last executing test programs: 12m18.803839286s ago: executing program 0 (id=374): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7f, 0x0, 0x9, 0xffffffffffffffff, 0xfffffe0000000005, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", '\x00', "3f4051c4", "a44a889722b66244"}, 0x28) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r1, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$USBDEVFS_BULK(r6, 0xc0185502, &(0x7f0000000300)={{{0xc, 0x1}}, 0x91, 0xc, &(0x7f00000003c0)="b648489ede2a3a891565dacc795bd2036709d23170c475cd602af46621461810925f89ead9f8a6ec485d603be96fb3d76121328733d27a5becc6eac413bc526cb8604e7b0c4d3d0ec5bce8a4a8e9abb73c6b70338cb675776514883113dc1ece4f21d6178860b95f87c79cffa5fea4aeb1f80ab20b1b3313709022a4fbd3aea41ca47d717ba96bf85e88fd755eb12eecca"}) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xa7}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x60, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x3}}}, @TCF_EM_META={0xc, 0x2}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r7, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) recvmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000b00)=""/81, 0x51}], 0x1}}], 0x1, 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x87b0cc373e1ddae9, 0x0, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCXONC(r8, 0x540a, 0x2) 12m17.692507031s ago: executing program 0 (id=378): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="a90303"], 0x1c}}, 0x4004050) 12m17.651356535s ago: executing program 0 (id=379): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0xc, 0x200) ioctl$FE_SET_TONE(r0, 0x6f42, &(0x7f0000000080)) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20002) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000140)=0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$netlink(r2, &(0x7f0000000180), &(0x7f00000001c0)=0xc) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50005008200000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12m17.547303717s ago: executing program 0 (id=380): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r3, r3, &(0x7f0000000000)=0x2eb4, 0x2000007ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) readv(r4, 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) 12m16.672710592s ago: executing program 0 (id=388): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x1, 0xd, 0x4, 0x4, 0x8, 0x28, 0x9, 0x31, 0x2, 0x8, 0x7, 0x1, 0x0, 0x1}, 0xe) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @loopback, 0xb9dc}, 0x1c) (fail_nth: 10) 12m16.20002932s ago: executing program 0 (id=392): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$qrtr(0x2a, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getuid() connect$qrtr(r8, &(0x7f0000000040), 0xc) socket(0x2c, 0x4, 0xb2) getpeername(r8, 0x0, &(0x7f0000008cc0)) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x700}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x1, 0x2, 0xf, 0x6, 0x6, 0x1, 0xa, 0x4, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)={0x200000, 0x200000, 0x0, 0x8, 0x5989, 0x4}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0xf}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 12m15.28343732s ago: executing program 32 (id=392): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$qrtr(0x2a, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getuid() connect$qrtr(r8, &(0x7f0000000040), 0xc) socket(0x2c, 0x4, 0xb2) getpeername(r8, 0x0, &(0x7f0000008cc0)) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x700}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x1, 0x2, 0xf, 0x6, 0x6, 0x1, 0xa, 0x4, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)={0x200000, 0x200000, 0x0, 0x8, 0x5989, 0x4}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0xf}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 11m41.048221317s ago: executing program 4 (id=522): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x50242, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2d81) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/timer_list\x00', 0x0, 0x0) recvmmsg(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xff4f, 0xffffffffffffff4f, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xeb) 11m39.145825237s ago: executing program 4 (id=528): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000004280)=[{&(0x7f0000003fc0)='q', 0x1}], 0x1}}], 0xfffffffffffffe9d, 0x20001000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x1b0, 0x43, 0xa0, 0x1b0, 0x98, 0x2c0, 0x178, 0x178, 0x2c0, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x98, 0xb8, 0x0, {0x0, 0x7a010000}, [@common=@unspec=@cgroup0={{0x28}, {0xa}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x260) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000031300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) 11m38.89691751s ago: executing program 4 (id=529): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r0 = socket(0x11, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1fffffffffd) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f00000000c0)={0x2, 0x240, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0x1000000000, 0x7, 0x3, 0x6}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0xfffd, 0x0, 0x9, 0x7ffc0000}]}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000180)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_delete(0x0) ioctl$XFS_IOC_ERROR_INJECTION(0xffffffffffffffff, 0x40085874, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x4, @remote, 0x1}, 0x1c) listen(r9, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r11 = accept(r9, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRES32=r6, @ANYRES32, @ANYRESOCT=r0, @ANYRESDEC=r8, @ANYRES64=r6, @ANYRESOCT=r1, @ANYRESDEC=r7, @ANYRES32=r7], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvfrom(r10, 0x0, 0x0, 0x140, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ifreq(r5, 0x8947, &(0x7f0000000040)={'bond0\x00', @ifru_names='veth0\x00'}) 11m37.456574022s ago: executing program 4 (id=534): r0 = socket(0x8000000010, 0x2, 0x0) syz_usb_connect(0x5, 0x52, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100036ffa680863070120ff2c0102030109024000021109400c0904080601ff"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) write(r0, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x189880, 0x0) read$FUSE(r2, &(0x7f0000000440)={0x2020}, 0x2020) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x1027, &(0x7f00000000c0)=ANY=[], 0x1, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) ioctl$FIONREAD(r3, 0x7041, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x2c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_REVISION={0xffffffffffffffa8}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net,port\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004820}, 0xd2953e173ce2468a) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @broadcast}, 0x2, {0x2, 0x4e21, @empty}}) 11m35.406219721s ago: executing program 4 (id=544): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002500), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000140)={0x14, r1, 0x1, 0x70bd2a, 0x25dfdc00, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2c048010) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20080) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001240)={0x0, 0xfffffffffffffffe, 0x73, 0x9, @buffer={0x0, 0x96, &(0x7f0000000040)=""/150}, &(0x7f0000000180)="1fe109f5183ca9fcc4960047019e6165c8fba3e960eebc4bf69c893c96ed5484981398f490563058cccb04e8fa95a693a7d2d21ebb17d172454627c47efa334e92f72b0699aa9d36d9f64fef0044e291ba39fc42ae3ccfd83e4c011fbcaf511349e4cea879b2536218ba9688a2f2f4069bd500", &(0x7f0000000200)=""/4096, 0x5, 0x10, 0x2, &(0x7f0000001200)}) 11m33.308124017s ago: executing program 4 (id=547): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x14, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000040)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001900599c6d0e000091d028ef8020"], 0xfe33) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000005c0)={0x0, 0x0, "17df1135992bc5e0cb2883c6323012f0de335dd28dadf0ff01425249a6bd9392569bb3a29057d995ec8a2060ffb3c3450736cdfb108cfa96aeba7844fce8aa8076d85d8b1589f21b01e5ae84f577b8306d92946ec93024aaff33ac608126be60c93e1b47dae5099b92fc43f05e511715d344fbcbcb2fbbe916ff9b1858d2c59041e76cba707189ea25d15df344292db208897e8314c785b236e0ec7158cf1390f72a58b467e04b8029e896c024016e4a027193599da681c4c6edd1c25b46191efd6c47f93f77daae18d39667caa6bf444b52d87372247637aa1fc21d3ad27a40d3fa2b320b6bc5355af46c1ba01490265c18a43dd8a873a7bfcf3a2648767ed2", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f00000015c0)={{r4, 0x8001, 0x5, 0x2, 0x859, 0x4, 0x7, 0x0, 0x3, 0x131, 0x897, 0x0, 0x3, 0x2, 0x9}, 0x20, [0x0, 0x0, 0x0, 0x0]}) ioctl$FE_GET_PROPERTY(r3, 0x80106f53, &(0x7f0000000040)={0x5, &(0x7f0000000440)=[{0x1a, '\x00', @buffer={"5757577095287f4cea7575980d0a10352180d68cf337ecf338c59363fdc85986", 0x20}, 0xffff}, {0x42, '\x00', @data=0x8, 0xffff}, {0x37, '\x00', @st={0x4, [{0x2}, {0x0, @uvalue=0x6}, {0x0, @uvalue=0x400}, {0x3, @uvalue=0xfffffffffffffffc}]}, 0x80000}, {0x11, '\x00', @buffer={"7d92c52655500169a9cb11aa8bf9ebbf5c0849c22e48e0f51760516445c41b54", 0x20}, 0x1}, {0x21, '\x00', @st={0x4, [{0x2, @svalue=0x80000001}, {0x1, @uvalue=0x2}, {0x3, @uvalue=0x7a}, {0x1, @uvalue=0x9}]}, 0x4}]}) 11m32.348788526s ago: executing program 33 (id=547): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x14, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000040)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001900599c6d0e000091d028ef8020"], 0xfe33) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000005c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f00000015c0)={{r4, 0x8001, 0x5, 0x2, 0x859, 0x4, 0x7, 0x0, 0x3, 0x131, 0x897, 0x0, 0x3, 0x2, 0x9}, 0x20, [0x0, 0x0, 0x0, 0x0]}) ioctl$FE_GET_PROPERTY(r3, 0x80106f53, &(0x7f0000000040)={0x5, &(0x7f0000000440)=[{0x1a, '\x00', @buffer={"5757577095287f4cea7575980d0a10352180d68cf337ecf338c59363fdc85986", 0x20}, 0xffff}, {0x42, '\x00', @data=0x8, 0xffff}, {0x37, '\x00', @st={0x4, [{0x2}, {0x0, @uvalue=0x6}, {0x0, @uvalue=0x400}, {0x3, @uvalue=0xfffffffffffffffc}]}, 0x80000}, {0x11, '\x00', @buffer={"7d92c52655500169a9cb11aa8bf9ebbf5c0849c22e48e0f51760516445c41b54", 0x20}, 0x1}, {0x21, '\x00', @st={0x4, [{0x2, @svalue=0x80000001}, {0x1, @uvalue=0x2}, {0x3, @uvalue=0x7a}, {0x1, @uvalue=0x9}]}, 0x4}]}) 1m34.464363079s ago: executing program 6 (id=3011): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs, 0xe) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f0000000500)={0xf}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x2b, 0x0, 0xf9, 0x1, 0x4a, @loopback, @private2, 0x8, 0x40, 0x1, 0x3}}) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000000c0)=0x40000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b0400000004"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x2c020400) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r6}, 0x68) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000340), 0x1a1002, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r7, 0x80044dfe, &(0x7f0000000380)) syz_open_dev$media(&(0x7f0000000040), 0x5, 0x141800) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r5, 0x8983, &(0x7f0000000000)={0x1, 'sit0\x00', {}, 0x2}) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c80001800378013000300717472283414d6bba919736d342900008defbee02828e96c5b2508d8411668faa935b28f7bf9ea3019fc550cc77e053ffd5a7d1df6a005"], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) 1m33.487726294s ago: executing program 6 (id=3023): openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsmount(0xffffffffffffffff, 0x1, 0x1) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r3}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r4, 0x80085665, &(0x7f00000000c0)={0x1, 0xff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r3) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x2d03629c, 0x0, 0x5, 0x0, 0xfffffe0000000001, 0x10000000, 0xe9}, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x4241, 0x0) r5 = dup3(r2, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) socket(0x1, 0x1, 0x0) unshare(0x8040480) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ppoll(&(0x7f00000001c0)=[{r8, 0x400}], 0x1, 0x0, 0x0, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c670400755156701db1", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010700000000000000000a00000008000300", @ANYRES32, @ANYBLOB="cb6d920ca68d09252d7da907f6698c50300926589c7a7cd7a46b12da1a8d23cae228219ee5c14876169e2d9133bc58236c1594e5d30ccbb73386c0816e3444408c925d947101b7c08e7cdcdf88e4d8132cbf59cdec5067"], 0x1c}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f00000001c0)={0x200f}) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000440)={0x9d0000, 0x200, 0x8, r5, 0x0, 0x0}) 1m32.24877842s ago: executing program 5 (id=3034): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x88800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0x40000, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0xfffffffffffffffb, 0x6, 0x0, 0x4, 0x10003, 0x0, 0x400200cc4, 0x9, 0x82, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x1, 0xb9, 0x8d], 0xeeee8000, 0x2011c0}) 1m32.042867165s ago: executing program 5 (id=3036): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0xff, 0x0, 0x8, 0x3, 0xa, 0xb9, 0x1, 0x12, 0x5, 0xcc}, {0x804, 0x2, 0x1, 0x45, 0x7, 0x0, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x0, 0x3, 0x38, 0x3, 0x84, 0x7, 0x3, 0x50, 0x8, 0x1, 0x4, 0x9, 0x24ab}], 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x8, 0x61, 0x200002000001, 0x1, 0x2004c8, 0x0, 0x0, 0x36ae, 0x5, 0x6, 0x3, 0x400000000, 0x6, 0xf73c], 0x80a0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m31.94443783s ago: executing program 6 (id=3037): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x8, 0x920) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r4, 0x40045731, &(0x7f0000000340)=0x800) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x8) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000480), &(0x7f00000004c0)=0x4) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="0400"}) close(r1) sched_setattr(0x0, &(0x7f0000000740)={0x38, 0x0, 0x35, 0x10000, 0x1, 0x4, 0x0, 0x7, 0x8001, 0xd2c}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x4bff, &(0x7f0000000040)=0x0) r8 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) r9 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000700), 0x800, 0x0) io_submit(r7, 0x6, &(0x7f0000000b00)=[0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x1, r5, &(0x7f0000000380)="bf2a3aac6252a29072466b9b1538640d075c8ecad360f04d6d272f9c5e9cceed5ef1c93ec9b4f6842127cc29701ee576719e82459089d6ec68ba136b9ac37dc0949f48a936f1c2087e86ec2c50", 0x4d, 0x7a, 0x0, 0x3, r2}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x2, 0xcf2f, r8, &(0x7f0000000540)="42e9dabce9a5d3fd889bc8e52531b3195391dfe0e63326bd6fa089af700271d1d9342c5ae0b191", 0x27, 0x8, 0x0, 0x3, r0}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x7, 0xfff8, 0xffffffffffffffff, &(0x7f00000005c0)="32322c7d1228cc879bb4b60c4292710a1fe08c30a6dffc07742d8831168f38d9ba7393018b563fba967efad611e90ee4e0ded95f7f9cbc80eae1fed71771eda2d78eb211a7b31f8bea27cb8fd9304ee58d869122a0d834ebba65630cca5ab528f69947db84d6caa20df280cbda05d95fc6a15831ab36fbe802cfbbec37e7cc013200b43f3d6e25e40d86bff1caec8769c00de6159277de1f0df3165f8cd79c978c24751ff90a363cb07cc18cdc825314bf4a3d1dd16e48af356c4edcc5652483ec79ccc221153dc064ef66b087f85120aaff48bbdc85b7a8beb4", 0xda, 0xbae0, 0x0, 0x2, r0}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x8, 0x81, r9, &(0x7f0000000900)="066a557a45487495bb4b5a307b72fb933f3a0593b9b3706b8a220531cdb1a7acbfb2c23de63ed25ecb2e45d4f74b2e03fb9bdabf1a967125f2fb8a05ede79b046d7d56b1ff7c8b2746bf97fe51eccada0ef19c646d0e0e2dc7d29ccb1d68985dce08c03dd91bffeb4cde61880ec87879935049436145617e6a61359565215e7da92e379c4838184d45cbb3afe1e6af3f3713b6061ea9b402f068a75ed6a80de4adfe69c1fc435b956aa9b981", 0xac, 0x93}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x1, 0x40, r3, &(0x7f0000000a00)="d7883a79919a67b2570b3e9dabe30cb45afea2f2bbff695adcc52bcdd3f8ed4d262101396ee3d9b810dba7c40051c316842d87f027550c039ae099e00d8d84537f79c244fd1b482044922b9c089498d95375a27e80eeea128543b03c766492e89dc66bd496b29b5da349af878cf1b9f5336d395b3792e993a29bb0b1e7154971f133a48121197673059848b089dd7d8fb3f4ce5a4bb55d2f5c4c19117cf19db4ed2acf", 0xa3, 0x1, 0x0, 0x2}]) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r11 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r11, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r11, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@delchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x10, 0xf}, {0x0, 0xc}, {0x4, 0x1}}}, 0x24}}, 0x0) modify_ldt$read_default(0x2, 0xffffffffffffffff, 0x0) r12 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r12, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 1m31.78865664s ago: executing program 5 (id=3038): bind$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000140)='v', 0x1, 0x20000880, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/14, 0xe}, 0x8}], 0x1, 0x40012121, 0x0) 1m31.089604336s ago: executing program 5 (id=3039): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="8102000000"], 0x34}}, 0x0) 1m27.662309129s ago: executing program 5 (id=3046): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x14, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa08000900"], 0x48}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x1500) 1m27.215408569s ago: executing program 5 (id=3047): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f00000000c0)={'\x00@\x00', 0x0, 0x4, 0x3, 0x0, 0x0, "f759ca34000400", '\x00', "03000100", '\x00', ["8bada940edffea0a0800", "c211513e897c3aa100", '\x00', "00000000000000000100"]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000340)=0x1, r4, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f00000003c0)={0x7, 0x8, 0xfa00, {r4, 0x7}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004041) r5 = io_uring_setup(0x1978, &(0x7f0000000040)={0x0, 0xca72, 0x1cc90, 0x0, 0x20002fb}) r6 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x1}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) r8 = socket$inet(0x2, 0x80001, 0x84) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x3, {0x100000001, 0x3, 0x0, '\x00', {0x9ca7a16b958dcf33, 0xf602, 0x6, 0xfffffff3, 0x0, 0x0, 0x2000, '\x00', 0xfffffffffffffffe, 0x0, 0x1ff, 0x0, {}, {0x5, 0x2}, {0x7fffffffffffffff, 0x4}, {0x5, 0xffffffff}, 0x60, 0x0, 0x7fff}}}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340"], 0xec}}, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x0, 0x0, 0x34325842, 0x9, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x400000}, {0x6c}], 0x0, 0x0, 0x16, 0x1, 0x1}}) syz_usb_connect$uac2(0x5, 0x8b, &(0x7f0000002b00)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x3, 0x1, 0x8, 0x40, 0x9b, {0x8, 0xb, 0x1, 0x2, 0x1, 0x2, 0x20, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x8, 0xf4, 0x9, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x9, 0x80, 0x7f, {0x8, 0x25, 0x1, 0x82, 0x30, 0x3c, 0x356}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x17, 0x7d, 0x2, 0x3, 0x8, 0x4, 0x6}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xa, 0x7f, 0x3, {0x8, 0x25, 0x1, 0x0, 0x0, 0x29, 0x6}}}}}}}}]}}, &(0x7f0000003100)={0x0, 0x0, 0x11, &(0x7f0000002c80)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x0, 0xf00, 0x5}]}}) 1m26.643220031s ago: executing program 2 (id=3050): ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x10b841, 0x0) pwritev2(r0, &(0x7f0000000600)=[{&(0x7f0000000580)}], 0x1, 0x1, 0xfffffffb, 0x1a) 1m24.653514728s ago: executing program 2 (id=3051): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000080)={0xffffffffffffffff, 0x4}) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0x0, &(0x7f0000000080), 0x80080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x72, {"b8010000000f01d966ba2000b047eeb9800000c00f3235000400000f30410f01f80fc77dd1c744240200000000c744240600000000c482f2f7500048b83c000000000000000f23d8420f210035000000e00f23f8e999b90000c48285bce4f3dfcd"}}], 0x72}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000002c0)={[{0x5, 0x4, 0x5, 0x5, 0x2, 0x12, 0x7, 0xd, 0xb9, 0x3, 0xe, 0x8, 0x201}, {0x804, 0x1, 0x4, 0x45, 0x7, 0xfb, 0x2, 0x3, 0x1f, 0x3, 0x4, 0x7b, 0x20e}, {0x6, 0x15, 0x18, 0x34, 0x48, 0xfd, 0x3, 0x84, 0x0, 0x4, 0x4, 0x7, 0x1}], 0xfaffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000500)={[0x7f, 0x88, 0x0, 0x40, 0x0, 0x7f, 0x2004cb, 0x1, 0xfffffd, 0x20000000000068ff, 0x5, 0x745, 0x8, 0x3, 0x0, 0x9], 0x1, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m24.564901905s ago: executing program 6 (id=3052): openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) close(0x3) 1m21.575100052s ago: executing program 2 (id=3054): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x34, "2a161d2d71db37f20a8f1597f02515fcead4e1f5cad54790db5c4e09db1ac8225b997fc21693c0942f0686928c388bc6f6318ac4"}}) 1m18.839904303s ago: executing program 2 (id=3057): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x14, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa08000900"], 0x48}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x1500) 1m18.18741965s ago: executing program 2 (id=3059): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 1m17.932871539s ago: executing program 6 (id=3061): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, 0x0}}], 0x1, 0x8080) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000340)={0x0, 0x2, 0x1, [0x8]}, 0xa) 1m17.732684263s ago: executing program 2 (id=3062): r0 = socket(0xa, 0x3, 0x87) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0x5, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x1f) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) r4 = syz_open_dev$ptys(0xc, 0x3, 0x1) dup3(r4, r3, 0x80000) ioctl$FIONREAD(r4, 0x541b, 0x0) add_key$user(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000082800000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) request_key(&(0x7f0000001540)='asymmetric\x00', &(0x7f0000001580)={'syz', 0x2}, &(0x7f00000015c0)='syz', 0x0) keyctl$set_timeout(0xf, 0x0, 0x1ff) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000280)={0xb16b}, 0x8) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8916, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x5}) socket$nl_route(0x10, 0x3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8300, 0x20) 1m17.530763055s ago: executing program 6 (id=3064): openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x80085665, &(0x7f00000000c0)={0x1, 0xff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r2) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x2d03629c, 0x0, 0x5, 0x0, 0xfffffe0000000001, 0x10000000, 0xe9}, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x4241, 0x0) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) socket(0x1, 0x1, 0x0) unshare(0x8040480) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ppoll(&(0x7f00000001c0)=[{r7, 0x400}], 0x1, 0x0, 0x0, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c670400755156701db1", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010700000000000000000a00000008000300", @ANYRES32, @ANYBLOB="cb6d920ca68d09252d7da907f6698c50300926589c7a7cd7a46b12da1a8d23cae228219ee5c14876169e2d9133bc58236c1594e5d30ccbb73386c0816e3444408c925d947101b7c08e7cdcdf88e4d8132cbf59cdec5067"], 0x1c}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000001c0)={0x200f}) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000440)={0x9d0000, 0x200, 0x8, r4, 0x0, 0x0}) 1m7.486150393s ago: executing program 34 (id=3047): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f00000000c0)={'\x00@\x00', 0x0, 0x4, 0x3, 0x0, 0x0, "f759ca34000400", '\x00', "03000100", '\x00', ["8bada940edffea0a0800", "c211513e897c3aa100", '\x00', "00000000000000000100"]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000340)=0x1, r4, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f00000003c0)={0x7, 0x8, 0xfa00, {r4, 0x7}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004041) r5 = io_uring_setup(0x1978, &(0x7f0000000040)={0x0, 0xca72, 0x1cc90, 0x0, 0x20002fb}) r6 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x1}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) r8 = socket$inet(0x2, 0x80001, 0x84) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x3, {0x100000001, 0x3, 0x0, '\x00', {0x9ca7a16b958dcf33, 0xf602, 0x6, 0xfffffff3, 0x0, 0x0, 0x2000, '\x00', 0xfffffffffffffffe, 0x0, 0x1ff, 0x0, {}, {0x5, 0x2}, {0x7fffffffffffffff, 0x4}, {0x5, 0xffffffff}, 0x60, 0x0, 0x7fff}}}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340"], 0xec}}, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x0, 0x0, 0x34325842, 0x9, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x400000}, {0x6c}], 0x0, 0x0, 0x16, 0x1, 0x1}}) syz_usb_connect$uac2(0x5, 0x8b, &(0x7f0000002b00)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x3, 0x1, 0x8, 0x40, 0x9b, {0x8, 0xb, 0x1, 0x2, 0x1, 0x2, 0x20, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x8, 0xf4, 0x9, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x9, 0x80, 0x7f, {0x8, 0x25, 0x1, 0x82, 0x30, 0x3c, 0x356}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x17, 0x7d, 0x2, 0x3, 0x8, 0x4, 0x6}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xa, 0x7f, 0x3, {0x8, 0x25, 0x1, 0x0, 0x0, 0x29, 0x6}}}}}}}}]}}, &(0x7f0000003100)={0x0, 0x0, 0x11, &(0x7f0000002c80)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x0, 0xf00, 0x5}]}}) 1m1.97700303s ago: executing program 35 (id=3062): r0 = socket(0xa, 0x3, 0x87) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0x5, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x1f) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) r4 = syz_open_dev$ptys(0xc, 0x3, 0x1) dup3(r4, r3, 0x80000) ioctl$FIONREAD(r4, 0x541b, 0x0) add_key$user(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000082800000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) request_key(&(0x7f0000001540)='asymmetric\x00', &(0x7f0000001580)={'syz', 0x2}, &(0x7f00000015c0)='syz', 0x0) keyctl$set_timeout(0xf, 0x0, 0x1ff) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000280)={0xb16b}, 0x8) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8916, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x5}) socket$nl_route(0x10, 0x3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8300, 0x20) 1m1.705332526s ago: executing program 36 (id=3064): openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x80085665, &(0x7f00000000c0)={0x1, 0xff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r2) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x2d03629c, 0x0, 0x5, 0x0, 0xfffffe0000000001, 0x10000000, 0xe9}, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x4241, 0x0) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) socket(0x1, 0x1, 0x0) unshare(0x8040480) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ppoll(&(0x7f00000001c0)=[{r7, 0x400}], 0x1, 0x0, 0x0, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c670400755156701db1", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010700000000000000000a00000008000300", @ANYRES32, @ANYBLOB="cb6d920ca68d09252d7da907f6698c50300926589c7a7cd7a46b12da1a8d23cae228219ee5c14876169e2d9133bc58236c1594e5d30ccbb73386c0816e3444408c925d947101b7c08e7cdcdf88e4d8132cbf59cdec5067"], 0x1c}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000001c0)={0x200f}) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000440)={0x9d0000, 0x200, 0x8, r4, 0x0, 0x0}) 27.288617785s ago: executing program 3 (id=3089): r0 = socket(0xa, 0x3, 0x87) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0x5, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x1f) syz_open_dev$ttys(0xc, 0x2, 0x1) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$FIONREAD(r3, 0x541b, 0x0) add_key$user(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000082800000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc1}, &(0x7f0000000180)={0x0, "34fa8f263bcc16a6f423a1b5cdd0a77ab84e2c3504c9405a14cbff940f2aa75db1473267ae0574391894a3836a00b6f9fa4eb2678a8cb1010904425fe63df6ba", 0x32}, 0x48, 0xfffffffffffffffe) request_key(&(0x7f0000001540)='asymmetric\x00', &(0x7f0000001580)={'syz', 0x2}, &(0x7f00000015c0)='syz', r5) keyctl$set_timeout(0xf, r5, 0x1ff) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000280)={0xb16b}, 0x8) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8916, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x5}) socket$nl_route(0x10, 0x3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8300, 0x20) 23.281619447s ago: executing program 1 (id=3091): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x24, 0x2c, 0xf3f, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 20.892203088s ago: executing program 3 (id=3092): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_open_procfs(0x0, &(0x7f0000000680)='fdinfo\x00') r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000300)='mand\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x1, @remote, 0x7}, 0x1c) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a66000/0x2000)=nil, 0x2000, 0x14) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100040, 0x1b35, 0x8, 0x2, 0x2, 0x0, 0x0, 0x1, 0x1}) r8 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r8, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000280)=[{0x12, '\x00', @st={0x4, [{0x3, @uvalue=0xfffffffe00000}, {0x2, @uvalue=0x1}, {0x1}, {0x1, @svalue=0x2}]}, 0x3}, {0x2f, '\x00', @buffer={"156074847dff3ec92fd15c5a5ab6e820b94f2a1ade3e311b88351c3481518fff", 0x20}, 0x9}, {0x15, '\x00', @st={0x4, [{0x3, @svalue=0x9}, {0x0, @uvalue=0xffffffffffffffff}, {0x3, @uvalue=0x3}, {0x1, @svalue=0x4f}]}, 0xe6}]}) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x348, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x6}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, 0x0, 0x4000840) 20.326648386s ago: executing program 1 (id=3093): socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x44000000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000040)='./file0\x00', 0x400) readlink(0x0, 0x0, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000080)) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 18.615101697s ago: executing program 1 (id=3094): openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000240)={0x101402, 0x85, 0x20}, 0x18) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0002000001, 0xfa11, 0x3}, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000140)={'team0\x00', {0x2, 0x0, @local}}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30", 0x2}], 0x1) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x4, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x8}]}}]}, 0x44}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) r5 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) lseek(r5, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000180)={0x8}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000180)='dctcp', 0x5) getsockopt$inet_tcp_buf(r6, 0x6, 0x1a, 0x0, &(0x7f0000000000)) 13.416839911s ago: executing program 1 (id=3095): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x2040, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xd, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000cc0)="e1", 0x1}], 0x1) 13.325395181s ago: executing program 3 (id=3096): openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000240)={0x101402, 0x85, 0x20}, 0x18) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0002000001, 0xfa11, 0x3}, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000140)={'team0\x00', {0x2, 0x0, @local}}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30", 0x2}], 0x1) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x4, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x8}]}}]}, 0x44}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) r6 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) lseek(r6, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000180)={0x8}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000180)='dctcp', 0x5) getsockopt$inet_tcp_buf(r7, 0x6, 0x1a, 0x0, &(0x7f0000000000)) 12.806033949s ago: executing program 1 (id=3097): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 5.76537726s ago: executing program 1 (id=3098): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) mount_setattr(0xffffffffffffffff, 0x0, 0x1000, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000001b180)={0x2020}, 0x2020) r4 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r4, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r4, 0x0) ftruncate(r4, 0x3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000640)={0x0}) 4.280257132s ago: executing program 3 (id=3099): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat2(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa000, 0x4, 0x5}, 0x18) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e1f}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = getpgrp(0xffffffffffffffff) sched_setattr(r2, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x6, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$dsp(0xffffffffffffff9c, &(0x7f0000000800), 0x400, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2663}, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRESHEX, @ANYBLOB="18"], 0x50) r5 = syz_open_dev$radio(&(0x7f00000000c0), 0x2, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f00000001c0)={0x0, @bt={0x6, 0x3, 0x1, 0x0, 0xfffffffffffffff9, 0xfffffffa, 0x5, 0x6, 0x0, 0x92b, 0x7fff, 0xfffffc00, 0xfffff42e, 0x93, 0x2, 0x10, {0xfffffffd, 0x81}, 0x9, 0x2}}) syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), 0xffffffffffffffff) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 2.594225764s ago: executing program 3 (id=3100): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat2(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa000, 0x4, 0x5}, 0x18) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e1f}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = getpgrp(0xffffffffffffffff) sched_setattr(r2, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x6, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$dsp(0xffffffffffffff9c, &(0x7f0000000800), 0x400, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2663}, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRESHEX, @ANYBLOB="18"], 0x50) r6 = syz_open_dev$radio(&(0x7f00000000c0), 0x2, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f00000001c0)={0x0, @bt={0x6, 0x3, 0x1, 0x0, 0xfffffffffffffff9, 0xfffffffa, 0x5, 0x6, 0x0, 0x92b, 0x7fff, 0xfffffc00, 0xfffff42e, 0x93, 0x2, 0x10, {0xfffffffd, 0x81}, 0x9, 0x2}}) syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), 0xffffffffffffffff) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 0s ago: executing program 3 (id=3101): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020}, 0x2020) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0], 0x40}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2b) r5 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d701"], 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000}, 0x94) syz_usb_control_io$uac2(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="40084f0000003a45444db441ba8f87f2de0e4872fc8bf45a40f05ee2dd90695e964d4c32c89580d16e26665c3cb71de602a74a933006000000000000009e550e6cce756bd0fcb4d76e82557a2a3105786e85061901"], 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="200161000000627ef1902ebfb2621bef4473a0c6e742e3d7c1a18625c9a1488ee33453c98223f55b9b15befe76ec06ba7847f6090192f8b0525be72bfc6827f34a3d0ce68bd2dc9d7fa19d72545b396850603090d93ddb251154d521d35b8dc0255500000000006c21e54af4484730622c1b8d05e4aa70ed5093ea73f1c921d725f752004f6068d4384fe9baeda6c331f0b66051619e1ca28c9c2db6ec249a74234c6bcca949575a74a5242f433331a099f4347f2ee2fee3a35c95acbcaf0606171df70a0980d44c284c0d61d691ffe245891448f3f4441386cfdea1879e0f208addc69330cd225de732345a203ee301c578030f90cc"], &(0x7f0000000480)={0x20, 0x3, 0x1, 0x8}}) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000140)={0x1, 0x7, 0x5, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x4e61, 0x2, @loopback, 0x7fffffff}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) kernel console output (not intermixed with test programs): [ 729.760846][T16198] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2374'. [ 730.019813][ T5909] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 730.219443][ T5909] usb 7-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 730.229593][ T5909] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.238118][ T5909] usb 7-1: Product: syz [ 730.371700][ T5909] usb 7-1: Manufacturer: syz [ 730.371726][ T5909] usb 7-1: SerialNumber: syz [ 730.390517][ T5909] usb 7-1: config 0 descriptor?? [ 730.397164][ T5909] hub 7-1:0.0: bad descriptor, ignoring hub [ 730.397195][ T5909] hub 7-1:0.0: probe with driver hub failed with error -5 [ 730.649692][ T5909] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 730.662315][ T5909] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 730.674620][ T5909] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 730.684715][ T5909] usb 7-1: media controller created [ 730.745683][ T5909] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 730.804337][ T5909] DVB: Unable to find symbol dib7000p_attach() [ 730.813673][ T5909] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 731.434497][ T5909] rc_core: IR keymap rc-dib0700-rc5 not found [ 731.434516][ T5909] Registered IR keymap rc-empty [ 731.434771][ T5909] dvb-usb: could not initialize remote control. [ 731.434782][ T5909] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 731.660620][T16198] i2c i2c-1: Invalid block size returned: 58 [ 732.801493][ T5926] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 733.035834][ T5908] usb 7-1: USB disconnect, device number 72 [ 733.050267][ T5926] usb 3-1: Using ep0 maxpacket: 8 [ 733.079816][ T5926] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 733.091535][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.120572][ T5926] usb 3-1: Product: syz [ 733.124786][ T5926] usb 3-1: Manufacturer: syz [ 733.129383][ T5926] usb 3-1: SerialNumber: syz [ 733.277610][ T5908] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 733.364814][ T5926] usb 3-1: config 0 descriptor?? [ 733.581615][ T5926] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 734.050341][ T5908] usb 7-1: new full-speed USB device number 73 using dummy_hcd [ 734.316353][ T5908] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 734.326767][ T5908] usb 7-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 734.326799][ T5908] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.326820][ T5908] usb 7-1: Product: syz [ 734.326837][ T5908] usb 7-1: Manufacturer: syz [ 734.326853][ T5908] usb 7-1: SerialNumber: syz [ 736.534343][T16275] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2392'. [ 736.959582][ T5908] usb 7-1: USB disconnect, device number 73 [ 737.200779][ T5926] gspca_sonixj: reg_w1 err -110 [ 737.247617][T16279] fuse: Unknown parameter '0xffffffffffffffff' [ 737.259974][ T5926] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 737.282571][T16279] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2393'. [ 737.513174][ T5894] usb 3-1: USB disconnect, device number 80 [ 737.654133][ T29] audit: type=1326 audit(1775693721.543:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16282 comm="syz.5.2394" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef2f59c819 code=0x0 [ 737.729844][ T5908] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 737.890004][ T5894] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 738.050226][ T5894] usb 3-1: Using ep0 maxpacket: 32 [ 738.067866][ T5894] usb 3-1: unable to get BOS descriptor or descriptor too short [ 738.077933][ T5894] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 738.105306][ T5894] usb 3-1: can't read configurations, error -61 [ 738.156637][ T5908] usb 7-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 738.166087][ T5908] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.174136][ T5908] usb 7-1: Product: syz [ 738.178630][ T5908] usb 7-1: Manufacturer: syz [ 738.188319][ T5908] usb 7-1: SerialNumber: syz [ 738.225484][ T5908] usb 7-1: config 0 descriptor?? [ 738.234869][ T5908] hub 7-1:0.0: bad descriptor, ignoring hub [ 738.242199][ T5894] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 738.249909][ T5908] hub 7-1:0.0: probe with driver hub failed with error -5 [ 738.434375][ T5908] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 738.447650][ T5908] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 738.465774][ T5894] usb 3-1: Using ep0 maxpacket: 32 [ 738.487499][ T5908] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 738.496186][ T5894] usb 3-1: unable to get BOS descriptor or descriptor too short [ 738.507243][ T5894] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 738.515099][ T5894] usb 3-1: can't read configurations, error -61 [ 738.558143][ T5908] usb 7-1: media controller created [ 738.576835][ T5894] usb usb3-port1: attempt power cycle [ 738.595163][ T5908] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 738.669277][ T5908] DVB: Unable to find symbol dib7000p_attach() [ 738.683129][ T5908] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 738.759853][ T5908] rc_core: IR keymap rc-dib0700-rc5 not found [ 738.766064][ T5908] Registered IR keymap rc-empty [ 738.771572][ T5908] dvb-usb: could not initialize remote control. [ 738.779000][ T5908] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 739.029882][ T5894] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 739.050257][ T5894] usb 3-1: Using ep0 maxpacket: 32 [ 739.057389][ T5894] usb 3-1: unable to get BOS descriptor or descriptor too short [ 739.076874][ T5894] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 739.085659][ T5894] usb 3-1: can't read configurations, error -61 [ 739.219873][ T5894] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 739.250265][ T5894] usb 3-1: Using ep0 maxpacket: 32 [ 739.262044][ T5894] usb 3-1: unable to get BOS descriptor or descriptor too short [ 739.291267][ T5894] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 739.300021][ T5894] usb 3-1: can't read configurations, error -61 [ 739.321475][ T5894] usb usb3-port1: unable to enumerate USB device [ 739.367828][T16278] i2c i2c-1: Invalid block size returned: 58 [ 739.968637][T16316] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2402'. [ 740.106133][T16318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 740.122851][T16318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 740.385555][T16322] syzkaller0: entered promiscuous mode [ 740.391800][T16322] syzkaller0: entered allmulticast mode [ 740.458468][T16322] tipc: Started in network mode [ 740.470441][T16322] tipc: Node identity 62fff246eb61, cluster identity 4711 [ 740.477821][T16322] tipc: Enabled bearer , priority 0 [ 740.504833][T16321] tipc: Resetting bearer [ 740.538473][T16321] tipc: Disabling bearer [ 740.735545][ T5894] usb 7-1: USB disconnect, device number 74 [ 740.806928][ T5894] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 742.012146][ T5894] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 742.099959][ T796] usb 6-1: new full-speed USB device number 58 using dummy_hcd [ 742.179845][ T5894] usb 2-1: Using ep0 maxpacket: 8 [ 742.194111][ T5894] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 742.203885][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.222742][ T5894] usb 2-1: Product: syz [ 742.234842][ T5894] usb 2-1: Manufacturer: syz [ 742.250909][ T5894] usb 2-1: SerialNumber: syz [ 742.262274][ T796] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 742.267056][ T5894] usb 2-1: config 0 descriptor?? [ 742.284855][T16364] bond5: Removing last ns target with arp_interval on [ 742.298556][ T796] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 742.314351][ T796] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 742.329132][T16364] netlink: 'syz.6.2418': attribute type 4 has an invalid length. [ 742.344019][T16364] netlink: 'syz.6.2418': attribute type 4 has an invalid length. [ 742.378667][ T796] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.418970][ T796] usb 6-1: config 0 descriptor?? [ 742.433972][ T796] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 742.447293][ T796] dvb-usb: bulk message failed: -22 (3/0) [ 742.518482][ T796] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 742.527915][ T796] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 742.535644][ T796] usb 6-1: media controller created [ 742.553901][T16371] tipc: Started in network mode [ 742.558828][T16371] tipc: Node identity 8e579543f228, cluster identity 4711 [ 742.566129][ T5894] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 742.584255][T16371] tipc: Enabled bearer , priority 0 [ 742.635829][T16358] dvb-usb: bulk message failed: -22 (2/0) [ 742.641772][T16358] dvb-usb: bulk message failed: -22 (4/0) [ 742.708792][ T796] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 742.746314][ T796] dvb-usb: bulk message failed: -22 (6/0) [ 742.765001][ T796] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 742.801646][T16371] syzkaller0: entered promiscuous mode [ 742.810672][ T796] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input57 [ 742.816059][T16371] syzkaller0: entered allmulticast mode [ 742.886576][ T796] dvb-usb: schedule remote query interval to 150 msecs. [ 742.900279][ T796] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 742.949184][ T796] usb 6-1: USB disconnect, device number 58 [ 743.053814][T16378] fuse: Unknown parameter '0xffffffffffffffff' [ 743.069791][T16378] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2421'. [ 743.140786][ T796] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 743.204270][T16367] tipc: Resetting bearer [ 743.294544][T16367] tipc: Disabling bearer [ 743.329841][T11789] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 743.376294][T16380] fuse: Invalid gid '00000000000000000000004' [ 743.486726][T11789] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 743.496771][T11789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.506159][T11789] usb 3-1: Product: syz [ 743.556679][T11789] usb 3-1: Manufacturer: syz [ 743.576935][T11789] usb 3-1: SerialNumber: syz [ 743.596417][ T5894] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 743.616730][ T5894] usb 2-1: USB disconnect, device number 51 [ 743.647365][T11789] usb 3-1: config 0 descriptor?? [ 743.672421][T11789] hub 3-1:0.0: bad descriptor, ignoring hub [ 743.677435][T16389] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2426'. [ 743.712350][T11789] hub 3-1:0.0: probe with driver hub failed with error -5 [ 743.782406][T11941] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 743.868322][T11789] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 743.880551][T11789] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 743.895478][T11789] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 743.920612][T11789] usb 3-1: media controller created [ 743.941225][T11941] usb 6-1: Using ep0 maxpacket: 16 [ 743.949873][T11941] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 744.067036][T11941] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 744.081195][T11941] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.095239][T11789] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 744.244759][T11941] usb 6-1: Product: syz [ 744.248974][T11941] usb 6-1: Manufacturer: syz [ 744.281124][T11941] usb 6-1: SerialNumber: syz [ 744.314832][T11941] usb 6-1: config 0 descriptor?? [ 744.374122][T11941] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 744.419233][T11941] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 744.427628][T11789] DVB: Unable to find symbol dib7000p_attach() [ 744.490097][T11789] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 744.798506][T11789] rc_core: IR keymap rc-dib0700-rc5 not found [ 744.867379][T11789] Registered IR keymap rc-empty [ 744.878137][T11789] dvb-usb: could not initialize remote control. [ 744.903474][T11789] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 744.996783][T11941] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 745.043645][ T5926] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 745.241449][ T5926] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 745.250759][ T5926] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 745.261187][ T5926] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 745.357437][ T5926] usb 4-1: config 0 interface 0 has no altsetting 0 [ 745.373507][ T5926] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 745.383566][ T5926] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 745.395160][ T5926] usb 4-1: config 0 interface 0 has no altsetting 0 [ 745.408518][ T5926] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 745.417780][T11941] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 745.418779][ T5926] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 745.485805][T11941] em28xx 6-1:0.0: board has no eeprom [ 745.512697][ T5926] usb 4-1: config 0 interface 0 has no altsetting 0 [ 745.533983][ T5926] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 745.553441][ T5926] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 745.584803][ T5926] usb 4-1: config 0 interface 0 has no altsetting 0 [ 745.606427][ T5926] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 745.617618][ T5926] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 745.637867][ T5926] usb 4-1: config 0 interface 0 has no altsetting 0 [ 745.662524][ T5926] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 745.675010][ T5926] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 745.695563][ T5926] usb 4-1: config 0 interface 0 has no altsetting 0 [ 745.708237][ T5926] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 745.717577][ T5926] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 745.737319][ T5926] usb 4-1: config 0 interface 0 has no altsetting 0 [ 745.753297][ T5926] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 745.768459][ T5926] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 745.815910][ T5926] usb 4-1: config 0 interface 0 has no altsetting 0 [ 745.828764][ T5926] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 745.838482][ T5926] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 745.850783][ T5926] usb 4-1: Product: syz [ 745.858343][ T5926] usb 4-1: Manufacturer: syz [ 745.865436][ T5926] usb 4-1: SerialNumber: syz [ 745.877591][T16415] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2433'. [ 745.888355][ T5926] usb 4-1: config 0 descriptor?? [ 745.908743][ T5926] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 746.136723][ T5887] usb 4-1: USB disconnect, device number 110 [ 746.147534][ T5887] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 746.404776][T16438] loop6: detected capacity change from 0 to 2640 [ 746.412961][T16438] Buffer I/O error on dev loop6, logical block 0, async page read [ 746.421362][T16438] Buffer I/O error on dev loop6, logical block 0, async page read [ 746.429512][T16438] Buffer I/O error on dev loop6, logical block 0, async page read [ 746.437519][T16438] Buffer I/O error on dev loop6, logical block 0, async page read [ 746.445577][T16438] Buffer I/O error on dev loop6, logical block 0, async page read [ 746.453588][T16438] Buffer I/O error on dev loop6, logical block 0, async page read [ 746.461821][T16438] Buffer I/O error on dev loop6, logical block 0, async page read [ 746.469833][T16438] Buffer I/O error on dev loop6, logical block 0, async page read [ 746.519943][T16438] ldm_validate_partition_table(): Disk read failed. [ 746.526693][T16438] Buffer I/O error on dev loop6, logical block 0, async page read [ 746.534688][T16438] Buffer I/O error on dev loop6, logical block 0, async page read [ 746.546296][T16438] Dev loop6: unable to read RDB block 0 [ 746.552462][T16438] loop6: unable to read partition table [ 746.558576][T16438] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 746.613253][T16387] em28xx 6-1:0.0: reading from i2c device at 0x482c failed (error=-5) [ 746.669831][T11941] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 746.677795][T11941] em28xx 6-1:0.0: dvb set to bulk mode. [ 746.687578][T11789] em28xx 6-1:0.0: Binding DVB extension [ 746.721217][T11941] usb 6-1: USB disconnect, device number 59 [ 746.750133][T11941] em28xx 6-1:0.0: Disconnecting em28xx [ 746.908202][ T5887] usb 3-1: USB disconnect, device number 85 [ 746.985490][ T5887] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 747.212093][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.218529][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.221062][T11789] em28xx 6-1:0.0: Registering input extension [ 747.270225][T11941] em28xx 6-1:0.0: Closing input extension [ 747.291549][ T6297] tipc: Subscription rejected, illegal request [ 747.376410][T11941] em28xx 6-1:0.0: Freeing device [ 748.853110][T16488] binder: 16484:16488 ioctl c0306201 0 returned -14 [ 748.880928][T16488] binder: 16484:16488 ioctl c0306201 200000000200 returned -11 [ 749.359906][ T796] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 749.591649][ T796] usb 7-1: Using ep0 maxpacket: 16 [ 749.633407][ T796] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 749.677944][ T796] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 749.737184][ T796] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 749.770005][ T796] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.806248][ T796] usb 7-1: Product: syz [ 749.835005][ T796] usb 7-1: Manufacturer: syz [ 749.859482][ T796] usb 7-1: SerialNumber: syz [ 749.940932][ T796] usb 7-1: config 0 descriptor?? [ 749.983627][ T796] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 750.006405][ T796] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 750.647152][ T796] em28xx 7-1:0.0: unknown em28xx chip ID (81) [ 750.848194][ T796] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 750.912631][ T796] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 751.003907][ T796] em28xx 7-1:0.0: No AC97 audio processor [ 751.079068][ T796] usb 7-1: USB disconnect, device number 75 [ 751.121032][ T796] em28xx 7-1:0.0: Disconnecting em28xx [ 751.172407][ T796] em28xx 7-1:0.0: Freeing device [ 751.302841][T16531] fuse: root generation should be zero [ 754.837242][T16611] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2506'. [ 754.850176][T16611] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2506'. [ 755.455752][T16626] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2512'. [ 755.863505][T16635] binder: 16632:16635 ioctl c0306201 200000000680 returned -14 [ 756.313426][T16647] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 756.370185][ T5926] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 756.529935][ T5926] usb 6-1: Using ep0 maxpacket: 8 [ 756.556264][ T5926] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 756.591107][ T5926] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 756.639884][ T5926] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 756.663408][ T5926] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 756.709921][ T5926] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 756.733025][ T5926] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 756.762438][ T5926] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 756.794524][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.088974][ T5926] usb 6-1: usb_control_msg returned -32 [ 757.116610][ T5926] usbtmc 6-1:16.0: can't read capabilities [ 757.532210][ C1] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 757.589854][T16699] usbtmc 6-1:16.0: Unable to send data, error -71 [ 759.128422][ T5887] usb 6-1: USB disconnect, device number 60 [ 759.140205][T16730] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 759.416971][T16739] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2556'. [ 759.430558][T16739] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2556'. [ 760.594040][ T5821] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 760.608681][ T5821] CPU: 0 UID: 0 PID: 5821 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 760.608717][ T5821] Tainted: [L]=SOFTLOCKUP [ 760.608725][ T5821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 760.608740][ T5821] Workqueue: hci3 hci_rx_work [ 760.608775][ T5821] Call Trace: [ 760.608784][ T5821] [ 760.608794][ T5821] dump_stack_lvl+0xe8/0x150 [ 760.608826][ T5821] sysfs_create_dir_ns+0x271/0x2a0 [ 760.608861][ T5821] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 760.608893][ T5821] ? do_raw_spin_unlock+0xf5/0x210 [ 760.608921][ T5821] kobject_add_internal+0x62b/0xd00 [ 760.608962][ T5821] kobject_add+0x163/0x240 [ 760.608997][ T5821] ? __pfx_kobject_add+0x10/0x10 [ 760.609028][ T5821] ? _raw_spin_unlock+0x28/0x50 [ 760.609056][ T5821] ? get_device_parent+0x366/0x3a0 [ 760.609090][ T5821] device_add+0x408/0xb70 [ 760.609122][ T5821] hci_conn_add_sysfs+0xd5/0x210 [ 760.609151][ T5821] le_conn_complete_evt+0x10e6/0x16b0 [ 760.609184][ T5821] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 760.609203][ T5821] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 760.609239][ T5821] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 760.609267][ T5821] ? skb_pull_data+0xfb/0x200 [ 760.609302][ T5821] hci_le_conn_complete_evt+0x187/0x470 [ 760.609343][ T5821] hci_event_packet+0x659/0xef0 [ 760.609378][ T5821] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 760.609409][ T5821] ? __pfx_hci_event_packet+0x10/0x10 [ 760.609443][ T5821] ? kcov_remote_start+0x49a/0x7a0 [ 760.609477][ T5821] ? hci_send_to_monitor+0xe2/0x590 [ 760.609510][ T5821] hci_rx_work+0x3ee/0x1030 [ 760.609545][ T5821] ? process_scheduled_works+0xa8d/0x18c0 [ 760.609575][ T5821] process_scheduled_works+0xb6e/0x18c0 [ 760.609634][ T5821] ? __pfx_process_scheduled_works+0x10/0x10 [ 760.609668][ T5821] ? assign_work+0x3d5/0x5e0 [ 760.609700][ T5821] worker_thread+0xa53/0xfc0 [ 760.609753][ T5821] kthread+0x388/0x470 [ 760.609773][ T5821] ? __pfx_worker_thread+0x10/0x10 [ 760.609797][ T5821] ? __pfx_kthread+0x10/0x10 [ 760.609821][ T5821] ret_from_fork+0x51e/0xb90 [ 760.609849][ T5821] ? __pfx_ret_from_fork+0x10/0x10 [ 760.609873][ T5821] ? __switch_to+0xc7d/0x1450 [ 760.609901][ T5821] ? __pfx_kthread+0x10/0x10 [ 760.609922][ T5821] ret_from_fork_asm+0x1a/0x30 [ 760.609971][ T5821] [ 760.831797][ T5821] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 760.852459][ T5821] Bluetooth: hci3: failed to register connection device [ 761.967085][ T29] audit: type=1326 audit(1775693745.843:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16808 comm="syz.1.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9ad9c819 code=0x7ffc0000 [ 762.149880][ T29] audit: type=1326 audit(1775693745.843:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16808 comm="syz.1.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fee9ad9c819 code=0x7ffc0000 [ 762.189856][ T29] audit: type=1326 audit(1775693745.843:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16808 comm="syz.1.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9ad9c819 code=0x7ffc0000 [ 762.260134][ T29] audit: type=1326 audit(1775693745.843:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16808 comm="syz.1.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fee9ad9c819 code=0x7ffc0000 [ 762.334879][ T29] audit: type=1326 audit(1775693745.843:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16808 comm="syz.1.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9ad9c819 code=0x7ffc0000 [ 762.413009][ T29] audit: type=1326 audit(1775693745.853:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16808 comm="syz.1.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9ad9c819 code=0x7ffc0000 [ 762.586194][T16837] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2600'. [ 762.759246][T16845] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 762.809995][T11760] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 762.869852][ T5926] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 762.998089][T11760] usb 3-1: Using ep0 maxpacket: 8 [ 763.022432][ T5926] usb 6-1: config 0 has an invalid interface number: 106 but max is 0 [ 763.032087][T11760] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 763.044010][ T5926] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 763.059805][T11760] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 763.129915][ T5926] usb 6-1: config 0 has no interface number 0 [ 763.136033][ T5926] usb 6-1: config 0 interface 106 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 763.147866][T11760] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 763.169811][T11760] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 763.189875][ T5926] usb 6-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 763.209811][T11760] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 763.218876][T11760] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.227019][ T5926] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 763.249795][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.272719][ T5926] usb 6-1: config 0 descriptor?? [ 763.297740][ T5926] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 763.468055][T11760] usb 3-1: GET_CAPABILITIES returned 0 [ 763.473709][T11760] usbtmc 3-1:16.0: can't read capabilities [ 763.484652][ T6297] usb 6-1: Failed to submit usb control message: -71 [ 763.492121][ T5926] usb 6-1: USB disconnect, device number 61 [ 763.523901][ T6297] usb 6-1: unable to send the bmi data to the device: -71 [ 763.540990][ T6297] usb 6-1: unable to get target info from device [ 763.566498][ T6297] usb 6-1: could not get target info (-71) [ 763.583150][ T6297] usb 6-1: could not probe fw (-71) [ 763.696263][T11760] usb 3-1: USB disconnect, device number 86 [ 763.733527][T16862] bridge0: port 3(veth0_to_bridge) entered blocking state [ 763.785117][T16862] bridge0: port 3(veth0_to_bridge) entered disabled state [ 763.811964][T16862] veth0_to_bridge: entered allmulticast mode [ 763.859995][T16862] veth0_to_bridge: entered promiscuous mode [ 763.895737][T16862] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 763.910386][T16862] bridge0: port 3(veth0_to_bridge) entered blocking state [ 763.917689][T16862] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 764.338631][T16884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2618'. [ 764.749102][T16903] capability: warning: `syz.3.2625' uses 32-bit capabilities (legacy support in use) [ 764.766689][T16903] program syz.3.2625 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 768.405656][T16972] @: renamed from vlan0 [ 768.710049][ T5962] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 768.882444][ T5962] usb 4-1: config 0 has an invalid interface number: 221 but max is 0 [ 768.927389][ T5962] usb 4-1: config 0 has no interface number 0 [ 768.975007][ T5962] usb 4-1: config 0 interface 221 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 769.009880][ T29] audit: type=1326 audit(1775693752.883:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16983 comm="syz.1.2658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9ad9c819 code=0x7ffc0000 [ 769.016947][ T5962] usb 4-1: config 0 interface 221 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 769.092314][ T5962] usb 4-1: config 0 interface 221 has no altsetting 0 [ 769.109472][ T5962] usb 4-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice=10.00 [ 769.125448][ T5962] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.149818][ T29] audit: type=1326 audit(1775693752.883:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16983 comm="syz.1.2658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9ad9c819 code=0x7ffc0000 [ 769.165182][ T5962] usb 4-1: config 0 descriptor?? [ 769.235011][ T29] audit: type=1326 audit(1775693752.883:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16983 comm="syz.1.2658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9ad9c819 code=0x7ffc0000 [ 769.312821][ T29] audit: type=1326 audit(1775693752.883:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16983 comm="syz.1.2658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9ad9c819 code=0x7ffc0000 [ 769.365754][ T29] audit: type=1326 audit(1775693752.883:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16983 comm="syz.1.2658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7fee9ad9c819 code=0x7ffc0000 [ 769.422397][ T29] audit: type=1326 audit(1775693752.883:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16983 comm="syz.1.2658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9ad9c819 code=0x7ffc0000 [ 769.459446][T16997] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2663'. [ 769.474321][ T29] audit: type=1326 audit(1775693752.883:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16983 comm="syz.1.2658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9ad9c819 code=0x7ffc0000 [ 769.504062][ T29] audit: type=1326 audit(1775693752.883:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16983 comm="syz.1.2658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9ad9c819 code=0x7ffc0000 [ 769.530332][ T29] audit: type=1326 audit(1775693752.883:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16983 comm="syz.1.2658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fee9ad9c819 code=0x7ffc0000 [ 769.575939][ T29] audit: type=1326 audit(1775693752.883:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16983 comm="syz.1.2658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fee9ad9c819 code=0x7ffc0000 [ 769.629701][ T5962] uclogic 0003:5543:0522.0014: item fetching failed at offset 0/3 [ 769.640824][ T5962] uclogic 0003:5543:0522.0014: parse failed [ 769.646980][ T5962] uclogic 0003:5543:0522.0014: probe with driver uclogic failed with error -22 [ 769.741891][T17001] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 769.856083][T11789] usb 4-1: USB disconnect, device number 111 [ 770.179858][ T5962] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 770.320230][ T5926] usb 7-1: new full-speed USB device number 76 using dummy_hcd [ 770.352137][ T5962] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 770.373175][ T5962] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 770.407142][ T5962] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 770.429992][ T5962] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 770.439261][ T5962] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.472054][ T5962] usb 2-1: config 0 descriptor?? [ 770.552141][ T5926] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 770.579846][ T5926] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 770.619865][ T5926] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 770.629150][ T5926] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.700972][T11789] usb 2-1: USB disconnect, device number 52 [ 770.874876][ T5926] usb 7-1: usb_control_msg returned -32 [ 770.881645][ T5926] usbtmc 7-1:16.0: can't read capabilities [ 770.923489][T17027] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2674'. [ 772.341138][T17072] input: syz0 as /devices/virtual/input/input60 [ 772.719850][ T5887] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 772.870624][ T5887] usb 6-1: Using ep0 maxpacket: 32 [ 772.879469][ T5887] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 772.888698][ T5887] usb 6-1: config 49 has too many interfaces: 81, using maximum allowed: 32 [ 772.898180][ T5887] usb 6-1: config 49 has an invalid descriptor of length 54, skipping remainder of the config [ 772.910425][T17090] netlink: 'syz.3.2700': attribute type 3 has an invalid length. [ 772.918190][T17090] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2700'. [ 772.927735][ T5887] usb 6-1: config 49 has 0 interfaces, different from the descriptor's value: 81 [ 772.937227][ T5887] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 772.946686][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.082499][ T5962] usb 7-1: USB disconnect, device number 76 [ 773.229441][ T5142] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 773.234803][ T5887] usb 6-1: string descriptor 0 read error: -71 [ 773.256244][ T5887] usb 6-1: USB disconnect, device number 62 [ 775.501186][T17159] syz_tun: entered allmulticast mode [ 776.014288][T17185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2742'. [ 776.070717][T17185] netlink: 'syz.3.2742': attribute type 5 has an invalid length. [ 776.095542][T17185] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2742'. [ 776.149339][T17185] geneve2: entered promiscuous mode [ 776.159201][T17185] geneve2: entered allmulticast mode [ 776.180905][ T6309] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 52953 - 0 [ 776.220567][ T6309] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 52953 - 0 [ 776.258903][ T6309] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 52953 - 0 [ 776.275935][ T6309] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 52953 - 0 [ 776.291472][T17196] binder: 17195:17196 ioctl c0306201 200000000680 returned -14 [ 776.579898][T11789] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 776.672346][T17205] misc userio: The device must be registered before sending interrupts [ 776.743063][T11789] usb 4-1: config 0 has an invalid interface number: 3 but max is 0 [ 776.779563][T11789] usb 4-1: config 0 has no interface number 0 [ 776.790896][T11789] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 776.800312][T11789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.822583][T11789] usb 4-1: config 0 descriptor?? [ 776.835484][T11789] cp210x 4-1:0.3: cp210x converter detected [ 777.029888][ T5962] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 777.203352][ T5962] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 777.216210][ T5962] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 777.236879][ T5962] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 777.251794][T11789] cp210x 4-1:0.3: failed to get vendor val 0x000e size 3: -71 [ 777.260577][ T5962] usb 3-1: config 220 has no interface number 2 [ 777.267147][ T5962] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 777.281723][T11789] usb 4-1: cp210x converter now attached to ttyUSB0 [ 777.291941][T11789] usb 4-1: USB disconnect, device number 112 [ 777.302488][T11789] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 777.311407][T11789] cp210x 4-1:0.3: device disconnected [ 777.342247][ T5962] usb 3-1: config 220 interface 0 has no altsetting 0 [ 777.349104][ T5962] usb 3-1: config 220 interface 76 has no altsetting 0 [ 777.399805][ T5962] usb 3-1: config 220 interface 1 has no altsetting 0 [ 777.433975][ T5962] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 777.463787][ T5962] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.485301][ T5962] usb 3-1: Product: syz [ 777.489523][ T5962] usb 3-1: Manufacturer: syz [ 777.494983][ T5962] usb 3-1: SerialNumber: syz [ 777.735154][ T5962] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 777.745198][ T5962] uvcvideo 3-1:220.0: No valid video chain found. [ 777.755342][ T5962] usb 3-1: selecting invalid altsetting 0 [ 777.783852][ T5962] usb 3-1: selecting invalid altsetting 0 [ 777.790283][ T5962] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 777.806011][ T5962] usb 3-1: USB disconnect, device number 87 [ 778.552378][T11789] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 778.719924][T11789] usb 4-1: Using ep0 maxpacket: 32 [ 778.738776][T11789] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 778.773892][T11789] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 778.796340][T11789] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 778.818574][T11789] usb 4-1: Product: syz [ 778.827314][T11789] usb 4-1: Manufacturer: syz [ 778.837859][T11789] usb 4-1: SerialNumber: syz [ 778.853736][T11789] usb 4-1: config 0 descriptor?? [ 778.860248][ T5894] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 778.882304][T17257] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 779.043687][ T5894] usb 7-1: Using ep0 maxpacket: 32 [ 779.061543][ T5894] usb 7-1: unable to get BOS descriptor or descriptor too short [ 779.090376][ T5894] usb 7-1: config 128 has an invalid interface number: 6 but max is 3 [ 779.109957][ T5894] usb 7-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 779.125268][T11941] usb 4-1: USB disconnect, device number 113 [ 779.151559][ T5894] usb 7-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 779.171253][ T5894] usb 7-1: config 128 has no interface number 0 [ 779.178121][ T5894] usb 7-1: config 128 interface 6 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 779.190152][ T5894] usb 7-1: config 128 interface 6 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 779.201935][ T5894] usb 7-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 779.211264][ T5894] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.219273][ T5894] usb 7-1: Product: syz [ 779.223755][ T5894] usb 7-1: Manufacturer: syz [ 779.228454][ T5894] usb 7-1: SerialNumber: syz [ 779.617301][ T5894] usb 7-1: USB disconnect, device number 77 [ 779.675066][ T5825] udevd[5825]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:128.6/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 779.896107][T17290] netlink: 'syz.1.2784': attribute type 5 has an invalid length. [ 779.990014][ T5821] Bluetooth: hci4: command 0x0406 tx timeout [ 780.076273][T17292] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2785'. [ 780.098674][T17294] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2786'. [ 781.366319][T17327] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2798'. [ 781.624598][T17333] bridge0: port 3(ipvlan0) entered blocking state [ 781.645589][T17333] bridge0: port 3(ipvlan0) entered disabled state [ 781.665940][T17333] ipvlan0: entered allmulticast mode [ 781.680672][T17333] veth0_vlan: entered allmulticast mode [ 781.697080][T17333] ipvlan0: left allmulticast mode [ 781.707401][T17333] veth0_vlan: left allmulticast mode [ 781.819614][T17342] bridge0: port 3(veth1) entered blocking state [ 781.838356][T17342] bridge0: port 3(veth1) entered disabled state [ 781.855528][T17342] veth1: entered allmulticast mode [ 781.876655][T17342] veth1: entered promiscuous mode [ 781.901569][T17342] bridge0: port 3(veth1) entered blocking state [ 781.907997][T17342] bridge0: port 3(veth1) entered forwarding state [ 782.093456][T17351] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2810'. [ 783.593798][ T5821] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 783.610211][ T5821] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 783.618563][ T5821] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 783.631124][ T5821] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 783.639311][ T5821] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 784.263110][T17384] chnl_net:caif_netlink_parms(): no params data found [ 784.459573][T17384] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.467089][T17384] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.474565][T17384] bridge_slave_0: entered allmulticast mode [ 784.482640][T17384] bridge_slave_0: entered promiscuous mode [ 784.491649][T17384] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.498990][T17384] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.515433][T17384] bridge_slave_1: entered allmulticast mode [ 784.523478][T17384] bridge_slave_1: entered promiscuous mode [ 784.576716][T17384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 784.591891][T17384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 784.673184][ T7391] syz_tun (unregistering): left allmulticast mode [ 784.748178][T17384] team0: Port device team_slave_0 added [ 784.802151][T17384] team0: Port device team_slave_1 added [ 784.878031][T17384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 784.898861][T17384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 784.957844][T17384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 784.997753][T17384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 785.017490][T17384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 785.088863][T17384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 785.274480][T17384] hsr_slave_0: entered promiscuous mode [ 785.291931][T17384] hsr_slave_1: entered promiscuous mode [ 785.298311][T17384] debugfs: 'hsr0' already exists in 'hsr' [ 785.322406][T17384] Cannot create hsr debugfs directory [ 785.751958][ T5821] Bluetooth: hci5: command tx timeout [ 786.051026][T17384] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.065963][T17384] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 52953 - 0 [ 786.194663][T17384] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.208111][T17384] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 52953 - 0 [ 786.300838][T17384] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.312306][T17384] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 52953 - 0 [ 786.400584][T11760] usb 6-1: new full-speed USB device number 63 using dummy_hcd [ 786.462054][T17384] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.474336][T17384] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 52953 - 0 [ 786.583011][T11760] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 786.605603][T11760] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 786.630454][T11760] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 786.677070][T11760] usb 6-1: config 0 interface 0 has no altsetting 0 [ 786.696128][T11760] usb 6-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 786.719804][T11760] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.751121][T11760] usb 6-1: config 0 descriptor?? [ 786.816355][T17384] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 786.829530][T17384] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 786.841828][T17384] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 786.855883][T17384] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 787.153421][T17384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 787.188648][T11760] hid_parser_main: 28 callbacks suppressed [ 787.188670][T11760] sony 0003:054C:0374.0015: unknown main item tag 0x1 [ 787.221078][T17384] 8021q: adding VLAN 0 to HW filter on device team0 [ 787.228895][T11760] sony 0003:054C:0374.0015: item fetching failed at offset 35/36 [ 787.250463][T11760] sony 0003:054C:0374.0015: parse failed [ 787.256194][T11760] sony 0003:054C:0374.0015: probe with driver sony failed with error -22 [ 787.272271][ T6312] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.279484][ T6312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 787.311314][ T6297] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.318588][ T6297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 787.383744][T11941] usb 6-1: USB disconnect, device number 63 [ 787.487181][T17384] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 787.569529][T17384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 787.773509][T17384] veth0_vlan: entered promiscuous mode [ 787.834878][ T5821] Bluetooth: hci5: command tx timeout [ 787.840823][T17384] veth1_vlan: entered promiscuous mode [ 787.942752][T17384] veth0_macvtap: entered promiscuous mode [ 787.973255][T17384] veth1_macvtap: entered promiscuous mode [ 788.012539][T17384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 788.034622][T17384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 788.056580][ T6297] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.074514][ T6297] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.093313][ T6297] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.141626][ T6312] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.377967][ T6309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 788.634968][ T6309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 788.788375][ T6290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 788.811218][ T6290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 789.060857][T17533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2822'. [ 789.931296][ T5821] Bluetooth: hci5: command tx timeout [ 791.315247][T17595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2884'. [ 791.463260][ T5908] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 791.639839][ T5908] usb 2-1: Using ep0 maxpacket: 8 [ 791.651891][ T5908] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 791.664975][ T5908] usb 2-1: config 0 has no interface number 0 [ 791.671820][ T5908] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 791.683083][ T5908] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 791.695243][ T5908] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 791.712946][ T5908] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 791.726869][ T5908] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 791.736872][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.756741][ T5908] usb 2-1: config 0 descriptor?? [ 791.776923][ T5908] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 791.977015][ T5894] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 791.989105][T17592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 791.997706][ T5821] Bluetooth: hci5: command tx timeout [ 792.001688][T17592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 792.020725][ T5894] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 792.095536][T11789] usb 2-1: USB disconnect, device number 53 [ 792.105062][T11789] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 792.231779][T17607] fido_id[17607]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 792.638354][T17625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2896'. [ 792.715771][T17629] fuse: Bad value for 'fd' [ 792.939384][T17640] pim6reg: entered allmulticast mode [ 794.994005][T17665] fuse: Unknown parameter 'g' [ 795.227597][T17672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2910'. [ 795.241799][T11789] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 795.409877][T11789] usb 7-1: Using ep0 maxpacket: 8 [ 795.416864][T11789] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 795.425223][T11789] usb 7-1: config 0 has no interface number 0 [ 795.440678][T11789] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 795.475776][T11789] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 795.523885][T11789] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 795.562165][T17684] pim6reg: entered allmulticast mode [ 795.598189][T11789] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 795.661246][T11789] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 795.679703][T11789] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.716683][T11789] usb 7-1: config 0 descriptor?? [ 795.747868][T11789] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 795.932360][T17667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 795.943611][ T5894] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 795.961838][ T5894] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 795.973992][T17667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 796.009414][ T5894] usb 7-1: USB disconnect, device number 78 [ 796.028225][ T5894] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 796.438304][T17692] fido_id[17692]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 796.716381][T17707] fuse: Unknown parameter 'g' [ 798.114600][T17735] fuse: Unknown parameter 'g' [ 799.470338][T17761] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2941'. [ 800.150794][T17784] fuse: Unknown parameter 'g' [ 802.310510][T17853] fuse: Unknown parameter 'g' [ 802.451473][T17856] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2969'. [ 803.507641][T17877] bridge0: port 4(veth1_to_bridge) entered blocking state [ 803.587910][T17877] bridge0: port 4(veth1_to_bridge) entered disabled state [ 803.636365][T17877] veth1_to_bridge: entered allmulticast mode [ 803.671516][T17877] veth1_to_bridge: entered promiscuous mode [ 803.678950][T17877] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 803.724975][T17877] bridge0: port 4(veth1_to_bridge) entered blocking state [ 803.732349][T17877] bridge0: port 4(veth1_to_bridge) entered forwarding state [ 803.931871][T17895] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 803.992469][T17899] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2988'. [ 804.101692][ T5908] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 804.283197][ T5908] usb 7-1: Using ep0 maxpacket: 8 [ 804.638382][ T5908] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 804.663661][ T5908] usb 7-1: config 0 has no interface number 0 [ 804.679805][ T5908] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 804.710547][ T5908] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 804.725334][ T5908] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 804.747721][ T5908] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 804.919868][ T5908] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 804.934595][ T5908] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.958255][ T5908] usb 7-1: config 0 descriptor?? [ 804.977163][ T5908] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 805.173068][ T5908] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 805.186529][T17890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 805.197540][ T5908] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 805.216526][T17890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 805.260762][ T5908] usb 7-1: USB disconnect, device number 79 [ 805.279380][ T5908] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 805.308234][T17927] fido_id[17927]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 805.616316][ T6312] tipc: Subscription rejected, illegal request [ 806.088594][T17956] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3007'. [ 806.418412][ T6290] tipc: Subscription rejected, illegal request [ 807.458980][T17992] fuse: Bad value for 'fd' [ 807.564614][T17995] fuse: Unknown parameter 'g' [ 807.729626][T17999] fuse: Bad value for 'user_id' [ 807.761348][T17997] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 807.790270][T17999] fuse: Bad value for 'user_id' [ 808.190114][T18012] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3030'. [ 808.633991][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.640658][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.292736][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 809.305868][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 809.318817][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 809.331891][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 809.344519][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 809.356839][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 809.369037][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 809.381494][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 809.393747][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 809.406009][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 812.943513][T18067] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3046'. [ 812.966856][T18068] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 813.027697][T18070] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3046'. [ 813.059805][ C0] sched: DL replenish lagged too much [ 813.453481][T18074] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3047'. [ 813.493088][T18074] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3047'. [ 813.829538][T11760] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 814.099844][T11760] usb 6-1: device descriptor read/64, error -71 [ 814.299825][ C0] net_ratelimit: 16001 callbacks suppressed [ 814.299848][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 814.318090][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 814.330328][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 814.342702][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 814.355104][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 814.367361][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 814.379609][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 814.391967][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 814.404175][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 814.416459][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 815.339891][T11760] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 815.820144][T11760] usb 6-1: device descriptor read/64, error -71 [ 818.053238][T11760] usb usb6-port1: attempt power cycle [ 818.769819][T11760] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 818.834243][T18083] bond1: Removing last ns target with arp_interval on [ 819.310082][ C0] net_ratelimit: 19010 callbacks suppressed [ 819.310102][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 819.328540][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 819.341031][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 819.353520][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 819.366543][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 819.379400][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 819.391881][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 819.404328][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 819.416729][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 819.429097][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 821.944827][T18109] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3057'. [ 822.028596][T18111] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3057'. [ 822.664893][T11760] usb 6-1: device descriptor read/8, error -71 [ 823.040511][T18129] fuse: Bad value for 'fd' [ 824.319870][ C0] net_ratelimit: 14461 callbacks suppressed [ 824.319886][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 824.338027][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 824.350308][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 824.362703][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 824.374929][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 824.387242][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 824.399529][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 824.411717][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 824.424095][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 824.436435][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 829.329912][ C0] net_ratelimit: 20399 callbacks suppressed [ 829.329928][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 829.348094][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 829.360437][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 829.372830][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 829.385186][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 829.397429][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 829.409833][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 829.422047][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 829.434479][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 829.446777][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 834.339937][ C0] net_ratelimit: 19230 callbacks suppressed [ 834.339953][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 834.358165][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 834.370436][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 834.382659][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 834.394940][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 834.407125][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 834.419336][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 834.431642][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 834.443836][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 834.456129][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.349944][ C0] net_ratelimit: 17864 callbacks suppressed [ 839.349965][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.356020][ T5142] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 839.368440][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.384052][ T5142] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 839.387968][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.406885][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.408869][ T5142] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 839.420631][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.432526][ T5142] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 839.438331][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.449906][ T5142] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 839.457320][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.476334][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.488818][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.501396][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 840.596543][T18169] bridge0: port 3(veth1_to_bridge) entered blocking state [ 840.660240][T18169] bridge0: port 3(veth1_to_bridge) entered disabled state [ 840.731903][T18169] veth1_to_bridge: entered allmulticast mode [ 840.738997][ T5821] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 840.760068][ T5821] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 842.570406][T13573] Bluetooth: hci0: command tx timeout [ 842.579657][ T5821] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 842.644513][T13572] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 843.620309][T13572] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 844.360020][ C0] net_ratelimit: 18871 callbacks suppressed [ 844.360036][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.378587][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.390829][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.403450][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.415918][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.428474][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.430691][T18169] veth1_to_bridge: entered promiscuous mode [ 844.441013][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.441491][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.471746][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.484334][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.493771][ T5142] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 844.534643][ T5821] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 844.562329][ T5821] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 844.571132][ T5821] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 844.578936][ T5821] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 844.635114][ T5142] Bluetooth: hci0: command tx timeout [ 845.674980][ T5821] Bluetooth: hci6: command tx timeout [ 846.709944][ T5821] Bluetooth: hci0: command tx timeout [ 847.274067][ T5821] Bluetooth: hci7: command tx timeout [ 847.749975][ T5821] Bluetooth: hci6: command tx timeout [ 848.860119][ T5821] Bluetooth: hci0: command tx timeout [ 849.369900][ C0] net_ratelimit: 16972 callbacks suppressed [ 849.369916][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.388116][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.400469][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.412737][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.425052][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.437445][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.449874][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.462156][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.474498][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.486712][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.700201][ T5821] Bluetooth: hci7: command tx timeout [ 849.862817][ T5821] Bluetooth: hci6: command tx timeout [ 851.752841][ T5821] Bluetooth: hci7: command tx timeout [ 851.801405][T18185] netlink: 'syz.1.3075': attribute type 4 has an invalid length. [ 851.909845][ T5821] Bluetooth: hci6: command tx timeout [ 852.835235][T18187] netlink: 'syz.1.3075': attribute type 4 has an invalid length. [ 854.379888][ C0] net_ratelimit: 18596 callbacks suppressed [ 854.379904][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.398127][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.410454][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.422787][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.435234][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.447717][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.460178][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.472439][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.484852][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.497185][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.649910][ T5821] Bluetooth: hci7: command tx timeout [ 855.391067][T18183] bond0: Removing last ns target with arp_interval on [ 859.390035][ C0] net_ratelimit: 18569 callbacks suppressed [ 859.390060][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 859.408815][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 859.421197][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 859.433462][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 859.445743][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 859.458082][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 859.470612][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 859.482910][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 859.495443][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 859.507790][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 861.293751][T18196] bridge0: port 4(vlan1) entered blocking state [ 861.313430][T18196] bridge0: port 4(vlan1) entered disabled state [ 861.333608][T18196] vlan1: entered allmulticast mode [ 861.338781][T18196] veth0_vlan: entered allmulticast mode [ 861.379986][T18196] vlan1: entered promiscuous mode [ 863.413953][ T35] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.955122][T18167] chnl_net:caif_netlink_parms(): no params data found [ 864.400010][ C0] net_ratelimit: 16342 callbacks suppressed [ 864.400034][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 864.418412][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 864.431000][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 864.443621][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 864.456165][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 864.468667][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 864.481111][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 864.493844][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 864.506440][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 864.518687][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 865.646597][ T35] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.283169][ T35] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.487477][ T35] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.409932][ C0] net_ratelimit: 16158 callbacks suppressed [ 869.409949][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 869.428108][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 869.440403][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 869.452884][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 869.465187][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 869.477698][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 869.490395][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 869.502688][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 869.514984][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 869.527240][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 870.079245][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.149876][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.423287][T18173] chnl_net:caif_netlink_parms(): no params data found [ 870.486330][T18172] chnl_net:caif_netlink_parms(): no params data found [ 870.666354][T18251] bridge0: port 3(vlan1) entered blocking state [ 870.673494][T18251] bridge0: port 3(vlan1) entered disabled state [ 870.681150][T18251] vlan1: entered allmulticast mode [ 870.686498][T18251] veth0_vlan: entered allmulticast mode [ 870.700968][T18251] vlan1: entered promiscuous mode [ 870.711622][T18251] bridge0: port 3(vlan1) entered blocking state [ 870.718002][T18251] bridge0: port 3(vlan1) entered forwarding state [ 871.306923][T18172] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.315637][T18172] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.675493][T18172] bridge_slave_0: entered allmulticast mode [ 871.770333][T18172] bridge_slave_0: entered promiscuous mode [ 871.905749][T18172] bridge0: port 2(bridge_slave_1) entered blocking state [ 871.921359][T18172] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.044441][T18172] bridge_slave_1: entered allmulticast mode [ 872.053911][T18172] bridge_slave_1: entered promiscuous mode [ 872.061367][T18167] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.068508][T18167] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.095660][T18167] bridge_slave_0: entered allmulticast mode [ 872.421014][T18167] bridge_slave_0: entered promiscuous mode [ 872.601953][T18167] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.609116][T18167] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.850171][T18167] bridge_slave_1: entered allmulticast mode [ 872.876842][T18167] bridge_slave_1: entered promiscuous mode [ 873.577649][T18167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 874.094842][T18172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 874.311130][T18172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 874.382770][T18167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 874.420061][ C0] net_ratelimit: 16082 callbacks suppressed [ 874.420079][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 874.438600][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 874.450838][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 874.463329][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 874.475795][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 874.488097][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 874.500377][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 874.512833][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 874.525190][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 874.537407][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 874.550960][ T35] bridge_slave_1: left allmulticast mode [ 874.955574][ T35] bridge_slave_1: left promiscuous mode [ 874.990034][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.090060][ T35] bridge_slave_0: left allmulticast mode [ 875.095748][ T35] bridge_slave_0: left promiscuous mode [ 875.133690][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.016944][T18300] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 878.304646][ T35] bond3 (unregistering): (slave gretap1): Releasing active interface [ 878.539929][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 878.609869][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 878.633367][ T35] bond0 (unregistering): Released all slaves [ 878.647678][ T35] bond1 (unregistering): Released all slaves [ 878.666595][ T35] bond2 (unregistering): Released all slaves [ 878.695528][ T35] bond3 (unregistering): Released all slaves [ 878.779111][T18173] bridge0: port 1(bridge_slave_0) entered blocking state [ 878.786446][T18173] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.796697][T18173] bridge_slave_0: entered allmulticast mode [ 878.870255][T18173] bridge_slave_0: entered promiscuous mode [ 879.429789][ C0] net_ratelimit: 15672 callbacks suppressed [ 879.429812][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.448513][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.461321][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.474361][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.487055][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.499523][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.511997][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.524602][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.537208][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.542217][T18167] team0: Port device team_slave_0 added [ 879.549850][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.592773][T18167] team0: Port device team_slave_1 added [ 880.008602][T18173] bridge0: port 2(bridge_slave_1) entered blocking state [ 880.028913][T18173] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.060190][T18173] bridge_slave_1: entered allmulticast mode [ 880.087866][T18173] bridge_slave_1: entered promiscuous mode [ 880.133733][T18172] team0: Port device team_slave_0 added [ 880.148644][ T35] tipc: Left network mode [ 880.218616][T18167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 880.257453][T18167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 880.352313][T18321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3093'. [ 880.368409][T18167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 881.231826][T18172] team0: Port device team_slave_1 added [ 881.777459][T18167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 881.824767][T18167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 882.078390][T18167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 882.542412][T18173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 884.439960][ C0] net_ratelimit: 16375 callbacks suppressed [ 884.439975][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.458326][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.470524][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.482767][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.495014][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.507159][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.519460][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.531753][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.543962][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.556154][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 886.714033][T18173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 887.569103][T18172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 887.576299][T18172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 887.610429][T18342] fuse: Unknown parameter '0x0000000000000004' [ 887.656569][T18172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 887.690280][T18172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 887.714476][T18172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 887.970009][T18172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 889.449803][ C0] net_ratelimit: 17746 callbacks suppressed [ 889.449819][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.468016][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.480272][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.492790][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.505287][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.517672][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.530071][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.542322][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.554540][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.566855][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 894.460161][ C0] net_ratelimit: 19949 callbacks suppressed [ 894.460181][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 894.478659][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 894.491256][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 894.503736][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 894.516226][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 894.528822][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 894.541328][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 894.553943][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 894.566528][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 894.578989][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 894.884625][T18173] team0: Port device team_slave_0 added [ 894.908800][T18173] team0: Port device team_slave_1 added [ 894.978658][T18167] hsr_slave_0: entered promiscuous mode [ 895.029339][T18167] hsr_slave_1: entered promiscuous mode [ 895.092291][T18167] debugfs: 'hsr0' already exists in 'hsr' [ 895.098065][T18167] Cannot create hsr debugfs directory [ 895.205545][ T5821] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 895.270264][ T5821] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 895.279138][ T5821] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 895.290417][ T5821] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 895.298349][ T5821] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 895.682872][ T35] hsr_slave_0: left promiscuous mode [ 895.689065][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 895.727121][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 895.790754][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 895.818554][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 895.844859][ T35] veth1_macvtap: left promiscuous mode [ 895.851297][ T35] veth0_macvtap: left promiscuous mode [ 895.856989][ T35] veth1_vlan: left promiscuous mode [ 895.869006][ T35] veth0_vlan: left promiscuous mode [ 896.366266][ T35] pim6reg (unregistering): left allmulticast mode [ 897.354998][ T5821] Bluetooth: hci2: command tx timeout [ 898.584647][ T35] team0 (unregistering): Port device team_slave_1 removed [ 898.655572][ T35] team0 (unregistering): Port device team_slave_0 removed [ 899.432230][ T5821] Bluetooth: hci2: command tx timeout [ 899.470286][ C0] net_ratelimit: 14828 callbacks suppressed [ 899.470319][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 899.488926][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 899.501422][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 899.514060][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 899.526584][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 899.538995][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 899.551342][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 899.563683][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 899.576023][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 899.588496][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 903.816414][ T5821] Bluetooth: hci2: command tx timeout [ 904.479848][ C0] net_ratelimit: 20799 callbacks suppressed [ 904.479848][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 904.479870][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 904.486207][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 904.498265][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 904.510184][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 904.522157][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 904.534858][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 904.546615][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 904.558438][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 904.570807][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 906.856815][ T5821] Bluetooth: hci2: command tx timeout [ 909.490277][ C1] net_ratelimit: 22125 callbacks suppressed [ 909.490286][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 909.490299][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 909.490726][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 909.496697][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 909.508624][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 909.520644][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 909.532585][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 909.544930][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 909.556541][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 909.568609][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 909.715926][T13572] Bluetooth: hci5: command 0x0406 tx timeout [ 914.499779][ C1] net_ratelimit: 22135 callbacks suppressed [ 914.499802][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 914.499824][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 914.506106][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 914.518095][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 914.530135][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 914.542147][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 914.554127][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 914.566173][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 914.577947][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 914.589950][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 919.509834][ C0] net_ratelimit: 22465 callbacks suppressed [ 919.509856][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 919.510044][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 919.516243][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 919.528152][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 919.540159][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 919.552100][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 919.564138][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 919.576065][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 919.587960][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 919.599873][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 924.519773][ C1] net_ratelimit: 22303 callbacks suppressed [ 924.519796][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 924.519817][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 924.526179][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 924.538226][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 924.550434][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 924.562167][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 924.574354][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 924.586582][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 924.598240][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 924.610288][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 929.529804][ C1] net_ratelimit: 21573 callbacks suppressed [ 929.529827][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 929.529995][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 929.536285][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 929.548145][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 929.560325][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 929.572055][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 929.584206][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 929.595999][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 929.608120][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 929.619987][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 934.539797][ C0] net_ratelimit: 21947 callbacks suppressed [ 934.539822][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 934.540024][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 934.546241][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 934.558073][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 934.570055][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 934.581875][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 934.594015][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 934.605856][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 934.618039][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 934.629795][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 939.549824][ C0] net_ratelimit: 22168 callbacks suppressed [ 939.549847][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 939.549933][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 939.556251][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 939.568134][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 939.580146][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 939.591889][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 939.604077][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 939.615962][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 939.628094][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 939.640103][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 944.560072][ C1] net_ratelimit: 22159 callbacks suppressed [ 944.560095][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 944.560113][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 944.566520][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 944.578488][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 944.590376][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 944.602279][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 944.614268][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 944.626146][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 944.638089][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 944.650159][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 949.498573][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 949.531961][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 949.569958][ C1] net_ratelimit: 21894 callbacks suppressed [ 949.569974][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 949.569979][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 949.570383][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 949.576548][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 949.588387][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 949.600386][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 949.612185][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 949.624273][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 949.636183][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 949.648227][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 952.380866][ T42] kworker/1:1 (42) used greatest stack depth: 13160 bytes left [ 954.579784][ C0] net_ratelimit: 23017 callbacks suppressed [ 954.579807][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 954.579898][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 954.586217][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 954.598086][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 954.610150][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 954.621899][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 954.634314][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 954.645816][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 954.657927][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 954.669763][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 959.589822][ C0] net_ratelimit: 21925 callbacks suppressed [ 959.589846][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 959.589873][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 959.596993][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 959.608129][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 959.620082][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 959.631972][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 959.643979][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 959.656326][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 959.668330][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 959.680186][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 964.600160][ C0] net_ratelimit: 22105 callbacks suppressed [ 964.600183][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 964.600197][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 964.600625][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 964.606573][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 964.618500][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 964.630592][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 964.642683][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 964.654651][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 964.666486][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 964.678450][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 969.610032][ C1] net_ratelimit: 22119 callbacks suppressed [ 969.610054][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 969.610057][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 969.610392][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 969.616472][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 969.628375][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 969.640351][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 969.652233][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 969.664236][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 969.676104][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 969.688180][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 974.619757][ C1] net_ratelimit: 22019 callbacks suppressed [ 974.619778][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 974.619836][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 974.626133][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 974.638102][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 974.650051][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 974.661926][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 974.673953][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 974.685772][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 974.697821][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 974.709812][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 979.629791][ C1] net_ratelimit: 22320 callbacks suppressed [ 979.629813][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 979.629975][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 979.636153][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 979.648180][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 979.660043][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 979.672014][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 979.683813][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 979.695883][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 979.707763][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 979.719859][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 984.640067][ C1] net_ratelimit: 21863 callbacks suppressed [ 984.640090][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 984.640111][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 984.646439][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 984.658556][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 984.670457][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 984.682528][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 984.694349][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 984.706322][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 984.718274][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 984.730163][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 989.649947][ C1] net_ratelimit: 21928 callbacks suppressed [ 989.649970][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 989.649983][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 989.650429][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 989.656356][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 989.668392][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 989.680341][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 989.692263][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 989.704190][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 989.716065][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 989.728022][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 994.659802][ C1] net_ratelimit: 21826 callbacks suppressed [ 994.659816][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 994.659826][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 994.660261][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 994.666223][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 994.678218][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 994.690146][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 994.702156][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 994.714124][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 994.726170][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 994.738085][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 999.670081][ C1] net_ratelimit: 22541 callbacks suppressed [ 999.670105][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 999.670167][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 999.676413][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 999.688534][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 999.700415][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 999.712413][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 999.724398][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 999.736336][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 999.748406][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 999.760308][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1004.679758][ C1] net_ratelimit: 21781 callbacks suppressed [ 1004.679780][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 1004.679780][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1004.680119][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1004.686154][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 1004.698122][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1004.710112][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 1004.722002][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1004.733954][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 1004.745834][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1004.757836][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 1006.664532][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1009.689762][ C1] net_ratelimit: 21789 callbacks suppressed [ 1009.689786][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 1009.690055][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1009.696171][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 1009.708191][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1009.720053][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 1009.732113][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1009.743978][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 1009.755941][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1009.767841][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 1009.779924][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1010.382521][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1013.589749][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1013.596733][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P18393/1:b..l [ 1013.605291][ C1] rcu: (detected by 1, t=10503 jiffies, g=110793, q=1019 ncpus=2) [ 1013.613201][ C1] task:syz.3.3101 state:R running task stack:25152 pid:18393 tgid:18393 ppid:17384 task_flags:0x400040 flags:0x00080002 [ 1013.628095][ C1] Call Trace: [ 1013.631396][ C1] [ 1013.634343][ C1] __schedule+0x15dd/0x52d0 [ 1013.638883][ C1] ? __pfx___schedule+0x10/0x10 [ 1013.643745][ C1] ? __pfx___schedule+0x10/0x10 [ 1013.648609][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1013.653751][ C1] preempt_schedule_irq+0x4d/0xa0 [ 1013.658788][ C1] irqentry_exit+0x599/0x620 [ 1013.663389][ C1] ? trace_irq_disable+0x3b/0x150 [ 1013.668422][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1013.674414][ C1] RIP: 0010:rcu_is_watching+0x67/0xb0 [ 1013.679799][ C1] Code: 89 f7 e8 9c 44 85 00 48 c7 c3 98 f9 1d 93 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 34 8b 03 65 ff 0d 69 f2 71 11 <74> 11 83 e0 04 c1 e8 02 5b 41 5e 41 5f e9 c7 da 07 0a cc e8 51 f0 [ 1013.699421][ C1] RSP: 0018:ffffc9000e947000 EFLAGS: 00000286 [ 1013.705517][ C1] RAX: 0000000000eb056c RBX: ffff8880b8733998 RCX: 0000000080000001 [ 1013.713501][ C1] RDX: 0000000000000000 RSI: ffffffff8c27d560 RDI: ffffffff8c27d520 [ 1013.721485][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1013.729470][ C1] R10: ffffc9000e9471b8 R11: ffffffff81b0dc10 R12: 0000000000000002 [ 1013.737454][ C1] R13: ffffffff8e75e5a0 R14: ffffffff8e1b4798 R15: dffffc0000000000 [ 1013.745443][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1013.751626][ C1] ? save_stack+0x122/0x230 [ 1013.756136][ C1] lock_acquire+0x57/0x2e0 [ 1013.760559][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1013.765683][ C1] ? save_stack+0x122/0x230 [ 1013.770197][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1013.775321][ C1] unwind_next_frame+0xc2/0x23c0 [ 1013.780267][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1013.785398][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1013.790525][ C1] ? stack_trace_save+0xa9/0x100 [ 1013.795477][ C1] ? save_stack+0x122/0x230 [ 1013.799986][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1013.806144][ C1] arch_stack_walk+0x11b/0x150 [ 1013.810922][ C1] ? save_stack+0x122/0x230 [ 1013.815441][ C1] stack_trace_save+0xa9/0x100 [ 1013.820215][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1013.825605][ C1] save_stack+0x122/0x230 [ 1013.829942][ C1] ? __pfx_save_stack+0x10/0x10 [ 1013.834812][ C1] ? page_ext_put+0x97/0xc0 [ 1013.839331][ C1] __reset_page_owner+0x71/0x1f0 [ 1013.844276][ C1] __free_frozen_pages+0xc2b/0xdb0 [ 1013.849405][ C1] __slab_free+0x263/0x2b0 [ 1013.853844][ C1] qlist_free_all+0x97/0x100 [ 1013.858441][ C1] ? vm_area_alloc+0x24/0x140 [ 1013.863140][ C1] kasan_quarantine_reduce+0x148/0x160 [ 1013.868615][ C1] __kasan_slab_alloc+0x22/0x80 [ 1013.873479][ C1] kmem_cache_alloc_noprof+0x2bc/0x650 [ 1013.878946][ C1] ? vm_area_alloc+0x24/0x140 [ 1013.883631][ C1] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 1013.889273][ C1] vm_area_alloc+0x24/0x140 [ 1013.893788][ C1] mmap_region+0x10e0/0x22a0 [ 1013.898407][ C1] ? __pfx_mmap_region+0x10/0x10 [ 1013.903375][ C1] ? mas_next_slot+0xc20/0xcf0 [ 1013.908157][ C1] ? mas_prev_slot+0xb31/0xbb0 [ 1013.913010][ C1] ? bpf_lsm_mmap_addr+0x9/0x50 [ 1013.917869][ C1] ? security_mmap_addr+0x71/0x240 [ 1013.923001][ C1] do_mmap+0xc39/0x10c0 [ 1013.927180][ C1] ? __pfx_do_mmap+0x10/0x10 [ 1013.931776][ C1] ? down_write_killable+0x180/0x240 [ 1013.937073][ C1] ? __pfx_down_write_killable+0x10/0x10 [ 1013.942716][ C1] ? apparmor_mmap_file+0x197/0x3e0 [ 1013.947924][ C1] ? security_mmap_file+0x4df/0xa20 [ 1013.953133][ C1] vm_mmap_pgoff+0x2c9/0x4f0 [ 1013.957735][ C1] ? __se_sys_futex+0x3a8/0x450 [ 1013.962595][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1013.967718][ C1] ? rcu_is_watching+0x15/0xb0 [ 1013.972499][ C1] ? ksys_mmap_pgoff+0xf3/0x760 [ 1013.977362][ C1] ? __x64_sys_mmap+0x7f/0x140 [ 1013.982138][ C1] do_syscall_64+0x14d/0xf80 [ 1013.986737][ C1] ? trace_irq_disable+0x3b/0x150 [ 1013.991761][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.997835][ C1] ? clear_bhb_loop+0x40/0x90 [ 1014.002521][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.008421][ C1] RIP: 0033:0x7f8fd359c582 [ 1014.012847][ C1] RSP: 002b:00007f8fd393faf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1014.021283][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8fd359c582 [ 1014.029260][ C1] RDX: 0000000000000000 RSI: 0000000000402000 RDI: 0000000000000000 [ 1014.037237][ C1] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 1014.045214][ C1] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000003 [ 1014.053198][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 00007f8fd3815fa0 [ 1014.061192][ C1] [ 1014.064217][ C1] rcu: rcu_preempt kthread starved for 3262 jiffies! g110793 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1014.075413][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1014.085392][ C1] rcu: RCU grace-period kthread stack dump: [ 1014.091309][ C1] task:rcu_preempt state:R running task stack:27648 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1014.104814][ C1] Call Trace: [ 1014.108102][ C1] [ 1014.111314][ C1] __schedule+0x15dd/0x52d0 [ 1014.115835][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1014.120804][ C1] ? __pfx___schedule+0x10/0x10 [ 1014.125678][ C1] ? schedule+0x90/0x360 [ 1014.129934][ C1] schedule+0x164/0x360 [ 1014.134103][ C1] schedule_timeout+0x158/0x2c0 [ 1014.138968][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1014.144348][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1014.149671][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1014.155489][ C1] ? prepare_to_swait_event+0x340/0x370 [ 1014.161051][ C1] rcu_gp_fqs_loop+0x312/0x11d0 [ 1014.165920][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1014.171131][ C1] ? rcu_gp_init+0x1315/0x15b0 [ 1014.175911][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1014.182075][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1014.187368][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1014.192586][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1014.198403][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 1014.203012][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1014.208220][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1014.214047][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 1014.218998][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 1014.224044][ C1] kthread+0x388/0x470 [ 1014.228127][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1014.233343][ C1] ? __pfx_kthread+0x10/0x10 [ 1014.237943][ C1] ret_from_fork+0x51e/0xb90 [ 1014.242544][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1014.247667][ C1] ? __switch_to+0xc7d/0x1450 [ 1014.252359][ C1] ? __pfx_kthread+0x10/0x10 [ 1014.256960][ C1] ret_from_fork_asm+0x1a/0x30 [ 1014.261753][ C1] [ 1014.264776][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1014.271101][ C1] CPU: 1 UID: 0 PID: 1300 Comm: aoe_tx0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1014.281704][ C1] Tainted: [L]=SOFTLOCKUP [ 1014.286034][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1014.296099][ C1] RIP: 0010:unwind_next_frame+0x1c6/0x23c0 [ 1014.301941][ C1] Code: 24 10 74 08 4c 89 ff e8 e8 86 b9 00 4d 8b 27 48 83 f3 01 48 c7 c2 c0 a4 c9 8b 49 29 dc 0f 84 b2 02 00 00 49 81 fc 00 00 00 81 <0f> 92 c0 49 81 fc b8 8a b3 8b 0f 93 c1 08 c1 0f 85 05 01 00 00 48 [ 1014.321562][ C1] RSP: 0018:ffffc90000a07db8 EFLAGS: 00000206 [ 1014.327645][ C1] RAX: 1ffff92000140fda RBX: 0000000000000001 RCX: 0000000080000102 [ 1014.335626][ C1] RDX: ffffffff8bc9a4c0 RSI: ffffffff8c27d560 RDI: ffffffff8c27d520 [ 1014.343614][ C1] RBP: dffffc0000000000 R08: ffffffff81768a55 R09: ffffffff8e75e5a0 [ 1014.351600][ C1] R10: ffffc90000a07ed8 R11: ffffffff81b0dc10 R12: ffffffff8a846d6c [ 1014.359580][ C1] R13: ffffc90000a07ed8 R14: ffffc90000a07e88 R15: ffffc90000a07ed0 [ 1014.367557][ C1] FS: 0000000000000000(0000) GS:ffff888125554000(0000) knlGS:0000000000000000 [ 1014.376497][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1014.383092][ C1] CR2: 00007f6d64415f40 CR3: 000000007b4ea000 CR4: 00000000003526f0 [ 1014.391082][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 00000000dc5f4281 [ 1014.399069][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1014.407051][ C1] Call Trace: [ 1014.410337][ C1] [ 1014.413191][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1014.418321][ C1] ? br_nf_hook_thresh+0x3dd/0x4c0 [ 1014.423442][ C1] ? br_nf_hook_thresh+0x3dd/0x4c0 [ 1014.428565][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1014.434723][ C1] arch_stack_walk+0x11b/0x150 [ 1014.439510][ C1] ? br_nf_hook_thresh+0x3dd/0x4c0 [ 1014.444637][ C1] ? skb_clone+0x212/0x3a0 [ 1014.449063][ C1] stack_trace_save+0xa9/0x100 [ 1014.453830][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1014.459208][ C1] ? NF_HOOK+0xa2/0x6e0 [ 1014.463372][ C1] ? NF_HOOK+0x64e/0x6e0 [ 1014.467632][ C1] kasan_save_track+0x3e/0x80 [ 1014.472317][ C1] ? kasan_save_track+0x3e/0x80 [ 1014.477174][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 1014.482205][ C1] ? kmem_cache_alloc_noprof+0x2bc/0x650 [ 1014.487843][ C1] ? skb_clone+0x212/0x3a0 [ 1014.492269][ C1] ? br_flood+0x6cb/0xb80 [ 1014.496606][ C1] ? br_handle_frame_finish+0x14c2/0x1bb0 [ 1014.502337][ C1] ? br_nf_hook_thresh+0x3dd/0x4c0 [ 1014.507500][ C1] __kasan_slab_alloc+0x6c/0x80 [ 1014.512361][ C1] kmem_cache_alloc_noprof+0x2bc/0x650 [ 1014.517825][ C1] ? skb_clone+0x212/0x3a0 [ 1014.522249][ C1] ? br_handle_vlan+0x61/0x530 [ 1014.527018][ C1] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 1014.532665][ C1] skb_clone+0x212/0x3a0 [ 1014.536923][ C1] br_flood+0x6cb/0xb80 [ 1014.541103][ C1] br_handle_frame_finish+0x14c2/0x1bb0 [ 1014.546667][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 1014.551972][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1014.557890][ C1] ? ip6t_do_table+0x1c3/0x1560 [ 1014.562751][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 1014.567866][ C1] ? nf_hook_slow+0x176/0x220 [ 1014.572549][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1014.578455][ C1] br_nf_hook_thresh+0x3dd/0x4c0 [ 1014.583415][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 1014.588890][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1014.594797][ C1] ? nf_nat_ipv6_in+0x203/0x2c0 [ 1014.599664][ C1] br_nf_pre_routing_finish_ipv6+0xa3a/0xd70 [ 1014.605649][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1014.611569][ C1] br_nf_pre_routing_ipv6+0x374/0x6f0 [ 1014.616949][ C1] ? br_nf_pre_routing_ipv6+0x421/0x6f0 [ 1014.622506][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 1014.628415][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 1014.634922][ C1] ? br_nf_pre_routing+0x75f/0x14c0 [ 1014.640146][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 1014.645617][ C1] br_handle_frame+0x1277/0x1510 [ 1014.650573][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 1014.655865][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1014.661777][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 1014.667154][ C1] __netif_receive_skb_core+0x98f/0x31a0 [ 1014.672797][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1014.677758][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1014.682710][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 1014.688797][ C1] ? lock_acquire+0xf0/0x2e0 [ 1014.693407][ C1] ? process_backlog+0x3eb/0x1950 [ 1014.698438][ C1] ? process_backlog+0x3eb/0x1950 [ 1014.699767][ C0] net_ratelimit: 20983 callbacks suppressed [ 1014.699782][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1014.703462][ C1] ? process_backlog+0x3eb/0x1950 [ 1014.709817][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1014.721297][ C1] process_backlog+0x76d/0x1950 [ 1014.721336][ C1] __napi_poll+0xae/0x340 [ 1014.726883][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1014.738373][ C1] ? skb_defer_free_flush+0x233/0x260 [ 1014.738397][ C1] net_rx_action+0x627/0xf70 [ 1014.738427][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1014.743913][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1014.747572][ C1] ? try_to_wake_up+0x7fc/0x1390 [ 1014.759993][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1014.764781][ C1] handle_softirqs+0x22a/0x870 [ 1014.769819][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1014.774439][ C1] ? do_softirq+0x76/0xd0 [ 1014.786805][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1014.791220][ C1] ? __dev_queue_xmit+0x277/0x3890 [ 1014.791249][ C1] do_softirq+0x76/0xd0 [ 1014.803686][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1014.807933][ C1] [ 1014.820290][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1014.824100][ C1] [ 1014.824111][ C1] __local_bh_enable_ip+0xf8/0x130 [ 1014.836631][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1014.841278][ C1] ? __dev_queue_xmit+0x277/0x3890 [ 1014.841306][ C1] __dev_queue_xmit+0x1e78/0x3890 [ 1014.902286][ C1] ? __dev_queue_xmit+0x277/0x3890 [ 1014.907422][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1014.912391][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1014.917793][ C1] ? ref_tracker_free+0x693/0x840 [ 1014.922850][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1014.928071][ C1] tx+0x6b/0x190 [ 1014.931649][ C1] ? __pfx_tx+0x10/0x10 [ 1014.935820][ C1] kthread+0x1e0/0x3f0 [ 1014.939991][ C1] ? __pfx_kthread+0x10/0x10 [ 1014.944677][ C1] ? __pfx_default_wake_function+0x10/0x10 [ 1014.950595][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 1014.955565][ C1] kthread+0x388/0x470 [ 1014.959649][ C1] ? __pfx_kthread+0x10/0x10 [ 1014.964258][ C1] ? __pfx_kthread+0x10/0x10 [ 1014.968930][ C1] ret_from_fork+0x51e/0xb90 [ 1014.973541][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1014.978677][ C1] ? __switch_to+0xc7d/0x1450 [ 1014.983380][ C1] ? __pfx_kthread+0x10/0x10 [ 1014.987994][ C1] ret_from_fork_asm+0x1a/0x30 [ 1014.992788][ C1] [ 1019.709771][ C0] net_ratelimit: 21839 callbacks suppressed [ 1019.709793][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1019.709983][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 1019.716136][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1019.728041][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 1019.740091][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1019.751810][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 1019.763876][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1019.775769][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:26:be:53:77:43:8c, vlan:0) [ 1019.787682][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1019.799535][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:be:53:77:43:8c, vlan:0)