last executing test programs: 2m13.901047359s ago: executing program 1 (id=183): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) syz_open_dev$media(0x0, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x2) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f0000000440)={0x1, 0x0, r6}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000100)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r4, 0xc01464ba, &(0x7f0000000140)={0x3cb, 0x0, r7}) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2, 0x0, 0x3, 0x1, 0x3, 0x8}}, 0x120) r8 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r8, 0x5452, &(0x7f0000001840)=0x5d4) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r8, 0x7a5, &(0x7f0000000180)={{}, 0x1, 0x2, 0x5}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x3}) write$UHID_DESTROY(r0, &(0x7f0000000200), 0x4) 2m11.557693285s ago: executing program 1 (id=187): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000540000000000000000000100000000000000"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x38) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socket$alg(0x26, 0x5, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0x14004, 0x100000, 0x8, 0x1, 0xfe}, {0x0, 0x2000, 0xf, 0x0, 0x0, 0x0, 0x0, 0xff, 0x8, 0x0, 0x6}, {0xd000, 0xf000, 0x0, 0x0, 0xf9, 0x0, 0x0, 0x0, 0x23, 0x0, 0x4}, {0x5000, 0xffff1000, 0xf, 0x41, 0x0, 0x2, 0x1, 0xfc, 0x0, 0x6}, {0x1, 0xffff1000, 0xc, 0x1, 0x3, 0x10, 0x0, 0x0, 0x1, 0x0, 0xb6, 0x90}, {0x2, 0x100000, 0x0, 0x6, 0xf}, {0x8000000, 0xeeee8000, 0xa, 0x0, 0x2, 0x0, 0x9, 0x7, 0x3a, 0x2, 0xff}, {0x0, 0x2, 0x0, 0x2, 0x0, 0x6, 0x7, 0x0, 0xfa, 0x0, 0x0, 0x5}, {0x0, 0x400}, {0xdddd0000}, 0xddf8fffb, 0x0, 0xeeee0000, 0x100, 0x8, 0x8000, 0xffff1000, [0x0, 0x10000000000, 0x2]}) ioctl$KVM_TRANSLATE(r7, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50}) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) link(0x0, &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2m9.925173413s ago: executing program 4 (id=191): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a090400000000000000000200000048000480100001800c0001006e6f747261636b00340001800c0001007061796c6f616400240002800800024000000000080001400000000a080003400000000508000440000000020900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) 2m9.299720125s ago: executing program 4 (id=192): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x10, &(0x7f0000000a00)=""/128, &(0x7f0000000000)=0x80) (fail_nth: 1) 2m9.234688644s ago: executing program 2 (id=193): r0 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x2, 0x6, 0x4, 0xa0c, 0xfffffff9}) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) (rerun: 64) ioctl$SNDRV_PCM_IOCTL_LINK(r1, 0x40044160, &(0x7f00000000c0)) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x5, 0xd, 0x95a, 0x3460, 0x6}, 0x14) (async, rerun: 64) r2 = syz_open_dev$vcsa(&(0x7f0000000140), 0xfff, 0x4802) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r2, 0x4122, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000180)="5857e112be4a648d620c2bd17d63d68707d3cffadf37b4b6cad2ff1f63e58b3ef08ccd3c7088529211ab20734a0e46123c017e5d3cc7283a7122ce1b6d1f9532569e3d10c136173966515e8d8cac155cd14288797e5c2ed935a811971a475d722ab368a0756488a1c14d8d399682c1f8b63ff4c194348413d7245da51042e83e2249a70d7a02e87b4decf5664e897251ed879af9fd10306b8b0b161c1960da5a62b3e0a8a8944af5c03928d6b02e81bc53f4894d07cf7d333c482b51569935a38a9c0290ded5", 0xc6, 0x31, 0x0, 0x0) (async) ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000000280)) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x400880, 0x1aa) sendmsg$inet_sctp(r4, &(0x7f0000001540)={&(0x7f0000000300)=@in6={0xa, 0x4e24, 0x6, @mcast1, 0x3}, 0x1c, &(0x7f0000001500)=[{&(0x7f0000000340)="189efb50b1deea6e070a30bada928822d11e592743088ea9bbdca9c0837f283c554f2d8c04bd05227372d54da1229d1db126", 0x32}, {&(0x7f0000000380)="6ba2f60785a373f385007c840458128f53af35579024281411a2f36d50ca111af1ac31f5da27e19c763b6c42c7357e33c716e5e5bbdb8295fd28d1c4786ca6a8f447987ae794c8680ca76e71a4169ec18917664b33ebd802e88c2b57a263e54b73d098652c67f849d549ca1d3c6f253970d511e280b98e850c633e5d667e3e2b342be11379d74e44978fb05d01fdc205dbb24cfdb3cb829c89b9ad58e7cbc48ebde0d23eb0f84ac21199fdc9e31f3af330434fd167826ae53eb33fae39140403f005493fa505c906bad64ddb1cf6", 0xce}, {&(0x7f0000000480)="7b943560ddf21bf3982f47bf9d46df46b37679a96692318f75494afad3fc1ae5ff4e632511d1efe84681933661ecd6694a682f9f4453b078aaa5f080212dfc82226cc807a407597fc3f0085140c89be1e6c1e178036e37", 0x57}, {&(0x7f0000000500)="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", 0x1000}], 0x4, 0x0, 0x0, 0x20002000}, 0x4e080) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000001580)) (async) sendmsg$nl_route(r1, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)=@RTM_GETMDB={0x18, 0x56, 0x20, 0x70bd27, 0x25dfdbfd, {}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x4805) (async, rerun: 64) mkdirat$cgroup_root(0xffffff9c, &(0x7f00000016c0)='./cgroup.net/syz1\x00', 0x1ff) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000001700)={0x9, 0x1, 0x2}) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000001740)=0x2) r5 = syz_open_dev$evdev(&(0x7f0000001780), 0x3, 0x428000) ioctl$EVIOCGABS0(r5, 0x80184540, &(0x7f00000017c0)=""/4096) (async) bind$unix(r4, &(0x7f00000027c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) ioctl$AUTOFS_IOC_EXPIRE(r5, 0x810c9365, &(0x7f0000002840)={{0x9e, 0x7ff}, 0x100, './file0\x00'}) r6 = accept4$unix(r1, &(0x7f0000002980)=@abs, &(0x7f0000002a00)=0x6e, 0x80000) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000002a80)={'veth1_virt_wifi\x00', &(0x7f0000002a40)=@ethtool_test={0x1a, 0x6, 0x4, 0x6, [0x2, 0xc0000000000, 0xbfe, 0x7, 0xb, 0x5]}}) pread64(r5, &(0x7f0000002ac0)=""/72, 0x48, 0x4) unlink(&(0x7f0000002b40)='./file0\x00') r7 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCGARP(r7, 0x8954, &(0x7f0000002b80)={{0x2, 0x4e22, @multicast1}, {0x306, @remote}, 0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'team_slave_1\x00'}) (async) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) (async) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000002c80)={0x0, 0x6e}, &(0x7f0000002cc0)=0x8) 2m8.569154497s ago: executing program 4 (id=194): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x5, 0xa, 0x6}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000280)={r3, 0x0, r4, 0x0, 0x0, 0x8, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x24040804}, 0x20018815) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 2m8.568240932s ago: executing program 1 (id=195): msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x6a040000) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_GET_TSC(0x43, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x2, 0x0, 0x0, 0xb4d, 0x9, 0x8, 0x4, 0x2}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs/binder1\x00', 0x802, 0x0) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000000280)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x18\xad\xaaY\x85\x15\x95\xfe\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7fx\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaAfC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0J\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4$\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f\xe5\x1f_J\xd0=U\x88t\xe7\xab\xbb\x93J\xff\x923\xd5\xc7\xc8\xef\x00c3\xea\xab\xb4\'\bY}\x1f\x80v\r\xa8\xe4>\x185|\nF\xabB\x94\x0e_\x00\x8b\x95\x85\xbbE\\\x1a\xf8\xefI h\xd4\xf7\x8fo\xd3f\x7f\xc6M>\xd3\xa3S\xf3\xe1\xb4\xe4>P\x88\xfat\x86_wYv0i\x04JZ\xde\x1c\xb1qA\xceEj\x9b\vA\xf7.d\x80ni\xe5?\xe9\x89+\x1e;|M`/1\xba\x8cHd\x88\x990e[[\xb2X`\xda\xad;>N\x9f\xfb-\xf6\x96\xd6o,^\x8a\xea\f\x03\xfcU\x01%<{g\xdc\x14\x00O\x88\\\x19\xa9D\xde\xf1\xceE\xbc\xad\x00\x00\x00\x00', 0x3) ftruncate(r5, 0xffff) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000100)={r5, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000080)=0x1) close_range(r3, 0xffffffffffffffff, 0x0) recvmmsg(r2, &(0x7f00000001c0), 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) 2m8.538466689s ago: executing program 2 (id=196): r0 = socket(0x8, 0x80b, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x2, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc0f8565c, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/97, 0x61}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}], 0x7, &(0x7f0000000600)=""/191, 0xbf}, 0x1}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001780), r3) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r3, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001880)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB='%\t%\x00'/14], 0x14}, 0x1, 0x0, 0x0, 0x4801}, 0x80) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x1, 0x7, 0x7, 0x2, {{0x32, 0x4, 0x1, 0x2e, 0xc8, 0x65, 0x0, 0x7, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@timestamp_addr={0x44, 0x3c, 0xa7, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc13c}, {@broadcast, 0x4b7b}, {@remote, 0x8}, {@multicast2, 0x1d7}, {@multicast1}, {@rand_addr=0x64010101, 0x1}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x3}]}, @cipso={0x86, 0x16, 0x0, [{0x2, 0x10, "0c98adff84cde1687ef3663633d5"}]}, @lsrr={0x83, 0x17, 0xd6, [@dev={0xac, 0x14, 0x14, 0x43}, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @private=0xa010102]}, @timestamp={0x44, 0xc, 0x70, 0x0, 0x7, [0x2, 0x8]}, @ra={0x94, 0x4}, @cipso={0x86, 0x3a, 0x1, [{0x7, 0xd, "3e3687ceb62d30f6d3f7cd"}, {0x2, 0x4, "16bc"}, {0x2, 0xe, "e32e1a22718aec9a422af35d"}, {0x0, 0xd, "0d1f94156e916564b03c77"}, {0x1, 0x8, "addc46e3453d"}]}]}}}}}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r8, &(0x7f0000000000)={0x13, 0x10, 0x7, {0x0, r9, 0x1}}, 0x18) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), r3) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000940)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000900)={&(0x7f0000000a00)={0x388, r10, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2f8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x947b}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xb, @dev={0xfe, 0x80, '\x00', 0x16}, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x8, @empty, 0xde}}}}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3fd021b4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xdcac785}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0xd8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd25c}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd39}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @private=0xa010102}}, {0x14, 0x2, @in={0x2, 0x4e20, @private=0xa010100}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'sit0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1, @mcast2, 0x800}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xfffffff7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x33}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}]}]}, @TIPC_NLA_MEDIA={0x128, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x23b}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x87}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}]}]}, 0x388}, 0x1, 0x0, 0x0, 0x48001}, 0x24048084) r11 = dup(r7) syz_kvm_setup_cpu$x86(r11, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r12, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r12, 0x0, 0x30, &(0x7f0000001140)={0x3, {{0x2, 0x4e23, @multicast2}}}, 0x90) (fail_nth: 1) mknod$loop(&(0x7f00000006c0)='./file0\x00', 0x1000, 0x1) r13 = socket$inet6_udp(0xa, 0x2, 0x0) r14 = syz_genetlink_get_family_id$gtp(&(0x7f0000000e00), r3) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000ec0)={'syztnl1\x00', &(0x7f0000000e40)={'syztnl0\x00', r5, 0x2f, 0x9, 0x7f, 0x1, 0xa, @loopback, @remote, 0x7, 0x20, 0x81, 0x6}}) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000f80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x3c, r14, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FAMILY={0x5, 0xd, 0x2c}, @GTPA_LINK={0x8, 0x1, r15}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_FAMILY={0x5, 0xd, 0x1e}, @GTPA_FAMILY={0x5, 0xd, 0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20048854) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r11, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x0, 0x14, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xf9, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r13, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000540)={'syztnl2\x00', r16, 0x4, 0x9, 0x0, 0xf7, 0x48, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x700, 0x8000, 0x3, 0x3}}) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="88000000", @ANYRES16=r4, @ANYBLOB="080028bd7000fedbdf06000000000a00004a9f8a0cfc", @ANYRES32=r5, @ANYBLOB="080004000200000005000500040000003800068014000400fc0100000000000000000000000000010500020004000000080006000e000000080006000000000008000700", @ANYRES32=r16, @ANYBLOB="050005005400000005000500aa000000050005000c000000"], 0x88}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000000) 2m8.51552961s ago: executing program 0 (id=197): modify_ldt$write(0x1, &(0x7f0000000240)={0x1000, 0x0, 0x2000}, 0x10) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) (async, rerun: 64) add_key(0x0, &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) (async, rerun: 64) r2 = syz_open_dev$swradio(&(0x7f00000012c0), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000080)={0xb, @raw_data="4355303869080408cd249ec7efb301198680b5be6e23aeee037757247f8e7cf0314d80d8580d64e14364154a0a387d927cd57e123ba1efbe01652a5f640684fa5e893e897ccc3074465e163176e53cd24bf2af34498cc63505008850dd4c66c27b1a79895f7fd2f1e0808bce73abcfc38c2403597d41733d28f53f05bb06b0d4f2abb107a766aeb4184284d3088a97541741bb90239de08950c97b7a438137b639689d695fd868a1a509524b4a3a3d3e5afbd859c1ec4e282a50c8b1a2d85bdb653a9ce0918200"}) ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000000c0)={0xfffffffffffffffa, 0xd, 0x8}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2000c050) (async, rerun: 32) getrlimit(0xd, &(0x7f0000000100)) (async, rerun: 32) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') (async, rerun: 64) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (rerun: 64) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000) (async, rerun: 32) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x0}) (async, rerun: 32) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r5, 0x7ab, &(0x7f0000000040)={&(0x7f0000000780)={{@any, 0x5}, {@hyper, 0x2}, 0x400, "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"}, 0x418, 0x8}) pread64(r4, &(0x7f0000000600)=""/4099, 0x1003, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) (async, rerun: 64) r7 = socket(0x40000000015, 0x5, 0x0) (rerun: 64) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async) getsockname$l2tp(r7, 0x0, &(0x7f0000000080)) (async) write$P9_RSTATu(r6, &(0x7f0000001640)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0], 0x240) (async, rerun: 64) syz_clone(0x1000, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000280)="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") (rerun: 64) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f00000001c0)) (async) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m8.193120353s ago: executing program 3 (id=198): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffffe, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0xfffffffb}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x1070bd28, 0x25dfdbf7, {0x0, 0x0, 0x0, r3, {0xf000, 0x7}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0xc8804) (fail_nth: 1) 2m7.902182273s ago: executing program 4 (id=199): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000300)="bc", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x4, @remote, 0x1}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="7f", 0x1}], 0x1}}], 0x2, 0x4) shutdown(r0, 0x1) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x801, 0x5, 0x0, 0x1001, 0x1, 0x27, 0x0, 0x7}, 0x20) 2m7.799416775s ago: executing program 4 (id=200): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3100, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x807, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000000c0)={0x14, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x8}]}}, 0x0}, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x18}, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) write$sndseq(0xffffffffffffffff, &(0x7f0000000400)=[{0x1, 0x3, 0xd5, 0x9, @time={0xc, 0x6}, {0x40, 0xc0}, {0x8, 0x1}, @time=@tick=0x6}, {0x8, 0x8, 0x75, 0xe, @tick=0x1, {0x69, 0x80}, {0x2}, @note={0x1, 0x57, 0x3, 0x8, 0x9}}], 0x38) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r4, @ANYRES32=0x0, @ANYBLOB="000200000000000004001a8014003500"], 0x38}}, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'dummy0\x00', &(0x7f0000000700)=@ethtool_rxnfc={0x0, 0x9, 0x7fff, {0xe, @ah_ip4_spec={@rand_addr=0x64010102, @rand_addr=0x64010100, 0x8, 0x7f}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x10, 0x8f75, [0x6, 0x4]}, @esp_ip6_spec={@dev={0xfe, 0x80, '\x00', 0x1c}, @empty, 0x5, 0x34}, {0x0, @remote, 0x8, 0xd, [0x7ff]}, 0xffffffff7fffffff, 0x5}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9ea685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902060f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa415ac4d31c4f7a1", 0x8b, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r7, &(0x7f0000000040)=[{&(0x7f0000000180)=""/88, 0x58}], 0x1, 0x78, 0x0) r8 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1241, 0x5015, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x548a, 0xff, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) r9 = syz_io_uring_complete(0x0) getsockopt$IP6T_SO_GET_INFO(r9, 0x29, 0x40, &(0x7f0000000100)={'filter\x00', 0x0, [0x93, 0x0, 0xfff, 0x1b800000, 0x2]}, &(0x7f0000000080)=0x54) syz_usb_control_io(r8, &(0x7f00000002c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB=' \"m'], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x24000880) 2m7.71315314s ago: executing program 0 (id=201): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x6, 0x1, 0x0, "d30580c9042b7275077bafe6410c2087850000000000000500000080001500", 0x3231564e}) unshare(0x22020600) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "63d038"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "de"}]}}, 0x0, 0x36}, 0x28) r1 = socket(0xa, 0x3, 0x4) socket(0x11, 0x5, 0x9) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') 2m7.319486173s ago: executing program 2 (id=202): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto(r0, &(0x7f0000000200)="bd", 0x1, 0x800, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000280)="c0d3bb5d070c9cc2c292662696ad0f4b02ff3f23ed4d1b5fb9432b560d37a359cb29c113", 0x24, 0x804, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window, @mss={0x2, 0x8}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @timestamp, @mss={0x2, 0x1}, @window={0x3, 0x7, 0xceca}], 0x20000000000002b5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0), 0x0, 0x805, 0x0, 0x0) 2m7.189132026s ago: executing program 2 (id=203): unshare(0x2c020400) (async) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x80, 0x7}, 0x4) r1 = open(&(0x7f0000000080)='./file0\x00', 0x1, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) (async) getsockopt$inet_opts(r2, 0x0, 0x0, &(0x7f0000000140)=""/104, &(0x7f00000000c0)=0x68) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000739000/0x4000)=nil, 0x4000, 0x0, 0x2010, r2, 0x0) (async) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0) (async) unshare(0x20000000) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r4, &(0x7f0000000080)=[{0x31, 0x8, 0x0, 0xfd, @time={0x5, 0x1}, {0x8}, {0xe}, @connect={{}, {0x1}}}], 0x1c) syz_usb_ep_read(r3, 0xf, 0xffffffffffffffd2, 0x0) 2m6.749006984s ago: executing program 0 (id=204): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x2d, 0x9, 0x70bd2d, 0x0, {0x4}, [@typed={0x4, 0x1e}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000001580)={0x28, 0x0, 0xffffffff, @host}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001300)={'syztnl2\x00', &(0x7f0000000240)={'tunl0\x00', 0x0, 0x1, 0x10, 0x3, 0x5, {{0x17, 0x4, 0x3, 0x39, 0x5c, 0x67, 0x0, 0x2, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, @broadcast, {[@cipso={0x86, 0xb, 0xffffffffffffffff, [{0x1, 0x5, "14c337"}]}, @end, @rr={0x7, 0x23, 0xed, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0xd}, @loopback, @dev={0xac, 0x14, 0x14, 0x35}, @empty]}, @cipso={0x86, 0x17, 0xffffffffffffffff, [{0x0, 0xa, "3a1ce2edd5384792"}, {0x2, 0x7, "3e87d042e4"}]}]}}}}}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x2800, 'cryptd(nhpoly1305-sse2)\x00'}, 0x58) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000013c0)={'ip6tnl0\x00', &(0x7f0000001340)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x0, 0x7, 0x0, @mcast1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7, 0x8, 0x2, 0x6}}) r6 = openat$adsp1(0xffffff9c, &(0x7f0000000380), 0x1, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r6, 0xc0189436, &(0x7f00000003c0)) sendmmsg$inet(r0, &(0x7f0000001540)=[{{&(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000080)="fcb415062e57663031272a32b7fa71963bec579c0470f5a89b5dcb7160e63b548c8e9ea9e755f613880ac5fbfe5b33eabfbd9c4547c1992d3e508d0f77898f7af95a100d0a6c2a238322267b19c9867664c3e22e10104dd881a7fb46104c6494eb784034c886573fb8b0f64c28455d7a2b4bf6594c8acbdf61a568344c25e25038de12cb09dc3bdcdb0190ecd5b1edde646068812ffc354ba30aa9270a777be97bd7323e748a51fc231ab7261994b634a99ece06ae5b44", 0xb7}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000000140)="e5c15d910c89b5a7a754e1ab5b74d87526557794be7662c691b0764972c2d577a093261d97da75981e889e1c2b2a6e5682318f6b368f9114a457da6a6860dcffbabd76a8c8a47e235139646f4269688b948198fae2c39f658d5dfb3d227e2a7dfc359a09735b475af0e5fca89fa3734611710a933ee269d74761505bc24c1e6f24d50bc4eff3e5e7b01bd3305eb6e9f9878890f1f9d02c5397b30e7f1214fd421f1e079b64112343ee", 0xa9}], 0x3, &(0x7f0000001400)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @remote}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x1000}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r3, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}, @ip_ttl={{0x10, 0x0, 0x2, 0x10001}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0xf}}, @ip_retopts={{0x7c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0xb8, 0x3, 0xd, [{@rand_addr=0x64010101, 0x80}, {@private=0xa010100, 0x3}, {@multicast2, 0x2}]}, @lsrr={0x83, 0x1b, 0xd, [@multicast2, @local, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @multicast2]}, @noop, @end, @timestamp_addr={0x44, 0x34, 0xe0, 0x1, 0x5, [{@multicast1, 0x8}, {@broadcast, 0xa8e}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@broadcast, 0x3a}, {@loopback, 0x2}, {@remote, 0x6}]}, @end, @end]}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r5, @broadcast, @dev={0xac, 0x14, 0x14, 0x27}}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x8}}], 0x124}}], 0x1, 0x2404c0c0) 2m6.748597783s ago: executing program 3 (id=205): socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500", @ANYRES8=r0], 0x7c}, 0x1, 0x0, 0x0, 0x40094}, 0x0) (fail_nth: 1) 2m6.056982816s ago: executing program 1 (id=206): socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_bcm(0x1d, 0x2, 0x2) madvise(&(0x7f0000122000/0x4000)=nil, 0x4000, 0x66) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000f5a000/0x2000)=nil, 0x2, 0x0, 0x0, 0xdff, 0x3e, 0x0, 0x2, 0x4}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r1, @ANYRES32=r3, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500", @ANYRES8=r1], 0x7c}, 0x1, 0x0, 0x0, 0x40094}, 0x1) 2m6.056328643s ago: executing program 3 (id=207): syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x80000400) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0185502, 0x0) 2m6.020904838s ago: executing program 0 (id=208): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b7000000ff00001fbfa300000000000007030000f0ffffff6a0af0fff8ffffff61a4f0ff0000000066040200000000001d400200000000004704000001ed00006203000000ffffffcf440000000000007a0a00ff00ffffffc30300fff1000000b4000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebaa0f040000c72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204ab3949006c3172171652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d156ae8383117c039862198899b212c55318294270a1ad10c80fef7c247afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15f279b513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aa0000000000000000832371fe5bc621426d1ed0a4a99702cc1b692c3f0b15629eaf4c12a1e717d29135753208165b9cdbae2ed9dc7358f0e3adde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbad937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594807031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac42738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca9be8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998802008f0232b39578052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91ed92cac7c2ccd17d338bbda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922928e000000ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abb8a9982ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139566fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe6290421338ef8f6d27117cd1471bf3c0b64416fbbe955da0281e7ef7f7d5176150e86cda98d07f7de2088cb2ffd1d4c71097635c2bb3d9a0b01e757256ee427f0a244d48682bf89e2279b383b616b40f116172bc1b995eb2c1220597af8df52646f1f0cb65cfa7e038e8bb5d4d52b86a61d82dc14a4f5cc7e6061c65ccdbc2afc3f363ecf34ad0b227687c3ea8d63683ddd5914116edd9e075da9e3638647188bc8f95107c9250995eb6cadcd0f65b8504ff10304f2ceba275f9d485ed5554d64005db877f0fbb3beba59666ff66f132d5077835823592d6d392f5ff62f6f876eb10d8cbf0a73f8421b74c8916e4077b8866c95ad88bc7130244183ed216210f10f69b3e0ee13d06e4eb240cce5ec1c3b1defe4c0f8b83a34ef4f5f8f9ceefb678ad29d3683e3c44a01549e55ffca41c0b06e013f054257646c58b667ec0701004c239589b3e64ef5e1d5ed22b5fd5a90fe3453327c3652d5c9762428f0bd0178d1b80a60f64343ab77d8baa0a388711c8d2d6d3e9049814b15b6ea21387040989d69c3aa27256c55780f33d20823d8e2eb6e56850162969bf4c6c9632a55cf5be00"/2944], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x4a) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x8000004) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) syz_open_procfs$namespace(0x0, &(0x7f0000000580)='ns/mnt\x00') r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) r3 = socket(0x840000000002, 0x3, 0x100) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x3, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x7ff, 0x8bb, 0xdf, 0x8, 0x0, 0x5, 0x500, 0x3b2, 0x3, 0x5, 0x7, 0x7, 0x7, 0x3, 0x7, 0x200], 0xf000, 0x66000}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f00000003c0)={0x2a6, 0x0, "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"}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80, '\x00', 0x0, 0x5}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix_mp={0x0, 0x0, 0x34343459}}) creat(&(0x7f00000000c0)='./cgroup/cgroup.procs\x00', 0x125) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 2m5.825282294s ago: executing program 1 (id=209): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x1, 0x0, 0x2}, 0x1c) (fail_nth: 1) 2m5.800163379s ago: executing program 3 (id=210): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) ioctl$FIONCLEX(r2, 0x5450) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x17}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000040)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300, {[@end]}}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x1c, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) close(0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x2, 0x4b, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x3e}, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 2m3.763135049s ago: executing program 1 (id=211): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) utimes(0x0, 0x0) r3 = memfd_create(&(0x7f0000001dc0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#\xbd\n/\xb2\'\x16X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\x007\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x201a0}, [@IFLA_IFALIASn={0x4}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x44}}, 0x800) write$UHID_INPUT(r0, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0x1006) 2m3.670983001s ago: executing program 3 (id=212): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x24, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr, {[@timestamp={0x44, 0x1c, 0xff, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast2}, {@empty}, {@broadcast, 0x10001}, {@empty}, {@multicast1}, {@private}]}, @rr={0x7, 0x23, 0xfe, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast1, @remote, @dev, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100]}, @noop, @lsrr={0x83, 0x3}, @generic={0x0, 0x2}]}}}}}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="dc01c6ba1cdcc12519250000000000007f007101001300000000000000000000000000000000000000000000000000000000000000dce600000000000000", @ANYRES32=0x0, @ANYBLOB="200100000000000000000000000000020000000032000000fe8000000000000000000000000000bb00"/168], 0x1dc}}, 0x0) r1 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4000, @fd_index=0x4, 0x0, 0x0, 0x0, 0x5}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 2m3.500982787s ago: executing program 2 (id=213): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x24, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr, {[@timestamp={0x44, 0x1c, 0xff, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast2}, {@empty}, {@broadcast, 0x10001}, {@empty}, {@multicast1}, {@private}]}, @rr={0x7, 0x23, 0xfe, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast1, @remote, @dev, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100]}, @noop, @lsrr={0x83, 0x3}, @generic={0x0, 0x2}]}}}}}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="dc01c6ba1cdcc12519250000000000007f007101001300000000000000000000000000000000000000000000000000000000000000dce600000000000000", @ANYRES32=0x0, @ANYBLOB="200100000000000000000000000000020000000032000000fe8000000000000000000000000000bb00"/168], 0x1dc}}, 0x0) r1 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4000, @fd_index=0x4, 0x0, 0x0, 0x0, 0x5}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m2.155245218s ago: executing program 4 (id=214): msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x6a040000) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_GET_TSC(0x43, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x2, 0x0, 0x0, 0xb4d, 0x9, 0x8, 0x4, 0x2}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs/binder1\x00', 0x802, 0x0) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000000280)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x18\xad\xaaY\x85\x15\x95\xfe\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7fx\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaAfC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0J\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4$\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f\xe5\x1f_J\xd0=U\x88t\xe7\xab\xbb\x93J\xff\x923\xd5\xc7\xc8\xef\x00c3\xea\xab\xb4\'\bY}\x1f\x80v\r\xa8\xe4>\x185|\nF\xabB\x94\x0e_\x00\x8b\x95\x85\xbbE\\\x1a\xf8\xefI h\xd4\xf7\x8fo\xd3f\x7f\xc6M>\xd3\xa3S\xf3\xe1\xb4\xe4>P\x88\xfat\x86_wYv0i\x04JZ\xde\x1c\xb1qA\xceEj\x9b\vA\xf7.d\x80ni\xe5?\xe9\x89+\x1e;|M`/1\xba\x8cHd\x88\x990e[[\xb2X`\xda\xad;>N\x9f\xfb-\xf6\x96\xd6o,^\x8a\xea\f\x03\xfcU\x01%<{g\xdc\x14\x00O\x88\\\x19\xa9D\xde\xf1\xceE\xbc\xad\x00\x00\x00\x00', 0x3) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000100)={r5, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000080)=0x1) close_range(r3, 0xffffffffffffffff, 0x0) recvmmsg(r2, &(0x7f00000001c0), 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) 2m1.792780054s ago: executing program 0 (id=215): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x1}, 0x6e) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES8=r3, @ANYRES8=r3, @ANYRES64=r2, @ANYBLOB="fec872ec23045e1f6e80304f8fdad6819cb34fe6c1ae20484ab39d0585d375436c3e094d54e24307c7073380befe15de3a72998b8ed9422cee6c0a9b85c43764fad0c159cc760767df6f8bd17beb98747ec807408f3faf58a5ad10d4653ceecea3929d6bf33e49fd", @ANYRESDEC=r2, @ANYRESDEC=r2, @ANYRES8=r4, @ANYRES16=r2], 0x50) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r5], 0x28}}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f00000002c0)=""/15, &(0x7f0000000300)=0xf) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x26020480) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="ed7e1e63caed4acfb14b9e0b70a15a555bfd57cac50b5ffc274455845b26618abe991af2ac025ed8ab2c10f296"], &(0x7f00000001c0)='GPL\x00', 0x100, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x100000000000000, 0x5}, {}, 0x0, 0x0, 0x3, 0x0, 0x2, 0x3}, {{@in=@dev, 0x0, 0x33}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x4, 0x1, 0x0, 0x0, 0xfffffffe}}, 0xe4) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000140)="0000000000000001ff6943b80000000800000014f200000000861f4104bfeacd1f63dd65dd530700a28f2cbf86f474", 0x2f, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, r9, 0x0, 0x0) r10 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000380)={'fscrypt:', @desc1}, &(0x7f0000000200)={0x0, "9ea50e87f02b3c75cf93de495b298184b39f58e336fa967960e89fbffb3a6f9e546eb57c167390f62e5e75255c36b141802582d57dffaeffedcd71bb3b6a6231", 0x1b}, 0x48, 0xfffffffffffffff9) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, 0x0, &(0x7f0000000280)=@chain={'key_or_keyring:', r10}) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000000f14010000008000fe5983250c00450072646d615f636d00b8fd45006973736d00000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004011}, 0x0) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240000500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e657400000000050005000a000000050004"], 0x60}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000000)) 2m0.733012401s ago: executing program 3 (id=216): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, 0x2, 0x3, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFQA_CFG_CMD={0x8, 0x1, {0x4}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, 0x0, 0x0}, 0x1c) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) sendfile(r3, r3, 0x0, 0x24002de8) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}]}], {0x14}}, 0x60}}, 0x24040884) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x2dbe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x8000, 0x2, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x9, 0x0, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0022030000007f"], 0x0}, 0x0) 2m0.285393561s ago: executing program 2 (id=217): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0x8}, @TCA_PIE_LIMIT={0x8, 0x2, 0x7ff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m57.449105128s ago: executing program 0 (id=218): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0x8}, @TCA_PIE_LIMIT={0x8, 0x2, 0x7ff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (fail_nth: 1) 0s ago: executing program 32 (id=211): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) utimes(0x0, 0x0) r3 = memfd_create(&(0x7f0000001dc0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#\xbd\n/\xb2\'\x16X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\x007\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x201a0}, [@IFLA_IFALIASn={0x4}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x44}}, 0x800) write$UHID_INPUT(r0, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0x1006) kernel console output (not intermixed with test programs): s_on+0x9c/0x150 [ 112.905286][ T6085] do_fast_syscall_32+0x34/0x80 [ 112.905307][ T6085] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 112.905336][ T6085] RIP: 0023:0xf707d539 [ 112.905373][ T6085] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 112.905391][ T6085] RSP: 002b:00000000f546d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 112.905413][ T6085] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800003c0 [ 112.905427][ T6085] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 112.905439][ T6085] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 112.905451][ T6085] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 112.905463][ T6085] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 112.905494][ T6085] [ 113.167537][ C0] vkms_vblank_simulate: vblank timer overrun [ 114.307553][ T6110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.41'. [ 115.394494][ T6126] FAULT_INJECTION: forcing a failure. [ 115.394494][ T6126] name failslab, interval 1, probability 0, space 0, times 1 [ 115.421201][ T6126] CPU: 0 UID: 0 PID: 6126 Comm: syz.4.45 Not tainted syzkaller #0 PREEMPT(full) [ 115.421230][ T6126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 115.421243][ T6126] Call Trace: [ 115.421252][ T6126] [ 115.421261][ T6126] dump_stack_lvl+0x189/0x250 [ 115.421290][ T6126] ? __pfx____ratelimit+0x10/0x10 [ 115.421324][ T6126] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.421347][ T6126] ? __pfx__printk+0x10/0x10 [ 115.421387][ T6126] ? __pfx___might_resched+0x10/0x10 [ 115.421416][ T6126] ? fs_reclaim_acquire+0x7d/0x100 [ 115.421447][ T6126] should_fail_ex+0x414/0x560 [ 115.421486][ T6126] should_failslab+0xa8/0x100 [ 115.421515][ T6126] __kmalloc_noprof+0xcb/0x7f0 [ 115.421538][ T6126] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 115.421564][ T6126] ? __local_bh_enable_ip+0x12d/0x1c0 [ 115.421599][ T6126] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 115.421632][ T6126] genl_family_rcv_msg_doit+0xb8/0x300 [ 115.421664][ T6126] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 115.421697][ T6126] ? apparmor_capable+0x137/0x1b0 [ 115.421729][ T6126] ? bpf_lsm_capable+0x9/0x20 [ 115.421749][ T6126] ? security_capable+0x7e/0x2e0 [ 115.421777][ T6126] genl_rcv_msg+0x60e/0x790 [ 115.421808][ T6126] ? __pfx_genl_rcv_msg+0x10/0x10 [ 115.421829][ T6126] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 115.421858][ T6126] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 115.421877][ T6126] ? __pfx_nl80211_post_doit+0x10/0x10 [ 115.421907][ T6126] ? __asan_memcpy+0x40/0x70 [ 115.421927][ T6126] ? __pfx_ref_tracker_free+0x10/0x10 [ 115.421958][ T6126] netlink_rcv_skb+0x208/0x470 [ 115.421987][ T6126] ? __lock_acquire+0xab9/0xd20 [ 115.422015][ T6126] ? __pfx_genl_rcv_msg+0x10/0x10 [ 115.422039][ T6126] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 115.422090][ T6126] ? down_read+0x1ad/0x2e0 [ 115.422118][ T6126] genl_rcv+0x28/0x40 [ 115.422138][ T6126] netlink_unicast+0x82f/0x9e0 [ 115.422175][ T6126] ? __pfx_netlink_unicast+0x10/0x10 [ 115.422205][ T6126] ? netlink_sendmsg+0x642/0xb30 [ 115.422235][ T6126] ? skb_put+0x11b/0x210 [ 115.422270][ T6126] netlink_sendmsg+0x805/0xb30 [ 115.422312][ T6126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.422346][ T6126] ? __import_iovec+0x5d4/0x7f0 [ 115.422380][ T6126] ? aa_sock_msg_perm+0xf1/0x1d0 [ 115.422406][ T6126] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 115.422432][ T6126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.422465][ T6126] __sock_sendmsg+0x21c/0x270 [ 115.422495][ T6126] ____sys_sendmsg+0x505/0x830 [ 115.422535][ T6126] ? __pfx_____sys_sendmsg+0x10/0x10 [ 115.422587][ T6126] ___sys_sendmsg+0x21f/0x2a0 [ 115.422610][ T6126] ? __pfx____sys_sendmsg+0x10/0x10 [ 115.422669][ T6126] ? __fget_files+0x2a/0x420 [ 115.422696][ T6126] ? __fget_files+0x3a0/0x420 [ 115.422733][ T6126] __sys_sendmsg+0x164/0x220 [ 115.422756][ T6126] ? __pfx___sys_sendmsg+0x10/0x10 [ 115.422800][ T6126] ? __pfx_ksys_write+0x10/0x10 [ 115.422826][ T6126] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 115.422851][ T6126] ? lockdep_hardirqs_on+0x9c/0x150 [ 115.422876][ T6126] __do_fast_syscall_32+0xb6/0x2b0 [ 115.422900][ T6126] ? lockdep_hardirqs_on+0x9c/0x150 [ 115.422925][ T6126] do_fast_syscall_32+0x34/0x80 [ 115.422949][ T6126] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 115.422974][ T6126] RIP: 0023:0xf707d539 [ 115.422993][ T6126] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 115.423011][ T6126] RSP: 002b:00000000f546d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 115.423033][ T6126] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000340 [ 115.423047][ T6126] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 115.423059][ T6126] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 115.423071][ T6126] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 115.423084][ T6126] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 115.423116][ T6126] [ 115.815695][ C0] vkms_vblank_simulate: vblank timer overrun [ 115.899699][ T6131] 8021q: VLANs not supported on vcan0 [ 116.122639][ T6142] fuse: Bad value for 'user_id' [ 116.140607][ T6142] fuse: Bad value for 'user_id' [ 116.304512][ T6147] : entered promiscuous mode [ 116.691667][ T5917] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 117.004950][ T5917] usb 5-1: Using ep0 maxpacket: 16 [ 117.099660][ T5917] usb 5-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.75 [ 117.114930][ T6157] netlink: 48 bytes leftover after parsing attributes in process `syz.1.51'. [ 117.133938][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.211186][ T5917] usb 5-1: Product: syz [ 117.247802][ T5917] usb 5-1: Manufacturer: syz [ 117.265650][ T5917] usb 5-1: SerialNumber: syz [ 117.316682][ T5917] usb 5-1: config 0 descriptor?? [ 117.338485][ T5917] usb 5-1: bad CDC descriptors [ 117.381501][ T5916] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 117.546185][ T6141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.555618][ T5916] usb 3-1: Using ep0 maxpacket: 16 [ 117.566741][ T5832] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 117.606529][ T6141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.831955][ T6156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.865200][ T6156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.079829][ T6161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.53'. [ 118.104914][ T6161] FAULT_INJECTION: forcing a failure. [ 118.104914][ T6161] name failslab, interval 1, probability 0, space 0, times 0 [ 118.143115][ T6161] CPU: 1 UID: 0 PID: 6161 Comm: syz.0.53 Not tainted syzkaller #0 PREEMPT(full) [ 118.143150][ T6161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 118.143162][ T6161] Call Trace: [ 118.143171][ T6161] [ 118.143180][ T6161] dump_stack_lvl+0x189/0x250 [ 118.143208][ T6161] ? __pfx____ratelimit+0x10/0x10 [ 118.143241][ T6161] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.143263][ T6161] ? __pfx__printk+0x10/0x10 [ 118.143303][ T6161] should_fail_ex+0x414/0x560 [ 118.143341][ T6161] should_failslab+0xa8/0x100 [ 118.143369][ T6161] __kmalloc_cache_noprof+0x6f/0x6f0 [ 118.143392][ T6161] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 118.143415][ T6161] ? sctp_add_bind_addr+0x8c/0x370 [ 118.143443][ T6161] sctp_add_bind_addr+0x8c/0x370 [ 118.143468][ T6161] sctp_copy_local_addr_list+0x30b/0x4e0 [ 118.143493][ T6161] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 118.143513][ T6161] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 118.143537][ T6161] ? sctp_v6_is_any+0x64/0x80 [ 118.143561][ T6161] ? sctp_copy_one_addr+0x93/0x360 [ 118.143587][ T6161] sctp_bind_addr_copy+0xb3/0x3c0 [ 118.143610][ T6161] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 118.143645][ T6161] sctp_connect_new_asoc+0x2e0/0x690 [ 118.143675][ T6161] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 118.143700][ T6161] ? __local_bh_enable_ip+0x12d/0x1c0 [ 118.143739][ T6161] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 118.143765][ T6161] ? security_sctp_bind_connect+0x7e/0x2e0 [ 118.143794][ T6161] sctp_sendmsg+0x155c/0x2810 [ 118.143829][ T6161] ? __pfx_sctp_sendmsg+0x10/0x10 [ 118.143858][ T6161] ? aa_sk_perm+0x81e/0x950 [ 118.143885][ T6161] ? __pfx_aa_sk_perm+0x10/0x10 [ 118.143920][ T6161] ? sock_rps_record_flow+0x19/0x410 [ 118.143958][ T6161] ? inet_sendmsg+0x2f4/0x370 [ 118.143992][ T6161] __sock_sendmsg+0x19c/0x270 [ 118.144022][ T6161] ____sys_sendmsg+0x505/0x830 [ 118.144062][ T6161] ? __pfx_____sys_sendmsg+0x10/0x10 [ 118.144166][ T6161] ___sys_sendmsg+0x21f/0x2a0 [ 118.144188][ T6161] ? __pfx____sys_sendmsg+0x10/0x10 [ 118.144247][ T6161] ? __fget_files+0x2a/0x420 [ 118.144269][ T6161] ? __fget_files+0x3a0/0x420 [ 118.144299][ T6161] __sys_sendmsg+0x164/0x220 [ 118.144318][ T6161] ? __pfx___sys_sendmsg+0x10/0x10 [ 118.144354][ T6161] ? __pfx_ksys_write+0x10/0x10 [ 118.144380][ T6161] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 118.144402][ T6161] ? lockdep_hardirqs_on+0x9c/0x150 [ 118.144422][ T6161] __do_fast_syscall_32+0xb6/0x2b0 [ 118.144442][ T6161] ? lockdep_hardirqs_on+0x9c/0x150 [ 118.144462][ T6161] do_fast_syscall_32+0x34/0x80 [ 118.144481][ T6161] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 118.144502][ T6161] RIP: 0023:0xf7f77539 [ 118.144520][ T6161] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 118.144536][ T6161] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 118.144555][ T6161] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 118.144567][ T6161] RDX: 00000000000000c9 RSI: 0000000000000000 RDI: 0000000000000000 [ 118.144577][ T6161] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 118.144586][ T6161] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 118.144596][ T6161] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 118.144622][ T6161] [ 119.284157][ T5916] usb 3-1: device descriptor read/all, error -71 [ 119.519185][ T6167] vlan2: entered promiscuous mode [ 119.530180][ T6167] macvlan1: entered promiscuous mode [ 119.916233][ T6177] netlink: 'syz.3.60': attribute type 10 has an invalid length. [ 119.926646][ T6176] bridge_slave_0: left allmulticast mode [ 119.955050][ T6176] bridge_slave_0: left promiscuous mode [ 120.004782][ T1210] usb 5-1: USB disconnect, device number 3 [ 120.011806][ T6176] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.074557][ T6176] bridge_slave_1: left allmulticast mode [ 120.095953][ T6176] bridge_slave_1: left promiscuous mode [ 120.153909][ T6176] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.233922][ T6176] bond0: (slave bond_slave_0): Releasing backup interface [ 120.252191][ T6186] sctp: [Deprecated]: syz.4.63 (pid 6186) Use of int in max_burst socket option. [ 120.252191][ T6186] Use struct sctp_assoc_value instead [ 120.289569][ T6176] bond0: (slave bond_slave_1): Releasing backup interface [ 120.347850][ T6176] team0: Port device team_slave_0 removed [ 120.385992][ T6176] team0: Port device team_slave_1 removed [ 120.409849][ T6176] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.421708][ T6176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.449766][ T6176] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.457538][ T6176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.469783][ T6176] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 120.493224][ T6177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.510023][ T6177] team0: Port device bond0 added [ 120.750890][ T5832] usb 2-1: unable to get BOS descriptor or descriptor too short [ 120.761394][ T5832] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 120.776315][ T5832] usb 2-1: can't read configurations, error -71 [ 120.879526][ T6192] netlink: 'syz.1.64': attribute type 4 has an invalid length. [ 120.897315][ T6191] netlink: 'syz.1.64': attribute type 4 has an invalid length. [ 120.980168][ T6195] netlink: 'syz.1.65': attribute type 4 has an invalid length. [ 121.074519][ T5917] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 121.213174][ T6203] lo: entered promiscuous mode [ 121.220122][ T6203] tunl0: entered promiscuous mode [ 121.230885][ T6203] gre0: entered promiscuous mode [ 121.237916][ T6203] gretap0: entered promiscuous mode [ 121.251919][ T6203] erspan0: entered promiscuous mode [ 121.262091][ T6203] ip_vti0: entered promiscuous mode [ 121.279000][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.891185][ T5917] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.20 [ 121.908840][ T6203] ip6_vti0: entered promiscuous mode [ 122.002892][ T6203] sit0: entered promiscuous mode [ 122.031428][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.033889][ T6203] ip6tnl0: entered promiscuous mode [ 122.522193][ T5917] usb 1-1: config 0 descriptor?? [ 122.553898][ T6203] ip6gre0: entered promiscuous mode [ 122.559779][ T6203] syz_tun: entered promiscuous mode [ 122.586084][ T6203] ip6gretap0: entered promiscuous mode [ 122.601696][ T6203] bridge0: entered promiscuous mode [ 122.640578][ T6203] vcan0: entered promiscuous mode [ 122.709576][ T6203] bond0: entered promiscuous mode [ 122.790358][ T6203] team0: entered promiscuous mode [ 122.870215][ T6203] dummy0: entered promiscuous mode [ 123.112849][ T6203] nlmon0: entered promiscuous mode [ 123.561298][ T6203] caif0: entered promiscuous mode [ 123.566442][ T6203] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 123.676294][ T5917] usbhid 1-1:0.0: can't add hid device: -71 [ 123.685239][ T5917] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 123.722932][ T5917] usb 1-1: USB disconnect, device number 4 [ 123.980257][ T6230] netlink: 96 bytes leftover after parsing attributes in process `syz.4.72'. [ 126.544213][ T6267] vivid-002: disconnect [ 126.765444][ T6262] vivid-002: reconnect [ 127.336411][ T6283] FAULT_INJECTION: forcing a failure. [ 127.336411][ T6283] name failslab, interval 1, probability 0, space 0, times 0 [ 127.637458][ T6283] CPU: 1 UID: 0 PID: 6283 Comm: syz.3.86 Not tainted syzkaller #0 PREEMPT(full) [ 127.637487][ T6283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 127.637506][ T6283] Call Trace: [ 127.637514][ T6283] [ 127.637523][ T6283] dump_stack_lvl+0x189/0x250 [ 127.637551][ T6283] ? __pfx____ratelimit+0x10/0x10 [ 127.637585][ T6283] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.637606][ T6283] ? __pfx__printk+0x10/0x10 [ 127.637633][ T6283] ? __pfx___might_resched+0x10/0x10 [ 127.637669][ T6283] should_fail_ex+0x414/0x560 [ 127.637707][ T6283] should_failslab+0xa8/0x100 [ 127.637737][ T6283] kmem_cache_alloc_noprof+0x74/0x6e0 [ 127.637760][ T6283] ? skb_clone+0x212/0x3a0 [ 127.637788][ T6283] skb_clone+0x212/0x3a0 [ 127.637807][ T6283] ? netlink_trim+0x188/0x2e0 [ 127.637835][ T6283] netlink_trim+0x19f/0x2e0 [ 127.637865][ T6283] netlink_broadcast_filtered+0xd6/0x1000 [ 127.637895][ T6283] ? __lock_acquire+0xab9/0xd20 [ 127.637934][ T6283] ? nfnl_pernet+0x23/0x240 [ 127.637964][ T6283] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 127.637993][ T6283] ? nfnl_pernet+0x23/0x240 [ 127.638017][ T6283] ? nfnl_pernet+0x23/0x240 [ 127.638047][ T6283] nlmsg_notify+0xf0/0x1a0 [ 127.638082][ T6283] nf_tables_commit+0x931c/0xa1b0 [ 127.638136][ T6283] ? __pfx_nf_tables_commit+0x10/0x10 [ 127.638155][ T6283] ? do_raw_spin_unlock+0x122/0x240 [ 127.638183][ T6283] ? __free_frozen_pages+0x691/0xd30 [ 127.638217][ T6283] ? free_large_kmalloc+0x13a/0x1f0 [ 127.638269][ T6283] ? nf_tables_newrule+0x23c1/0x28a0 [ 127.638308][ T6283] ? __pfx_nf_tables_newrule+0x10/0x10 [ 127.638356][ T6283] nfnetlink_rcv+0x1ac9/0x2590 [ 127.638420][ T6283] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 127.638464][ T6283] ? ref_tracker_free+0x63a/0x7d0 [ 127.638526][ T6283] ? __netlink_deliver_tap+0x807/0x850 [ 127.638556][ T6283] ? netlink_deliver_tap+0x2e/0x1b0 [ 127.638605][ T6283] netlink_unicast+0x82f/0x9e0 [ 127.638643][ T6283] ? __pfx_netlink_unicast+0x10/0x10 [ 127.638673][ T6283] ? netlink_sendmsg+0x642/0xb30 [ 127.638701][ T6283] ? skb_put+0x11b/0x210 [ 127.638736][ T6283] netlink_sendmsg+0x805/0xb30 [ 127.638781][ T6283] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.638817][ T6283] ? __import_iovec+0x5d4/0x7f0 [ 127.638843][ T6283] ? aa_sock_msg_perm+0xf1/0x1d0 [ 127.638869][ T6283] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 127.638897][ T6283] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.638930][ T6283] __sock_sendmsg+0x21c/0x270 [ 127.638960][ T6283] ____sys_sendmsg+0x505/0x830 [ 127.639001][ T6283] ? __pfx_____sys_sendmsg+0x10/0x10 [ 127.639054][ T6283] ___sys_sendmsg+0x21f/0x2a0 [ 127.639077][ T6283] ? __pfx____sys_sendmsg+0x10/0x10 [ 127.639138][ T6283] ? __fget_files+0x2a/0x420 [ 127.639164][ T6283] ? __fget_files+0x3a0/0x420 [ 127.639203][ T6283] __sys_sendmsg+0x164/0x220 [ 127.639226][ T6283] ? __pfx___sys_sendmsg+0x10/0x10 [ 127.639287][ T6283] ? __pfx_ksys_write+0x10/0x10 [ 127.639328][ T6283] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 127.639354][ T6283] ? lockdep_hardirqs_on+0x9c/0x150 [ 127.639379][ T6283] __do_fast_syscall_32+0xb6/0x2b0 [ 127.639404][ T6283] ? lockdep_hardirqs_on+0x9c/0x150 [ 127.639430][ T6283] do_fast_syscall_32+0x34/0x80 [ 127.639454][ T6283] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 127.639480][ T6283] RIP: 0023:0xf7f45539 [ 127.639506][ T6283] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 127.639533][ T6283] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 127.639555][ T6283] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 127.639570][ T6283] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 127.639582][ T6283] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 127.639594][ T6283] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 127.639606][ T6283] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 127.639639][ T6283] [ 128.311164][ T6290] netlink: 'syz.0.89': attribute type 11 has an invalid length. [ 128.319057][ T6290] netlink: 84 bytes leftover after parsing attributes in process `syz.0.89'. [ 128.749150][ T6302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.786947][ T6302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.135542][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 129.852147][ T24] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 129.860589][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.916079][ T24] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 129.951115][ T24] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 129.959268][ T24] usb 3-1: Manufacturer: syz [ 130.014255][ T24] usb 3-1: config 0 descriptor?? [ 130.241394][ T24] rc_core: IR keymap rc-hauppauge not found [ 130.247574][ T24] Registered IR keymap rc-empty [ 130.258948][ T24] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 130.348343][ T6324] tc_dump_action: action bad kind [ 130.386928][ T6324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.98'. [ 130.451146][ T24] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input7 [ 130.484634][ C1] igorplugusb 3-1:0.0: Error: urb status = -32 [ 130.573158][ T5917] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 130.735798][ T5917] usb 2-1: config 160 has an invalid interface number: 200 but max is 0 [ 130.756480][ T5917] usb 2-1: config 160 has no interface number 0 [ 130.777407][ T5917] usb 2-1: config 160 interface 200 has no altsetting 0 [ 130.790980][ T5916] usb 3-1: USB disconnect, device number 5 [ 130.851099][ T5917] usb 2-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 130.885628][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.959631][ T5917] usb 2-1: Product: syz [ 130.970847][ T5917] usb 2-1: Manufacturer: syz [ 130.985339][ T5917] usb 2-1: SerialNumber: syz [ 131.247453][ T5917] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 131.315268][ T5917] usb 2-1: MIDIStreaming interface descriptor not found [ 131.418283][ T5917] usb 2-1: USB disconnect, device number 4 [ 131.592722][ T6345] udevd[6345]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 132.194618][ T6360] FAULT_INJECTION: forcing a failure. [ 132.194618][ T6360] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 132.672085][ T6360] CPU: 1 UID: 0 PID: 6360 Comm: syz.2.109 Not tainted syzkaller #0 PREEMPT(full) [ 132.672121][ T6360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 132.672134][ T6360] Call Trace: [ 132.672143][ T6360] [ 132.672152][ T6360] dump_stack_lvl+0x189/0x250 [ 132.672181][ T6360] ? __pfx____ratelimit+0x10/0x10 [ 132.672214][ T6360] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.672243][ T6360] ? __pfx__printk+0x10/0x10 [ 132.672267][ T6360] ? fs_reclaim_acquire+0x7d/0x100 [ 132.672303][ T6360] should_fail_ex+0x414/0x560 [ 132.672342][ T6360] prepare_alloc_pages+0x213/0x610 [ 132.672377][ T6360] __alloc_frozen_pages_noprof+0x123/0x370 [ 132.672410][ T6360] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 132.672447][ T6360] ? policy_nodemask+0x27c/0x720 [ 132.672479][ T6360] alloc_pages_mpol+0x232/0x4a0 [ 132.672512][ T6360] alloc_migration_target_by_mpol+0x2e6/0x590 [ 132.672554][ T6360] migrate_pages_batch+0x801/0x35e0 [ 132.672587][ T6360] ? walk_pgd_range+0x1c45/0x1d40 [ 132.672633][ T6360] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 132.672676][ T6360] ? __pfx_migrate_pages_batch+0x10/0x10 [ 132.672735][ T6360] migrate_pages+0x1bcc/0x2930 [ 132.672784][ T6360] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 132.672826][ T6360] ? __pfx_migrate_pages+0x10/0x10 [ 132.672857][ T6360] ? __pfx_walk_page_range_mm+0x10/0x10 [ 132.672901][ T6360] ? mas_next_slot+0xc20/0xcf0 [ 132.672956][ T6360] ? up_write+0x1c4/0x420 [ 132.672981][ T6360] __se_sys_mbind+0xa47/0xc40 [ 132.673006][ T6360] ? __pfx_vfs_write+0x10/0x10 [ 132.673036][ T6360] ? __pfx___se_sys_mbind+0x10/0x10 [ 132.673074][ T6360] ? fput+0xa0/0xd0 [ 132.673105][ T6360] ? ksys_write+0x22a/0x250 [ 132.673130][ T6360] ? __pfx_ksys_write+0x10/0x10 [ 132.673156][ T6360] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 132.673181][ T6360] ? __ia32_sys_mbind+0x21/0xf0 [ 132.673209][ T6360] __do_fast_syscall_32+0xb6/0x2b0 [ 132.673241][ T6360] ? lockdep_hardirqs_on+0x9c/0x150 [ 132.673266][ T6360] do_fast_syscall_32+0x34/0x80 [ 132.673289][ T6360] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 132.673310][ T6360] RIP: 0023:0xf7f36539 [ 132.673325][ T6360] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 132.673339][ T6360] RSP: 002b:00000000f542655c EFLAGS: 00000206 ORIG_RAX: 0000000000000112 [ 132.673357][ T6360] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000c00000 [ 132.673369][ T6360] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 132.673379][ T6360] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 132.673389][ T6360] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 132.673399][ T6360] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 132.673423][ T6360] [ 133.319524][ T6370] FAULT_INJECTION: forcing a failure. [ 133.319524][ T6370] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 133.359726][ T6370] CPU: 1 UID: 0 PID: 6370 Comm: syz.1.114 Not tainted syzkaller #0 PREEMPT(full) [ 133.359746][ T6370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 133.359755][ T6370] Call Trace: [ 133.359761][ T6370] [ 133.359768][ T6370] dump_stack_lvl+0x189/0x250 [ 133.359788][ T6370] ? __pfx____ratelimit+0x10/0x10 [ 133.359816][ T6370] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.359832][ T6370] ? __pfx__printk+0x10/0x10 [ 133.359847][ T6370] ? __might_fault+0xb0/0x130 [ 133.359871][ T6370] should_fail_ex+0x414/0x560 [ 133.359898][ T6370] _copy_from_user+0x2d/0xb0 [ 133.359920][ T6370] get_compat_msghdr+0xad/0x4a0 [ 133.359988][ T6370] ? __pfx_get_compat_msghdr+0x10/0x10 [ 133.360020][ T6370] ___sys_sendmsg+0x193/0x2a0 [ 133.360037][ T6370] ? __pfx____sys_sendmsg+0x10/0x10 [ 133.360076][ T6370] ? __fget_files+0x2a/0x420 [ 133.360094][ T6370] ? __fget_files+0x3a0/0x420 [ 133.360120][ T6370] __sys_sendmsg+0x164/0x220 [ 133.360136][ T6370] ? __pfx___sys_sendmsg+0x10/0x10 [ 133.360166][ T6370] ? __pfx_ksys_write+0x10/0x10 [ 133.360188][ T6370] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 133.360206][ T6370] ? lockdep_hardirqs_on+0x9c/0x150 [ 133.360223][ T6370] __do_fast_syscall_32+0xb6/0x2b0 [ 133.360240][ T6370] ? lockdep_hardirqs_on+0x9c/0x150 [ 133.360257][ T6370] do_fast_syscall_32+0x34/0x80 [ 133.360273][ T6370] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 133.360291][ T6370] RIP: 0023:0xf704d539 [ 133.360304][ T6370] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 133.360317][ T6370] RSP: 002b:00000000f543d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 133.360332][ T6370] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 133.360342][ T6370] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 133.360350][ T6370] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 133.360358][ T6370] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 133.360366][ T6370] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 133.360388][ T6370] [ 133.898745][ T6380] FAULT_INJECTION: forcing a failure. [ 133.898745][ T6380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.942258][ T6380] CPU: 1 UID: 0 PID: 6380 Comm: syz.2.117 Not tainted syzkaller #0 PREEMPT(full) [ 133.942288][ T6380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 133.942300][ T6380] Call Trace: [ 133.942308][ T6380] [ 133.942318][ T6380] dump_stack_lvl+0x189/0x250 [ 133.942346][ T6380] ? __pfx____ratelimit+0x10/0x10 [ 133.942380][ T6380] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.942403][ T6380] ? __pfx__printk+0x10/0x10 [ 133.942426][ T6380] ? __might_fault+0xb0/0x130 [ 133.942461][ T6380] should_fail_ex+0x414/0x560 [ 133.942501][ T6380] _copy_from_user+0x2d/0xb0 [ 133.942531][ T6380] get_compat_msghdr+0xad/0x4a0 [ 133.942572][ T6380] ? __pfx_get_compat_msghdr+0x10/0x10 [ 133.942619][ T6380] ___sys_sendmsg+0x193/0x2a0 [ 133.942643][ T6380] ? __pfx____sys_sendmsg+0x10/0x10 [ 133.942702][ T6380] ? __fget_files+0x2a/0x420 [ 133.942728][ T6380] ? __fget_files+0x3a0/0x420 [ 133.942766][ T6380] __sys_sendmsg+0x164/0x220 [ 133.942789][ T6380] ? __pfx___sys_sendmsg+0x10/0x10 [ 133.942833][ T6380] ? __pfx_ksys_write+0x10/0x10 [ 133.942859][ T6380] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 133.942883][ T6380] ? lockdep_hardirqs_on+0x9c/0x150 [ 133.942908][ T6380] __do_fast_syscall_32+0xb6/0x2b0 [ 133.942933][ T6380] ? lockdep_hardirqs_on+0x9c/0x150 [ 133.942959][ T6380] do_fast_syscall_32+0x34/0x80 [ 133.942982][ T6380] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 133.943008][ T6380] RIP: 0023:0xf7f36539 [ 133.943030][ T6380] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 133.943049][ T6380] RSP: 002b:00000000f542655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 133.943071][ T6380] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 133.943086][ T6380] RDX: 0000000000048100 RSI: 0000000000000000 RDI: 0000000000000000 [ 133.943098][ T6380] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 133.943110][ T6380] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 133.943122][ T6380] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 133.943160][ T6380] [ 134.240456][ T6385] FAULT_INJECTION: forcing a failure. [ 134.240456][ T6385] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.253728][ T6385] CPU: 1 UID: 0 PID: 6385 Comm: syz.1.119 Not tainted syzkaller #0 PREEMPT(full) [ 134.253748][ T6385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 134.253757][ T6385] Call Trace: [ 134.253763][ T6385] [ 134.253769][ T6385] dump_stack_lvl+0x189/0x250 [ 134.253790][ T6385] ? __pfx____ratelimit+0x10/0x10 [ 134.253813][ T6385] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.253829][ T6385] ? __pfx__printk+0x10/0x10 [ 134.253853][ T6385] should_fail_ex+0x414/0x560 [ 134.253887][ T6385] _copy_to_user+0x31/0xb0 [ 134.253909][ T6385] simple_read_from_buffer+0xe1/0x170 [ 134.253931][ T6385] proc_fail_nth_read+0x1b3/0x220 [ 134.253961][ T6385] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 134.253986][ T6385] ? rw_verify_area+0x2a6/0x4d0 [ 134.254002][ T6385] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 134.254026][ T6385] vfs_read+0x200/0xa30 [ 134.254043][ T6385] ? j1939_sk_getsockopt+0x10e/0x360 [ 134.254066][ T6385] ? __pfx_vfs_read+0x10/0x10 [ 134.254079][ T6385] ? count_memcg_event_mm+0x21/0x260 [ 134.254096][ T6385] ? bpf_lsm_socket_getsockopt+0x9/0x20 [ 134.254116][ T6385] ? __pfx_j1939_sk_getsockopt+0x10/0x10 [ 134.254136][ T6385] ? do_sock_getsockopt+0x372/0x450 [ 134.254166][ T6385] ksys_read+0x145/0x250 [ 134.254183][ T6385] ? __pfx_ksys_read+0x10/0x10 [ 134.254200][ T6385] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 134.254217][ T6385] ? lockdep_hardirqs_on+0x9c/0x150 [ 134.254234][ T6385] __do_fast_syscall_32+0xb6/0x2b0 [ 134.254250][ T6385] ? lockdep_hardirqs_on+0x9c/0x150 [ 134.254267][ T6385] do_fast_syscall_32+0x34/0x80 [ 134.254283][ T6385] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 134.254301][ T6385] RIP: 0023:0xf704d539 [ 134.254315][ T6385] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 134.254327][ T6385] RSP: 002b:00000000f543d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 134.254342][ T6385] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f543d620 [ 134.254352][ T6385] RDX: 000000000000000f RSI: 00000000f73e5ff4 RDI: 0000000000000000 [ 134.254361][ T6385] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 134.254369][ T6385] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 134.254377][ T6385] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 134.254398][ T6385] [ 135.813066][ T6406] FAULT_INJECTION: forcing a failure. [ 135.813066][ T6406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.967271][ T6406] CPU: 1 UID: 0 PID: 6406 Comm: syz.4.125 Not tainted syzkaller #0 PREEMPT(full) [ 135.967300][ T6406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 135.967313][ T6406] Call Trace: [ 135.967322][ T6406] [ 135.967331][ T6406] dump_stack_lvl+0x189/0x250 [ 135.967359][ T6406] ? __pfx____ratelimit+0x10/0x10 [ 135.967393][ T6406] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.967415][ T6406] ? __pfx__printk+0x10/0x10 [ 135.967438][ T6406] ? __might_fault+0xb0/0x130 [ 135.967472][ T6406] should_fail_ex+0x414/0x560 [ 135.967511][ T6406] _copy_from_user+0x2d/0xb0 [ 135.967541][ T6406] get_compat_msghdr+0xad/0x4a0 [ 135.967581][ T6406] ? __pfx_get_compat_msghdr+0x10/0x10 [ 135.967628][ T6406] ___sys_sendmsg+0x193/0x2a0 [ 135.967652][ T6406] ? __pfx____sys_sendmsg+0x10/0x10 [ 135.967710][ T6406] ? __fget_files+0x2a/0x420 [ 135.967736][ T6406] ? __fget_files+0x3a0/0x420 [ 135.967784][ T6406] __sys_sendmsg+0x164/0x220 [ 135.967806][ T6406] ? __pfx___sys_sendmsg+0x10/0x10 [ 135.967850][ T6406] ? __pfx_ksys_write+0x10/0x10 [ 135.967876][ T6406] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 135.967900][ T6406] ? lockdep_hardirqs_on+0x9c/0x150 [ 135.967925][ T6406] __do_fast_syscall_32+0xb6/0x2b0 [ 135.967949][ T6406] ? lockdep_hardirqs_on+0x9c/0x150 [ 135.967974][ T6406] do_fast_syscall_32+0x34/0x80 [ 135.967998][ T6406] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 135.968023][ T6406] RIP: 0023:0xf707d539 [ 135.968042][ T6406] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 135.968059][ T6406] RSP: 002b:00000000f546d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 135.968081][ T6406] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800010c0 [ 135.968096][ T6406] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 135.968108][ T6406] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 135.968120][ T6406] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 135.968131][ T6406] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 135.968161][ T6406] [ 136.335318][ T6410] FAULT_INJECTION: forcing a failure. [ 136.335318][ T6410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.348437][ T6410] CPU: 1 UID: 0 PID: 6410 Comm: syz.3.127 Not tainted syzkaller #0 PREEMPT(full) [ 136.348457][ T6410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 136.348466][ T6410] Call Trace: [ 136.348473][ T6410] [ 136.348480][ T6410] dump_stack_lvl+0x189/0x250 [ 136.348501][ T6410] ? __pfx____ratelimit+0x10/0x10 [ 136.348525][ T6410] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.348540][ T6410] ? __pfx__printk+0x10/0x10 [ 136.348555][ T6410] ? __might_fault+0xb0/0x130 [ 136.348579][ T6410] should_fail_ex+0x414/0x560 [ 136.348607][ T6410] _copy_from_user+0x2d/0xb0 [ 136.348628][ T6410] get_compat_msghdr+0xad/0x4a0 [ 136.348655][ T6410] ? __pfx_get_compat_msghdr+0x10/0x10 [ 136.348697][ T6410] ___sys_sendmsg+0x193/0x2a0 [ 136.348714][ T6410] ? __pfx____sys_sendmsg+0x10/0x10 [ 136.348754][ T6410] ? __fget_files+0x2a/0x420 [ 136.348772][ T6410] ? __fget_files+0x3a0/0x420 [ 136.348798][ T6410] __sys_sendmsg+0x164/0x220 [ 136.348814][ T6410] ? __pfx___sys_sendmsg+0x10/0x10 [ 136.348844][ T6410] ? __pfx_ksys_write+0x10/0x10 [ 136.348863][ T6410] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 136.348881][ T6410] ? lockdep_hardirqs_on+0x9c/0x150 [ 136.348898][ T6410] __do_fast_syscall_32+0xb6/0x2b0 [ 136.348915][ T6410] ? lockdep_hardirqs_on+0x9c/0x150 [ 136.348934][ T6410] do_fast_syscall_32+0x34/0x80 [ 136.348951][ T6410] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 136.348970][ T6410] RIP: 0023:0xf7f45539 [ 136.348983][ T6410] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 136.348996][ T6410] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 136.349011][ T6410] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 136.349021][ T6410] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 136.349029][ T6410] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 136.349037][ T6410] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 136.349046][ T6410] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 136.349067][ T6410] [ 136.657421][ T6412] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 136.664060][ T6412] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 137.137522][ T6433] FAULT_INJECTION: forcing a failure. [ 137.137522][ T6433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.151772][ T6433] CPU: 0 UID: 0 PID: 6433 Comm: syz.1.136 Not tainted syzkaller #0 PREEMPT(full) [ 137.151802][ T6433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 137.151815][ T6433] Call Trace: [ 137.151824][ T6433] [ 137.151840][ T6433] dump_stack_lvl+0x189/0x250 [ 137.151870][ T6433] ? __pfx____ratelimit+0x10/0x10 [ 137.151903][ T6433] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.151926][ T6433] ? __pfx__printk+0x10/0x10 [ 137.151949][ T6433] ? __might_fault+0xb0/0x130 [ 137.151984][ T6433] should_fail_ex+0x414/0x560 [ 137.152023][ T6433] _copy_from_iter+0x1de/0x1790 [ 137.152049][ T6433] ? txopt_get+0x7a/0x3f0 [ 137.152086][ T6433] ? txopt_get+0x7a/0x3f0 [ 137.152111][ T6433] ? txopt_get+0x7a/0x3f0 [ 137.152138][ T6433] ? __pfx__copy_from_iter+0x10/0x10 [ 137.152161][ T6433] ? txopt_get+0x335/0x3f0 [ 137.152188][ T6433] ? aa_label_sk_perm+0x4cd/0x630 [ 137.152210][ T6433] ? __pfx_txopt_get+0x10/0x10 [ 137.152249][ T6433] rawv6_sendmsg+0xb5f/0x1830 [ 137.152294][ T6433] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 137.152349][ T6433] ? __pfx_aa_sk_perm+0x10/0x10 [ 137.152374][ T6433] ? sock_rps_record_flow+0x19/0x410 [ 137.152406][ T6433] ? inet_sendmsg+0x2f4/0x370 [ 137.152433][ T6433] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 137.152465][ T6433] __sock_sendmsg+0x19c/0x270 [ 137.152495][ T6433] __sys_sendto+0x3bd/0x520 [ 137.152529][ T6433] ? __pfx___sys_sendto+0x10/0x10 [ 137.152557][ T6433] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 137.152593][ T6433] ? __fget_files+0x3a0/0x420 [ 137.152631][ T6433] ? ksys_write+0x22a/0x250 [ 137.152653][ T6433] ? exc_page_fault+0x82/0x100 [ 137.152674][ T6433] ? __pfx_ksys_write+0x10/0x10 [ 137.152703][ T6433] __ia32_sys_sendto+0xdd/0x100 [ 137.152738][ T6433] __do_fast_syscall_32+0xb6/0x2b0 [ 137.152762][ T6433] ? lockdep_hardirqs_on+0x9c/0x150 [ 137.152788][ T6433] do_fast_syscall_32+0x34/0x80 [ 137.152811][ T6433] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 137.152851][ T6433] RIP: 0023:0xf704d539 [ 137.152869][ T6433] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 137.152887][ T6433] RSP: 002b:00000000f543d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 137.152909][ T6433] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 137.152923][ T6433] RDX: 0000000000000002 RSI: 000000000000ff00 RDI: 0000000000000000 [ 137.152935][ T6433] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 137.152947][ T6433] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 137.152959][ T6433] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 137.152991][ T6433] [ 137.422210][ C0] vkms_vblank_simulate: vblank timer overrun [ 137.647195][ T6439] FAULT_INJECTION: forcing a failure. [ 137.647195][ T6439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.665477][ T6439] CPU: 0 UID: 0 PID: 6439 Comm: syz.1.140 Not tainted syzkaller #0 PREEMPT(full) [ 137.665505][ T6439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 137.665516][ T6439] Call Trace: [ 137.665523][ T6439] [ 137.665530][ T6439] dump_stack_lvl+0x189/0x250 [ 137.665554][ T6439] ? __pfx____ratelimit+0x10/0x10 [ 137.665590][ T6439] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.665608][ T6439] ? __pfx__printk+0x10/0x10 [ 137.665626][ T6439] ? __might_fault+0xb0/0x130 [ 137.665653][ T6439] should_fail_ex+0x414/0x560 [ 137.665686][ T6439] _copy_from_user+0x2d/0xb0 [ 137.665710][ T6439] get_compat_msghdr+0xad/0x4a0 [ 137.665743][ T6439] ? __pfx_get_compat_msghdr+0x10/0x10 [ 137.665780][ T6439] ___sys_recvmsg+0x17f/0x510 [ 137.665803][ T6439] ? __pfx____sys_recvmsg+0x10/0x10 [ 137.665841][ T6439] ? __fget_files+0x3a0/0x420 [ 137.665872][ T6439] do_recvmmsg+0x36a/0x770 [ 137.665896][ T6439] ? __pfx_do_recvmmsg+0x10/0x10 [ 137.665913][ T6439] ? ksys_write+0x1cb/0x250 [ 137.665947][ T6439] ? __fget_files+0x3a0/0x420 [ 137.665974][ T6439] __sys_recvmmsg+0x19d/0x280 [ 137.665993][ T6439] ? __pfx___sys_recvmmsg+0x10/0x10 [ 137.666010][ T6439] ? __pfx_ksys_write+0x10/0x10 [ 137.666033][ T6439] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 137.666065][ T6439] __do_fast_syscall_32+0xb6/0x2b0 [ 137.666084][ T6439] ? lockdep_hardirqs_on+0x9c/0x150 [ 137.666105][ T6439] do_fast_syscall_32+0x34/0x80 [ 137.666123][ T6439] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 137.666144][ T6439] RIP: 0023:0xf704d539 [ 137.666159][ T6439] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 137.666174][ T6439] RSP: 002b:00000000f543d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 137.666192][ T6439] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080003600 [ 137.666204][ T6439] RDX: 0000000000000001 RSI: 0000000000000100 RDI: 0000000000000000 [ 137.666214][ T6439] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 137.666223][ T6439] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 137.666233][ T6439] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 137.666257][ T6439] [ 137.682491][ T6438] raw_sendmsg: syz.0.137 forgot to set AF_INET. Fix it! [ 137.916068][ T6446] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 137.931860][ T6446] FAULT_INJECTION: forcing a failure. [ 137.931860][ T6446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.951104][ T6446] CPU: 1 UID: 0 PID: 6446 Comm: syz.3.139 Not tainted syzkaller #0 PREEMPT(full) [ 137.951131][ T6446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 137.951144][ T6446] Call Trace: [ 137.951153][ T6446] [ 137.951161][ T6446] dump_stack_lvl+0x189/0x250 [ 137.951189][ T6446] ? __pfx____ratelimit+0x10/0x10 [ 137.951234][ T6446] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.951256][ T6446] ? __pfx__printk+0x10/0x10 [ 137.951278][ T6446] ? __might_fault+0xb0/0x130 [ 137.951308][ T6446] should_fail_ex+0x414/0x560 [ 137.951347][ T6446] _copy_from_user+0x2d/0xb0 [ 137.951378][ T6446] do_sys_poll+0x242/0x1070 [ 137.951413][ T6446] ? __lock_acquire+0xab9/0xd20 [ 137.951445][ T6446] ? __pfx_do_sys_poll+0x10/0x10 [ 137.951476][ T6446] ? __lock_acquire+0xab9/0xd20 [ 137.951555][ T6446] ? seqcount_lockdep_reader_access+0x122/0x1c0 [ 137.951597][ T6446] ? __pfx_timespec64_add_safe+0x10/0x10 [ 137.951628][ T6446] __se_sys_poll+0x128/0x320 [ 137.951650][ T6446] ? __pfx___se_sys_poll+0x10/0x10 [ 137.951672][ T6446] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 137.951692][ T6446] ? lockdep_hardirqs_on+0x9c/0x150 [ 137.951712][ T6446] __do_fast_syscall_32+0xb6/0x2b0 [ 137.951737][ T6446] do_fast_syscall_32+0x34/0x80 [ 137.951756][ T6446] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 137.951777][ T6446] RIP: 0023:0xf7f45539 [ 137.951792][ T6446] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 137.951807][ T6446] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 00000000000000a8 [ 137.951831][ T6446] RAX: ffffffffffffffda RBX: 0000000080000080 RCX: 0000000000000001 [ 137.951842][ T6446] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 137.951852][ T6446] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 137.951861][ T6446] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 137.951871][ T6446] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 137.951896][ T6446] [ 138.184414][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.191530][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.338764][ T6453] team0: entered promiscuous mode [ 138.348926][ T6453] team_slave_0: entered promiscuous mode [ 138.359103][ T6453] team_slave_1: entered promiscuous mode [ 138.421156][ T5832] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 138.551151][ T5832] usb 1-1: device descriptor read/64, error -71 [ 138.791239][ T5832] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 138.971737][ T5832] usb 1-1: device descriptor read/64, error -71 [ 139.027220][ T6469] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 139.081528][ T5832] usb usb1-port1: attempt power cycle [ 139.133285][ T1210] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 139.307621][ T1210] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 139.324001][ T1210] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 143, changing to 11 [ 139.351695][ T1210] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26144, setting to 1024 [ 139.381881][ T1210] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice=ff.fb [ 139.391695][ T1210] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 139.401090][ T1210] usb 5-1: Product: syz [ 139.408688][ T1210] usb 5-1: Manufacturer: syz [ 139.427875][ T1210] usb 5-1: config 0 descriptor?? [ 139.431204][ T5832] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 139.440951][ T6465] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 139.469800][ T6475] FAULT_INJECTION: forcing a failure. [ 139.469800][ T6475] name failslab, interval 1, probability 0, space 0, times 0 [ 139.473483][ T5832] usb 1-1: device descriptor read/8, error -71 [ 139.525600][ T6475] CPU: 0 UID: 0 PID: 6475 Comm: syz.3.154 Not tainted syzkaller #0 PREEMPT(full) [ 139.525630][ T6475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 139.525644][ T6475] Call Trace: [ 139.525653][ T6475] [ 139.525662][ T6475] dump_stack_lvl+0x189/0x250 [ 139.525692][ T6475] ? __pfx____ratelimit+0x10/0x10 [ 139.525727][ T6475] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.525750][ T6475] ? __pfx__printk+0x10/0x10 [ 139.525780][ T6475] ? __pfx___might_resched+0x10/0x10 [ 139.525816][ T6475] should_fail_ex+0x414/0x560 [ 139.525857][ T6475] should_failslab+0xa8/0x100 [ 139.525889][ T6475] __kmalloc_noprof+0xcb/0x7f0 [ 139.525911][ T6475] ? kfree+0x4d/0x6d0 [ 139.525928][ T6475] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 139.525962][ T6475] tomoyo_realpath_from_path+0xe3/0x5d0 [ 139.525991][ T6475] ? tomoyo_domain+0xd9/0x130 [ 139.526023][ T6475] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 139.526058][ T6475] tomoyo_path_number_perm+0x1e8/0x5a0 [ 139.526096][ T6475] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 139.526151][ T6475] ? __lock_acquire+0xab9/0xd20 [ 139.526202][ T6475] ? __fget_files+0x2a/0x420 [ 139.526237][ T6475] ? __fget_files+0x3a0/0x420 [ 139.526262][ T6475] ? __fget_files+0x2a/0x420 [ 139.526294][ T6475] security_file_ioctl_compat+0xcb/0x2d0 [ 139.526330][ T6475] __ia32_compat_sys_ioctl+0x128/0x840 [ 139.526356][ T6475] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 139.526379][ T6475] ? __fget_files+0x3a0/0x420 [ 139.526422][ T6475] ? fput+0xa0/0xd0 [ 139.526454][ T6475] ? ksys_write+0x22a/0x250 [ 139.526476][ T6475] ? exc_page_fault+0x82/0x100 [ 139.526499][ T6475] ? __pfx_ksys_write+0x10/0x10 [ 139.526526][ T6475] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 139.526552][ T6475] ? lockdep_hardirqs_on+0x9c/0x150 [ 139.526577][ T6475] __do_fast_syscall_32+0xb6/0x2b0 [ 139.526602][ T6475] ? lockdep_hardirqs_on+0x9c/0x150 [ 139.526629][ T6475] do_fast_syscall_32+0x34/0x80 [ 139.526654][ T6475] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 139.526681][ T6475] RIP: 0023:0xf7f45539 [ 139.526699][ T6475] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 139.526717][ T6475] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 139.526740][ T6475] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c03864bc [ 139.526755][ T6475] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 139.526768][ T6475] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 139.526780][ T6475] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 139.526793][ T6475] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 139.526826][ T6475] [ 139.527415][ T6451] syzkaller1: entered promiscuous mode [ 139.607705][ T6475] ERROR: Out of memory at tomoyo_realpath_from_path. [ 139.935131][ T6451] syzkaller1: entered allmulticast mode [ 139.951183][ T5832] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 139.981911][ T5832] usb 1-1: device descriptor read/8, error -71 [ 140.091595][ T5832] usb usb1-port1: unable to enumerate USB device [ 140.143408][ T6479] FAULT_INJECTION: forcing a failure. [ 140.143408][ T6479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.191211][ T6479] CPU: 1 UID: 0 PID: 6479 Comm: syz.3.156 Not tainted syzkaller #0 PREEMPT(full) [ 140.191239][ T6479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 140.191250][ T6479] Call Trace: [ 140.191259][ T6479] [ 140.191269][ T6479] dump_stack_lvl+0x189/0x250 [ 140.191294][ T6479] ? __pfx____ratelimit+0x10/0x10 [ 140.191322][ T6479] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.191340][ T6479] ? __pfx__printk+0x10/0x10 [ 140.191358][ T6479] ? __might_fault+0xb0/0x130 [ 140.191385][ T6479] should_fail_ex+0x414/0x560 [ 140.191430][ T6479] _copy_from_user+0x2d/0xb0 [ 140.191455][ T6479] get_compat_msghdr+0xad/0x4a0 [ 140.191488][ T6479] ? __pfx_get_compat_msghdr+0x10/0x10 [ 140.191525][ T6479] ___sys_sendmsg+0x193/0x2a0 [ 140.191549][ T6479] ? __pfx____sys_sendmsg+0x10/0x10 [ 140.191594][ T6479] ? __fget_files+0x2a/0x420 [ 140.191615][ T6479] ? __fget_files+0x3a0/0x420 [ 140.191646][ T6479] __sys_sendmsg+0x164/0x220 [ 140.191664][ T6479] ? __pfx___sys_sendmsg+0x10/0x10 [ 140.191705][ T6479] ? __pfx_ksys_write+0x10/0x10 [ 140.191726][ T6479] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 140.191746][ T6479] ? lockdep_hardirqs_on+0x9c/0x150 [ 140.191765][ T6479] __do_fast_syscall_32+0xb6/0x2b0 [ 140.191785][ T6479] ? lockdep_hardirqs_on+0x9c/0x150 [ 140.191805][ T6479] do_fast_syscall_32+0x34/0x80 [ 140.191829][ T6479] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 140.191851][ T6479] RIP: 0023:0xf7f45539 [ 140.191866][ T6479] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 140.191881][ T6479] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 140.191899][ T6479] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000800 [ 140.191911][ T6479] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 140.191920][ T6479] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 140.191930][ T6479] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 140.191939][ T6479] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 140.191969][ T6479] [ 140.412477][ C1] vkms_vblank_simulate: vblank timer overrun [ 140.699294][ T1210] usbhid 5-1:0.0: can't add hid device: -71 [ 140.721232][ T1210] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 140.778405][ T1210] usb 5-1: USB disconnect, device number 4 [ 141.015175][ T6492] lo: entered promiscuous mode [ 141.033900][ T6492] tunl0: entered promiscuous mode [ 141.039849][ T6492] gre0: entered promiscuous mode [ 141.074853][ T6492] gretap0: entered promiscuous mode [ 141.080844][ T6492] erspan0: entered promiscuous mode [ 141.171950][ T6492] ip_vti0: entered promiscuous mode [ 141.178210][ T6492] ip6_vti0: entered promiscuous mode [ 141.222106][ T6492] sit0: entered promiscuous mode [ 141.235427][ T6492] ip6tnl0: entered promiscuous mode [ 141.269006][ T6492] ip6gre0: entered promiscuous mode [ 141.294519][ T6492] syz_tun: entered promiscuous mode [ 141.298806][ T6503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.164'. [ 141.317883][ T6492] ip6gretap0: entered promiscuous mode [ 141.331552][ T1210] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 141.350171][ T6492] bridge0: entered promiscuous mode [ 141.380722][ T6492] vcan0: entered promiscuous mode [ 141.403780][ T6492] bond0: entered promiscuous mode [ 141.420353][ T6492] bond_slave_0: entered promiscuous mode [ 141.441902][ T6492] bond_slave_1: entered promiscuous mode [ 141.488768][ T6492] team0: entered promiscuous mode [ 141.513376][ T1210] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA5, changing to 0x85 [ 141.539889][ T6492] team_slave_0: entered promiscuous mode [ 141.551993][ T1210] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 141.578829][ T6492] team_slave_1: entered promiscuous mode [ 141.594191][ T1210] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 141.622562][ T1210] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 141.643324][ T6492] dummy0: entered promiscuous mode [ 141.644991][ T1210] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.661745][ T6492] nlmon0: entered promiscuous mode [ 141.679036][ T1210] usb 4-1: config 0 descriptor?? [ 141.713440][ T6492] caif0: entered promiscuous mode [ 141.721166][ T6492] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 141.930212][ T6493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.978714][ T6493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.274945][ T5832] usb 4-1: USB disconnect, device number 2 [ 142.325713][ T6512] netlink: 132 bytes leftover after parsing attributes in process `syz.0.166'. [ 143.621243][ T30] audit: type=1326 audit(1760639720.596:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6532 comm="syz.3.172" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f45539 code=0x0 [ 144.400210][ T6552] tipc: Started in network mode [ 144.407314][ T6552] tipc: Node identity ee229e8da27e, cluster identity 4711 [ 144.415651][ T6552] tipc: Enabled bearer , priority 0 [ 144.441255][ T5832] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 144.466028][ T6559] syzkaller0: entered promiscuous mode [ 144.511206][ T6559] syzkaller0: entered allmulticast mode [ 144.526946][ T6551] tipc: Resetting bearer [ 144.541594][ T6551] tipc: Disabling bearer [ 144.611519][ T5832] usb 3-1: Using ep0 maxpacket: 16 [ 144.618779][ T5832] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 144.629147][ T5832] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 144.674192][ T5832] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 144.715425][ T5832] usb 3-1: config 0 interface 0 has no altsetting 0 [ 144.741000][ T5832] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 144.787864][ T6563] FAULT_INJECTION: forcing a failure. [ 144.787864][ T6563] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.813010][ T6563] CPU: 0 UID: 0 PID: 6563 Comm: syz.4.181 Not tainted syzkaller #0 PREEMPT(full) [ 144.813039][ T6563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 144.813052][ T6563] Call Trace: [ 144.813061][ T6563] [ 144.813069][ T6563] dump_stack_lvl+0x189/0x250 [ 144.813097][ T6563] ? __pfx____ratelimit+0x10/0x10 [ 144.813139][ T6563] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.813162][ T6563] ? __pfx__printk+0x10/0x10 [ 144.813183][ T6563] ? __might_fault+0xb0/0x130 [ 144.813218][ T6563] should_fail_ex+0x414/0x560 [ 144.813258][ T6563] _copy_from_user+0x2d/0xb0 [ 144.813288][ T6563] get_compat_msghdr+0xad/0x4a0 [ 144.813328][ T6563] ? __pfx_get_compat_msghdr+0x10/0x10 [ 144.813374][ T6563] ___sys_sendmsg+0x193/0x2a0 [ 144.813398][ T6563] ? __pfx____sys_sendmsg+0x10/0x10 [ 144.813456][ T6563] ? __fget_files+0x2a/0x420 [ 144.813481][ T6563] ? __fget_files+0x3a0/0x420 [ 144.813519][ T6563] __sys_sendmsg+0x164/0x220 [ 144.813542][ T6563] ? __pfx___sys_sendmsg+0x10/0x10 [ 144.813586][ T6563] ? __pfx_ksys_write+0x10/0x10 [ 144.813612][ T6563] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 144.813636][ T6563] ? lockdep_hardirqs_on+0x9c/0x150 [ 144.813660][ T6563] __do_fast_syscall_32+0xb6/0x2b0 [ 144.813684][ T6563] ? lockdep_hardirqs_on+0x9c/0x150 [ 144.813709][ T6563] do_fast_syscall_32+0x34/0x80 [ 144.813733][ T6563] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 144.813759][ T6563] RIP: 0023:0xf707d539 [ 144.813777][ T6563] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 144.813793][ T6563] RSP: 002b:00000000f546d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 144.813815][ T6563] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 144.813830][ T6563] RDX: 0000000000044004 RSI: 0000000000000000 RDI: 0000000000000000 [ 144.813841][ T6563] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 144.813853][ T6563] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 144.813865][ T6563] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 144.813898][ T6563] [ 145.038369][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.046858][ T5832] usb 3-1: Product: syz [ 145.081247][ T5832] usb 3-1: Manufacturer: syz [ 145.085918][ T5832] usb 3-1: SerialNumber: syz [ 145.272329][ T5832] usb 3-1: config 0 descriptor?? [ 145.526037][ T5832] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input8 [ 145.539154][ T5182] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 145.552355][ T5182] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 145.561772][ T24] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 145.578568][ T5182] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 145.590931][ T5182] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 146.181731][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 146.376559][ T6547] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 146.492701][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 146.587456][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 146.991519][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.992495][ T5182] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 147.096821][ T6345] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 147.190668][ T5182] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 147.214335][ T5182] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 147.225127][ T24] usb 5-1: usb_control_msg returned -32 [ 147.232574][ T24] usbtmc 5-1:16.0: can't read capabilities [ 148.531426][ T6594] binder: BINDER_SET_CONTEXT_MGR already set [ 148.538298][ T6594] binder: 6591:6594 ioctl 4018620d 80000040 returned -16 [ 148.678348][ T6595] netlink: 'syz.0.188': attribute type 5 has an invalid length. [ 148.726334][ T5916] usb 3-1: USB disconnect, device number 6 [ 149.430664][ T5917] usb 5-1: USB disconnect, device number 5 [ 149.557765][ T6594] syz.0.188 (6594): drop_caches: 2 [ 150.225187][ T6605] FAULT_INJECTION: forcing a failure. [ 150.225187][ T6605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.321451][ T6605] CPU: 0 UID: 0 PID: 6605 Comm: syz.4.192 Not tainted syzkaller #0 PREEMPT(full) [ 150.321472][ T6605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 150.321481][ T6605] Call Trace: [ 150.321487][ T6605] [ 150.321495][ T6605] dump_stack_lvl+0x189/0x250 [ 150.321515][ T6605] ? __pfx____ratelimit+0x10/0x10 [ 150.321540][ T6605] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.321555][ T6605] ? __pfx__printk+0x10/0x10 [ 150.321571][ T6605] ? __might_fault+0xb0/0x130 [ 150.321595][ T6605] should_fail_ex+0x414/0x560 [ 150.321623][ T6605] _copy_from_user+0x2d/0xb0 [ 150.321644][ T6605] sk_getsockopt+0x197/0x2530 [ 150.321671][ T6605] ? __pfx_sk_getsockopt+0x10/0x10 [ 150.321692][ T6605] ? local_clock_noinstr+0xe0/0xe0 [ 150.321716][ T6605] ? rcu_read_lock_any_held+0xb3/0x120 [ 150.321740][ T6605] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 150.321766][ T6605] ? vfs_write+0x956/0xb30 [ 150.321790][ T6605] ? __lock_acquire+0xab9/0xd20 [ 150.321821][ T6605] do_sock_getsockopt+0x237/0x450 [ 150.321844][ T6605] ? local_clock_noinstr+0xe0/0xe0 [ 150.321860][ T6605] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 150.321883][ T6605] ? local_clock_noinstr+0xe0/0xe0 [ 150.321896][ T6605] ? __fget_files+0x3a0/0x420 [ 150.321914][ T6605] ? __fget_files+0x2a/0x420 [ 150.321938][ T6605] __ia32_sys_getsockopt+0x1a5/0x250 [ 150.321962][ T6605] ? local_clock_noinstr+0xe0/0xe0 [ 150.321978][ T6605] ? local_clock_noinstr+0xe0/0xe0 [ 150.321994][ T6605] __do_fast_syscall_32+0xb6/0x2b0 [ 150.322011][ T6605] ? lockdep_hardirqs_on+0x9c/0x150 [ 150.322028][ T6605] do_fast_syscall_32+0x34/0x80 [ 150.322044][ T6605] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 150.322062][ T6605] RIP: 0023:0xf707d539 [ 150.322075][ T6605] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 150.322087][ T6605] RSP: 002b:00000000f546d55c EFLAGS: 00000206 ORIG_RAX: 000000000000016d [ 150.322102][ T6605] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000001 [ 150.322112][ T6605] RDX: 0000000000000010 RSI: 0000000080000a00 RDI: 0000000080000000 [ 150.322121][ T6605] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 150.322129][ T6605] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 150.322137][ T6605] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 150.322159][ T6605] [ 150.567756][ C0] vkms_vblank_simulate: vblank timer overrun [ 151.103243][ T6620] FAULT_INJECTION: forcing a failure. [ 151.103243][ T6620] name failslab, interval 1, probability 0, space 0, times 0 [ 151.131341][ T6620] CPU: 0 UID: 0 PID: 6620 Comm: syz.2.196 Not tainted syzkaller #0 PREEMPT(full) [ 151.131371][ T6620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 151.131381][ T6620] Call Trace: [ 151.131388][ T6620] [ 151.131394][ T6620] dump_stack_lvl+0x189/0x250 [ 151.131415][ T6620] ? __pfx____ratelimit+0x10/0x10 [ 151.131440][ T6620] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.131456][ T6620] ? __pfx__printk+0x10/0x10 [ 151.131476][ T6620] ? __pfx___might_resched+0x10/0x10 [ 151.131497][ T6620] ? fs_reclaim_acquire+0x7d/0x100 [ 151.131519][ T6620] should_fail_ex+0x414/0x560 [ 151.131547][ T6620] should_failslab+0xa8/0x100 [ 151.131568][ T6620] __kmalloc_noprof+0xcb/0x7f0 [ 151.131583][ T6620] ? compat_ip_set_mcast_msfilter+0xd2/0x3b0 [ 151.131604][ T6620] ? __local_bh_enable_ip+0x12d/0x1c0 [ 151.131629][ T6620] compat_ip_set_mcast_msfilter+0xd2/0x3b0 [ 151.131657][ T6620] do_ip_setsockopt+0x1d59/0x2d00 [ 151.131701][ T6620] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 151.131736][ T6620] ? aa_sk_perm+0x81e/0x950 [ 151.131764][ T6620] ? __pfx_aa_sk_perm+0x10/0x10 [ 151.131788][ T6620] ? __fget_files+0x2a/0x420 [ 151.131813][ T6620] ? aa_sock_opt_perm+0xff/0x1b0 [ 151.131841][ T6620] ip_setsockopt+0x66/0x110 [ 151.131869][ T6620] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 151.131901][ T6620] do_sock_setsockopt+0x17c/0x1b0 [ 151.131939][ T6620] __ia32_sys_setsockopt+0x13f/0x1b0 [ 151.131979][ T6620] __do_fast_syscall_32+0xb6/0x2b0 [ 151.132004][ T6620] ? lockdep_hardirqs_on+0x9c/0x150 [ 151.132030][ T6620] do_fast_syscall_32+0x34/0x80 [ 151.132054][ T6620] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 151.132079][ T6620] RIP: 0023:0xf7f36539 [ 151.132097][ T6620] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 151.132115][ T6620] RSP: 002b:00000000f542655c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 151.132137][ T6620] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000000000 [ 151.132150][ T6620] RDX: 0000000000000030 RSI: 0000000080001140 RDI: 0000000000000090 [ 151.132163][ T6620] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 151.132175][ T6620] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 151.132187][ T6620] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 151.132220][ T6620] [ 151.376657][ C0] vkms_vblank_simulate: vblank timer overrun [ 151.606220][ T6634] FAULT_INJECTION: forcing a failure. [ 151.606220][ T6634] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.629297][ T6634] CPU: 0 UID: 0 PID: 6634 Comm: syz.3.198 Not tainted syzkaller #0 PREEMPT(full) [ 151.629327][ T6634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 151.629340][ T6634] Call Trace: [ 151.629349][ T6634] [ 151.629358][ T6634] dump_stack_lvl+0x189/0x250 [ 151.629387][ T6634] ? __pfx____ratelimit+0x10/0x10 [ 151.629421][ T6634] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.629444][ T6634] ? __pfx__printk+0x10/0x10 [ 151.629466][ T6634] ? __might_fault+0xb0/0x130 [ 151.629501][ T6634] should_fail_ex+0x414/0x560 [ 151.629542][ T6634] _copy_from_user+0x2d/0xb0 [ 151.629572][ T6634] get_compat_msghdr+0xad/0x4a0 [ 151.629611][ T6634] ? __pfx_get_compat_msghdr+0x10/0x10 [ 151.629659][ T6634] ___sys_sendmsg+0x193/0x2a0 [ 151.629682][ T6634] ? __pfx____sys_sendmsg+0x10/0x10 [ 151.629741][ T6634] ? __fget_files+0x2a/0x420 [ 151.629767][ T6634] ? __fget_files+0x3a0/0x420 [ 151.629804][ T6634] __sys_sendmsg+0x164/0x220 [ 151.629827][ T6634] ? __pfx___sys_sendmsg+0x10/0x10 [ 151.629871][ T6634] ? __pfx_ksys_write+0x10/0x10 [ 151.629907][ T6634] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 151.629932][ T6634] ? lockdep_hardirqs_on+0x9c/0x150 [ 151.629957][ T6634] __do_fast_syscall_32+0xb6/0x2b0 [ 151.629981][ T6634] ? lockdep_hardirqs_on+0x9c/0x150 [ 151.630005][ T6634] do_fast_syscall_32+0x34/0x80 [ 151.630028][ T6634] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 151.630055][ T6634] RIP: 0023:0xf7f45539 [ 151.630073][ T6634] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 151.630091][ T6634] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 151.630113][ T6634] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000900 [ 151.630128][ T6634] RDX: 00000000000c8804 RSI: 0000000000000000 RDI: 0000000000000000 [ 151.630140][ T6634] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 151.630152][ T6634] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 151.630164][ T6634] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 151.630194][ T6634] [ 151.630989][ T6635] bridge0: port 3(veth0_to_bridge) entered blocking state [ 151.901945][ T6635] bridge0: port 3(veth0_to_bridge) entered disabled state [ 151.909733][ T6635] veth0_to_bridge: entered allmulticast mode [ 151.928908][ T6635] veth0_to_bridge: entered promiscuous mode [ 151.935574][ T6635] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 151.950012][ T6635] bridge0: port 3(veth0_to_bridge) entered blocking state [ 151.957679][ T6635] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 152.071333][ T5915] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 152.505763][ T5915] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 152.603913][ T5915] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 152.677812][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.735620][ T5915] usb 5-1: config 0 descriptor?? [ 152.781203][ T5917] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 152.822951][ T6646] FAULT_INJECTION: forcing a failure. [ 152.822951][ T6646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.871178][ T6646] CPU: 1 UID: 0 PID: 6646 Comm: syz.3.205 Not tainted syzkaller #0 PREEMPT(full) [ 152.871205][ T6646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 152.871217][ T6646] Call Trace: [ 152.871225][ T6646] [ 152.871233][ T6646] dump_stack_lvl+0x189/0x250 [ 152.871274][ T6646] ? __pfx____ratelimit+0x10/0x10 [ 152.871305][ T6646] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.871325][ T6646] ? __pfx__printk+0x10/0x10 [ 152.871345][ T6646] ? __might_fault+0xb0/0x130 [ 152.871380][ T6646] should_fail_ex+0x414/0x560 [ 152.871420][ T6646] _copy_from_user+0x2d/0xb0 [ 152.871451][ T6646] get_compat_msghdr+0xad/0x4a0 [ 152.871492][ T6646] ? __pfx_get_compat_msghdr+0x10/0x10 [ 152.871541][ T6646] ___sys_sendmsg+0x193/0x2a0 [ 152.871566][ T6646] ? __pfx____sys_sendmsg+0x10/0x10 [ 152.871627][ T6646] ? __fget_files+0x2a/0x420 [ 152.871653][ T6646] ? __fget_files+0x3a0/0x420 [ 152.871692][ T6646] __sys_sendmsg+0x164/0x220 [ 152.871716][ T6646] ? __pfx___sys_sendmsg+0x10/0x10 [ 152.871761][ T6646] ? __pfx_ksys_write+0x10/0x10 [ 152.871784][ T6646] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 152.871806][ T6646] ? lockdep_hardirqs_on+0x9c/0x150 [ 152.871828][ T6646] __do_fast_syscall_32+0xb6/0x2b0 [ 152.871850][ T6646] ? lockdep_hardirqs_on+0x9c/0x150 [ 152.871872][ T6646] do_fast_syscall_32+0x34/0x80 [ 152.871893][ T6646] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 152.871916][ T6646] RIP: 0023:0xf7f45539 [ 152.871932][ T6646] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 152.871948][ T6646] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 152.871969][ T6646] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000000 [ 152.871982][ T6646] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 152.871992][ T6646] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 152.872003][ T6646] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 152.872014][ T6646] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 152.872042][ T6646] [ 153.161443][ T5917] usb 3-1: device descriptor read/64, error -71 [ 153.380932][ T5915] hid (null): report_id 0 is invalid [ 153.392462][ T5915] creative-sb0540 0003:041E:3100.0002: report_id 0 is invalid [ 153.400143][ T5915] creative-sb0540 0003:041E:3100.0002: item 0 0 1 8 parsing failed [ 153.409462][ T5915] creative-sb0540 0003:041E:3100.0002: parse failed [ 153.411214][ T5917] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 153.429091][ T5915] creative-sb0540 0003:041E:3100.0002: probe with driver creative-sb0540 failed with error -22 [ 153.581291][ T5917] usb 3-1: device descriptor read/64, error -71 [ 153.692197][ T6655] FAULT_INJECTION: forcing a failure. [ 153.692197][ T6655] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.717933][ T6656] syz_tun: entered allmulticast mode [ 153.721758][ T5917] usb usb3-port1: attempt power cycle [ 153.740952][ T6655] CPU: 0 UID: 0 PID: 6655 Comm: syz.1.209 Not tainted syzkaller #0 PREEMPT(full) [ 153.740981][ T6655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 153.740994][ T6655] Call Trace: [ 153.741003][ T6655] [ 153.741018][ T6655] dump_stack_lvl+0x189/0x250 [ 153.741045][ T6655] ? __pfx____ratelimit+0x10/0x10 [ 153.741079][ T6655] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.741102][ T6655] ? __pfx__printk+0x10/0x10 [ 153.741140][ T6655] should_fail_ex+0x414/0x560 [ 153.741180][ T6655] _copy_from_user+0x2d/0xb0 [ 153.741210][ T6655] copy_from_sockptr+0x5e/0xa0 [ 153.741241][ T6655] packet_setsockopt+0x965/0x12c0 [ 153.741270][ T6655] ? __pfx_packet_setsockopt+0x10/0x10 [ 153.741302][ T6655] ? __lock_acquire+0xab9/0xd20 [ 153.741336][ T6655] ? aa_sk_perm+0x81e/0x950 [ 153.741364][ T6655] ? __pfx_aa_sk_perm+0x10/0x10 [ 153.741389][ T6655] ? __fget_files+0x2a/0x420 [ 153.741414][ T6655] ? aa_sock_opt_perm+0xff/0x1b0 [ 153.741451][ T6655] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 153.741479][ T6655] ? __pfx_packet_setsockopt+0x10/0x10 [ 153.741506][ T6655] do_sock_setsockopt+0x17c/0x1b0 [ 153.741554][ T6655] __ia32_sys_setsockopt+0x13f/0x1b0 [ 153.741593][ T6655] __do_fast_syscall_32+0xb6/0x2b0 [ 153.741618][ T6655] ? lockdep_hardirqs_on+0x9c/0x150 [ 153.741645][ T6655] do_fast_syscall_32+0x34/0x80 [ 153.741667][ T6655] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 153.741694][ T6655] RIP: 0023:0xf704d539 [ 153.741712][ T6655] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 153.741730][ T6655] RSP: 002b:00000000f543d55c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 153.741752][ T6655] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000107 [ 153.741766][ T6655] RDX: 0000000000000005 RSI: 00000000800001c0 RDI: 000000000000001c [ 153.741779][ T6655] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 153.741791][ T6655] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 153.741803][ T6655] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 153.741835][ T6655] [ 153.953406][ C0] vkms_vblank_simulate: vblank timer overrun [ 154.171839][ T6656] dvmrp1: entered allmulticast mode [ 154.431161][ T5917] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 155.225021][ T6653] syz_tun: left allmulticast mode [ 155.232280][ T5917] usb 3-1: device descriptor read/8, error -71 [ 155.531203][ T6657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.540003][ T6657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.588017][ T5917] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 155.737762][ T5917] usb 3-1: device descriptor read/8, error -71 [ 155.963050][ T5917] usb usb3-port1: unable to enumerate USB device [ 156.731161][ T30] audit: type=1326 audit(1760639732.976:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6662 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 156.984327][ T30] audit: type=1326 audit(1760639732.976:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6662 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 157.032593][ T6663] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 157.080047][ T30] audit: type=1326 audit(1760639732.976:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6662 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=40000003 syscall=271 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 157.080102][ T30] audit: type=1326 audit(1760639732.976:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6662 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 157.080148][ T30] audit: type=1326 audit(1760639732.976:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6662 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 157.080193][ T30] audit: type=1326 audit(1760639732.976:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6662 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 157.080239][ T30] audit: type=1326 audit(1760639732.996:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6662 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 157.080285][ T30] audit: type=1326 audit(1760639732.996:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6662 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 157.080331][ T30] audit: type=1326 audit(1760639732.996:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6662 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=40000003 syscall=93 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 157.080376][ T30] audit: type=1326 audit(1760639732.996:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6662 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 157.135678][ T5917] usb 5-1: USB disconnect, device number 6 [ 157.308616][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 157.310162][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 157.311774][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 157.313452][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 157.315018][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 157.316733][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 157.318279][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 157.319974][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 157.321610][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 157.323263][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 157.728528][ T6667] FAULT_INJECTION: forcing a failure. [ 157.728528][ T6667] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.728568][ T6667] CPU: 0 UID: 0 PID: 6667 Comm: syz.3.212 Not tainted syzkaller #0 PREEMPT(full) [ 157.728592][ T6667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 157.728605][ T6667] Call Trace: [ 157.728613][ T6667] [ 157.728623][ T6667] dump_stack_lvl+0x189/0x250 [ 157.728651][ T6667] ? __pfx____ratelimit+0x10/0x10 [ 157.728685][ T6667] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.728708][ T6667] ? __pfx__printk+0x10/0x10 [ 157.728730][ T6667] ? __might_fault+0xb0/0x130 [ 157.728765][ T6667] should_fail_ex+0x414/0x560 [ 157.728805][ T6667] copy_fpstate_to_sigframe+0xa18/0xce0 [ 157.728836][ T6667] ? copy_fpstate_to_sigframe+0x181/0xce0 [ 157.728868][ T6667] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 157.728920][ T6667] ? fpu__alloc_mathframe+0xad/0x130 [ 157.728949][ T6667] get_sigframe+0x58d/0x7d0 [ 157.728980][ T6667] ? __pfx_get_sigframe+0x10/0x10 [ 157.729017][ T6667] ia32_setup_frame+0x10b/0x940 [ 157.729054][ T6667] ? get_signal+0x1150/0x1340 [ 157.729091][ T6667] ? __pfx_ia32_setup_frame+0x10/0x10 [ 157.729125][ T6667] ? arch_do_signal_or_restart+0x385/0x790 [ 157.729163][ T6667] arch_do_signal_or_restart+0x417/0x790 [ 157.729194][ T6667] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 157.729240][ T6667] ? exit_to_user_mode_loop+0x40/0x130 [ 157.729272][ T6667] exit_to_user_mode_loop+0x72/0x130 [ 157.729299][ T6667] __do_fast_syscall_32+0x1f4/0x2b0 [ 157.729328][ T6667] ? lockdep_hardirqs_on+0x9c/0x150 [ 157.729355][ T6667] do_fast_syscall_32+0x34/0x80 [ 157.729378][ T6667] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 157.729404][ T6667] RIP: 0023:0xf7f45539 [ 157.729423][ T6667] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 157.729440][ T6667] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000134 [ 157.729463][ T6667] RAX: fffffffffffffffc RBX: 0000000000000000 RCX: 0000000000000000 [ 157.729476][ T6667] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 157.729488][ T6667] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 157.729500][ T6667] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 157.729513][ T6667] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 157.729544][ T6667] [ 158.843997][ T6681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.215'. [ 159.641179][ T5916] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 160.603819][ T5916] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 160.603860][ T5916] usb 4-1: config 0 interface 0 has no altsetting 0 [ 160.603897][ T5916] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 160.603922][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.979783][ T5916] usb 4-1: config 0 descriptor?? [ 161.054130][ T6687] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 161.620402][ T5916] konepure 0003:1E7D:2DBE.0003: item fetching failed at offset 0/2 [ 161.666174][ T5916] konepure 0003:1E7D:2DBE.0003: parse failed [ 161.666254][ T5916] konepure 0003:1E7D:2DBE.0003: probe with driver konepure failed with error -22 [ 162.311468][ C0] net_ratelimit: 11630 callbacks suppressed [ 162.311491][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 162.311929][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 162.312349][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 162.312499][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 162.312759][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 162.312953][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.313176][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 162.313471][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.313587][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 162.314021][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 166.300462][ C0] sched: DL replenish lagged too much [ 167.321269][ C0] net_ratelimit: 17918 callbacks suppressed [ 167.321293][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 167.321704][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 167.322119][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 167.322182][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 167.322526][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 167.322614][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.322944][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 167.323127][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.323372][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 167.323809][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 172.331295][ C0] net_ratelimit: 18210 callbacks suppressed [ 172.331318][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 172.331789][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 172.332257][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 172.332342][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 172.332701][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 172.332784][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.333142][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 172.333262][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.333592][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 172.334057][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 177.341235][ C0] net_ratelimit: 18169 callbacks suppressed [ 177.341257][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 177.341498][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 177.341743][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 177.341920][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.342263][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 177.342412][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.342741][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 177.343214][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 177.343676][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 177.343775][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 182.351304][ C1] net_ratelimit: 16252 callbacks suppressed [ 182.351319][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 182.351336][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.351752][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 182.351917][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.352155][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 182.352603][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 182.353024][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 182.353266][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 182.353459][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 182.353685][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.361373][ C0] net_ratelimit: 18829 callbacks suppressed [ 187.361395][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 187.361831][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 187.361924][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 187.362239][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 187.362347][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.362653][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 187.362848][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.363059][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 187.363493][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 187.363898][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 192.371074][ C0] net_ratelimit: 18741 callbacks suppressed [ 192.371097][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 192.371096][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.371515][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 192.372009][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 192.372469][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 192.372765][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 192.372882][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 192.373245][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.373307][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 192.373740][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 197.381228][ C0] net_ratelimit: 18260 callbacks suppressed [ 197.381250][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 197.381264][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.381736][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 197.381760][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.382185][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 197.382662][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 197.383114][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 197.383119][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 197.383536][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.383570][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 199.911797][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.924373][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.391365][ C0] net_ratelimit: 18453 callbacks suppressed [ 202.391387][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 202.391433][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 202.391804][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 202.391880][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.392218][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 202.392410][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.392635][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 202.393070][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 202.393535][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 202.393908][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 207.401189][ C0] net_ratelimit: 17605 callbacks suppressed [ 207.401214][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 207.401681][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 207.402135][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 207.402158][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 207.402571][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.402614][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 207.403076][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 207.403080][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.403532][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 207.404017][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 212.411084][ C0] net_ratelimit: 17617 callbacks suppressed [ 212.411108][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 212.411155][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.411576][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 212.411654][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.411986][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 212.412412][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 212.412826][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 212.413089][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 212.413230][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 212.413523][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.739604][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 213.739695][ T5839] Bluetooth: hci0: command 0x0406 tx timeout [ 213.739736][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 213.739794][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 214.848091][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 217.421282][ C0] net_ratelimit: 17771 callbacks suppressed [ 217.421305][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 217.421481][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.421707][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 217.422130][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 217.422567][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 217.422980][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 217.422999][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 217.423400][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 217.423456][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.423836][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 222.431033][ C0] net_ratelimit: 17737 callbacks suppressed [ 222.431056][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 222.431106][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 222.431467][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 222.431566][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 222.431902][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 222.432312][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 222.432723][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 222.432936][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.433174][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 222.433413][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.441113][ C0] net_ratelimit: 18801 callbacks suppressed [ 227.441136][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 227.441572][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 227.441770][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.441981][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 227.442289][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.442439][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 227.442657][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 227.442844][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 227.443089][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 227.443249][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 232.451241][ C0] net_ratelimit: 18714 callbacks suppressed [ 232.451267][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 232.451696][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 232.451740][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.452163][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 232.452227][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.452571][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 232.453017][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 232.453443][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 232.453443][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.453900][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 237.461207][ C0] net_ratelimit: 17692 callbacks suppressed [ 237.461221][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.461235][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 237.461596][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 237.461726][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 237.462076][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 237.462186][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 237.462653][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 237.463108][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 237.463502][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.463597][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 242.471216][ C0] net_ratelimit: 17518 callbacks suppressed [ 242.471240][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 242.471669][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.471717][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 242.472178][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 242.472195][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.472579][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 242.472655][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 242.473052][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 242.473107][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 242.473566][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 247.481031][ C0] net_ratelimit: 17841 callbacks suppressed [ 247.481061][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 247.481501][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 247.481830][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.481912][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 247.482332][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 247.482359][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.482743][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 247.483185][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 247.483596][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 247.483748][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.491358][ C0] net_ratelimit: 18363 callbacks suppressed [ 252.491366][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 252.491381][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 252.491844][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 252.492296][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 252.492768][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 252.492842][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.493268][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 252.493369][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.493731][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 252.494183][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 257.501150][ C0] net_ratelimit: 17771 callbacks suppressed [ 257.501174][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 257.501255][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.501658][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 257.501756][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.502103][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 257.502119][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 257.502521][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 257.502592][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 257.503056][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 257.503568][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 262.511169][ C0] net_ratelimit: 15994 callbacks suppressed [ 262.511191][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 262.511567][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.511694][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 262.512051][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.512173][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 262.512638][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 262.513118][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 262.513305][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.513594][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 262.513776][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.628051][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 263.638994][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 267.521367][ C0] net_ratelimit: 17388 callbacks suppressed [ 267.521392][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 267.521546][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.521808][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 267.522136][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.522214][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 267.522515][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 267.522627][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 267.522974][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 267.523029][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 267.523465][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 272.531173][ C0] net_ratelimit: 19034 callbacks suppressed [ 272.531197][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 272.531251][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.531617][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 272.531636][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 272.532066][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 272.532072][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 272.532476][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 272.532978][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 272.533389][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 272.533516][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.541028][ C1] net_ratelimit: 18375 callbacks suppressed [ 277.541051][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 277.541263][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 277.541715][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 277.542128][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 277.542511][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.542533][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 277.542968][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 277.543045][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.543396][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 277.543800][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 277.818976][ T5915] usb 4-1: USB disconnect, device number 3 [ 282.551190][ C0] net_ratelimit: 18026 callbacks suppressed [ 282.551214][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 282.551440][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.551649][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 282.551961][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.552078][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 282.552350][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 282.552506][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 282.552800][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 282.552930][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 282.553372][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 287.561088][ C1] net_ratelimit: 17832 callbacks suppressed [ 287.561112][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.561331][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 287.561604][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.562059][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 287.562527][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 287.562841][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.563009][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 287.563357][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.563477][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 287.563700][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 292.571076][ C1] net_ratelimit: 17627 callbacks suppressed [ 292.571101][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 292.571216][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 292.571670][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 292.572150][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 292.572603][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 292.573066][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 292.573075][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.573539][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 292.573611][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.574001][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 297.581284][ C0] net_ratelimit: 17601 callbacks suppressed [ 297.581317][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 297.581757][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 297.582057][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.582170][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 297.582588][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 297.582608][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.583000][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 297.583441][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 297.583876][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 297.583964][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.591062][ C0] net_ratelimit: 17959 callbacks suppressed [ 302.591085][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 302.591556][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 302.592007][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 302.592269][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.592468][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 302.592922][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 302.592922][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.593382][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 302.593834][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 302.594301][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 307.601255][ C0] net_ratelimit: 18268 callbacks suppressed [ 307.601279][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 307.602088][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.602135][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 307.602552][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 307.602627][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.602973][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 307.603408][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 307.603824][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 307.604057][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.604268][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 312.611060][ C0] net_ratelimit: 17829 callbacks suppressed [ 312.611084][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 312.611540][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 312.611793][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.612051][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 312.612321][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.612504][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 312.612705][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 312.612928][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 312.613137][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 312.613349][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:bb:45:4b:6d:fb, vlan:0) [ 312.699440][ T31] INFO: task syz.2.217:6689 blocked for more than 148 seconds. [ 312.699470][ T31] Not tainted syzkaller #0 [ 312.699484][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 312.699496][ T31] task:syz.2.217 state:D stack:28296 pid:6689 tgid:6688 ppid:5842 task_flags:0x400040 flags:0x10080002 [ 312.699600][ T31] Call Trace: [ 312.699610][ T31] [ 312.699627][ T31] __schedule+0x1798/0x4cc0 [ 312.699711][ T31] ? __pfx___schedule+0x10/0x10 [ 312.699764][ T31] ? schedule+0x91/0x360 [ 312.699804][ T31] schedule+0x165/0x360 [ 312.699843][ T31] schedule_preempt_disabled+0x13/0x30 [ 312.699879][ T31] __mutex_lock+0x7e6/0x1350 [ 312.699910][ T31] ? __mutex_lock+0x5bb/0x1350 [ 312.699941][ T31] ? __tun_chr_ioctl+0x37a/0x1df0 [ 312.699979][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 312.700028][ T31] __tun_chr_ioctl+0x37a/0x1df0 [ 312.700067][ T31] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 312.700098][ T31] ? __fget_files+0x2a/0x420 [ 312.700134][ T31] ? __fget_files+0x3a0/0x420 [ 312.700169][ T31] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 312.700208][ T31] __ia32_compat_sys_ioctl+0x543/0x840 [ 312.700237][ T31] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 312.700276][ T31] ? __se_sys_futex_time32+0x360/0x3e0 [ 312.700308][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 312.700349][ T31] ? rcu_is_watching+0x15/0xb0 [ 312.700388][ T31] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 312.700415][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.700443][ T31] __do_fast_syscall_32+0xb6/0x2b0 [ 312.700479][ T31] do_fast_syscall_32+0x34/0x80 [ 312.700506][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 312.700536][ T31] RIP: 0023:0xf7f36539 [ 312.700566][ T31] RSP: 002b:00000000f542655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 312.700592][ T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000400454ca [ 312.700609][ T31] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 312.700625][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 312.700640][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 312.700655][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 312.700690][ T31] [ 312.700701][ T31] INFO: task syz.2.217:6690 blocked for more than 148 seconds. [ 312.700717][ T31] Not tainted syzkaller #0 [ 312.700730][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 312.700741][ T31] task:syz.2.217 state:D stack:28296 pid:6690 tgid:6688 ppid:5842 task_flags:0x400040 flags:0x10080002 [ 312.700813][ T31] Call Trace: [ 312.700822][ T31] [ 312.700837][ T31] __schedule+0x1798/0x4cc0 [ 312.700902][ T31] ? __pfx___schedule+0x10/0x10 [ 312.715441][ T31] ? schedule+0x91/0x360 [ 312.715495][ T31] schedule+0x165/0x360 [ 312.715534][ T31] schedule_preempt_disabled+0x13/0x30 [ 312.715571][ T31] __mutex_lock+0x7e6/0x1350 [ 312.715602][ T31] ? __mutex_lock+0x5bb/0x1350 [ 312.715633][ T31] ? tun_chr_close+0x3e/0x1c0 [ 312.715667][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 312.715707][ T31] ? __pfx_locks_remove_posix+0x10/0x10 [ 312.715734][ T31] ? do_futex+0x333/0x420 [ 312.715762][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 312.715791][ T31] tun_chr_close+0x3e/0x1c0 [ 312.715822][ T31] __fput+0x44c/0xa70 [ 312.715869][ T31] fput_close_sync+0x119/0x200 [ 312.715907][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 312.715956][ T31] __ia32_sys_close+0x7f/0x110 [ 312.715994][ T31] __do_fast_syscall_32+0xb6/0x2b0 [ 312.716029][ T31] do_fast_syscall_32+0x34/0x80 [ 312.716056][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 312.716084][ T31] RIP: 0023:0xf7f36539 [ 312.716105][ T31] RSP: 002b:00000000f540555c EFLAGS: 00000206 ORIG_RAX: 0000000000000006 [ 312.716132][ T31] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 312.716149][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 312.716164][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 312.716178][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 312.716194][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 312.716229][ T31] [ 312.716241][ T31] INFO: task syz.2.217:6691 blocked for more than 148 seconds. [ 312.716258][ T31] Not tainted syzkaller #0 [ 312.716279][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 312.716291][ T31] task:syz.2.217 state:D stack:26952 pid:6691 tgid:6688 ppid:5842 task_flags:0x400140 flags:0x10080002 [ 312.716363][ T31] Call Trace: [ 312.716372][ T31] [ 312.716387][ T31] __schedule+0x1798/0x4cc0 [ 312.716452][ T31] ? __pfx___schedule+0x10/0x10 [ 312.716505][ T31] ? schedule+0x91/0x360 [ 312.716545][ T31] schedule+0x165/0x360 [ 312.716584][ T31] schedule_preempt_disabled+0x13/0x30 [ 312.716619][ T31] __mutex_lock+0x7e6/0x1350 [ 312.716649][ T31] ? __mutex_lock+0x5bb/0x1350 [ 312.716680][ T31] ? tipc_nl_compat_doit+0x1fd/0x5f0 [ 312.716721][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 312.716752][ T31] ? __build_skb_around+0x262/0x3f0 [ 312.716799][ T31] tipc_nl_compat_doit+0x1fd/0x5f0 [ 312.716841][ T31] ? __pfx_tipc_nl_compat_doit+0x10/0x10 [ 312.716891][ T31] ? bpf_lsm_capable+0x9/0x20 [ 312.716913][ T31] ? security_capable+0x7e/0x2e0 [ 312.716945][ T31] tipc_nl_compat_recv+0x83c/0xbe0 [ 312.716984][ T31] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 312.717016][ T31] ? __mutex_trylock_common+0x153/0x260 [ 312.717055][ T31] ? __pfx___mutex_trylock_common+0x10/0x10 [ 312.717091][ T31] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 312.717117][ T31] ? __pfx_tipc_nl_compat_bearer_enable+0x10/0x10 [ 312.717159][ T31] ? trace_contention_end+0x39/0x120 [ 312.717206][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 312.717242][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 312.717291][ T31] ? stack_trace_save+0x9c/0xe0 [ 312.717323][ T31] genl_rcv_msg+0x60e/0x790 [ 312.717357][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 312.717383][ T31] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 312.717434][ T31] netlink_rcv_skb+0x208/0x470 [ 312.717465][ T31] ? __lock_acquire+0xab9/0xd20 [ 312.717496][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 312.717523][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 312.717578][ T31] ? down_read+0x1ad/0x2e0 [ 312.717609][ T31] genl_rcv+0x28/0x40 [ 312.717632][ T31] netlink_unicast+0x82f/0x9e0 [ 312.717673][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 312.717707][ T31] ? netlink_sendmsg+0x642/0xb30 [ 312.717785][ T31] ? skb_put+0x11b/0x210 [ 312.717824][ T31] netlink_sendmsg+0x805/0xb30 [ 312.717870][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.717908][ T31] ? __import_iovec+0x5d4/0x7f0 [ 312.717937][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 312.717967][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 312.717997][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.718033][ T31] __sock_sendmsg+0x21c/0x270 [ 312.718066][ T31] ____sys_sendmsg+0x505/0x830 [ 312.718109][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 312.718154][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 312.718194][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 312.718220][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 312.718290][ T31] ? __fget_files+0x2a/0x420 [ 312.718317][ T31] ? __fget_files+0x3a0/0x420 [ 312.718357][ T31] __sys_sendmsg+0x164/0x220 [ 312.718381][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 312.718427][ T31] ? rcu_is_watching+0x15/0xb0 [ 312.718464][ T31] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 312.718492][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.718519][ T31] __do_fast_syscall_32+0xb6/0x2b0 [ 312.718547][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.718575][ T31] do_fast_syscall_32+0x34/0x80 [ 312.718601][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 312.718628][ T31] RIP: 0023:0xf7f36539 [ 312.718646][ T31] RSP: 002b:00000000f53e455c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 312.718671][ T31] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800002c0 [ 312.718689][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 312.718703][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 312.718718][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 312.718733][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 312.718768][ T31] [ 312.718780][ T31] INFO: task syz.2.217:6693 blocked for more than 148 seconds. [ 312.718797][ T31] Not tainted syzkaller #0 [ 312.718809][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 312.718821][ T31] task:syz.2.217 state:D stack:24056 pid:6693 tgid:6688 ppid:5842 task_flags:0x400140 flags:0x10080002 [ 312.718888][ T31] Call Trace: [ 312.718897][ T31] [ 312.718912][ T31] __schedule+0x1798/0x4cc0 [ 312.718954][ T31] ? stack_trace_save+0x9c/0xe0 [ 312.718998][ T31] ? __pfx___schedule+0x10/0x10 [ 312.719052][ T31] ? schedule+0x91/0x360 [ 312.719091][ T31] schedule+0x165/0x360 [ 312.719129][ T31] schedule_preempt_disabled+0x13/0x30 [ 312.719165][ T31] __mutex_lock+0x7e6/0x1350 [ 312.719196][ T31] ? __mutex_lock+0x5bb/0x1350 [ 312.719227][ T31] ? dev_ioctl+0x7a4/0x1150 [ 312.719263][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 312.719293][ T31] ? cap_capable+0x11f/0x460 [ 312.719331][ T31] ? security_capable+0xbd/0x2e0 [ 312.719360][ T31] ? dev_load+0x21/0x1f0 [ 312.719394][ T31] dev_ioctl+0x7a4/0x1150 [ 312.719430][ T31] sock_do_ioctl+0x22c/0x300 [ 312.719461][ T31] ? __pfx_sock_do_ioctl+0x10/0x10 [ 312.719507][ T31] compat_sock_ioctl+0xb8d/0xc80 [ 312.719542][ T31] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 312.719573][ T31] ? __fget_files+0x3a0/0x420 [ 312.719602][ T31] ? __fget_files+0x2a/0x420 [ 312.719634][ T31] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 312.719673][ T31] __ia32_compat_sys_ioctl+0x543/0x840 [ 312.719700][ T31] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 312.719724][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 312.719758][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.719784][ T31] ? _raw_spin_unlock_irq+0x2e/0x50 [ 312.719818][ T31] ? __ia32_compat_sys_rt_sigprocmask+0x2a7/0x310 [ 312.719858][ T31] ? __pfx___ia32_compat_sys_rt_sigprocmask+0x10/0x10 [ 312.719906][ T31] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 312.719933][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.719960][ T31] __do_fast_syscall_32+0xb6/0x2b0 [ 312.719995][ T31] do_fast_syscall_32+0x34/0x80 [ 312.720022][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 312.720050][ T31] RIP: 0023:0xf7f36539 [ 312.720069][ T31] RSP: 002b:00000000f4fc155c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 312.720094][ T31] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000008914 [ 312.720111][ T31] RDX: 0000000080002280 RSI: 0000000000000000 RDI: 0000000000000000 [ 312.720126][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 312.720141][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 312.720156][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 312.720191][ T31] [ 312.720217][ T31] [ 312.720217][ T31] Showing all locks held in the system: [ 312.720229][ T31] 2 locks held by kthreadd/2: [ 312.720247][ T31] 1 lock held by kworker/R-kvfre/6: [ 312.720261][ T31] #0: ffffffff8dfe3be8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x2e/0x3a0 [ 312.720344][ T31] 2 locks held by kworker/0:0/9: [ 312.720358][ T31] 3 locks held by kworker/u8:0/12: [ 312.720373][ T31] 3 locks held by kworker/u8:1/13: [ 312.720388][ T31] 1 lock held by kworker/R-mm_pe/14: [ 312.720401][ T31] #0: ffffffff8dfe3be8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x88b/0xdd0 [ 312.720477][ T31] 2 locks held by kworker/1:0/24: [ 312.720491][ T31] 1 lock held by khungtaskd/31: [ 312.720505][ T31] #0: ffffffff8e13d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 312.720580][ T31] 3 locks held by kworker/u8:2/36: [ 312.720595][ T31] 4 locks held by kworker/1:1/43: [ 312.720610][ T31] 4 locks held by kworker/u8:3/50: [ 312.720623][ T31] #0: ffff8880787d2948 ((wq_completion)wg-kex-wg0#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 312.720701][ T31] #1: ffffc90000bb7ba0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 312.720772][ T31] #2: ffff88807a74d308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x105/0x750 [ 312.720848][ T31] #3: ffff88807a374890 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x116/0x750 [ 312.720924][ T31] 4 locks held by kworker/u8:4/60: [ 312.734824][ T31] 3 locks held by kworker/u8:5/146: [ 312.734855][ T31] 5 locks held by kworker/u8:6/1158: [ 312.734869][ T31] 3 locks held by kworker/0:2/1210: [ 312.734884][ T31] #0: ffff88813ff1a948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 312.734964][ T31] #1: ffffc90003f6fba0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 312.735034][ T31] #2: ffffffff8f4dfc08 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xa1/0xf40 [ 312.735101][ T31] 3 locks held by kworker/1:2/1217: [ 312.735129][ T31] 3 locks held by kworker/R-ipv6_/3183: [ 312.735143][ T31] #0: ffff88802f05e148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 312.735214][ T31] #1: ffffc9000b1a7b80 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 312.735294][ T31] #2: ffffffff8f4dfc08 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 312.735360][ T31] 3 locks held by kworker/u8:7/3486: [ 312.735374][ T31] 2 locks held by klogd/5186: [ 312.735387][ T31] 1 lock held by udevd/5197: [ 312.735401][ T31] 2 locks held by dhcpcd/5491: [ 312.735415][ T31] 2 locks held by dhcpcd/5492: [ 312.735429][ T31] 3 locks held by crond/5569: [ 312.735443][ T31] 2 locks held by getty/5585: [ 312.735456][ T31] #0: ffff88814d6ad0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 312.735528][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 312.735593][ T31] 1 lock held by syz-executor/5813: [ 312.735608][ T31] 7 locks held by kworker/u9:2/5825: [ 312.735622][ T31] #0: ffff88807d4ff148 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 312.735692][ T31] #1: ffffc9000432fba0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 312.735764][ T31] #2: ffff888031db0dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 312.735833][ T31] #3: ffff888031db00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 312.735898][ T31] #4: ffffffff8f648fa8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 312.735961][ T31] #5: ffff888026ba0b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 312.736033][ T31] #6: ffffffff8e142d78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 312.736109][ T31] 3 locks held by kworker/1:3/5832: [ 312.736123][ T31] 5 locks held by kworker/u9:4/5833: [ 312.736137][ T31] #0: ffff888027a8b148 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 312.736207][ T31] #1: ffffc900043afba0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 312.736287][ T31] #2: ffff888031750dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 312.736357][ T31] #3: ffff8880317500b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 312.736420][ T31] #4: ffffffff8e142d78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 312.736506][ T31] 1 lock held by syz-executor/5840: [ 312.736520][ T31] 1 lock held by udevd/5845: [ 312.736536][ T31] 1 lock held by kworker/R-wg-cr/5856: [ 312.736550][ T31] #0: ffffffff8dfe3be8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x88b/0xdd0 [ 312.736625][ T31] 1 lock held by kworker/R-wg-cr/5861: [ 312.736639][ T31] #0: ffffffff8dfe3be8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x88b/0xdd0 [ 312.736713][ T31] 1 lock held by kworker/R-wg-cr/5869: [ 312.736727][ T31] 1 lock held by kworker/R-wg-cr/5870: [ 312.736741][ T31] #0: ffffffff8dfe3be8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x88b/0xdd0 [ 312.736815][ T31] 1 lock held by kworker/R-wg-cr/5872: [ 312.736829][ T31] #0: ffffffff8dfe3be8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x88b/0xdd0 [ 312.736902][ T31] 1 lock held by kworker/R-wg-cr/5873: [ 312.736916][ T31] #0: ffffffff8dfe3be8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x2e/0x3a0 [ 312.736988][ T31] 1 lock held by kworker/R-wg-cr/5875: [ 312.737002][ T31] #0: ffffffff8dfe3be8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x88b/0xdd0 [ 312.737076][ T31] 1 lock held by kworker/R-wg-cr/5876: [ 312.737090][ T31] #0: ffffffff8dfe3be8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x88b/0xdd0 [ 312.737165][ T31] 3 locks held by kworker/1:5/5896: [ 312.737181][ T31] 7 locks held by kworker/1:6/5915: [ 312.737196][ T31] 2 locks held by kworker/0:3/5916: [ 312.737209][ T31] 4 locks held by kworker/0:4/5917: [ 312.737223][ T31] #0: ffff88807abd0d48 ((wq_completion)wg-kex-wg0#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 312.737308][ T31] #1: ffffc90004827ba0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 312.737400][ T31] #2: ffff88802eafd308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900 [ 312.737476][ T31] #3: ffff88807a370d20 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x4bf/0x900 [ 312.737553][ T31] 3 locks held by kworker/u8:8/6055: [ 312.737567][ T31] 4 locks held by udevd/6345: [ 312.737582][ T31] 6 locks held by syz.1.211/6668: [ 312.737596][ T31] 2 locks held by syz.4.214/6679: [ 312.737610][ T31] 3 locks held by syz.3.216/6687: [ 312.737624][ T31] 1 lock held by syz.2.217/6689: [ 312.737638][ T31] #0: ffffffff8f4dfc08 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x37a/0x1df0 [ 312.737707][ T31] 1 lock held by syz.2.217/6690: [ 312.737721][ T31] #0: ffffffff8f4dfc08 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 312.737787][ T31] 3 locks held by syz.2.217/6691: [ 312.737801][ T31] #0: ffffffff8f545710 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 312.737863][ T31] #1: ffffffff8f545528 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 312.737924][ T31] #2: ffffffff8f4dfc08 (rtnl_mutex){+.+.}-{4:4}, at: tipc_nl_compat_doit+0x1fd/0x5f0 [ 312.737997][ T31] 1 lock held by syz.2.217/6693: [ 312.738011][ T31] #0: ffffffff8f4dfc08 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 312.738080][ T31] 4 locks held by kworker/0:5/6692: [ 312.738094][ T31] 2 locks held by kworker/u8:9/6694: [ 312.738108][ T31] 4 locks held by kworker/u8:10/6696: [ 312.738122][ T31] 4 locks held by kworker/u8:11/6697: [ 312.738137][ T31] 4 locks held by kworker/0:6/6698: [ 312.738152][ T31] [ 312.738160][ T31] ============================================= [ 312.738160][ T31] [ 312.738188][ T31] NMI backtrace for cpu 1 [ 312.738211][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 312.738249][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 312.738276][ T31] Call Trace: [ 312.738285][ T31] [ 312.738295][ T31] dump_stack_lvl+0x189/0x250 [ 312.738323][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.738353][ T31] ? __pfx__printk+0x10/0x10 [ 312.738389][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 312.738422][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 312.738454][ T31] ? __pfx__printk+0x10/0x10 [ 312.738481][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 312.738511][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 312.738545][ T31] watchdog+0xf60/0xfa0 [ 312.738579][ T31] ? watchdog+0x1e2/0xfa0 [ 312.738613][ T31] kthread+0x711/0x8a0 [ 312.738639][ T31] ? __pfx_watchdog+0x10/0x10 [ 312.738667][ T31] ? __pfx_kthread+0x10/0x10 [ 312.738690][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 312.738723][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.738742][ T31] ? __pfx_kthread+0x10/0x10 [ 312.738765][ T31] ret_from_fork+0x4bc/0x870 [ 312.738797][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 312.738835][ T31] ? __switch_to_asm+0x39/0x70 [ 312.738859][ T31] ? __switch_to_asm+0x33/0x70 [ 312.738882][ T31] ? __pfx_kthread+0x10/0x10 [ 312.738905][ T31] ret_from_fork_asm+0x1a/0x30 [ 312.738949][ T31] [ 312.738957][ T31] Sending NMI from CPU 1 to CPUs 0: [ 312.738988][ C0] NMI backtrace for cpu 0 [ 312.739001][ C0] CPU: 0 UID: 0 PID: 1158 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 312.739021][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 312.739033][ C0] Workqueue: netns cleanup_net [ 312.739059][ C0] RIP: 0010:rcu_read_lock_held+0x0/0x50 [ 312.739088][ C0] Code: 05 81 b2 f8 0d c3 cc cc cc cc cc 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 53 e8 f6 b8 a6 09 85 c0 74 26 31 db e8 eb 2d 01 00 84 [ 312.739104][ C0] RSP: 0018:ffffc90000007238 EFLAGS: 00000202 [ 312.739118][ C0] RAX: ffffffff8a00c9fc RBX: 0000000000000001 RCX: 0000000000000100 [ 312.739131][ C0] RDX: ffff888026a48000 RSI: 0000000000000001 RDI: 0000000000000000 [ 312.739143][ C0] RBP: ffffc90000007398 R08: ffffc900000074c0 R09: ffffc900000074d0 [ 312.739156][ C0] R10: ffffc90000007320 R11: fffff52000000e66 R12: 1ffff1100abbd10c [ 312.739170][ C0] R13: dffffc0000000000 R14: ffff88805590b800 R15: ffffc90000007498 [ 312.739184][ C0] FS: 0000000000000000(0000) GS:ffff888125d0c000(0000) knlGS:0000000000000000 [ 312.739198][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 312.739210][ C0] CR2: 0000000080185018 CR3: 000000007ef8a000 CR4: 00000000003526f0 [ 312.739226][ C0] Call Trace: [ 312.739233][ C0] [ 312.739239][ C0] __find_rr_leaf+0x345/0x6d0 [ 312.739271][ C0] ? __pfx___find_rr_leaf+0x10/0x10 [ 312.739294][ C0] ? __pfx_fib6_node_lookup+0x10/0x10 [ 312.739321][ C0] fib6_table_lookup+0x39f/0xa80 [ 312.739349][ C0] ? nf_hook_slow+0x176/0x220 [ 312.739387][ C0] ? __pfx_fib6_table_lookup+0x10/0x10 [ 312.739419][ C0] ? ip6_pol_route+0x162/0x1180 [ 312.739445][ C0] ip6_pol_route+0x222/0x1180 [ 312.739476][ C0] ? __pfx_ip6_pol_route+0x10/0x10 [ 312.739513][ C0] fib6_rule_lookup+0x52f/0x6f0 [ 312.739547][ C0] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 312.739574][ C0] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 312.739597][ C0] ? ip6t_do_table+0x1db/0x1560 [ 312.739623][ C0] ip6_route_input+0x6de/0xad0 [ 312.739655][ C0] ? __pfx_ip6_route_input+0x10/0x10 [ 312.739689][ C0] ? nf_nat_ipv6_in+0x1fc/0x2b0 [ 312.739720][ C0] ? ip6_rcv_finish_core+0x222/0x420 [ 312.739743][ C0] ip6_rcv_finish+0x141/0x2e0 [ 312.739766][ C0] NF_HOOK+0x30c/0x3a0 [ 312.739784][ C0] ? skb_orphan+0xaf/0xd0 [ 312.739806][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 312.739826][ C0] ? NF_HOOK+0x9a/0x3a0 [ 312.739845][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 312.739867][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 312.739894][ C0] __netif_receive_skb+0xd3/0x380 [ 312.739918][ C0] ? process_backlog+0x2d5/0x14f0 [ 312.739943][ C0] process_backlog+0x60e/0x14f0 [ 312.739975][ C0] ? __pfx_process_backlog+0x10/0x10 [ 312.740004][ C0] __napi_poll+0xc7/0x360 [ 312.740024][ C0] ? skb_defer_free_flush+0x229/0x250 [ 312.740049][ C0] net_rx_action+0x5f7/0xdf0 [ 312.740071][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.740088][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 312.740121][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 312.740166][ C0] handle_softirqs+0x286/0x870 [ 312.740193][ C0] ? do_softirq+0xec/0x180 [ 312.740220][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 312.740247][ C0] ? addrconf_ifdown+0x694/0x1880 [ 312.740276][ C0] do_softirq+0xec/0x180 [ 312.740299][ C0] [ 312.740304][ C0] [ 312.740311][ C0] ? __pfx_do_softirq+0x10/0x10 [ 312.740341][ C0] ? lockdep_softirqs_on+0x13b/0x1c0 [ 312.740363][ C0] __local_bh_enable_ip+0x17d/0x1c0 [ 312.740388][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 312.740417][ C0] ? addrconf_ifdown+0x694/0x1880 [ 312.740445][ C0] addrconf_ifdown+0x694/0x1880 [ 312.740478][ C0] ? tls_dev_event+0x717/0xec0 [ 312.740503][ C0] ? __pfx_addrconf_ifdown+0x10/0x10 [ 312.740543][ C0] addrconf_notify+0x1bc/0x1010 [ 312.740566][ C0] notifier_call_chain+0x1b6/0x3e0 [ 312.740597][ C0] unregister_netdevice_many_notify+0x14d7/0x1ff0 [ 312.740626][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 312.740650][ C0] ? net_generic+0x1e/0x240 [ 312.740671][ C0] ? net_generic+0x1e/0x240 [ 312.740699][ C0] ops_undo_list+0x3dc/0x990 [ 312.740727][ C0] ? __pfx_ops_undo_list+0x10/0x10 [ 312.740754][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 312.740776][ C0] cleanup_net+0x4d8/0x820 [ 312.740802][ C0] ? __pfx_cleanup_net+0x10/0x10 [ 312.740828][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 312.740855][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 312.740879][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 312.740905][ C0] process_scheduled_works+0xae1/0x17b0 [ 312.740952][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 312.740989][ C0] worker_thread+0x8a0/0xda0 [ 312.741020][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 312.741057][ C0] ? __kthread_parkme+0x7b/0x200 [ 312.741092][ C0] kthread+0x711/0x8a0 [ 312.741114][ C0] ? __pfx_worker_thread+0x10/0x10 [ 312.741142][ C0] ? __pfx_kthread+0x10/0x10 [ 312.741164][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 312.741195][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.741213][ C0] ? __pfx_kthread+0x10/0x10 [ 312.741234][ C0] ret_from_fork+0x4bc/0x870 [ 312.741263][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 312.741297][ C0] ? __switch_to_asm+0x39/0x70 [ 312.741320][ C0] ? __switch_to_asm+0x33/0x70 [ 312.741344][ C0] ? __pfx_kthread+0x10/0x10 [ 312.741364][ C0] ret_from_fork_asm+0x1a/0x30 [ 312.741401][ C0] [ 317.258173][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 317.258198][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 317.258224][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 317.258239][ T31] Call Trace: [ 317.258249][ T31] [ 317.258259][ T31] dump_stack_lvl+0x99/0x250 [ 317.258288][ T31] ? __asan_memcpy+0x40/0x70 [ 317.258312][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 317.258337][ T31] ? __pfx__printk+0x10/0x10 [ 317.258375][ T31] vpanic+0x237/0x6d0 [ 317.258406][ T31] ? __pfx_vpanic+0x10/0x10 [ 317.258438][ T31] ? preempt_schedule_common+0x83/0xd0 [ 317.258468][ T31] panic+0xb9/0xc0 [ 317.258498][ T31] ? __pfx_panic+0x10/0x10 [ 317.258532][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 317.258570][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 317.258604][ T31] watchdog+0xf9f/0xfa0 [ 317.258639][ T31] ? watchdog+0x1e2/0xfa0 [ 317.258676][ T31] kthread+0x711/0x8a0 [ 317.258702][ T31] ? __pfx_watchdog+0x10/0x10 [ 317.258731][ T31] ? __pfx_kthread+0x10/0x10 [ 317.258756][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 317.258791][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 317.258811][ T31] ? __pfx_kthread+0x10/0x10 [ 317.258836][ T31] ret_from_fork+0x4bc/0x870 [ 317.258868][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 317.258907][ T31] ? __switch_to_asm+0x39/0x70 [ 317.258933][ T31] ? __switch_to_asm+0x33/0x70 [ 317.258957][ T31] ? __pfx_kthread+0x10/0x10 [ 317.258981][ T31] ret_from_fork_asm+0x1a/0x30 [ 317.259026][ T31] [ 317.259291][ T31] Kernel Offset: disabled