last executing test programs: 16m55.460970964s ago: executing program 0 (id=1750): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000001}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x0, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r5, &(0x7f00000000c0)='syz1\x00', 0x1ff) sendfile(r6, r6, 0x0, 0x9) 16m54.381622733s ago: executing program 0 (id=1753): socket$igmp(0x2, 0x3, 0x2) socket$inet(0x2, 0x3, 0x2) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x21) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000040)={0x11080}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x8000) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r7, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x2c, 0x453, 0x10, 0x70bd28, 0x25dfdbfd, "14cc80e14bb9532b0629d5b4af93f30fdc401f52eb0e4acb19"}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r8 = socket$inet(0x2, 0x3, 0x100) setsockopt$sock_int(r8, 0x1, 0x6, 0x0, 0x0) bind$inet(r8, &(0x7f00000004c0)={0x2, 0x0, @loopback}, 0x10) connect$inet(r8, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000000c0)="48000000140081fb7059ae08060c040002ff0f03f1cd823010a7ce9000000000000ec000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a0200000046", 0x48}], 0x1}, 0x4000000) 16m52.458557944s ago: executing program 0 (id=1755): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x40}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000003c0)=@name={0x1e, 0x2, 0x3, {{0x1, 0x3}, 0x1}}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r5, 0x67740e30fb7627ff, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r7, 0x0, 0x0, 0x40800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000580)=@sack_info={0x0, 0x1}, &(0x7f0000000600)=0xc) recvmsg(r7, 0x0, 0xf0ff) 16m49.656447197s ago: executing program 0 (id=1761): madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x16) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) futex(0x0, 0x8c, 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x20) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) map_shadow_stack(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) 16m48.811354728s ago: executing program 0 (id=1763): bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x80000, @mcast1={0xff, 0x5}}, 0x6d) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x32, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, 0x0) write$vhost_msg_v2(r1, 0x0, 0x0) write$vhost_msg_v2(r1, &(0x7f0000002b00)={0x2, 0x0, {&(0x7f00000004c0)=""/26, 0xfffffc26, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r1, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000002c40)={0x2020}, 0x2020) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)}, 0x200a4800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000cc0)="adf802e5370fae9d6dcd3292ea54c7beef915d564c", 0x15) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040), 0x0, 0x40800) 16m47.634895869s ago: executing program 0 (id=1768): syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000780)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x80, 0x7f}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0xc, 0x1000, 0x204, 0x4576, 0x4, 0x2, 0x4, 0x2}, &(0x7f0000000240)=0x20) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x6, &(0x7f00000000c0)={0x14, {{0x29, 0x0, 0x4fffffd, @private1={0xfc, 0x1, '\x00', 0x1}}}}, 0x88) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r5) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r6, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) syz_open_dev$tty20(0xc, 0x4, 0x1) close(r3) r7 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r7, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) sendto(0xffffffffffffffff, &(0x7f0000000200)='9', 0x1, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) ioctl$SIOCSIFHWADDR(r3, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) 16m47.274024762s ago: executing program 32 (id=1768): syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000780)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x80, 0x7f}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0xc, 0x1000, 0x204, 0x4576, 0x4, 0x2, 0x4, 0x2}, &(0x7f0000000240)=0x20) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x6, &(0x7f00000000c0)={0x14, {{0x29, 0x0, 0x4fffffd, @private1={0xfc, 0x1, '\x00', 0x1}}}}, 0x88) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r5) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r6, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) syz_open_dev$tty20(0xc, 0x4, 0x1) close(r3) r7 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r7, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) sendto(0xffffffffffffffff, &(0x7f0000000200)='9', 0x1, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) ioctl$SIOCSIFHWADDR(r3, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) 10m24.044149449s ago: executing program 5 (id=2611): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40904}, 0x20040814) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x101200, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fanotify_init(0x4, 0x40000) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f00000006c0), 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) syz_open_procfs$pagemap(0x0, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[], 0x5) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r6, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r6, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 10m21.807467234s ago: executing program 5 (id=2619): r0 = socket$kcm(0x11, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000180)=0x358, 0x4) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x7}, 0x2) r2 = fsmount(0xffffffffffffffff, 0x0, 0xc) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="2de77a1838849409fa470f58613f6c3d8e75b7b2d7e7636efab8c1825d728d220100005132a2852bf89906ce2f624b412e8422346f6e529166826e6bdcb89e6373213dde2e89539a8db845376f8cb55ca571ec32b98357eb72ab779511dd3755310f8c11e031fd61b801705d0e29531e21c0c855b08ea95680ac83a6e1e521d91d8c3c9f8bc1c177e241d292db6566dc6a602577271436ac6d47ddf0d8b093ba3f797d61b8e4a99fb2c1cff3d8e354438ded14358943dbf994"], 0x1f) r4 = getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r6], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) syz_pidfd_open(r4, 0x0) setns(r2, 0x4000080) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000e00)=@newtaction={0x488, 0x30, 0x12f, 0x3c, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0xb, 0x4, 0x0, 0x8d, 0x0, 0x7ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xa4f, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1000, 0x10, 0xfffffffd, 0x3, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x1, 0x8000000, 0x0, 0x0, 0x11, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x3, 0xb2e4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x100, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x934, 0x7, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000000, 0x0, 0x7, 0x0, 0x81, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000, 0x0, 0x0, 0x7, 0x3, 0x8, 0xfffffffe, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffff3bac, 0xd, 0x2, 0x2000, 0x3, 0x0, 0x0, 0xfffffffe, 0xffffffd1, 0x480000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a3, 0x0, 0x6, 0x7ff, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x713b, 0x0, 0x0, 0x0, 0xffff, 0x1000000, 0xffffffff, 0x2, 0xfffffffd, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce2, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x2000000, 0xfffffff9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x10000000, 0x7, 0xff, 0x0, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x3, 0xbed}, {0x0, 0xf6c5d7a4e5a498ca, 0x1000, 0x8}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x4044840}, 0x44004) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x64) openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x143041, 0x0) 10m21.615447733s ago: executing program 5 (id=2620): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0) r1 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r2, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000380)={0x40, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000340)}) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x70bd25, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x47, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0xfffffffd, 0x0, 0xffffffffffffffff, 0x0, 0x40}}, @TCA_CTINFO_ZONE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000500)={0x5, 0x2, &(0x7f00000001c0)=[0x3, 0x9ac1], &(0x7f0000000280)=[0xfffd, 0x6, 0x4000, 0x2000, 0x0, 0x400, 0x101], &(0x7f0000000480)=[0x6], &(0x7f00000004c0)=[0xfff, 0xe2f, 0x8000, 0x5, 0x3ff, 0xd, 0x6]}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, 0x0, 0x0) setsockopt$sock_int(r9, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000140)=0xc) sendmsg$nl_xfrm(r8, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="bc0000002000010026bd7000fcdbdf256c000000ac140200000000000000000000000000fc0000000000000000000000000000004e2300054e210401020080802b000000", @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="28001a00fe800000000000000000000000000040fe8000000000000000000000000000aa02000c0314000d00fe8000000000000000000000000000bb14000e0000000000000000000000ffffe000000214000e00ffffffff0000000000000000000000000a0010000000000000000000"], 0xbc}, 0x1, 0x0, 0x0, 0x40010}, 0x8048) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x840) write$nci(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="710509710c048003240504020305"], 0x17) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r11 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_inet_tcp_SIOCINQ(r11, 0x541b, &(0x7f0000000000)) sendmsg$IPSET_CMD_SAVE(r11, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, 0x8, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x4040010) 10m15.926927452s ago: executing program 5 (id=2633): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESHEX=r2, @ANYRESHEX=r0, @ANYRESHEX=r1, @ANYRES32, @ANYRES64=r1], 0x50) r3 = socket$packet(0x11, 0x3, 0x300) dup(r3) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a54000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a320000000008000a40ffffff78"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) close(r6) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) 10m13.741793693s ago: executing program 5 (id=2636): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x9b) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x7, &(0x7f0000000300)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x10, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000b65994efdbb16a4586ab8445732f6abfaee208d6c9c22c3261257718312d6d137d93b57003f119d089a01f8f8aef62d0fcd267ee7cff07c09904a079a99cda2c0b258277e2b5ddbe722d0c"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000020000000000000060b400001811", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r6, r4, 0x25, 0x0, @void}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000100)={'xfrm0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10, 0x3d, 0xffffffff, 0x3, 0x4, 0x3, 0x1, 0x3, 0x101}}) syz_emit_ethernet(0x10c2, &(0x7f00000004c0)=ANY=[], 0x0) write$sndseq(r2, &(0x7f00000005c0)=[{0x3, 0x5, 0x5, 0xff, @tick=0x7fff, {0x1, 0x10}, {0x3, 0x10}, @raw8={"3383c1d8ab201201b5493755"}}], 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x20, 0x40, 0x107, 0x70bd2c, 0x25dfdbfa, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) 10m12.449697416s ago: executing program 5 (id=2638): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, 0x0, &(0x7f00000002c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$set_reqkey_keyring(0x6, 0xfffffffffffffffb) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x1, 0x0, 0x9, 0xffffffffffffffff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x2c) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x4) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) socket(0x1e, 0x800, 0x9) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000540)=""/4114, 0x1012}], 0x1) setsockopt$inet6_buf(r2, 0x29, 0x6, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="240000002100df4c2abd70c6270000220000e900104e88cb7634ce58ea22000000000100"], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x2ffe, 0x2) socket$unix(0x1, 0x5, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000000)=0x1) 9m55.810090742s ago: executing program 33 (id=2638): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, 0x0, &(0x7f00000002c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$set_reqkey_keyring(0x6, 0xfffffffffffffffb) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x1, 0x0, 0x9, 0xffffffffffffffff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x2c) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x4) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) socket(0x1e, 0x800, 0x9) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000540)=""/4114, 0x1012}], 0x1) setsockopt$inet6_buf(r2, 0x29, 0x6, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="240000002100df4c2abd70c6270000220000e900104e88cb7634ce58ea22000000000100"], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x2ffe, 0x2) socket$unix(0x1, 0x5, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000000)=0x1) 6m8.281746995s ago: executing program 4 (id=3083): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40904}, 0x20040814) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x101200, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fanotify_init(0x4, 0x40000) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f00000006c0), 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) syz_open_procfs$pagemap(0x0, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r6, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r6, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 5m52.922027374s ago: executing program 4 (id=3106): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, 0x0, &(0x7f00000002c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$set_reqkey_keyring(0x6, 0xfffffffffffffffb) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x1, 0x0, 0x9, 0xffffffffffffffff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x2c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) socket(0x1e, 0x800, 0x9) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000540)=""/4114, 0x1012}], 0x1) setsockopt$inet6_buf(r2, 0x29, 0x6, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="240000002100df4c2abd70c6270000220000e900104e88cb7634ce58ea22000000000100"], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x2ffe, 0x2) socket$unix(0x1, 0x5, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000000c0)=@mmap={0x1, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x5, 0x0, 0x1, "bf631e4b"}}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1) 5m40.239135517s ago: executing program 4 (id=3129): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = getpid() r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r5, &(0x7f0000004180)={0x0, 0x0, &(0x7f0000004140)={&(0x7f0000004100)={0x28, 0x3ed, 0x100, 0x70bd26, 0x25dfdbfc, "1c36d5c1aec6ec7f1c830b3f85d0044c66aa808eeda5e38a", ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f00000003c0)={{0xa, 0x6, 0x6, 0x0, 'syz1\x00', 0x401}, 0x3, 0x20000000, 0x6, r4, 0x0, 0x3, 'syz0\x00', 0x0}) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe06010000040002", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f00000040c0)=r0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r7, &(0x7f0000000000)={0x2020}, 0x96) close(r6) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000080)={'wlan1\x00', &(0x7f0000000000)=@ethtool_cmd={0x1f, 0x0, 0x1, 0x9, 0xf7, 0x75, 0x8, 0x1, 0xdc, 0xfe, 0x100, 0x8, 0x6, 0x8, 0x8, 0x4, [0x3, 0x7]}}) read$FUSE(r7, &(0x7f0000002080)={0x2020}, 0x2020) 5m38.321830573s ago: executing program 4 (id=3131): r0 = socket$kcm(0x11, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000180)=0x358, 0x4) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x7}, 0x2) r4 = fsmount(0xffffffffffffffff, 0x0, 0xc) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, 0x0, 0x1f) r6 = getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r8], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) syz_pidfd_open(r6, 0x0) setns(r4, 0x4000080) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000e00)=@newtaction={0x488, 0x30, 0x12f, 0x3c, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0xb, 0x4, 0x0, 0x8d, 0x0, 0x7ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xa4f, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1000, 0x10, 0xfffffffd, 0x3, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x1, 0x8000000, 0x0, 0x0, 0x11, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x3, 0xb2e4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x100, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x934, 0x7, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000000, 0x0, 0x7, 0x0, 0x81, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000, 0x0, 0x0, 0x7, 0x3, 0x8, 0xfffffffe, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffff3bac, 0xd, 0x2, 0x2000, 0x3, 0x0, 0x0, 0xfffffffe, 0xffffffd1, 0x480000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a3, 0x0, 0x6, 0x7ff, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x713b, 0x0, 0x0, 0x0, 0xffff, 0x1000000, 0xffffffff, 0x2, 0xfffffffd, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce2, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x2000000, 0xfffffff9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x10000000, 0x7, 0xff, 0x0, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x3, 0xbed}, {0x0, 0xf6c5d7a4e5a498ca, 0x1000, 0x8}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x4044840}, 0x44004) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x64) openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x143041, 0x0) 5m36.240961783s ago: executing program 4 (id=3134): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00010000316f0600280012800b00010067656e65766500001800028014000700fe880000000000000000000080000001"], 0x48}}, 0x2000000) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socket$netlink(0x10, 0x3, 0xf) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r8 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) ftruncate(r8, 0x2000000) fcntl$addseals(r8, 0x409, 0x7) ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000000000)={r8, 0x1f, 0x0, 0x1000000}) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000500)=@userptr={0x6, 0xa, 0x4, 0x1, 0x98000, {0x0, 0x2710}, {0x1, 0xc, 0xd2, 0x6, 0x77, 0x6, "0080ca6f"}, 0xff, 0x2, {&(0x7f00000002c0)}, 0x6}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 5m33.310149113s ago: executing program 4 (id=3139): socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r4) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f00000084c0)={0x0, 0x0, &(0x7f0000008480)={&(0x7f00000082c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd7000fddbdf250f0003000e0001006e657464657673696d0000000f0002006e657464657673696d30000051fe0b00018000000600110040000000"], 0x44}, 0x1, 0x0, 0x0, 0x24000084}, 0x40080) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f00000004c0)={0x14, r7, 0x4, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', 0x8, 0x1) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00}) socket(0x2b, 0xa, 0x7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1001}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r10 = dup(r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x12, r10, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 5m16.88238848s ago: executing program 34 (id=3139): socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r4) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f00000084c0)={0x0, 0x0, &(0x7f0000008480)={&(0x7f00000082c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd7000fddbdf250f0003000e0001006e657464657673696d0000000f0002006e657464657673696d30000051fe0b00018000000600110040000000"], 0x44}, 0x1, 0x0, 0x0, 0x24000084}, 0x40080) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f00000004c0)={0x14, r7, 0x4, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', 0x8, 0x1) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00}) socket(0x2b, 0xa, 0x7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1001}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r10 = dup(r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x12, r10, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 4m24.201077305s ago: executing program 1 (id=3230): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c000000030000000100000000"], 0x0, 0x37}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x28) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000440)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0x1508}, 0x1, 0x0, 0x0, 0x40000d0}, 0x10) writev(r6, &(0x7f0000000040), 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e21, 0x4, @mcast1, 0x5}], 0x2c) sendto$inet6(r5, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x5dc1bd079d9e1c17) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) capget(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000180)={0x10001, 0x3, 0xffffffff, 0x7, 0xfffffff1, 0x5}) ioctl$TIOCL_SETVESABLANK(r7, 0x4b4b, &(0x7f0000000000)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000580)={0x0, 0x0, 0x13}, 0x18) ioctl$CEC_ADAP_G_PHYS_ADDR(0xffffffffffffffff, 0x80026101, &(0x7f0000000080)) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4804) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x300, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xb}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) 4m22.948966513s ago: executing program 1 (id=3231): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x1, 0x10001, 0x5}) r1 = open(&(0x7f0000000240)='./file2\x00', 0x145142, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="15e12eae580296c0186656c204300305d90500000000000000d076509448bcf5cdedd0615f2f97074b6c2abbbfc815fd8ecb52940f8b0e8a8e4018edc231cf23c127b3322b234f76e8d101403ada14220b4d63392e8b548d97f436676ac3e5c4326cecc692072a2fce22efb5e02be7f6746cde0f56f1c6f3c7a1546fd8063ef394244aed893cc574a423248a30a5e9fd7ccd160377ee124a37ae6c1373694cb8524a9c6dcfadb69c8e137fd454bbc149728eceab53177e0b54ad1d07a5dec2ada58f1294258140951d033ab3084ed285fe4ad66a6ffc5952a67cca6ba0643be468665abf5521b24a8c"], 0x6) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) ioprio_set$uid(0x3, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x800000009) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r3, 0x560f, &(0x7f0000000080)={0x1, 0x1, 0x15, 0xf, 0x61, 0x0}) ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000740)={0x18c, 0x0, &(0x7f0000000340)}) r4 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000400)=0x0) read$FUSE(r1, &(0x7f0000000440)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000002480)={{0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x40, 0x1}, 0xcc7, 0x5, 0x7, 0xffffffffffffbc1b, r5, r6, 0x7}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000008c0)={{}, {0x1, 0x1}, [{0x2, 0x3}, {0x2, 0x2}, {0x2, 0x6}, {0x2, 0x1}], {0x4, 0x2}, [{0x8, 0x1}, {0x8, 0x5}, {0x8, 0x1}], {0x10, 0x4}}, 0x5c, 0x2) r7 = openat$binfmt(0xffffffffffffff9c, r4, 0x41, 0x1ff) fcntl$setlease(r7, 0x400, 0x1) r8 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0) landlock_restrict_self(r8, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 4m21.734634628s ago: executing program 1 (id=3235): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$dlm_plock(0xffffff9c, &(0x7f0000000040), 0x20800, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000400", @ANYRES16=r3, @ANYBLOB="020027bd7000fbdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x64040) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000300)=""/59, 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x43, 0x0) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) io_setup(0x1, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000880)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1) pselect6(0x40, &(0x7f0000000240)={0x0, 0x9, 0x1ff, 0x7d, 0x0, 0x8000, 0xffffffffffffffb6, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x2, 0xf, 0x80000006}, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000340)) r9 = dup(r5) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000040)={0x1, r9}) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f00000000c0)={0x1, r9}) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x6) 4m19.899306588s ago: executing program 1 (id=3240): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) getpid() r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r4, &(0x7f0000004180)={0x0, 0x0, &(0x7f0000004140)={&(0x7f0000004100)={0x28, 0x3ed, 0x100, 0x70bd26, 0x25dfdbfc, "1c36d5c1aec6ec7f1c830b3f85d0044c66aa808eeda5e38a", ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe06010000040002", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f00000040c0)=r0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r5, 0x1000) r6 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') close(r5) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000080)={'wlan1\x00', &(0x7f0000000000)=@ethtool_cmd={0x1f, 0x0, 0x1, 0x9, 0xf7, 0x75, 0x8, 0x1, 0xdc, 0xfe, 0x100, 0x8, 0x6, 0x8, 0x8, 0x4, [0x3, 0x7]}}) read$FUSE(r6, &(0x7f0000002080)={0x2020}, 0x2020) 4m17.623986247s ago: executing program 1 (id=3242): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x450000, 0x1a1) fcntl$notify(r1, 0x402, 0x20) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) openat(r1, &(0x7f000000c380)='./file0\x00', 0x20042, 0x101) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40302, 0x0) vmsplice(r2, 0x0, 0x0, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$inet(0x2, 0x6, 0x39ad) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000001d00)={0x2020}, 0xfffffedf) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x151) fcntl$notify(r5, 0x402, 0x8000001f) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r6, 0x40086602, &(0x7f0000000000)) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r8, 0x4048aec9, &(0x7f0000000380)={0x3, 0x0, @ioapic={0x1, 0x0, 0xf, 0x0, 0x0, [{0x2, 0x2, 0x0, '\x00', 0xd}, {0x4e, 0x7d, 0x7, '\x00', 0x9}, {0x0, 0x9, 0xa, '\x00', 0x7}, {0x2, 0x81, 0x1, '\x00', 0x3}, {0x91, 0xb, 0x0, '\x00', 0x6}, {0x7, 0xd, 0x7, '\x00', 0x5}, {0x4, 0x8, 0xf6, '\x00', 0x4}, {0x1, 0xff, 0x8c, '\x00', 0x2}, {0x4, 0x6, 0x8, '\x00', 0x5}, {0x3, 0x81, 0x9, '\x00', 0x4}, {0x6e, 0xd, 0x3f, '\x00', 0x53}, {0x8, 0xf9, 0x5, '\x00', 0x7}, {0x7, 0x5, 0x0, '\x00', 0x80}, {0x5, 0x5, 0x0, '\x00', 0x1}, {0xff, 0x1, 0x2, '\x00', 0x80}, {0x1, 0xc, 0x67, '\x00', 0x3}, {0xfb, 0x4, 0x9, '\x00', 0x7}, {0x7, 0x5, 0xf, '\x00', 0x6}, {0x7, 0xfe, 0x46, '\x00', 0x7f}, {0x7f, 0x0, 0x8, '\x00', 0x7}, {0xf9, 0x5, 0xc, '\x00', 0x5}, {0x5, 0xdd, 0x4, '\x00', 0x5e}, {0x2, 0x9, 0xee, '\x00', 0x1}, {0xf, 0x4c, 0xf7, '\x00', 0x8}]}}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, 0x0, 0x0) 4m16.740728591s ago: executing program 1 (id=3244): socket(0x1e, 0x4, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4004809) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd"], &(0x7f0000000100)='GPL\x00'}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r4, &(0x7f0000007700), 0x318, 0xfc0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) pipe2(0x0, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f00000013c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0, @ANYBLOB="412d2eadec5cc78642b91aafc35dce52e10fb2b66aa891428454dab905e33829e3ba614499e275f1608bb482a7005fbfc1605e3dab61abbe43cf9a12d288db3677a3f205f180360bed647f61aa10f487d01326ea82f7a20a87205f48a04f408138ad52bf806f2aac6a7c2f9460666ba3a3069ac0f8dbe9211bf4fcd86b5ac9825e3107564643955a355bd744cbfc43469fcf35a525f5e98c61fe0edf001d6bda9ba2725b735e701417a27a3cccdb76e96751f377c57ae487fca6adfeec542e66f0125d48f192d33459c5c8e6607ccd5221f49619", @ANYBLOB="308bb182018c0e3e0ff3c511528af37711750d14114cfcb608ac2f3a177259b73f59cecf4a0ae4938c32a26065871256d71c2ce31f36ee9dace143dce2f5e070d512369d4347a500954b3035e0b9db374058d6f3c98d9dd3e905dfc30ed9f1d145e1ac13700bed13b716d1b90a019de167cb3c4b60a05a8151a131f9b71e8dae50f9cf1594e1a90c0eec4e4ae84f0aa5b95efdce0e7d6a83783b7739ebf3da91f9bf26f4cbc035852cce5bb97fd626e0f4b55717c2962798e4237e0f7aba2a3d1442528abfc00934d0a589a88ff1be8b801d", @ANYRESDEC=r2, @ANYRES8=r4, @ANYBLOB="e3b30844143c3357d033048608899a3c440c5c014875f89c5055b141c42f61bd16ff0d73284f0f4c5316d6307604166b8427e84579af33797e08c60f70b5eef56bcae42a3fd0a9c5f2968a84d5a973b66e5fe45000ba638478d66b91e4ea55e0e0ce300d785482f76302b3863e5f46550027a4a13efebfbda3ec265313c7111c182d1d24f94164a595bc951ecbe204257ae8e862b3fbf29ab9527cb8ef2ec27ecfdfe614e513f10a137ed9f1b0fced1e9f04b590e04d290e38b6d3f1b59466339cbcd2cd69cbf28574a99ccb20f4478d2d9965e182e524c45069ea4a725d0f87158300faf0352a79c1b434cfb49005e3cb742b8693c9"], 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8}, 0x94) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000000)={0x3, 0x1, 0xa3f, 0x100, 0x1, 0x5, 0xc}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f00000001c0)={0x5, 0x2, 0xd, 0x10, 0x1000, 0xffff, 0x4}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0x1, 0xffffffffffffffff) r5 = openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000390000/0x4000)=nil, 0x4000, 0x0, 0x10010, r5, 0xab810000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 4m0.431794355s ago: executing program 35 (id=3244): socket(0x1e, 0x4, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4004809) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd"], &(0x7f0000000100)='GPL\x00'}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r4, &(0x7f0000007700), 0x318, 0xfc0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) pipe2(0x0, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f00000013c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0, @ANYBLOB="412d2eadec5cc78642b91aafc35dce52e10fb2b66aa891428454dab905e33829e3ba614499e275f1608bb482a7005fbfc1605e3dab61abbe43cf9a12d288db3677a3f205f180360bed647f61aa10f487d01326ea82f7a20a87205f48a04f408138ad52bf806f2aac6a7c2f9460666ba3a3069ac0f8dbe9211bf4fcd86b5ac9825e3107564643955a355bd744cbfc43469fcf35a525f5e98c61fe0edf001d6bda9ba2725b735e701417a27a3cccdb76e96751f377c57ae487fca6adfeec542e66f0125d48f192d33459c5c8e6607ccd5221f49619", @ANYBLOB="308bb182018c0e3e0ff3c511528af37711750d14114cfcb608ac2f3a177259b73f59cecf4a0ae4938c32a26065871256d71c2ce31f36ee9dace143dce2f5e070d512369d4347a500954b3035e0b9db374058d6f3c98d9dd3e905dfc30ed9f1d145e1ac13700bed13b716d1b90a019de167cb3c4b60a05a8151a131f9b71e8dae50f9cf1594e1a90c0eec4e4ae84f0aa5b95efdce0e7d6a83783b7739ebf3da91f9bf26f4cbc035852cce5bb97fd626e0f4b55717c2962798e4237e0f7aba2a3d1442528abfc00934d0a589a88ff1be8b801d", @ANYRESDEC=r2, @ANYRES8=r4, @ANYBLOB="e3b30844143c3357d033048608899a3c440c5c014875f89c5055b141c42f61bd16ff0d73284f0f4c5316d6307604166b8427e84579af33797e08c60f70b5eef56bcae42a3fd0a9c5f2968a84d5a973b66e5fe45000ba638478d66b91e4ea55e0e0ce300d785482f76302b3863e5f46550027a4a13efebfbda3ec265313c7111c182d1d24f94164a595bc951ecbe204257ae8e862b3fbf29ab9527cb8ef2ec27ecfdfe614e513f10a137ed9f1b0fced1e9f04b590e04d290e38b6d3f1b59466339cbcd2cd69cbf28574a99ccb20f4478d2d9965e182e524c45069ea4a725d0f87158300faf0352a79c1b434cfb49005e3cb742b8693c9"], 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8}, 0x94) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000000)={0x3, 0x1, 0xa3f, 0x100, 0x1, 0x5, 0xc}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f00000001c0)={0x5, 0x2, 0xd, 0x10, 0x1000, 0xffff, 0x4}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0x1, 0xffffffffffffffff) r5 = openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000390000/0x4000)=nil, 0x4000, 0x0, 0x10010, r5, 0xab810000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 1m23.317743119s ago: executing program 3 (id=3603): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}]}, @NFT_MSG_NEWSETELEM={0x38, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xbc}}, 0x0) 1m23.110956864s ago: executing program 3 (id=3606): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$nbd(0x1, 0x1, 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x400, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e26, 0xb, @mcast2, 0x9}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') pread64(r3, 0x0, 0x0, 0x101) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000040)=0x6, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000380)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x86}, 0x40040) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x3) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e65772064656661756c7420757365721c73797a2030303030303030303030303030303430393300"], 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@secondary) keyctl$link(0x8, r4, r5) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r6, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "fb17bd0d63db9115", "d09da2ac6738c8ecbec12f597d11704e486db9ec08633cb7368c4c687e35326e", "d0a482c7", "3dbb7ae258cbe1c8"}, 0x38) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x5, &(0x7f00000006c0)={0x0, 0x0, 0xac1d}) ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f00000000c0)={'lo\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x16}}}) 1m22.041574567s ago: executing program 3 (id=3614): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0xf490d33dd598f159, 0x1000, 0x0, 0x1}, 0x20) 1m21.806890318s ago: executing program 3 (id=3616): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000000000)={0x10, 0x1413, 0x1}, 0x10}}, 0x0) 1m21.691697503s ago: executing program 3 (id=3618): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file1\x00', 0x7f7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f00005ed000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x300}, &(0x7f00000000c0)=0x40) chdir(0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='net_prio.prioidx\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000a300)) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb5", 0x2e}], 0x2}], 0x1, 0x40800) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) r7 = creat(&(0x7f0000000580)='./file1\x00', 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, r7, 0x0) fallocate(r4, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0) socket$netlink(0x10, 0x3, 0xf) 1m20.458848982s ago: executing program 3 (id=3621): sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) write$cgroup_int(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, 0x0) epoll_create1(0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)}}], 0x1, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 1m4.216008329s ago: executing program 36 (id=3621): sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) write$cgroup_int(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, 0x0) epoll_create1(0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)}}], 0x1, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 13.020676692s ago: executing program 7 (id=3894): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) write$cgroup_int(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000220000012bbd7000ffdbdf250280d4d55714e5da04400100"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) r5 = epoll_create1(0x0) r6 = gettid() kcmp$KCMP_EPOLL_TFD(r6, r6, 0x7, r5, &(0x7f00000001c0)={r5, 0xffffffffffffffff, 0xffff}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)}}], 0x1, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r8, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 11.050155613s ago: executing program 7 (id=3896): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x14, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x30000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8007fffe}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x15}}, @printk={@lli}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7f) 9.885445727s ago: executing program 6 (id=3898): r0 = socket$kcm(0x11, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000180)=0x358, 0x4) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x7}, 0x2) r4 = fsmount(0xffffffffffffffff, 0x0, 0xc) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="2de77a1838849409fa470f58613f6c3d8e75b7b2d7e7636efab8c1825d728d220100005132a2852bf89906ce2f624b412e8422346f6e529166826e6bdcb89e6373213dde2e89539a8db845376f8cb55ca571ec32b98357eb72ab779511dd3755310f8c11e031fd61b801705d0e29531e21c0c855b08ea95680ac83a6e1e521d91d8c3c9f8bc1c177e241d292db6566dc6a602577271436ac6d47ddf0d8b093ba3f797d61b8e4a99fb2c1cff3d8e354438ded14358943dbf994"], 0x1f) r6 = getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) syz_pidfd_open(r6, 0x0) setns(r4, 0x4000080) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000e00)=@newtaction={0x488, 0x30, 0x12f, 0x3c, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0xb, 0x4, 0x0, 0x8d, 0x0, 0x7ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xa4f, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1000, 0x10, 0xfffffffd, 0x3, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x1, 0x8000000, 0x0, 0x0, 0x11, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x3, 0xb2e4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x100, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x934, 0x7, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000000, 0x0, 0x7, 0x0, 0x81, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000, 0x0, 0x0, 0x7, 0x3, 0x8, 0xfffffffe, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffff3bac, 0xd, 0x2, 0x2000, 0x3, 0x0, 0x0, 0xfffffffe, 0xffffffd1, 0x480000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a3, 0x0, 0x6, 0x7ff, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x713b, 0x0, 0x0, 0x0, 0xffff, 0x1000000, 0xffffffff, 0x2, 0xfffffffd, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce2, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x2000000, 0xfffffff9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x10000000, 0x7, 0xff, 0x0, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x3, 0xbed}, {0x0, 0xf6c5d7a4e5a498ca, 0x1000, 0x8}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x4044840}, 0x44004) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x64) openat(0xffffffffffffff9c, 0x0, 0x143041, 0x0) 9.666826303s ago: executing program 7 (id=3901): r0 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000340)={0x30a32c0, 0x1, @ofdm={0x5, 0x7, 0x17, 0x13, 0x7, 0xa, 0x1}}) ioctl$FE_GET_EVENT(r0, 0x80286f4e, &(0x7f0000000000)={0x0, {0x0, 0x0, @qam}}) 9.119207881s ago: executing program 7 (id=3904): syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000780)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x80, 0x7f}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) renameat(r3, &(0x7f0000000180)='./file0\x00', r3, &(0x7f00000001c0)='\x00') close(r3) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) r5 = socket$kcm(0x29, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, 0xffffffffffffffff, 0xfffffffffffffe84) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r7 = accept4(r4, 0x0, 0x0, 0x0) sendto(r7, &(0x7f0000000200)='9', 0x1, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)=""/211, 0xd3}}, {{0x0, 0x0, &(0x7f0000004600), 0x2}}, {{0x0, 0x0, &(0x7f0000005c40)=[{0x0, 0x7}], 0x1}}], 0x3, 0x0, &(0x7f0000005ec0)={0x0, 0x3938700}) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) ioctl$SIOCSIFHWADDR(r3, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) r8 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r8, 0x40044590, 0x0) unshare(0x62000280) syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[], 0x0) mount$9p_tcp(&(0x7f00000002c0), &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0), 0xe090, &(0x7f0000000340)=ANY=[]) 8.870047867s ago: executing program 9 (id=3906): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) write$cgroup_int(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000220000012bbd7000ffdbdf250280d4d55714e5da04400100"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) r3 = epoll_create1(0x0) r4 = gettid() kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, r3, &(0x7f00000001c0)={r3, 0xffffffffffffffff, 0xffff}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)}}], 0x1, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r6, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 8.615856001s ago: executing program 9 (id=3907): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000080)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000100)={0x0, &(0x7f0000000040), r1, 0x0, '\x00', 0xfffffe7f, 0x4}) 8.55016792s ago: executing program 6 (id=3908): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc010000000000000000000000000001ac1414bb000000000000000000000000000004001000000002002020840000", @ANYRES32=0x0], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) 8.406746704s ago: executing program 9 (id=3910): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/profiling', 0x0, 0x10c) read$char_usb(r0, &(0x7f0000000340)=""/170, 0xaa) timer_create(0x0, 0x0, &(0x7f0000000300)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbfe, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x380, 0x1e8, 0xb, 0x148, 0x0, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x180, 0x1e8, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0xb, [0x4e20, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e23], [0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "d40b98e613e5c0d53fa5668bfbd8659b9ba9affcbed065733d0012e401764f592fc2c2bfb0e657e39980dd3655cfdfebceab664ab18605949120401237b982613cbdde69fbfbd40e9505ea3909a03f93f0be8cd9870b50e1d8a655f0a2cc7dba129d9af19184e11feeab1ddd11aa07abfef2f0ace242261fac91893e25989bb2", 0x4, 0x8a119efdab096be9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x8, 0x1, '\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xfff3, 0x10}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x8}]}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044004}, 0x40010) r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r10, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) syz_emit_ethernet(0x52, &(0x7f00000000c0)={@local, @dev, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x2, 0x0, 0x1, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@generic={0x7, 0x2}, @timestamp_addr={0x44, 0x14, 0xc, 0x1, 0xf, [{@broadcast, 0xfffffff0}, {@local, 0x8001}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 8.405502411s ago: executing program 6 (id=3920): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x34) fchown(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000f40)=ANY=[@ANYBLOB="0c010000060000000000000000000000040000000000000000000000ff0f000000000000000000002f7379732f06c0a49e4e00000000000000656edf0000000080000100000000008adeb51a38c154cce97c3818f0b5b45830920a254561464beace866339ff36688c24a22cc3a4c9f4c81fa3c277618fc547ad159bfdcc3847ef50bd2a9860eb5dded6d057d3189367185de0fcd00b7bf62cd6a3b1fcbc4738759b48b33b94893149740e9e6dad90d2926929314c67538f347aa4f78f16ee43533b4b6bdc45e01f9ba45985d8807a530cb7f2b27c881b3f8e0a752be8bfdc3ed558e2fd52edc2c85ff00f7f7dc491ca3f8a892459d77503e588909c6b31212b7c188257"], 0x10c) socket(0x29, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000440), 0x211041, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000400)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m', &(0x7f00000000c0)='a\x9aC\x91\xf7?\x00/1|\xa4i3\x17u\x1f:m\xbbt\x0e\x94\xda\x15x\xb9\x97\xbe\xd3S\xf8\xad\x14f\xeb\xf3C0y\xa0', &(0x7f00000003c0)='+[@-\x00']}) socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000004780), 0x80, 0x0) ioctl$TIOCGRS485(r5, 0x542e, &(0x7f00000047c0)) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000040a0102000000000000000000140000050000010073797a30000000"], 0x20}}, 0x0) 7.499105744s ago: executing program 8 (id=3913): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008001}, 0x840) 7.486244762s ago: executing program 8 (id=3914): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x18, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 7.433641949s ago: executing program 8 (id=3915): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000040)={0x18, r1, 0xfffffffffffffffd, 0x1a}) 7.347419086s ago: executing program 6 (id=3916): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80600, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000040)={0xc4, 0x0, 0x6}) 7.29215728s ago: executing program 2 (id=3917): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$nbd(0x1, 0x1, 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x400, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e26, 0xb, @mcast2, 0x9}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') pread64(r3, 0x0, 0x0, 0x101) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000040)=0x6, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000380)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x86}, 0x40040) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x3) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@secondary) keyctl$link(0x8, r4, r5) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r6, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "fb17bd0d63db9115", "d09da2ac6738c8ecbec12f597d11704e486db9ec08633cb7368c4c687e35326e", "d0a482c7", "3dbb7ae258cbe1c8"}, 0x38) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r7, 0x5, &(0x7f00000006c0)={0x0, 0x0, 0xac1d}) ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f00000000c0)={'lo\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x16}}}) 7.190677823s ago: executing program 8 (id=3918): r0 = socket$kcm(0x11, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000180)=0x358, 0x4) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x7}, 0x2) r4 = fsmount(0xffffffffffffffff, 0x0, 0xc) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="2de77a1838849409fa470f58613f6c3d8e75b7b2d7e7636efab8c1825d728d220100005132a2852bf89906ce2f624b412e8422346f6e529166826e6bdcb89e6373213dde2e89539a8db845376f8cb55ca571ec32b98357eb72ab779511dd3755310f8c11e031fd61b801705d0e29531e21c0c855b08ea95680ac83a6e1e521d91d8c3c9f8bc1c177e241d292db6566dc6a602577271436ac6d47ddf0d8b093ba3f797d61b8e4a99fb2c1cff3d8e354438ded14358943dbf994"], 0x1f) r6 = getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) syz_pidfd_open(r6, 0x0) setns(r4, 0x4000080) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000e00)=@newtaction={0x488, 0x30, 0x12f, 0x3c, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0xb, 0x4, 0x0, 0x8d, 0x0, 0x7ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xa4f, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1000, 0x10, 0xfffffffd, 0x3, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x1, 0x8000000, 0x0, 0x0, 0x11, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x3, 0xb2e4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x100, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x934, 0x7, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000000, 0x0, 0x7, 0x0, 0x81, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000, 0x0, 0x0, 0x7, 0x3, 0x8, 0xfffffffe, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffff3bac, 0xd, 0x2, 0x2000, 0x3, 0x0, 0x0, 0xfffffffe, 0xffffffd1, 0x480000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a3, 0x0, 0x6, 0x7ff, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x713b, 0x0, 0x0, 0x0, 0xffff, 0x1000000, 0xffffffff, 0x2, 0xfffffffd, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce2, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x2000000, 0xfffffff9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x10000000, 0x7, 0xff, 0x0, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x3, 0xbed}, {0x0, 0xf6c5d7a4e5a498ca, 0x1000, 0x8}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x4044840}, 0x44004) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x64) openat(0xffffffffffffff9c, 0x0, 0x143041, 0x0) 7.092288553s ago: executing program 9 (id=3919): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000400)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x1d, "dea1d8981aa3a9c188aaf2269615123ca0a2894d756ec481f02e868817"}}) 6.683630722s ago: executing program 9 (id=3921): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$kcm(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x181200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) sendfile(r1, r1, 0x0, 0x101) socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) io_setup(0x1, &(0x7f0000000200)=0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r3, 0x1, &(0x7f0000000880)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r4, 0x0}]) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x4, 0x8, 0x99, 0x6, 0x1, @private0={0xfc, 0x0, '\x00', 0x81}, @remote, 0x10, 0x80, 0x4, 0x2}}) syz_open_dev$usbfs(&(0x7f0000000140), 0x1ff, 0x40000) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4201, 0x10) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2d) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x101ff, 0x0, 0xffffffff, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 6.251164751s ago: executing program 2 (id=3922): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffa}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, 0x1a, r0, 0x8, 0x0, 0xfffffcf6, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 5.702357854s ago: executing program 8 (id=3923): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') open_by_handle_at(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r0], 0xfffe) 5.641112033s ago: executing program 7 (id=3924): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x0, 0xe, 0x0, &(0x7f00000006c0)="ffffffff106c3ed990f77e9eb3cf", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.639366255s ago: executing program 6 (id=3925): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f088a8", 0x0, 0xa62, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.514535163s ago: executing program 2 (id=3926): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x23, 0x3, 0x14, 0x3}, 0x8, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x0}) 5.514038083s ago: executing program 8 (id=3927): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) write$cgroup_int(r2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000220000012bbd7000ffdbdf250280d4d55714e5da04400100"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) r4 = epoll_create1(0x0) r5 = gettid() kcmp$KCMP_EPOLL_TFD(r5, r5, 0x7, r4, &(0x7f00000001c0)={r4, 0xffffffffffffffff, 0xffff}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)}}], 0x1, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r7, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 5.489699015s ago: executing program 2 (id=3928): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x34) fchown(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000f40)=ANY=[@ANYBLOB="0c010000060000000000000000000000040000000000000000000000ff0f000000000000000000002f7379732f06c0a49e4e00000000000000656edf0000000080000100000000008adeb51a38c154cce97c3818f0b5b45830920a254561464beace866339ff36688c24a22cc3a4c9f4c81fa3c277618fc547ad159bfdcc3847ef50bd2a9860eb5dded6d057d3189367185de0fcd00b7bf62cd6a3b1fcbc4738759b48b33b94893149740e9e6dad90d2926929314c67538f347aa4f78f16ee43533b4b6bdc45e01f9ba45985d8807a530cb7f2b27c881b3f8e0a752be8bfdc3ed558e2fd52edc2c85ff00f7f7dc491ca3f8a892459d77503e588909c6b31212b7c188257"], 0x10c) socket(0x29, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000440), 0x211041, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000400)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m', &(0x7f00000000c0)='a\x9aC\x91\xf7?\x00/1|\xa4i3\x17u\x1f:m\xbbt\x0e\x94\xda\x15x\xb9\x97\xbe\xd3S\xf8\xad\x14f\xeb\xf3C0y\xa0', &(0x7f00000003c0)='+[@-\x00']}) socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000004780), 0x80, 0x0) ioctl$TIOCGRS485(r5, 0x542e, &(0x7f00000047c0)) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000040a0102000000000000000000140000050000010073797a30000000"], 0x20}}, 0x0) 4.075707075s ago: executing program 2 (id=3929): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0xe82) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f00000000c0)={0x1c, &(0x7f0000000100)=[{0x22, '\x00', @st={0x4, [{0x3, @svalue=0x7}, {0x2, @svalue=0x3}, {0x2, @svalue=0x9}, {0x0, @svalue}]}, 0x100}]}) 2.056389658s ago: executing program 9 (id=3930): add_key$keyring(&(0x7f0000000500), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x6) connect$l2tp(r0, &(0x7f0000000340)={0x2, 0x0, @remote}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) syz_create_resource$binfmt(0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x132) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) getdents64(r5, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x4, 0x80) getdents64(r6, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) dup3(r7, r6, 0x80000) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)="2cde8618b35bda549f", 0x9}, 0x1, 0x0, 0x0, 0x4000}, 0x4480) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) 1.649796751s ago: executing program 6 (id=3931): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 1.649237668s ago: executing program 7 (id=3932): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$nbd(0x1, 0x1, 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x400, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e26, 0xb, @mcast2, 0x9}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') pread64(r3, 0x0, 0x0, 0x101) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000040)=0x6, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x3) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e65772064656661756c7420757365721c73797a2030303030303030303030303030303430393300"], 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@secondary) keyctl$link(0x8, r4, r5) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r6, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "fb17bd0d63db9115", "d09da2ac6738c8ecbec12f597d11704e486db9ec08633cb7368c4c687e35326e", "d0a482c7", "3dbb7ae258cbe1c8"}, 0x38) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r7, 0x5, &(0x7f00000006c0)={0x0, 0x0, 0xac1d}) ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f00000000c0)={'lo\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x16}}}) 0s ago: executing program 2 (id=3933): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r0, 0x0) connect$phonet_pipe(r0, &(0x7f0000000540)={0x23, 0xf, 0x7, 0x5}, 0x10) kernel console output (not intermixed with test programs): 20][T21702] netlink: 'syz.2.3442': attribute type 1 has an invalid length. [ 1824.006232][T21702] netlink: 'syz.2.3442': attribute type 1 has an invalid length. [ 1824.014641][T21702] netlink: 'syz.2.3442': attribute type 1 has an invalid length. [ 1824.071951][T21009] usb 7-1: config 0 has an invalid interface number: 7 but max is 0 [ 1824.109071][T21009] usb 7-1: config 0 has no interface number 0 [ 1824.178532][T21009] usb 7-1: config 0 interface 7 has no altsetting 0 [ 1824.196289][T20188] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1824.242170][T21009] usb 7-1: New USB device found, idVendor=05da, idProduct=0094, bcdDevice=c3.32 [ 1824.258522][T20188] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1824.268844][T21009] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1824.279638][T20188] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1824.291288][T21009] usb 7-1: Product: syz [ 1824.309228][T21009] usb 7-1: Manufacturer: syz [ 1824.320499][T21009] usb 7-1: SerialNumber: syz [ 1824.342521][T21009] usb 7-1: config 0 descriptor?? [ 1824.378586][T20188] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1824.388039][ T5620] Bluetooth: hci4: command 0x0405 tx timeout [ 1824.410992][T19559] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1824.751184][T21009] rndis_host 7-1:0.7: ACM capabilities 02, not really RNDIS? [ 1824.786356][T21009] usb 7-1: expecting 3 got 0 endpoints! Bailing out. [ 1824.833814][T21009] usb 7-1: USB disconnect, device number 7 [ 1824.866823][T13820] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1825.014021][T21709] overlayfs: failed to clone lowerpath [ 1825.081616][T13820] usb 4-1: Using ep0 maxpacket: 8 [ 1825.099747][T13820] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1825.135157][T13820] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1825.163811][T13820] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1825.196087][T13820] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1825.240229][T13820] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1825.260362][T13820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1825.273776][T13820] usb 4-1: Product: syz [ 1825.284518][T13820] usb 4-1: Manufacturer: syz [ 1825.294109][T13820] usb 4-1: SerialNumber: syz [ 1825.309312][T21704] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1825.316676][T21664] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1825.332624][T13820] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 1825.377920][T13820] usbtest 4-1:1.0: Linux user mode ISO test driver [ 1825.401743][T13820] usbtest 4-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 1825.413501][T18081] usb 8-1: USB disconnect, device number 5 [ 1825.520902][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1825.555556][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1825.574106][T13820] usb 4-1: USB disconnect, device number 32 [ 1825.831377][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1825.871315][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1825.908199][T21711] overlayfs: failed to clone upperpath [ 1826.694056][T21726] netlink: 'syz.3.3450': attribute type 4 has an invalid length. [ 1826.706880][T21726] netlink: 'syz.3.3450': attribute type 4 has an invalid length. [ 1829.235117][T21739] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3453'. [ 1829.245056][T21739] netlink: 'syz.6.3453': attribute type 2 has an invalid length. [ 1829.254523][T21739] netlink: 'syz.6.3453': attribute type 1 has an invalid length. [ 1829.262960][T21739] netlink: 'syz.6.3453': attribute type 1 has an invalid length. [ 1829.271481][T21739] netlink: 'syz.6.3453': attribute type 1 has an invalid length. [ 1829.284615][T21739] warn_alloc: 1 callbacks suppressed [ 1829.284647][T21739] syz.6.3453: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz6,mems_allowed=0-1 [ 1829.307333][T21739] CPU: 0 UID: 0 PID: 21739 Comm: syz.6.3453 Tainted: G L syzkaller #0 PREEMPT(full) [ 1829.307367][T21739] Tainted: [L]=SOFTLOCKUP [ 1829.307375][T21739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1829.307390][T21739] Call Trace: [ 1829.307397][T21739] [ 1829.307405][T21739] dump_stack_lvl+0x100/0x190 [ 1829.307436][T21739] warn_alloc.cold+0x95/0x1c1 [ 1829.307458][T21739] ? __pfx_warn_alloc+0x10/0x10 [ 1829.307502][T21739] ? __pfx___schedule+0x10/0x10 [ 1829.307531][T21739] __vmalloc_node_range_noprof+0x136c/0x1630 [ 1829.307557][T21739] ? preempt_schedule_common+0x42/0xc0 [ 1829.307580][T21739] ? preempt_schedule_thunk+0x16/0x30 [ 1829.307602][T21739] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 1829.307624][T21739] ? dvb_demux_do_ioctl+0x929/0x1200 [ 1829.307643][T21739] ? rcu_is_watching+0x12/0xc0 [ 1829.307677][T21739] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1829.307703][T21739] ? __pfx___mutex_lock+0x10/0x10 [ 1829.307733][T21739] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 1829.307756][T21739] ? rcu_is_watching+0x12/0xc0 [ 1829.307791][T21739] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 1829.307810][T21739] __vmalloc_node_noprof+0xad/0xf0 [ 1829.307834][T21739] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 1829.307856][T21739] dvb_demux_do_ioctl+0x9e0/0x1200 [ 1829.307883][T21739] dvb_usercopy+0x167/0x340 [ 1829.307911][T21739] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1829.307931][T21739] ? rcu_is_watching+0x12/0xc0 [ 1829.307961][T21739] ? __pfx_dvb_usercopy+0x10/0x10 [ 1829.307987][T21739] ? irqentry_exit+0x246/0x790 [ 1829.308019][T21739] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1829.308053][T21739] dvb_demux_ioctl+0x29/0x40 [ 1829.308081][T21739] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1829.308109][T21739] __x64_sys_ioctl+0x18e/0x210 [ 1829.308133][T21739] do_syscall_64+0x10b/0xf80 [ 1829.308155][T21739] ? clear_bhb_loop+0x40/0x90 [ 1829.308179][T21739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1829.308198][T21739] RIP: 0033:0x7ff846f9cdd9 [ 1829.308215][T21739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1829.308233][T21739] RSP: 002b:00007ff847dfd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1829.308252][T21739] RAX: ffffffffffffffda RBX: 00007ff847216180 RCX: 00007ff846f9cdd9 [ 1829.308265][T21739] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000003 [ 1829.308276][T21739] RBP: 00007ff847032d69 R08: 0000000000000000 R09: 0000000000000000 [ 1829.308288][T21739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1829.308299][T21739] R13: 00007ff847216218 R14: 00007ff847216180 R15: 00007ffc5c0105b8 [ 1829.308325][T21739] [ 1829.308353][T21739] Mem-Info: [ 1829.594537][T21739] active_anon:64152 inactive_anon:0 isolated_anon:0 [ 1829.594537][T21739] active_file:21441 inactive_file:41374 isolated_file:0 [ 1829.594537][T21739] unevictable:768 dirty:294 writeback:0 [ 1829.594537][T21739] slab_reclaimable:8248 slab_unreclaimable:118138 [ 1829.594537][T21739] mapped:51261 shmem:56584 pagetables:1807 [ 1829.594537][T21739] sec_pagetables:0 bounce:0 [ 1829.594537][T21739] kernel_misc_reclaimable:0 [ 1829.594537][T21739] free:1217789 free_pcp:13914 free_cma:0 [ 1829.644073][T21739] Node 0 active_anon:256208kB inactive_anon:0kB active_file:85612kB inactive_file:165292kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:198228kB dirty:1172kB writeback:0kB shmem:224500kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14456kB pagetables:7108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1829.681108][T21739] Node 1 active_anon:0kB inactive_anon:0kB active_file:152kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1829.714452][T21739] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1829.744544][T21739] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 1829.750877][T21739] Node 0 DMA32 free:922180kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:245120kB inactive_anon:0kB active_file:85612kB inactive_file:165292kB unevictable:1536kB writepending:1184kB zspages:0kB present:3129332kB managed:2537112kB mlocked:0kB bounce:0kB free_pcp:52896kB local_pcp:22372kB free_cma:0kB [ 1829.785749][T21739] lowmem_reserve[]: 0 0 1 1 1 [ 1829.790623][T21739] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1092kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 1829.822481][T21739] lowmem_reserve[]: 0 0 0 0 0 [ 1829.827685][T21739] Node 1 Normal free:3935420kB boost:0kB min:55828kB low:69784kB high:83740kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:152kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:12348kB local_pcp:0kB free_cma:0kB [ 1829.860957][T21739] lowmem_reserve[]: 0 0 0 0 0 [ 1829.865679][T21739] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1829.878343][T21739] Node 0 DMA32: 6301*4kB (UME) 4647*8kB (UME) 2940*16kB (UME) 743*32kB (UME) 405*64kB (UME) 262*128kB (UME) 178*256kB (UME) 38*512kB (UME) 33*1024kB (UME) 10*2048kB (UME) 149*4096kB (M) = 922252kB [ 1829.897760][T21739] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1829.909413][T21739] Node 1 Normal: 2*4kB (UM) 7*8kB (U) 13*16kB (U) 11*32kB (UM) 12*64kB (U) 3*128kB (U) 2*256kB (U) 2*512kB (UM) 4*1024kB (U) 2*2048kB (UM) 958*4096kB (M) = 3935472kB [ 1829.926100][T21739] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1829.935939][T21739] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1829.945252][T21739] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1829.954816][T21739] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1829.964111][T21739] 116546 total pagecache pages [ 1829.969436][T21739] 0 pages in swap cache [ 1829.973605][T21739] Free swap = 124996kB [ 1829.977751][T21739] Total swap = 124996kB [ 1829.981890][T21739] 2097051 pages RAM [ 1829.985710][T21739] 0 pages HighMem/MovableOnly [ 1829.990369][T21739] 430885 pages reserved [ 1829.994562][T21739] 0 pages cma reserved [ 1830.442699][T21750] netlink: 'syz.8.3455': attribute type 32 has an invalid length. [ 1830.931941][T21008] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1831.448078][T21008] usb 4-1: Using ep0 maxpacket: 8 [ 1831.489203][T21008] usb 4-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 1831.547744][T21008] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1831.594696][T21008] usb 4-1: Product: syz [ 1831.625174][T21008] usb 4-1: Manufacturer: syz [ 1831.651401][T21008] usb 4-1: SerialNumber: syz [ 1831.687035][T21008] usb 4-1: config 0 descriptor?? [ 1831.743249][T21008] usbtest 4-1:0.0: FX2 device [ 1831.765840][T21008] usbtest 4-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 1832.056398][T21762] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3462'. [ 1832.275726][T18081] usb 4-1: USB disconnect, device number 33 [ 1833.070409][T21770] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3464'. [ 1834.696514][T20976] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1834.792704][T21782] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3467'. [ 1834.802523][T21782] netlink: 'syz.2.3467': attribute type 2 has an invalid length. [ 1834.811831][T21782] netlink: 'syz.2.3467': attribute type 1 has an invalid length. [ 1834.820380][T21782] netlink: 'syz.2.3467': attribute type 1 has an invalid length. [ 1834.828821][T21782] netlink: 'syz.2.3467': attribute type 1 has an invalid length. [ 1835.237961][T21786] netlink: 'syz.8.3463': attribute type 4 has an invalid length. [ 1835.251543][T21786] netlink: 'syz.8.3463': attribute type 4 has an invalid length. [ 1835.284257][T20976] usb 8-1: Using ep0 maxpacket: 16 [ 1835.308076][T20976] usb 8-1: config 0 has an invalid interface number: 213 but max is 1 [ 1835.386453][T21788] netlink: 'syz.3.3469': attribute type 32 has an invalid length. [ 1836.305024][T20976] usb 8-1: config 0 has no interface number 1 [ 1836.434546][T20976] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1836.531765][T20976] usb 8-1: New USB device found, idVendor=413c, idProduct=81d2, bcdDevice=25.e8 [ 1836.577831][T20976] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1836.613376][T20976] usb 8-1: Product: syz [ 1836.628331][T20976] usb 8-1: Manufacturer: syz [ 1836.652953][T20976] usb 8-1: SerialNumber: syz [ 1836.677316][T20976] usb 8-1: config 0 descriptor?? [ 1836.738697][T20976] usb 8-1: selecting invalid altsetting 0 [ 1836.769834][T20976] usb 8-1: Could not set interface, error -22 [ 1837.078861][T21799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3473'. [ 1837.836638][T13820] usb 8-1: USB disconnect, device number 6 [ 1837.863641][T21801] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3474'. [ 1839.993645][T21813] netlink: 'syz.2.3476': attribute type 2 has an invalid length. [ 1840.057279][T21816] netlink: 'syz.2.3476': attribute type 2 has an invalid length. [ 1840.413632][T13820] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1840.662715][T13820] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1840.698629][T21822] netlink: 'syz.3.3480': attribute type 32 has an invalid length. [ 1841.576081][T13820] usb 8-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1841.634189][T13820] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1841.672220][T13820] usb 8-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 1841.719549][T13820] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1841.777805][T13820] usb 8-1: config 0 descriptor?? [ 1841.812187][T21818] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1842.102698][T13820] usbhid 8-1:0.0: can't add hid device: -71 [ 1842.143366][T13820] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1842.205656][T13820] usb 8-1: USB disconnect, device number 7 [ 1844.205768][T21846] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3486'. [ 1844.243786][T21847] comedi comedi3: 8255: I/O base address not correctly aligned [ 1845.043332][ T30] audit: type=1400 audit(2000001515.155:3935): avc: denied { recv } for pid=21857 comm="syz.8.3492" saddr=10.128.0.169 src=30006 daddr=10.128.1.155 dest=45226 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1845.553502][T19559] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1846.139937][T21855] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65533 sclass=netlink_route_socket pid=21855 comm=syz.2.3489 [ 1846.570101][T19559] usb 4-1: Using ep0 maxpacket: 32 [ 1846.578534][T19559] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1846.592650][T19559] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1846.604468][T19559] usb 4-1: config 0 has no interface number 0 [ 1846.610748][T19559] usb 4-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 1846.632835][T19559] usb 4-1: config 0 interface 8 has no altsetting 0 [ 1846.657389][T19559] usb 4-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 1846.678690][T19559] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1846.704955][T19559] usb 4-1: Product: syz [ 1846.715430][T19559] usb 4-1: Manufacturer: syz [ 1846.733820][T19559] usb 4-1: SerialNumber: syz [ 1846.753021][T19559] usb 4-1: config 0 descriptor?? [ 1846.799993][T21880] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3501'. [ 1847.013255][T19559] ath6kl: Failed to submit usb control message: -71 [ 1847.028195][T19559] ath6kl: unable to send the bmi data to the device: -71 [ 1847.039096][T21009] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1847.039161][T20976] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 1847.066371][T19559] ath6kl: Unable to send get target info: -71 [ 1847.075083][T19559] ath6kl: Failed to init ath6kl core: -71 [ 1847.091280][T19559] ath6kl_usb 4-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 1847.135445][T19559] usb 4-1: USB disconnect, device number 34 [ 1847.153462][T21887] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3503'. [ 1847.223048][T21009] usb 7-1: Using ep0 maxpacket: 32 [ 1847.232651][T20976] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 1847.248179][T20976] usb 9-1: config 0 has no interface number 0 [ 1847.249652][T21009] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1847.285213][T20976] usb 9-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xCF, changing to 0x8F [ 1847.299164][T21009] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1847.303331][T20976] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1847.319238][T21009] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 1847.320662][T20976] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1847.331967][T21009] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1847.338498][T20976] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1847.347249][T21009] usb 7-1: Product: syz [ 1847.354852][T20976] usb 9-1: Product: syz [ 1847.354872][T20976] usb 9-1: SerialNumber: syz [ 1847.369766][T21009] usb 7-1: Manufacturer: syz [ 1847.372171][T20976] usb 9-1: config 0 descriptor?? [ 1847.376305][T21009] usb 7-1: SerialNumber: syz [ 1847.599150][T21891] ieee802154 phy0 wpan0: encryption failed: -22 [ 1847.756696][T20976] usbhid 9-1:0.8: couldn't find an input interrupt endpoint [ 1847.771617][T21009] usb 7-1: config 0 descriptor?? [ 1847.804455][ T30] audit: type=1400 audit(2000001517.765:3936): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 1847.842600][ T30] audit: type=1400 audit(2000001517.765:3937): avc: denied { sendto } for pid=15 comm="ksoftirqd/0" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 1848.104425][T21009] snd-usb-6fire 7-1:0.0: unknown device firmware state received from device: [ 1848.119416][T21009] 31 db 99 aa dd 09 f1 37 [ 1848.123325][T19559] usb 9-1: USB disconnect, device number 2 [ 1848.126968][T21009] snd-usb-6fire 7-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 1848.289906][T21897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3505'. [ 1848.473708][T20976] usb 7-1: USB disconnect, device number 8 [ 1848.588544][T21902] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3508'. [ 1848.614466][T21902] xt_cgroup: path and classid specified [ 1848.935780][T21912] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3512'. [ 1848.958237][T21911] geneve2: entered promiscuous mode [ 1848.971451][T21911] geneve2: entered allmulticast mode [ 1849.003391][T21906] netlink: 'syz.7.3509': attribute type 27 has an invalid length. [ 1849.320313][T21906] bridge0: port 2(bridge_slave_1) entered disabled state [ 1849.328061][T21906] bridge0: port 1(bridge_slave_0) entered disabled state [ 1849.435228][T21929] netlink: 'syz.2.3514': attribute type 32 has an invalid length. [ 1851.079673][T21906] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1851.103320][T21906] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1851.522777][T21941] ieee802154 phy0 wpan0: encryption failed: -22 [ 1851.585126][ T30] audit: type=1400 audit(2000001521.303:3938): avc: denied { create } for pid=21944 comm="syz.2.3521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1851.636660][ T30] audit: type=1400 audit(2000001521.322:3939): avc: denied { write } for pid=21944 comm="syz.2.3521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1852.011831][T21951] netlink: 'syz.2.3523': attribute type 32 has an invalid length. [ 1852.939190][T21916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1852.954178][T21916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1853.025498][T21916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1853.034637][T21916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1853.046278][T21916] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1853.057266][T21916] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1853.074775][T21916] veth1_vlan: left promiscuous mode [ 1853.080987][T21916] veth0_vlan: left promiscuous mode [ 1853.086880][T21916] veth0_vlan: entered promiscuous mode [ 1853.095127][T21916] veth1_vlan: entered promiscuous mode [ 1853.104170][T21916] veth1_macvtap: left promiscuous mode [ 1853.110917][T21916] veth0_macvtap: left promiscuous mode [ 1853.117244][T21916] veth0_macvtap: entered promiscuous mode [ 1853.123914][T21916] veth1_macvtap: entered promiscuous mode [ 1853.133018][T21916] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1853.141181][T21916] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1853.149151][T21916] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1853.157605][T21916] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1853.182428][T21925] pim6reg: entered allmulticast mode [ 1853.232193][T14258] bridge0: port 1(bridge_slave_0) entered blocking state [ 1853.239381][T14258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1853.274491][T14258] bridge0: port 2(bridge_slave_1) entered blocking state [ 1853.281650][T14258] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1853.392260][T21954] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3525'. [ 1853.703394][T21961] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3524'. [ 1853.838218][T21963] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEO' [ 1854.695793][T21967] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3526'. [ 1854.705251][T21967] netlink: 'syz.3.3526': attribute type 2 has an invalid length. [ 1854.713519][T21967] netlink: 'syz.3.3526': attribute type 1 has an invalid length. [ 1854.721529][T21967] netlink: 'syz.3.3526': attribute type 1 has an invalid length. [ 1854.729615][T21967] netlink: 'syz.3.3526': attribute type 1 has an invalid length. [ 1854.739455][T21967] syz.3.3526: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 1854.754556][T21967] CPU: 0 UID: 0 PID: 21967 Comm: syz.3.3526 Tainted: G L syzkaller #0 PREEMPT(full) [ 1854.754586][T21967] Tainted: [L]=SOFTLOCKUP [ 1854.754591][T21967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1854.754600][T21967] Call Trace: [ 1854.754607][T21967] [ 1854.754614][T21967] dump_stack_lvl+0x100/0x190 [ 1854.754638][T21967] warn_alloc.cold+0x95/0x1c1 [ 1854.754654][T21967] ? __pfx_warn_alloc+0x10/0x10 [ 1854.754685][T21967] ? do_syscall_64+0x10b/0xf80 [ 1854.754702][T21967] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1854.754718][T21967] ? __lock_acquire+0x4a5/0x2630 [ 1854.754736][T21967] ? find_held_lock+0x2b/0x80 [ 1854.754749][T21967] ? avc_has_extended_perms+0x33a/0x1080 [ 1854.754771][T21967] ? avc_has_extended_perms+0x33a/0x1080 [ 1854.754792][T21967] __vmalloc_node_range_noprof+0x136c/0x1630 [ 1854.754809][T21967] ? rcu_is_watching+0x12/0xc0 [ 1854.754826][T21967] ? trace_contention_end+0x122/0x170 [ 1854.754842][T21967] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 1854.754854][T21967] ? dvb_demux_do_ioctl+0x929/0x1200 [ 1854.754866][T21967] ? find_held_lock+0x2b/0x80 [ 1854.754879][T21967] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1854.754893][T21967] ? __pfx___mutex_lock+0x10/0x10 [ 1854.754910][T21967] ? tomoyo_path_number_perm+0x188/0x580 [ 1854.754928][T21967] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 1854.754938][T21967] __vmalloc_node_noprof+0xad/0xf0 [ 1854.754953][T21967] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 1854.754965][T21967] dvb_demux_do_ioctl+0x9e0/0x1200 [ 1854.754978][T21967] ? do_vfs_ioctl+0x226/0x13e0 [ 1854.754991][T21967] dvb_usercopy+0x167/0x340 [ 1854.755013][T21967] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1854.755030][T21967] ? __pfx_dvb_usercopy+0x10/0x10 [ 1854.755056][T21967] ? selinux_file_ioctl+0x13b/0x290 [ 1854.755071][T21967] ? selinux_file_ioctl+0xb6/0x290 [ 1854.755086][T21967] dvb_demux_ioctl+0x29/0x40 [ 1854.755102][T21967] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1854.755118][T21967] __x64_sys_ioctl+0x18e/0x210 [ 1854.755131][T21967] do_syscall_64+0x10b/0xf80 [ 1854.755146][T21967] ? clear_bhb_loop+0x40/0x90 [ 1854.755162][T21967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1854.755173][T21967] RIP: 0033:0x7f075cf9cdd9 [ 1854.755185][T21967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1854.755196][T21967] RSP: 002b:00007f075ddcf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1854.755208][T21967] RAX: ffffffffffffffda RBX: 00007f075d216180 RCX: 00007f075cf9cdd9 [ 1854.755215][T21967] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000003 [ 1854.755222][T21967] RBP: 00007f075d032d69 R08: 0000000000000000 R09: 0000000000000000 [ 1854.755228][T21967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1854.755235][T21967] R13: 00007f075d216218 R14: 00007f075d216180 R15: 00007ffc0e9a36a8 [ 1854.755249][T21967] [ 1854.755294][T21967] Mem-Info: [ 1855.055204][T21967] active_anon:41113 inactive_anon:0 isolated_anon:0 [ 1855.055204][T21967] active_file:21441 inactive_file:41382 isolated_file:0 [ 1855.055204][T21967] unevictable:768 dirty:529 writeback:0 [ 1855.055204][T21967] slab_reclaimable:8236 slab_unreclaimable:118545 [ 1855.055204][T21967] mapped:35593 shmem:33626 pagetables:1749 [ 1855.055204][T21967] sec_pagetables:0 bounce:0 [ 1855.055204][T21967] kernel_misc_reclaimable:0 [ 1855.055204][T21967] free:1241169 free_pcp:12988 free_cma:0 [ 1855.101993][T21967] Node 0 active_anon:164452kB inactive_anon:0kB active_file:85612kB inactive_file:165324kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:142252kB dirty:2112kB writeback:0kB shmem:132968kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14436kB pagetables:6876kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1855.139308][T21967] Node 1 active_anon:0kB inactive_anon:0kB active_file:152kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1855.173434][T21967] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1855.204298][T21967] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 1855.210233][T21967] Node 0 DMA32 free:1012384kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:164452kB inactive_anon:0kB active_file:85612kB inactive_file:165324kB unevictable:1536kB writepending:2112kB zspages:0kB present:3129332kB managed:2537112kB mlocked:0kB bounce:0kB free_pcp:41596kB local_pcp:20092kB free_cma:0kB [ 1855.248887][T21967] lowmem_reserve[]: 0 0 1 1 1 [ 1855.253779][T21967] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1092kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 1855.284566][T21967] lowmem_reserve[]: 0 0 0 0 0 [ 1855.289676][T21967] Node 1 Normal free:3936932kB boost:0kB min:55828kB low:69784kB high:83740kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:152kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:10836kB local_pcp:10836kB free_cma:0kB [ 1855.324316][T21967] lowmem_reserve[]: 0 0 0 0 0 [ 1855.329204][T21967] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1855.342343][T21967] Node 0 DMA32: 6583*4kB (UME) 4753*8kB (UE) 3549*16kB (UME) 1115*32kB (UME) 832*64kB (UME) 462*128kB (UME) 201*256kB (UME) 53*512kB (UME) 39*1024kB (UME) 13*2048kB (UE) 146*4096kB (M) = 1012372kB [ 1855.362365][T21967] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1855.374312][T21967] Node 1 Normal: 4*4kB (UM) 11*8kB (UM) 17*16kB (UM) 15*32kB (UM) 16*64kB (UM) 5*128kB (UM) 3*256kB (UM) 1*512kB (U) 5*1024kB (UM) 2*2048kB (UM) 958*4096kB (M) = 3936984kB [ 1855.392126][T21967] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1855.402017][T21967] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1855.411640][T21967] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1855.421516][T21967] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1855.431194][T21967] 96445 total pagecache pages [ 1855.436016][T21967] 0 pages in swap cache [ 1855.440355][T21967] Free swap = 124996kB [ 1855.444680][T21967] Total swap = 124996kB [ 1855.449036][T21967] 2097051 pages RAM [ 1855.453038][T21967] 0 pages HighMem/MovableOnly [ 1855.457860][T21967] 430885 pages reserved [ 1855.462140][T21967] 0 pages cma reserved [ 1855.582469][T21971] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3528'. [ 1855.911791][T21986] netlink: 172 bytes leftover after parsing attributes in process `syz.8.3534'. [ 1855.938528][T21986] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1855.992074][T21987] netlink: 'syz.2.3531': attribute type 4 has an invalid length. [ 1856.534802][T22000] netlink: 'syz.8.3537': attribute type 32 has an invalid length. [ 1857.867991][T22008] netlink: 220 bytes leftover after parsing attributes in process `syz.8.3543'. [ 1859.910169][T22038] netlink: 'syz.3.3554': attribute type 4 has an invalid length. [ 1859.932477][T22038] netlink: 'syz.3.3554': attribute type 4 has an invalid length. [ 1860.395423][ T30] audit: type=1400 audit(2000001529.463:3940): avc: denied { recv } for pid=22033 comm="syz.3.3554" saddr=10.128.0.169 src=36242 daddr=10.128.1.155 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1860.507718][T22040] netlink: 'syz.6.3550': attribute type 32 has an invalid length. [ 1862.042639][T22032] netlink: 'syz.8.3553': attribute type 4 has an invalid length. [ 1862.073289][T22032] netlink: 'syz.8.3553': attribute type 4 has an invalid length. [ 1862.875112][T22063] netlink: 'syz.6.3557': attribute type 32 has an invalid length. [ 1863.979867][T22066] netlink: 'syz.2.3562': attribute type 1 has an invalid length. [ 1864.413417][T22072] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3564'. [ 1864.721672][T22079] trusted_key: encrypted_key: master key parameter 'usersyz' is invalid [ 1865.111891][T22089] overlayfs: failed to clone lowerpath [ 1865.222163][T22090] netlink: 'syz.7.3570': attribute type 32 has an invalid length. [ 1866.116268][T22093] pim6reg: entered allmulticast mode [ 1867.160032][T22095] overlayfs: overlapping lowerdir path [ 1867.226116][T22095] ieee802154 phy0 wpan0: encryption failed: -22 [ 1867.388515][T22109] netlink: 272 bytes leftover after parsing attributes in process `syz.8.3576'. [ 1867.604482][T22117] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3572'. [ 1868.445320][T22121] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3579'. [ 1868.476902][T22121] xt_cgroup: path and classid specified [ 1869.782661][T22135] trusted_key: encrypted_key: master key parameter 'usersyz' is invalid [ 1870.015038][T22140] trusted_key: encrypted_key: master key parameter 'usersyz' is invalid [ 1870.108776][ T30] audit: type=1400 audit(2000001538.634:3941): avc: denied { getopt } for pid=22141 comm="syz.3.3587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1870.486234][T22155] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3589'. [ 1870.495320][T22155] netlink: 'syz.7.3589': attribute type 2 has an invalid length. [ 1870.503066][T22155] netlink: 'syz.7.3589': attribute type 1 has an invalid length. [ 1870.510898][T22155] netlink: 'syz.7.3589': attribute type 1 has an invalid length. [ 1870.518726][T22155] netlink: 'syz.7.3589': attribute type 1 has an invalid length. [ 1870.529851][T22155] syz.7.3589: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz7,mems_allowed=0-1 [ 1870.544433][T22155] CPU: 1 UID: 0 PID: 22155 Comm: syz.7.3589 Tainted: G L syzkaller #0 PREEMPT(full) [ 1870.544474][T22155] Tainted: [L]=SOFTLOCKUP [ 1870.544481][T22155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1870.544494][T22155] Call Trace: [ 1870.544503][T22155] [ 1870.544511][T22155] dump_stack_lvl+0x100/0x190 [ 1870.544541][T22155] warn_alloc.cold+0x95/0x1c1 [ 1870.544564][T22155] ? __pfx_warn_alloc+0x10/0x10 [ 1870.544594][T22155] ? irqentry_exit+0x246/0x790 [ 1870.544622][T22155] ? lockdep_hardirqs_on+0x78/0x100 [ 1870.544660][T22155] __vmalloc_node_range_noprof+0x136c/0x1630 [ 1870.544691][T22155] ? rcu_is_watching+0x12/0xc0 [ 1870.544721][T22155] ? trace_contention_end+0x122/0x170 [ 1870.544748][T22155] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 1870.544770][T22155] ? dvb_demux_do_ioctl+0x929/0x1200 [ 1870.544789][T22155] ? preempt_schedule_irq+0x7b/0x90 [ 1870.544813][T22155] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1870.544836][T22155] ? __pfx___mutex_lock+0x10/0x10 [ 1870.544857][T22155] ? lockdep_hardirqs_on+0x78/0x100 [ 1870.544879][T22155] ? irqentry_exit+0x246/0x790 [ 1870.544908][T22155] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 1870.544926][T22155] __vmalloc_node_noprof+0xad/0xf0 [ 1870.544950][T22155] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 1870.544972][T22155] dvb_demux_do_ioctl+0x9e0/0x1200 [ 1870.544993][T22155] ? do_vfs_ioctl+0x226/0x13e0 [ 1870.545017][T22155] dvb_usercopy+0x167/0x340 [ 1870.545043][T22155] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1870.545063][T22155] ? __pfx_dvb_usercopy+0x10/0x10 [ 1870.545100][T22155] ? selinux_file_ioctl+0x13b/0x290 [ 1870.545125][T22155] ? selinux_file_ioctl+0xb6/0x290 [ 1870.545151][T22155] dvb_demux_ioctl+0x29/0x40 [ 1870.545177][T22155] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1870.545206][T22155] __x64_sys_ioctl+0x18e/0x210 [ 1870.545228][T22155] do_syscall_64+0x10b/0xf80 [ 1870.545248][T22155] ? clear_bhb_loop+0x40/0x90 [ 1870.545272][T22155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1870.545292][T22155] RIP: 0033:0x7f2ea4d9cdd9 [ 1870.545308][T22155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1870.545326][T22155] RSP: 002b:00007f2ea5c1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1870.545344][T22155] RAX: ffffffffffffffda RBX: 00007f2ea5016180 RCX: 00007f2ea4d9cdd9 [ 1870.545356][T22155] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000003 [ 1870.545368][T22155] RBP: 00007f2ea4e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1870.545379][T22155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1870.545390][T22155] R13: 00007f2ea5016218 R14: 00007f2ea5016180 R15: 00007fff6713ef78 [ 1870.545416][T22155] [ 1870.545445][T22155] Mem-Info: [ 1870.816595][T22155] active_anon:41045 inactive_anon:0 isolated_anon:0 [ 1870.816595][T22155] active_file:21441 inactive_file:41388 isolated_file:0 [ 1870.816595][T22155] unevictable:768 dirty:347 writeback:0 [ 1870.816595][T22155] slab_reclaimable:8244 slab_unreclaimable:118268 [ 1870.816595][T22155] mapped:33548 shmem:33581 pagetables:1743 [ 1870.816595][T22155] sec_pagetables:0 bounce:0 [ 1870.816595][T22155] kernel_misc_reclaimable:0 [ 1870.816595][T22155] free:1242052 free_pcp:12194 free_cma:0 [ 1870.862242][T22155] Node 0 active_anon:164180kB inactive_anon:0kB active_file:85612kB inactive_file:165348kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:134112kB dirty:1388kB writeback:0kB shmem:132788kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14444kB pagetables:6852kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1870.898493][T22155] Node 1 active_anon:0kB inactive_anon:0kB active_file:152kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:80kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1870.931537][T22155] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1870.962583][T22155] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 1870.969814][T22155] Node 0 DMA32 free:1014908kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:164180kB inactive_anon:0kB active_file:85612kB inactive_file:165348kB unevictable:1536kB writepending:1388kB zspages:0kB present:3129332kB managed:2537112kB mlocked:0kB bounce:0kB free_pcp:38860kB local_pcp:18588kB free_cma:0kB [ 1871.004195][T22155] lowmem_reserve[]: 0 0 1 1 1 [ 1871.009378][T22155] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1092kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 1871.040256][T22155] lowmem_reserve[]: 0 0 0 0 0 [ 1871.044970][T22155] Node 1 Normal free:3937940kB boost:0kB min:55828kB low:69784kB high:83740kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:152kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:9828kB local_pcp:0kB free_cma:0kB [ 1871.077179][T22155] lowmem_reserve[]: 0 0 0 0 0 [ 1871.081893][T22155] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1871.094586][T22155] Node 0 DMA32: 7318*4kB (UME) 5358*8kB (UME) 3281*16kB (UME) 793*32kB (UME) 764*64kB (UME) 463*128kB (UME) 228*256kB (UME) 62*512kB (UME) 41*1024kB (UME) 13*2048kB (UME) 146*4096kB (M) = 1014904kB [ 1871.114545][T22155] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1871.126214][T22155] Node 1 Normal: 4*4kB (UM) 11*8kB (UM) 18*16kB (UM) 14*32kB (UM) 16*64kB (UM) 7*128kB (UM) 6*256kB (UM) 1*512kB (U) 5*1024kB (UM) 2*2048kB (UM) 958*4096kB (M) = 3937992kB [ 1871.143527][T22155] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1871.153164][T22155] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1871.162884][T22155] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1871.173296][T22155] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1871.183421][T22155] 96426 total pagecache pages [ 1871.188486][T22155] 0 pages in swap cache [ 1871.193012][T22155] Free swap = 124996kB [ 1871.197417][T22155] Total swap = 124996kB [ 1871.201908][T22155] 2097051 pages RAM [ 1871.205883][T22155] 0 pages HighMem/MovableOnly [ 1871.210818][T22155] 430885 pages reserved [ 1871.215129][T22155] 0 pages cma reserved [ 1871.289903][T22154] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3593'. [ 1871.465545][T22152] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3591'. [ 1871.475772][T22154] xt_cgroup: path and classid specified [ 1871.733032][T22167] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1872.044223][T22178] netlink: 'syz.3.3592': attribute type 4 has an invalid length. [ 1872.056010][T22178] netlink: 'syz.3.3592': attribute type 4 has an invalid length. [ 1872.665094][T21008] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1872.770231][T22182] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3599'. [ 1872.867181][T21008] usb 8-1: Using ep0 maxpacket: 16 [ 1872.887561][T22182] xt_cgroup: path and classid specified [ 1872.904254][T21008] usb 8-1: config 0 has an invalid interface number: 132 but max is 0 [ 1872.963235][T21008] usb 8-1: config 0 has no interface number 0 [ 1872.991937][T21008] usb 8-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1873.014033][T21008] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1873.057626][T21008] usb 8-1: Product: syz [ 1873.069371][T21008] usb 8-1: Manufacturer: syz [ 1873.106160][T21008] usb 8-1: SerialNumber: syz [ 1873.108723][T22189] trusted_key: encrypted_key: insufficient parameters specified [ 1873.140719][T21008] usb 8-1: config 0 descriptor?? [ 1873.164980][T21008] hub 8-1:0.132: bad descriptor, ignoring hub [ 1873.196816][T21008] hub 8-1:0.132: probe with driver hub failed with error -5 [ 1873.233605][T21008] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.132/input/input51 [ 1873.336184][T22195] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3605'. [ 1873.374812][T22195] xt_cgroup: path and classid specified [ 1873.867398][T22199] trusted_key: encrypted_key: master key parameter 'usersyz' is invalid [ 1873.921975][T22197] trusted_key: encrypted_key: master key parameter 'usersyz' is invalid [ 1874.038016][T22210] sock: sock_timestamping_bind_phc: sock not bind to device [ 1874.281124][T22215] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3608'. [ 1875.763630][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1875.770275][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1876.249859][T22240] trusted_key: encrypted_key: master key parameter 'usersyz' is invalid [ 1876.421139][ T30] audit: type=1400 audit(2000001544.539:3942): avc: denied { unmount } for pid=20153 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1876.677453][T22241] netlink: 'syz.6.3619': attribute type 32 has an invalid length. [ 1877.030026][T22248] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3622'. [ 1877.087262][T22248] xt_cgroup: path and classid specified [ 1877.567157][T22255] trusted_key: encrypted_key: master key parameter 'usersyz' is invalid [ 1877.642389][T22258] trusted_key: encrypted_key: master key parameter 'usersyz' is invalid [ 1877.882876][T22266] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3629'. [ 1878.076747][T20995] usb 8-1: USB disconnect, device number 8 [ 1878.405983][T22280] netlink: 'syz.7.3632': attribute type 4 has an invalid length. [ 1878.473294][T22281] netlink: 'syz.7.3632': attribute type 4 has an invalid length. [ 1879.409993][T22284] netlink: 'syz.3.3621': attribute type 4 has an invalid length. [ 1879.415427][T22293] dlm: non-version read from control device 218 [ 1880.854206][T22304] trusted_key: encrypted_key: master key parameter 'usersyz' is invalid [ 1881.069821][T22308] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3640'. [ 1881.246632][T22306] xt_cgroup: path and classid specified [ 1881.699732][T22321] trusted_key: encrypted_key: master key parameter 'usersyz' is invalid [ 1884.352269][T22340] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 1884.813154][T22352] trusted_key: encrypted_key: master key parameter 'usersyz' is invalid [ 1885.275616][T22357] trusted_key: encrypted_key: master key parameter 'usersyz' is invalid [ 1885.852637][T22364] overlayfs: missing 'lowerdir' [ 1886.031920][T22363] ieee802154 phy0 wpan0: encryption failed: -22 [ 1887.364079][T22375] trusted_key: encrypted_key: master key parameter 'usersyz' is invalid [ 1887.775565][T22377] trusted_key: encrypted_key: master key parameter 'usersyz' is invalid [ 1888.547267][T22379] trusted_key: encrypted_key: master key parameter 'usersyz' is invalid [ 1888.851717][T22391] netlink: 'syz.2.3664': attribute type 4 has an invalid length. [ 1888.861152][T22391] netlink: 'syz.2.3664': attribute type 4 has an invalid length. [ 1890.155896][T22397] trusted_key: encrypted_key: master key parameter 'usersyz' is invalid [ 1890.466158][T22409] trusted_key: encrypted_key: master key parameter 'usersyz' is invalid [ 1891.778885][T22415] IPv6: NLM_F_CREATE should be specified when creating new route [ 1892.154885][T22418] trusted_key: encrypted_key: master key parameter 'usersyz' is invalid [ 1892.480065][T22415] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1892.487350][T22415] IPv6: NLM_F_CREATE should be set when creating new route [ 1892.494594][T22415] IPv6: NLM_F_CREATE should be set when creating new route [ 1893.365813][T22435] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3679'. [ 1893.543730][T22435] netlink: 'syz.8.3679': attribute type 2 has an invalid length. [ 1893.565925][T22435] netlink: 'syz.8.3679': attribute type 1 has an invalid length. [ 1893.579622][T22435] netlink: 'syz.8.3679': attribute type 1 has an invalid length. [ 1893.587130][T22439] syz.8.3679: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz8,mems_allowed=0-1 [ 1893.597878][T22435] netlink: 'syz.8.3679': attribute type 1 has an invalid length. [ 1893.602889][T22439] CPU: 0 UID: 0 PID: 22439 Comm: syz.8.3679 Tainted: G L syzkaller #0 PREEMPT(full) [ 1893.602919][T22439] Tainted: [L]=SOFTLOCKUP [ 1893.602925][T22439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1893.602937][T22439] Call Trace: [ 1893.602944][T22439] [ 1893.602951][T22439] dump_stack_lvl+0x100/0x190 [ 1893.602977][T22439] warn_alloc.cold+0x95/0x1c1 [ 1893.602995][T22439] ? __pfx_warn_alloc+0x10/0x10 [ 1893.603018][T22439] ? do_syscall_64+0x10b/0xf80 [ 1893.603038][T22439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1893.603059][T22439] ? __lock_acquire+0x4a5/0x2630 [ 1893.603081][T22439] ? rcu_is_watching+0x12/0xc0 [ 1893.603106][T22439] ? lockdep_hardirqs_on+0x78/0x100 [ 1893.603131][T22439] __vmalloc_node_range_noprof+0x136c/0x1630 [ 1893.603157][T22439] ? rcu_is_watching+0x12/0xc0 [ 1893.603184][T22439] ? trace_contention_end+0x122/0x170 [ 1893.603207][T22439] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 1893.603224][T22439] ? dvb_demux_do_ioctl+0x929/0x1200 [ 1893.603243][T22439] ? find_held_lock+0x2b/0x80 [ 1893.603259][T22439] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1893.603280][T22439] ? __pfx___mutex_lock+0x10/0x10 [ 1893.603303][T22439] ? tomoyo_path_number_perm+0x188/0x580 [ 1893.603327][T22439] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 1893.603342][T22439] __vmalloc_node_noprof+0xad/0xf0 [ 1893.603366][T22439] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 1893.603388][T22439] dvb_demux_do_ioctl+0x9e0/0x1200 [ 1893.603406][T22439] ? do_vfs_ioctl+0x226/0x13e0 [ 1893.603426][T22439] dvb_usercopy+0x167/0x340 [ 1893.603448][T22439] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1893.603466][T22439] ? __pfx_dvb_usercopy+0x10/0x10 [ 1893.603499][T22439] ? selinux_file_ioctl+0x13b/0x290 [ 1893.603520][T22439] ? selinux_file_ioctl+0xb6/0x290 [ 1893.603542][T22439] dvb_demux_ioctl+0x29/0x40 [ 1893.603570][T22439] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1893.603593][T22439] __x64_sys_ioctl+0x18e/0x210 [ 1893.603613][T22439] do_syscall_64+0x10b/0xf80 [ 1893.603631][T22439] ? clear_bhb_loop+0x40/0x90 [ 1893.603651][T22439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1893.603668][T22439] RIP: 0033:0x7fc16f59cdd9 [ 1893.603683][T22439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1893.603700][T22439] RSP: 002b:00007fc16d3b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1893.603717][T22439] RAX: ffffffffffffffda RBX: 00007fc16f816270 RCX: 00007fc16f59cdd9 [ 1893.603728][T22439] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000003 [ 1893.603739][T22439] RBP: 00007fc16f632d69 R08: 0000000000000000 R09: 0000000000000000 [ 1893.603749][T22439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1893.603759][T22439] R13: 00007fc16f816308 R14: 00007fc16f816270 R15: 00007ffd6cec8e18 [ 1893.603783][T22439] [ 1893.603789][T22439] Mem-Info: [ 1893.900462][T22439] active_anon:38277 inactive_anon:0 isolated_anon:0 [ 1893.900462][T22439] active_file:21441 inactive_file:41396 isolated_file:0 [ 1893.900462][T22439] unevictable:768 dirty:196 writeback:0 [ 1893.900462][T22439] slab_reclaimable:9082 slab_unreclaimable:119183 [ 1893.900462][T22439] mapped:37711 shmem:30711 pagetables:1591 [ 1893.900462][T22439] sec_pagetables:0 bounce:0 [ 1893.900462][T22439] kernel_misc_reclaimable:0 [ 1893.900462][T22439] free:1235643 free_pcp:7673 free_cma:0 [ 1893.947357][T22439] Node 0 active_anon:153108kB inactive_anon:0kB active_file:85612kB inactive_file:165380kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:150760kB dirty:780kB writeback:0kB shmem:121308kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14384kB pagetables:6244kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1893.983570][T22439] Node 1 active_anon:0kB inactive_anon:0kB active_file:152kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:84kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1894.017501][T22439] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1894.048442][T22439] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 1894.054393][T22439] Node 0 DMA32 free:987960kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:153108kB inactive_anon:0kB active_file:85612kB inactive_file:165380kB unevictable:1536kB writepending:780kB zspages:0kB present:3129332kB managed:2537112kB mlocked:0kB bounce:0kB free_pcp:22092kB local_pcp:9944kB free_cma:0kB [ 1894.089373][T22439] lowmem_reserve[]: 0 0 1 1 1 [ 1894.094346][T22439] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1092kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 1894.125367][T22439] lowmem_reserve[]: 0 0 0 0 0 [ 1894.130235][T22439] Node 1 Normal free:3939252kB boost:0kB min:55828kB low:69784kB high:83740kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:152kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:8568kB local_pcp:8568kB free_cma:0kB [ 1894.164429][T22439] lowmem_reserve[]: 0 0 0 0 0 [ 1894.169366][T22439] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1894.182457][T22439] Node 0 DMA32: 5371*4kB (UME) 4966*8kB (UME) 3505*16kB (UME) 673*32kB (UME) 853*64kB (UME) 459*128kB (UME) 254*256kB (UME) 62*512kB (UME) 44*1024kB (UME) 18*2048kB (UME) 136*4096kB (M) = 987916kB [ 1894.202624][T22439] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1894.214525][T22439] Node 1 Normal: 3*4kB (UM) 11*8kB (UM) 17*16kB (UM) 14*32kB (UM) 16*64kB (UM) 7*128kB (UM) 9*256kB (UM) 2*512kB (UM) 5*1024kB (UM) 2*2048kB (UM) 958*4096kB (M) = 3939252kB [ 1894.232527][T22439] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1894.242400][T22439] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1894.252006][T22439] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1894.261920][T22439] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1894.271721][T22439] 93544 total pagecache pages [ 1894.276553][T22439] 0 pages in swap cache [ 1894.280985][T22439] Free swap = 124996kB [ 1894.285362][T22439] Total swap = 124996kB [ 1894.289646][T22439] 2097051 pages RAM [ 1894.293608][T22439] 0 pages HighMem/MovableOnly [ 1894.298493][T22439] 430885 pages reserved [ 1894.302773][T22439] 0 pages cma reserved [ 1894.789547][T17602] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1894.804424][T17602] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1894.824242][T17602] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1894.838392][T17602] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1894.850184][T17602] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1894.889146][T22440] trusted_key: encrypted_key: master key parameter 'usersyz' is invalid [ 1895.435870][T22450] trusted_key: encrypted_key: master key parameter 'usersyz' is invalid [ 1896.084350][T22458] trusted_key: encrypted_key: master key parameter 'usersyz' is invalid [ 1896.935494][T22470] trusted_key: encrypted_key: master key parameter 'usersyz' is invalid [ 1897.125956][ T5620] Bluetooth: hci0: command tx timeout [ 1897.260249][T22443] lo speed is unknown, defaulting to 1000 [ 1897.309503][T22443] vxcan1 speed is unknown, defaulting to 1000 [ 1897.932370][T22482] netlink: 'syz.7.3690': attribute type 2 has an invalid length. [ 1898.471078][T22477] netlink: 'syz.7.3690': attribute type 2 has an invalid length. [ 1899.322669][T22495] openvswitch: netlink: IP tunnel dst address not specified [ 1899.347189][ T5620] Bluetooth: hci0: command tx timeout [ 1899.386234][T22490] trusted_key: encrypted_key: master key parameter 'usersyz' is invalid [ 1899.600200][T22498] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1900.421530][T22443] bridge0: port 1(bridge_slave_0) entered blocking state [ 1900.465037][T22443] bridge0: port 1(bridge_slave_0) entered disabled state [ 1900.491483][T22443] bridge_slave_0: entered allmulticast mode [ 1900.517743][T22443] bridge_slave_0: entered promiscuous mode [ 1900.555880][T22443] bridge0: port 2(bridge_slave_1) entered blocking state [ 1900.604438][T22443] bridge0: port 2(bridge_slave_1) entered disabled state [ 1900.626732][T22443] bridge_slave_1: entered allmulticast mode [ 1900.657327][T22443] bridge_slave_1: entered promiscuous mode [ 1900.676959][T22516] bridge0: port 3(veth1_to_bridge) entered blocking state [ 1900.696045][T22516] bridge0: port 3(veth1_to_bridge) entered disabled state [ 1900.708382][T22517] comedi comedi3: comedi_parport: I/O base address not correctly aligned [ 1900.722570][T22516] veth1_to_bridge: entered allmulticast mode [ 1900.742419][T22516] veth1_to_bridge: entered promiscuous mode [ 1900.759642][T22516] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1900.828349][ T30] audit: type=1400 audit(2000001567.382:3943): avc: denied { read } for pid=22518 comm="syz.7.3705" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1900.852427][T22516] bridge0: port 3(veth1_to_bridge) entered blocking state [ 1900.859686][T22516] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 1900.913041][ T30] audit: type=1400 audit(2000001567.428:3944): avc: denied { open } for pid=22518 comm="syz.7.3705" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1900.991911][T22443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1901.036195][T22443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1901.155999][T22521] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1901.184588][T22443] team0: Port device team_slave_0 added [ 1901.200249][T22521] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1901.227011][T22443] team0: Port device team_slave_1 added [ 1901.477319][T22527] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3707'. [ 1901.607295][ T5620] Bluetooth: hci0: command tx timeout [ 1902.220335][T22443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1902.238902][T22443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1902.281666][T22531] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3711'. [ 1902.292845][T22443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1902.410191][T22538] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3713'. [ 1902.474294][T22443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1902.509655][T22443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1902.576681][T22443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1902.599541][T22543] xt_cgroup: path and classid specified [ 1902.805013][T22443] hsr_slave_0: entered promiscuous mode [ 1902.832100][T22542] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1902.846823][T22443] hsr_slave_1: entered promiscuous mode [ 1902.867779][T22443] debugfs: 'hsr0' already exists in 'hsr' [ 1902.888500][T22443] Cannot create hsr debugfs directory [ 1903.792509][ T5620] Bluetooth: hci0: command tx timeout [ 1903.825573][T22563] trusted_key: encrypted_key: master key parameter 'usersyz' is invalid [ 1904.276175][T22568] netlink: 'syz.8.3718': attribute type 4 has an invalid length. [ 1904.334487][T22569] netlink: 'syz.8.3718': attribute type 4 has an invalid length. [ 1905.468987][T22578] trusted_key: encrypted_key: master key parameter 'usersyz' is invalid [ 1905.912788][T22443] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1905.971197][T22443] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1905.994669][T22443] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1906.038752][T22443] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1906.191819][ T30] audit: type=1400 audit(2000001572.407:3945): avc: denied { bind } for pid=22586 comm="syz.2.3728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1906.214674][T22443] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1906.606473][T22443] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1906.645071][T22443] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1906.675161][T22443] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1907.026889][T22443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1907.152765][T22443] 8021q: adding VLAN 0 to HW filter on device team0 [ 1907.208640][T21296] bridge0: port 1(bridge_slave_0) entered blocking state [ 1907.215823][T21296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1907.339143][T21296] bridge0: port 2(bridge_slave_1) entered blocking state [ 1907.346343][T21296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1907.679650][T22610] ieee802154 phy0 wpan0: encryption failed: -22 [ 1908.431780][T22623] netlink: 'syz.8.3733': attribute type 4 has an invalid length. [ 1908.444730][T22623] netlink: 'syz.8.3733': attribute type 4 has an invalid length. [ 1909.514125][T22443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1911.811712][T22443] veth0_vlan: entered promiscuous mode [ 1911.943715][T22443] veth1_vlan: entered promiscuous mode [ 1912.065765][T20998] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1912.274290][T20998] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1912.290437][T22443] veth0_macvtap: entered promiscuous mode [ 1912.335831][T20998] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1912.347850][T22443] veth1_macvtap: entered promiscuous mode [ 1912.393444][T20998] usb 7-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1912.458936][T20998] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1912.480439][T22443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1912.531086][T20998] usb 7-1: config 0 descriptor?? [ 1912.542633][T22683] netlink: 'syz.8.3758': attribute type 4 has an invalid length. [ 1912.568359][T22443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1912.603614][T22684] netlink: 'syz.8.3758': attribute type 4 has an invalid length. [ 1912.682376][T10412] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1912.750966][T10412] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1912.830068][T10412] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1912.851605][T10412] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1913.102403][T20998] Bluetooth: Can't get version to change to load ram patch err [ 1913.126352][T20998] Bluetooth: Loading patch file failed [ 1913.144204][T20998] ath3k 7-1:0.0: probe with driver ath3k failed with error -71 [ 1913.181800][T20998] usb 7-1: USB disconnect, device number 9 [ 1913.765159][T22714] syz.8.3768: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz8,mems_allowed=0-1 [ 1913.779783][T22714] CPU: 1 UID: 0 PID: 22714 Comm: syz.8.3768 Tainted: G L syzkaller #0 PREEMPT(full) [ 1913.779815][T22714] Tainted: [L]=SOFTLOCKUP [ 1913.779822][T22714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1913.779834][T22714] Call Trace: [ 1913.779843][T22714] [ 1913.779852][T22714] dump_stack_lvl+0x100/0x190 [ 1913.779880][T22714] warn_alloc.cold+0x95/0x1c1 [ 1913.779901][T22714] ? __pfx_warn_alloc+0x10/0x10 [ 1913.779930][T22714] ? rcu_is_watching+0x12/0xc0 [ 1913.779965][T22714] ? __lock_acquire+0x4a5/0x2630 [ 1913.779991][T22714] ? rcu_is_watching+0x12/0xc0 [ 1913.780019][T22714] ? trace_sched_exit_tp+0x11c/0x160 [ 1913.780048][T22714] __vmalloc_node_range_noprof+0x136c/0x1630 [ 1913.780078][T22714] ? rcu_is_watching+0x12/0xc0 [ 1913.780106][T22714] ? trace_contention_end+0x122/0x170 [ 1913.780132][T22714] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 1913.780153][T22714] ? dvb_demux_do_ioctl+0x929/0x1200 [ 1913.780172][T22714] ? preempt_schedule_irq+0x7b/0x90 [ 1913.780197][T22714] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1913.780220][T22714] ? __pfx___mutex_lock+0x10/0x10 [ 1913.780242][T22714] ? lockdep_hardirqs_on+0x78/0x100 [ 1913.780265][T22714] ? irqentry_exit+0x246/0x790 [ 1913.780295][T22714] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 1913.780313][T22714] __vmalloc_node_noprof+0xad/0xf0 [ 1913.780337][T22714] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 1913.780358][T22714] dvb_demux_do_ioctl+0x9e0/0x1200 [ 1913.780380][T22714] ? do_vfs_ioctl+0x226/0x13e0 [ 1913.780404][T22714] dvb_usercopy+0x167/0x340 [ 1913.780429][T22714] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1913.780449][T22714] ? __pfx_dvb_usercopy+0x10/0x10 [ 1913.780487][T22714] ? selinux_file_ioctl+0x13b/0x290 [ 1913.780512][T22714] ? selinux_file_ioctl+0xb6/0x290 [ 1913.780537][T22714] dvb_demux_ioctl+0x29/0x40 [ 1913.780563][T22714] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1913.780591][T22714] __x64_sys_ioctl+0x18e/0x210 [ 1913.780613][T22714] do_syscall_64+0x10b/0xf80 [ 1913.780635][T22714] ? clear_bhb_loop+0x40/0x90 [ 1913.780658][T22714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1913.780678][T22714] RIP: 0033:0x7fc16f59cdd9 [ 1913.780695][T22714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1913.780714][T22714] RSP: 002b:00007fc16d7d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1913.780733][T22714] RAX: ffffffffffffffda RBX: 00007fc16f816180 RCX: 00007fc16f59cdd9 [ 1913.780745][T22714] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000003 [ 1913.780757][T22714] RBP: 00007fc16f632d69 R08: 0000000000000000 R09: 0000000000000000 [ 1913.780768][T22714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1913.780785][T22714] R13: 00007fc16f816218 R14: 00007fc16f816180 R15: 00007ffd6cec8e18 [ 1913.780811][T22714] [ 1913.780843][T22714] Mem-Info: [ 1914.062592][T22714] active_anon:34190 inactive_anon:0 isolated_anon:0 [ 1914.062592][T22714] active_file:21441 inactive_file:41405 isolated_file:0 [ 1914.062592][T22714] unevictable:768 dirty:134 writeback:17 [ 1914.062592][T22714] slab_reclaimable:10176 slab_unreclaimable:120160 [ 1914.062592][T22714] mapped:34677 shmem:26811 pagetables:1637 [ 1914.062592][T22714] sec_pagetables:0 bounce:0 [ 1914.062592][T22714] kernel_misc_reclaimable:0 [ 1914.062592][T22714] free:1236447 free_pcp:8999 free_cma:0 [ 1914.108362][T22714] Node 0 active_anon:136760kB inactive_anon:0kB active_file:85612kB inactive_file:165416kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:138592kB dirty:536kB writeback:68kB shmem:105708kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14876kB pagetables:6428kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1914.145187][T22714] Node 1 active_anon:0kB inactive_anon:0kB active_file:152kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1914.178238][T22714] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1914.209364][T22714] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 1914.215320][T22714] Node 0 DMA32 free:989708kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:136820kB inactive_anon:0kB active_file:85612kB inactive_file:165416kB unevictable:1596kB writepending:532kB zspages:0kB present:3129332kB managed:2537112kB mlocked:60kB bounce:0kB free_pcp:28992kB local_pcp:9708kB free_cma:0kB [ 1914.249528][T22714] lowmem_reserve[]: 0 0 1 1 1 [ 1914.255241][T22714] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1092kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 1914.286798][T22714] lowmem_reserve[]: 0 0 0 0 0 [ 1914.291518][T22714] Node 1 Normal free:3940764kB boost:0kB min:55828kB low:69784kB high:83740kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:152kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:7056kB local_pcp:0kB free_cma:0kB [ 1914.323760][T22714] lowmem_reserve[]: 0 0 0 0 0 [ 1914.328483][T22714] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1914.341696][T22714] Node 0 DMA32: 4523*4kB (UME) 4868*8kB (UME) 3264*16kB (UME) 832*32kB (UME) 909*64kB (UME) 448*128kB (UME) 252*256kB (UME) 54*512kB (UME) 43*1024kB (UME) 22*2048kB (UME) 136*4096kB (M) = 989708kB [ 1914.361165][T22714] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1914.372809][T22714] Node 1 Normal: 3*4kB (UM) 12*8kB (UM) 17*16kB (UM) 15*32kB (UM) 17*64kB (UM) 8*128kB (UM) 8*256kB (UM) 5*512kB (UM) 5*1024kB (UM) 2*2048kB (UM) 958*4096kB (M) = 3940764kB [ 1914.390262][T22714] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1914.399889][T22714] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1914.409559][T22714] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1914.419526][T22714] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1914.429230][T22714] 89655 total pagecache pages [ 1914.434091][T22714] 0 pages in swap cache [ 1914.438415][T22714] Free swap = 124996kB [ 1914.442706][T22714] Total swap = 124996kB [ 1914.447022][T22714] 2097051 pages RAM [ 1914.450942][T22714] 0 pages HighMem/MovableOnly [ 1914.455747][T22714] 430885 pages reserved [ 1914.460047][T22714] 0 pages cma reserved [ 1914.993145][T22717] trusted_key: encrypted_key: master key parameter 'usersyz' is invalid [ 1915.675366][T17602] Bluetooth: hci4: command 0x0405 tx timeout [ 1916.251831][T10412] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1916.292879][T10412] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1916.774809][T13504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1916.826248][T13504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1917.732691][T22737] ieee802154 phy0 wpan0: encryption failed: -22 [ 1918.272082][T22758] netlink: 'syz.7.3786': attribute type 4 has an invalid length. [ 1918.370798][T22759] netlink: 'syz.7.3786': attribute type 4 has an invalid length. [ 1918.924834][T22766] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3787'. [ 1919.164682][T22765] xt_cgroup: path and classid specified [ 1919.342034][T22772] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3790'. [ 1920.893864][T22794] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3797'. [ 1921.046507][T22799] netlink: 'syz.8.3798': attribute type 4 has an invalid length. [ 1921.113776][T22800] netlink: 'syz.8.3798': attribute type 4 has an invalid length. [ 1921.721550][T22804] Bluetooth: MGMT ver 1.23 [ 1921.937172][T22806] netlink: 'syz.7.3800': attribute type 4 has an invalid length. [ 1921.952222][T22806] netlink: 'syz.7.3800': attribute type 4 has an invalid length. [ 1922.486208][T22812] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3803'. [ 1922.743203][T22811] xt_cgroup: path and classid specified [ 1924.381529][T22841] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3812'. [ 1924.390739][T22841] netlink: 'syz.6.3812': attribute type 2 has an invalid length. [ 1924.399725][T22841] netlink: 'syz.6.3812': attribute type 1 has an invalid length. [ 1924.408181][T22841] netlink: 'syz.6.3812': attribute type 1 has an invalid length. [ 1924.416119][T22841] netlink: 'syz.6.3812': attribute type 1 has an invalid length. [ 1924.798358][T22839] netlink: 'syz.8.3811': attribute type 4 has an invalid length. [ 1924.859421][T22839] netlink: 'syz.8.3811': attribute type 4 has an invalid length. [ 1924.870717][ T30] audit: type=1400 audit(2000001589.878:3946): avc: denied { ioctl } for pid=22844 comm="syz.9.3816" path="socket:[84930]" dev="sockfs" ino=84930 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1925.084295][T22850] usb usb8: selecting invalid altsetting 56942 [ 1925.457659][T22861] trusted_key: encrypted_key: master key parameter 'usersyz' is invalid [ 1926.290022][ T30] audit: type=1400 audit(2000001591.216:3947): avc: denied { map } for pid=22874 comm="syz.7.3825" path="/dev/sg0" dev="devtmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1926.557680][T22879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3824'. [ 1927.304768][ T30] audit: type=1400 audit(2000001591.216:3948): avc: denied { execute } for pid=22874 comm="syz.7.3825" path="/dev/sg0" dev="devtmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1927.636504][T22884] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3826'. [ 1927.645728][T22884] netlink: 'syz.2.3826': attribute type 2 has an invalid length. [ 1927.653491][T22884] netlink: 'syz.2.3826': attribute type 1 has an invalid length. [ 1927.661316][T22884] netlink: 'syz.2.3826': attribute type 1 has an invalid length. [ 1927.669147][T22884] netlink: 'syz.2.3826': attribute type 1 has an invalid length. [ 1930.115718][T22921] openvswitch: netlink: IP tunnel dst address not specified [ 1930.145874][T22921] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1930.261724][T20998] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1930.569676][T20998] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1930.579099][T20998] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1930.587757][T20998] usb 10-1: Product: syz [ 1930.592191][T20998] usb 10-1: Manufacturer: syz [ 1930.597398][T20998] usb 10-1: SerialNumber: syz [ 1930.948419][T20998] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1931.127889][T20980] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1931.341272][T22938] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3848'. [ 1931.586625][T22940] xt_cgroup: path and classid specified [ 1932.311093][T11171] usb 10-1: USB disconnect, device number 2 [ 1932.345751][T20980] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 1932.469448][T22950] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3851'. [ 1932.649264][T20980] ath9k_htc: Failed to initialize the device [ 1932.667993][T11171] usb 10-1: ath9k_htc: USB layer deinitialized [ 1935.247159][T21007] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1935.277638][T22987] trusted_key: encrypted_key: master key parameter 'usersyz' is invalid [ 1935.404019][T22990] warn_alloc: 3 callbacks suppressed [ 1935.404083][T22990] syz.7.3865: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz7,mems_allowed=0-1 [ 1935.425711][T22990] CPU: 0 UID: 0 PID: 22990 Comm: syz.7.3865 Tainted: G L syzkaller #0 PREEMPT(full) [ 1935.425746][T22990] Tainted: [L]=SOFTLOCKUP [ 1935.425760][T22990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1935.425773][T22990] Call Trace: [ 1935.425781][T22990] [ 1935.425789][T22990] dump_stack_lvl+0x100/0x190 [ 1935.425820][T22990] warn_alloc.cold+0x95/0x1c1 [ 1935.425842][T22990] ? __pfx_warn_alloc+0x10/0x10 [ 1935.425877][T22990] ? __lock_acquire+0x4a5/0x2630 [ 1935.425906][T22990] ? rcu_is_watching+0x12/0xc0 [ 1935.425938][T22990] ? trace_sched_exit_tp+0x11c/0x160 [ 1935.425968][T22990] __vmalloc_node_range_noprof+0x136c/0x1630 [ 1935.426000][T22990] ? rcu_is_watching+0x12/0xc0 [ 1935.426031][T22990] ? trace_contention_end+0x122/0x170 [ 1935.426111][T22990] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 1935.426135][T22990] ? dvb_demux_do_ioctl+0x929/0x1200 [ 1935.426161][T22990] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1935.426187][T22990] ? __pfx___mutex_lock+0x10/0x10 [ 1935.426212][T22990] ? lockdep_hardirqs_on+0x78/0x100 [ 1935.426236][T22990] ? irqentry_exit+0x246/0x790 [ 1935.426267][T22990] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 1935.426285][T22990] __vmalloc_node_noprof+0xad/0xf0 [ 1935.426310][T22990] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 1935.426332][T22990] dvb_demux_do_ioctl+0x9e0/0x1200 [ 1935.426353][T22990] ? do_vfs_ioctl+0x226/0x13e0 [ 1935.426377][T22990] dvb_usercopy+0x167/0x340 [ 1935.426407][T22990] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1935.426430][T22990] ? __pfx_dvb_usercopy+0x10/0x10 [ 1935.426458][T22990] ? hook_file_ioctl_common+0x36/0x410 [ 1935.426499][T22990] ? selinux_file_ioctl+0x13b/0x290 [ 1935.426522][T22990] ? selinux_file_ioctl+0xb6/0x290 [ 1935.426551][T22990] dvb_demux_ioctl+0x29/0x40 [ 1935.426580][T22990] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1935.426611][T22990] __x64_sys_ioctl+0x18e/0x210 [ 1935.426634][T22990] do_syscall_64+0x10b/0xf80 [ 1935.426657][T22990] ? clear_bhb_loop+0x40/0x90 [ 1935.426682][T22990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1935.426701][T22990] RIP: 0033:0x7f2ea4d9cdd9 [ 1935.426719][T22990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1935.426738][T22990] RSP: 002b:00007f2ea5c1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1935.426764][T22990] RAX: ffffffffffffffda RBX: 00007f2ea5016180 RCX: 00007f2ea4d9cdd9 [ 1935.426776][T22990] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000003 [ 1935.426788][T22990] RBP: 00007f2ea4e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1935.426799][T22990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1935.426810][T22990] R13: 00007f2ea5016218 R14: 00007f2ea5016180 R15: 00007fff6713ef78 [ 1935.426836][T22990] [ 1935.426987][T22990] Mem-Info: [ 1935.717724][T22990] active_anon:34099 inactive_anon:0 isolated_anon:0 [ 1935.717724][T22990] active_file:21441 inactive_file:41428 isolated_file:0 [ 1935.717724][T22990] unevictable:768 dirty:266 writeback:0 [ 1935.717724][T22990] slab_reclaimable:8740 slab_unreclaimable:122090 [ 1935.717724][T22990] mapped:34694 shmem:26812 pagetables:1626 [ 1935.717724][T22990] sec_pagetables:0 bounce:0 [ 1935.717724][T22990] kernel_misc_reclaimable:0 [ 1935.717724][T22990] free:1231226 free_pcp:14827 free_cma:0 [ 1935.765074][T22990] Node 0 active_anon:136396kB inactive_anon:0kB active_file:85612kB inactive_file:165508kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:138660kB dirty:1060kB writeback:0kB shmem:105712kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14912kB pagetables:6384kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1935.800519][T22990] Node 1 active_anon:0kB inactive_anon:0kB active_file:152kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1935.807864][T21007] usb 9-1: Using ep0 maxpacket: 32 [ 1935.840605][T22990] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1935.870909][T22990] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 1935.876702][T22990] Node 0 DMA32 free:967320kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:136396kB inactive_anon:0kB active_file:85612kB inactive_file:165508kB unevictable:1536kB writepending:1060kB zspages:0kB present:3129332kB managed:2537112kB mlocked:0kB bounce:0kB free_pcp:53584kB local_pcp:33396kB free_cma:0kB [ 1935.910470][T22990] lowmem_reserve[]: 0 0 1 1 1 [ 1935.916204][T22990] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1092kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 1935.947649][T22990] lowmem_reserve[]: 0 0 0 0 0 [ 1935.952527][T22990] Node 1 Normal free:3942224kB boost:0kB min:55828kB low:69784kB high:83740kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:152kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:5544kB local_pcp:5544kB free_cma:0kB [ 1935.985928][T22990] lowmem_reserve[]: 0 0 0 0 0 [ 1935.990829][T22990] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1936.004277][T22990] Node 0 DMA32: 5334*4kB (UME) 4616*8kB (UME) 2854*16kB (UE) 278*32kB (UME) 909*64kB (UME) 454*128kB (UME) 253*256kB (UME) 52*512kB (UME) 43*1024kB (UME) 22*2048kB (UME) 136*4096kB (M) = 966648kB [ 1936.026361][T22990] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1936.038590][T22990] Node 1 Normal: 3*4kB (UM) 11*8kB (UM) 18*16kB (UM) 14*32kB (UM) 17*64kB (UM) 8*128kB (UM) 8*256kB (UM) 4*512kB (UM) 7*1024kB (UM) 2*2048kB (UM) 958*4096kB (M) = 3942276kB [ 1936.047237][T21007] usb 9-1: config 0 has an invalid interface number: 35 but max is 0 [ 1936.056158][T22990] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1936.056179][T22990] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1936.056194][T22990] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1936.056209][T22990] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1936.056225][T22990] 89677 total pagecache pages [ 1936.056234][T22990] 0 pages in swap cache [ 1936.056241][T22990] Free swap = 124996kB [ 1936.056249][T22990] Total swap = 124996kB [ 1936.056258][T22990] 2097051 pages RAM [ 1936.056265][T22990] 0 pages HighMem/MovableOnly [ 1936.056272][T22990] 430885 pages reserved [ 1936.056280][T22990] 0 pages cma reserved [ 1936.160835][T21007] usb 9-1: config 0 has no interface number 0 [ 1936.189098][T21007] usb 9-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1936.216856][T21007] usb 9-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1936.225144][ T30] audit: type=1400 audit(2000001600.500:3949): avc: denied { bind } for pid=22991 comm="syz.7.3868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1936.339914][T21007] usb 9-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1936.371352][T21007] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1936.406309][T21007] usb 9-1: Product: syz [ 1936.413585][T21007] usb 9-1: Manufacturer: syz [ 1936.424692][T21007] usb 9-1: SerialNumber: syz [ 1936.436947][T21007] usb 9-1: config 0 descriptor?? [ 1936.691642][T23008] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3872'. [ 1936.701363][T20980] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1936.775240][T21007] radio-si470x 9-1:0.35: this is not a si470x device. [ 1937.644866][T21007] radio-raremono 9-1:0.35: this is not Thanko's Raremono. [ 1937.679623][T20980] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1937.700550][T20980] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1937.709994][T20980] usb 7-1: config 1 has no interface number 1 [ 1937.716210][T20980] usb 7-1: config 1 interface 2 has no altsetting 0 [ 1937.729733][T20980] usb 7-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice= 0.40 [ 1937.739282][T20980] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1937.747312][T20980] usb 7-1: Product: syz [ 1937.751679][T20980] usb 7-1: Manufacturer: syz [ 1937.756839][T20980] usb 7-1: SerialNumber: syz [ 1938.198733][T21007] usb 9-1: USB disconnect, device number 3 [ 1938.301038][T20980] gspca_main: STV06xx-2.14.0 probing 046d:08f6 [ 1938.330913][T20980] gspca_stv06xx: st6422 sensor detected [ 1938.942000][T23028] netlink: 56 bytes leftover after parsing attributes in process `syz.8.3878'. [ 1938.955854][T23028] netlink: 'syz.8.3878': attribute type 2 has an invalid length. [ 1938.965643][T23028] netlink: 'syz.8.3878': attribute type 1 has an invalid length. [ 1938.975062][T23028] netlink: 'syz.8.3878': attribute type 1 has an invalid length. [ 1938.984718][T23028] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3878'. [ 1939.432405][T23030] netlink: 'syz.9.3877': attribute type 4 has an invalid length. [ 1939.491953][T23031] netlink: 'syz.9.3877': attribute type 4 has an invalid length. [ 1939.856019][T20980] STV06xx 7-1:1.0: probe with driver STV06xx failed with error -71 [ 1939.887456][T20980] hub 7-1:1.2: Invalid hub with more than one config or interface [ 1939.895473][T20980] hub 7-1:1.2: probe with driver hub failed with error -22 [ 1939.915829][T20980] usb 7-1: USB disconnect, device number 10 [ 1940.338769][T23037] trusted_key: encrypted_key: master key parameter 'usersyz' is invalid [ 1940.811879][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1940.818660][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1942.514506][T23070] netlink: 'syz.7.3893': attribute type 4 has an invalid length. [ 1942.530131][T23070] netlink: 'syz.7.3893': attribute type 4 has an invalid length. [ 1942.757046][T23071] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3890'. [ 1942.767658][T23071] netlink: 'syz.2.3890': attribute type 2 has an invalid length. [ 1942.777042][T23071] netlink: 'syz.2.3890': attribute type 1 has an invalid length. [ 1942.786568][T23071] netlink: 'syz.2.3890': attribute type 1 has an invalid length. [ 1942.795844][T23071] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3890'. [ 1944.540619][T23081] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3895'. [ 1944.611910][T23082] netlink: 'syz.7.3894': attribute type 4 has an invalid length. [ 1944.629298][T23082] netlink: 'syz.7.3894': attribute type 4 has an invalid length. [ 1945.368091][T23083] xt_cgroup: path and classid specified [ 1947.221618][T23105] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3900'. [ 1947.702648][T23120] netlink: 'syz.9.3906': attribute type 4 has an invalid length. [ 1947.717133][T23120] netlink: 'syz.9.3906': attribute type 4 has an invalid length. [ 1947.923543][T23125] netlink: 277 bytes leftover after parsing attributes in process `syz.6.3908'. [ 1948.270346][T23140] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1948.278536][T23140] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1948.435166][T23141] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3920'. [ 1949.217668][T23151] trusted_key: encrypted_key: insufficient parameters specified [ 1949.535452][T23161] bridge0: port 3(veth1_to_bridge) entered blocking state [ 1949.549161][T23161] bridge0: port 3(veth1_to_bridge) entered disabled state [ 1949.559240][T23161] veth1_to_bridge: entered allmulticast mode [ 1949.574785][T23161] veth1_to_bridge: entered promiscuous mode [ 1949.581866][T23161] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1949.599481][T23161] bridge0: port 3(veth1_to_bridge) entered blocking state [ 1949.606789][T23161] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 1951.300926][T23183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3928'. [ 1951.770025][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:fc:da:df:b0:73, vlan:0) [ 1951.783025][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:fc:da:df:b0:73, vlan:0) [ 1951.795723][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:fc:da:df:b0:73, vlan:0) [ 1951.808469][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:fc:da:df:b0:73, vlan:0) [ 1951.821058][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:fc:da:df:b0:73, vlan:0) [ 1951.833487][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:fc:da:df:b0:73, vlan:0) [ 1951.845944][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:fc:da:df:b0:73, vlan:0) [ 1951.858412][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:fc:da:df:b0:73, vlan:0) [ 1951.870886][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:fc:da:df:b0:73, vlan:0) [ 1951.883349][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:fc:da:df:b0:73, vlan:0) [ 1956.185819][T23194] trusted_key: encrypted_key: master key parameter 'usersyz' is invalid [ 1957.115827][ C1] net_ratelimit: 15172 callbacks suppressed [ 1957.115851][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:fc:da:df:b0:73, vlan:0) [ 1957.134271][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:fc:da:df:b0:73, vlan:0) [ 1957.146950][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:fc:da:df:b0:73, vlan:0) [ 1957.159501][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:fc:da:df:b0:73, vlan:0) [ 1957.172087][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:fc:da:df:b0:73, vlan:0) [ 1957.184585][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:fc:da:df:b0:73, vlan:0) [ 1957.197047][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:fc:da:df:b0:73, vlan:0) [ 1957.209622][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:fc:da:df:b0:73, vlan:0) [ 1957.222145][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:fc:da:df:b0:73, vlan:0) [ 1957.234659][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:fc:da:df:b0:73, vlan:0) [ 1958.745157][ C1] sched: DL replenish lagged too much [ 1962.469508][ C1] net_ratelimit: 14000 callbacks suppressed [ 1962.469533][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:fc:da:df:b0:73, vlan:0) [ 1962.487911][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1962.500243][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1962.512603][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:fc:da:df:b0:73, vlan:0) [ 1962.524950][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1962.537235][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1962.549692][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:fc:da:df:b0:73, vlan:0) [ 1962.562046][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1962.574377][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1962.587028][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:fc:da:df:b0:73, vlan:0) [ 1967.823193][ C1] net_ratelimit: 13584 callbacks suppressed [ 1967.823215][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1967.841450][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1967.853853][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:fc:da:df:b0:73, vlan:0) [ 1967.866234][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1967.878779][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1967.891197][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:fc:da:df:b0:73, vlan:0) [ 1967.903550][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1967.915863][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1967.928243][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:fc:da:df:b0:73, vlan:0) [ 1967.940656][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1973.176935][ C1] net_ratelimit: 11021 callbacks suppressed [ 1973.176957][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1973.195265][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1973.208501][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:fc:da:df:b0:73, vlan:0) [ 1973.220898][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1973.233199][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1973.245531][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1973.258856][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:fc:da:df:b0:73, vlan:0) [ 1973.271268][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1973.283546][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1973.295876][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1978.530653][ C1] net_ratelimit: 9931 callbacks suppressed [ 1978.530679][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1978.531239][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 1978.536982][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1978.551570][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 1978.561291][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1978.561677][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1978.576164][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 1978.586751][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:fc:da:df:b0:73, vlan:0) [ 1978.600809][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 1978.610557][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1983.884419][ C1] net_ratelimit: 12182 callbacks suppressed [ 1983.884439][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1983.885156][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 1983.890758][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1983.891808][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:fc:da:df:b0:73, vlan:0) [ 1983.905237][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 1983.915102][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1983.915472][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1983.930032][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 1983.939946][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1983.940300][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1989.238110][ C1] net_ratelimit: 11252 callbacks suppressed [ 1989.238133][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1989.238355][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 1989.244458][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1989.248075][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1989.259030][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 1989.269073][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1989.269421][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1989.283681][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 1989.293502][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1989.294676][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:fc:da:df:b0:73, vlan:0) [ 1994.591894][ C1] net_ratelimit: 11302 callbacks suppressed [ 1994.591917][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:fc:da:df:b0:73, vlan:0) [ 1994.592688][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 1994.602118][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1994.612924][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 1994.622802][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1994.623165][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1994.637534][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 1994.647441][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1994.647832][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1994.662164][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 1999.945566][ C1] net_ratelimit: 12573 callbacks suppressed [ 1999.945588][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1999.946565][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 1999.951925][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1999.966274][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 1999.976986][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:fc:da:df:b0:73, vlan:0) [ 1999.990927][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2000.000846][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2000.001398][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2000.015505][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2000.025519][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2005.300158][ C1] net_ratelimit: 13214 callbacks suppressed [ 2005.300180][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:fc:da:df:b0:73, vlan:0) [ 2005.300680][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2005.306526][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2005.306834][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2005.321200][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2005.330979][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2005.331397][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2005.345851][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2005.355532][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2005.355906][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2008.332135][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 2008.349930][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 2010.653761][ C0] net_ratelimit: 12162 callbacks suppressed [ 2010.653777][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2010.663493][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2010.674640][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2010.685154][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:fc:da:df:b0:73, vlan:0) [ 2010.698105][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2010.709037][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2010.709421][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2010.709797][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2010.710240][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2010.710618][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2016.007226][ C1] net_ratelimit: 12596 callbacks suppressed [ 2016.007250][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:fc:da:df:b0:73, vlan:0) [ 2016.007705][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2016.013552][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2016.013883][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2016.027946][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2016.037948][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2016.038332][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2016.052384][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2016.062430][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2016.062786][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2021.360237][ C1] net_ratelimit: 13930 callbacks suppressed [ 2021.360258][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2021.361436][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2021.366591][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2021.381038][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2021.391746][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:fc:da:df:b0:73, vlan:0) [ 2021.405662][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2021.415515][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2021.415912][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2021.429828][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2021.440129][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2026.713896][ C1] net_ratelimit: 13782 callbacks suppressed [ 2026.713917][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2026.715340][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2026.720213][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2026.734446][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2026.744464][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2026.744825][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2026.758972][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2026.769025][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2026.770256][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:fc:da:df:b0:73, vlan:0) [ 2026.783518][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2031.132033][ T5620] Bluetooth: hci0: command 0x0406 tx timeout [ 2032.067886][ C1] net_ratelimit: 13923 callbacks suppressed [ 2032.067908][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2032.069190][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2032.074966][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:fc:da:df:b0:73, vlan:0) [ 2032.088102][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2032.098475][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2032.126518][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2032.137671][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2032.152752][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2032.161466][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2032.161848][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2037.422146][ C1] net_ratelimit: 13769 callbacks suppressed [ 2037.422170][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:fc:da:df:b0:73, vlan:0) [ 2037.422833][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2037.428536][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2037.443381][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2037.453223][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2037.453610][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2037.468454][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2037.477843][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2037.478196][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2037.492754][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2042.775251][ C1] net_ratelimit: 12284 callbacks suppressed [ 2042.775277][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2042.775670][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2042.781869][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2042.782274][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2042.796169][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2042.806154][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2042.806524][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2042.820802][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2042.831470][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:fc:da:df:b0:73, vlan:0) [ 2042.845328][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2048.129267][ C1] net_ratelimit: 11870 callbacks suppressed [ 2048.129287][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:fc:da:df:b0:73, vlan:0) [ 2048.130097][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2048.135582][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2048.136643][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2048.150368][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2048.159979][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2048.160391][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2048.174895][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2048.184488][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2048.184844][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2053.482506][ C0] net_ratelimit: 13220 callbacks suppressed [ 2053.482540][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2053.482640][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2053.489369][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2053.500849][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2053.501253][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2053.501565][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2053.515664][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2053.525746][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2053.526812][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:fc:da:df:b0:73, vlan:0) [ 2053.539093][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2058.836161][ C0] net_ratelimit: 14697 callbacks suppressed [ 2058.836195][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2058.836812][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2058.842990][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2058.854522][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2058.854896][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2058.855202][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2058.869207][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2058.879187][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2058.879536][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2058.892394][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2064.190413][ C0] net_ratelimit: 14626 callbacks suppressed [ 2064.190447][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2064.190733][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2064.197270][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2064.208826][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2064.209213][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2064.222976][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2064.233366][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2064.246881][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2064.257123][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2064.257538][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2069.543506][ C1] net_ratelimit: 14216 callbacks suppressed [ 2069.543527][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2069.543969][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2069.549832][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2069.550145][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2069.564262][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2069.574116][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2069.574487][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2069.587877][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2069.599545][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:fc:da:df:b0:73, vlan:0) [ 2069.613862][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2072.253579][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 2072.271736][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 2074.897640][ C1] net_ratelimit: 14230 callbacks suppressed [ 2074.897662][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2074.897802][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2074.903978][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2074.904320][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2074.917259][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2074.928308][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2074.928694][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2074.929011][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2074.943145][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2074.953670][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:fc:da:df:b0:73, vlan:0) [ 2080.250923][ C1] net_ratelimit: 14319 callbacks suppressed [ 2080.250946][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2080.252279][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2080.257417][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2080.270511][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2080.281648][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2080.282015][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2080.282336][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2080.294950][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2080.307144][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:fc:da:df:b0:73, vlan:0) [ 2080.307837][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2085.604738][ C1] net_ratelimit: 14783 callbacks suppressed [ 2085.604760][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2085.605873][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2085.611055][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2085.624292][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2085.635816][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:fc:da:df:b0:73, vlan:0) [ 2085.650080][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2085.660413][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2085.673592][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2085.684793][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2085.685155][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2090.958428][ C1] net_ratelimit: 14885 callbacks suppressed [ 2090.958450][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2090.958452][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2090.958908][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2090.964821][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2090.979028][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2090.989050][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2090.989412][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2091.002529][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2091.013585][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2091.013956][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2095.702922][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2095.709911][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P136/1:b..l [ 2095.718577][ C1] rcu: (detected by 1, t=10502 jiffies, g=133921, q=3542 ncpus=2) [ 2095.726472][ C1] task:kworker/u8:5 state:R running task stack:22152 pid:136 tgid:136 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2095.742145][ C1] Workqueue: events_unbound toggle_allocation_gate [ 2095.748673][ C1] Call Trace: [ 2095.751953][ C1] [ 2095.754880][ C1] __schedule+0x10e9/0x6820 [ 2095.759441][ C1] ? __pfx___schedule+0x10/0x10 [ 2095.764296][ C1] ? flush_tlb_mm_range+0x347/0x16f0 [ 2095.769583][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 2095.774953][ C1] preempt_schedule_common+0x42/0xc0 [ 2095.780238][ C1] preempt_schedule_thunk+0x16/0x30 [ 2095.785440][ C1] ? __kmalloc_node_track_caller_noprof+0xfa/0x850 [ 2095.791947][ C1] _raw_spin_unlock+0x3e/0x50 [ 2095.796621][ C1] __text_poke+0x502/0xae0 [ 2095.801041][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 2095.806420][ C1] ? __pfx___text_poke+0x10/0x10 [ 2095.811371][ C1] ? __kmalloc_node_track_caller_noprof+0xfa/0x850 [ 2095.817893][ C1] ? __kmalloc_node_track_caller_noprof+0xfa/0x850 [ 2095.824405][ C1] smp_text_poke_batch_finish+0x2fb/0xc60 [ 2095.830321][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 2095.836568][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 2095.842811][ C1] ? __sanitizer_cov_trace_pc+0x2a/0x70 [ 2095.848362][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 2095.854341][ C1] jump_label_update+0x37a/0x550 [ 2095.859286][ C1] static_key_enable_cpuslocked+0x1bc/0x270 [ 2095.865187][ C1] static_key_enable+0x1a/0x20 [ 2095.869954][ C1] toggle_allocation_gate+0xfe/0x2d0 [ 2095.875237][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 2095.881131][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 2095.886527][ C1] process_one_work+0xa0e/0x1980 [ 2095.891494][ C1] ? __pfx_process_one_work+0x10/0x10 [ 2095.896877][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 2095.902771][ C1] worker_thread+0x5ef/0xe50 [ 2095.907375][ C1] ? kthread+0x13a/0x450 [ 2095.911619][ C1] ? __pfx_worker_thread+0x10/0x10 [ 2095.916739][ C1] kthread+0x370/0x450 [ 2095.920810][ C1] ? __pfx_kthread+0x10/0x10 [ 2095.925412][ C1] ret_from_fork+0x72b/0xd50 [ 2095.930022][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 2095.935136][ C1] ? __switch_to+0x800/0x1100 [ 2095.939819][ C1] ? __pfx_kthread+0x10/0x10 [ 2095.944415][ C1] ret_from_fork_asm+0x1a/0x30 [ 2095.949200][ C1] [ 2095.952212][ C1] rcu: rcu_preempt kthread starved for 9233 jiffies! g133921 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 2095.963434][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2095.973407][ C1] rcu: RCU grace-period kthread stack dump: [ 2095.979298][ C1] task:rcu_preempt state:R running task stack:28216 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 2095.992877][ C1] Call Trace: [ 2095.996155][ C1] [ 2095.999084][ C1] __schedule+0x10e9/0x6820 [ 2096.003604][ C1] ? __pfx___schedule+0x10/0x10 [ 2096.008453][ C1] ? find_held_lock+0x2b/0x80 [ 2096.013139][ C1] ? schedule+0x2bf/0x390 [ 2096.017473][ C1] schedule+0xdd/0x390 [ 2096.021543][ C1] schedule_timeout+0x127/0x280 [ 2096.026398][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 2096.031788][ C1] ? __pfx_process_timeout+0x10/0x10 [ 2096.037113][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2096.042933][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 2096.048503][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 2096.053270][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 2096.058559][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 2096.063502][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 2096.068713][ C1] rcu_gp_kthread+0x179/0x230 [ 2096.073398][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2096.078600][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2096.084420][ C1] ? __kthread_parkme+0x18c/0x230 [ 2096.089456][ C1] ? kthread+0x13a/0x450 [ 2096.093703][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2096.098908][ C1] kthread+0x370/0x450 [ 2096.102993][ C1] ? __pfx_kthread+0x10/0x10 [ 2096.107600][ C1] ret_from_fork+0x72b/0xd50 [ 2096.112203][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 2096.117322][ C1] ? __switch_to+0x800/0x1100 [ 2096.122014][ C1] ? __pfx_kthread+0x10/0x10 [ 2096.126611][ C1] ret_from_fork_asm+0x1a/0x30 [ 2096.131390][ C1] [ 2096.134403][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 2096.140715][ C1] Sending NMI from CPU 1 to CPUs 0: [ 2096.145921][ C0] NMI backtrace for cpu 0 [ 2096.145942][ C0] CPU: 0 UID: 0 PID: 20188 Comm: kworker/u8:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 2096.145964][ C0] Tainted: [L]=SOFTLOCKUP [ 2096.145969][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2096.145979][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 2096.146005][ C0] RIP: 0010:nf_nat_ipv6_fn+0xfa/0x2d0 [ 2096.146028][ C0] Code: e8 83 e0 01 49 89 c7 48 89 c6 e8 e1 6c 51 f8 4d 85 ff 75 65 e8 f7 71 51 f8 4c 89 e2 48 89 ee 4c 89 ef e8 99 c6 ff ff 41 89 c7 e1 71 51 f8 48 b8 00 00 00 00 00 fc ff df 48 01 c3 48 c7 03 00 [ 2096.146041][ C0] RSP: 0018:ffffc90000007558 EFLAGS: 00000297 [ 2096.146052][ C0] RAX: 0000000000000000 RBX: 1ffff92000000ead RCX: ffffffff89b720f0 [ 2096.146062][ C0] RDX: 0000000000000000 RSI: 0000000000000007 RDI: ffff888039092500 [ 2096.146071][ C0] RBP: ffff888157baa640 R08: 0000000000000007 R09: 0000000000000007 [ 2096.146080][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90000007750 [ 2096.146094][ C0] R13: ffff888068bd70c0 R14: 0000000000000000 R15: 0000000000000001 [ 2096.146103][ C0] FS: 0000000000000000(0000) GS:ffff888124375000(0000) knlGS:0000000000000000 [ 2096.146118][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2096.146127][ C0] CR2: 00007fd0bb8cd080 CR3: 00000000838f4000 CR4: 00000000003526f0 [ 2096.146136][ C0] Call Trace: [ 2096.146142][ C0] [ 2096.146149][ C0] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 2096.146171][ C0] ? ip6table_mangle_hook+0xcb/0x770 [ 2096.146190][ C0] nf_nat_ipv6_in+0x14c/0x340 [ 2096.146202][ C0] ? __pfx_ip6table_mangle_hook+0x10/0x10 [ 2096.146219][ C0] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 2096.146232][ C0] ? lock_acquire+0x1b1/0x370 [ 2096.146252][ C0] nf_hook_slow+0xbf/0x220 [ 2096.146269][ C0] br_nf_pre_routing_ipv6+0x51f/0x8b0 [ 2096.146290][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 2096.146309][ C0] ? lock_acquire+0x1b1/0x370 [ 2096.146326][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 2096.146345][ C0] ? net_generic+0xea/0x2a0 [ 2096.146364][ C0] br_nf_pre_routing+0x90f/0x1560 [ 2096.146385][ C0] br_handle_frame+0xcdd/0x1520 [ 2096.146405][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 2096.146424][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 2096.146445][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 2096.146463][ C0] __netif_receive_skb_core.constprop.0+0x6c5/0x3530 [ 2096.146486][ C0] ? kmem_cache_free+0x127/0x6c0 [ 2096.146505][ C0] ? skb_release_data+0x6ca/0x8e0 [ 2096.146524][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 2096.146543][ C0] ? kfree_skbmem+0x19f/0x210 [ 2096.146558][ C0] ? sk_skb_reason_drop+0x114/0x1b0 [ 2096.146571][ C0] ? ip6_mc_input+0x51a/0xf50 [ 2096.146593][ C0] ? __lock_acquire+0x4a5/0x2630 [ 2096.146611][ C0] ? process_backlog+0x32a/0x1580 [ 2096.146628][ C0] __netif_receive_skb_one_core+0xb0/0x1e0 [ 2096.146645][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 2096.146663][ C0] ? lock_acquire+0x1b1/0x370 [ 2096.146679][ C0] ? process_backlog+0x32a/0x1580 [ 2096.146697][ C0] ? process_backlog+0x32a/0x1580 [ 2096.146712][ C0] __netif_receive_skb+0x1f/0x120 [ 2096.146729][ C0] process_backlog+0x37a/0x1580 [ 2096.146748][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 2096.146766][ C0] net_rx_action+0xa40/0xf20 [ 2096.146787][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 2096.146804][ C0] ? taprio_dequeue+0x166/0x5f0 [ 2096.146824][ C0] ? rcu_is_watching+0x12/0xc0 [ 2096.146843][ C0] ? __pfx_xfrm_dev_backlog+0x10/0x10 [ 2096.146866][ C0] ? net_tx_action+0x6cd/0xf90 [ 2096.146880][ C0] handle_softirqs+0x1ea/0xa00 [ 2096.146900][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 2096.146919][ C0] ? _raw_spin_unlock+0x28/0x50 [ 2096.146932][ C0] ? __hrtimer_rearm_deferred+0x9b/0x740 [ 2096.146947][ C0] __irq_exit_rcu+0x162/0x210 [ 2096.146965][ C0] irq_exit_rcu+0x9/0x30 [ 2096.146982][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 2096.146997][ C0] [ 2096.147002][ C0] [ 2096.147007][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2096.147021][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 2096.147037][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 a6 76 57 f6 48 89 df e8 7e c6 57 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 75 98 47 f6 65 8b 05 fe ae 7d 08 85 c0 74 16 5b [ 2096.147048][ C0] RSP: 0018:ffffc900037dfb48 EFLAGS: 00000246 [ 2096.147059][ C0] RAX: 0000000000000006 RBX: ffff888036995af8 RCX: 0000000000000040 [ 2096.147067][ C0] RDX: 0000000000000000 RSI: ffffffff8df1ff3e RDI: ffffffff8c1c3680 [ 2096.147077][ C0] RBP: 0000000000000293 R08: 0000000000000001 R09: 0000000000000000 [ 2096.147085][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000293 [ 2096.147099][ C0] R13: ffff888036995af8 R14: ffff8880341c23c0 R15: 0000000000000080 [ 2096.147113][ C0] skb_dequeue+0x126/0x180 [ 2096.147129][ C0] ieee80211_iface_work+0x21a/0x13e0 [ 2096.147152][ C0] cfg80211_wiphy_work+0x410/0x570 [ 2096.147172][ C0] process_one_work+0xa0e/0x1980 [ 2096.147193][ C0] ? __pfx_process_one_work+0x10/0x10 [ 2096.147213][ C0] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 2096.147232][ C0] worker_thread+0x5ef/0xe50 [ 2096.147251][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2096.147269][ C0] ? kthread+0x13a/0x450 [ 2096.147284][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2096.147299][ C0] kthread+0x370/0x450 [ 2096.147313][ C0] ? __pfx_kthread+0x10/0x10 [ 2096.147329][ C0] ret_from_fork+0x72b/0xd50 [ 2096.147347][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 2096.147364][ C0] ? __switch_to+0x800/0x1100 [ 2096.147383][ C0] ? __pfx_kthread+0x10/0x10 [ 2096.147399][ C0] ret_from_fork_asm+0x1a/0x30 [ 2096.147422][ C0] [ 2096.344915][ C0] net_ratelimit: 12967 callbacks suppressed [ 2096.344945][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2096.347349][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2096.352649][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2096.356930][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2096.365996][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2096.368376][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2096.374264][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2096.380447][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2096.380768][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2096.388784][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2101.698270][ C1] net_ratelimit: 12304 callbacks suppressed [ 2101.698292][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:fc:da:df:b0:73, vlan:0) [ 2101.699802][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2101.704983][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2101.717770][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2101.729601][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2101.745087][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2101.752912][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2101.753250][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2101.766227][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) [ 2101.777289][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)