285105][ T8844] RIP: 0033:0x7f099898f749 [ 263.285120][ T8844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.285135][ T8844] RSP: 002b:00007f0999870038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 263.285155][ T8844] RAX: ffffffffffffffda RBX: 00007f0998be5fa0 RCX: 00007f099898f749 [ 263.285168][ T8844] RDX: 0000000004008094 RSI: 0000200000000100 RDI: 0000000000000003 [ 263.285180][ T8844] RBP: 00007f0999870090 R08: 0000000000000000 R09: 0000000000000000 [ 263.285191][ T8844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 263.285201][ T8844] R13: 00007f0998be6038 R14: 00007f0998be5fa0 R15: 00007f0998d0fa28 [ 263.285232][ T8844] [ 263.879369][ T8846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.774'. [ 264.101792][ T8853] FAULT_INJECTION: forcing a failure. [ 264.101792][ T8853] name fail_futex, interval 1, probability 0, space 0, times 1 [ 264.131029][ T8853] CPU: 0 UID: 0 PID: 8853 Comm: syz.0.777 Not tainted syzkaller #0 PREEMPT(full) [ 264.131055][ T8853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 264.131067][ T8853] Call Trace: [ 264.131074][ T8853] [ 264.131081][ T8853] dump_stack_lvl+0x189/0x250 [ 264.131108][ T8853] ? __pfx____ratelimit+0x10/0x10 [ 264.131129][ T8853] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.131150][ T8853] ? __pfx__printk+0x10/0x10 [ 264.131181][ T8853] should_fail_ex+0x414/0x560 [ 264.131207][ T8853] get_futex_key+0x900/0x1660 [ 264.131250][ T8853] ? __pfx_get_futex_key+0x10/0x10 [ 264.131272][ T8853] ? __might_fault+0xb0/0x130 [ 264.131298][ T8853] futex_requeue+0x21b/0x19a0 [ 264.131318][ T8853] ? __lock_acquire+0xab9/0xd20 [ 264.131346][ T8853] ? get_pid_task+0x20/0x1f0 [ 264.131368][ T8853] ? __pfx_futex_requeue+0x10/0x10 [ 264.131395][ T8853] ? rcu_read_lock_any_held+0xb3/0x120 [ 264.131421][ T8853] ? vfs_write+0x956/0xb30 [ 264.131447][ T8853] ? ksys_write+0x1cb/0x250 [ 264.131465][ T8853] do_futex+0x362/0x420 [ 264.131481][ T8853] ? __pfx_vfs_write+0x10/0x10 [ 264.131500][ T8853] ? __pfx_do_futex+0x10/0x10 [ 264.131525][ T8853] __se_sys_futex+0x36f/0x400 [ 264.131545][ T8853] ? ksys_write+0x22a/0x250 [ 264.131560][ T8853] ? __pfx___se_sys_futex+0x10/0x10 [ 264.131577][ T8853] ? __pfx_ksys_write+0x10/0x10 [ 264.131600][ T8853] ? __x64_sys_futex+0x21/0xf0 [ 264.131619][ T8853] do_syscall_64+0xfa/0xfa0 [ 264.131636][ T8853] ? lockdep_hardirqs_on+0x9c/0x150 [ 264.131655][ T8853] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.131672][ T8853] ? clear_bhb_loop+0x60/0xb0 [ 264.131692][ T8853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.131708][ T8853] RIP: 0033:0x7f39eeb8f749 [ 264.131723][ T8853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.131737][ T8853] RSP: 002b:00007f39efa93038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 264.131756][ T8853] RAX: ffffffffffffffda RBX: 00007f39eede5fa0 RCX: 00007f39eeb8f749 [ 264.131767][ T8853] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 000020000000cffc [ 264.131776][ T8853] RBP: 00007f39efa93090 R08: 0000200000000380 R09: 0000000000000000 [ 264.131788][ T8853] R10: 0000200000fd7ff0 R11: 0000000000000246 R12: 0000000000000001 [ 264.131799][ T8853] R13: 00007f39eede6038 R14: 00007f39eede5fa0 R15: 00007f39eef0fa28 [ 264.131828][ T8853] [ 264.780827][ T8866] netlink: 52 bytes leftover after parsing attributes in process `syz.3.781'. [ 265.786280][ T8885] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 265.922150][ T8885] ALSA: mixer_oss: invalid index 1374389 [ 266.131318][ T8892] ip6tnl0: Caught tx_queue_len zero misconfig [ 266.735217][ T8899] input: syz0 as /devices/virtual/input/input13 [ 266.990053][ T8903] FAULT_INJECTION: forcing a failure. [ 266.990053][ T8903] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 267.005570][ T8903] CPU: 1 UID: 0 PID: 8903 Comm: syz.0.792 Not tainted syzkaller #0 PREEMPT(full) [ 267.005586][ T8903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 267.005593][ T8903] Call Trace: [ 267.005598][ T8903] [ 267.005602][ T8903] dump_stack_lvl+0x189/0x250 [ 267.005619][ T8903] ? __pfx____ratelimit+0x10/0x10 [ 267.005632][ T8903] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.005644][ T8903] ? __pfx__printk+0x10/0x10 [ 267.005655][ T8903] ? fs_reclaim_acquire+0x7d/0x100 [ 267.005671][ T8903] should_fail_ex+0x414/0x560 [ 267.005686][ T8903] prepare_alloc_pages+0x213/0x610 [ 267.005700][ T8903] __alloc_frozen_pages_noprof+0x123/0x370 [ 267.005713][ T8903] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 267.005728][ T8903] ? policy_nodemask+0x27c/0x720 [ 267.005742][ T8903] alloc_pages_mpol+0x232/0x4a0 [ 267.005761][ T8903] folio_alloc_mpol_noprof+0x39/0x70 [ 267.005773][ T8903] shmem_alloc_and_add_folio+0x423/0xf40 [ 267.005786][ T8903] ? filemap_get_entry+0xad/0x2f0 [ 267.005795][ T8903] ? filemap_get_entry+0xad/0x2f0 [ 267.005805][ T8903] ? filemap_get_entry+0x28f/0x2f0 [ 267.005817][ T8903] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 267.005834][ T8903] shmem_get_folio_gfp+0x59d/0x1660 [ 267.005857][ T8903] shmem_fallocate+0x80f/0xde0 [ 267.005877][ T8903] ? __pfx_shmem_fallocate+0x10/0x10 [ 267.005890][ T8903] ? rcu_read_lock_any_held+0xb3/0x120 [ 267.005903][ T8903] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 267.005922][ T8903] vfs_fallocate+0x669/0x7e0 [ 267.005933][ T8903] ? __fget_files+0x2a/0x420 [ 267.005945][ T8903] ? __pfx_vfs_fallocate+0x10/0x10 [ 267.005954][ T8903] ? __fget_files+0x3a0/0x420 [ 267.005963][ T8903] ? __fget_files+0x2a/0x420 [ 267.005978][ T8903] __x64_sys_fallocate+0xc0/0x110 [ 267.005990][ T8903] do_syscall_64+0xfa/0xfa0 [ 267.006001][ T8903] ? lockdep_hardirqs_on+0x9c/0x150 [ 267.006012][ T8903] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.006021][ T8903] ? clear_bhb_loop+0x60/0xb0 [ 267.006033][ T8903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.006042][ T8903] RIP: 0033:0x7f39eeb8f749 [ 267.006052][ T8903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.006060][ T8903] RSP: 002b:00007f39efa72038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 267.006071][ T8903] RAX: ffffffffffffffda RBX: 00007f39eede6090 RCX: 00007f39eeb8f749 [ 267.006078][ T8903] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 267.006084][ T8903] RBP: 00007f39efa72090 R08: 0000000000000000 R09: 0000000000000000 [ 267.006089][ T8903] R10: 000000000010fff9 R11: 0000000000000246 R12: 0000000000000002 [ 267.006095][ T8903] R13: 00007f39eede6128 R14: 00007f39eede6090 R15: 00007f39eef0fa28 [ 267.006111][ T8903] [ 267.984571][ T43] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 268.117035][ T8929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.800'. [ 268.126282][ T8929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.800'. [ 268.135213][ T8929] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 268.141160][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 268.157757][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.168620][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 268.191373][ T43] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 268.206012][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 268.214979][ T43] usb 2-1: Product: syz [ 268.219159][ T43] usb 2-1: Manufacturer: syz [ 268.220588][ T10] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 268.231510][ T43] usb 2-1: SerialNumber: syz [ 268.248687][ T43] usb 2-1: config 0 descriptor?? [ 268.259627][ T43] radio-si470x 2-1:0.0: could not find interrupt in endpoint [ 268.267303][ T43] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 268.276687][ T43] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 268.377114][ T8933] syzkaller0: entered promiscuous mode [ 268.385163][ T8933] syzkaller0: entered allmulticast mode [ 268.391339][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 268.404317][ T10] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 268.441122][ T10] usb 1-1: config 0 has no interface number 0 [ 268.467520][ T10] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 268.491095][ T10] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 268.507799][ T8921] netlink: 'syz.1.798': attribute type 3 has an invalid length. [ 268.516616][ T8921] netlink: 666 bytes leftover after parsing attributes in process `syz.1.798'. [ 268.527080][ T10] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 268.546345][ T9] usb 2-1: USB disconnect, device number 30 [ 268.554826][ T10] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 268.569674][ T10] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 268.578923][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.613115][ T10] usb 1-1: config 0 descriptor?? [ 268.635480][ T10] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 268.963125][ T8951] ksmbd: Unknown IPC event: 0, ignore. [ 269.052971][ T8953] program syz.4.807 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 269.258198][ T43] usb 1-1: USB disconnect, device number 29 [ 269.258305][ C0] ldusb 1-1:0.55: usb_submit_urb failed (-19) [ 269.273111][ T43] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 270.850571][ T43] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 271.000905][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 271.007559][ T43] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 271.023646][ T43] usb 1-1: config 0 has no interface number 0 [ 271.042659][ T43] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 271.086161][ T43] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 271.102971][ T8977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.813'. [ 271.114399][ T43] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 271.125688][ T8977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.813'. [ 271.135019][ T8977] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 271.150913][ T43] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 271.174781][ T43] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 271.219316][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.237097][ T43] usb 1-1: config 0 descriptor?? [ 271.249165][ T43] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 272.208846][ T8980] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 273.533778][ T9012] ksmbd: Unknown IPC event: 0, ignore. [ 273.959696][ T10] usb 1-1: USB disconnect, device number 30 [ 274.146984][ T10] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 274.973808][ T9022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.824'. [ 274.984155][ T9022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.824'. [ 274.993325][ T9022] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 275.050274][ T9024] raw_sendmsg: syz.1.823 forgot to set AF_INET. Fix it! [ 276.522212][ T9073] netlink: 16 bytes leftover after parsing attributes in process `syz.1.835'. [ 276.726932][ T9078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.836'. [ 276.741602][ T9078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.836'. [ 276.764672][ T9078] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 278.687293][ T9094] capability: warning: `syz.3.842' uses 32-bit capabilities (legacy support in use) [ 278.840609][ T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 278.992016][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.017239][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.073938][ T9] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 279.120931][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.143501][ T9] usb 3-1: config 0 descriptor?? [ 279.160559][ T10] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 279.310886][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 279.319460][ T10] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 279.328552][ T10] usb 2-1: config 1 has no interface number 0 [ 279.342919][ T10] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 279.384006][ T10] usb 2-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid maxpacket 1224, setting to 1024 [ 279.427206][ T10] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 279.480604][ T10] usb 2-1: config 1 interface 105 has no altsetting 0 [ 279.533434][ T10] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 279.547180][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.588401][ T9] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 279.610661][ T10] usb 2-1: Product: syz [ 279.614916][ T9] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 279.690790][ T10] usb 2-1: Manufacturer: syz [ 279.715824][ T10] usb 2-1: SerialNumber: syz [ 279.720607][ T9] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 279.794191][ T9101] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 279.807056][ T9] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 279.815630][ T9101] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 280.118847][ T9] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 280.199905][ T9] playstation 0003:054C:0DF2.0007: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 280.331710][ T9101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.396997][ T9] playstation 0003:054C:0DF2.0007: Failed to retrieve feature with reportID 9: -32 [ 280.448445][ T9101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.474234][ T9] playstation 0003:054C:0DF2.0007: Failed to retrieve DualSense pairing info: -32 [ 280.574230][ T9101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.604925][ T9101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.633599][ T9] playstation 0003:054C:0DF2.0007: Failed to get MAC address from DualSense [ 280.639086][ T9101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.673553][ T9] playstation 0003:054C:0DF2.0007: Failed to create dualsense. [ 280.694353][ T9101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.736473][ T9] playstation 0003:054C:0DF2.0007: probe with driver playstation failed with error -32 [ 280.742329][ T9101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.792566][ T9101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.811388][ T9] usb 3-1: USB disconnect, device number 36 [ 280.854061][ T9101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.890729][ T7230] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 280.900002][ T9101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.031570][ T10] aqc111 2-1:1.105: probe with driver aqc111 failed with error -71 [ 281.084210][ T10] usb 2-1: USB disconnect, device number 31 [ 281.113665][ T7230] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 281.127627][ T9119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.847'. [ 281.160017][ T7230] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 281.160815][ T9119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.847'. [ 281.222896][ T7230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.229035][ T9119] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 281.336657][ T7230] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 281.660800][ T5899] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 281.845095][ T5899] usb 2-1: Using ep0 maxpacket: 8 [ 281.862510][ T5899] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 281.891222][ T5899] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 281.910705][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.929322][ T5899] usb 2-1: Product: syz [ 281.933938][ T5899] usb 2-1: Manufacturer: syz [ 281.938552][ T5899] usb 2-1: SerialNumber: syz [ 281.961525][ T5899] usb 2-1: config 0 descriptor?? [ 281.972946][ T5899] streamzap 2-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 282.502320][ T7230] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 282.520552][ T7230] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 282.538288][ T7230] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 282.552873][ T7230] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 282.571765][ T7230] usb 4-1: USB disconnect, device number 28 [ 283.154721][ T9159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.859'. [ 283.170515][ T9159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.859'. [ 283.181310][ T9159] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 284.219982][ T7230] usb 2-1: USB disconnect, device number 32 [ 284.390685][ T5899] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 284.487607][ T9184] netlink: 'syz.4.867': attribute type 1 has an invalid length. [ 284.541132][ T5899] usb 3-1: Using ep0 maxpacket: 8 [ 284.598858][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.609932][ T5898] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 284.623724][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.653690][ T5899] usb 3-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 284.665560][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.691484][ T5899] usb 3-1: config 0 descriptor?? [ 284.794473][ T9193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.871'. [ 284.803858][ T9193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.871'. [ 284.813305][ T9193] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 284.830686][ T9] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 284.925336][ T5899] usbhid 3-1:0.0: can't add hid device: -71 [ 284.935013][ T5899] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 284.954761][ T5899] usb 3-1: USB disconnect, device number 37 [ 284.993641][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 285.013891][ T9] usb 2-1: config 1 has an invalid interface number: 90 but max is 2 [ 285.040585][ T9] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 285.084202][ T9] usb 2-1: config 1 has an invalid interface number: 190 but max is 2 [ 285.107471][ T9] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 285.118184][ T9] usb 2-1: config 1 has an invalid interface number: 127 but max is 2 [ 285.126699][ T9] usb 2-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 285.140900][ T9] usb 2-1: config 1 has no interface number 1 [ 285.147306][ T9] usb 2-1: config 1 has no interface number 2 [ 285.170550][ T9] usb 2-1: config 1 has no interface number 3 [ 285.176731][ T9] usb 2-1: config 1 interface 90 altsetting 160 has an invalid descriptor for endpoint zero, skipping [ 285.203715][ T9] usb 2-1: config 1 interface 90 altsetting 160 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 285.233540][ T9] usb 2-1: config 1 interface 90 altsetting 160 has an invalid descriptor for endpoint zero, skipping [ 285.282213][ T9] usb 2-1: config 1 interface 90 altsetting 160 endpoint 0x1 has invalid maxpacket 927, setting to 64 [ 285.293427][ T9] usb 2-1: config 1 interface 90 altsetting 160 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 285.306315][ T9] usb 2-1: config 1 interface 90 altsetting 160 has an invalid descriptor for endpoint zero, skipping [ 285.317504][ T9] usb 2-1: config 1 interface 90 altsetting 160 has a duplicate endpoint with address 0x1, skipping [ 285.329945][ T9] usb 2-1: config 1 interface 90 altsetting 160 has an invalid descriptor for endpoint zero, skipping [ 285.341051][ T9] usb 2-1: config 1 interface 90 altsetting 160 has a duplicate endpoint with address 0xA, skipping [ 285.356577][ T9] usb 2-1: config 1 interface 90 altsetting 160 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 285.376789][ T9] usb 2-1: config 1 interface 90 altsetting 160 has a duplicate endpoint with address 0x4, skipping [ 285.389398][ T9] usb 2-1: config 1 interface 90 altsetting 160 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 285.402243][ T9] usb 2-1: config 1 interface 190 altsetting 132 has an invalid descriptor for endpoint zero, skipping [ 285.404268][ T9196] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 285.449454][ T9196] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 285.456128][ T9196] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 285.462701][ T9] usb 2-1: config 1 interface 190 altsetting 132 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 285.478850][ T9196] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 285.486078][ T9196] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 285.492299][ T9] usb 2-1: config 1 interface 190 altsetting 132 endpoint 0x86 has invalid maxpacket 512, setting to 64 [ 285.530556][ T9] usb 2-1: config 1 interface 190 altsetting 132 has a duplicate endpoint with address 0x7, skipping [ 285.547464][ T9] usb 2-1: config 1 interface 190 altsetting 132 has a duplicate endpoint with address 0x8, skipping [ 285.560283][ T9] usb 2-1: config 1 interface 190 altsetting 132 has a duplicate endpoint with address 0x7, skipping [ 285.588758][ T9] usb 2-1: config 1 interface 0 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 285.622272][ T9] usb 2-1: config 1 interface 0 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 285.652475][ T9] usb 2-1: config 1 interface 0 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 285.677156][ T9209] FAULT_INJECTION: forcing a failure. [ 285.677156][ T9209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.690710][ T9] usb 2-1: config 1 interface 0 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 285.712622][ T9209] CPU: 1 UID: 0 PID: 9209 Comm: syz.3.874 Not tainted syzkaller #0 PREEMPT(full) [ 285.712659][ T9209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 285.712670][ T9209] Call Trace: [ 285.712677][ T9209] [ 285.712686][ T9209] dump_stack_lvl+0x189/0x250 [ 285.712714][ T9209] ? __pfx____ratelimit+0x10/0x10 [ 285.712740][ T9209] ? __pfx_dump_stack_lvl+0x10/0x10 [ 285.712762][ T9209] ? __pfx__printk+0x10/0x10 [ 285.712779][ T9209] ? __might_fault+0xb0/0x130 [ 285.712807][ T9209] should_fail_ex+0x414/0x560 [ 285.712834][ T9209] _copy_from_iter+0x1de/0x1790 [ 285.712864][ T9209] ? rcu_is_watching+0x15/0xb0 [ 285.712887][ T9209] ? kmalloc_reserve+0xbd/0x290 [ 285.712908][ T9209] ? __pfx__copy_from_iter+0x10/0x10 [ 285.712932][ T9209] ? __build_skb_around+0x262/0x3f0 [ 285.712955][ T9209] ? netlink_sendmsg+0x642/0xb30 [ 285.712976][ T9209] ? skb_put+0x11b/0x210 [ 285.713001][ T9209] netlink_sendmsg+0x6b2/0xb30 [ 285.713032][ T9209] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.713058][ T9209] ? aa_sock_msg_perm+0xf1/0x1d0 [ 285.713080][ T9209] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 285.713099][ T9209] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.713122][ T9209] __sock_sendmsg+0x21c/0x270 [ 285.713143][ T9209] ____sys_sendmsg+0x505/0x830 [ 285.713171][ T9209] ? __pfx_____sys_sendmsg+0x10/0x10 [ 285.713204][ T9209] ? import_iovec+0x74/0xa0 [ 285.713224][ T9209] ___sys_sendmsg+0x21f/0x2a0 [ 285.713249][ T9209] ? __pfx____sys_sendmsg+0x10/0x10 [ 285.713303][ T9209] ? __fget_files+0x2a/0x420 [ 285.713322][ T9209] ? __fget_files+0x3a0/0x420 [ 285.713350][ T9209] __x64_sys_sendmsg+0x19b/0x260 [ 285.713375][ T9209] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 285.713407][ T9209] ? __pfx_ksys_write+0x10/0x10 [ 285.713426][ T9209] ? do_syscall_64+0xbe/0xfa0 [ 285.713448][ T9209] do_syscall_64+0xfa/0xfa0 [ 285.713466][ T9209] ? lockdep_hardirqs_on+0x9c/0x150 [ 285.713483][ T9209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.713498][ T9209] ? clear_bhb_loop+0x60/0xb0 [ 285.713516][ T9209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.713531][ T9209] RIP: 0033:0x7f495a18f749 [ 285.713547][ T9209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.713561][ T9209] RSP: 002b:00007f495b0e8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.713579][ T9209] RAX: ffffffffffffffda RBX: 00007f495a3e5fa0 RCX: 00007f495a18f749 [ 285.713592][ T9209] RDX: 00000000240008c4 RSI: 0000200000000000 RDI: 0000000000000003 [ 285.713603][ T9209] RBP: 00007f495b0e8090 R08: 0000000000000000 R09: 0000000000000000 [ 285.713614][ T9209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.713634][ T9209] R13: 00007f495a3e6038 R14: 00007f495a3e5fa0 R15: 00007f495a50fa28 [ 285.713663][ T9209] [ 285.730567][ T9] usb 2-1: config 1 interface 0 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 285.830646][ T5938] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 286.252996][ T9211] trusted_key: encrypted_key: insufficient parameters specified [ 286.364679][ T9211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.875'. [ 286.381804][ T5938] usb 3-1: Using ep0 maxpacket: 8 [ 286.394598][ T5938] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEF, changing to 0x8F [ 286.453488][ T5938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 256, setting to 64 [ 286.480632][ T5938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.497016][ T5938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.509643][ T5938] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 286.520142][ T5938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 286.567202][ T5938] usb 3-1: SerialNumber: syz [ 286.581143][ T9] usb 2-1: config 1 interface 0 altsetting 9 has 6 endpoint descriptors, different from the interface descriptor's value: 15 [ 286.594550][ T9] usb 2-1: too many endpoints for config 1 interface 127 altsetting 241: 176, using maximum allowed: 30 [ 286.605771][ T9] usb 2-1: config 1 interface 127 altsetting 241 has a duplicate endpoint with address 0xF, skipping [ 286.616696][ T9] usb 2-1: config 1 interface 127 altsetting 241 has a duplicate endpoint with address 0xB, skipping [ 286.627634][ T9] usb 2-1: config 1 interface 127 altsetting 241 has a duplicate endpoint with address 0x8, skipping [ 286.639477][ T9] usb 2-1: config 1 interface 127 altsetting 241 has a duplicate endpoint with address 0xF, skipping [ 286.677572][ T9] usb 2-1: config 1 interface 127 altsetting 241 has an invalid descriptor for endpoint zero, skipping [ 286.682420][ T5938] usb 3-1: config 0 descriptor?? [ 286.708482][ T9] usb 2-1: config 1 interface 127 altsetting 241 has a duplicate endpoint with address 0xF, skipping [ 286.739766][ T5938] hso 3-1:0.0: Can't find BULK IN endpoint [ 286.768909][ T9] usb 2-1: config 1 interface 127 altsetting 241 has a duplicate endpoint with address 0x8E, skipping [ 286.854416][ T9] usb 2-1: config 1 interface 127 altsetting 241 has a duplicate endpoint with address 0xA, skipping [ 286.890750][ T9] usb 2-1: config 1 interface 127 altsetting 241 has 9 endpoint descriptors, different from the interface descriptor's value: 176 [ 286.966140][ T9] usb 2-1: config 1 interface 90 has no altsetting 0 [ 286.972544][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 286.972560][ T30] audit: type=1326 audit(1764643385.779:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9170 comm="syz.2.862" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f264658f749 code=0x0 [ 286.985463][ T9] usb 2-1: config 1 interface 190 has no altsetting 0 [ 287.028162][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 287.053265][ T9] usb 2-1: config 1 interface 127 has no altsetting 0 [ 287.087307][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice=78.d6 [ 287.110773][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 287.120906][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.128966][ T9] usb 2-1: Product: syz [ 287.139100][ T9] usb 2-1: Manufacturer: Њ [ 287.182543][ T9] usb 2-1: SerialNumber: syz [ 287.420165][ T9] usb 2-1: unknown interface protocol 0x3f, assuming v1 [ 287.434043][ T9] usb 2-1: cannot find UAC_HEADER [ 287.510690][ T5834] Bluetooth: hci1: command 0x0c1a tx timeout [ 287.516855][ T5830] Bluetooth: hci4: command 0x0c1a tx timeout [ 287.522964][ T5830] Bluetooth: hci3: command 0x0c1a tx timeout [ 287.529190][ T5830] Bluetooth: hci2: command 0x0c1a tx timeout [ 287.599368][ T9] snd-usb-audio 2-1:1.90: probe with driver snd-usb-audio failed with error -22 [ 287.640155][ T9] usb 2-1: USB disconnect, device number 33 [ 287.880017][ T6331] udevd[6331]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.90/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 288.137061][ T9233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.882'. [ 288.159496][ T9234] netlink: 20 bytes leftover after parsing attributes in process `syz.1.881'. [ 288.192895][ T9233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.882'. [ 288.224425][ T9233] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 288.283271][ T5898] usb 3-1: USB disconnect, device number 38 [ 288.920366][ T9262] netlink: 28 bytes leftover after parsing attributes in process `syz.4.892'. [ 288.929739][ T9262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.892'. [ 288.946618][ T9262] netlink: 4 bytes leftover after parsing attributes in process `syz.4.892'. [ 289.065354][ T9265] FAULT_INJECTION: forcing a failure. [ 289.065354][ T9265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.079147][ T9265] CPU: 1 UID: 0 PID: 9265 Comm: syz.4.894 Not tainted syzkaller #0 PREEMPT(full) [ 289.079170][ T9265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 289.079179][ T9265] Call Trace: [ 289.079185][ T9265] [ 289.079193][ T9265] dump_stack_lvl+0x189/0x250 [ 289.079219][ T9265] ? __pfx____ratelimit+0x10/0x10 [ 289.079236][ T9265] ? __pfx_dump_stack_lvl+0x10/0x10 [ 289.079253][ T9265] ? __pfx__printk+0x10/0x10 [ 289.079270][ T9265] ? __might_fault+0xb0/0x130 [ 289.079295][ T9265] should_fail_ex+0x414/0x560 [ 289.079319][ T9265] _copy_from_user+0x2d/0xb0 [ 289.079337][ T9265] ___sys_sendmsg+0x158/0x2a0 [ 289.079361][ T9265] ? __pfx____sys_sendmsg+0x10/0x10 [ 289.079410][ T9265] ? __fget_files+0x2a/0x420 [ 289.079426][ T9265] ? __fget_files+0x3a0/0x420 [ 289.079449][ T9265] __x64_sys_sendmsg+0x19b/0x260 [ 289.079471][ T9265] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 289.079498][ T9265] ? __pfx_ksys_write+0x10/0x10 [ 289.079516][ T9265] ? do_syscall_64+0xbe/0xfa0 [ 289.079536][ T9265] do_syscall_64+0xfa/0xfa0 [ 289.079553][ T9265] ? lockdep_hardirqs_on+0x9c/0x150 [ 289.079570][ T9265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.079586][ T9265] ? clear_bhb_loop+0x60/0xb0 [ 289.079604][ T9265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.079618][ T9265] RIP: 0033:0x7f099898f749 [ 289.079633][ T9265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.079646][ T9265] RSP: 002b:00007f0999870038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 289.079662][ T9265] RAX: ffffffffffffffda RBX: 00007f0998be5fa0 RCX: 00007f099898f749 [ 289.079673][ T9265] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000003 [ 289.079682][ T9265] RBP: 00007f0999870090 R08: 0000000000000000 R09: 0000000000000000 [ 289.079692][ T9265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.079701][ T9265] R13: 00007f0998be6038 R14: 00007f0998be5fa0 R15: 00007f0998d0fa28 [ 289.079724][ T9265] [ 289.381029][ T9267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.895'. [ 289.396688][ T9267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.895'. [ 289.405877][ T9267] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 290.141032][ T5898] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 290.180582][ T7230] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 290.280709][ T5899] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 290.313654][ T5898] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 290.324184][ T5898] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 290.334646][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.335319][ T7230] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 290.363800][ T7230] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 290.370037][ T5898] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 290.389452][ T7230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.427912][ T7230] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 290.456017][ T5899] usb 3-1: Using ep0 maxpacket: 16 [ 290.468082][ T5899] usb 3-1: config 0 interface 0 altsetting 235 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.481180][ T5899] usb 3-1: config 0 interface 0 altsetting 235 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.492000][ T5899] usb 3-1: config 0 interface 0 has no altsetting 0 [ 290.498614][ T5899] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 290.508344][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.524147][ T5899] usb 3-1: config 0 descriptor?? [ 290.938888][ T5899] mcp2221 0003:04D8:00DD.0008: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 290.954579][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 290.968902][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 290.981300][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 290.993612][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 291.005902][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 291.018208][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 291.030637][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 291.044586][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 291.431564][ T5898] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 291.751008][ T7230] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 291.759175][ T7230] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 291.825617][ T5898] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 291.849719][ T7230] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 291.861158][ T5898] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 291.861181][ T5898] stv0680 2-1:4.0: last error: 0, command = 0x0 [ 291.867487][ T5898] usb 2-1: USB disconnect, device number 34 [ 292.094885][ T9309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.908'. [ 292.118929][ T7230] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 292.184536][ T7230] usb 5-1: USB disconnect, device number 25 [ 293.230690][ C0] net_ratelimit: 9356 callbacks suppressed [ 293.230704][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 293.248967][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 293.261267][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 293.273495][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 293.285737][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 293.298008][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 293.310250][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 293.322521][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 293.334899][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 293.347131][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 293.421183][ T9309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.908'. [ 297.171090][ T5899] usb 3-1: reset high-speed USB device number 39 using dummy_hcd [ 298.240549][ C0] net_ratelimit: 20329 callbacks suppressed [ 298.240568][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 298.258968][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 298.271443][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 298.280925][ T43] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 298.283952][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 298.303400][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 298.315945][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 298.328476][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 298.341022][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 298.353661][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 298.366194][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 299.098883][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.451981][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.063884][ T43] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 300.522327][ T5938] usb 3-1: USB disconnect, device number 39 [ 300.550803][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.087398][ T43] usb 2-1: config 0 descriptor?? [ 301.126325][ T43] usb 2-1: can't set config #0, error -71 [ 301.510669][ T5899] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 303.248321][ T43] usb 2-1: USB disconnect, device number 35 [ 303.250549][ C0] net_ratelimit: 21906 callbacks suppressed [ 303.250566][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 303.272381][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 303.284643][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 303.296921][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 303.309260][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 303.321515][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 303.333817][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 303.346055][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 303.358326][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 303.370715][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 307.984185][ T5899] usb 1-1: device descriptor read/all, error -71 [ 308.260738][ C0] net_ratelimit: 22281 callbacks suppressed [ 308.260760][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 308.279014][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 308.291288][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 308.303717][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 308.316337][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 308.328949][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 308.341507][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 308.354100][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 308.367062][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 308.379588][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 313.270618][ C0] net_ratelimit: 21441 callbacks suppressed [ 313.270637][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 313.289374][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 313.301978][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 313.314571][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 313.327146][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 313.339769][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 313.352302][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 313.364660][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 313.376957][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 313.389275][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 317.373112][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.386289][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.280629][ C0] net_ratelimit: 22196 callbacks suppressed [ 318.280644][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 318.298944][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 318.311380][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 318.323648][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 318.335901][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 318.348151][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 318.360412][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 318.372752][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 318.385001][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 318.397232][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 323.290612][ C0] net_ratelimit: 20386 callbacks suppressed [ 323.290633][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 323.309052][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 323.321336][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 323.333578][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 323.345843][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 323.358118][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 323.370352][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 323.382574][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 323.394857][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 323.407189][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 328.300573][ C0] net_ratelimit: 23222 callbacks suppressed [ 328.300594][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 328.300804][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 328.306905][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 328.319073][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:48:fb:bd:fe:0a, vlan:1) [ 328.331140][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 328.342898][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 328.354900][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 328.366967][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 328.378964][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 328.390756][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:48:fb:bd:fe:0a, vlan:1) [ 333.310529][ C1] net_ratelimit: 24659 callbacks suppressed [ 333.310550][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:48:fb:bd:fe:0a, vlan:1) [ 333.310749][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 333.316809][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 333.328896][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 333.340890][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 333.352873][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 333.364659][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:48:fb:bd:fe:0a, vlan:1) [ 333.376656][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 333.388628][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 333.400820][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 333.950531][ C0] sched: DL replenish lagged too much [ 338.320450][ C1] net_ratelimit: 25045 callbacks suppressed [ 338.320471][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 338.320518][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 338.326846][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 338.338778][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 338.350584][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:48:fb:bd:fe:0a, vlan:1) [ 338.362535][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 338.374486][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 338.386743][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 338.400609][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 338.410446][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 343.330504][ C1] net_ratelimit: 25063 callbacks suppressed [ 343.330525][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 343.330657][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 343.336791][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:48:fb:bd:fe:0a, vlan:1) [ 343.348846][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 343.360724][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 343.372968][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 343.384671][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 343.396632][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 343.408701][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 343.420800][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 348.340652][ C0] net_ratelimit: 24698 callbacks suppressed [ 348.340674][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 348.340726][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 348.346980][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 348.358974][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:48:fb:bd:fe:0a, vlan:1) [ 348.371095][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 348.383167][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 348.395336][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 348.407326][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 348.419315][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 348.431259][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 353.350487][ C0] net_ratelimit: 24821 callbacks suppressed [ 353.350516][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 353.350577][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 353.356908][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 353.368745][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:48:fb:bd:fe:0a, vlan:1) [ 353.380714][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 353.393469][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 353.404835][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 353.416608][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 353.428559][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 353.440640][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 358.360729][ C1] net_ratelimit: 19998 callbacks suppressed [ 358.360733][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 358.360750][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 358.367101][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 358.380681][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:48:fb:bd:fe:0a, vlan:1) [ 358.390939][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 358.404219][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 358.415080][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 358.426996][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 358.438937][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 358.451184][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 363.370550][ C1] net_ratelimit: 19234 callbacks suppressed [ 363.370572][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 363.370624][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 363.376949][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 363.389087][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 363.400799][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 363.412761][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 363.424793][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:48:fb:bd:fe:0a, vlan:1) [ 363.436817][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 363.449914][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 363.460690][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 368.380568][ C1] net_ratelimit: 20526 callbacks suppressed [ 368.380589][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 368.380741][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 368.386883][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:48:fb:bd:fe:0a, vlan:1) [ 368.399016][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 368.411778][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 368.422862][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 368.434834][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 368.446902][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 368.458686][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 368.470573][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 373.390452][ C0] net_ratelimit: 20475 callbacks suppressed [ 373.390473][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 373.390571][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 373.396713][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 373.408795][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 373.420889][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 373.432787][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 373.444581][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 373.456585][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:48:fb:bd:fe:0a, vlan:1) [ 373.468677][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 373.481482][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 378.400582][ C1] net_ratelimit: 19509 callbacks suppressed [ 378.400602][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 378.400775][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 378.406888][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:48:fb:bd:fe:0a, vlan:1) [ 378.419012][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 378.431617][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 378.442818][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 378.454805][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 378.466890][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 378.479236][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 378.490607][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 378.928151][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.946401][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.410539][ C1] net_ratelimit: 20564 callbacks suppressed [ 383.410560][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 383.411153][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 383.416915][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 383.428781][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 383.440813][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:48:fb:bd:fe:0a, vlan:1) [ 383.452851][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 383.465534][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 383.476880][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 383.488853][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 383.500821][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 388.420466][ C0] net_ratelimit: 21089 callbacks suppressed [ 388.420488][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 388.420522][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:48:fb:bd:fe:0a, vlan:1) [ 388.426859][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 388.439482][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 388.450728][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 388.462706][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 388.474665][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 388.486513][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 388.498362][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 388.510418][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:48:fb:bd:fe:0a, vlan:1) [ 393.430837][ C0] net_ratelimit: 20018 callbacks suppressed [ 393.430857][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 393.430869][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 393.431227][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 393.437106][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 393.449277][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 393.461166][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 393.472947][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:48:fb:bd:fe:0a, vlan:1) [ 393.484818][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 393.497578][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 393.508949][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 398.440429][ C1] net_ratelimit: 20812 callbacks suppressed [ 398.440449][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 398.440610][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 398.446901][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 398.458812][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 398.470652][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:48:fb:bd:fe:0a, vlan:1) [ 398.482642][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 398.495561][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 398.506808][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 398.518789][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 398.530740][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 403.450610][ C0] net_ratelimit: 19767 callbacks suppressed [ 403.450630][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 403.451288][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 403.457070][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 403.468866][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 403.480787][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 403.492838][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 403.504768][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 403.516583][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:48:fb:bd:fe:0a, vlan:1) [ 403.528554][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 403.551159][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 408.460491][ C1] net_ratelimit: 20461 callbacks suppressed [ 408.460516][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:48:fb:bd:fe:0a, vlan:1) [ 408.460632][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 408.467582][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 408.479083][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 408.490969][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 408.502837][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 408.514854][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 408.526843][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 408.538595][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:48:fb:bd:fe:0a, vlan:1) [ 408.550649][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 413.470535][ C1] net_ratelimit: 19583 callbacks suppressed [ 413.470555][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 413.470635][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 413.476962][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:48:fb:bd:fe:0a, vlan:1) [ 413.489014][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 413.501818][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 413.512853][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 413.524886][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 413.536896][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 413.548801][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 413.560565][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 418.480578][ C0] net_ratelimit: 19611 callbacks suppressed [ 418.480599][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 418.480614][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:48:fb:bd:fe:0a, vlan:1) [ 418.481804][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 418.486971][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 418.498886][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 418.510797][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 418.522845][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 418.534795][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 418.546627][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:48:fb:bd:fe:0a, vlan:1) [ 418.558457][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 423.490547][ C0] net_ratelimit: 19781 callbacks suppressed [ 423.490568][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 423.491038][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 423.497050][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 423.508916][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 423.520754][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 423.533112][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 423.545204][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 423.557056][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:48:fb:bd:fe:0a, vlan:1) [ 423.569006][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 423.581980][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 428.500419][ C0] net_ratelimit: 19684 callbacks suppressed [ 428.500440][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 428.501546][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 428.506888][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 428.518768][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 428.530671][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 428.542732][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 428.554743][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 428.566496][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:48:fb:bd:fe:0a, vlan:1) [ 428.578496][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 428.591444][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 433.510538][ C0] net_ratelimit: 20842 callbacks suppressed [ 433.510558][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 433.510795][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 433.516904][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 433.528797][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:48:fb:bd:fe:0a, vlan:1) [ 433.540744][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 433.553635][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 433.565013][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 433.576843][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 433.588666][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 433.600777][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 438.520552][ C0] net_ratelimit: 19837 callbacks suppressed [ 438.520574][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 438.520640][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 438.526874][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 438.538888][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:48:fb:bd:fe:0a, vlan:1) [ 438.551008][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 438.563670][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 438.576614][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 438.586993][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 438.599060][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 438.610827][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 440.349376][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.367811][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.530437][ C0] net_ratelimit: 20057 callbacks suppressed [ 443.530457][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 443.530680][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 443.536810][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 443.548743][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 443.560729][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 443.572758][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 443.584654][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 443.596455][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:48:fb:bd:fe:0a, vlan:1) [ 443.608404][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 443.621702][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 448.540740][ C1] net_ratelimit: 20870 callbacks suppressed [ 448.540761][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 448.540767][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 448.541092][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 448.547125][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 448.559086][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 448.570978][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:48:fb:bd:fe:0a, vlan:1) [ 448.582883][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 448.595731][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 448.606981][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 448.620606][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 453.550612][ C1] net_ratelimit: 21337 callbacks suppressed [ 453.550634][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 453.550642][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 453.550934][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 453.556947][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 453.568938][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 453.580921][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 453.592714][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 453.604741][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:48:fb:bd:fe:0a, vlan:1) [ 453.616797][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 453.629609][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 458.240379][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 458.247359][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9350/1:b..l [ 458.255913][ C1] rcu: (detected by 1, t=10503 jiffies, g=35957, q=487 ncpus=2) [ 458.263684][ C1] task:syz.0.917 state:R running task stack:25624 pid:9350 tgid:9340 ppid:5840 task_flags:0x400140 flags:0x00080003 [ 458.278552][ C1] Call Trace: [ 458.281853][ C1] [ 458.284801][ C1] __schedule+0x1798/0x4cc0 [ 458.289323][ C1] ? __lock_acquire+0xab9/0xd20 [ 458.294210][ C1] ? __pfx___schedule+0x10/0x10 [ 458.299084][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 458.304381][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 458.309605][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 458.314923][ C1] preempt_schedule_irq+0xb5/0x150 [ 458.320046][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 458.325802][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 458.331624][ C1] irqentry_exit+0x6f/0x90 [ 458.336057][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 458.342068][ C1] RIP: 0010:rcu_is_watching+0x67/0xb0 [ 458.347455][ C1] Code: 89 f7 e8 5c a4 7f 00 48 c7 c3 98 5f 70 92 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 34 8b 03 65 ff 0d 19 85 c8 10 <74> 11 83 e0 04 c1 e8 02 5b 41 5e 41 5f c3 cc cc cc cc cc e8 41 8d [ 458.367074][ C1] RSP: 0018:ffffc900115f6d90 EFLAGS: 00000286 [ 458.373161][ C1] RAX: 000000000030ea24 RBX: ffff8880b8932f98 RCX: ff136a58606f8200 [ 458.381150][ C1] RDX: ffffc900115f6f01 RSI: ffffffff8bbf0540 RDI: ffffffff8bbf0500 [ 458.389136][ C1] RBP: dffffc0000000000 R08: ffffc900115f7010 R09: 0000000000000000 [ 458.397217][ C1] R10: ffffc900115f6f38 R11: fffff520022bede9 R12: ffffc900115f7020 [ 458.405210][ C1] R13: ffffffff81738c45 R14: ffffffff8d92fdd8 R15: dffffc0000000000 [ 458.413202][ C1] ? unwind_next_frame+0xa5/0x2390 [ 458.418352][ C1] ? unwind_next_frame+0xa5/0x2390 [ 458.423646][ C1] lock_release+0x4b/0x3e0 [ 458.428080][ C1] ? unwind_next_frame+0x19ae/0x2390 [ 458.433380][ C1] ? deref_stack_reg+0x19f/0x230 [ 458.438337][ C1] ? unwind_next_frame+0xa5/0x2390 [ 458.443462][ C1] unwind_next_frame+0x19a9/0x2390 [ 458.448593][ C1] ? unwind_next_frame+0xa5/0x2390 [ 458.453721][ C1] ? stack_trace_save+0x9c/0xe0 [ 458.458597][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 458.464781][ C1] arch_stack_walk+0x11c/0x150 [ 458.469569][ C1] ? save_stack+0xf5/0x1f0 [ 458.474000][ C1] stack_trace_save+0x9c/0xe0 [ 458.478696][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 458.484095][ C1] save_stack+0xf5/0x1f0 [ 458.488358][ C1] ? __pfx_save_stack+0x10/0x10 [ 458.493235][ C1] ? page_ext_put+0x97/0xc0 [ 458.497756][ C1] __reset_page_owner+0x71/0x1f0 [ 458.502704][ C1] __free_frozen_pages+0xbc4/0xd30 [ 458.507835][ C1] __put_partials+0x146/0x170 [ 458.512528][ C1] put_cpu_partial+0x1f2/0x2e0 [ 458.517310][ C1] __slab_free+0x2b9/0x390 [ 458.521747][ C1] ? __phys_addr+0xd3/0x180 [ 458.526269][ C1] qlist_free_all+0x97/0x140 [ 458.530877][ C1] kasan_quarantine_reduce+0x148/0x160 [ 458.536373][ C1] __kasan_slab_alloc+0x22/0x80 [ 458.541403][ C1] kmem_cache_alloc_noprof+0x367/0x6e0 [ 458.546891][ C1] ? __kernfs_new_node+0xd7/0x7e0 [ 458.551931][ C1] __kernfs_new_node+0xd7/0x7e0 [ 458.556792][ C1] ? __lock_acquire+0xab9/0xd20 [ 458.560672][ C0] net_ratelimit: 19585 callbacks suppressed [ 458.560688][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 458.561653][ C1] ? __pfx___kernfs_new_node+0x10/0x10 [ 458.568072][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 458.579408][ C1] ? kernfs_root+0x1c/0x230 [ 458.579436][ C1] ? kernfs_root+0x1c/0x230 [ 458.579448][ C1] ? kernfs_root+0x1c/0x230 [ 458.579460][ C1] ? kernfs_root+0x1c/0x230 [ 458.579478][ C1] kernfs_new_node+0x102/0x210 [ 458.585324][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 458.596868][ C1] __kernfs_create_file+0x4b/0x2e0 [ 458.596896][ C1] sysfs_add_file_mode_ns+0x238/0x300 [ 458.601968][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 458.605897][ C1] internal_create_group+0x66d/0x1110 [ 458.610864][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 458.614885][ C1] ? __pfx_internal_create_group+0x10/0x10 [ 458.620097][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 458.631482][ C1] ? kernfs_add_one+0xf0/0x520 [ 458.631510][ C1] sysfs_create_groups+0x59/0x120 [ 458.631528][ C1] device_add_attrs+0x1c4/0x5a0 [ 458.631556][ C1] ? __pfx_device_add_attrs+0x10/0x10 [ 458.637065][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 458.642017][ C1] ? device_add_class_symlinks+0x21f/0x240 [ 458.642043][ C1] device_add+0x496/0xb50 [ 458.642064][ C1] ? device_initialize+0x24b/0x440 [ 458.654551][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 458.659379][ C1] netdev_register_kobject+0x178/0x310 [ 458.671748][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 458.677145][ C1] register_netdevice+0x126c/0x1ae0 [ 458.689691][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 458.693844][ C1] ? __pfx_register_netdevice+0x10/0x10 [ 458.693880][ C1] ? net_generic+0x1e/0x240 [ 458.792559][ C1] ? net_generic+0x1e/0x240 [ 458.797083][ C1] ? net_generic+0x1e/0x240 [ 458.801599][ C1] register_netdev+0x40/0x60 [ 458.806202][ C1] vti6_init_net+0x238/0x370 [ 458.810809][ C1] ops_init+0x35c/0x5c0 [ 458.814988][ C1] setup_net+0x110/0x330 [ 458.819242][ C1] ? __pfx_setup_net+0x10/0x10 [ 458.824019][ C1] ? copy_net_ns+0x3cc/0x570 [ 458.828619][ C1] ? down_read_killable+0x1d1/0x350 [ 458.833829][ C1] ? preinit_net+0x47d/0x740 [ 458.838429][ C1] copy_net_ns+0x3e3/0x570 [ 458.842863][ C1] create_new_namespaces+0x3e7/0x6a0 [ 458.848161][ C1] ? security_capable+0x7e/0x2e0 [ 458.853118][ C1] unshare_nsproxy_namespaces+0x11c/0x170 [ 458.858849][ C1] ksys_unshare+0x4c8/0x8c0 [ 458.863369][ C1] ? __pfx_ksys_unshare+0x10/0x10 [ 458.868423][ C1] __x64_sys_unshare+0x38/0x50 [ 458.873198][ C1] do_syscall_64+0xfa/0xfa0 [ 458.877711][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 458.882923][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.888999][ C1] ? clear_bhb_loop+0x60/0xb0 [ 458.893691][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.899592][ C1] RIP: 0033:0x7f39eeb8f749 [ 458.904010][ C1] RSP: 002b:00007f39efa51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 458.912433][ C1] RAX: ffffffffffffffda RBX: 00007f39eede6180 RCX: 00007f39eeb8f749 [ 458.920417][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 458.928395][ C1] RBP: 00007f39eec13f91 R08: 0000000000000000 R09: 0000000000000000 [ 458.936376][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 458.944357][ C1] R13: 00007f39eede6218 R14: 00007f39eede6180 R15: 00007f39eef0fa28 [ 458.952356][ C1] [ 463.570576][ C1] net_ratelimit: 19005 callbacks suppressed [ 463.570597][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 463.570714][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 463.576892][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 463.589000][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 463.601039][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 463.612968][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 463.625029][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:48:fb:bd:fe:0a, vlan:1) [ 463.636838][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 463.649644][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 463.660952][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)